last executing test programs: 3.22729663s ago: executing program 1 (id=568): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3.18498723s ago: executing program 1 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x1, 0x201, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) io_setup(0x7f, &(0x7f0000000300)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f0000000580)=[{}], &(0x7f00000006c0)={0x0, 0x3938700}, 0x0) 3.000729193s ago: executing program 1 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 2.928998454s ago: executing program 1 (id=578): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x800000, &(0x7f00000001c0)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@disable_roll_forward}, {@background_gc_off}, {@nouser_xattr}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) 2.314642911s ago: executing program 1 (id=580): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.045239124s ago: executing program 4 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) getrlimit(0xd, &(0x7f0000000280)) 1.994442085s ago: executing program 4 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.954317616s ago: executing program 4 (id=586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.882328866s ago: executing program 0 (id=590): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r1, &(0x7f0000000140)='./file0\x00') fspick(r1, &(0x7f0000000280)='./file0\x00', 0x0) 1.849839037s ago: executing program 0 (id=591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000180)={0x6, 0x4, 0x58, 0x5}) 1.108681155s ago: executing program 4 (id=598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.058931906s ago: executing program 3 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@x86={0xff, 0x8, 0x76, 0x0, 0x1d8f, 0x37, 0x8, 0x2, 0xb8, 0x8, 0xf9, 0x0, 0x0, 0x1, 0x2, 0x4, 0x1, 0x0, 0x42, '\x00', 0x7, 0x80000000}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000000)) 1.021838417s ago: executing program 2 (id=600): io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="91", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1, 0x800, r1, 0x0, 0x0, 0x4}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 960.142528ms ago: executing program 3 (id=601): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4fb, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x6, 0x10001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lseek(r1, 0x7, 0x4) 664.154611ms ago: executing program 3 (id=602): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r1, &(0x7f0000000140)='./file0\x00') fspick(r1, &(0x7f0000000280)='./file0\x00', 0x0) 654.895291ms ago: executing program 2 (id=603): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0x3) 638.883251ms ago: executing program 3 (id=604): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000380)={[{@noauto_da_alloc}, {@dioread_lock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@test_dummy_encryption}]}, 0x1, 0x479, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 424.100484ms ago: executing program 2 (id=605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) 423.875434ms ago: executing program 3 (id=608): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 297.994806ms ago: executing program 2 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 297.790746ms ago: executing program 3 (id=612): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x41, 0x5510, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 244.038696ms ago: executing program 2 (id=613): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f00000004c0)='system_u:object_r:hostname_exec_t:s0\x00', 0x25, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 192.271977ms ago: executing program 4 (id=614): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) 163.965968ms ago: executing program 4 (id=615): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) syz_usb_connect$uac1(0x2, 0x78, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x9, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2844, 0x8}, [@input_terminal={0x0, 0x24, 0x2, 0x6, 0x204, 0x2, 0x5, 0x8000, 0x5, 0xff}, @mixer_unit={0x0, 0x24, 0x4, 0x4, 0x1, "8413a9148c18"}, @extension_unit={0x0, 0x24, 0x8, 0x6, 0xe417, 0x4, "646abd"}, @output_terminal={0x52, 0x24, 0x3, 0x3, 0x101, 0x4, 0x0, 0x2}, @input_terminal={0x0, 0x24, 0x2, 0x6, 0x203, 0x4, 0x5a, 0x8, 0x9, 0x1}, @mixer_unit={0x0, 0x24, 0x4, 0x3, 0x0, "61ba"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x10, 0x40, 0xd, {0x43, 0x25, 0x1, 0x1, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6e, 0x9, 0x9, {0x7, 0x25, 0x1, 0x83, 0x87, 0x8}}}}}}}]}}, 0x0) 135.495918ms ago: executing program 0 (id=616): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x583}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 68.014209ms ago: executing program 0 (id=617): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 58.650658ms ago: executing program 2 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) listxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 37.812959ms ago: executing program 0 (id=628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x1, 0x45f8}], 0x10}, 0x0) 766.609µs ago: executing program 0 (id=619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r2, r0, 0x12, 0x6, 0x0, @void, @value}, 0x10) 0s ago: executing program 1 (id=620): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 21.990453][ T28] audit: type=1400 audit(1748199776.566:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.992172][ T274] cgroup: Unknown subsys name 'net' [ 22.013243][ T28] audit: type=1400 audit(1748199776.566:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.040737][ T28] audit: type=1400 audit(1748199776.606:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.040928][ T274] cgroup: Unknown subsys name 'devices' [ 22.156037][ T274] cgroup: Unknown subsys name 'hugetlb' [ 22.161644][ T274] cgroup: Unknown subsys name 'rlimit' [ 22.296760][ T28] audit: type=1400 audit(1748199776.876:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.319995][ T28] audit: type=1400 audit(1748199776.876:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.330741][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.344968][ T28] audit: type=1400 audit(1748199776.876:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.376388][ T28] audit: type=1400 audit(1748199776.926:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.401896][ T28] audit: type=1400 audit(1748199776.926:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.443230][ T28] audit: type=1400 audit(1748199777.016:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.469052][ T28] audit: type=1400 audit(1748199777.016:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.469099][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.191096][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.198411][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.205923][ T282] device bridge_slave_0 entered promiscuous mode [ 23.214881][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.221930][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.229457][ T282] device bridge_slave_1 entered promiscuous mode [ 23.275248][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.282299][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.289810][ T284] device bridge_slave_0 entered promiscuous mode [ 23.317245][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.324361][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.331747][ T284] device bridge_slave_1 entered promiscuous mode [ 23.449087][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.456471][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.464166][ T288] device bridge_slave_0 entered promiscuous mode [ 23.470779][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.477860][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.485277][ T287] device bridge_slave_0 entered promiscuous mode [ 23.498073][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.505272][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.512644][ T288] device bridge_slave_1 entered promiscuous mode [ 23.519362][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.526439][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.534030][ T287] device bridge_slave_1 entered promiscuous mode [ 23.615797][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.622858][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.630951][ T289] device bridge_slave_0 entered promiscuous mode [ 23.637985][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.645063][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.652412][ T289] device bridge_slave_1 entered promiscuous mode [ 23.665624][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.672697][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.680127][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.687185][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.795915][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.802986][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.810284][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.817357][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.831257][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.838462][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.845766][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.852804][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.867670][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.874743][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.882036][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.889112][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.900142][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.907435][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.914688][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.921828][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.929643][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.936866][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.944239][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.951393][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.959373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.967038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.985413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.993859][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.000910][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.035299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.043536][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.050632][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.058112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.083851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.114286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.122105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.141942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.150450][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.157521][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.165046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.173431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.181848][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.188925][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.203113][ T282] device veth0_vlan entered promiscuous mode [ 