last executing test programs: 4.239755877s ago: executing program 3: r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xfffffffd, 0x4) 4.205492972s ago: executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x8081, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4bd, &(0x7f0000000f00)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYPQX7VOf+lLoH1Ao+RNKIdC+l1JaQpukD31oqyL5KnFdyZaJbSXW5wPH9557r/z9Hgkd6dxz0Q2gY52JiLGI6IqI8xHRn27PpCXW1kv1uEcP70xWSxKVyo0vkkjSbfX/laTLY+nDeiPiH3+L+Hfy47illdW5iUIhv5TWc+X5xVxpZfXC7PzETH4mvzA2Mnx59MropdGhXWvr1b98+sr/3vrr1fd+f+vj8c/P/aeaVl+6b2M7WrHW4nHrTe+pPRd13RGxtJNgz7GutD097U4EAICWVL/j/zQifh0Rj19vdzYAAADAXqj8qS++SSIqAAAAwIGVqV0Dm2Sy6bUAfZHJZLPr1/D+PI5mCsVS+XfTxeWFqfVrZQeiJzM9W8gPpdcKD0RPUq0P19af1i9uqo9ExImIeKn/SK2enSwWptp98gMAAAA6xLFN4/+v+tfH/wAAAMABM9DuBAAAAIA9Z/wPAAAAB1/T8X/Svb+JAAAAAHvh79euVUulfv/rqZsry3PFmxem8qW57PzyZHayuLSYnSkWZ2q/2Te/3f8rFIuLf4iF5du5cr5UzpVWVsfni8sL5fHafb3H8+4TDQAAAPvvxK/ufZRExNofj9RK1aF0Xwtj9bG9zQ7YS5mdHZ7sVR7A/utqdwJA27jAFzqX+Xhgm4H9y5vqOzxtAAAAPA8Gf/FM8//mA+EFZiAPncv8P3Qu8//Qucz/Q4c7vP0hvc12vL/LuQAAAHumr1aSTDadC+yLTCabjTheuy1ATzI9W8gPRcRPIuLD/p7D1fpwu5MGAAAAAAAAAAAAAAAAAAAAAAAAgBdMpZJEBQAAADjQIjKfJemN/Af7z/ZtPj9wKPm6v7aMiFtv3Hj19kS5vDRc3f7lk+3l19LtF9txBgMAAADYrD5Or4/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3PXp4Z7Je9jPugz9HxECj+N3RW1v2Rk9EHH2cRPeGxyUR0bUL8dfuRsTJRvGTaloxkGaxOX4mIo60Of6xXYgPnexetf8Za/T+y8SZ2rLx+687Lc/qwZlm/V/mSf/X1aT/O95ijFP338k1jX834lR34/6nHj95xv73X/9cXW22r/JmxGDDz5/kB7Fy5fnFXGll9cLs/MRMfia/MDIyfHn0yuil0aHc9Gwhn/5tGOP/v3z3u63af7RJ/IFt2n+2xfZ/e//2w59tEf/cbxq//ie3iF997n+bfg5U9w/W19fW1zc6/fYHp7dq/1ST9m/3+p9rsf3nr//3kxYPBQD2QWlldW6iUMgvWbFi5eCtXE/f6Dt+eJs7JgAAYNc9/dLf7kwAAAAAAAAAAAAAAAAAAACgc+3Hj5BtjNfbvqYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzp+wAAAP//hqfSmw==") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) writev(0xffffffffffffffff, 0x0, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000540)='nolazytime\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r7, @ANYBLOB="05"], 0x0) 2.566531534s ago: executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="080027226da0d6c1", 0x8}], 0x1, &(0x7f0000000080)=[@ip_tos_u8={{0x11, 0x0, 0x2}}], 0x18}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b68090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2afffbd85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787f007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b40866a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6f651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de592587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff5a}}, 0x1006) 2.536051729s ago: executing program 4: r0 = eventfd(0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e630a5522bfa12e", 0x8}, {&(0x7f0000000280)="ffffffffffffffff", 0x8}], 0x2) 2.509956623s ago: executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x189042, 0x0) io_setup(0x898, &(0x7f0000005080)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)='p', 0x1, 0xffffffff000}]) 2.483468297s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005"], 0x48}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000000000020000000000000000030005000000000002000000ac1429"], 0x50}}, 0x0) 2.451483682s ago: executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) unshare(0x2000400) setreuid(0x0, r1) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 2.432745235s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000600)) 2.407578519s ago: executing program 4: r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="03011420ffff"], 0xdd12}], 0x1}, 0x0) 2.395096771s ago: executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x1b82, 0x4) sendfile(r2, r0, 0x0, 0xffffffff054) 2.377163184s ago: executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) unshare(0x2040400) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af21, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) 2.364700366s ago: executing program 1: r0 = syz_usb_connect$cdc_ecm(0x5, 0x67, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xef, {{0xb, 0x24, 0x6, 0x0, 0x0, "ce6b5d43f691"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7003, 0x7, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x1000, 0x6}, @acm={0x4, 0x24, 0x2, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xba, 0xf7, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x3, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5e, 0x8, 0x7f}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x7, 0x3, 0x0, 0x10, 0xee}, 0x20, &(0x7f0000000380)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1b, 0x2, 0x0, 0x100}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x1f, 0xf00, 0x4, [0x30, 0xff0000]}]}, 0x8, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42a}}, {0x8d, &(0x7f00000004c0)=@string={0x8d, 0x3, "7eb30ed564693517fab2249ba2475eec934a4d4613fd75efe3d82ca31d34c8424750e5e5c53949722446490de5b103f5327fc572123caca441669ea0768e5b357383e22848fa5ba5baff4b7a940774bdb7d8c69944da6b048ead63984918053d3c25d179d66449598a2b724c5ceaa681fa40da0cd9f2197edb31058c38924abd55dbac2c135b3fc221f532"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4ff}}, {0xaf, &(0x7f00000006c0)=@string={0xaf, 0x3, "17f76c4a6cb2ac896c10d169e28480cca620aedfe9ea323a77d829b852ccc2ed938e9f1144aa83f5e2d563887fc41975b60e13fc797d9d925a5f8e97a468b873be2123e5903d0d1ad91fe4da208b7238661b3a6301b51afb5c86a8c2b81577f63f37a5e79dfcf74d5b4fec5d8661a7e90ad11b17604a4cc9928d5534a5a119a96b0310050ec88c4b4c86bc00d8c56e703fa46e62110f514a00c0c1f5e2299e598325c7baf60e8928be411f605f"}}, {0x26, &(0x7f0000000640)=@string={0x26, 0x3, "84794555ebe646c41fa7e50fdb48ff65b8b3483b5cb95f583f7ec0e8bdf6eeadb3c74688"}}]}) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 2.350471337s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000001100)="48b84e000000000000000f23c00f21f83503000e000f23f866b808018ee82e656564f20f38f1a4759a000000260ffa0cb7400f0f4b00aa0f090fc73eb9bb0a00000f32420f09f3400fc773c3", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1) stat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.267684241s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x0, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d011fe4"}, @main=@item_012={0x2, 0x0, 0xb, "1a79"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0x200, 0xff, 0x0, 0x40, 0x4}) ioctl$HIDIOCGUSAGE(r1, 0x4018480c, 0x0) 2.07859015s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x2, 0x0, 0x0, 0x0) 1.861233893s ago: executing program 2: unshare(0x22000600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x9}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.631096369s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000300)={[{@init_itable}, {@noquota}, {@nouid32}, {@barrier}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@acl}, {@bh}]}, 0x10, 0x4e0, &(0x7f00000013c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter, 0x48) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 1.607922562s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005"], 0x48}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000000000020000000000000000030005000000000002000000ac1429"], 0x50}}, 0x0) 1.48913027s ago: executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x86, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$eJzs3c9rXNUeAPDvnfxO3ntJw+M960IDoi1okyZtpYhgi+CqlPpjIbhxbNJSO/1BE9HUSlOoG0HcuBBcubAu/B+0ILjyH3DhxpVUikg3StGRO7kzTpO5yUzMzLSZzwfGOeeemznnmnx7zpw5504APWsq/U8hYndEXEwiJuvK+iMrnFo9786vV06mjyTK5Zd/SeLK1WSl/rWS7HksItKCP8Yj+TYiJvvW17u4fPlssVRauJTlZ5bOXZxZXL6878y54umF0wvn556eO3zo4KHDs/vrfurUC61e36669LHrb749/sHx1z7/9G4y+8UPx5M4Umt0el2tvvZmpmIqypn64+n/18PbXVmX9NX+Tv6WrD2w1vNtbBAtqf7+BiLi/zEefXW/zfF4/8WuNg5oq3IStT4K6DWJ+IceVR0HVN/bN/c+eLDNoxKgE24fjXiiFv8DEVGN//7VucEYrswNjN5J7pnnSSJi/zbUn9bx3TfHr6ePaNM8HNDYyrWhbAp8bf+fVGJzIoYrudE7hXviv5BN405k84cvbVzNeF7B1Jp8Vv/QVq8HaN7KtYh4qNH4f/P4fz17To+/scX6c+IfAAAAAAAA2IKbRyPiqUaf/xVq638GG6z/GYuII9tQ/+af/xVubUM1QAO3j0Y823D9b6F6ykRflvt3ZT3AQHLqTGlhf0T8JyL2xsBQmp+tf9Ev6346IvZ9OPlJXv316//SR1p/dS1g1o5b/WtWA80Xl4rbcOnQ825fi3i4P3/9T9r/Jw36/zS+LzZZx+TjN07klW0e/0C7lD+L2NOw/09q5yQb359jpjIemKmOCtZ75N2PvsqrX/xD96T9/+jG8T+U1N+vZ7G11x+MiAPL/eW88q2O/weTV/qibifiO8WlpUuzEYPJsfXH51prMzxIhps/9b2IqMRDNV7S+N/72Mbzf7Xxf10cjmT3+GrG//4c+zGvTP8P3ZPG//zG/f/Evf1/64m5GxNf59V/oqn+/2ClT9+bHTH/BxtrNkC73U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBAVIuJfkRSma+lCYXo6Yiwi/hujhdKFxaUnT1146/x8Wlb5/v9C9Zt+x1fzSfX7/yfq8nNr8gciYldEfNw3UslPn7xQmu/2xQMAAAAAAAAAAAAAAAAAAMB9Ymz1ad3+/9RPfV1tGtAJ/dmzeIfe09/tBgBdI/6hd4l/6F358f/b3XJFR5sDdFCz/X/5apsbAnTcFsf/Pi6AHcD7f+hVA82dNtzudgDdoP8HAAAAAIAdZdejN79PImLlmZHKIzWYldU+GBzpVuuAdirkFQx1th1A51nDC73L0h/oXU0u/gV2sKSW+r3hZv/81f9JexoEAAAAAAAAAAAAAKyzZ3cT+/+BHSl3/z+w422w/7/Rxh63C4AdxP5/6F1u8wVUB/t53/Rv/z8AAAAAAAAAAAAA3AeGL58tlkoLlxaXm05cbeXkf574OfKKnutkM7YrsVK8L5rxICQGImJNUXl89c/2bLH0anS2PdWI6URdgx2sKyfRpX+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4KAAD//3XcKC0=") 812.977134ms ago: executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000005a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 598.532667ms ago: executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 558.210174ms ago: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) preadv(r0, &(0x7f0000002600)=[{0x0}, {&(0x7f00000001c0)=""/130, 0x82}], 0x2, 0x0, 0x0) 505.313322ms ago: executing program 2: futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0xffffffffffffffff, 0x0) 444.817091ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x81}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 377.670151ms ago: executing program 3: unshare(0x22000600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x9}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 244.323492ms ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e9}}, 0x28}}, 0x0) 45.667103ms ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ef17856000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 44.960653ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207bad4aff00000000bfa100000000000007010000f8ffffffb7020000080000e7b603000000000000850003007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23.719916ms ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x9, &(0x7f0000001480), 0x10) 0s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000300)={[{@init_itable}, {@noquota}, {@nouid32}, {@barrier}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@acl}, {@bh}]}, 0x10, 0x4e0, &(0x7f00000013c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter, 0x48) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 207.438344][ T4144] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 207.493794][ T4138] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 207.652464][ T4153] EXT4-fs error (device loop1): ext4_xattr_ibody_get:601: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 207.745635][ T4153] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 207.758707][ T4138] EXT4-fs (loop2): group descriptors corrupted! [ 207.935989][ T4153] attempt to access beyond end of device [ 207.935989][ T4153] loop1: rw=2049, want=3606377192, limit=1024 [ 208.144504][ T4153] EXT4-fs warning (device loop1): ext4_end_bio:317: I/O error 10 writing to inode 15 (offset 0 size 0 starting block 1803188595) [ 208.164792][ T4153] Buffer I/O error on device loop1, logical block 1803188595 [ 208.172606][ T4153] attempt to access beyond end of device [ 208.172606][ T4153] loop1: rw=2049, want=3403208900, limit=1024 [ 208.184776][ T4153] EXT4-fs warning (device loop1): ext4_end_bio:317: I/O error 10 writing to inode 15 (offset 0 size 0 starting block 1701604449) [ 208.198091][ T4153] Buffer I/O error on device loop1, logical block 1701604449 [ 208.206009][ T4153] attempt to access beyond end of device [ 208.206009][ T4153] loop1: rw=2049, want=59110, limit=1024 [ 208.217773][ T4153] EXT4-fs warning (device loop1): ext4_end_bio:317: I/O error 10 writing to inode 15 (offset 0 size 0 starting block 29554) [ 208.230767][ T4153] Buffer I/O error on device loop1, logical block 29554 [ 208.338375][ T3723] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor.1: path /root/syzkaller-testdir3629534998/syzkaller.Zez2QV/31/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 208.386832][ T3723] EXT4-fs (loop1): Inode 15 (ffff8881ca950000): i_reserved_data_blocks (1) not cleared! [ 209.123543][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.139166][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.157631][ T4171] device bridge_slave_0 entered promiscuous mode [ 209.179251][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.193193][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.210101][ T4171] device bridge_slave_1 entered promiscuous mode [ 209.393724][ T2760] device bridge_slave_1 left promiscuous mode [ 209.399853][ T2760] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.437121][ T2760] device bridge_slave_0 left promiscuous mode [ 209.445010][ T2760] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.456334][ T23] audit: type=1400 audit(1718129669.413:2396): avc: denied { write } for pid=4175 comm="syz-executor.0" name="random" dev="devtmpfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 210.674699][ T4198] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 210.687080][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.695585][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.700811][ T4198] EXT4-fs (loop0): group descriptors corrupted! [ 210.725524][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.736786][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.745793][ T1727] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.752671][ T1727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.760725][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.770093][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.778612][ T1727] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.785494][ T1727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.793420][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.821884][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.858585][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.931265][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.963732][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.008362][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.047504][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.059845][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.089798][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.103893][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.231915][ T23] audit: type=1400 audit(1718129670.987:2397): avc: denied { execute_no_trans } for pid=4214 comm="syz-executor.1" path="/root/syzkaller-testdir272769596/syzkaller.KAQEqy/0/file0/file1" dev="tmpfs" ino=31847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.456039][ T367] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 212.494239][ T4233] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 212.509595][ T4233] ext4 filesystem being mounted at /root/syzkaller-testdir2329047834/syzkaller.EtNC7t/33/file1 supports timestamps until 2038 (0x7fffffff) [ 212.529154][ T4240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.555327][ T921] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.720781][ T367] usb 2-1: Using ep0 maxpacket: 16 [ 212.853341][ T367] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 212.862318][ T367] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 111, using maximum allowed: 30 [ 212.873429][ T367] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 212.884117][ T367] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.894000][ T367] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 212.906965][ T367] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.918651][ T367] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.952891][ T921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.964082][ T921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.973688][ T921] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.982551][ T921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.992017][ T921] usb 1-1: config 0 descriptor?? [ 213.064899][ T400] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.096170][ T367] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.105094][ T367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.113183][ T367] usb 2-1: Product: syz [ 213.117174][ T367] usb 2-1: Manufacturer: syz [ 213.121978][ T367] usb 2-1: SerialNumber: syz [ 213.471171][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.493493][ T400] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.534809][ T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.560673][ T400] usb 5-1: config 0 descriptor?? [ 213.664852][ T4224] syz-executor.1[4224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.664965][ T4224] syz-executor.1[4224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.681206][ T921] hid (null): bogus close delimiter [ 213.848974][ T4259] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 213.987510][ T921] usb 1-1: string descriptor 0 read error: -22 [ 215.124430][ T400] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 215.134046][ T921] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0016/input/input18 [ 215.138766][ T400] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input19 [ 215.221289][ T367] usb 2-1: USB disconnect, device number 14 [ 215.309735][ T400] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 215.322387][ T921] uclogic 0003:256C:006D.0016: input,hidraw1: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 215.337439][ T4276] syz-executor.2[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.337558][ T4276] syz-executor.2[4276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.360923][ T921] usb 1-1: USB disconnect, device number 9 [ 216.205140][ T400] usb 5-1: USB disconnect, device number 13 [ 216.526382][ T1141] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 216.782538][ T23] audit: type=1326 audit(1718129676.043:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 216.806606][ T1141] usb 2-1: Using ep0 maxpacket: 16 [ 216.941039][ T1141] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 216.950494][ T1141] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 111, using maximum allowed: 30 [ 216.961438][ T1141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 216.972353][ T1141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.981976][ T1141] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 216.995035][ T1141] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.005813][ T1141] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.018724][ T4316] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 217.025143][ T4316] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 217.040360][ T4316] F2FS-fs (loop2): Found nat_bits in checkpoint [ 217.125983][ T4316] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 217.132892][ T4316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 217.180653][ T1141] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.190061][ T1141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.198029][ T1141] usb 2-1: Product: syz [ 217.202327][ T921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.210319][ T1141] usb 2-1: Manufacturer: syz [ 217.215247][ T1141] usb 2-1: SerialNumber: syz [ 217.229682][ T4316] overlayfs: "xino" feature enabled using 32 upper inode bits. [ 217.249253][ T3630] attempt to access beyond end of device [ 217.249253][ T3630] loop2: rw=2049, want=45112, limit=40427 [ 217.649280][ T23] audit: type=1326 audit(1718129676.759:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 217.673729][ T23] audit: type=1326 audit(1718129676.759:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 217.742222][ T23] audit: type=1326 audit(1718129676.759:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 217.766173][ T23] audit: type=1326 audit(1718129676.759:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 217.790106][ T23] audit: type=1326 audit(1718129676.759:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 217.802167][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.814990][ T23] audit: type=1326 audit(1718129676.759:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 217.844069][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.896493][ T4339] syz-executor.1[4339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.897422][ T4339] syz-executor.1[4339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.004584][ T921] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 218.089810][ T23] audit: type=1326 audit(1718129676.759:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 218.134675][ T921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.197520][ T921] usb 5-1: config 0 descriptor?? [ 218.324288][ T23] audit: type=1326 audit(1718129676.759:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 218.351545][ T23] audit: type=1326 audit(1718129676.759:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4313 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93534fea9 code=0x7fc00000 [ 218.937493][ T921] hid (null): bogus close delimiter [ 219.139968][ T382] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 219.187900][ T921] usb 5-1: string descriptor 0 read error: -22 [ 219.460021][ T921] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0018/input/input20 [ 220.069666][ T921] uclogic 0003:256C:006D.0018: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 220.084108][ T921] usb 5-1: USB disconnect, device number 14 [ 220.207121][ T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.219738][ T382] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.230233][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.239945][ T382] usb 3-1: config 0 descriptor?? [ 220.256576][ T1141] usb 2-1: USB disconnect, device number 15 [ 220.508109][ T4374] FAT-fs (loop0): Directory bread(block 64) failed [ 220.515087][ T4374] FAT-fs (loop0): Directory bread(block 65) failed [ 220.522468][ T4374] FAT-fs (loop0): Directory bread(block 66) failed [ 220.528856][ T4374] FAT-fs (loop0): Directory bread(block 67) failed [ 220.535399][ T4374] FAT-fs (loop0): Directory bread(block 68) failed [ 220.542067][ T4374] FAT-fs (loop0): Directory bread(block 69) failed [ 220.548760][ T4374] FAT-fs (loop0): Directory bread(block 70) failed [ 220.555169][ T4374] FAT-fs (loop0): Directory bread(block 71) failed [ 220.561632][ T4374] FAT-fs (loop0): Directory bread(block 72) failed [ 220.567955][ T4374] FAT-fs (loop0): Directory bread(block 73) failed [ 220.718712][ T4381] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 220.734475][ T4380] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 220.749750][ T4380] EXT4-fs (loop0): Remounting filesystem read-only [ 220.760567][ T382] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 220.776411][ T382] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0019/input/input21 [ 220.823802][ T400] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.864396][ T382] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 221.095293][ T400] usb 2-1: Using ep0 maxpacket: 16 [ 221.150220][ T1141] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 221.225700][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.236675][ T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.246320][ T400] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 221.255392][ T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.265054][ T400] usb 2-1: config 0 descriptor?? [ 221.555822][ T1141] usb 1-1: Using ep0 maxpacket: 16 [ 221.694884][ T1141] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 221.704442][ T1141] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 111, using maximum allowed: 30 [ 221.716490][ T1141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 221.727948][ T1141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.739272][ T1141] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 221.754133][ T1141] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.766225][ T1141] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.816508][ T921] usb 3-1: USB disconnect, device number 12 [ 221.822499][ C1] keytouch 0003:0926:3333.0019: usb_submit_urb(ctrl) failed: -19 [ 221.986131][ T1141] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.997083][ T1141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.005213][ T1141] usb 1-1: Product: syz [ 222.010220][ T1141] usb 1-1: Manufacturer: syz [ 222.014888][ T1141] usb 1-1: SerialNumber: syz [ 222.147310][ T400] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 222.154068][ T400] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 222.160893][ T400] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 222.167513][ T400] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 222.174146][ T400] savu 0003:1E7D:2D5A.001A: unknown main item tag 0x0 [ 222.183119][ T400] savu 0003:1E7D:2D5A.