last executing test programs: 3.825725949s ago: executing program 0 (id=866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}, 0xab}], 0x1, 0x10003, 0x0) 3.797309392s ago: executing program 0 (id=867): r0 = syz_usb_connect$hid(0x0, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00008400000084"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.105339642s ago: executing program 3 (id=897): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000015) 2.082298705s ago: executing program 3 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000b1000040"]) 2.041044899s ago: executing program 3 (id=899): r0 = userfaultfd(0x80001) r1 = io_uring_setup(0x109b, &(0x7f0000000000)) r2 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000200)=r2, 0x1) dup3(r0, r1, 0x0) 2.03299381s ago: executing program 3 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 2.021242342s ago: executing program 3 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) 1.989421606s ago: executing program 3 (id=902): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.768930361s ago: executing program 0 (id=903): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r0}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) 1.714540348s ago: executing program 0 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getrusage(0x1, &(0x7f0000000000)) 1.714167968s ago: executing program 0 (id=905): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000080)=0xc) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210060, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=', @ANYRESOCT=r1]) 1.666619963s ago: executing program 0 (id=906): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000107d1ece31000000000001090224000100000000090400000203000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220b0000002b0f2bb50a28"], 0x0}, 0x0) 1.123555527s ago: executing program 2 (id=916): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) 1.081905522s ago: executing program 2 (id=917): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r2}, 0xc) 1.081548782s ago: executing program 2 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) capget(0x0, 0x0) 1.081213192s ago: executing program 2 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_sigaction(0x22, 0x0, 0x0, 0x8, &(0x7f0000000380)) 1.061722074s ago: executing program 2 (id=920): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000880)=0x3, 0x4) setsockopt(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) close(r0) 1.056059155s ago: executing program 2 (id=921): pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private1, 0x40000000, 0x1, 0x0, 0x1, 0x4, 0x8000}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 660.064832ms ago: executing program 1 (id=925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 651.998703ms ago: executing program 1 (id=926): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1548f5e0b33006bd1049ca45bd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 495.218632ms ago: executing program 4 (id=933): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 437.735439ms ago: executing program 4 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) userfaultfd(0x1) 421.686851ms ago: executing program 4 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) 360.964718ms ago: executing program 4 (id=936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@data_writeback}, {@noquota}, {@nomblk_io_submit}, {@init_itable_val}, {@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nodiscard}, {@data_writeback}]}, 0x1, 0x24f, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) unshare(0x62040200) 359.247598ms ago: executing program 1 (id=937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r2, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0x4}}}}, 0x20}}, 0x0) 228.819553ms ago: executing program 4 (id=938): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@appraise_type}], 0x2c}, 0x84, 0x463, &(0x7f0000000b00)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdir(&(0x7f00000001c0)='./bus\x00', 0xc) 227.170773ms ago: executing program 1 (id=948): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) fcntl$setpipe(r0, 0x407, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/124, 0x7c) write$char_usb(r1, &(0x7f0000000440)="9302", 0x2) 158.046762ms ago: executing program 1 (id=939): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000002e00)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d9, &(0x7f0000002e80)="$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") mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x20, 0x0) rmdir(&(0x7f0000000100)='./file2\x00') unlink(&(0x7f0000000080)='./file0/file0\x00') 108.264007ms ago: executing program 4 (id=940): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0x2, &(0x7f0000001fc0)={0xe2a, 0xfffffffffffffffd}, 0x0) brk(0x20ffc004) 0s ago: executing program 1 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r0}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff20850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) kernel console output (not intermixed with test programs): [ 36.062419][ T753] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 36.094851][ T759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.129782][ T315] EXT4-fs (loop3): unmounting filesystem. [ 36.225495][ T782] loop3: detected capacity change from 0 to 16 [ 36.242228][ T782] erofs: (device loop3): mounted with root inode @ nid 36. [ 36.256916][ T319] usb 2-1: Using ep0 maxpacket: 8 [ 36.265286][ T782] syz.3.189: attempt to access beyond end of device [ 36.265286][ T782] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 36.308240][ T786] loop2: detected capacity change from 0 to 256 [ 36.328726][ T784] loop0: detected capacity change from 0 to 2048 [ 36.339303][ T788] device batadv_slave_0 entered promiscuous mode [ 36.386975][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.389927][ T784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.401938][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.415782][ T319] usb 2-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 36.456579][ T311] EXT4-fs (loop0): unmounting filesystem. [ 36.472241][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.487805][ T319] usb 2-1: config 0 descriptor?? [ 36.503298][ T806] loop0: detected capacity change from 0 to 256 [ 36.512043][ T806] exfat: Deprecated parameter 'utf8' [ 36.519326][ T806] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 36.590939][ T822] loop0: detected capacity change from 0 to 512 [ 36.597565][ T822] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 36.607631][ T822] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.613905][ T822] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.208: Block bitmap for bg 0 marked uninitialized [ 36.627092][ T822] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 36.635769][ T822] EXT4-fs (loop0): 1 orphan inode deleted [ 36.641434][ T822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.666871][ T334] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.689767][ T311] EXT4-fs (loop0): unmounting filesystem. [ 36.701741][ T830] syz.0.211[830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.701783][ T830] syz.0.211[830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.801117][ T850] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 36.820844][ T850] SELinux: failed to load policy [ 36.835871][ T852] loop0: detected capacity change from 0 to 512 [ 36.848463][ T852] EXT4-fs (loop0): 1 orphan inode deleted [ 36.854004][ T852] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.856853][ T336] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 36.862823][ T852] ext4 filesystem being mounted at /46/bus supports timestamps until 2038 (0x7fffffff) [ 36.894999][ T311] EXT4-fs (loop0): unmounting filesystem. [ 36.907921][ T856] loop0: detected capacity change from 0 to 512 [ 36.917090][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 36.920111][ T856] EXT4-fs (loop0): 1 orphan inode deleted [ 36.927673][ T856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.936317][ T856] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038 (0x7fffffff) [ 36.949229][ T856] EXT4-fs error (device loop0): ext4_lookup:1855: inode #13: comm syz.0.223: iget: bad extended attribute block 393216 [ 36.950304][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.961918][ T856] EXT4-fs (loop0): Remounting filesystem read-only [ 36.979836][ T311] EXT4-fs (loop0): unmounting filesystem. [ 36.988184][ T319] wacom 0003:056A:4135.0003: unknown main item tag 0x0 [ 36.995099][ T319] wacom 0003:056A:4135.0003: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 37.016357][ T864] loop0: detected capacity change from 0 to 512 [ 37.027906][ T864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.036650][ T864] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 37.053356][ T864] EXT4-fs error (device loop0): ext4_get_first_dir_block:3540: inode #12: comm syz.0.226: Directory hole found for htree leaf block [ 37.070398][ T311] EXT4-fs (loop0): unmounting filesystem. [ 37.136854][ T336] usb 4-1: Using ep0 maxpacket: 16 [ 37.195932][ T319] usb 2-1: USB disconnect, device number 3 [ 37.236932][ T334] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 37.245834][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.253905][ T334] usb 3-1: Product: syz [ 37.257945][ T336] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 37.267642][ T334] usb 3-1: Manufacturer: syz [ 37.272044][ T334] usb 3-1: SerialNumber: syz [ 37.276652][ T336] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 37.286395][ T334] r8152-cfgselector 3-1: config 0 descriptor?? [ 37.292371][ T336] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.305313][ T336] usb 4-1: config 1 interface 0 has no altsetting 0 [ 37.326888][ T39] usb 5-1: config 0 has no interfaces? [ 37.382210][ T888] loop0: detected capacity change from 0 to 256 [ 37.396898][ T336] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.407591][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.415402][ T336] usb 4-1: SerialNumber: syz [ 37.436936][ T817] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 37.443951][ T817] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 37.455660][ T896] loop0: detected capacity change from 0 to 4096 [ 37.464245][ T896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.478897][ T896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.485390][ T896] EXT4-fs: Cannot specify journal on remount [ 37.486874][ T39] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 37.500181][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.508103][ T39] usb 5-1: Product: syz [ 37.509128][ T311] EXT4-fs (loop0): unmounting filesystem. [ 37.512066][ T39] usb 5-1: Manufacturer: syz [ 37.512081][ T39] usb 5-1: SerialNumber: syz [ 37.514760][ T39] r8152-cfgselector 5-1: config 0 descriptor?? [ 37.556907][ T334] r8152-cfgselector 3-1: Unknown version 0x0000 [ 37.577355][ T907] xt_bpf: check failed: parse error [ 37.596898][ T334] r8152-cfgselector 3-1: Unknown version 0x0000 [ 37.603001][ T334] r8152-cfgselector 3-1: bad CDC descriptors [ 37.663040][ T817] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 37.670409][ T817] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 