24.215014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.223600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.232154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.239888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.247621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.256274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.264531][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.271559][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.279023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.287152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.295372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.303753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.311987][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.319130][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.326682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.335127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.343298][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.350341][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.357814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.365380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.372847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.381442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.389786][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.396839][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.404967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.412478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.437947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.446425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.455630][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.462658][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.470860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.479317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.487612][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.494661][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.502184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.510590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.518830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.526931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.534995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.544863][ T282] device veth1_macvtap entered promiscuous mode [ 24.564563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.572301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.580502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.589886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.598034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.606099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.614229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.622135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.630241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.652136][ T288] device veth0_vlan entered promiscuous mode [ 24.664962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.673254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.681850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.690089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.698296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.706585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.714729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.723015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.731445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.739458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.747791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.755386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.774493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.783112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.791753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.791812][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 24.800441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.815968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.829130][ T287] device veth0_vlan entered promiscuous mode [ 24.839992][ T288] device veth1_macvtap entered promiscuous mode [ 24.848427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.856690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.865718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.882394][ T307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.886830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.906839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.920500][ T289] device veth0_vlan entered promiscuous mode [ 24.932467][ T284] device veth0_vlan entered promiscuous mode [ 24.942920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.951166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.959770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.968981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.976908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.985007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.993196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.001725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.010130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.020323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.028032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.035772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.043337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.059448][ T289] device veth1_macvtap entered promiscuous mode [ 25.077889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.090490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.099034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.124475][ T284] device veth1_macvtap entered promiscuous mode [ 25.131791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.153051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.167539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.176848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.187452][ T287] device veth1_macvtap entered promiscuous mode [ 25.201785][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.210520][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.221034][ T322] loop0: detected capacity change from 0 to 256 [ 25.233803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.243761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.255126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.260364][ T322] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 25.263596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.295246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.316950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.401110][ T335] tipc: Started in network mode [ 25.428732][ T335] tipc: Node identity ff75, cluster identity 4711 [ 25.450213][ T335] tipc: Enabling of bearer rejected, failed to enable media [ 25.483625][ T346] capability: warning: `syz.3.16' uses deprecated v2 capabilities in a way that may be insecure [ 25.517144][ T300] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.532722][ T300] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.541831][ T300] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.ff Device [syz1] on syz0 [ 25.588415][ T354] input: syz0 as /devices/virtual/input/input4 [ 25.634695][ T357] fido_id[357]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 25.679471][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 25.775223][ T381] loop3: detected capacity change from 0 to 256 [ 25.822918][ T385] syz.3.32[385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.822998][ T385] syz.3.32[385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.138983][ T315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.173847][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.308718][ T426] netlink: 'syz.2.49': attribute type 280 has an invalid length. [ 26.339547][ T428] loop2: detected capacity change from 0 to 2048 [ 26.347473][ T315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.358391][ T315] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 26.370130][ T315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.379306][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.384298][ T428] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 26.387902][ T315] usb 5-1: Product: syz [ 26.392703][ T428] loop2: partition table partially beyond EOD, truncated [ 26.397123][ T315] usb 5-1: Manufacturer: syz [ 26.404736][ T428] loop2: p1 start 3405774849 is beyond EOD, truncated [ 26.409194][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.415704][ T428] loop2: p2 size 5046285 extends beyond EOD, truncated [ 26.426726][ T315] usb 5-1: SerialNumber: syz [ 26.435819][ T428] loop2: p5 size 5046285 extends beyond EOD, truncated [ 26.438205][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.456776][ T300] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.456939][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 26.473975][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.482561][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.500265][ T315] cdc_mbim 5-1:1.0: skipping garbage [ 26.509112][ T19] usb 1-1: config 0 descriptor?? [ 26.552970][ T431] Illegal XDP return value 4294967274 on prog (id 30) dev N/A, expect packet loss! [ 26.580859][ T429] udevd[429]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 26.580925][ T363] udevd[363]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 26.592099][ T366] udevd[366]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 26.611745][ T365] udevd[365]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 26.621919][ T306] udevd[306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 26.674897][ T300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 26.685579][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.687947][ T300] usb 4-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 26.703603][ T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.716908][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.717316][ T388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 26.732422][ T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.744501][ T6] usb 2-1: config 0 descriptor?? [ 26.752755][ T300] usb 4-1: config 0 descriptor?? [ 27.133115][ T19] usb 1-1: string descriptor 0 read error: -22 [ 27.162101][ T300] wacom 0003:056A:0307.0003: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.3-1/input0 [ 27.346067][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 27.346668][ T388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 27.352090][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 27.365635][ T315] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 27.378472][ T422] usb 4-1: USB disconnect, device number 2 [ 27.386185][ T315] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 27.393914][ T6] usb 2-1: USB disconnect, device number 2 [ 27.403376][ T315] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 56:51:8b:2d:5b:ee [ 27.424801][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 27.424815][ T28] audit: type=1400 audit(1748199782.006:144): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.456979][ T28] audit: type=1400 audit(1748199782.006:145): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.478765][ T28] audit: type=1400 audit(1748199782.006:146): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.501937][ T28] audit: type=1400 audit(1748199782.006:147): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=847 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.536223][ T19] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 27.545160][ T19] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 27.553274][ T19] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 27.559659][ T28] audit: type=1400 audit(1748199782.136:148): avc: denied { create } for pid=448 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.562377][ T19] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 27.584543][ T28] audit: type=1400 audit(1748199782.136:149): avc: denied { write } for pid=448 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wwan0.link" dev="tmpfs" ino=850 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.604926][ T19] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 27.646053][ T19] usb 1-1: USB disconnect, device number 2 [ 27.653277][ T28] audit: type=1400 audit(1748199782.136:150): avc: denied { append } for pid=448 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" dev="tmpfs" ino=850 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.653458][ T141] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 27.690302][ T300] usb 5-1: USB disconnect, device number 2 [ 27.698041][ T300] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 27.706003][ T28] audit: type=1400 audit(1748199782.206:151): avc: denied { unlink } for pid=459 comm="rm" name="resolv.conf.wwan0.link" dev="tmpfs" ino=850 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.921260][ T28] audit: type=1400 audit(1748199782.496:152): avc: denied { watch watch_reads } for pid=487 comm="syz.2.58" path="/15" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.968165][ T493] loop3: detected capacity change from 0 to 2048 [ 27.986449][ T493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.995212][ T28] audit: type=1400 audit(1748199782.576:153): avc: denied { mount } for pid=492 comm="syz.3.59" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.159821][ T507] loop0: detected capacity change from 0 to 1024 [ 28.166755][ T507] ======================================================= [ 28.166755][ T507] WARNING: The mand mount option has been deprecated and [ 28.166755][ T507] and is ignored by this kernel. Remove the mand [ 28.166755][ T507] option from the mount to silence this warning. [ 28.166755][ T507] ======================================================= [ 28.203150][ T507] EXT4-fs: Ignoring removed nobh option [ 28.208848][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.223517][ T507] EXT4-fs: Ignoring removed bh option [ 28.233724][ T323] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 28.285069][ T507] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.350481][ T507] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.63: Allocating blocks 497-513 which overlap fs metadata [ 28.388648][ T506] EXT4-fs (loop0): pa ffff88811ac49c78: logic 1, phys. 241, len 17 [ 28.396754][ T506] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 2 [ 28.403714][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 28.417978][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.421295][ T514] tmpfs: Unknown parameter 'context' [ 28.432467][ T288] EXT4-fs (loop0): unmounting filesystem. [ 28.443977][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.459741][ T323] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 28.463306][ T516] loop4: detected capacity change from 0 to 1024 [ 28.469666][ T39] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 30, changing to 8 [ 28.489701][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.496575][ T516] EXT4-fs (loop4): Test dummy encryption mode enabled [ 28.510404][ T39] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.531579][ T516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 28.563992][ T323] usb 3-1: config 0 descriptor?? [ 28.570025][ T39] usb 2-1: config 1 interface 0 has no altsetting 0 [ 28.580017][ T39] usb 2-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 28.590693][ T516] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 28.599794][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.611934][ T39] usb 2-1: Product: syz [ 28.623459][ T39] usb 2-1: Manufacturer: syz [ 28.629111][ T289] EXT4-fs (loop4): unmounting filesystem. [ 28.634965][ T39] usb 2-1: SerialNumber: syz [ 28.755009][ T530] device veth0 entered promiscuous mode [ 28.775321][ T530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 28.808594][ T523] loop0: detected capacity change from 0 to 40427 [ 28.824248][ T523] F2FS-fs (loop0): fault_injection options not supported [ 28.842641][ T523] F2FS-fs (loop0): invalid crc value [ 28.863868][ T39] usbhid 2-1:1.0: can't add hid device: -71 [ 28.870865][ T39] usbhid: probe of 2-1:1.0 failed with error -71 [ 28.891453][ T523] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.914454][ T39] usb 2-1: USB disconnect, device number 3 [ 28.957931][ T523] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 28.988639][ T323] savu 0003:1E7D:2D5A.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 29.169331][ T288] syz-executor: attempt to access beyond end of device [ 29.169331][ T288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 29.177262][ T284] EXT4-fs (loop3): unmounting filesystem. [ 29.265788][ T39] usb 3-1: USB disconnect, device number 2 [ 29.323745][ T422] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.406650][ T555] loop1: detected capacity change from 0 to 256 [ 29.409207][ T554] loop3: detected capacity change from 0 to 1024 [ 29.417185][ T555] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 29.429757][ T554] EXT4-fs: Ignoring removed nobh option [ 29.449455][ T554] EXT4-fs: Ignoring removed bh option [ 29.465997][ T557] loop1: detected capacity change from 0 to 1024 [ 29.472668][ T557] EXT4-fs: Ignoring removed nobh option [ 29.479220][ T557] EXT4-fs: Ignoring removed oldalloc option [ 29.481034][ T554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.485549][ T557] EXT4-fs: Ignoring removed bh option [ 29.504818][ T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.516420][ T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.527003][ T422] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.534805][ T554] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.79: Allocating blocks 497-513 which overlap fs metadata [ 29.540304][ T422] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.554585][ T557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c119, mo2=0102] [ 29.563194][ T422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.574451][ T557] System zones: 0-1, 3-12 [ 29.580665][ T422] usb 5-1: config 0 descriptor?? [ 29.589386][ T557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.599827][ T553] EXT4-fs (loop3): pa ffff88811ac49000: logic 1, phys. 241, len 17 [ 29.607857][ T553] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 2 [ 29.633879][ T284] EXT4-fs (loop3): unmounting filesystem. [ 29.692956][ T287] EXT4-fs (loop1): unmounting filesystem. [ 29.733926][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.823176][ T576] loop2: detected capacity change from 0 to 2048 [ 29.857114][ T563] loop3: detected capacity change from 0 to 40427 [ 29.911032][ T563] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 29.927658][ T563] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.936286][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 29.942719][ T6] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 29.951160][ T6] usb 1-1: config 0 has no interface number 0 [ 29.952341][ T576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.958297][ T563] F2FS-fs (loop3): invalid crc value [ 29.971454][ T6] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 29.982320][ T6] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 29.993026][ T6] usb 1-1: config 0 interface 41 has no altsetting 0 [ 30.001051][ T563] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.008713][ T422] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 30.025165][ T422] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 30.039969][ T710] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 30.058621][ T6] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 30.070187][ T710] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 65793 with max blocks 1 with error 28 [ 30.083028][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.112374][ T6] usb 1-1: Product: syz [ 30.121418][ T710] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.121418][ T710] [ 30.131543][ T563] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.138991][ T6] usb 1-1: Manufacturer: syz [ 30.146906][ T6] usb 1-1: SerialNumber: syz [ 30.151735][ T563] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.159602][ T710] EXT4-fs (loop2): Total free blocks count 0 [ 30.167610][ T6] usb 1-1: config 0 descriptor?? [ 30.172603][ T710] EXT4-fs (loop2): Free/Dirty block details [ 30.180058][ T551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.188976][ T551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.196347][ T710] EXT4-fs (loop2): free_blocks=66060288 [ 30.202106][ T710] EXT4-fs (loop2): dirty_blocks=16 [ 30.231000][ T710] EXT4-fs (loop2): Block reservation details [ 30.242362][ T710] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 30.255452][ T282] EXT4-fs (loop2): unmounting filesystem. [ 30.327531][ T323] usb 5-1: USB disconnect, device number 3 [ 30.418050][ T551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.429362][ T551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.613930][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.783862][ T422] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.803813][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 30.813043][ T39] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 30.822417][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.830992][ T39] usb 3-1: Product: syz [ 30.835345][ T39] usb 3-1: Manufacturer: syz [ 30.845058][ T39] usb 3-1: SerialNumber: syz [ 30.850460][ T39] r8152-cfgselector 3-1: config 0 descriptor?? [ 30.857081][ T6] Error reading MAC address [ 30.867352][ T551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.878964][ T551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.895319][ T924] loop1: detected capacity change from 0 to 16 [ 30.911159][ T924] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.983773][ T422] usb 4-1: Using ep0 maxpacket: 16 [ 30.990699][ T422] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 30.999907][ T422] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.010179][ T422] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.021129][ T422] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.030499][ T422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.038711][ T422] usb 4-1: Product: syz [ 31.042895][ T422] usb 4-1: Manufacturer: syz [ 31.047757][ T422] usb 4-1: SerialNumber: syz [ 31.065023][ T39] r8152-cfgselector 3-1: Unknown version 0x0000 [ 31.075179][ T39] r8152-cfgselector 3-1: Unknown version 0x0000 [ 31.084385][ T39] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 31.095131][ T6] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 31.121884][ T6] usb 1-1: USB disconnect, device number 3 [ 31.461409][ T422] usb 4-1: 0:2 : does not exist [ 31.717725][ T959] loop4: detected capacity change from 0 to 40427 [ 31.730611][ T959] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 31.737864][ T959] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 31.755775][ T959] F2FS-fs (loop4): invalid crc value [ 31.762732][ T959] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 31.793847][ T959] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 31.801712][ T959] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.900081][ T987] loop1: detected capacity change from 0 to 512 [ 31.924370][ T987] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.929675][ T959] syz.4.113: attempt to access beyond end of device [ 31.929675][ T959] loop4: rw=0, sector=77864, nr_sectors = 8 limit=40427 [ 31.931104][ T987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.951683][ T987] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 31.963470][ T987] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.123: corrupted in-inode xattr [ 31.975941][ T987] EXT4-fs (loop1): Remounting filesystem read-only [ 31.982772][ T987] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.123: couldn't read orphan inode 15 (err -117) [ 31.982842][ T289] syz-executor: attempt to access beyond end of device [ 31.982842][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.994910][ T987] EXT4-fs (loop1): Remounting filesystem read-only [ 32.015194][ T987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 32.064849][ T422] usb 4-1: USB disconnect, device number 3 [ 32.086250][ T987] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.123: Logical block already allocated [ 32.102718][ T987] EXT4-fs (loop1): Remounting filesystem read-only [ 32.119293][ T993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 32.129116][ T287] EXT4-fs (loop1): unmounting filesystem. [ 32.232803][ T1005] syz.1.131[1005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.232888][ T1005] syz.1.131[1005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.275099][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.346497][ T1014] loop4: detected capacity change from 0 to 1024 [ 32.353169][ T1014] ext4: Unknown parameter 'nouser_xattr' [ 32.399393][ T1014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 32.415158][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.422429][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.426840][ T1022] syz.1.139 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.472531][ T1028] loop4: detected capacity change from 0 to 1024 [ 32.493947][ T1028] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 32.498794][ T28] kauditd_printk_skb: 553 callbacks suppressed [ 32.498812][ T28] audit: type=1400 audit(1748199787.076:707): avc: denied { create } for pid=1029 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.504158][ T1028] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 32.523703][ T28] audit: type=1400 audit(1748199787.096:708): avc: denied { ioctl } for pid=1029 comm="syz.0.143" path="socket:[17487]" dev="sockfs" ino=17487 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.531833][ T1028] EXT4-fs error (device