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 222.195822][ T400] usb 2-1: USB disconnect, device number 16 [ 222.615195][ T4408] syz-executor.0[4408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.615993][ T4408] syz-executor.0[4408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.276826][ T4411] FAT-fs (loop4): Directory bread(block 64) failed [ 223.295238][ T4411] FAT-fs (loop4): Directory bread(block 65) failed [ 223.301767][ T4411] FAT-fs (loop4): Directory bread(block 66) failed [ 223.317358][ T4411] FAT-fs (loop4): Directory bread(block 67) failed [ 223.330780][ T4411] FAT-fs (loop4): Directory bread(block 68) failed [ 223.337184][ T4411] FAT-fs (loop4): Directory bread(block 69) failed [ 223.355487][ T4411] FAT-fs (loop4): Directory bread(block 70) failed [ 223.362306][ T4411] FAT-fs (loop4): Directory bread(block 71) failed [ 223.369579][ T4411] FAT-fs (loop4): Directory bread(block 72) failed [ 223.379862][ T4411] FAT-fs (loop4): Directory bread(block 73) failed [ 223.456592][ T4417] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 223.471833][ T4417] ext4 filesystem being mounted at /root/syzkaller-testdir272769596/syzkaller.KAQEqy/13/file0 supports timestamps until 2038 (0x7fffffff) [ 223.490685][ T4417] EXT4-fs error (device loop1): ext4_search_dir:1509: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 223.568209][ T4425] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 223.976300][ T23] kauditd_printk_skb: 59 callbacks suppressed [ 223.976349][ T23] audit: type=1400 audit(1718129682.660:2467): avc: denied { name_bind } for pid=4429 comm="syz-executor.4" src=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 226.833343][ T1141] usb 1-1: USB disconnect, device number 10 [ 227.073614][ T23] audit: type=1400 audit(1718129685.520:2468): avc: denied { accept } for pid=4460 comm="syz-executor.4" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.966249][ T4477] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 227.993719][ T4477] ext4 filesystem being mounted at /root/syzkaller-testdir2329047834/syzkaller.EtNC7t/64/file0 supports timestamps until 2038 (0x7fffffff) [ 228.051598][ T4477] EXT4-fs error (device loop2): ext4_search_dir:1509: inode #2: block 3: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 228.308559][ T4484] EXT4-fs (loop4): filesystem is read-only [ 228.568470][ T4487] FAT-fs (loop1): Directory bread(block 64) failed [ 228.606370][ T4487] FAT-fs (loop1): Directory bread(block 65) failed [ 228.614257][ T4487] FAT-fs (loop1): Directory bread(block 66) failed [ 228.667864][ T4487] FAT-fs (loop1): Directory bread(block 67) failed [ 228.739803][ T4487] FAT-fs (loop1): Directory bread(block 68) failed [ 228.780987][ T4487] FAT-fs (loop1): Directory bread(block 69) failed [ 228.977701][ T4487] FAT-fs (loop1): Directory bread(block 70) failed [ 228.984368][ T4487] FAT-fs (loop1): Directory bread(block 71) failed [ 228.990769][ T4487] FAT-fs (loop1): Directory bread(block 72) failed [ 229.032903][ T4487] FAT-fs (loop1): Directory bread(block 73) failed [ 229.520030][ T4503] EXT4-fs (loop2): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 229.585417][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.592352][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.601293][ T4501] device bridge_slave_0 entered promiscuous mode [ 229.610010][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.616886][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.885533][ T4501] device bridge_slave_1 entered promiscuous mode [ 230.276968][ T645] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 230.501454][ T4503] FAT-fs (loop2): Directory bread(block 64) failed [ 230.518553][ T4503] FAT-fs (loop2): Directory bread(block 65) failed [ 230.536119][ T4503] FAT-fs (loop2): Directory bread(block 66) failed [ 230.546334][ T4503] FAT-fs (loop2): Directory bread(block 67) failed [ 230.552990][ T4503] FAT-fs (loop2): Directory bread(block 68) failed [ 230.559356][ T4503] FAT-fs (loop2): Directory bread(block 69) failed [ 230.565972][ T4503] FAT-fs (loop2): Directory bread(block 70) failed [ 230.572393][ T4503] FAT-fs (loop2): Directory bread(block 71) failed [ 230.578900][ T4503] FAT-fs (loop2): Directory bread(block 72) failed [ 230.585348][ T4503] FAT-fs (loop2): Directory bread(block 73) failed [ 231.049338][ T645] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.105847][ T645] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.196876][ T645] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 231.278867][ T645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.515988][ T645] usb 1-1: config 0 descriptor?? [ 231.581874][ T4512] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(28160) [ 231.590424][ T4512] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 231.598773][ T4512] F2FS-fs (loop4): Unrecognized mount option "errors=re" or missing value [ 231.629486][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.637436][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.651343][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.660066][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.668763][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.675637][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.684409][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.699593][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.708033][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.716569][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.723436][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.751589][ T2760] device bridge_slave_1 left promiscuous mode [ 231.758034][ T2760] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.766101][ T2760] device bridge_slave_0 left promiscuous mode [ 231.777436][ T2760] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.915563][ T645] usbhid 1-1:0.0: can't add hid device: -71 [ 231.921540][ T645] usbhid: probe of 1-1:0.0 failed with error -71 [ 231.929165][ T4523] fuseblk: Unknown parameter 'no' [ 231.943615][ T645] usb 1-1: USB disconnect, device number 11 [ 231.989914][ T4525] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 231.997554][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.014465][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.034812][ T4511] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 232.047314][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.055625][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.178068][ T4511] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 232.210852][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.220446][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.242153][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.251107][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.279402][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.293672][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.317084][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.319616][ T4532] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 232.326476][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.338862][ T4532] EXT4-fs (loop4): invalid journal inode [ 232.347687][ T4532] EXT4-fs (loop4): can't get journal size [ 232.358858][ T4532] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue [ 232.383462][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.392952][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.550133][ T4545] EXT4-fs (loop3): filesystem is read-only [ 232.836415][ T1141] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 232.937978][ T4553] EXT4-fs (loop3): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 233.096328][ T1141] usb 5-1: Using ep0 maxpacket: 16 [ 233.178378][ T4553] FAT-fs (loop3): Directory bread(block 64) failed [ 233.180189][ T4557] tipc: Failed to remove local publication {66,3,3}/3741997269 [ 233.189302][ T4553] FAT-fs (loop3): Directory bread(block 65) failed [ 233.192375][ T4557] tipc: Failed to remove local publication {66,0,0}/3741997267 [ 233.204950][ T4553] FAT-fs (loop3): Directory bread(block 66) failed [ 233.212338][ T4553] FAT-fs (loop3): Directory bread(block 67) failed [ 233.219069][ T4553] FAT-fs (loop3): Directory bread(block 68) failed [ 233.225580][ T4553] FAT-fs (loop3): Directory bread(block 69) failed [ 233.232810][ T4553] FAT-fs (loop3): Directory bread(block 70) failed [ 233.240872][ T1141] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 233.250092][ T1141] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 111, using maximum allowed: 30 [ 233.260881][ T4553] FAT-fs (loop3): Directory bread(block 71) failed [ 233.267443][ T4553] FAT-fs (loop3): Directory bread(block 72) failed [ 233.274035][ T1141] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 233.281092][ T4553] FAT-fs (loop3): Directory bread(block 73) failed [ 233.286920][ T1141] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.310406][ T1141] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 233.334343][ T1141] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.345742][ T1141] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.540746][ T1141] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.549920][ T1141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.558315][ T1141] usb 5-1: Product: syz [ 233.562739][ T1141] usb 5-1: Manufacturer: syz [ 233.567188][ T1141] usb 5-1: SerialNumber: syz [ 234.081686][ T645] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 234.718088][ T4574] syz-executor.4[4574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.718205][ T4574] syz-executor.4[4574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.927577][ T796] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.339290][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.350761][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.360652][ T796] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.369973][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.379827][ T796] usb 1-1: config 0 descriptor?? [ 235.486282][ T4576] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 235.502846][ T4576] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 235.545132][ T645] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.556203][ T645] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 235.565321][ T645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.574954][ T645] usb 2-1: config 0 descriptor?? [ 235.583146][ T4580] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 235.761798][ T796] usbhid 1-1:0.0: can't add hid device: -71 [ 235.767848][ T796] usbhid: probe of 1-1:0.0 failed with error -71 [ 235.775758][ T796] usb 1-1: USB disconnect, device number 12 [ 236.088317][ T645] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 236.101144][ T645] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001B/input/input22 [ 236.191301][ T645] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 236.484138][ T4587] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 236.613746][ T1141] usb 5-1: USB disconnect, device number 15 [ 236.717329][ T4594] EXT4-fs (loop3): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 236.960865][ T4594] FAT-fs (loop3): Directory bread(block 64) failed [ 236.973422][ T4594] FAT-fs (loop3): Directory bread(block 65) failed [ 236.981092][ T4594] FAT-fs (loop3): Directory bread(block 66) failed [ 236.981285][ T23] audit: type=1400 audit(1718129694.656:2469): avc: denied { getopt } for pid=4601 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.988372][ T4594] FAT-fs (loop3): Directory bread(block 67) failed [ 237.015325][ T4594] FAT-fs (loop3): Directory bread(block 68) failed [ 237.021825][ T4594] FAT-fs (loop3): Directory bread(block 69) failed [ 237.028745][ T4594] FAT-fs (loop3): Directory bread(block 70) failed [ 237.036107][ T4594] FAT-fs (loop3): Directory bread(block 71) failed [ 237.042960][ T4594] FAT-fs (loop3): Directory bread(block 72) failed [ 237.049426][ T4594] FAT-fs (loop3): Directory bread(block 73) failed [ 237.107323][ T921] usb 2-1: USB disconnect, device number 17 [ 237.474093][ T4606] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.172592][ T23] audit: type=1400 audit(1718129695.764:2470): avc: denied { lock } for pid=4614 comm="syz-executor.4" path="socket:[32646]" dev="sockfs" ino=32646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.675422][ T4628] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 238.697708][ T4628] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 239.450762][ T4633] F2FS-fs (loop4): invalid crc value [ 239.512265][ T4633] F2FS-fs (loop4): Found nat_bits in checkpoint [ 239.616270][ T4661] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 239.648322][ T4661] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 239.744204][ T4633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 239.763535][ T4633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.782001][ T23] audit: type=1326 audit(1718129697.250:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f541046cea9 code=0x0 [ 239.826463][ T3938] attempt to access beyond end of device [ 239.826463][ T3938] loop4: rw=2049, want=45104, limit=40427 [ 241.838379][ T4694] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nobarrier,noauto_da_alloc,,errors=continue [ 241.955870][ T4694] ext4 filesystem being mounted at /root/syzkaller-testdir272769596/syzkaller.KAQEqy/37/bus supports timestamps until 2038 (0x7fffffff) [ 242.328528][ T23] audit: type=1400 audit(1718129699.603:2472): avc: denied { ioctl } for pid=4706 comm="syz-executor.1" path="socket:[32787]" dev="sockfs" ino=32787 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.469494][ T4709] netlink: 1280 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.086101][ T23] audit: type=1400 audit(1718129700.203:2473): avc: denied { connect } for pid=4719 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.704817][ T23] audit: type=1400 audit(1718129700.868:2474): avc: denied { mounton } for pid=4726 comm="syz-executor.4" path="/root/syzkaller-testdir1131921413/syzkaller.j762gy/64/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 243.737192][ T4727] incfs: ino conflict with backing FS 1 [ 243.779262][ T23] audit: type=1400 audit(1718129700.923:2475): avc: denied { open } for pid=4726 comm="syz-executor.4" path="/root/syzkaller-testdir1131921413/syzkaller.j762gy/64/file0/file1" dev="incremental-fs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.841003][ T4734] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 243.871135][ T4734] EXT4-fs error (device loop0): ext4_find_extent:963: inode #2: comm syz-executor.0: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 244.169263][ T23] audit: type=1326 audit(1718129701.265:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44b489eea9 code=0x0 [ 246.401043][ T910] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 246.621204][ T4789] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 246.628994][ T4789] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 246.644015][ T4789] F2FS-fs (loop1): Found nat_bits in checkpoint [ 246.661117][ T910] usb 4-1: Using ep0 maxpacket: 8 [ 246.730394][ T4789] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 246.737403][ T4789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 246.779897][ T4171] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 246.779910][ T4171] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 246.787781][ T4171] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 246.795853][ T4171] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 246.802066][ T910] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.803328][ T4171] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 246.803345][ T4171] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 246.810781][ T910] usb 4-1: config 179 has no interface number 0 [ 246.818864][ T4171] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 246.839701][ T910] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 246.857994][ T910] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 246.869029][ T910] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.880038][ T910] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 246.891236][ T910] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 246.904291][ T910] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 246.913101][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.921097][ T921] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 246.942882][ T4779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 247.112257][ T23] audit: type=1400 audit(1718129704.006:2477): avc: denied { ioctl } for pid=4797 comm="syz-executor.4" path="pid:[4026532361]" dev="nsfs" ino=4026532361 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.213715][ T921] usb 1-1: Using ep0 maxpacket: 32 [ 247.355166][ T921] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.382358][ T921] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.424927][ T921] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 247.464297][ T921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.534147][ T4779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 247.567029][ T921] hub 1-1:4.0: USB hub found [ 247.657579][ T645] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23 [ 247.770068][ T796] usb 4-1: USB disconnect, device number 13 [ 247.787848][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 247.788278][ T921] hub 1-1:4.0: 2 ports detected [ 247.801014][ T796] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 248.979654][ T23] audit: type=1400 audit(1718129705.695:2478): avc: denied { map } for pid=4818 comm="syz-executor.1" path="/dev/ashmem" dev="devtmpfs" ino=9295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.107837][ T4822] fscrypt (sda1, inode 1952): Direct key flag not allowed with different contents and filenames modes [ 249.666964][ T4832] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nobarrier,noauto_da_alloc,,errors=continue [ 249.746652][ T4832] ext4 filesystem being mounted at /root/syzkaller-testdir2126829793/syzkaller.paASDe/30/bus supports timestamps until 2038 (0x7fffffff) [ 249.885060][ T921] usb 1-1: USB disconnect, device number 13 [ 250.200864][ T23] audit: type=1400 audit(1718129706.858:2479): avc: denied { getopt } for pid=4843 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.106596][ T4846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 251.156740][ T4846] EXT4-fs error (device loop3): ext4_find_extent:963: inode #2: comm syz-executor.3: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 251.216570][ T4853] FAT-fs (loop4): Directory bread(block 64) failed [ 251.226538][ T4853] FAT-fs (loop4): Directory bread(block 65) failed [ 251.233163][ T4853] FAT-fs (loop4): Directory bread(block 66) failed [ 251.239772][ T4853] FAT-fs (loop4): Directory bread(block 67) failed [ 251.246366][ T4853] FAT-fs (loop4): Directory bread(block 68) failed [ 251.252907][ T4853] FAT-fs (loop4): Directory bread(block 69) failed [ 251.259517][ T4853] FAT-fs (loop4): Directory bread(block 70) failed [ 251.266087][ T4853] FAT-fs (loop4): Directory bread(block 71) failed [ 251.272520][ T4853] FAT-fs (loop4): Directory bread(block 72) failed [ 251.286888][ T4863] syz-executor.1[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.287016][ T4863] syz-executor.1[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.298697][ T4853] FAT-fs (loop4): Directory bread(block 73) failed [ 252.124802][ T382] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 252.427235][ T23] audit: type=1400 audit(1718129708.787:2480): avc: denied { name_bind } for pid=4872 comm="syz-executor.1" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 252.806243][ T382] usb 4-1: Using ep0 maxpacket: 8 [ 253.100023][ T382] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 253.111396][ T382] usb 4-1: config 179 has no interface number 0 [ 253.124438][ T382] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 253.136967][ T382] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 253.151734][ T1727] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 253.168456][ T382] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.186455][ T382] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 253.201820][ T382] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 253.222856][ T382] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 253.240159][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.359979][ T4871] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 254.917579][ T4871] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 255.179382][ T382] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input24 [ 255.275904][ T1727] usb 2-1: Using ep0 maxpacket: 32 [ 255.372504][ T417] device bridge_slave_1 left promiscuous mode [ 255.378586][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.394187][ T417] device bridge_slave_0 left promiscuous mode [ 255.400264][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.405391][ T4903] FAT-fs (loop0): Directory bread(block 64) failed [ 255.415160][ T4903] FAT-fs (loop0): Directory bread(block 65) failed [ 255.419696][ T1727] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.421566][ T4903] FAT-fs (loop0): Directory bread(block 66) failed [ 255.438834][ T1727] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.458532][ T1727] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 255.467673][ T1727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.480727][ T4903] FAT-fs (loop0): Directory bread(block 67) failed [ 255.487196][ T4903] FAT-fs (loop0): Directory bread(block 68) failed [ 255.492282][ T382] usb 4-1: USB disconnect, device number 14 [ 255.501812][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 255.510077][ T382] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 255.524663][ T1727] hub 2-1:4.0: USB hub found [ 255.525047][ T4903] FAT-fs (loop0): Directory bread(block 69) failed [ 255.556102][ T4903] FAT-fs (loop0): Directory bread(block 70) failed [ 255.562491][ T4903] FAT-fs (loop0): Directory bread(block 71) failed [ 255.569034][ T4903] FAT-fs (loop0): Directory bread(block 72) failed [ 255.575489][ T4903] FAT-fs (loop0): Directory bread(block 73) failed [ 255.800506][ T1727] hub 2-1:4.0: 2 ports detected [ 256.189702][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.206067][ T4906] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.214393][ T4906] device bridge_slave_0 entered promiscuous mode [ 256.248384][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.266351][ T4906] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.275445][ T4906] device bridge_slave_1 entered promiscuous mode [ 256.382657][ T23] audit: type=1400 audit(1718129712.571:2481): avc: denied { setattr } for pid=4918 comm="syz-executor.3" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.538161][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.545089][ T4906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.552340][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.559238][ T4906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.816138][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.835017][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.437347][ T399] usb 2-1: USB disconnect, device number 18 [ 