37.713621][ T924] xt_bpf: check failed: parse error [ 37.750453][ T10] usb 3-1: config 0 descriptor?? [ 37.763424][ T936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 37.780027][ T938] capability: warning: `syz.1.260' uses 32-bit capabilities (legacy support in use) [ 37.786886][ T39] r8152-cfgselector 5-1: Unknown version 0x7cf0 [ 37.812519][ T942] loop1: detected capacity change from 0 to 512 [ 37.819165][ T942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.830318][ T942] EXT4-fs (loop1): 1 orphan inode deleted [ 37.835837][ T942] EXT4-fs (loop1): 1 truncate cleaned up [ 37.841356][ T942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.850101][ T19] usb 3-1: USB disconnect, device number 3 [ 37.850223][ T10] usb 3-1: can't set config #0, error -71 [ 37.858165][ T942] EXT4-fs error (device loop1): empty_inline_dir:1858: inode #12: block 7: comm syz.1.262: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 37.880033][ T942] EXT4-fs (loop1): Remounting filesystem read-only [ 37.886705][ T942] EXT4-fs warning (device loop1): empty_inline_dir:1865: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 37.904084][ T313] EXT4-fs (loop1): unmounting filesystem. [ 38.006972][ T60] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 38.026892][ T319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.106957][ T336] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 38.276847][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.313190][ T336] usb 4-1: USB disconnect, device number 2 [ 38.373670][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 38.373681][ T28] audit: type=1400 audit(1729628225.320:225): avc: denied { connect } for pid=956 comm="syz.2.268" lport=125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.400032][ T28] audit: type=1400 audit(1729628225.320:226): avc: denied { write } for pid=956 comm="syz.2.268" laddr=fe80::12 lport=125 faddr=fe80::bb fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.426922][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.428955][ T28] audit: type=1326 audit(1729628225.350:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=958 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b97dff9 code=0x7ffc0000 [ 38.460560][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.460685][ T28] audit: type=1326 audit(1729628225.350:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=958 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f082b97dff9 code=0x7ffc0000 [ 38.470207][ T319] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 38.493251][ T28] audit: type=1326 audit(1729628225.350:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=958 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b97dff9 code=0x7ffc0000 [ 38.503945][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.524968][ T28] audit: type=1326 audit(1729628225.350:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=958 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f082b97dff9 code=0x7ffc0000 [ 38.537307][ T319] usb 1-1: config 0 descriptor?? [ 38.560147][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 38.565312][ T28] audit: type=1326 audit(1729628225.350:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=958 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b97dff9 code=0x7ffc0000 [ 38.604447][ T28] audit: type=1326 audit(1729628225.350:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=958 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f082b97dff9 code=0x7ffc0000 [ 38.627601][ T971] Illegal XDP return value 4294967262 on prog (id 87) dev N/A, expect packet loss! [ 38.637945][ T28] audit: type=1326 audit(1729628225.350:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=958 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b97dff9 code=0x7ffc0000 [ 38.697461][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.716986][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.726504][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 38.744817][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 38.753894][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.763002][ T39] usb 2-1: config 0 descriptor?? [ 38.774167][ T28] audit: type=1400 audit(1729628225.720:234): avc: denied { unmount } for pid=312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.815770][ T986] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 38.825919][ T986] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 38.872281][ T996] loop4: detected capacity change from 0 to 16 [ 38.881262][ T996] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 38.884811][ T998] loop3: detected capacity change from 0 to 256 [ 38.895633][ T996] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 38.910210][ T998] exfat: Deprecated parameter 'namecase' [ 38.917632][ T996] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.918514][ T998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 38.944128][ T996] syz.4.285: attempt to access beyond end of device [ 38.944128][ T996] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 38.958290][ T996] syz.4.285: attempt to access beyond end of device [ 38.958290][ T996] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 39.053172][ T1014] loop4: detected capacity change from 0 to 16 [ 39.060447][ T319] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 39.067977][ T319] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 39.074728][ T319] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 39.082554][ T1014] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 39.101629][ T319] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 39.113004][ T319] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 39.120015][ T319] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0 [ 39.127513][ T319] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 39.165188][ T1000] loop2: detected capacity change from 0 to 40427 [ 39.182991][ T1000] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 39.195006][ T1000] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.210939][ T1000] F2FS-fs (loop2): invalid crc value [ 39.218877][ T1000] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.225089][ T1023] loop4: detected capacity change from 0 to 2048 [ 39.237824][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.250087][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.262471][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.275525][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.289607][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.296986][ T1000] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 39.303863][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.307910][ T1000] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 39.315845][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.339457][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.346576][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.347245][ T1023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.353762][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.369151][ T1000] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 39.369170][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x1 [ 39.383418][ T39] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 39.390538][ T39] logitech 0003:046D:C29C.0005: item fetching failed at offset 14/133 [ 39.398740][ T39] logitech 0003:046D:C29C.0005: parse failed [ 39.405172][ T39] logitech: probe of 0003:046D:C29C.0005 failed with error -22 [ 39.418056][ T333] usb 1-1: USB disconnect, device number 3 [ 39.457444][ T312] EXT4-fs (loop4): unmounting filesystem. [ 39.497405][ T319] usb 2-1: USB disconnect, device number 4 [ 39.548456][ T1049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'. [ 39.596302][ T1057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 39.650610][ T1063] loop3: detected capacity change from 0 to 2048 [ 39.658746][ T1063] Alternate GPT is invalid, using primary GPT. [ 39.664763][ T1063] loop3: p1 p2 p3 [ 39.688698][ T1069] input: syz0 as /devices/virtual/input/input9 [ 39.720103][ T403] udevd[403]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.731759][ T408] udevd[408]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 39.746688][ T337] udevd[337]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.856961][ T336] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.872310][ T1077] loop3: detected capacity change from 0 to 40427 [ 39.879212][ T1085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1085 comm=syz.0.327 [ 39.886994][ T1077] F2FS-fs (loop3): heap/no_heap options were deprecated [ 39.903154][ T1077] F2FS-fs (loop3): invalid crc value [ 39.909164][ T1077] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.931889][ T1077] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.947521][ T315] syz-executor: attempt to access beyond end of device [ 39.947521][ T315] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.046865][ T319] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 40.057724][ T1102] loop3: detected capacity change from 0 to 256 [ 40.075445][ T1102] FAT-fs (loop3): Directory bread(block 64) failed [ 40.081917][ T1102] FAT-fs (loop3): Directory bread(block 65) failed [ 40.089424][ T1102] FAT-fs (loop3): Directory bread(block 66) failed [ 40.095742][ T1102] FAT-fs (loop3): Directory bread(block 67) failed [ 40.102287][ T1102] FAT-fs (loop3): Directory bread(block 68) failed [ 40.108776][ T1102] FAT-fs (loop3): Directory bread(block 69) failed [ 40.119480][ T1102] FAT-fs (loop3): Directory bread(block 70) failed [ 40.134545][ T1102] FAT-fs (loop3): Directory bread(block 71) failed [ 40.141014][ T1102] FAT-fs (loop3): Directory bread(block 72) failed [ 40.147417][ T1102] FAT-fs (loop3): Directory bread(block 73) failed [ 40.214921][ T1120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 40.237345][ T1122] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 40.246276][ T1118] loop1: detected capacity change from 0 to 8192 [ 40.339352][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.339384][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.339415][ T336] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 40.368545][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.385834][ T336] usb 3-1: config 0 descriptor?? [ 40.469209][ T1134] SELinux: Context Ü is not valid (left unmapped). [ 40.497829][ T319] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 40.506510][ T319] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 40.514440][ T319] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 40.523258][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 40.533025][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 40.611894][ T1140] loop1: detected capacity change from 0 to 1024 [ 40.624517][ T1140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.652537][ T313] EXT4-fs (loop1): unmounting filesystem. [ 40.848362][ T336] apple 0003:05AC:0262.0006: unbalanced delimiter at end of report description [ 40.867360][ T336] apple 0003:05AC:0262.0006: parse failed [ 40.877367][ T336] apple: probe of 0003:05AC:0262.0006 failed with error -22 [ 40.915227][ T1169] netlink: 96 bytes leftover after parsing attributes in process `syz.0.364'. [ 40.924237][ T1169] netlink: 96 bytes leftover after parsing