loop4): ext4_get_journal_inode:5710: inode #5: comm syz.4.142: unexpected bad inode w/o EXT4_IGET_BAD [ 32.556305][ T28] audit: type=1400 audit(1748199787.096:709): avc: denied { bind } for pid=1029 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.597740][ T1028] EXT4-fs (loop4): no journal found [ 32.613206][ T28] audit: type=1400 audit(1748199787.096:710): avc: denied { write } for pid=1029 comm="syz.0.143" path="socket:[17487]" dev="sockfs" ino=17487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.620673][ T1028] EXT4-fs (loop4): can't get journal size [ 32.653218][ T28] audit: type=1400 audit(1748199787.106:711): avc: denied { unmount } for pid=1025 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.676201][ T28] audit: type=1400 audit(1748199787.226:712): avc: denied { ioctl } for pid=1038 comm="syz.2.147" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17358 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.703033][ T1028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.796552][ T1028] EXT4-fs (loop4): shut down requested (1) [ 32.814070][ T28] audit: type=1400 audit(1748199787.396:713): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.835947][ T1028] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 32.859080][ T28] audit: type=1400 audit(1748199787.396:714): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.881613][ T1028] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 32.900903][ T1028] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 32.915774][ T28] audit: type=1400 audit(1748199787.396:715): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.943887][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.956121][ T289] EXT4-fs (loop4): unmounting filesystem. [ 32.985128][ T28] audit: type=1400 audit(1748199787.396:716): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.032892][ T1049] syz.3.150 (1049) used greatest stack depth: 20128 bytes left [ 33.133774][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 33.140373][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.163463][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 33.174084][ T1062] syz.3.156[1062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.174200][ T1062] syz.3.156[1062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.189345][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.222040][ T39] usb 2-1: config 0 descriptor?? [ 33.232243][ T39] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 33.253833][ T422] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 33.444781][ T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.455955][ T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.466167][ T422] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 33.475377][ T422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.495475][ T422] usb 5-1: config 0 descriptor?? [ 33.562384][ T1084] loop2: detected capacity change from 0 to 512 [ 33.602683][ T1079] loop3: detected capacity change from 0 to 40427 [ 33.620726][ T1079] F2FS-fs (loop3): fault_injection options not supported [ 33.628838][ T1079] F2FS-fs (loop3): invalid crc value [ 33.635192][ T1084] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.653946][ T1084] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.670714][ T1079] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.684711][ T1084] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.166: corrupted inode contents [ 33.714253][ T1084] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #2: comm syz.2.166: mark_inode_dirty error [ 33.715597][ T1079] F2FS-fs (loop3): Start checkpoint disabled! [ 33.732394][ T1079] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 33.740305][ T1084] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.166: corrupted inode contents [ 33.762598][ T1084] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.166: mark_inode_dirty error [ 33.805916][ T282] EXT4-fs (loop2): unmounting filesystem. [ 33.876919][ T628] kworker/u4:63: attempt to access beyond end of device [ 33.876919][ T628] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 33.903955][ T422] uclogic 0003:5543:0522.0006: No inputs registered, leaving [ 33.918280][ T422] uclogic 0003:5543:0522.0006: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 34.109271][ T39] usb 5-1: USB disconnect, device number 4 [ 34.243691][ T323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.424799][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.435773][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.445562][ T323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.458499][ T323] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.467549][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.476117][ T323] usb 4-1: config 0 descriptor?? [ 34.729481][ T1115] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 34.885351][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 34.897173][ T1138] loop2: detected capacity change from 0 to 512 [ 34.901094][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 34.921557][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 34.929879][ T1138] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.938361][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 34.944863][ T1138] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.965154][ T1138] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.979515][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 34.983858][ T1138] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.987613][ T1142] netlink: 'syz.0.189': attribute type 2 has an invalid length. [ 35.000534][ T1138] EXT4-fs (loop2): 1 truncate cleaned up [ 35.013708][ T1138] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.042856][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.064892][ T1145] loop0: detected capacity change from 0 to 2048 [ 35.069944][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.087623][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.095578][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.096193][ T282] EXT4-fs (loop2): unmounting filesystem. [ 35.103280][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.118529][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.119560][ T1145] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.126704][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.141949][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.149648][ T323] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 35.157295][ T323] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 35.166650][ T323] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 35.181185][ T323] usb 4-1: USB disconnect, device number 4 [ 35.227814][ T1153] loop2: detected capacity change from 0 to 1024 [ 35.230925][ T1154] fido_id[1154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 35.242407][ T1153] EXT4-fs: dax option not supported [ 35.473708][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 35.663679][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 35.671171][ T24] usb 2-1: USB disconnect, device number 4 [ 35.679724][ T39] usb 5-1: config 0 has no interfaces? [ 35.706312][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.720730][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.729663][ T39] usb 5-1: Product: syz [ 35.734023][ T39] usb 5-1: Manufacturer: syz [ 35.738685][ T39] usb 5-1: SerialNumber: syz [ 35.748270][ T39] usb 5-1: config 0 descriptor?? [ 35.824219][ T422] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 35.903712][ T323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.965741][ T24] usb 5-1: USB disconnect, device number 5 [ 35.978092][ T1197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.212'. [ 36.004779][ T422] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.020285][ T422] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 36.042446][ T422] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.064069][ T422] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.083283][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.084982][ T323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.091380][ T422] usb 3-1: Product: syz [ 36.114766][ T323] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 36.115784][ T422] usb 3-1: Manufacturer: syz [ 36.134034][ T323] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 36.148759][ T422] usb 3-1: SerialNumber: syz [ 36.152288][ T323] usb 4-1: Manufacturer: syz [ 36.162378][ T323] usb 4-1: SerialNumber: syz [ 36.176710][ T323] usb 4-1: config 0 descriptor?? [ 36.247757][ T1201] loop1: detected capacity change from 0 to 40427 [ 36.255151][ T1201] F2FS-fs (loop1): fault_injection options not supported [ 36.270604][ T1201] F2FS-fs (loop1): invalid crc value [ 36.286269][ T1201] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.304813][ T288] EXT4-fs (loop0): unmounting filesystem. [ 36.333145][ T1201] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.363466][ T422] usb 3-1: 0:2 : does not exist [ 36.372287][ T422] usb 3-1: USB disconnect, device number 4 [ 36.403563][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.421732][ T323] usb 4-1: USB disconnect, device number 5 [ 36.562997][ T287] syz-executor: attempt to access beyond end of device [ 36.562997][ T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.581174][ T1221] device ip6tnl1 entered promiscuous mode [ 36.684331][ T1226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 36.688758][ T1228] loop4: detected capacity change from 0 to 2048 [ 36.735918][ T1228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.938553][ T1243] loop0: detected capacity change from 0 to 40427 [ 36.985223][ T1243] F2FS-fs (loop0): invalid crc value [ 37.021688][ T1243] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.121088][ T1243] F2FS-fs (loop0): Start checkpoint disabled! [ 37.143786][ T1243] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 37.214258][ T754] kworker/u4:182: attempt to access beyond end of device [ 37.214258][ T754] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 37.259728][ T1281] loop2: detected capacity change from 0 to 256 [ 37.302013][ T1281] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe55691ff, utbl_chksum : 0xe619d30d) [ 37.337834][ T1281] exFAT-fs (loop2): hint_cluster is invalid (4278190089) [ 37.354180][ T1281] exFAT-fs (loop2): error, failed to bmap (inode : ffff88811ad48910 iblock : 8, err : -5) [ 37.395654][ T1281] exFAT-fs (loop2): Filesystem has been set read-only [ 37.406443][ T1281] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 37.438554][ T1285] loop1: detected capacity change from 0 to 256 [ 37.449624][ T1283] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 37.475060][ T1283] exFAT-fs (loop2): error, failed to bmap (inode : ffff88811ad48910 iblock : 8, err : -5) [ 37.497463][ T1283] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 37.506004][ T1285] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.527110][ T1285] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.552608][ T1285] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.570173][ T1285] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.598011][ T1298] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.600116][ T1295] loop3: detected capacity change from 0 to 512 [ 37.621424][ T1298] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.643700][ T1298] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.657082][ T1285] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.683024][ T1295] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.693811][ T1285] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.701199][ T1285] FAT-fs (loop1): Directory bread(block 1285) failed [ 37.705550][ T1295] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 37.716941][ T1295] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.252: invalid indirect mapped block 2683928664 (level 1) [ 37.731224][ T1295] EXT4-fs (loop3): Remounting filesystem read-only [ 37.741483][ T1295] EXT4-fs (loop3): 1 truncate cleaned up [ 37.747266][ T1295] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.777388][ T28] kauditd_printk_skb: 1021 callbacks suppressed [ 37.777404][ T28] audit: type=1400 audit(1748199792.356:1738): avc: denied { write } for pid=1293 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.874806][ T284] EXT4-fs (loop3): unmounting filesystem. [ 37.899738][ T28] audit: type=1400 audit(1748199792.386:1739): avc: denied { nlmsg_write } for pid=1293 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.959062][ T1300] loop2: detected capacity change from 0 to 40427 [ 37.978192][ T1300] F2FS-fs (loop2): fault_injection options not supported [ 37.988666][ T1300] F2FS-fs (loop2): invalid crc value [ 38.005067][ T1300] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.082748][ T289] EXT4-fs (loop4): unmounting filesystem. [ 38.089716][ T1300] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.193685][ T323] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.255041][ T1307] loop3: detected capacity change from 0 to 40427 [ 38.267028][ T1307] F2FS-fs (loop3): fault_injection options not supported [ 38.276230][ T1307] F2FS-fs (loop3): invalid crc value [ 38.282630][ T28] audit: type=1400 audit(1748199792.856:1740): avc: denied { write } for pid=1326 comm="syz.4.266" name="001" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.325131][ T1330] loop0: detected capacity change from 0 to 2048 [ 38.342559][ T1307] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.368325][ T1330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.404989][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.423935][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.435080][ T1307] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.443714][ T323] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 38.453191][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.462086][ T323] usb 2-1: config 0 descriptor?? [ 38.489962][ T282] syz-executor: attempt to access beyond end of device [ 38.489962][ T282] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.527789][ T284] syz-executor: attempt to access beyond end of device [ 38.527789][ T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.752231][ T1352] loop4: detected capacity change from 0 to 1024 [ 38.777570][ T1352] EXT4-fs: Ignoring removed nobh option [ 38.789507][ T1352] EXT4-fs: Ignoring removed bh option [ 38.805867][ T1355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 38.834587][ T1352] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.858623][ T28] audit: type=1400 audit(1748199793.436:1741): avc: denied { name_bind } for pid=1360 comm="syz.3.277" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 38.917203][ T289] EXT4-fs (loop4): unmounting filesystem. [ 39.072846][ T323] usb 2-1: string descriptor 0 read error: -22 [ 39.173686][ T525] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.212398][ T1368] loop4: detected capacity change from 0 to 40427 [ 39.231844][ T1368] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 39.239851][ T1368] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.251020][ T1368] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.276397][ T323] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0008/input/input10 [ 39.299354][ T28] audit: type=1400 audit(1748199793.876:1742): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=752 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.301119][ T323] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0008/input/input11 [ 39.342296][ T28] audit: type=1400 audit(1748199793.876:1743): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=752 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.351879][ T323] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0008/input/input12 [ 39.366206][ T724] tipc: Subscription rejected, illegal request [ 39.378731][ T525] usb 3-1: Using ep0 maxpacket: 16 [ 39.395923][ T1368] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.412868][ T323] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0008/input/input13 [ 39.421951][ T28] audit: type=1400 audit(1748199793.916:1744): avc: denied { connect } for pid=1385 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.424999][ T525] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 39.454025][ T1368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.478979][ T323] uclogic 0003:256C:006D.0008: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 39.482683][ T28] audit: type=1400 audit(1748199793.966:1745): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=752 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.512084][ T525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.538362][ T323] usb 2-1: USB disconnect, device number 5 [ 39.558604][ T525] usb 3-1: Product: syz [ 39.609142][ T525] usb 3-1: Manufacturer: syz [ 39.614530][ T525] usb 3-1: SerialNumber: syz [ 39.632754][ T288] EXT4-fs (loop0): unmounting filesystem. [ 39.636938][ T1391] fido_id[1391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 39.664441][ T525] usb 3-1: config 0 descriptor?? [ 39.684164][ T525] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 39.723823][ T1399] loop0: detected capacity change from 0 to 1024 [ 39.730467][ T1399] EXT4-fs: Ignoring removed i_version option [ 39.747240][ T1399] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.757968][ T1399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.769473][ T1399] EXT4-fs (loop0): unmounting filesystem. [ 39.893701][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.939149][ T1404] loop0: detected capacity change from 0 to 40427 [ 39.946432][ T1404] F2FS-fs (loop0): fault_injection options not supported [ 39.954843][ T1404] F2FS-fs (loop0): invalid crc value [ 39.961400][ T1404] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.991394][ T1404] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.031719][ T288] syz-executor: attempt to access beyond end of device [ 40.031719][ T288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.094894][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.106382][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.116495][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.134109][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.145722][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.153800][ T28] audit: type=1400 audit(1748199794.726:1746): avc: denied { read } for pid=1408 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.174402][ T6] usb 4-1: config 0 descriptor?? [ 40.194103][ T28] audit: type=1400 audit(1748199794.766:1747): avc: denied { setopt } for pid=1412 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.217773][ T1415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 40.361304][ T1431] loop0: detected capacity change from 0 to 512 [ 40.386644][ T1431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.395721][ T1431] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.425330][ T288] EXT4-fs (loop0): unmounting filesystem. [ 40.586977][ T6] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 40.608022][ T6] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 40.694462][ T1458] loop4: detected capacity change from 0 to 256 [ 40.701281][ T1458] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.712385][ T1458] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 40.722632][ T1458] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.854442][ T525] usb 4-1: USB disconnect, device number 6 [ 41.163700][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.344824][ T19] usb 1-1: config 0 has no interfaces? [ 41.351837][ T19] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 41.361541][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.372822][ T19] usb 1-1: Product: syz [ 41.379585][ T19] usb 1-1: Manufacturer: syz [ 41.384516][ T19] usb 1-1: SerialNumber: syz [ 41.397018][ T19] r8152-cfgselector 1-1: config 0 descriptor?? [ 41.536503][ T1488] loop3: detected capacity change from 0 to 40427 [ 41.550368][ T1488] F2FS-fs (loop3): fault_injection options not supported [ 41.567309][ T1488] F2FS-fs (loop3): invalid crc value [ 41.574264][ T1488] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.609479][ T754] usb 1-1: config 0 descriptor?? [ 41.610136][ T1488] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.750484][ T1505] loop4: detected capacity change from 0 to 1024 [ 41.768839][ T1505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.778004][ T1505] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.806914][ T1505] EXT4-fs error (device loop4): ext4_map_blocks:744: inode #15: block 3: comm syz.4.334: lblock 3 mapped to illegal pblock 3 (length 13) [ 41.821421][ T284] syz-executor: attempt to access beyond end of device [ 41.821421][ T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.835484][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.835680][ T19] usb 1-1: USB disconnect, device number 4 [ 41.849789][ T1505] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 41.862191][ T754] usb 1-1: can't set config #0, error -71 [ 41.862272][ T1505] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.862272][ T1505] [ 41.868845][ T323] usb 3-1: USB disconnect, device number 5 [ 41.887783][ T1505] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #15: block 3: comm syz.4.334: lblock 3 mapped to illegal pblock 3 (length 2) [ 41.917357][ T289] EXT4-fs (loop4): unmounting filesystem. [ 41.982616][ T1513] input: syz0 as /devices/virtual/input/input15 [ 42.152435][ T1523] loop2: detected capacity change from 0 to 40427 [ 42.159966][ T1523] F2FS-fs (loop2): fault_injection options not supported [ 42.168471][ T1523] F2FS-fs (loop2): invalid crc value [ 42.183700][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 42.191343][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 42.201050][ T1523] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.239171][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.247371][ T1523] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.255149][ T24] usb 2-1: Product: syz [ 42.259354][ T24] usb 2-1: Manufacturer: syz [ 42.264003][ T24] usb 2-1: SerialNumber: syz [ 42.277344][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 42.334899][ T1530] loop4: detected capacity change from 0 to 40427 [ 42.353851][ T1530] F2FS-fs (loop4): fault_injection options not supported [ 42.361760][ T1530] F2FS-fs (loop4): invalid crc value [ 42.371499][ T1530] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.406488][ T1530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.611870][ T1546] loop0: detected capacity change from 0 to 256 [ 42.642858][ T1546] FAT-fs (loop0): Directory bread(block 64) failed [ 42.643698][ T323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.664453][ T1546] FAT-fs (loop0): Directory bread(block 65) failed [ 42.671138][ T1546] FAT-fs (loop0): Directory bread(block 66) failed [ 42.677753][ T1546] FAT-fs (loop0): Directory bread(block 67) failed [ 42.684417][ T1546] FAT-fs (loop0): Directory bread(block 68) failed [ 42.690999][ T1546] FAT-fs (loop0): Directory bread(block 69) failed [ 42.691468][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 42.698586][ T1546] FAT-fs (loop0): Directory bread(block 70) failed [ 42.711418][ T24] r8152-cfgselector 2-1: bad CDC descriptors [ 42.712404][ T1546] FAT-fs (loop0): Directory bread(block 71) failed [ 42.724171][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 42.724280][ T1546] FAT-fs (loop0): Directory bread(block 72) failed [ 42.737813][ T24] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 42.760034][ T1546] FAT-fs (loop0): Directory bread(block 73) failed [ 42.843742][ T323] usb 3-1: Using ep0 maxpacket: 32 [ 42.850090][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.873047][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.890613][ T323] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 42.899774][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.918722][ T323] usb 3-1: config 0 descriptor?? [ 42.992436][ T289] syz-executor: attempt to access beyond end of device [ 42.992436][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.056041][ T1563] loop0: detected capacity change from 0 to 512 [ 43.114389][ T1563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.133558][ T1563] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.178164][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 43.178178][ T28] audit: type=1400 audit(1748199797.756:1751): avc: denied { setattr } for pid=1562 comm="syz.0.359" path="/69/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.208574][ T288] EXT4-fs (loop0): unmounting filesystem. [ 43.338050][ T323] savu 0003:1E7D:2D5A.000A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 43.595343][ T28] audit: type=1326 audit(1748199798.176:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0018e969 code=0x7ffc0000 [ 43.621890][ T28] audit: type=1326 audit(1748199798.196:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb0018e969 code=0x7ffc0000 [ 43.636835][ T323] usb 3-1: USB disconnect, device number 6 [ 43.646384][ T28] audit: type=1326 audit(1748199798.196:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0018e969 code=0x7ffc0000 [ 43.675712][ T28] audit: type=1326 audit(1748199798.196:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb0018e969 code=0x7ffc0000 [ 43.689509][ T1581] loop4: detected capacity change from 0 to 40427 [ 43.705728][ T28] audit: type=1326 audit(1748199798.256:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0018e969 code=0x7ffc0000 [ 43.726628][ T1581] F2FS-fs (loop4): fault_injection options not supported [ 43.729404][ T28] audit: type=1326 audit(1748199798.256:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1600 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0018e969 code=0x7ffc0000 [ 43.737115][ T1581] F2FS-fs (loop4): invalid crc value [ 43.766893][ T1581] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.790646][ T1607] overlayfs: missing 'lowerdir' [ 43.812009][ T1581] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.987436][ T289] syz-executor: attempt to access beyond end of device [ 43.987436][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.090282][ T1617] loop4: detected capacity change from 0 to 512 [ 44.097285][ T1617] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.108416][ T1617] EXT4-fs (loop4): 1 truncate cleaned up [ 44.114164][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.114200][ T1617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.191824][ T28] audit: type=1400 audit(1748199798.766:1758): avc: denied { read write } for pid=1621 comm="syz.2.381" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.262245][ T28] audit: type=1400 audit(1748199798.766:1759): avc: denied { open } for pid=1621 comm="syz.2.381" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.262635][ T289] EXT4-fs (loop4): unmounting filesystem. [ 44.323688][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 44.329994][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.356966][ T28] audit: type=1400 audit(1748199798.936:1760): avc: denied { relabelfrom } for pid=1634 comm="syz.3.387" name="" dev="pipefs" ino=19849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 44.363679][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.407430][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.421177][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 44.435767][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.445835][ T1640] tmpfs: Unknown parameter 'context' [ 44.451451][ T24] usb 1-1: config 0 descriptor?? [ 44.614857][ T1655] process 'syz.4.396' launched './file0/file0/..' with NULL argv: empty string added [ 44.617333][ T1642] loop2: detected capacity change from 0 to 40427 [ 44.642853][ T1642] F2FS-fs (loop2): fault_injection options not supported [ 44.653696][ T422] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.662660][ T1642] F2FS-fs (loop2): invalid crc value [ 44.672044][ T1642] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.712534][ T1642] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.833693][ T19] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 44.844771][ T422] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.859864][ T422] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 44.862748][ T24] hid (null): nested delimiters [ 44.889039][ T422] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.893684][ T24] hid (null): global environment stack underflow [ 44.903889][ T422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.919789][ T422] usb 2-1: Product: syz [ 44.926984][ T422] usb 2-1: Manufacturer: syz [ 44.931788][ T422] usb 2-1: SerialNumber: syz [ 44.946506][ T422] cdc_mbim 2-1:1.0: skipping garbage [ 45.002465][ T282] syz-executor: attempt to access beyond end of device [ 45.002465][ T282] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.024845][ T19] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.043703][ T19] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 45.063699][ T19] usb 4-1: config 0 interface 0 has no altsetting 0 [ 45.064870][ T24] usb 1-1: USB disconnect, device number 5 [ 45.078666][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 45.090348][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.119491][ T19] usb 4-1: config 0 descriptor?? [ 45.125133][ T1651] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 45.147619][ T1638] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 45.198572][ T1689] loop4: detected capacity change from 0 to 512 [ 45.216301][ T1689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.225473][ T1689] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.245612][ T1689] syz.4.409[1689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.245706][ T1689] syz.4.409[1689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.263771][ T1689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.409: bg 0: block 18: invalid block bitmap [ 45.303256][ T289] EXT4-fs (loop4): unmounting filesystem. [ 45.338467][ T1702] netlink: '+}[@': attribute type 13 has an invalid length. [ 45.355206][ T1702] gretap0: refused to change device tx_queue_len [ 45.361608][ T1702] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.377765][ T1704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.539738][ T19] logitech 0003:046D:C24F.000C: unknown main item tag 0x0 [ 45.557337][ T19] logitech 0003:046D:C24F.000C: hidraw0: USB HID v0.07 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0 [ 45.565317][ T1707] loop4: detected capacity change from 0 to 40427 [ 45.569188][ T19] logitech 0003:046D:C24F.000C: no inputs found [ 45.576323][ T1707] F2FS-fs (loop4): fault_injection options not supported [ 45.609672][ T1707] F2FS-fs (loop4): invalid crc value [ 45.635837][ T1707] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.672425][ T1707] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.757850][ T19] usb 4-1: USB disconnect, device number 7 [ 45.769406][ T1638] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 45.777658][ T422] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 45.784992][ T422] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 45.792666][ T422] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, d6:bd:74:02:25:9d [ 45.892806][ T289] syz-executor: attempt to access beyond end of device [ 45.892806][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.963987][ T141] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 45.989114][ T525] usb 2-1: USB disconnect, device number 7 [ 45.997985][ T525] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 46.023756][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 46.214804][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 46.229375][ T24] usb 1-1: config 0 has no interface number 0 [ 46.240907][ T24] usb 1-1: config 0 interface 41 has no altsetting 0 [ 46.256216][ T1762] loop4: detected capacity change from 0 to 40427 [ 46.273953][ T24] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 46.291538][ T1762] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 46.303489][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.319313][ T1762] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.333938][ T1762] F2FS-fs (loop4): fault_injection options not supported [ 46.348013][ T24] usb 1-1: Product: syz [ 46.351585][ T1762] F2FS-fs (loop4): fault_type options not supported [ 46.357813][ T24] usb 1-1: Manufacturer: syz [ 46.364002][ T24] usb 1-1: SerialNumber: syz [ 46.373153][ T1762] F2FS-fs (loop4): fault_type options not supported [ 46.379933][ T24] usb 1-1: config 0 descriptor?? [ 46.391379][ T1788] netlink: 'syz.2.433': attribute type 34 has an invalid length. [ 46.402030][ T1762] F2FS-fs (loop4): invalid crc value [ 46.433783][ T1762] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.478028][ T1762] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 46.485392][ T1762] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.521421][ T1762] syz.4.428: attempt to access beyond end of device [ 46.521421][ T1762] loop4: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 46.542381][ T289] syz-executor: attempt to access beyond end of device [ 46.542381][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.595476][ T1808] loop2: detected capacity change from 0 to 256 [ 46.644259][ T1810] loop2: detected capacity change from 0 to 1024 [ 46.651007][ T1810] EXT4-fs: Ignoring removed nobh option [ 46.656993][ T1810] EXT4-fs: Ignoring removed bh option [ 46.666016][ T1810] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.673566][ T1812] loop4: detected capacity change from 0 to 512 [ 46.690580][ T1810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.703799][ T1812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.713139][ T1812] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.736272][ T282] EXT4-fs (loop2): unmounting filesystem. [ 46.737387][ T289] EXT4-fs (loop4): unmounting filesystem. [ 46.806945][ T1828] loop4: detected capacity change from 0 to 512 [ 46.816746][ T1828] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.447: casefold flag without casefold feature [ 46.829627][ T1828] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.447: couldn't read orphan inode 15 (err -117) [ 46.841850][ T1828] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.870072][ T289] EXT4-fs (loop4): unmounting filesystem. [ 46.995715][ T1840] netlink: 'syz.2.451': attribute type 3 has an invalid length. [ 47.003491][ T1840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 47.012457][ T1840] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 47.049109][ T1842] syz.2.452[1842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.049204][ T1842] syz.2.452[1842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.105766][ T1837] loop4: detected capacity change from 0 to 40427 [ 47.124580][ T1837] F2FS-fs (loop4): fault_injection options not supported [ 47.132706][ T1837] F2FS-fs (loop4): invalid crc value [ 47.141200][ T1837] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.176499][ T1837] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.300634][ T1856] loop4: detected capacity change from 0 to 2048 [ 47.344058][ T1856] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 47.349290][ T1856] loop4: partition table partially beyond EOD, truncated [ 47.356815][ T1856] loop4: p1 start 3405774849 is beyond EOD, truncated [ 47.363822][ T1856] loop4: p2 size 5046285 extends beyond EOD, truncated [ 47.372116][ T1856] loop4: p5 size 5046285 extends beyond EOD, truncated [ 47.390498][ T24] CoreChips: probe of 1-1:0.41 failed with error -71 [ 47.409010][ T24] usb 1-1: USB disconnect, device number 6 [ 47.451166][ T429] udevd[429]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.462233][ T306] udevd[306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.473785][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 47.485795][ T366] udevd[366]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 47.497271][ T363] udevd[363]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 47.533904][ T422] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 47.703742][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.791603][ T1871] loop1: detected capacity change from 0 to 40427 [ 47.799054][ T1871] F2FS-fs (loop1): fault_injection options not supported [ 47.807489][ T1871] F2FS-fs (loop1): invalid crc value [ 47.814123][ T1871] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.824890][ T422] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.838141][ T422] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.849602][ T422] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 47.863322][ T1871] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.880719][ T422] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=4d.40 [ 47.884853][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.895850][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.909306][ T422] usb 3-1: Product: syz [ 47.913482][ T422] usb 3-1: Manufacturer: syz [ 47.919610][ T422] usb 3-1: SerialNumber: syz [ 47.921172][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.939399][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 47.944230][ T1854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 47.948862][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.984434][ T39] usb 5-1: config 0 descriptor?? [ 48.199596][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 48.199613][ T28] audit: type=1400 audit(1748199802.776:1775): avc: denied { write } for pid=1883 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.290595][ T1894] loop0: detected capacity change from 0 to 512 [ 48.298769][ T1896] loop1: detected capacity change from 0 to 256 [ 48.317753][ T1896] FAT-fs (loop1): Directory bread(block 64) failed [ 48.320887][ T1894] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.324358][ T1896] FAT-fs (loop1): Directory bread(block 65) failed [ 48.333472][ T1894] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.340825][ T1896] FAT-fs (loop1): Directory bread(block 66) failed [ 48.357302][ T1896] FAT-fs (loop1): Directory bread(block 67) failed [ 48.364002][ T1896] FAT-fs (loop1): Directory bread(block 68) failed [ 48.370766][ T1896] FAT-fs (loop1): Directory bread(block 69) failed [ 48.377515][ T1896] FAT-fs (loop1): Directory bread(block 70) failed [ 48.381925][ T1894] syz.0.473[1894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.384127][ T1894] syz.0.473[1894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.384370][ T1896] FAT-fs (loop1): Directory bread(block 71) failed [ 48.401306][ T1894] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.473: bg 0: block 18: invalid block bitmap [ 48.409467][ T39] kone 0003:1E7D:2CED.