257.549616][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.561855][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.593417][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.602121][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.622089][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.628982][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.638650][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.648067][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.656612][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.663508][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.691518][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.700576][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.721512][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.731288][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.790709][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.801162][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.825694][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.834486][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.860476][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.870766][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.879821][ T417] device bridge_slave_1 left promiscuous mode [ 257.887140][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.895070][ T417] device bridge_slave_0 left promiscuous mode [ 257.901693][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.296325][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.314923][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.328011][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.337389][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.429137][ T4939] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 258.441608][ T4939] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nobarrier,sysvgroups,norecovery,errors=continue,nomblk_io_submit,quota,noauto_da_alloc,lazytime,,errors=continue [ 258.485103][ T4939] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 258.589588][ T796] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 258.687090][ T921] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 258.849620][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 258.927370][ T4950] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 258.935076][ T4950] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 258.946500][ T4950] F2FS-fs (loop3): invalid crc value [ 258.951807][ T921] usb 1-1: Using ep0 maxpacket: 16 [ 258.957221][ T4950] F2FS-fs (loop3): Found nat_bits in checkpoint [ 258.979792][ T796] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 258.988111][ T796] usb 5-1: config 179 has no interface number 0 [ 258.994729][ T796] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 259.005970][ T796] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 259.017440][ T796] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.037931][ T796] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 259.050344][ T796] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 259.068124][ T4950] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 259.068876][ T796] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 259.075006][ T4950] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 259.092651][ T921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.103859][ T921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.260409][ T921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 259.273816][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.282758][ T921] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 259.291686][ T921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.302014][ T921] usb 1-1: config 0 descriptor?? [ 259.315602][ T4935] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 259.513253][ T4959] attempt to access beyond end of device [ 259.513253][ T4959] loop3: rw=2049, want=53656, limit=40427 [ 259.916052][ T645] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 260.065976][ T1727] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input25 [ 260.076965][ T4501] attempt to access beyond end of device [ 260.076965][ T4501] loop3: rw=2049, want=45104, limit=40427 [ 260.083070][ T921] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 260.096368][ T921] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 260.104087][ T921] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 260.114372][ T921] microsoft 0003:045E:07DA.001C: No inputs registered, leaving [ 260.123740][ T921] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 260.135785][ T921] microsoft 0003:045E:07DA.001C: no inputs found [ 260.142196][ T921] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway [ 260.150655][ T4935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 260.232448][ T645] usb 2-1: Using ep0 maxpacket: 32 [ 260.362182][ T4942] FAT-fs (loop0): Directory bread(block 64) failed [ 260.370109][ T4942] FAT-fs (loop0): Directory bread(block 65) failed [ 260.376606][ T4942] FAT-fs (loop0): Directory bread(block 66) failed [ 260.381257][ T921] usb 5-1: USB disconnect, device number 16 [ 260.383436][ T4942] FAT-fs (loop0): Directory bread(block 67) failed [ 260.388772][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 260.395292][ T4942] FAT-fs (loop0): Directory bread(block 68) failed [ 260.403131][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 260.404366][ T921] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 260.409594][ T4942] FAT-fs (loop0): Directory bread(block 69) failed [ 260.434242][ T645] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.437142][ T4942] FAT-fs (loop0): Directory bread(block 70) failed [ 260.445049][ T645] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.461099][ T645] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 260.464500][ T4942] FAT-fs (loop0): Directory bread(block 71) failed [ 260.470075][ T645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.487655][ T4942] FAT-fs (loop0): Directory bread(block 72) failed [ 260.494046][ T4942] FAT-fs (loop0): Directory bread(block 73) failed [ 260.541137][ T645] hub 2-1:4.0: USB hub found [ 260.550315][ T1727] usb 1-1: USB disconnect, device number 14 [ 260.604357][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.611545][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.619775][ T4962] device bridge_slave_0 entered promiscuous mode [ 260.627911][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.634778][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.643321][ T4962] device bridge_slave_1 entered promiscuous mode [ 260.767454][ T645] hub 2-1:4.0: 2 ports detected [ 260.817817][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.824761][ T4962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.831923][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.838791][ T4962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.890815][ T178] device bridge_slave_1 left promiscuous mode [ 260.896859][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.905274][ T178] device bridge_slave_0 left promiscuous mode [ 260.911571][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.054937][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.069770][ T23] audit: type=1400 audit(1718129716.891:2482): avc: denied { ioctl } for pid=4970 comm="syz-executor.4" path="socket:[33486]" dev="sockfs" ino=33486 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.095785][ T921] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.112476][ T921] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.141630][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.198327][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.205295][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.223884][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.256545][ T1727] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.263472][ T1727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.287892][ T4977] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 261.304094][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.315135][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.361629][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.374855][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.486778][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.497656][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.538901][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.547952][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.582236][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.591577][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.642621][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.653157][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.693050][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.712120][ T1727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.748972][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.769945][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.791467][ T4975] device bridge_slave_0 entered promiscuous mode [ 261.816098][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.836325][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.854226][ T4975] device bridge_slave_1 entered promiscuous mode [ 261.924440][ T4986] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.957056][ T4984] attempt to access beyond end of device [ 261.957056][ T4984] loop0: rw=2049, want=129, limit=128 [ 261.968103][ T4984] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 262.001349][ T910] usb 2-1: USB disconnect, device number 19 [ 262.007228][ T645] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 262.087682][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.094566][ T4975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.101827][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.108689][ T4975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.121535][ T1727] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 262.184111][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.193620][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.202379][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.224648][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.234367][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.241258][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.266859][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.275256][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.282112][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.313946][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.333447][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.343400][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.381740][ T1727] usb 3-1: Using ep0 maxpacket: 8 [ 262.387920][ T178] device bridge_slave_1 left promiscuous mode [ 262.395736][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.403913][ T178] device bridge_slave_0 left promiscuous mode [ 262.410071][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.522537][ T1727] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 262.530618][ T1727] usb 3-1: config 179 has no interface number 0 [ 262.537115][ T1727] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 262.550598][ T1727] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 262.561702][ T1727] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 262.587414][ T1727] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 262.620387][ T1727] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 262.635464][ T5009] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 262.641616][ T1727] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 262.667496][ T1727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.685011][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.694230][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.704863][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.717696][ T4997] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 262.725562][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.734120][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.754488][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.764227][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.773299][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.786066][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.794968][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.066324][ T1727] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27 [ 263.180625][ T5040] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 263.274857][ T4997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 263.334984][ T1141] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 263.505060][ T1727] usb 3-1: USB disconnect, device number 13 [ 263.519169][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 263.527376][ T1727] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 263.594991][ T1141] usb 5-1: Using ep0 maxpacket: 32 [ 263.747383][ T1141] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.770017][ T1141] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.780741][ T1141] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 263.790216][ T1141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.867104][ T1141] hub 5-1:4.0: USB hub found [ 264.104496][ T1141] hub 5-1:4.0: 2 ports detected [ 264.298504][ T5068] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 264.307302][ T5062] EXT4-fs (loop2): 1 orphan inode deleted [ 264.331789][ T5062] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 264.362655][ T5062] ext4 filesystem being mounted at /root/syzkaller-testdir3980453771/syzkaller.5z28uL/5/file1 supports timestamps until 2038 (0x7fffffff) [ 264.505483][ T5062] EXT4-fs error (device loop2): ext4_ext_map_blocks:4348: inode #18: comm syz-executor.2: bad extent address lblock: 4, depth: 1 pblock 0 [ 264.519787][ T5062] EXT4-fs (loop2): Remounting filesystem read-only [ 264.549059][ T4962] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 264.656771][ T910] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 264.960252][ T910] usb 4-1: Using ep0 maxpacket: 8 [ 265.132427][ T910] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.140780][ T910] usb 4-1: config 179 has no interface number 0 [ 265.147121][ T910] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 265.162120][ T910] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 265.174220][ T910] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.185390][ T910] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 265.196794][ T910] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.210226][ T910] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.219492][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.263576][ T5078] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 265.301244][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.301709][ T910] usb 5-1: USB disconnect, device number 17 [ 265.308283][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.321107][ T1141] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 265.339966][ T5090] device bridge_slave_0 entered promiscuous mode [ 265.348604][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.367141][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.394914][ T5090] device bridge_slave_1 entered promiscuous mode [ 265.525993][ T107] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input28 [ 265.538247][ T23] audit: type=1400 audit(1718129721.017:2483): avc: denied { read } for pid=5103 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.614848][ T178] device bridge_slave_1 left promiscuous mode [ 265.621179][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.634116][ T178] device bridge_slave_0 left promiscuous mode [ 265.640319][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.684594][ T23] audit: type=1400 audit(1718129721.146:2484): avc: denied { watch } for pid=5109 comm="syz-executor.0" path="/root/syzkaller-testdir1615570063/syzkaller.4FIJzy/22/file0" dev="incremental-fs" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.718673][ T23] audit: type=1400 audit(1718129721.183:2485): avc: denied { watch_reads } for pid=5109 comm="syz-executor.0" path="/root/syzkaller-testdir1615570063/syzkaller.4FIJzy/22/file0/file0" dev="incremental-fs" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.748312][ T5078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 265.849470][ T5115] EXT4-fs error (device loop0): ext4_quota_enable:6056: inode #4: comm syz-executor.0: iget: immutable or append flags not allowed on symlinks [ 265.871930][ T5115] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 4, type: 1 [ 265.886672][ T5115] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.901806][ T5115] EXT4-fs (loop0): mount failed [ 265.919247][ T5120] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.974586][ T1141] usb 4-1: USB disconnect, device number 15 [ 265.978540][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 265.988456][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 265.998253][ T1141] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 266.033826][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.041916][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.066884][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.075515][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.085180][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.092109][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.101438][ T23] audit: type=1400 audit(1718129721.543:2486): avc: denied { map } for pid=5125 comm="syz-executor.0" path="socket:[34732]" dev="sockfs" ino=34732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 266.128786][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.139715][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.146758][ T23] audit: type=1400 audit(1718129721.543:2487): avc: denied { read } for pid=5125 comm="syz-executor.0" path="socket:[34732]" dev="sockfs" ino=34732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 266.148260][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.177804][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.195289][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.195966][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.196632][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.201178][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.203276][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.308303][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.328859][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.368662][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.377153][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.442126][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.467282][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.476304][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.496202][ T5141] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.527433][ T5141] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.202959][ T2760] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.264622][ T23] audit: type=1400 audit(1718129722.613:2488): avc: denied { ioctl } for pid=5147 comm="syz-executor.4" path="socket:[35866]" dev="sockfs" ino=35866 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.296293][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.329654][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.410808][ T5159] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 267.451405][ T5164] overlayfs: missing 'lowerdir' [ 267.853253][ T23] audit: type=1400 audit(1718129722.909:2489): avc: denied { accept } for pid=5156 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 268.037148][ T399] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 268.170491][ T5178] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.183288][ T5178] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.277860][ T2760] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.481229][ T399] usb 2-1: Using ep0 maxpacket: 8 [ 268.514721][ T5186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5186 comm=syz-executor.4 [ 269.380805][ T399] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 269.392684][ T399] usb 2-1: config 179 has no interface number 0 [ 269.411208][ T399] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 269.444393][ T399] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 269.464560][ T399] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.149063][ T399] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 270.260698][ T5212] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.285819][ T399] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 270.298956][ T399] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 270.308028][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.316775][ T5212] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.334708][ T5171] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 270.344431][ T23] audit: type=1400 audit(1718129725.447:2490): avc: denied { lock } for pid=5215 comm="syz-executor.4" path="socket:[35949]" dev="sockfs" ino=35949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 270.399051][ T178] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.512521][ T5224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5224 comm=syz-executor.4 [ 270.719715][ T5204] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 270.730460][ T5204] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 270.742460][ T5204] F2FS-fs (loop0): invalid crc value [ 270.751290][ T5204] F2FS-fs (loop0): Found nat_bits in checkpoint [ 270.779018][ T399] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input29 [ 271.535788][ T5171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 271.572619][ T5204] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 271.599714][ T5204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 271.786896][ T13] usb 2-1: USB disconnect, device number 20 [ 271.796519][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 271.804641][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 271.813560][ T13] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 271.985895][ T5255] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 272.025429][ T5255] EXT4-fs (loop3): 1 truncate cleaned up [ 272.181236][ T5264] attempt to access beyond end of device [ 272.181236][ T5264] loop0: rw=2049, want=53656, limit=40427 [ 272.363295][ T5255] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,abort,noload,noquota,block_validity,init_itable=0x0000000000000006,auto_da_alloc=0x0000000000000008,,errors=continue [ 272.798350][ T4906] attempt to access beyond end of device [ 272.798350][ T4906] loop0: rw=2049, want=45104, limit=40427 [ 272.883231][ T5274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5274 comm=syz-executor.3 [ 272.914337][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.929157][ T5265] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.941715][ T5265] device bridge_slave_0 entered promiscuous mode [ 272.969805][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.980957][ T5265] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.008853][ T5265] device bridge_slave_1 entered promiscuous mode [ 273.319619][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.326571][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.333863][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.340960][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.489610][ T5288] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 274.510936][ T5288] EXT4-fs (loop3): 1 truncate cleaned up [ 274.516576][ T5288] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,abort,noload,noquota,block_validity,init_itable=0x0000000000000006,auto_da_alloc=0x0000000000000008,,errors=continue [ 274.812817][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.820834][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.918816][ T23] audit: type=1400 audit(1718129729.674:2491): avc: denied { append } for pid=5311 