attributes in process `syz.0.364'. [ 40.947561][ T1130] loop3: detected capacity change from 0 to 131072 [ 40.957596][ T333] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.969834][ T1130] F2FS-fs (loop3): Test dummy encryption mode enabled [ 40.984106][ T1130] F2FS-fs (loop3): invalid crc value [ 40.990728][ T1130] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.006890][ T1177] syz.0.366[1177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.006955][ T1177] syz.0.366[1177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.031493][ T1130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.066253][ T336] usb 3-1: USB disconnect, device number 4 [ 41.095997][ T1130] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 41.136898][ T319] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 41.145828][ T319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.153813][ T319] usb 5-1: Manufacturer: ц [ 41.159034][ T319] usb 5-1: config 0 descriptor?? [ 41.197131][ T319] hub 5-1:0.0: bad descriptor, ignoring hub [ 41.202840][ T319] hub: probe of 5-1:0.0 failed with error -5 [ 41.209204][ T319] input: ц as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 41.396894][ T333] usb 2-1: config 0 has an invalid interface number: 157 but max is 1 [ 41.401910][ T336] usb 5-1: USB disconnect, device number 3 [ 41.405086][ T333] usb 2-1: config 0 has an invalid interface number: 244 but max is 1 [ 41.418604][ T333] usb 2-1: config 0 has no interface number 0 [ 41.424408][ T333] usb 2-1: config 0 has no interface number 1 [ 41.430805][ T333] usb 2-1: config 0 interface 157 altsetting 133 endpoint 0x9 has an invalid bInterval 83, changing to 10 [ 41.441956][ T333] usb 2-1: config 0 interface 157 altsetting 133 endpoint 0x4 has invalid maxpacket 1536, setting to 64 [ 41.452907][ T333] usb 2-1: config 0 interface 244 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 41.462498][ T333] usb 2-1: config 0 interface 244 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 8 [ 41.472112][ T333] usb 2-1: config 0 interface 157 has no altsetting 0 [ 41.478711][ T333] usb 2-1: config 0 interface 244 has no altsetting 0 [ 41.516889][ T333] usb 2-1: language id specifier not provided by device, defaulting to English [ 41.592905][ T319] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 41.607715][ T319] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.630721][ T1221] loop0: detected capacity change from 0 to 4096 [ 41.637762][ T333] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=81.b0 [ 41.646637][ T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.658516][ T1221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.662901][ T333] usb 2-1: Product: syz [ 41.676859][ T333] usb 2-1: Manufacturer: syz [ 41.683172][ T333] usb 2-1: SerialNumber: syz [ 41.689932][ T333] usb 2-1: config 0 descriptor?? [ 41.698017][ T311] EXT4-fs (loop0): unmounting filesystem. [ 41.811876][ T1253] loop3: detected capacity change from 0 to 512 [ 41.820585][ T1253] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.399: casefold flag without casefold feature [ 41.833192][ T1253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.399: missing EA_INODE flag [ 41.844673][ T1253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.399: error while reading EA inode 2 err=-117 [ 41.857004][ T1253] EXT4-fs (loop3): 1 orphan inode deleted [ 41.862525][ T1253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.876282][ T1253] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #15: comm syz.3.399: Siphash requires key [ 41.887289][ T1253] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #15: comm syz.3.399: Siphash requires key [ 41.898214][ T1253] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #15: comm syz.3.399: Siphash requires key [ 41.910825][ T1253] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #21: comm syz.3.399: Siphash requires key [ 41.921872][ T1253] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #21: comm syz.3.399: Siphash requires key [ 41.932934][ T1253] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #21: comm syz.3.399: Siphash requires key [ 41.967455][ T315] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 41.995010][ T1260] syz.4.403[1260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.995064][ T1260] syz.4.403[1260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.007422][ T319] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.040472][ T1264] binder: 1263:1264 unknown command 34 [ 42.045928][ T1264] binder: 1263:1264 ioctl c0306201 200003c0 returned -22 [ 42.056880][ T333] usb 2-1: USB disconnect, device number 5 [ 42.058771][ T1266] loop4: detected capacity change from 0 to 16 [ 42.070364][ T1266] erofs: (device loop4): mounted with root inode @ nid 36. [ 42.089644][ T315] EXT4-fs (loop3): unmounting filesystem. [ 42.095609][ T1269] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 42.230835][ T1289] input: syz1 as /devices/virtual/input/input11 [ 42.286846][ T319] usb 1-1: Using ep0 maxpacket: 16 [ 42.389813][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.396739][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.404333][ T1290] device bridge_slave_0 entered promiscuous mode [ 42.411299][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.418217][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.425525][ T1290] device bridge_slave_1 entered promiscuous mode [ 42.435789][ T1312] loop2: detected capacity change from 0 to 2048 [ 42.476996][ T319] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 42.485376][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.490997][ T319] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 42.493590][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.503424][ T319] usb 1-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.510231][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.510247][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.529723][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.529994][ T1312] loop2: p1 < > p3 [ 42.547711][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.554804][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.560504][ T1312] loop2: p3 size 134217728 extends beyond EOD, truncated [ 42.574801][ T319] usb 1-1: config 1 interface 0 has no altsetting 0 [ 42.588433][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.602899][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.609763][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.637392][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.648292][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.649562][ T403] udevd[403]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.655120][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.666005][ T408] udevd[408]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 42.672138][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.696950][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.698547][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.706514][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 42.714227][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.721648][ T319] usb 1-1: SerialNumber: syz [ 42.733254][ T1290] device veth0_vlan entered promiscuous mode [ 42.746220][ T1290] device veth1_macvtap entered promiscuous mode [ 42.752346][ T1237] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.765793][ T1237] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.765894][ T1328] input: syz0 as /devices/virtual/input/input12 [ 42.790614][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.800871][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.808736][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.816223][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.837308][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.845414][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.853933][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.861952][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.901564][ T1340] loop3: detected capacity change from 0 to 256 [ 42.908528][ T1340] exfat: Deprecated parameter 'utf8' [ 42.914544][ T1340] exfat: Deprecated parameter 'utf8' [ 42.924894][ T1340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x818efa41, utbl_chksum : 0xe619d30d) [ 42.982406][ T1352] loop1: detected capacity change from 0 to 1024 [ 42.988370][ T1237] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.995662][ T1237] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.000817][ T1352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.012339][ T1352] EXT4-fs (loop1): unmounting filesystem. [ 43.056855][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 43.084230][ T1357] loop1: detected capacity change from 0 to 256 [ 43.096904][ T944] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.266861][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.296854][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 43.347719][ T419] device veth1_macvtap left promiscuous mode [ 43.353605][ T419] device veth0_vlan left promiscuous mode [ 43.416877][ T39] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 43.425100][ T39] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 43.434190][ T39] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 43.443180][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.446917][ T319] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 43.452817][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.468804][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 43.482311][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 43.482323][ T28] audit: type=1400 audit(1729628230.440:400): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.509540][ T39] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 43.516924][ T944] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 43.519342][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.530769][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 43.538023][ T28] audit: type=1400 audit(1729628230.440:401): avc: denied { remove_name } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.544898][ T1368] loop1: detected capacity change from 0 to 131072 [ 43.563402][ T39] usb 3-1: config 0 descriptor?? [ 43.574667][ T944] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 43.574730][ T28] audit: type=1400 audit(1729628230.440:402): avc: denied { rename } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.585634][ T944] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 43.607867][ T28] audit: type=1400 audit(1729628230.440:403): avc: denied { add_name } for pid=85 comm="syslogd" name="messages.0" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.620529][ T944] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.637999][ T28] audit: type=1400 audit(1729628230.440:404): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.654207][ T1368] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 43.693305][ T944] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 43.702551][ T1368] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.707484][ T24] usb 1-1: USB disconnect, device number 4 [ 43.710697][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.721971][ T1368] F2FS-fs (loop1): invalid crc value [ 