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 48.428794][ T1896] FAT-fs (loop1): Directory bread(block 72) failed [ 48.444187][ T1896] FAT-fs (loop1): Directory bread(block 73) failed [ 48.453750][ T1798] Bluetooth: hci0: command 0x1003 tx timeout [ 48.459869][ T1168] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.474375][ T288] EXT4-fs (loop0): unmounting filesystem. [ 48.507056][ T1903] netlink: '+}[@': attribute type 13 has an invalid length. [ 48.531841][ T1903] gretap0: refused to change device tx_queue_len [ 48.538574][ T1903] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.580544][ T1906] loop1: detected capacity change from 0 to 2048 [ 48.618395][ T1906] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 48.623768][ T1906] loop1: partition table partially beyond EOD, [ 48.624295][ T19] usb 5-1: USB disconnect, device number 6 [ 48.636829][ T1906] truncated [ 48.640067][ T1906] loop1: p1 start 3405774849 is beyond EOD, truncated [ 48.649467][ T1906] loop1: p2 size 5046285 extends beyond EOD, truncated [ 48.663346][ T1906] loop1: p5 size 5046285 extends beyond EOD, truncated [ 48.721260][ T28] audit: type=1400 audit(1748199803.296:1776): avc: denied { execute } for pid=1917 comm="syz.3.483" path="/85/cpu.stat" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.758680][ T364] udevd[364]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 48.772661][ T363] udevd[363]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 48.772741][ T366] udevd[366]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 48.789404][ T429] udevd[429]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 48.794787][ T365] udevd[365]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 48.819507][ T1924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 48.858373][ T1926] loop1: detected capacity change from 0 to 512 [ 48.873684][ T293] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 48.883984][ T1926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.893089][ T1926] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.908177][ T1926] syz.1.487[1926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.908274][ T1926] syz.1.487[1926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.922941][ T1926] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.487: bg 0: block 18: invalid block bitmap [ 48.958291][ T287] EXT4-fs (loop1): unmounting filesystem. [ 48.971673][ T422] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 48.993893][ T422] cdc_ncm 3-1:1.0: bind() failure [ 49.002517][ T1923] loop3: detected capacity change from 0 to 40427 [ 49.002782][ T422] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 49.016954][ T422] cdc_ncm 3-1:1.1: bind() failure [ 49.025883][ T1923] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 49.026667][ T422] usb 3-1: USB disconnect, device number 7 [ 49.032477][ T1923] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 49.050124][ T1923] F2FS-fs (loop3): invalid crc value [ 49.055595][ T293] usb 1-1: Using ep0 maxpacket: 16 [ 49.062119][ T293] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.080862][ T293] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.090781][ T293] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.090821][ T1923] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.104463][ T293] usb 1-1: config 0 interface 0 has no altsetting 0 [ 49.121725][ T293] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 49.143841][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.162398][ T293] usb 1-1: config 0 descriptor?? [ 49.176888][ T28] audit: type=1400 audit(1748199803.756:1777): avc: denied { ioctl } for pid=1939 comm="syz.4.501" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.178606][ T1923] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 49.203016][ T1942] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.209682][ T1923] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.305984][ T28] audit: type=1326 audit(1748199803.886:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.1.496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d18e969 code=0x0 [ 49.343999][ T28] audit: type=1400 audit(1748199803.916:1779): avc: denied { create } for pid=1955 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.370217][ T28] audit: type=1400 audit(1748199803.926:1780): avc: denied { ioctl } for pid=1955 comm="syz.4.497" path="socket:[20341]" dev="sockfs" ino=20341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.397728][ T28] audit: type=1400 audit(1748199803.926:1781): avc: denied { setopt } for pid=1955 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.411939][ T1923] syz.3.485: attempt to access beyond end of device [ 49.411939][ T1923] loop3: rw=0, sector=77864, nr_sectors = 8 limit=40427 [ 49.417200][ T28] audit: type=1400 audit(1748199803.926:1782): avc: denied { write } for pid=1955 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.450149][ T28] audit: type=1400 audit(1748199803.926:1783): avc: denied { read } for pid=1955 comm="syz.4.497" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.471221][ T284] syz-executor: attempt to access beyond end of device [ 49.471221][ T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 49.562409][ T1963] loop3: detected capacity change from 0 to 512 [ 49.573148][ T1963] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 49.588254][ T1963] EXT4-fs (loop3): invalid journal inode [ 49.593996][ T1963] EXT4-fs (loop3): can't get journal size [ 49.603032][ T293] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 49.610510][ T293] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 49.618752][ T293] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 49.626418][ T1963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 49.634501][ T293] hid-generic 0003:045E:05DA.000E: ignoring exceeding usage max [ 49.643703][ T422] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 49.651646][ T1963] System zones: 1-12, 13-13 [ 49.656876][ T293] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 49.665245][ T1963] EXT4-fs (loop3): 1 truncate cleaned up [ 49.670906][ T1963] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.680203][ T293] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 49.687741][ T293] hid-generic 0003:045E:05DA.000E: unbalanced collection at end of report description [ 49.692190][ T1961] loop2: detected capacity change from 0 to 40427 [ 49.706538][ T28] audit: type=1400 audit(1748199804.286:1784): avc: denied { shutdown } for pid=1962 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.713229][ T1961] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 49.733551][ T293] hid-generic: probe of 0003:045E:05DA.000E failed with error -22 [ 49.734508][ T1961] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.751614][ T1961] F2FS-fs (loop2): invalid crc value [ 49.752091][ T284] EXT4-fs (loop3): unmounting filesystem. [ 49.776996][ T1961] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.808365][ T39] usb 1-1: USB disconnect, device number 7 [ 49.824557][ T1961] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 49.831725][ T1961] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.854850][ T422] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.865154][ T422] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.875052][ T422] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 49.886325][ T422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.894511][ T422] usb 5-1: SerialNumber: syz [ 50.063676][ T525] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 50.117872][ T422] usb 5-1: 0:2 : does not exist [ 50.130079][ T422] usb 5-1: USB disconnect, device number 7 [ 50.254951][ T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.269295][ T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.279355][ T525] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.293600][ T525] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.312965][ T525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.358104][ T525] usb 4-1: config 0 descriptor?? [ 50.367688][ T2003] loop0: detected capacity change from 0 to 16 [ 50.395352][ T2003] erofs: (device loop0): mounted with root inode @ nid 36. [ 50.643686][ T422] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 50.783163][ T525] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 50.802330][ T525] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 50.855629][ T422] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.857062][ T2023] loop0: detected capacity change from 0 to 512 [ 50.879515][ T2023] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.512: casefold flag without casefold feature [ 50.888855][ T422] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.892644][ T2023] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.512: couldn't read orphan inode 15 (err -117) [ 50.916182][ T2023] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.945061][ T422] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.974871][ T422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.986107][ T422] usb 2-1: Product: syz [ 50.990309][ T422] usb 2-1: Manufacturer: syz [ 51.001708][ T422] usb 2-1: SerialNumber: syz [ 51.007910][ T288] EXT4-fs (loop0): unmounting filesystem. [ 51.075219][ T525] usb 4-1: USB disconnect, device number 8 [ 51.221669][ T422] usb 2-1: 0:2 : does not exist [ 51.229355][ T422] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 51.257175][ T422] usb 2-1: USB disconnect, device number 8 [ 51.336578][ T2026] loop2: detected capacity change from 0 to 131072 [ 51.343982][ T2026] F2FS-fs (loop2): Test dummy encryption mode enabled [ 51.351663][ T2026] F2FS-fs (loop2): invalid crc value [ 51.358474][ T2026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.391038][ T2026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.423276][ T2026] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 51.451649][ T2034] netlink: 'syz.4.517': attribute type 6 has an invalid length. [ 51.803977][ T422] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 51.993680][ T422] usb 5-1: Using ep0 maxpacket: 16 [ 51.999948][ T422] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 52.019108][ T422] usb 5-1: config 0 has no interface number 0 [ 52.040805][ T422] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 52.055206][ T422] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 52.086205][ T422] usb 5-1: config 0 interface 41 has no altsetting 0 [ 52.115090][ T422] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 52.133677][ T422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.162114][ T422] usb 5-1: Product: syz [ 52.172211][ T422] usb 5-1: Manufacturer: syz [ 52.182302][ T422] usb 5-1: SerialNumber: syz [ 52.194362][ T422] usb 5-1: config 0 descriptor?? [ 52.199767][ T2045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 52.224064][ T2078] syz.2.534[2078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.224179][ T2078] syz.2.534[2078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.235619][ T2045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 52.255869][ T2069] loop1: detected capacity change from 0 to 40427 [ 52.265000][ T2069] F2FS-fs (loop1): fault_injection options not supported [ 52.283754][ T2069] F2FS-fs (loop1): invalid crc value [ 52.298866][ T2069] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.396922][ T2069] F2FS-fs (loop1): Start checkpoint disabled! [ 52.422506][ T2069] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 52.467788][ T2045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 52.490274][ T2045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 52.554559][ T2089] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 52.565957][ T777] kworker/u4:205: attempt to access beyond end of device [ 52.565957][ T777] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 52.912080][ T2115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.551'. [ 52.921374][ T422] Error reading MAC address [ 52.927123][ T2045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 52.943752][ T2045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 53.019245][ T777] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.155092][ T422] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 53.174881][ T422] usb 5-1: USB disconnect, device number 8 [ 53.251500][ T28] kauditd_printk_skb: 981 callbacks suppressed [ 53.251517][ T28] audit: type=1326 audit(1748199807.826:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0018e969 code=0x7ffc0000 [ 53.313676][ T28] audit: type=1326 audit(1748199807.826:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.337592][ T28] audit: type=1326 audit(1748199807.826:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.361127][ T28] audit: type=1326 audit(1748199807.826:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.384655][ T28] audit: type=1326 audit(1748199807.826:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.409659][ T28] audit: type=1326 audit(1748199807.826:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.433092][ T28] audit: type=1326 audit(1748199807.826:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.456626][ T28] audit: type=1326 audit(1748199807.826:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.480048][ T28] audit: type=1326 audit(1748199807.826:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.503666][ T28] audit: type=1326 audit(1748199807.826:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb0012ab39 code=0x7ffc0000 [ 53.801060][ T2134] netem: change failed [ 53.996418][ T2152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 54.669290][ T2170] loop1: detected capacity change from 0 to 40427 [ 54.691507][ T2170] F2FS-fs (loop1): invalid crc value [ 54.716516][ T2170] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.776456][ T2170] F2FS-fs (loop1): Start checkpoint disabled! [ 54.783852][ T2170] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 54.860295][ T2178] device ip6tnl1 entered promiscuous mode [ 54.900737][ T776] kworker/u4:204: attempt to access beyond end of device [ 54.900737][ T776] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 55.093669][ T1168] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.093711][ T1798] Bluetooth: hci0: command 0x1003 tx timeout [ 55.364842][ T2211] netlink: 2 bytes leftover after parsing attributes in process `syz.3.594'. [ 55.483732][ T39] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 55.603706][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 55.663722][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 55.670218][ T39] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 55.678492][ T39] usb 2-1: config 0 has no interface number 0 [ 55.684645][ T39] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 55.694565][ T39] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 55.704486][ T39] usb 2-1: config 0 interface 41 has no altsetting 0 [ 55.712656][ T39] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 55.721748][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.729789][ T39] usb 2-1: Product: syz [ 55.734052][ T39] usb 2-1: Manufacturer: syz [ 55.738740][ T39] usb 2-1: SerialNumber: syz [ 55.744001][ T39] usb 2-1: config 0 descriptor?? [ 55.749542][ T2188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.756820][ T2188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.783721][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 55.790092][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.801103][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.811099][ T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 55.820230][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.829155][ T19] usb 1-1: config 0 descriptor?? [ 55.967288][ T2188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.974974][ T2188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 56.081311][ T2228] input: syz0 as /devices/virtual/input/input17 [ 56.239499][ T19] savu 0003:1E7D:2D5A.0010: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 56.241901][ T2237] loop3: detected capacity change from 0 to 512 [ 56.320309][ T2237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.361614][ T2237] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.384882][ T39] Error reading MAC address [ 56.389891][ T2188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 56.406874][ T2188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 56.460151][ T284] EXT4-fs (loop3): unmounting filesystem. [ 56.514914][ T525] usb 1-1: USB disconnect, device number 8 [ 56.561087][ T2248] loop3: detected capacity change from 0 to 512 [ 56.580573][ T2248] EXT4-fs (loop3): Test dummy encryption mode enabled [ 56.591109][ T2248] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.604: invalid block [ 56.612003][ T2248] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.604: couldn't read orphan inode 11 (err -117) [ 56.630276][ T39] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 56.641501][ T39] usb 2-1: USB disconnect, device number 9 [ 56.651870][ T2248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.681634][ T2248] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 56.712159][ T284] EXT4-fs (loop3): unmounting filesystem. [ 56.756430][ T2255] device sit0 entered promiscuous mode [ 56.776214][ T2255] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 56.799551][ T2255] netlink: 1 bytes leftover after parsing attributes in process `syz.3.608'. [ 56.943549][ T2261] loop2: detected capacity change from 0 to 512 [ 56.952020][ T2261] EXT4-fs: Ignoring removed oldalloc option [ 56.980216][ T2261] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.613: Parent and EA inode have the same ino 15 [ 57.009838][ T2261] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.613: Parent and EA inode have the same ino 15 [ 57.047724][ T2261] EXT4-fs (loop2): 1 orphan inode deleted [ 57.059666][ T2261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.085211][ T2261] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 57.107850][ T282] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 57.119862][ T2257] loop3: detected capacity change from 0 to 40427 [ 57.139408][ T282] ------------[ cut here ]------------ [ 57.144960][ T282] kernel BUG at fs/namei.c:2954! [ 57.153807][ T2257] F2FS-fs (loop3): fault_type options not supported [ 57.171591][ T2257] F2FS-fs (loop3): invalid crc value [ 57.185953][ T2257] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.187427][ T282] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 57.198312][ T282] CPU: 0 PID: 282 Comm: syz-executor Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 57.208216][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.218368][ T282] RIP: 0010:may_delete+0x701/0x710 [ 57.223606][ T282] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 30 19 f4 ff e9 77 fe ff ff e8 d6 c7 af ff 0f 0b e8 cf c7 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 57.243241][ T282] RSP: 0018:ffffc90000c87c20 EFLAGS: 00010293 [ 57.245030][ T2257] F2FS-fs (loop3): Start checkpoint disabled! [ 57.249329][ T282] RAX: ffffffff81c020d1 RBX: ffff8881118a6ee0 RCX: ffff88810d89e540 [ 57.256302][ T2257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 57.263402][ T282] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 57.278840][ T282] RBP: ffffc90000c87c88 R08: 0000000000000004 R09: 0000000000000003 [ 57.286842][ T282] R10: fffff52000190f64 R11: 1ffff92000190f64 R12: dffffc0000000000 [ 57.294842][ T282] R13: 0000000000000001 R14: ffff88810c348be0 R15: 1ffff11022314ddc [ 57.296009][ T2257] syz.3.612: attempt to access beyond end of device [ 57.296009][ T2257] loop3: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 57.302838][ T282] FS: 000055558ff5d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 57.319084][ T2257] syz.3.612: attempt to access beyond end of device [ 57.319084][ T2257] loop3: rw=2049, sector=77824, nr_sectors = 40 limit=40427 [ 57.325580][ T282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.325600][ T282] CR2: 0000001b2d71dff8 CR3: 0000000129304000 CR4: 00000000003506b0 [ 57.325617][ T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.325630][ T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.325644][ T282] Call Trace: [ 57.325650][ T282] [ 57.340251][ T2257] syz.3.612: attempt to access beyond end of device [ 57.340251][ T2257] loop3: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 57.345943][ T282] vfs_rmdir+0x32/0x500 [ 57.345973][ T282] incfs_kill_sb+0x105/0x220 [ 57.398739][ T282] deactivate_locked_super+0xb5/0x120 [ 57.404141][ T282] deactivate_super+0xaf/0xe0 [ 57.408828][ T282] cleanup_mnt+0x45f/0x4e0 [ 57.413261][ T282] __cleanup_mnt+0x19/0x20 [ 57.417686][ T282] task_work_run+0x1db/0x240 [ 57.422274][ T282] ? __cfi_task_work_run+0x10/0x10 [ 57.427380][ T282] ? __x64_sys_umount+0x125/0x160 [ 57.432398][ T282] ? __cfi___x64_sys_umount+0x10/0x10 [ 57.437762][ T282] exit_to_user_mode_loop+0x9b/0xb0 [ 57.443008][ T282] exit_to_user_mode_prepare+0x5a/0xa0 [ 57.448479][ T282] syscall_exit_to_user_mode+0x1a/0x30 [ 57.453932][ T282] do_syscall_64+0x58/0xa0 [ 57.458374][ T282] ? clear_bhb_loop+0x15/0x70 [ 57.463041][ T282] ? clear_bhb_loop+0x15/0x70 [ 57.467707][ T282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.473694][ T282] RIP: 0033:0x7f4b9698fc97 [ 57.478116][ T282] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 57.497713][ T282] RSP: 002b:00007ffd35a29d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 57.506210][ T282] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4b9698fc97 [ 57.514208][ T282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd35a29e30 [ 57.522482][ T282] RBP: 00007ffd35a29e30 R08: 0000000000000000 R09: 0000000000000000 [ 57.530456][ T282] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd35a2af20 [ 57.538424][ T282] R13: 00007f4b96a1089d R14: 000000000000def8 R15: 00007ffd35a2bff0 [ 57.546430][ T282] [ 57.549451][ T282] Modules linked in: [ 57.555210][ T282] ---[ end trace 0000000000000000 ]--- [ 57.560707][ T282] RIP: 0010:may_delete+0x701/0x710 [ 57.565924][ T282] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 30 19 f4 ff e9 77 fe ff ff e8 d6 c7 af ff 0f 0b e8 cf c7 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 57.576694][ T664] kworker/u4:99: attempt to access beyond end of device [ 57.576694][ T664] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 57.586984][ T282] RSP: 0018:ffffc90000c87c20 EFLAGS: 00010293 [ 57.605978][ T282] RAX: ffffffff81c020d1 RBX: ffff8881118a6ee0 RCX: ffff88810d89e540 [ 57.614057][ T282] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 57.622042][ T282] RBP: ffffc90000c87c88 R08: 0000000000000004 R09: 0000000000000003 [ 57.630193][ T19] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 57.637732][ T282] R10: fffff52000190f64 R11: 1ffff92000190f64 R12: dffffc0000000000 [ 57.645888][ T282] R13: 0000000000000001 R14: ffff88810c348be0 R15: 1ffff11022314ddc [ 57.653978][ T282] FS: 000055558ff5d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 57.663005][ T282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.669696][ T282] CR2: 0000001b2d71dff8 CR3: 0000000129304000 CR4: 00000000003506b0 [ 57.677835][ T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.685890][ T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.694021][ T282] Kernel panic - not syncing: Fatal exception [ 57.700316][ T282] Kernel Offset: disabled [ 57.704668][ T282] Rebooting in 86400 seconds..