comm="syz-executor.0" name="hwrng" dev="devtmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 275.088915][ T5317] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 275.088915][ T5317] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 275.088915][ T5317] [ 275.106521][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.124478][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.136246][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.153970][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.171311][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.178334][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.185789][ T5317] EXT4-fs (loop0): Ignoring removed bh option [ 275.192033][ T5317] EXT4-fs (loop0): filesystem is read-only [ 275.200379][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.208487][ T5317] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 65280 [ 275.226219][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.242401][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.249399][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.312021][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.321545][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.340664][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.349825][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.386577][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.398618][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.426027][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.434528][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.490333][ T5312] fuse: Unknown parameter '0x0000000000000003' [ 275.523716][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.543319][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.120953][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.130711][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.141366][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.150372][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.166756][ T178] device bridge_slave_1 left promiscuous mode [ 278.182618][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.196911][ T178] device bridge_slave_0 left promiscuous mode [ 278.211814][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.396971][ T5377] FAT-fs (loop3): Directory bread(block 64) failed [ 278.419274][ T5377] FAT-fs (loop3): Directory bread(block 65) failed [ 278.430583][ T5377] FAT-fs (loop3): Directory bread(block 66) failed [ 278.437088][ T5377] FAT-fs (loop3): Directory bread(block 67) failed [ 278.443668][ T5377] FAT-fs (loop3): Directory bread(block 68) failed [ 278.450203][ T5377] FAT-fs (loop3): Directory bread(block 69) failed [ 278.456791][ T5377] FAT-fs (loop3): Directory bread(block 70) failed [ 278.463379][ T5377] FAT-fs (loop3): Directory bread(block 71) failed [ 278.469924][ T5377] FAT-fs (loop3): Directory bread(block 72) failed [ 278.476511][ T5377] FAT-fs (loop3): Directory bread(block 73) failed [ 278.526273][ T5378] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 278.526273][ T5378] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 278.526273][ T5378] [ 278.552663][ T5378] EXT4-fs (loop2): Ignoring removed bh option [ 278.570454][ T5378] EXT4-fs (loop2): filesystem is read-only [ 278.580994][ T5378] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 65280 [ 279.652053][ T5371] fuse: Unknown parameter '0x0000000000000003' [ 280.014877][ T367] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 280.238692][ T5420] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 280.238692][ T5420] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 280.238692][ T5420] [ 280.273197][ T5420] EXT4-fs (loop4): Ignoring removed oldalloc option [ 280.327054][ T5420] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nombcache,resgid=0x0000000000000000,init_itable=0x000000000000007f,barrier=0x000000000000004c,lazytime,nouser_xattr,oldalloc,errors=continue,,errors=continue [ 280.431799][ T367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.457448][ T367] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.474931][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.493043][ T367] usb 1-1: config 0 descriptor?? [ 280.611226][ T5432] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 280.694103][ T5402] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 280.704039][ T5402] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 280.733036][ T5402] F2FS-fs (loop3): invalid crc value [ 280.756153][ T5402] F2FS-fs (loop3): Found nat_bits in checkpoint [ 280.894501][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.896250][ T5402] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 280.901554][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.910522][ T5402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 280.919345][ T5433] device bridge_slave_0 entered promiscuous mode [ 280.934938][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.942093][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.950102][ T5433] device bridge_slave_1 entered promiscuous mode [ 281.180457][ T367] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 281.194042][ T367] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001D/input/input30 [ 281.410671][ T5452] attempt to access beyond end of device [ 281.410671][ T5452] loop3: rw=2049, want=53656, limit=40427 [ 281.912460][ T367] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 281.927978][ T367] usb 1-1: USB disconnect, device number 15 [ 282.161263][ T4975] attempt to access beyond end of device [ 282.161263][ T4975] loop3: rw=2049, want=45104, limit=40427 [ 282.552911][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.566472][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.574760][ T178] device bridge_slave_1 left promiscuous mode [ 282.582283][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.591187][ T178] device bridge_slave_0 left promiscuous mode [ 282.597252][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.605946][ T178] device bridge_slave_1 left promiscuous mode [ 282.612000][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.619738][ T178] device bridge_slave_0 left promiscuous mode [ 282.626714][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.635079][ T178] device bridge_slave_1 left promiscuous mode [ 282.638697][ T5462] FAT-fs (loop1): Directory bread(block 64) failed [ 282.641204][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.647541][ T5462] FAT-fs (loop1): Directory bread(block 65) failed [ 282.660746][ T5462] FAT-fs (loop1): Directory bread(block 66) failed [ 282.660790][ T178] device bridge_slave_0 left promiscuous mode [ 282.667199][ T5462] FAT-fs (loop1): Directory bread(block 67) failed [ 282.667305][ T5462] FAT-fs (loop1): Directory bread(block 68) failed [ 282.667349][ T5462] FAT-fs (loop1): Directory bread(block 69) failed [ 282.693035][ T5462] FAT-fs (loop1): Directory bread(block 70) failed [ 282.699756][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.707102][ T5462] FAT-fs (loop1): Directory bread(block 71) failed [ 282.713552][ T5462] FAT-fs (loop1): Directory bread(block 72) failed [ 282.723049][ T5462] FAT-fs (loop1): Directory bread(block 73) failed [ 282.843817][ T5467] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 282.995452][ T5462] attempt to access beyond end of device [ 282.995452][ T5462] loop1: rw=2049, want=1228, limit=256 [ 283.173522][ T23] audit: type=1400 audit(1718129737.298:2492): avc: denied { setopt } for pid=5472 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.241035][ T5476] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 283.241035][ T5476] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 283.241035][ T5476] [ 283.266113][ T5476] EXT4-fs (loop3): Ignoring removed oldalloc option [ 283.277433][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.286498][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.295081][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.302076][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.320082][ T5476] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nombcache,resgid=0x0000000000000000,init_itable=0x000000000000007f,barrier=0x000000000000004c,lazytime,nouser_xattr,oldalloc,errors=continue,,errors=continue [ 283.344986][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.353943][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.362597][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.369499][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.377402][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.540842][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.549227][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.558579][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.571988][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.628469][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.637122][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.667964][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.676729][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.708750][ T5460] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.715972][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.724293][ T5460] device bridge_slave_0 entered promiscuous mode [ 283.738121][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.759676][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.002994][ T5460] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.010609][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.020408][ T5460] device bridge_slave_1 entered promiscuous mode [ 284.059476][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.068732][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.094725][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.107457][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.546861][ T5520] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 284.546861][ T5520] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 284.546861][ T5520] [ 284.590848][ T5499] F2FS-fs (loop0): invalid crc value [ 284.599019][ T5520] EXT4-fs (loop1): Ignoring removed oldalloc option [ 284.626216][ T5499] F2FS-fs (loop0): Mismatch valid blocks 5 vs. 6 [ 284.632540][ T5499] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 284.655042][ T5520] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,resgid=0x0000000000000000,init_itable=0x000000000000007f,barrier=0x000000000000004c,lazytime,nouser_xattr,oldalloc,errors=continue,,errors=continue [ 284.695908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.711644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.743615][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.752232][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.768664][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.775552][ T5524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.798141][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.806717][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.816190][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.824680][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.831575][ T5524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.898390][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.905282][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.919767][ T5517] device bridge_slave_0 entered promiscuous mode [ 284.941444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.951154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.959473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.967958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.977772][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.986215][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.995660][ T5517] device bridge_slave_1 entered promiscuous mode [ 285.113682][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.339654][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.437606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.490270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.500265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.552488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.562300][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.564141][ T5558] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 286.225208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.237827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.271550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.285490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.294266][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.301160][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.310695][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.323169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.348111][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.355093][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.368461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.377372][ T178] device bridge_slave_1 left promiscuous mode [ 286.386353][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.397828][ T178] device bridge_slave_0 left promiscuous mode [ 286.404006][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.412260][ T178] device bridge_slave_1 left promiscuous mode [ 286.418313][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.426538][ T178] device bridge_slave_0 left promiscuous mode [ 286.432893][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.451564][ T5587] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 286.451564][ T5587] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 286.451564][ T5587] [ 286.470959][ T5587] EXT4-fs (loop4): Ignoring removed oldalloc option [ 286.502524][ T5587] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nombcache,resgid=0x0000000000000000,init_itable=0x000000000000007f,barrier=0x000000000000004c,lazytime,nouser_xattr,oldalloc,errors=continue,,errors=continue [ 286.577253][ T5596] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 286.627492][ T23] audit: type=1326 audit(1718129740.483:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff77c1d5ea9 code=0x0 [ 286.679765][ T5595] FAT-fs (loop2): Directory bread(block 64) failed [ 286.704567][ T5595] FAT-fs (loop2): Directory bread(block 65) failed [ 286.712076][ T5595] FAT-fs (loop2): Directory bread(block 66) failed [ 286.718636][ T5595] FAT-fs (loop2): Directory bread(block 67) failed [ 286.725164][ T5595] FAT-fs (loop2): Directory bread(block 68) failed [ 286.731701][ T5595] FAT-fs (loop2): Directory bread(block 69) failed [ 286.738234][ T5595] FAT-fs (loop2): Directory bread(block 70) failed [ 286.745127][ T5595] FAT-fs (loop2): Directory bread(block 71) failed [ 286.753003][ T5595] FAT-fs (loop2): Directory bread(block 72) failed [ 286.772999][ T5595] FAT-fs (loop2): Directory bread(block 73) failed [ 286.937051][ T5595] attempt to access beyond end of device [ 286.937051][ T5595] loop2: rw=2051, want=1352, limit=256 [ 287.651872][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.793909][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.804963][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.816890][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.828393][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.843472][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.854834][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.866271][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.877484][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.888893][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.900073][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.911275][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.922722][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.933714][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.315481][ T5619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.439006][ T5623] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 288.450788][ T5623] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.514594][ T5635] mmap: syz-executor.1 (5635) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 288.834084][ T5656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.874976][ T5604] F2FS-fs (loop4): invalid crc value [ 288.890493][ T5604] F2FS-fs (loop4): Mismatch valid blocks 5 vs. 6 [ 288.906523][ T5604] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 288.946391][ T5662] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 289.004219][ T5662] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.140256][ T5687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.188751][ T5695] kvm [5694]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x6f722c6666666666 [ 290.207379][ T5692] FAT-fs (loop4): Directory bread(block 1285) failed [ 290.223448][ T5692] FAT-fs (loop4): Directory bread(block 1285) failed [ 290.233803][ T5689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 290.236520][ T5692] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 290.242993][ T5689] ext4 filesystem being mounted at /root/syzkaller-testdir1615570063/syzkaller.4FIJzy/72/bus supports timestamps until 2038 (0x7fffffff) [ 291.420793][ T5711] incfs: Backing dir is not set, filesystem can't be mounted. [ 291.428496][ T5711] incfs: mount failed -2 [ 291.863792][ T5717] Alternate GPT is invalid, using primary GPT. [ 291.869941][ T5717] loop3: p1 p2 p3 [ 292.008901][ T5728] device syzkaller0 entered promiscuous mode [ 292.904459][ T5746] xt_hashlimit: max too large, truncated to 1048576 [ 293.438524][ T23] audit: type=1400 audit(1718129746.768:2494): avc: denied { read } for pid=5762 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.556741][ T5768] FAT-fs (loop4): Directory bread(block 1285) failed [ 293.584496][ T5768] FAT-fs (loop4): Directory bread(block 1285) failed [ 293.591472][ T5768] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 294.895214][ T5789] xt_hashlimit: max too large, truncated to 1048576 [ 295.440478][ T5784] F2FS-fs (loop0): invalid crc value [ 295.527041][ T5784] F2FS-fs (loop0): Mismatch valid blocks 5 vs. 6 [ 295.537300][ T5784] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 298.127875][ T5837] Alternate GPT is invalid, using primary GPT. [ 298.172068][ T5838] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 298.208693][ T5837] loop0: p1 p2 p3 [ 298.441564][ T5838] ext4 filesystem being mounted at /root/syzkaller-testdir2502648266/syzkaller.zsurms/30/file0 supports timestamps until 2038 (0x7fffffff) [ 298.755377][ T5852] xt_hashlimit: max too large, truncated to 1048576 [ 299.404489][ T5867] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 299.851629][ T23] audit: type=1400 audit(1718129752.685:2495): avc: denied { map } for pid=5876 comm="syz-executor.3" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 299.964847][ T5885] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 299.984839][ T5885] ext4 filesystem being mounted at /root/syzkaller-testdir557132152/syzkaller.Zbskwk/38/file0 supports timestamps until 2038 (0x7fffffff) [ 300.002994][ T5889] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 300.175303][ T5901] xt_hashlimit: max too large, truncated to 1048576 [ 300.392818][ T5902] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 301.646840][ T5936] netlink: 41466 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.690737][ T5938] xt_hashlimit: max too large, truncated to 1048576 [ 301.981311][ T5894] F2FS-fs (loop0): invalid crc value [ 302.015515][ T5953] xt_TCPMSS: Only works on TCP SYN packets [ 302.756876][ T5894] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 302.884591][ T23] audit: type=1400 audit(1718129755.491:2496): avc: denied { create } for pid=5963 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.961338][ T5971] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 303.454202][ T5] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 303.689490][ T23] audit: type=1326 audit(1718129756.229:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718786cea9 code=0x0 [ 303.735841][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 303.866205][ T5] usb 4-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 303.879159][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.903800][ T5] usb 4-1: config 0 descriptor?? [ 303.910969][ T6004] syz-executor.0 (6004): /proc/6004/oom_adj is deprecated, please use /proc/6004/oom_score_adj instead. [ 303.964738][ T5] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 303.978106][ T6004] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 304.197791][ T6004] ext4 filesystem being mounted at /root/syzkaller-testdir1615570063/syzkaller.4FIJzy/97/file0 supports timestamps until 2038 (0x7fffffff) [ 305.082652][ T5] usb 4-1: Detected FT232BM [ 305.110662][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 305.144407][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 305.152960][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 305.163127][ T5] usb 4-1: USB disconnect, device number 16 [ 305.170087][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 305.180094][ T5] ftdi_sio 4-1:0.0: device disconnected [ 305.512385][ T23] audit: type=1326 audit(1718129757.909:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718786cea9 code=0x0 [ 305.676675][ T6037] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 305.684113][ T6047] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 305.691487][ T6037] ext4 filesystem being mounted at /root/syzkaller-testdir2502648266/syzkaller.zsurms/48/file0 supports timestamps until 2038 (0x7fffffff) [ 305.708056][ T6043] printk: syz-executor.0 (6043): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 305.723787][ T6037] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor.4: path /root/syzkaller-testdir2502648266/syzkaller.zsurms/48/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 305.847997][ T23] audit: type=1326 audit(1718129758.223:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa69657aea9 code=0x0 [ 305.974864][ T6074] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 305.983933][ T6074] ext4 filesystem being mounted at /root/syzkaller-testdir557132152/syzkaller.Zbskwk/60/file0 supports timestamps until 2038 (0x7fffffff) [ 306.006768][ T6074] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir557132152/syzkaller.Zbskwk/60/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 306.046803][ T6085] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 306.171483][ T23] audit: type=1326 audit(1718129758.518:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718786cea9 code=0x0 [ 306.195545][ T367] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 306.218179][ T6098] loop3: p1 p3 < > p4 < p5 > [ 306.222697][ T6098] loop3: partition table partially beyond EOD, truncated [ 306.230048][ T6098] loop3: p1 size 33024 extends beyond EOD, truncated [ 306.237973][ T6098] loop3: p3 start 4284289 is beyond EOD, truncated [ 306.245674][ T6098] loop3: p5 size 33024 extends beyond EOD, truncated [ 306.262749][ T6101] syz-executor.2[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.262837][ T6101] syz-executor.2[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.290277][ T6098] FAT-fs (loop3p1): bogus number of reserved sectors [ 306.290791][ T23] audit: type=1400 audit(1718129758.629:2501): avc: denied { mounton } for pid=6096 comm="syz-executor.3" path="/dev/loop3p1" dev="devtmpfs" ino=40009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.331289][ T6098] FAT-fs (loop3p1): Can't find a valid FAT filesystem [ 306.455249][ T367] usb 5-1: Using ep0 maxpacket: 8 [ 306.585448][ T367] usb 5-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 306.594604][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.605052][ T367] usb 5-1: config 0 descriptor?? [ 306.651677][ T367] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 306.877978][ T367] usb 5-1: Detected FT232BM [ 307.105413][ T367] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 307.127056][ T367] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 307.137891][ T367] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 307.152252][ T367] usb 5-1: USB disconnect, device number 18 [ 307.159358][ T367] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 307.169018][ T367] ftdi_sio 5-1:0.0: device disconnected [ 307.186420][ T6104] F2FS-fs (loop2): invalid crc value [ 307.250560][ T23] audit: type=1326 audit(1718129759.515:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718786cea9 code=0x7ffc0000 [ 307.288200][ T6104] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 307.295680][ T23] audit: type=1326 audit(1718129759.543:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f718786cea9 code=0x7ffc0000 [ 307.343997][ T23] audit: type=1326 audit(1718129759.543:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718786cea9 code=0x7ffc0000 [ 307.463524][ T23] audit: type=1326 audit(1718129759.543:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f718786cea9 code=0x7ffc0000 [ 307.527967][ T23] audit: type=1326 audit(1718129759.543:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718786cea9 code=0x7ffc0000 [ 307.571173][ T23] audit: type=1326 audit(1718129759.543:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f718786cea9 code=0x7ffc0000 [ 307.652167][ T6135] syz-executor.0[6135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.652256][ T6135] syz-executor.0[6135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.835788][ T6137] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 308.885297][ T6152] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 309.186814][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.264692][ T6171] incfs: Options parsing error. -22 [ 309.269825][ T6171] incfs: mount failed -22 [ 309.475274][ T6177] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 309.696421][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.709083][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.761635][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.859243][ T6215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 310.985470][ T23] kauditd_printk_skb: 80 callbacks suppressed [ 310.985502][ T23] audit: type=1326 audit(1718129762.967:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa696579aa0 code=0x7ffc0000 [ 311.233987][ T23] audit: type=1326 audit(1718129762.967:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa69657ac0b code=0x7ffc0000 [ 311.330731][ T23] audit: type=1326 audit(1718129763.069:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa696579d9a code=0x7ffc0000 [ 311.357494][ T23] audit: type=1326 audit(1718129763.069:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69657aea9 code=0x7ffc0000 [ 311.381413][ T23] audit: type=1326 audit(1718129763.106:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69657aea9 code=0x7ffc0000 [ 311.440810][ T23] audit: type=1326 audit(1718129763.272:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69657aea9 code=0x7ffc0000 [ 311.469857][ T23] audit: type=1326 audit(1718129763.272:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69657aea9 code=0x7ffc0000 [ 311.494824][ T23] audit: type=1326 audit(1718129763.281:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69657aea9 code=0x7ffc0000 [ 311.519298][ T23] audit: type=1326 audit(1718129763.281:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa69657aea9 code=0x7ffc0000 [ 311.547614][ T6240] EXT4-fs (loop4): Ignoring removed nobh option [ 311.555888][ T23] audit: type=1326 audit(1718129763.281:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69657aea9 code=0x7ffc0000 [ 311.595535][ T6240] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.4: corrupted xattr block 8 [ 311.608319][ T6240] EXT4-fs (loop4): Remounting filesystem read-only [ 311.615504][ T6240] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -117) [ 311.624486][ T6240] EXT4-fs (loop4): 1 orphan inode deleted [ 311.630039][ T6240] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid, [ 311.651403][ T6240] ext4 filesystem being mounted at /root/syzkaller-testdir2502648266/syzkaller.zsurms/58/file1 supports timestamps until 2038 (0x7fffffff) [ 311.753210][ T910] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 312.033492][ T367] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 312.533292][ T367] usb 3-1: Using ep0 maxpacket: 8 [ 312.594529][ T910] usb 4-1: Using ep0 maxpacket: 32 [ 312.674216][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.695753][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.705348][ T367] usb 3-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 312.718317][ T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.730816][ T367] usb 3-1: config 0 descriptor?? [ 312.945147][ T910] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 312.954114][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.963746][ T910] usb 4-1: Product: syz [ 312.967924][ T910] usb 4-1: Manufacturer: syz [ 312.972363][ T910] usb 4-1: SerialNumber: syz [ 312.978669][ T910] usb 4-1: config 0 descriptor?? [ 313.023672][ T910] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 313.088228][ T6262] EXT4-fs error (device loop4): ext4_read_inode_bitmap:134: comm syz-executor.4: Invalid inode bitmap blk 4 in block_group 0 [ 313.101407][ T6262] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 313.143885][ T6262] EXT4-fs error (device loop4): ext4_read_inode_bitmap:134: comm syz-executor.4: Invalid inode bitmap blk 4 in block_group 0 [ 313.157032][ T6262] EXT4-fs error (device loop4) in ext4_free_inode:352: Corrupt filesystem [ 313.178290][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.185455][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.193439][ T6260] device bridge_slave_0 entered promiscuous mode [ 313.201133][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.208644][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.216818][ T6260] device bridge_slave_1 entered promiscuous mode [ 313.239818][ T910] usb 4-1: USB disconnect, device number 17 [ 313.242200][ T367] wacom 0003:056A:0302.001E: unknown main item tag 0x7 [ 313.267054][ T367] wacom 0003:056A:0302.001E: Unknown device_type for 'HID 056a:0302'. Assuming pen. [ 313.283393][ T367] wacom 0003:056A:0302.001E: hidraw0: USB HID v0.00 Device [HID 056a:0302] on usb-dummy_hcd.2-1/input0 [ 313.296895][ T367] input: Wacom Intuos PT S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0302.001E/input/input33 [ 313.321559][ T6270] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 313.329689][ T6270] EXT4-fs (loop4): inodes count not valid: 32 vs 800 [ 313.406876][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.413780][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.421116][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.427992][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.481335][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.491884][ T367] usb 3-1: USB disconnect, device number 14 [ 313.497411][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.514880][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.533992][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.543440][ T842] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.550308][ T842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.563798][ T417] device bridge_slave_1 left promiscuous mode [ 313.570622][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.578778][ T417] device bridge_slave_0 left promiscuous mode [ 313.585001][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.782067][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.804785][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.811778][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.856498][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.865625][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.886403][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.895670][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.945257][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.956007][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.975417][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.984379][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.020519][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.030418][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.057812][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.063361][ T6284] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 314.067662][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.090045][ T6284] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 314.109654][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.120453][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.156320][ T6284] F2FS-fs (loop4): Found nat_bits in checkpoint [ 314.334975][ T6306] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 314.352051][ T6308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.377063][ T6284] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 314.384173][ T6284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 315.430150][ T6323] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 315.439442][ T6323] ext4 filesystem being mounted at /root/syzkaller-testdir2502648266/syzkaller.zsurms/71/bus supports timestamps until 2038 (0x7fffffff) [ 315.459139][ T6325] EXT4-fs (loop0): orphan cleanup on readonly fs [ 315.466247][ T6325] EXT4-fs error (device loop0): ext4_quota_enable:6052: comm syz-executor.0: Bad quota inum: 11, type: 1 [ 315.470465][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.477982][ T6325] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 315.610820][ T6325] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 315.617362][ T6325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 315.689437][ T6322] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 315.722782][ T6322] EXT4-fs error (device loop3): ext4_empty_dir:3002: inode #12: block 80: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3774873612, rec_len=65535, size=4096 fake=0 [ 315.743002][ T6325] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.0: lblock 0 mapped to illegal pblock 3 (length 1) [ 315.819446][ T6338] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 315.845764][ T6336] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 315.862744][ T6322] EXT4-fs warning (device loop3): ext4_empty_dir:3004: inode #12: comm syz-executor.3: directory missing '.' [ 315.942752][ T6322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor.3: bg 0: block 186: padding at end of block bitmap is not set [ 316.014211][ T6336] EXT4-fs error (device loop0): ext4_quota_enable:6052: comm syz-executor.0: Bad quota inum: 11, type: 1 [ 316.042340][ T6322] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 316.064259][ T6336] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 316.811471][ T6356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 316.955609][ T6368] EXT4-fs (loop2): orphan cleanup on readonly fs [ 316.966653][ T6368] EXT4-fs error (device loop2): ext4_quota_enable:6052: comm syz-executor.2: Bad quota inum: 11, type: 1 [ 316.984259][ T6368] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 317.000580][ T6368] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 317.007125][ T6368] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 317.036059][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.042997][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.050882][ T6359] device bridge_slave_0 entered promiscuous mode [ 317.058565][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.065428][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.073488][ T6359] device bridge_slave_1 entered promiscuous mode [ 317.125102][ T6368] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 317.141465][ T6368] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 317.151879][ T6371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 317.165511][ T6371] EXT4-fs error (device loop0): ext4_empty_dir:3002: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3774873612, rec_len=65535, size=4096 fake=0 [ 317.192047][ T921] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 317.192279][ T6368] EXT4-fs error (device loop2): ext4_quota_enable:6052: comm syz-executor.2: Bad quota inum: 11, type: 1 [ 317.210735][ T6371] EXT4-fs warning (device loop0): ext4_empty_dir:3004: inode #12: comm syz-executor.0: directory missing '.' [ 317.218985][ T6368] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 317.238539][ T6371] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 186: padding at end of block bitmap is not set [ 317.253377][ T6371] EXT4-fs error (device loop0) in ext4_free_blocks:5019: Corrupt filesystem [ 317.336386][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.343281][ T6359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.350498][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.357366][ T6359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.436095][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.447444][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.456485][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.496121][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.505030][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.511935][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.539282][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.547686][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.554591][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.593143][ T417] device bridge_slave_1 left promiscuous mode [ 317.599210][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.609536][ T417] device bridge_slave_0 left promiscuous mode [ 317.616675][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.625432][ T921] usb 4-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 317.635635][ T921] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 317.644919][ T921] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 317.653878][ T921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.665177][ T921] usb 4-1: config 0 descriptor?? [ 317.816217][ T6404] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 317.842010][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.850376][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.858567][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.866795][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.888143][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.896764][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.915563][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.924394][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.952326][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.960881][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.984703][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.993355][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.018875][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.029374][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.613400][ T921] usb 4-1: language id specifier not provided by device, defaulting to English [ 318.922940][ T921] usb 4-1: USB disconnect, device number 18 [ 319.329216][ T6425] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 319.361862][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 319.361917][ T23] audit: type=1400 audit(1718129770.702:2606): avc: denied { ioctl } for pid=6422 comm="syz-executor.1" path="socket:[41056]" dev="sockfs" ino=41056 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 319.478186][ T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 319.814083][ T921] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 319.894374][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.203924][ T921] usb 2-1: Using ep0 maxpacket: 32 [ 320.421303][ T921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.478717][ T921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.490782][ T921] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.499794][ T921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.509462][ T921] usb 2-1: config 0 descriptor?? [ 320.551811][ T921] hub 2-1:0.0: USB hub found [ 320.789048][ T921] hub 2-1:0.0: 1 port detected [ 320.900314][ T6453] input: syz1 as /devices/virtual/input/input38 [ 321.277246][ T367] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 321.284837][ T6427] F2FS-fs (loop2): Found nat_bits in checkpoint [ 321.385300][ T6427] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 321.392333][ T6427] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 321.928738][ T921] hub 2-1:0.0: activate --> -90 [ 321.959194][ T23] audit: type=1326 audit(1718129773.009:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4947506ea9 code=0x0 [ 323.339979][ T367] usb 4-1: Using ep0 maxpacket: 32 [ 323.649887][ T367] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 323.663626][ T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.672113][ T367] usb 4-1: Product: syz [ 323.676305][ T367] usb 4-1: Manufacturer: syz [ 323.680743][ T367] usb 4-1: SerialNumber: syz [ 323.687817][ T367] usb 4-1: config 0 descriptor?? [ 323.738161][ T367] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 323.921308][ T367] usb 2-1: USB disconnect, device number 21 [ 323.941799][ T24] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 323.949086][ T24] usb 2-1-port1: attempt power cycle [ 323.964780][ T842] usb 4-1: USB disconnect, device number 19 [ 324.572657][ T6483] EXT4-fs (loop1): Ignoring removed nobh option [ 324.618918][ T6483] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.1: corrupted xattr block 8 [ 324.631734][ T6483] EXT4-fs (loop1): Remounting filesystem read-only [ 324.638174][ T6483] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -117) [ 324.647271][ T6483] EXT4-fs (loop1): 1 orphan inode deleted [ 324.652922][ T6483] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid, [ 324.689552][ T6483] ext4 filesystem being mounted at /root/syzkaller-testdir3326731155/syzkaller.Z3o3Yk/5/file1 supports timestamps until 2038 (0x7fffffff) [ 325.179078][ T6497] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 82) [ 325.214219][ T6497] FAT-fs (loop3): Filesystem has been set read-only [ 325.263037][ T6497] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 82) [ 325.282470][ T6497] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 82) [ 325.296242][ T6497] FAT-fs (loop3): error, clusters badly computed (1 != 2) [ 325.825298][ T23] audit: type=1400 audit(1718129776.655:2608): avc: denied { remount } for pid=6510 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 325.850745][ T6498] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 325.876765][ T6498] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 325.937586][ T6498] F2FS-fs (loop0): Found nat_bits in checkpoint [ 326.036567][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.044296][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.052630][ T6511] device bridge_slave_0 entered promiscuous mode [ 326.060228][ T6502] F2FS-fs (loop2): invalid crc value [ 326.068220][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.075382][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.078256][ T6498] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 326.084138][ T6511] device bridge_slave_1 entered promiscuous mode [ 326.089478][ T6498] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 326.115489][ T6502] F2FS-fs (loop2): Found nat_bits in checkpoint [ 326.194492][ T6498] overlayfs: "xino" feature enabled using 32 upper inode bits. [ 326.230886][ T6502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 326.236325][ T6260] attempt to access beyond end of device [ 326.236325][ T6260] loop0: rw=524288, want=45072, limit=40427 [ 326.250298][ T6260] attempt to access beyond end of device [ 326.250298][ T6260] loop0: rw=0, want=45072, limit=40427 [ 326.275128][ T417] device bridge_slave_1 left promiscuous mode [ 326.281196][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.289996][ T417] device bridge_slave_0 left promiscuous mode [ 326.296544][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.296878][ T5433] attempt to access beyond end of device [ 326.296878][ T5433] loop2: rw=2049, want=45104, limit=40427 [ 326.544013][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.551664][ T6260] attempt to access beyond end of device [ 326.551664][ T6260] loop0: rw=2049, want=45112, limit=40427 [ 326.563179][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.589263][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.608173][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.616532][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.623417][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.650423][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.659859][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.684458][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.692830][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.699711][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.750198][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.759171][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.783749][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.793340][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.819881][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.829109][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.875658][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.884264][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.948411][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.957927][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.990088][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.999675][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.026475][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.036495][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.364296][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.371355][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.379724][ T6553] device bridge_slave_0 entered promiscuous mode [ 329.388218][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.395182][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.403672][ T6553] device bridge_slave_1 entered promiscuous mode [ 329.884286][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.894521][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.918434][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.928585][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.938575][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.945469][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.957221][ T417] device bridge_slave_1 left promiscuous mode [ 329.963295][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.972466][ T6577] FAT-fs (loop1): Directory bread(block 64) failed [ 329.979876][ T6577] FAT-fs (loop1): Directory bread(block 65) failed [ 329.980480][ T417] device bridge_slave_0 left promiscuous mode [ 329.986430][ T6577] FAT-fs (loop1): Directory bread(block 66) failed [ 329.993034][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.998711][ T6577] FAT-fs (loop1): Directory bread(block 67) failed [ 330.011948][ T6577] FAT-fs (loop1): Directory bread(block 68) failed [ 330.018347][ T6577] FAT-fs (loop1): Directory bread(block 69) failed [ 330.024808][ T6577] FAT-fs (loop1): Directory bread(block 70) failed [ 330.031253][ T6577] FAT-fs (loop1): Directory bread(block 71) failed [ 330.037981][ T6577] FAT-fs (loop1): Directory bread(block 72) failed [ 330.044467][ T6577] FAT-fs (loop1): Directory bread(block 73) failed [ 330.183307][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.191945][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.200706][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.209188][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.216102][ T842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.377522][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.385857][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.410630][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.418963][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.448348][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.458357][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.486210][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.494409][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.518684][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.531642][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.551041][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.559615][ T910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.604493][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.616100][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.297643][ T23] audit: type=1326 audit(1718129781.667:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef6c3e8ea9 code=0x0 [ 331.527985][ T6596] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 331.535743][ T6596] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.552041][ T6596] F2FS-fs (loop3): invalid crc value [ 331.562648][ T6596] F2FS-fs (loop3): Found nat_bits in checkpoint [ 331.711002][ T6596] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 331.720452][ T6596] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 331.911634][ T6625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.994702][ T6596] attempt to access beyond end of device [ 331.994702][ T6596] loop3: rw=10241, want=45104, limit=40427 [ 332.006283][ T6596] attempt to access beyond end of device [ 332.006283][ T6596] loop3: rw=2049, want=45104, limit=40427 [ 332.018008][ T6627] attempt to access beyond end of device [ 332.018008][ T6627] loop3: rw=2049, want=45104, limit=40427 [ 332.042396][ T6627] attempt to access beyond end of device [ 332.042396][ T6627] loop3: rw=2049, want=45104, limit=40427 [ 332.120292][ T23] audit: type=1400 audit(1718129782.470:2610): avc: denied { getattr } for pid=6630 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 332.120708][ T6631] SELinux: (dev overlay, type overlay) has no security xattr handler [ 332.186988][ T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 332.195703][ T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 333.369731][ T6652] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 333.636896][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 335.837628][ C1] hrtimer: interrupt took 26958 ns [ 336.240714][ T6666] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 336.259657][ T6666] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 336.284830][ T6666] F2FS-fs (loop2): invalid crc value [ 336.314505][ T6666] F2FS-fs (loop2): Found nat_bits in checkpoint [ 336.487563][ T6666] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 336.494524][ T6666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 336.899524][ T6692] F2FS-fs (loop3): invalid crc value [ 337.213350][ T6692] F2FS-fs (loop3): Found nat_bits in checkpoint [ 337.777930][ T6726] SELinux: (dev overlay, type overlay) has no security xattr handler [ 337.795421][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 337.804462][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 337.832024][ T6692] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 337.898172][ T6511] attempt to access beyond end of device [ 337.898172][ T6511] loop3: rw=524288, want=45072, limit=40427 [ 337.914785][ T6511] attempt to access beyond end of device [ 337.914785][ T6511] loop3: rw=0, want=45072, limit=40427 [ 337.983043][ T6511] attempt to access beyond end of device [ 337.983043][ T6511] loop3: rw=2049, want=45104, limit=40427 [ 338.716007][ T6742] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 339.575973][ T9] device bridge_slave_1 left promiscuous mode [ 339.576598][ T23] audit: type=1400 audit(1718129789.356:2611): avc: denied { watch watch_reads } for pid=6750 comm="syz-executor.1" path="/root/syzkaller-testdir3326731155/syzkaller.Z3o3Yk/30/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 339.582300][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.679096][ T23] audit: type=1400 audit(1718129789.448:2612): avc: denied { unmount } for pid=6359 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 339.701228][ T9] device bridge_slave_0 left promiscuous mode [ 339.769954][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.318933][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.340131][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.349293][ T6758] device bridge_slave_0 entered promiscuous mode [ 340.357472][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.364427][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.374504][ T6758] device bridge_slave_1 entered promiscuous mode [ 340.639339][ T6773] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 340.676239][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.683160][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.690372][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.697260][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.751873][ T6762] F2FS-fs (loop2): invalid crc value [ 340.761229][ T6762] F2FS-fs (loop2): Found nat_bits in checkpoint [ 340.765943][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.778347][ T921] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.787360][ T921] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.791388][ T6754] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 340.802008][ T6754] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 340.813698][ T6754] F2FS-fs (loop1): invalid crc value [ 340.821423][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.829750][ T842] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.836634][ T842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.844688][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.853325][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.860401][ T842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.877834][ T6754] F2FS-fs (loop1): Found nat_bits in checkpoint [ 340.905224][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.920469][ T6762] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 340.928637][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.964377][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.986546][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.015170][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.016800][ T6754] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 341.029940][ T6754] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 341.049233][ T367] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 341.051894][ T5433] attempt to access beyond end of device [ 341.051894][ T5433] loop2: rw=524288, want=45072, limit=40427 [ 341.063746][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.068684][ T5433] attempt to access beyond end of device [ 341.068684][ T5433] loop2: rw=0, want=45072, limit=40427 [ 341.092720][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.108882][ T5433] attempt to access beyond end of device [ 341.108882][ T5433] loop2: rw=2049, want=45104, limit=40427 [ 341.329789][ T6754] attempt to access beyond end of device [ 341.329789][ T6754] loop1: rw=10241, want=45104, limit=40427 [ 341.341341][ T6754] attempt to access beyond end of device [ 341.341341][ T6754] loop1: rw=2049, want=45104, limit=40427 [ 341.386189][ T6785] attempt to access beyond end of device [ 341.386189][ T6785] loop1: rw=2049, want=45104, limit=40427 [ 341.457126][ T417] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 341.465980][ T417] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 341.732247][ T367] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 341.758322][ T367] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.801325][ T367] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 341.841854][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.903924][ T367] usb 1-1: config 0 descriptor?? [ 343.216120][ T367] usb 1-1: language id specifier not provided by device, defaulting to English [ 343.404873][ T23] audit: type=1400 audit(1718129792.891:2613): avc: denied { write } for pid=6802 comm="syz-executor.1" name="usbmon7" dev="devtmpfs" ino=1854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 343.434971][ T400] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 343.442489][ T400] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 343.454279][ T400] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 343.497672][ T367] usb 1-1: USB disconnect, device number 16 [ 343.609522][ T6821] input: syz0 as /devices/virtual/input/input39 [ 343.635274][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.643318][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.651580][ T6803] device bridge_slave_0 entered promiscuous mode [ 343.790862][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.797819][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.806394][ T6803] device bridge_slave_1 entered promiscuous mode [ 343.856768][ T6825] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 344.213536][ T178] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 344.565228][ T9] device bridge_slave_1 left promiscuous mode [ 344.574068][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.603189][ T9] device bridge_slave_0 left promiscuous mode [ 344.618643][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.832530][ T399] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 344.839928][ T399] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 344.849845][ T399] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 344.930054][ T6850] input: syz0 as /devices/virtual/input/input40 [ 345.044425][ T6854] input: syz0 as /devices/virtual/input/input41 [ 345.070832][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.085370][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.124082][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.261249][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.287256][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.294151][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.403695][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.415390][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.482192][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.490563][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.497446][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.521374][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 345.529931][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.545229][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 345.553579][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.608405][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.622801][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.654391][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.662566][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.839133][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.850786][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.884794][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.921749][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.941052][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.104020][ T6865] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 346.105414][ T6856] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 346.113969][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.120778][ T6856] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 346.127483][ T6865] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 346.140571][ T6856] F2FS-fs (loop1): invalid crc value [ 346.145344][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.146915][ T6860] device bridge_slave_0 entered promiscuous mode [ 346.155267][ T6856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 346.160142][ T6865] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 346.186869][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.193746][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.202274][ T6860] device bridge_slave_1 entered promiscuous mode [ 346.447219][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.454114][ T6860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.461480][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.468381][ T6860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.840764][ T6856] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 346.851408][ T6856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 347.072306][ T400] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 347.227679][ T910] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.242263][ T910] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.278877][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.288633][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.333186][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.344909][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.366313][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.373496][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.411615][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.432119][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.440578][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.447492][ T842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.482904][ T6885] attempt to access beyond end of device [ 347.482904][ T6885] loop1: rw=10241, want=45104, limit=40427 [ 347.494678][ T400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.504773][ T400] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.528375][ T6885] attempt to access beyond end of device [ 347.528375][ T6885] loop1: rw=2049, want=45104, limit=40427 [ 347.540327][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.554444][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.573071][ T9] device bridge_slave_1 left promiscuous mode [ 347.579957][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.587941][ T9] device bridge_slave_0 left promiscuous mode [ 347.606839][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.616282][ T178] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 347.625134][ T178] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 347.723007][ T400] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.742888][ T400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.775660][ T400] usb 3-1: Product: syz [ 347.779950][ T400] usb 3-1: Manufacturer: syz [ 347.784477][ T400] usb 3-1: SerialNumber: syz [ 347.838444][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.847063][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.879258][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.888998][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.910947][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.920611][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.950485][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.960009][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.987199][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.997188][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.038383][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.047009][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.622218][ T400] cdc_ncm 3-1:1.0: bind() failure [ 348.631567][ T400] usb 3-1: USB disconnect, device number 15 [ 348.646172][ T6894] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 348.659635][ T23] audit: type=1326 audit(1718129797.736:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196d636ea9 code=0x7ffc0000 [ 348.689101][ T23] audit: type=1326 audit(1718129797.736:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f196d636ea9 code=0x7ffc0000 [ 348.713308][ T23] audit: type=1326 audit(1718129797.736:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196d636ea9 code=0x7ffc0000 [ 348.739089][ T6891] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 348.971089][ T6903] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.000714][ T6903] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set [ 349.017907][ T6903] Quota error (device loop4): write_blk: dquota write failed [ 349.025323][ T6903] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 349.035555][ T6903] EXT4-fs (loop4): 1 truncate cleaned up [ 349.041041][ T6903] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 349.820209][ T6917] 9pnet: Insufficient options for proto=fd [ 350.138240][ T23] audit: type=1400 audit(1718129799.103:2617): avc: denied { ioctl } for pid=6923 comm="syz-executor.3" path="/root/syzkaller-testdir1812469159/syzkaller.8rC1Rz/18/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.282258][ T23] audit: type=1326 audit(1718129799.232:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7ffc0000 [ 350.375261][ T6938] fuse: Bad value for 'fd' [ 350.379697][ T23] audit: type=1326 audit(1718129799.232:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4efeea2ea9 code=0x7ffc0000 [ 350.544896][ T23] audit: type=1326 audit(1718129799.232:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7ffc0000 [ 350.569674][ T23] audit: type=1326 audit(1718129799.232:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7ffc0000 [ 350.661073][ T6945] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 350.702263][ T910] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 351.278673][ T6934] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 351.291281][ T6934] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 351.335183][ T6934] F2FS-fs (loop4): invalid crc value [ 351.338455][ T910] usb 4-1: Using ep0 maxpacket: 32 [ 351.380242][ T6934] F2FS-fs (loop4): Found nat_bits in checkpoint [ 351.484972][ T6934] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 351.492085][ T6934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 351.514869][ T5524] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 351.645111][ T910] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 351.687449][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.805303][ T910] usb 4-1: Product: syz [ 351.841681][ T6928] attempt to access beyond end of device [ 351.841681][ T6928] loop4: rw=10241, want=45104, limit=40427 [ 351.853154][ T6928] attempt to access beyond end of device [ 351.853154][ T6928] loop4: rw=2049, want=45104, limit=40427 [ 351.872475][ T910] usb 4-1: Manufacturer: syz [ 351.876922][ T910] usb 4-1: SerialNumber: syz [ 351.883883][ T6934] attempt to access beyond end of device [ 351.883883][ T6934] loop4: rw=2049, want=45104, limit=40427 [ 351.895864][ T910] usb 4-1: config 0 descriptor?? [ 351.903533][ T6553] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 351.911395][ T5524] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.926494][ T6553] FAT-fs (loop0): Filesystem has been set read-only [ 351.933809][ T5524] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.959911][ T6553] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 352.080390][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 352.092650][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 352.103742][ T6969] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 352.143388][ T5524] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.162986][ T5524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.188902][ T5524] usb 2-1: Product: syz [ 352.193182][ T5524] usb 2-1: Manufacturer: syz [ 352.201005][ T6967] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 352.209822][ T5524] usb 2-1: SerialNumber: syz [ 352.219259][ T6967] ext4 filesystem being mounted at /root/syzkaller-testdir940431087/syzkaller.avDA51/31/file0 supports timestamps until 2038 (0x7fffffff) [ 352.652569][ T910] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:92:f8:05:c9:6b [ 352.680789][ T910] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 352.688701][ T910] usb 4-1: USB disconnect, device number 20 [ 353.085896][ T5524] cdc_ncm 2-1:1.0: bind() failure [ 353.094302][ T5524] usb 2-1: USB disconnect, device number 26 [ 353.148013][ T6989] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 353.350141][ T6998] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 353.359911][ T6998] ext4 filesystem being mounted at /root/syzkaller-testdir874740328/syzkaller.bxWXZy/9/file0 supports timestamps until 2038 (0x7fffffff) [ 353.399814][ T7011] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 354.170605][ T7036] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 354.193369][ T7038] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 354.240385][ T7036] ext4 filesystem being mounted at /root/syzkaller-testdir874740328/syzkaller.bxWXZy/11/file0 supports timestamps until 2038 (0x7fffffff) [ 354.566135][ T5524] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 354.617856][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.830109][ T5524] usb 4-1: Using ep0 maxpacket: 32 [ 354.960231][ T5524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.981768][ T5524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.989347][ T7080] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 355.001550][ T5524] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 355.010733][ T5524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.032219][ T5524] usb 4-1: config 0 descriptor?? [ 355.080754][ T5524] hub 4-1:0.0: USB hub found [ 355.317776][ T5524] hub 4-1:0.0: 1 port detected [ 355.333254][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.353342][ T7098] EXT4-fs (loop4): Ignoring removed orlov option [ 355.399490][ T7098] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,errors=continue,,errors=continue [ 355.519389][ T7098] EXT4-fs error (device loop4): ext4_remount:5517: Abort forced by user [ 355.530105][ T7098] EXT4-fs (loop4): Remounting filesystem read-only [ 356.021954][ T5] hub 4-1:0.0: activate --> -90 [ 356.054077][ T7141] EXT4-fs (loop2): Ignoring removed orlov option [ 356.089171][ T7141] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,errors=continue,,errors=continue [ 356.123302][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 356.123334][ T23] audit: type=1326 audit(1718129804.631:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.166669][ T23] audit: type=1326 audit(1718129804.631:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.192280][ T23] audit: type=1326 audit(1718129804.668:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.216208][ T7141] EXT4-fs error (device loop2): ext4_remount:5517: Abort forced by user [ 356.236300][ T7141] EXT4-fs (loop2): Remounting filesystem read-only [ 356.269578][ T23] audit: type=1326 audit(1718129804.668:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.309905][ T23] audit: type=1326 audit(1718129804.668:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.369442][ T23] audit: type=1326 audit(1718129804.668:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.393446][ T23] audit: type=1326 audit(1718129804.668:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.417887][ T23] audit: type=1326 audit(1718129804.668:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.442057][ T23] audit: type=1326 audit(1718129804.687:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 356.466153][ T23] audit: type=1326 audit(1718129804.687:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef7629ea9 code=0x7ffc0000 [ 358.790218][ T400] usb 4-1: USB disconnect, device number 21 [ 358.806427][ T5] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 359.257451][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.446539][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.769613][ T7199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7199 comm=syz-executor.3 [ 359.794040][ T7199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7199 comm=syz-executor.3 [ 360.825991][ T7224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.439580][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.614352][ T7233] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 363.110938][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.056228][ T7280] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 364.338079][ T7291] fuse: Bad value for 'fd' [ 365.272513][ T7304] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 365.369244][ T7272] F2FS-fs (loop0): Found nat_bits in checkpoint [ 365.790667][ T7325] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.914723][ T7272] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 366.587516][ T7327] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 366.814770][ T7308] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 366.822447][ T7308] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 366.859438][ T7308] F2FS-fs (loop4): invalid crc value [ 367.042360][ T7308] F2FS-fs (loop4): Found nat_bits in checkpoint [ 367.935004][ T7308] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 367.951275][ T7308] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 368.009434][ T7360] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.226239][ T7308] attempt to access beyond end of device [ 368.226239][ T7308] loop4: rw=10241, want=45104, limit=40427 [ 368.238260][ T7308] attempt to access beyond end of device [ 368.238260][ T7308] loop4: rw=2049, want=45104, limit=40427 [ 368.257483][ T7366] attempt to access beyond end of device [ 368.257483][ T7366] loop4: rw=2049, want=45104, limit=40427 [ 368.453409][ T417] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 368.468216][ T417] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 369.036065][ T7365] F2FS-fs (loop0): Found nat_bits in checkpoint [ 369.296521][ T7365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 369.434904][ T6553] attempt to access beyond end of device [ 369.434904][ T6553] loop0: rw=2049, want=45104, limit=40427 [ 369.449877][ T7410] EXT4-fs (sda1): Ignoring removed nomblk_io_submit option [ 369.473099][ T7410] EXT4-fs (sda1): Cannot specify journal on remount [ 369.837763][ T7402] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 369.845344][ T7402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 369.872985][ T7402] F2FS-fs (loop1): invalid crc value [ 369.881386][ T7402] F2FS-fs (loop1): Found nat_bits in checkpoint [ 369.900535][ T5524] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 369.952720][ T7427] EXT4-fs (loop2): Ignoring removed nobh option [ 369.985633][ T7402] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 369.992854][ T7402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 370.003006][ T7427] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.2: corrupted xattr block 8 [ 370.026664][ T7427] EXT4-fs (loop2): Remounting filesystem read-only [ 370.033096][ T7427] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -117) [ 370.052241][ T7427] EXT4-fs (loop2): 1 orphan inode deleted [ 370.057891][ T7427] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid, [ 370.089713][ T7427] ext4 filesystem being mounted at /root/syzkaller-testdir722546595/syzkaller.lXDVAf/40/file1 supports timestamps until 2038 (0x7fffffff) [ 370.301768][ T5524] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 370.338100][ T5524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 371.000761][ T5524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 371.099787][ T7402] attempt to access beyond end of device [ 371.099787][ T7402] loop1: rw=10241, want=45104, limit=40427 [ 371.111303][ T7402] attempt to access beyond end of device [ 371.111303][ T7402] loop1: rw=2049, want=45104, limit=40427 [ 371.123052][ T7435] attempt to access beyond end of device [ 371.123052][ T7435] loop1: rw=2049, want=45104, limit=40427 [ 371.144389][ T5524] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.157666][ T5524] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.166555][ T5524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.176643][ T5524] usb 5-1: config 0 descriptor?? [ 371.200717][ T7418] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 371.210862][ T417] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 371.221041][ T417] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 371.691239][ T5524] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 371.713402][ T5524] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 371.754184][ T5524] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 371.992688][ T5524] usb 5-1: USB disconnect, device number 19 [ 372.073144][ T7453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.087633][ T7448] F2FS-fs (loop2): Found nat_bits in checkpoint [ 372.243701][ T7448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 372.252299][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.377235][ T6803] attempt to access beyond end of device [ 372.377235][ T6803] loop2: rw=2049, want=45104, limit=40427 [ 373.420883][ T7471] EXT4-fs (loop4): Ignoring removed nobh option [ 373.457815][ T7471] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.4: corrupted xattr block 8 [ 373.491871][ T7471] EXT4-fs (loop4): Remounting filesystem read-only [ 373.530017][ T7471] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -117) [ 373.538916][ T7471] EXT4-fs (loop4): 1 orphan inode deleted [ 373.573398][ T7471] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid, [ 373.595835][ T7471] ext4 filesystem being mounted at /root/syzkaller-testdir874740328/syzkaller.bxWXZy/35/file1 supports timestamps until 2038 (0x7fffffff) [ 373.868102][ T7479] EXT4-fs (loop1): Unrecognized mount option "grpq" or missing value [ 374.649048][ T7467] F2FS-fs (loop0): invalid crc value [ 374.673937][ T7467] F2FS-fs (loop0): Found nat_bits in checkpoint [ 374.820477][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 374.862785][ T7467] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 374.891531][ T7491] bridge1: port 1(gretap1) entered blocking state [ 374.903736][ T7493] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.939101][ T7491] bridge1: port 1(gretap1) entered disabled state [ 374.946792][ T7491] device gretap1 entered promiscuous mode [ 375.083164][ T7495] EXT4-fs (loop2): filesystem is read-only [ 375.624570][ T7487] F2FS-fs (loop1): Unrecognized mount option "errors=remount-ro" or missing value [ 375.680884][ T400] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 376.620596][ T7522] EXT4-fs (loop3): Ignoring removed nobh option [ 376.630757][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.644168][ T7529] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.653784][ T400] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 376.673380][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 376.685574][ T7522] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.3: corrupted xattr block 8 [ 376.693616][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 376.709435][ T7522] EXT4-fs (loop3): Remounting filesystem read-only [ 376.719792][ T400] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.727078][ T7522] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -117) [ 376.743529][ T400] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.752523][ T7522] EXT4-fs (loop3): 1 orphan inode deleted [ 376.752827][ T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.758107][ T7522] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid, [ 376.758336][ T7522] ext4 filesystem being mounted at /root/syzkaller-testdir1812469159/syzkaller.8rC1Rz/51/file1 supports timestamps until 2038 (0x7fffffff) [ 376.780139][ T400] usb 5-1: config 0 descriptor?? [ 376.845360][ T7508] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 377.736611][ T400] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 377.758715][ T400] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 377.788175][ T400] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 377.985830][ T24] usb 5-1: USB disconnect, device number 20 [ 378.343124][ T23] kauditd_printk_skb: 485 callbacks suppressed [ 378.343156][ T23] audit: type=1326 audit(1718129825.140:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32fe3a2ea9 code=0x0 [ 378.483056][ T23] audit: type=1400 audit(1718129825.270:3118): avc: denied { read } for pid=7559 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 378.615432][ T7562] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.128523][ T7572] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 379.144774][ T7572] EXT4-fs (sda1): Online defrag not supported for encrypted files [ 379.741370][ T23] audit: type=1400 audit(1718129826.433:3119): avc: denied { mounton } for pid=7597 comm="syz-executor.3" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 379.764873][ T7596] EXT4-fs (sda1): Online defrag not supported for encrypted files [ 379.845496][ T7533] F2FS-fs (loop1): invalid crc value [ 379.892215][ T7533] F2FS-fs (loop1): Found nat_bits in checkpoint [ 380.014301][ T9] device bridge_slave_1 left promiscuous mode [ 380.020571][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.036773][ T9] device bridge_slave_0 left promiscuous mode [ 380.043692][ T7605] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 380.050007][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.061250][ T7605] EXT4-fs (loop2): invalid journal inode [ 380.073156][ T7605] EXT4-fs (loop2): can't get journal size [ 380.090423][ T7605] EXT4-fs (loop2): 1 truncate cleaned up [ 380.104849][ T7605] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 380.487473][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.505031][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.522832][ T7597] device bridge_slave_0 entered promiscuous mode [ 380.530983][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.538080][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.546637][ T7597] device bridge_slave_1 entered promiscuous mode [ 380.563611][ T7593] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 380.574852][ T7593] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 380.621700][ T7593] F2FS-fs (loop4): invalid crc value [ 380.669347][ T7593] F2FS-fs (loop4): Found nat_bits in checkpoint [ 380.897759][ T7593] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 380.914831][ T7593] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 380.961040][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.968004][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.975215][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.982607][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.069563][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.079744][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.100194][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.122007][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.145584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.154711][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.161626][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.170747][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.180189][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.187099][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.194466][ T23] audit: type=1326 audit(1718129827.762:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fe3a2ea9 code=0x7fc00000 [ 381.244166][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 381.287986][ T23] audit: type=1326 audit(1718129827.762:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32fe3a2ea9 code=0x7fc00000 [ 381.301974][ T7593] attempt to access beyond end of device [ 381.301974][ T7593] loop4: rw=10241, want=45104, limit=40427 [ 381.324286][ T7593] attempt to access beyond end of device [ 381.324286][ T7593] loop4: rw=2049, want=45104, limit=40427 [ 381.338011][ T7625] attempt to access beyond end of device [ 381.338011][ T7625] loop4: rw=2049, want=45104, limit=40427 [ 381.356852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.389299][ T23] audit: type=1326 audit(1718129827.762:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fe3a2ea9 code=0x7fc00000 [ 381.397772][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.455862][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 381.465080][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 381.474043][ T23] audit: type=1326 audit(1718129827.762:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fe3a2ea9 code=0x7fc00000 [ 381.507024][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.520128][ T23] audit: type=1326 audit(1718129827.762:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fe3a2ea9 code=0x7fc00000 [ 381.527775][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.561505][ T7629] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 381.576708][ T23] audit: type=1326 audit(1718129827.762:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fe3a2ea9 code=0x7fc00000 [ 381.580714][ T7629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 381.628262][ T23] audit: type=1326 audit(1718129827.762:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fe3a2ea9 code=0x7fc00000 [ 381.634471][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.652265][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 381.675915][ T7629] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 381.678900][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.720035][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.729519][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.754847][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.763438][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.783901][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.793477][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.991765][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 382.012991][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.038475][ T24] usb 1-1: Product: syz [ 382.048363][ T24] usb 1-1: Manufacturer: syz [ 382.121801][ T24] usb 1-1: config 0 descriptor?? [ 382.988840][ T7642] overlayfs: invalid origin (790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 383.031837][ T24] r8152 1-1:0.0: Unknown version 0x0000 [ 383.331285][ T399] usb 1-1: USB disconnect, device number 17 [ 383.370898][ T7663] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 383.384126][ T7663] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 383.404829][ T7663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 383.422275][ T7663] System zones: 1-12 [ 383.429259][ T7663] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 383.441919][ T7663] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 383.457912][ T7663] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue [ 384.064154][ T7682] F2FS-fs (loop3): invalid crc value [ 384.092021][ T7682] F2FS-fs (loop3): Found nat_bits in checkpoint [ 384.225827][ T7702] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 384.249225][ T7702] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 384.283834][ T7702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 384.298942][ T7702] System zones: 1-12 [ 384.304825][ T7682] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 384.309094][ T7702] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 384.333745][ T23] kauditd_printk_skb: 50 callbacks suppressed [ 384.333775][ T23] audit: type=1400 audit(1718129830.669:3177): avc: denied { mount } for pid=7704 comm="syz-executor.2" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 384.373098][ T7702] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 384.395338][ T7702] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue [ 384.414039][ T23] audit: type=1400 audit(1718129830.743:3178): avc: denied { unmount } for pid=6803 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 384.751207][ T7696] F2FS-fs (loop0): Unrecognized mount option "errors=remount-ro" or missing value [ 384.770384][ T7729] overlayfs: invalid origin (790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 385.190516][ T7754] EXT4-fs (loop4): Ignoring removed orlov option [ 385.200271][ T7754] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 385.215610][ T7760] overlayfs: invalid origin (790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 385.245482][ T7754] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x0000000000000000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 385.248729][ T7756] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 385.277993][ T7756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 385.291116][ T7756] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 385.411268][ T6860] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 16: comm syz-executor.4: lblock 0 mapped to illegal pblock 16 (length 1) [ 385.458726][ T6860] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 386.494116][ T7792] overlayfs: invalid origin (790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 386.715373][ T842] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 386.752714][ T23] audit: type=1400 audit(1718129832.903:3179): avc: denied { lock } for pid=7800 comm="syz-executor.0" path="socket:[47735]" dev="sockfs" ino=47735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 386.779717][ T7801] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.814743][ T7787] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 386.822331][ T7787] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 386.875817][ T7787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 387.011632][ T7787] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 387.018744][ T7787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 387.056032][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.066676][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.081055][ T7804] device bridge_slave_0 entered promiscuous mode [ 387.084791][ T6359] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 387.084809][ T6359] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 387.095376][ T6359] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 387.102854][ T6359] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 387.110771][ T6359] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 387.113574][ T417] device gretap1 left promiscuous mode [ 387.118636][ T6359] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 387.118653][ T6359] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 387.138898][ T417] bridge1: port 1(gretap1) entered disabled state [ 387.159626][ T842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.176927][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.179355][ T842] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.184109][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.185655][ T7804] device bridge_slave_1 entered promiscuous mode [ 387.216059][ T842] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.226310][ T842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.236856][ T7823] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 387.247426][ T842] usb 3-1: config 0 descriptor?? [ 387.292577][ T9] Trying to write to read-only block-device loop1 (partno 0) [ 387.309933][ T7827] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 387.322035][ T7827] device lo entered promiscuous mode [ 387.329112][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 387.351894][ T7822] device lo left promiscuous mode [ 387.410010][ T417] device bridge_slave_1 left promiscuous mode [ 387.418133][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.433060][ T417] device bridge_slave_0 left promiscuous mode [ 387.439260][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.617761][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.627160][ T7834] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 387.769050][ T842] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 387.783485][ T842] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 387.806918][ T842] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 387.847249][ T23] audit: type=1400 audit(1718129833.909:3180): avc: denied { module_load } for pid=7845 comm="syz-executor.1" path="/root/syzkaller-testdir3326731155/syzkaller.Z3o3Yk/113/file0" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=system permissive=1 [ 387.924719][ T23] audit: type=1400 audit(1718129833.983:3181): avc: denied { mounton } for pid=7847 comm="syz-executor.0" path=2F726F6F742F73797A6B616C6C65722D746573746469723934303433313038372F73797A6B616C6C65722E6176444135312F39382FE91F7189591E9233614B dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 387.975356][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.991021][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.009385][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.019125][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.032062][ T842] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.038981][ T842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.051251][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.060934][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.069375][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.076269][ T842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.085349][ T7857] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 388.105467][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.125582][ T7857] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 388.133727][ T7857] device lo entered promiscuous mode [ 388.166157][ T7856] device lo left promiscuous mode [ 388.179763][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.194222][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.208130][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.225877][ T7863] device wg2 entered promiscuous mode [ 388.247408][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 388.258338][ T7867] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 388.277529][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.308017][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.350368][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.378698][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.388757][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.414548][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.423965][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.485484][ T7886] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 388.496643][ T7886] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 388.505406][ T7886] device lo entered promiscuous mode [ 388.513058][ T7885] device lo left promiscuous mode [ 388.527550][ T7888] EXT4-fs (loop4): Ignoring removed orlov option [ 388.533878][ T7888] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 388.550828][ T7888] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x0000000000000000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 388.661064][ T7804] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 16: comm syz-executor.4: lblock 0 mapped to illegal pblock 16 (length 1) [ 388.671556][ T7901] binder: 7900:7901 unknown command 0 [ 388.675783][ T7804] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 388.681627][ T7901] binder: 7900:7901 ioctl c0306201 200003c0 returned -22 [ 388.707651][ T7901] binder: transaction release 39 bad handle 1, ret = -22 [ 388.882272][ T5524] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 388.988977][ T23] audit: type=1326 audit(1718129834.961:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 389.408095][ T24] usb 3-1: USB disconnect, device number 16 [ 389.881979][ T7913] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,jqfmt=vfsv0,grpjquota=,init_itable=0x0000000000000005, [ 389.911355][ T5524] usb 1-1: Using ep0 maxpacket: 16 [ 389.918941][ T7913] EXT4-fs error (device loop2): ext4_search_dir:1509: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=0, size=2048 fake=0 [ 389.945349][ T7913] EXT4-fs (loop2): Remounting filesystem read-only [ 389.980929][ T7922] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 390.015084][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.022530][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.033884][ T7910] device bridge_slave_0 entered promiscuous mode [ 390.046707][ T7922] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 390.057620][ T7922] device lo entered promiscuous mode [ 390.065488][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 390.074681][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.081633][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.090004][ T7910] device bridge_slave_1 entered promiscuous mode [ 390.101962][ T7920] device lo left promiscuous mode [ 390.193181][ T5524] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 390.202090][ T5524] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.209949][ T5524] usb 1-1: Product: syz [ 390.213876][ T5524] usb 1-1: Manufacturer: syz [ 390.221089][ T7934] EXT4-fs (loop3): Ignoring removed orlov option [ 390.228527][ T7934] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 390.236210][ T5524] usb 1-1: config 0 descriptor?? [ 390.254611][ T7934] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resgid=0x0000000000000000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 390.387388][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.394308][ T7910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.401637][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.408510][ T7910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.416530][ T7597] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 16: comm syz-executor.3: lblock 0 mapped to illegal pblock 16 (length 1) [ 390.432687][ T7597] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 390.475427][ T417] device bridge_slave_1 left promiscuous mode [ 390.481520][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.489867][ T417] device bridge_slave_0 left promiscuous mode [ 390.495948][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.507483][ T5524] r8152 1-1:0.0: Unknown version 0x0000 [ 390.636977][ T921] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.644382][ T921] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.652506][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 390.661097][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 390.674410][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 390.680629][ T842] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 390.683633][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.696521][ T5524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.714776][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 390.723193][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.728038][ T400] usb 1-1: USB disconnect, device number 18 [ 390.730099][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.764746][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.780175][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.844900][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.868099][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.896549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.924725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.941046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 391.103246][ T842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.114280][ T842] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.127207][ T842] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.136238][ T842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.149435][ T842] usb 3-1: config 0 descriptor?? [ 391.161184][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.169061][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.177265][ T7950] device bridge_slave_0 entered promiscuous mode [ 391.191525][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.198489][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.206929][ T7950] device bridge_slave_1 entered promiscuous mode [ 391.263822][ T7961] overlayfs: statfs failed on './file0' [ 391.280329][ T23] audit: type=1326 audit(1718129837.075:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.310447][ T23] audit: type=1326 audit(1718129837.075:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.335676][ T23] audit: type=1326 audit(1718129837.075:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.367379][ T23] audit: type=1326 audit(1718129837.075:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.399365][ T23] audit: type=1326 audit(1718129837.075:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.428687][ T23] audit: type=1326 audit(1718129837.075:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.482829][ T23] audit: type=1326 audit(1718129837.075:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.516264][ T23] audit: type=1326 audit(1718129837.075:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.543907][ T23] audit: type=1326 audit(1718129837.093:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efeea2ea9 code=0x7fc00000 [ 391.599629][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.606554][ T7950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.613792][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.620750][ T7950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.640564][ T7972] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 391.668858][ T7972] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 391.676983][ T7972] device lo entered promiscuous mode [ 391.684110][ T7972] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 391.692229][ T842] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 391.695253][ T7970] device lo left promiscuous mode [ 391.714627][ T842] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 391.744090][ T842] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 391.809355][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.829128][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.840905][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.872944][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.893378][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.900275][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.934283][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 391.943981][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.950876][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.960884][ T417] device bridge_slave_1 left promiscuous mode [ 391.966941][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.994639][ T417] device bridge_slave_0 left promiscuous mode [ 392.013514][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.258613][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.273608][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.284946][ T7995] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.319759][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.337898][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.389312][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.403590][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 392.445403][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.456210][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.474331][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.533067][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.543994][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.586634][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.608692][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.662959][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.697912][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.170163][ T842] usb 3-1: USB disconnect, device number 17 [ 394.351748][ T23] audit: type=1400 audit(1718129839.913:3192): avc: denied { mount } for pid=8028 comm="syz-executor.1" name="/" dev="tmpfs" ino=49552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 394.420364][ T8031] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 394.961582][ T8020] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 394.969158][ T8020] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 395.019647][ T8062] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 395.033083][ T8020] F2FS-fs (loop3): Found nat_bits in checkpoint [ 395.252527][ T8020] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 395.268936][ T8020] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 395.303347][ T8020] attempt to access beyond end of device [ 395.303347][ T8020] loop3: rw=10241, want=45104, limit=40427 [ 395.621343][ T8086] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 395.647175][ T8086] ext4 filesystem being mounted at /root/syzkaller-testdir722546595/syzkaller.lXDVAf/102/file1 supports timestamps until 2038 (0x7fffffff) [ 395.680243][ T8093] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 395.963970][ T8086] EXT4-fs (loop2): re-mounted. Opts: (null) [ 396.260235][ T1141] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 396.342294][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 396.609559][ T8122] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 396.628723][ T8122] tipc: Started in network mode [ 396.639215][ T8122] tipc: Own node identity aaaaaaaaaa0c, cluster identity 4711 [ 396.650376][ T1141] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.666130][ T8122] tipc: Enabled bearer , priority 0 [ 396.673022][ T1141] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.879556][ T8128] EXT4-fs (loop1): barriers disabled [ 396.885366][ T8128] JBD2: no valid journal superblock found [ 396.891333][ T8128] EXT4-fs (loop1): error loading journal [ 397.473420][ T1141] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 397.483779][ T1141] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 397.582145][ T1141] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 397.598010][ T1141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 397.614668][ T1141] usb 3-1: SerialNumber: syz [ 397.752366][ T921] tipc: 32-bit node address hash set to aaaaa600 [ 397.853031][ T8141] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 397.862723][ T8141] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 397.873912][ T8141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 397.881917][ T8141] System zones: 1-12 [ 397.887254][ T8141] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 397.907297][ T8141] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 397.921623][ T1141] usb 3-1: 0:2 : does not exist [ 397.926427][ T1141] usb 3-1: unit 5 not found! [ 397.950577][ T1141] usb 3-1: USB disconnect, device number 18 [ 397.956780][ T8141] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue [ 398.139220][ T8133] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 398.145419][ T5] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 398.153971][ T8133] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 398.189930][ T8133] F2FS-fs (loop3): Found nat_bits in checkpoint [ 398.291431][ T8133] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 398.298512][ T8133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 398.356299][ T8133] attempt to access beyond end of device [ 398.356299][ T8133] loop3: rw=10241, want=45104, limit=40427 [ 398.470715][ T921] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 398.516343][ T8150] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 398.534998][ T8150] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 398.553990][ T8150] F2FS-fs (loop1): invalid crc value [ 398.582247][ T8150] F2FS-fs (loop1): Found nat_bits in checkpoint [ 398.646368][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.697762][ T8150] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 398.704901][ T8150] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 398.779479][ T6359] attempt to access beyond end of device [ 398.779479][ T6359] loop1: rw=2049, want=45112, limit=40427 [ 398.838943][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.893650][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.901842][ T5] usb 1-1: Product: syz [ 398.905980][ T5] usb 1-1: Manufacturer: syz [ 398.910413][ T5] usb 1-1: SerialNumber: syz [ 399.283509][ T921] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 399.305516][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 399.413644][ T921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 399.737377][ T921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.756376][ T921] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.765589][ T921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.775609][ T921] usb 5-1: config 0 descriptor?? [ 399.792971][ T8156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 399.961546][ T8181] FAT-fs (loop3): Directory bread(block 64) failed [ 399.976422][ T8181] FAT-fs (loop3): Directory bread(block 65) failed [ 399.987282][ T8181] FAT-fs (loop3): Directory bread(block 66) failed [ 400.004608][ T8181] FAT-fs (loop3): Directory bread(block 67) failed [ 400.011085][ T8181] FAT-fs (loop3): Directory bread(block 68) failed [ 400.028394][ T8181] FAT-fs (loop3): Directory bread(block 69) failed [ 400.039441][ T8181] FAT-fs (loop3): Directory bread(block 70) failed [ 400.061124][ T8181] FAT-fs (loop3): Directory bread(block 71) failed [ 400.082991][ T8181] FAT-fs (loop3): Directory bread(block 72) failed [ 400.089435][ T8181] FAT-fs (loop3): Directory bread(block 73) failed [ 400.283017][ T921] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd [ 400.294679][ T921] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 400.308845][ T921] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 400.337963][ T8192] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 400.353094][ T8192] ext4 filesystem being mounted at /root/syzkaller-testdir1614518856/syzkaller.Kh9udL/13/file1 supports timestamps until 2038 (0x7fffffff) [ 400.598299][ T921] usb 5-1: USB disconnect, device number 21 [ 400.614641][ T5] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 400.621082][ T5] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 400.631747][ T5] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 400.631915][ T8192] EXT4-fs (loop3): re-mounted. Opts: (null) [ 400.784248][ T8201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.821559][ T5] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 400.834079][ T5] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 400.849072][ T5] usb 1-1: USB disconnect, device number 19 [ 400.855440][ T5] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 401.059879][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 401.764102][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.784116][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.824649][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 401.854935][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 401.991685][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 402.000586][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 402.039526][ T24] usb 4-1: SerialNumber: syz [ 402.050650][ T8222] FAT-fs (loop2): Directory bread(block 64) failed [ 402.067440][ T8222] FAT-fs (loop2): Directory bread(block 65) failed [ 402.073921][ T8222] FAT-fs (loop2): Directory bread(block 66) failed [ 402.091372][ T8222] FAT-fs (loop2): Directory bread(block 67) failed [ 402.097791][ T8222] FAT-fs (loop2): Directory bread(block 68) failed [ 402.121618][ T8222] FAT-fs (loop2): Directory bread(block 69) failed [ 402.139165][ T8222] FAT-fs (loop2): Directory bread(block 70) failed [ 402.149890][ T8222] FAT-fs (loop2): Directory bread(block 71) failed [ 402.160990][ T8222] FAT-fs (loop2): Directory bread(block 72) failed [ 402.171933][ T8222] FAT-fs (loop2): Directory bread(block 73) failed [ 402.361940][ T24] usb 4-1: 0:2 : does not exist [ 402.366742][ T24] usb 4-1: unit 5 not found! [ 402.375692][ T24] usb 4-1: USB disconnect, device number 22 [ 402.403214][ T400] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 402.444672][ T8217] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 402.452875][ T8217] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 402.461458][ T8236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.490058][ T8217] F2FS-fs (loop0): invalid crc value [ 402.500386][ T8217] F2FS-fs (loop0): Found nat_bits in checkpoint [ 402.606978][ T8217] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 402.614075][ T8217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 402.681017][ T6553] attempt to access beyond end of device [ 402.681017][ T6553] loop0: rw=2049, want=45112, limit=40427 [ 402.793675][ T400] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 402.804159][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 402.836600][ T5524] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 402.844619][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 402.855786][ T400] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.868679][ T400] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.001728][ T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.011776][ T400] usb 5-1: config 0 descriptor?? [ 403.031873][ T8231] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.056434][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.337214][ T8253] loop1: p1 < > p4 [ 403.342402][ T8253] loop1: p4 size 8388608 extends beyond EOD, truncated [ 403.349537][ T5524] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.744705][ T400] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd [ 403.756036][ T400] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 403.779845][ T400] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 403.877972][ T921] usb 5-1: USB disconnect, device number 22 [ 403.920429][ T5524] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.929380][ T5524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.937434][ T5524] usb 3-1: Product: syz [ 403.941483][ T5524] usb 3-1: Manufacturer: syz [ 403.945893][ T5524] usb 3-1: SerialNumber: syz [ 403.951781][ T8266] FAT-fs (loop0): Directory bread(block 64) failed [ 403.958401][ T8266] FAT-fs (loop0): Directory bread(block 65) failed [ 403.964921][ T8266] FAT-fs (loop0): Directory bread(block 66) failed [ 403.998044][ T8266] FAT-fs (loop0): Directory bread(block 67) failed [ 404.005722][ T8266] FAT-fs (loop0): Directory bread(block 68) failed [ 404.012491][ T8266] FAT-fs (loop0): Directory bread(block 69) failed [ 404.019157][ T8266] FAT-fs (loop0): Directory bread(block 70) failed [ 404.025585][ T8266] FAT-fs (loop0): Directory bread(block 71) failed [ 404.032455][ T8266] FAT-fs (loop0): Directory bread(block 72) failed [ 404.038865][ T8266] FAT-fs (loop0): Directory bread(block 73) failed [ 404.068650][ T8271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.262985][ T8280] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 404.278023][ T8280] ext4 filesystem being mounted at /root/syzkaller-testdir1614518856/syzkaller.Kh9udL/16/file1 supports timestamps until 2038 (0x7fffffff) [ 404.499444][ T8280] EXT4-fs (loop3): re-mounted. Opts: (null) [ 404.571465][ T8300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.721790][ T400] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 404.757086][ T8310] FAT-fs (loop1): Directory bread(block 64) failed [ 404.763612][ T8310] FAT-fs (loop1): Directory bread(block 65) failed [ 404.770424][ T8310] FAT-fs (loop1): Directory bread(block 66) failed [ 404.777285][ T8310] FAT-fs (loop1): Directory bread(block 67) failed [ 404.783823][ T8310] FAT-fs (loop1): Directory bread(block 68) failed [ 404.790421][ T8310] FAT-fs (loop1): Directory bread(block 69) failed [ 404.796913][ T8310] FAT-fs (loop1): Directory bread(block 70) failed [ 404.803375][ T8310] FAT-fs (loop1): Directory bread(block 71) failed [ 404.810677][ T8310] FAT-fs (loop1): Directory bread(block 72) failed [ 404.817034][ T8310] FAT-fs (loop1): Directory bread(block 73) failed [ 405.212373][ T921] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 405.492106][ T8315] loop1: p1 < > p4 [ 405.497087][ T8315] loop1: p4 size 8388608 extends beyond EOD, truncated [ 405.503997][ T5524] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 405.510246][ T5524] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 405.518667][ T5524] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 405.642876][ T921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.652825][ T921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.664479][ T400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.675813][ T921] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 405.686642][ T921] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 405.687018][ T400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.708900][ T400] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 405.717805][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.730221][ T5524] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 405.740542][ T400] usb 1-1: config 0 descriptor?? [ 405.756359][ T5524] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 405.770532][ T5524] usb 3-1: USB disconnect, device number 19 [ 405.776794][ T5524] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 405.802171][ T921] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 405.813372][ T921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 405.822010][ T921] usb 4-1: SerialNumber: syz [ 405.912069][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.142801][ T921] usb 4-1: 0:2 : does not exist [ 406.147601][ T921] usb 4-1: unit 5 not found! [ 406.160206][ T921] usb 4-1: USB disconnect, device number 23 [ 406.241064][ T400] hid-rmi 0003:17EF:6085.0027: unknown main item tag 0x0 [ 406.248284][ T400] hid-rmi 0003:17EF:6085.0027: unknown main item tag 0x0 [ 406.255439][ T400] hid-rmi 0003:17EF:6085.0027: unknown main item tag 0x0 [ 406.262351][ T400] hid-rmi 0003:17EF:6085.0027: unknown main item tag 0x0 [ 406.269155][ T400] hid-rmi 0003:17EF:6085.0027: unknown main item tag 0x0 [ 406.278312][ T400] hid-rmi 0003:17EF:6085.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 406.325237][ T645] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 406.358890][ T8351] loop2: p1 < > p4 [ 406.363836][ T8351] loop2: p4 size 8388608 extends beyond EOD, truncated [ 406.413065][ T1141] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 406.470655][ T400] usb 1-1: USB disconnect, device number 20 [ 406.802128][ T645] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 186, changing to 11 [ 406.813194][ T645] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 32 [ 406.822918][ T645] usb 2-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.823868][ T1141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.835610][ T645] usb 2-1: config 1 interface 0 has no altsetting 0 [ 406.849397][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.862029][ T1141] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.875221][ T1141] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.886800][ T8356] EXT4-fs (loop2): Ignoring removed bh option [ 406.892800][ T1141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.903595][ T1141] usb 5-1: config 0 descriptor?? [ 406.916058][ T8356] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 406.935937][ T8356] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 406.950104][ T8356] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,acl,bh,,errors=continue [ 406.969309][ T8356] ext4 filesystem being mounted at /root/syzkaller-testdir722546595/syzkaller.lXDVAf/118/file1 supports timestamps until 2038 (0x7fffffff) [ 407.080543][ T645] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.127537][ T645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.210398][ T645] usb 2-1: Product: 덾픎楤᜵닺鬤䞢䪓䙍ﴓꌬ㐝䋈假㧅牉䘤൉뇥缲狅㰒꒬晁ꂞ蹶㕛荳⣢煮ꕛﾺ穋ޔ뵴駆ѫ궎顣ᡉ㴅┼科擖奉⮊䱲膦䃺೚縙㇛谅鈸뵊Ⲭ嬓숿 [ 407.257298][ T8365] EXT4-fs (loop3): barriers disabled [ 407.263166][ T8365] JBD2: no valid journal superblock found [ 407.268931][ T8365] EXT4-fs (loop3): error loading journal [ 407.329453][ T8356] EXT4-fs error (device loop2): htree_dirblock_to_tree:1078: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=4096 fake=1 [ 407.389364][ T645] usb 2-1: Manufacturer: Ъ [ 407.407711][ T645] usb 2-1: SerialNumber: Ⰹ [ 407.550146][ T8344] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.556846][ T8344] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.591937][ T6803] EXT4-fs error (device loop2): htree_dirblock_to_tree:1078: inode #2: block 3: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=4096 fake=1 [ 407.692983][ T6803] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 407.715611][ T1141] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 407.723776][ T1141] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 407.735260][ T1141] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 407.907826][ T645] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 407.924329][ T645] usb 2-1: USB disconnect, device number 27 serialport: VM disconnected.