43.730649][ T1368] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.736954][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.747737][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.757486][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 43.765226][ T1368] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.766320][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.773337][ T1368] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 43.782001][ T944] usb 5-1: invalid MIDI out EP 0 [ 43.796991][ T944] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 43.804411][ T19] usb 4-1: config 0 descriptor?? [ 43.813166][ T1368] 9pnet_virtio: no channels available for device syz [ 43.813176][ T28] audit: type=1400 audit(1729628230.760:405): avc: denied { mounton } for pid=1367 comm="syz.1.453" path="/81/file0/file0" dev="loop1" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.824781][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.850852][ T28] audit: type=1400 audit(1729628230.800:406): avc: denied { read } for pid=1367 comm="syz.1.453" name="file1" dev="loop1" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 43.880652][ T39] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.019427][ T1334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.027905][ T1334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.042847][ T39] usb 5-1: USB disconnect, device number 4 [ 44.068808][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.077915][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.084661][ T28] audit: type=1400 audit(1729628231.030:407): avc: denied { read write } for pid=1331 comm="syz.2.437" name="lp0" dev="devtmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 44.085107][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.109457][ T24] usb 3-1: USB disconnect, device number 5 [ 44.116205][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.121496][ T28] audit: type=1400 audit(1729628231.030:408): avc: denied { open } for pid=1331 comm="syz.2.437" path="/dev/usb/lp0" dev="devtmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 44.128579][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.153605][ T24] usblp0: removed [ 44.160914][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.170267][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.177474][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.184614][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.192045][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.199247][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.206423][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.213640][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.220939][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.228131][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.235315][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.242594][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.249741][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.256979][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.264146][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.271370][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.278582][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.285740][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.292969][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.300174][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.307372][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.314558][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.322570][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.329887][ T19] logitech 0003:046D:C24F.0009: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0 [ 44.341011][ T19] logitech 0003:046D:C24F.0009: no inputs found [ 44.347084][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.354258][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.361596][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.370500][ T944] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 44.379029][ T944] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.402906][ T1383] loop0: detected capacity change from 0 to 512 [ 44.433695][ T1383] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.457: casefold flag without casefold feature [ 44.446992][ T1383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.457: missing EA_INODE flag [ 44.459820][ T28] audit: type=1400 audit(1729628231.400:409): avc: denied { ioctl } for pid=1390 comm="syz.1.460" path="socket:[20523]" dev="sockfs" ino=20523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.468464][ T1383] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.457: error while reading EA inode 2 err=-117 [ 44.500388][ T1383] EXT4-fs (loop0): 1 orphan inode deleted [ 44.505928][ T1383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.543785][ T24] usb 4-1: USB disconnect, device number 3 [ 44.564469][ T1383] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #15: comm syz.0.457: Siphash requires key [ 44.579694][ T1383] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #15: comm syz.0.457: Siphash requires key [ 44.590876][ T1383] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #15: comm syz.0.457: Siphash requires key [ 44.614310][ T1383] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #21: comm syz.0.457: Siphash requires key [ 44.623729][ T1399] loop4: detected capacity change from 0 to 512 [ 44.631395][ T1383] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #21: comm syz.0.457: Siphash requires key [ 44.660544][ T1383] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #21: comm syz.0.457: Siphash requires key [ 44.680489][ T1399] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.464: invalid block [ 44.692580][ T1404] loop2: detected capacity change from 0 to 512 [ 44.699113][ T311] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 44.710821][ T1399] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.464: invalid indirect mapped block 10 (level 1) [ 44.729376][ T1395] loop1: detected capacity change from 0 to 40427 [ 44.735657][ T1399] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.464: invalid indirect mapped block 8 (level 1) [ 44.736735][ T1404] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.749040][ T1399] EXT4-fs (loop4): 1 truncate cleaned up [ 44.760818][ T1399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.766516][ T1395] F2FS-fs (loop1): heap/no_heap options were deprecated [ 44.772719][ T1404] EXT4-fs error (device loop2): ext4_find_extent:936: inode #4: comm syz.2.466: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 44.794428][ T1404] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.799699][ T1395] F2FS-fs (loop1): invalid crc value [ 44.810395][ T1404] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 44.816239][ T1395] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.821769][ T1404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.828698][ T312] EXT4-fs (loop4): unmounting filesystem. [ 44.849172][ T311] EXT4-fs (loop0): unmounting filesystem. [ 44.871882][ T1408] loop4: detected capacity change from 0 to 128 [ 44.885899][ T1395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.923301][ T314] EXT4-fs (loop2): unmounting filesystem. [ 44.933008][ T313] syz-executor: attempt to access beyond end of device [ 44.933008][ T313] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.010411][ T1417] loop4: detected capacity change from 0 to 256 [ 45.142314][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.149732][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.160170][ T1418] device bridge_slave_0 entered promiscuous mode [ 45.160468][ T1441] loop4: detected capacity change from 0 to 16 [ 45.167773][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.180301][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.189049][ T1418] device bridge_slave_1 entered promiscuous mode [ 45.198629][ T1441] erofs: (device loop4): mounted with root inode @ nid 36. [ 45.256898][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 45.286712][ T1449] loop1: detected capacity change from 0 to 4096 [ 45.315457][ T1449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.330905][ T1449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.344403][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.351274][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.358358][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.365126][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.373139][ T1449] EXT4-fs (loop1): unmounting filesystem. [ 45.394379][ T1446] loop4: detected capacity change from 0 to 40427 [ 45.399418][ T944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.401052][ T1446] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 45.414515][ T1446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 45.415629][ T944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.424749][ T1446] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 45.441955][ T944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.469918][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.472311][ T1456] loop1: detected capacity change from 0 to 256 [ 45.478404][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.490661][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.495592][ T1446] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 45.497914][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.512448][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 45.517874][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.521957][ T1446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.524697][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.539645][ T1454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.552086][ T1454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.572092][ T1418] device veth0_vlan entered promiscuous mode [ 45.575278][ T1461] loop1: detected capacity change from 0 to 1024 [ 45.584648][ T1454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.592781][ T1454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.601103][ T1454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.604338][ T1461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.608699][ T1454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.619557][ T1461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.626139][ T312] syz-executor: attempt to access beyond end of device [ 45.626139][ T312] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.647322][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.658067][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.658134][ T415] device veth1_macvtap left promiscuous mode [ 45.667718][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.686354][ T19] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.693047][ T313] EXT4-fs (loop1): unmounting filesystem. [ 45.695366][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.702856][ T415] device veth0_vlan left promiscuous mode [ 45.714860][ T19] usb 3-1: config 0 descriptor?? [ 45.728741][ T1464] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 45.758333][ T1466] loop1: detected capacity change from 0 to 512 [ 45.777028][ T1466] EXT4-fs: Ignoring removed oldalloc option [ 45.798259][ T1466] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.491: Parent and EA inode have the same ino 15 [ 45.816787][ T1418] device veth1_macvtap entered promiscuous mode [ 45.817023][ T1466] EXT4-fs (loop1): Remounting filesystem read-only [ 45.831298][ T1466] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.844913][ T1466] EXT4-fs error (device loop1): ext4_evict_inode:290: comm syz.1.491: couldn't truncate inode 15 (err -30) [ 45.856281][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.867376][ T1466] EXT4-fs (loop1): 1 orphan inode deleted [ 45.872307][ T1477] loop4: detected capacity change from 0 to 256 [ 45.874203][ T1466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.882757][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.900597][ T1466] EXT4-fs error (device loop1): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz.1.491: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 45.920808][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.927679][ T1477] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 45.933226][ T1466] EXT4-fs (loop1): Remounting filesystem read-only [ 45.980548][ T1477] exFAT-fs (loop4): hint_cluster is invalid (1) [ 45.986719][ T1477] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 46.000343][ T1482] syz.0.470 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.005330][ T1477] exFAT-fs (loop4): Filesystem has been set read-only [ 46.021892][ T313] EXT4-fs (loop1): unmounting filesystem. [ 46.027855][ T1477] exFAT-fs (loop4): error, failed to bmap (inode : ffff88810bf31db0 iblock : 9, err : -5) [ 46.047150][ T1477] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 46.056929][ T1477] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 46.185467][ T1480] loop3: detected capacity change from 0 to 40427 [ 46.192638][ T19] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 46.209625][ T1480] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 46.221135][ T1480] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 46.233380][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input13 [ 46.245242][ T1480] F2FS-fs (loop3): invalid crc value [ 46.254850][ T19] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 46.274979][ T1480] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.316841][ T333] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 46.347086][ T1480] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 46.353929][ T1480] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.409401][ T1480] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 46.452556][ T1478] usb 3-1: USB disconnect, device number 6 [ 46.468867][ T1290] syz-executor: attempt to access beyond end of device [ 46.468867][ T1290] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.548486][ T1494] loop4: detected capacity change from 0 to 40427 [ 46.566959][ T333] usb 2-1: Using ep0 maxpacket: 16 [ 46.572122][ T1494] F2FS-fs (loop4): fault_injection options not supported [ 46.582045][ T1494] F2FS-fs (loop4): Image doesn't support compression [ 46.596913][ T1494] F2FS-fs (loop4): Image doesn't support compression [ 46.613516][ T1494] F2FS-fs (loop4): fault_type options not supported [ 46.625963][ T1494] F2FS-fs (loop4): invalid crc value [ 46.643920][ T1494] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.696894][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.710626][ T1494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.717197][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.748343][ T333] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 46.764528][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.775918][ T333] usb 2-1: config 0 descriptor?? [ 46.805656][ T10] kworker/u4:1: attempt to access beyond end of device [ 46.805656][ T10] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 46.810046][ T1487] loop0: detected capacity change from 0 to 131072 [ 46.825827][ T1494] VFS:Filesystem freeze failed [ 46.842854][ T1487] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.881252][ T1487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.948972][ T1520] device dummy0 entered promiscuous mode [ 46.954671][ T1519] device dummy0 left promiscuous mode [ 46.983591][ T1523] loop2: detected capacity change from 0 to 512 [ 46.993009][ T1523] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.001989][ T1523] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.511: invalid block [ 47.013441][ T1523] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.511: couldn't read orphan inode 11 (err -117) [ 47.025362][ T1523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.045868][ T314] EXT4-fs (loop2): unmounting filesystem. [ 47.237976][ T333] lua 0003:1E7D:2C2E.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 47.290843][ T1547] IPv6: syztnl2: Disabled Multicast RS [ 47.442942][ T1454] usb 2-1: USB disconnect, device number 6 [ 47.448899][ T1561] loop3: detected capacity change from 0 to 40427 [ 47.455628][ T1561] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 47.463486][ T1561] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 47.473510][ T1561] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 47.494898][ T1561] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 47.501922][ T1561] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.616863][ T60] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 47.976889][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.989135][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.999146][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.012139][ T60] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.021203][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.045045][ T60] usb 3-1: config 0 descriptor?? [ 48.206839][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 48.234131][ T1604] loop0: detected capacity change from 0 to 2048 [ 48.244226][ T1608] loop3: detected capacity change from 0 to 512 [ 48.251156][ T1604] EXT4-fs: Ignoring removed nobh option [ 48.256714][ T1608] EXT4-fs (loop3): Test dummy encryption mode enabled [ 48.264853][ T1608] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.547: invalid block [ 48.276221][ T1608] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.547: couldn't read orphan inode 11 (err -117) [ 48.290340][ T1604] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.296936][ T1608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.307397][ T1604] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 48.332343][ T1290] EXT4-fs (loop3): unmounting filesystem. [ 48.371028][ T1418] EXT4-fs (loop0): unmounting filesystem. [ 48.416419][ T1619] netlink: 277 bytes leftover after parsing attributes in process `syz.3.552'. [ 48.416520][ T1621] syz.0.549[1621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.425358][ T1621] syz.0.549[1621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.466863][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 48.500069][ T1629] loop0: detected capacity change from 0 to 512 [ 48.518348][ T1629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.527273][ T1629] ext4 filesystem being mounted at /14/bus supports timestamps until 2038 (0x7fffffff) [ 48.527689][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.549466][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.556706][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.564080][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.564401][ T1418] EXT4-fs (loop0): unmounting filesystem. [ 48.571358][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.584103][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.591326][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.598543][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.605639][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.616975][ T19] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 48.623115][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.634291][ T19] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 48.644036][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.644390][ T19] usb 5-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.661339][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.664326][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 48.677211][ T1575] loop1: detected capacity change from 0 to 131072 [ 48.684057][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.691286][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.698506][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.699150][ T1575] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.705634][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.705658][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.726121][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.733911][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.741553][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.742967][ T1575] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 48.748797][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.748821][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.770496][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.776873][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.777673][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.786686][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.796063][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.801576][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.802098][ T19] usb 5-1: SerialNumber: syz [ 48.809123][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.827945][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.835177][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.836949][ T1569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 48.842523][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.856605][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.863202][ T1569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 48.863952][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.878238][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.885428][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.892806][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.900128][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.907460][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.914784][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.922168][ T60] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 48.929614][ T60] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 48.956958][ T60] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 48.986073][ T60] usb 3-1: USB disconnect, device number 7 [ 49.037028][ T1645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 49.047359][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 49.069597][ T1649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 49.073068][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 49.073080][ T28] audit: type=1400 audit(1729628236.020:458): avc: denied { create } for pid=1650 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.115914][ T1569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 49.118925][ T28] audit: type=1400 audit(1729628236.060:459): avc: denied { bind } for pid=1650 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.123060][ T1569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 49.142417][ T28] audit: type=1400 audit(1729628236.060:460): avc: denied { listen } for pid=1650 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.236953][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.248014][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.257717][ T6] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 49.266726][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.269821][ T28] audit: type=1400 audit(1729628236.220:461): avc: denied { read write } for pid=1663 comm="syz.0.569" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 49.275218][ T6] usb 4-1: config 0 descriptor?? [ 49.302469][ T28] audit: type=1400 audit(1729628236.250:462): avc: denied { open } for pid=1663 comm="syz.0.569" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 49.430544][ T28] audit: type=1400 audit(1729628236.380:463): avc: denied { read } for pid=1665 comm="syz.2.570" path="socket:[21252]" dev="sockfs" ino=21252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.446846][ T1478] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 49.606971][ T19] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 49.768220][ T6] hid-led 0003:04D8:F372.000D: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 49.783666][ T6] hid-led 0003:04D8:F372.000D: Greynut Luxafor initialized [ 49.816906][ T1478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.846755][ T1478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.856722][ T1478] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 49.859830][ T19] usb 5-1: USB disconnect, device number 5 [ 49.865820][ T1478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.879517][ T1478] usb 2-1: config 0 descriptor?? [ 49.990720][ T336] usb 4-1: USB disconnect, device number 4 [ 49.997086][ T6] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 50.005113][ T1454] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 50.013251][ T1454] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 50.021192][ T1454] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 50.029232][ T1454] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 50.037289][ T1454] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 50.045137][ T1454] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 50.053596][ T1454] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 50.061648][ T1454] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 50.070043][ T1454] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 50.078096][ T1454] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 50.086123][ T1454] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 50.094091][ T19] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 50.102133][ T19] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 50.107729][ T28] audit: type=1400 audit(1729628237.060:464): avc: denied { unmount } for pid=1418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.110252][ T19] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 50.137710][ T19] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 50.145959][ T19] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 50.149525][ T1676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 50.154241][ T19] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 50.173011][ T28] audit: type=1326 audit(1729628237.120:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1665 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b97dff9 code=0x7fc00000 [ 50.202051][ T1681] binder: 1678:1681 ioctl 4018620d 0 returned -22 [ 50.210690][ T28] audit: type=1400 audit(1729628237.150:466): avc: denied { read } for pid=1678 comm="syz.2.573" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.233087][ T28] audit: type=1400 audit(1729628237.150:467): avc: denied { open } for pid=1678 comm="syz.2.573" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.282941][ T1689] loop0: detected capacity change from 0 to 512 [ 50.298569][ T1689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.307527][ T1689] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 50.320475][ T1689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.329118][ T1689] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 50.347648][ T1418] EXT4-fs (loop0): unmounting filesystem. [ 50.367477][ T1697] netlink: 596 bytes leftover after parsing attributes in process `syz.0.578'. [ 50.378036][ T1478] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 50.394540][ T1701] loop0: detected capacity change from 0 to 2048 [ 50.395092][ T1478] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 50.424892][ T1478] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 50.438871][ T1478] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 50.450250][ T1478] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 50.465619][ T1478] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 50.474512][ T1478] lg-g15 0003:046D:C222.000E: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 50.504420][ T1718] netlink: 87 bytes leftover after parsing attributes in process `syz.4.589'. [ 50.534943][ T1722] loop3: detected capacity change from 0 to 256 [ 50.588116][ T1728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 50.630662][ T1478] usb 2-1: USB disconnect, device number 7 [ 50.645396][ T1737] netlink: 104 bytes leftover after parsing attributes in process `syz.0.597'. [ 50.706656][ T1748] loop2: detected capacity change from 0 to 256 [ 50.764108][ T1756] loop0: detected capacity change from 0 to 512 [ 50.779007][ T1758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 50.788398][ T1756] EXT4-fs (loop0): 1 truncate cleaned up [ 50.793849][ T1756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.804849][ T1756] Invalid ELF header len 10 [ 50.824896][ T1418] EXT4-fs (loop0): unmounting filesystem. [ 50.893641][ T1770] netlink: 104 bytes leftover after parsing attributes in process `syz.4.613'. [ 50.913710][ T1774] tipc: Started in network mode [ 50.918505][ T1774] tipc: Node identity 7f000001, cluster identity 4711 [ 50.925355][ T1774] tipc: Enabled bearer , priority 10 [ 50.946888][ T333] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.000933][ T1791] loop2: detected capacity change from 0 to 512 [ 51.029797][ T1794] loop0: detected capacity change from 0 to 512 [ 51.047989][ T1791] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 51.061947][ T1791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.072937][ T1791] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 51.094055][ T1794] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 51.200230][ T1802] loop2: detected capacity change from 0 to 8192 [ 51.346251][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.362378][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.387490][ T333] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 51.396334][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.413182][ T333] usb 4-1: config 0 descriptor?? [ 51.459735][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 51.557800][ T1826] loop2: detected capacity change from 0 to 256 [ 51.566189][ T1826] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 51.585778][ T1826] exFAT-fs (loop2): error, invalid dentry access beyond EOF (clu : 11, eidx : 128) [ 51.595324][ T1826] exFAT-fs (loop2): Filesystem has been set read-only [ 51.643752][ T1789] loop4: detected capacity change from 0 to 131072 [ 51.650602][ T1789] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 51.658964][ T1789] F2FS-fs (loop4): invalid crc value [ 51.665342][ T1789] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 51.685829][ T1789] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 51.707493][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 51.831980][ T19] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 51.840816][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.849280][ T19] usb 1-1: config 0 descriptor?? [ 51.883407][ T333] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 51.892538][ T333] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000F/input/input15 [ 51.893997][ T19] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 51.977946][ T333] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 52.068793][ T6] tipc: Node number set to 2130706433 [ 52.093941][ T333] usb 4-1: USB disconnect, device number 5 [ 52.110087][ T19] usb 1-1: Detected FT232A [ 52.114615][ T19] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 52.173367][ T1840] loop2: detected capacity change from 0 to 256 [ 52.179604][ T1840] exfat: Deprecated parameter 'namecase' [ 52.187475][ T1840] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 52.325489][ T19] usb 1-1: USB disconnect, device number 5 [ 52.331538][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 52.340845][ T19] ftdi_sio 1-1:0.0: device disconnected [ 52.429377][ T1478] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.707533][ T1478] usb 5-1: Using ep0 maxpacket: 16 [ 52.789944][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 52.862095][ T1478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.876925][ T1478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.889435][ T1478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.902388][ T1478] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 52.911578][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.920094][ T1478] usb 5-1: config 0 descriptor?? [ 53.037234][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 53.160838][ T6] usb 3-1: config 0 has no interfaces? [ 53.166189][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 53.174068][ T1881] loop3: detected capacity change from 0 to 512 [ 53.188569][ T1881] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.662: iget: bogus i_mode (0) [ 53.199790][ T1881] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.662: couldn't read orphan inode 17 (err -117) [ 53.227959][ T1881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.662: bg 0: block 7: invalid block bitmap [ 53.304898][ T1898] syz.3.669[1898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.304941][ T1898] syz.3.669[1898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.325335][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.345525][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.353349][ T6] usb 3-1: Product: syz [ 53.357362][ T6] usb 3-1: Manufacturer: syz [ 53.361741][ T6] usb 3-1: SerialNumber: syz [ 53.366942][ T6] usb 3-1: config 0 descriptor?? [ 53.419533][ T1478] koneplus 0003:1E7D:2E22.0010: item fetching failed at offset 0/2 [ 53.427527][ T1478] koneplus 0003:1E7D:2E22.0010: parse failed [ 53.434359][ T1478] koneplus: probe of 0003:1E7D:2E22.0010 failed with error -22 [ 53.450858][ T1911] loop1: detected capacity change from 0 to 512 [ 53.459305][ T1911] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.465787][ T1911] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.477078][ T1911] EXT4-fs (loop1): 1 truncate cleaned up [ 53.541268][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.552444][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.562009][ T19] usb 1-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 53.570848][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.584401][ T19] usb 1-1: config 0 descriptor?? [ 53.588578][ T1919] loop1: detected capacity change from 0 to 2048 [ 53.615841][ T1478] usb 3-1: USB disconnect, device number 8 [ 53.628065][ T6] usb 5-1: USB disconnect, device number 6 [ 53.723062][ T1927] __nla_validate_parse: 1 callbacks suppressed [ 53.723074][ T1927] netlink: 277 bytes leftover after parsing attributes in process `syz.1.681'. [ 53.752748][ T1931] xt_hashlimit: size too large, truncated to 1048576 [ 53.767519][ T1454] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 53.866708][ T1936] capability: warning: `syz.1.685' uses deprecated v2 capabilities in a way that may be insecure [ 53.878591][ T1936] printk: syz.1.685 (1936): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 54.078114][ T19] smartjoyplus 0003:0925:0005.0011: unbalanced collection at end of report description [ 54.088080][ T19] smartjoyplus 0003:0925:0005.0011: parse failed [ 54.094239][ T19] smartjoyplus: probe of 0003:0925:0005.0011 failed with error -22 [ 54.133527][ T1956] loop1: detected capacity change from 0 to 16 [ 54.137662][ T1454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.142518][ T1956] erofs: (device loop1): mounted with root inode @ nid 36. [ 54.163540][ T1454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.175446][ T1956] syz.1.694: attempt to access beyond end of device [ 54.175446][ T1956] loop1: rw=0, sector=1049272, nr_sectors = 8 limit=16 [ 54.179710][ T1454] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 54.189141][ T1956] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 54.198250][ T1454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.206344][ T1956] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 4 of nid 36 [ 54.214939][ T1454] usb 4-1: config 0 descriptor?? [ 54.292479][ T333] usb 1-1: USB disconnect, device number 6 [ 54.306349][ T1974] loop2: detected capacity change from 0 to 128 [ 54.315068][ T1974] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 54.568527][ T1988] loop1: detected capacity change from 0 to 2048 [ 54.599505][ T1478] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 54.609447][ T1988] Alternate GPT is invalid, using primary GPT. [ 54.615590][ T1988] loop1: p2 p3 p7 [ 54.632790][ T1990] netlink: 'syz.1.709': attribute type 9 has an invalid length. [ 54.640541][ T336] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 54.663018][ T1673] udevd[1673]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.666464][ T403] udevd[403]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.673869][ T1381] udevd[1381]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 54.696805][ T403] udevd[403]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.698050][ T1381] udevd[1381]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 54.707427][ T1673] udevd[1673]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.744084][ T1454] pantherlord 0003:0F30:0111.0012: item fetching failed at offset 6/7 [ 54.752519][ T1454] pantherlord 0003:0F30:0111.0012: parse failed [ 54.758627][ T1454] pantherlord: probe of 0003:0F30:0111.0012 failed with error -22 [ 54.845032][ T2005] loop1: detected capacity change from 0 to 512 [ 54.859628][ T2005] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038 (0x7fffffff) [ 54.934149][ T2017] loop1: detected capacity change from 0 to 16 [ 54.940756][ T2017] erofs: (device loop1): mounted with root inode @ nid 36. [ 54.949903][ T2017] syz.1.719: attempt to access beyond end of device [ 54.949903][ T2017] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 54.963183][ T2017] syz.1.719: attempt to access beyond end of device [ 54.963183][ T2017] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 54.988117][ T333] usb 4-1: USB disconnect, device number 6 [ 55.010126][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.010253][ T1478] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 55.021558][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.035382][ T1478] usb 5-1: config 0 has no interface number 0 [ 55.044629][ T1478] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.046065][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.055895][ T1478] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.068333][ T336] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.077962][ T1478] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 55.086803][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.096033][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.104002][ T336] usb 3-1: config 0 descriptor?? [ 55.116744][ T1478] usb 5-1: config 0 descriptor?? [ 55.461179][ T60] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 55.538505][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 55.538512][ T2036] SELinux: policydb magic number 0x2b7 does not match expected magic number 0xf97cff8c [ 55.538520][ T28] audit: type=1400 audit(1729628242.364:509): avc: denied { load_policy } for pid=2035 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.573941][ T2036] SELinux: failed to load policy [ 55.588015][ T2038] tipc: Started in network mode [ 55.592739][ T2038] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 55.601902][ T2038] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 55.605442][ T336] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 55.610130][ T2038] tipc: Enabled bearer , priority 10 [ 55.617553][ T336] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 55.632167][ T336] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 55.636601][ T1478] logitech-djreceiver 0003:046D:C71B.0014: unknown main item tag 0x0 [ 55.656306][ T1478] logitech-djreceiver 0003:046D:C71B.0014: unknown main item tag 0x0 [ 55.665117][ T1478] logitech-djreceiver 0003:046D:C71B.0014: unknown main item tag 0x0 [ 55.673067][ T1478] logitech-djreceiver 0003:046D:C71B.0014: unknown main item tag 0x0 [ 55.681162][ T1478] logitech-djreceiver 0003:046D:C71B.0014: unknown main item tag 0x0 [ 55.689138][ T1478] logitech-djreceiver 0003:046D:C71B.0014: unknown main item tag 0x0 [ 55.697047][ T1478] logitech-djreceiver 0003:046D:C71B.0014: unknown main item tag 0x0 [ 55.705632][ T1478] logitech-djreceiver 0003:046D:C71B.0014: hidraw1: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input32 [ 55.742441][ T2042] device pim6reg1 entered promiscuous mode [ 55.912896][ T333] usb 5-1: USB disconnect, device number 7 [ 55.956853][ T2045] loop3: detected capacity change from 0 to 40427 [ 55.964018][ T2045] F2FS-fs (loop3): fault_injection options not supported [ 55.971560][ T2045] F2FS-fs (loop3): invalid crc value [ 55.977520][ T1478] usb 3-1: USB disconnect, device number 9 [ 55.977696][ T2045] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.007696][ T2045] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.027941][ T1290] syz-executor: attempt to access beyond end of device [ 56.027941][ T1290] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.045485][ T60] usb 2-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 56.054398][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.062305][ T60] usb 2-1: Product: syz [ 56.066378][ T60] usb 2-1: Manufacturer: syz [ 56.070703][ T60] usb 2-1: SerialNumber: syz [ 56.076087][ T60] usb 2-1: config 0 descriptor?? [ 56.117432][ T2065] loop3: detected capacity change from 0 to 2048 [ 56.124165][ T2065] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 56.127793][ T60] pl2303 2-1:0.0: required endpoints missing [ 56.147869][ T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 56.187508][ T28] audit: type=1400 audit(1729628242.989:510): avc: denied { unmount } for pid=1290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.214277][ T336] kernel write not supported for file bpf-prog (pid: 336 comm: kworker/0:4) [ 56.231442][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 56.257537][ T28] audit: type=1400 audit(1729628243.057:511): avc: denied { read } for pid=2072 comm="syz.3.743" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.281279][ T28] audit: type=1400 audit(1729628243.057:512): avc: denied { open } for pid=2072 comm="syz.3.743" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.305117][ T28] audit: type=1400 audit(1729628243.057:513): avc: denied { map } for pid=2072 comm="syz.3.743" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.328509][ T28] audit: type=1400 audit(1729628243.057:514): avc: denied { ioctl } for pid=2072 comm="syz.3.743" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.345945][ T1478] usb 2-1: USB disconnect, device number 8 [ 56.360422][ T28] audit: type=1400 audit(1729628243.116:515): avc: denied { mount } for pid=2074 comm="syz.3.744" name="/" dev="configfs" ino=13260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.382981][ T28] audit: type=1400 audit(1729628243.116:516): avc: denied { search } for pid=2074 comm="syz.3.744" name="/" dev="configfs" ino=13260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.405053][ T28] audit: type=1400 audit(1729628243.116:517): avc: denied { read } for pid=2074 comm="syz.3.744" name="/" dev="configfs" ino=13260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.426966][ T28] audit: type=1400 audit(1729628243.116:518): avc: denied { open } for pid=2074 comm="syz.3.744" path="/62/file0" dev="configfs" ino=13260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.513399][ T2087] loop2: detected capacity change from 0 to 2048 [ 56.526529][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.537802][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.547999][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 56.560810][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 56.569848][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.578402][ T6] usb 1-1: config 0 descriptor?? [ 56.595793][ T2095] loop4: detected capacity change from 0 to 512 [ 56.602216][ T2095] EXT4-fs: Ignoring removed i_version option [ 56.608598][ T2095] EXT4-fs (loop4): Test dummy encryption mode enabled [ 56.616490][ T2095] EXT4-fs (loop4): 1 truncate cleaned up [ 56.625420][ T2100] tipc: Enabling of bearer rejected, failed to enable media [ 56.641114][ T1478] tipc: Node number set to 1 [ 56.721008][ T333] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 56.761982][ T2124] loop2: detected capacity change from 0 to 16 [ 56.768452][ T2124] erofs: (device loop2): mounted with root inode @ nid 36. [ 56.776888][ T2124] syz.2.765: attempt to access beyond end of device [ 56.776888][ T2124] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 56.791109][ T2124] syz.2.765: attempt to access beyond end of device [ 56.791109][ T2124] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 57.083863][ T2174] loop4: detected capacity change from 0 to 512 [ 57.090578][ T2174] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.103755][ T2174] EXT4-fs: Ignoring removed i_version option [ 57.109729][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.110815][ T6] logitech-djreceiver 0003:046D:C70E.0015: unknown main item tag 0x0 [ 57.122302][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.138875][ T333] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 57.140330][ T6] logitech-djreceiver 0003:046D:C70E.0015: item fetching failed at offset 6/11 [ 57.148826][ T2174] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.789: invalid block [ 57.167482][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.167561][ T6] logitech-djreceiver 0003:046D:C70E.0015: logi_dj_probe: parse failed [ 57.175666][ T2174] EXT4-fs (loop4): Remounting filesystem read-only [ 57.190467][ T333] usb 4-1: config 0 descriptor?? [ 57.195657][ T2174] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.789: couldn't read orphan inode 11 (err -117) [ 57.201682][ T6] logitech-djreceiver: probe of 0003:046D:C70E.0015 failed with error -22 [ 57.216116][ T2174] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: comm syz.4.789: Directory hole found for htree leaf block [ 57.236897][ T2174] EXT4-fs (loop4): Remounting filesystem read-only [ 57.244055][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 57.251761][ T2174] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: comm syz.4.789: Directory hole found for htree leaf block [ 57.275071][ T2164] loop1: detected capacity change from 0 to 40427 [ 57.284988][ T2164] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 57.293724][ T2164] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 57.302351][ T2164] F2FS-fs (loop1): invalid crc value [ 57.308529][ T2164] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.358496][ T2164] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 57.365673][ T6] usb 1-1: USB disconnect, device number 7 [ 57.376483][ T2164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.406738][ T2164] overlayfs: failed to set xattr on upper [ 57.418372][ T313] syz-executor: attempt to access beyond end of device [ 57.418372][ T313] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 57.432435][ T313] syz-executor: attempt to access beyond end of device [ 57.432435][ T313] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 57.468927][ T10] kworker/u4:1: attempt to access beyond end of device [ 57.468927][ T10] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 57.641108][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 57.652229][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.663159][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.672891][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 57.685912][ T24] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 57.703116][ T333] elo 0003:04E7:0030.0016: item fetching failed at offset 5/7 [ 57.710597][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.720733][ T333] elo 0003:04E7:0030.0016: parse failed [ 57.727549][ T333] elo: probe of 0003:04E7:0030.0016 failed with error -22 [ 57.735684][ T24] usb 3-1: config 0 descriptor?? [ 57.779229][ T2192] netlink: 80 bytes leftover after parsing attributes in process `syz.4.798'. [ 57.789118][ T2192] netlink: 80 bytes leftover after parsing attributes in process `syz.4.798'. [ 57.798030][ T2192] netlink: 80 bytes leftover after parsing attributes in process `syz.4.798'. [ 57.839180][ T2190] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.846104][ T2190] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.853300][ T2190] device bridge_slave_0 entered promiscuous mode [ 57.863229][ T2190] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.870259][ T2190] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.878540][ T2190] device bridge_slave_1 entered promiscuous mode [ 57.926976][ T333] usb 4-1: USB disconnect, device number 7 [ 58.003245][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.011128][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.019076][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.026387][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.033754][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.041961][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.053989][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.060852][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.072104][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.084941][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.097372][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.104242][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.148144][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.181627][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.192300][ T2226] loop0: detected capacity change from 0 to 512 [ 58.199488][ T2226] EXT4-fs: Ignoring removed bh option [ 58.201867][ T10] device bridge_slave_1 left promiscuous mode [ 58.218633][ T2226] EXT4-fs: Ignoring removed i_version option [ 58.221291][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.225400][ T24] thrustmaster 0003:044F:B653.0017: item fetching failed at offset 5/7 [ 58.239540][ T10] device bridge_slave_0 left promiscuous mode [ 58.239926][ T24] thrustmaster 0003:044F:B653.0017: parse failed [ 58.251853][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.252276][ T24] thrustmaster: probe of 0003:044F:B653.0017 failed with error -22 [ 58.259701][ T2226] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.813: invalid block [ 58.282606][ T10] device veth1_macvtap left promiscuous mode [ 58.288494][ T10] device veth0_vlan left promiscuous mode [ 58.304441][ T2226] EXT4-fs (loop0): Remounting filesystem read-only [ 58.314721][ T2226] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.813: couldn't read orphan inode 11 (err -117) [ 58.356921][ T2224] loop4: detected capacity change from 0 to 40427 [ 58.369467][ T2224] F2FS-fs (loop4): invalid crc value [ 58.388548][ T2224] F2FS-fs (loop4): Found nat_bits in checkpoint [ 58.443640][ T2190] device veth0_vlan entered promiscuous mode [ 58.455776][ T2238] loop0: detected capacity change from 0 to 256 [ 58.465969][ T2224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 58.473861][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.484191][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.503532][ T312] syz-executor: attempt to access beyond end of device [ 58.503532][ T312] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.517636][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.531079][ T2190] device veth1_macvtap entered promiscuous mode [ 58.538039][ T24] usb 3-1: USB disconnect, device number 10 [ 58.551192][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.572936][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.584444][ T1478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.638790][ T2252] loop4: detected capacity change from 0 to 128 [ 58.646779][ T2252] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 58.669679][ T2252] syz.4.822 (pid 2252) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 58.701210][ T2258] loop0: detected capacity change from 0 to 128 [ 58.709402][ T2258] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.722952][ T2258] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.737873][ T944] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 58.757580][ T2265] loop0: detected capacity change from 0 to 128 [ 58.779705][ T2267] loop4: detected capacity change from 0 to 16 [ 58.786116][ T2267] erofs: (device loop4): mounted with root inode @ nid 36. [ 58.854215][ T2279] loop0: detected capacity change from 0 to 512 [ 58.869767][ T2279] EXT4-fs (loop0): 1 orphan inode deleted [ 58.875405][ T2279] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038 (0x7fffffff) [ 58.897880][ T336] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 58.966257][ T2277] loop4: detected capacity change from 0 to 40427 [ 58.973290][ T2277] F2FS-fs (loop4): fault_injection options not supported [ 58.980922][ T2277] F2FS-fs (loop4): invalid crc value [ 58.987101][ T2277] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.046120][ T2277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 59.100082][ T2301] loop2: detected capacity change from 0 to 2048 [ 59.109779][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.126821][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.136906][ T944] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 59.146000][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.155437][ T944] usb 4-1: config 0 descriptor?? [ 59.170608][ T2301] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.187475][ T2301] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 59.200540][ T2301] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.200540][ T2301] [ 59.210567][ T2301] EXT4-fs (loop2): Total free blocks count 0 [ 59.219519][ T2301] EXT4-fs (loop2): Free/Dirty block details [ 59.225243][ T2301] EXT4-fs (loop2): free_blocks=2415919104 [ 59.231966][ T2301] EXT4-fs (loop2): dirty_blocks=16 [ 59.236897][ T2301] EXT4-fs (loop2): Block reservation details [ 59.243079][ T2301] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 59.255445][ T2301] EXT4-fs error (device loop2): __ext4_remount:6412: comm syz.2.843: Abort forced by user [ 59.257940][ T336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.265530][ T2301] EXT4-fs (loop2): Remounting filesystem read-only [ 59.275188][ T336] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.292401][ T336] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.305828][ T336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 59.312286][ T336] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 59.322441][ T1454] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 59.330422][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.338846][ T336] usb 2-1: config 0 descriptor?? [ 59.497895][ T944] usbhid 4-1:0.0: can't add hid device: -71 [ 59.503652][ T944] usbhid: probe of 4-1:0.0 failed with error -71 [ 59.512217][ T944] usb 4-1: USB disconnect, device number 8 [ 59.536901][ T2318] loop4: detected capacity change from 0 to 40427 [ 59.545066][ T2318] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 59.552825][ T2318] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 59.562941][ T2318] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.569131][ T1454] usb 1-1: Using ep0 maxpacket: 32 [ 59.589221][ T2318] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 59.596077][ T2318] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 59.608648][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 59.617775][ T2318] bio_check_eod: 1 callbacks suppressed [ 59.617787][ T2318] syz.4.847: attempt to access beyond end of device [ 59.617787][ T2318] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 59.649259][ T10] kworker/u4:1: attempt to access beyond end of device [ 59.649259][ T10] loop4: rw=1, sector=77944, nr_sectors = 8 limit=40427 [ 59.688103][ T1454] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 59.696273][ T1454] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 59.705153][ T1454] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 59.715157][ T1454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.724803][ T1454] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.734561][ T1454] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 59.747505][ T1454] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 59.756668][ T1454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.766991][ T1454] usb 1-1: config 0 descriptor?? [ 59.796346][ T2326] loop4: detected capacity change from 0 to 8192 [ 59.818587][ T336] zeroplus 0003:0C12:0005.0018: item fetching failed at offset 1/5 [ 59.826436][ T336] zeroplus 0003:0C12:0005.0018: parse failed [ 59.832489][ T336] zeroplus: probe of 0003:0C12:0005.0018 failed with error -22 [ 59.832569][ T2326] loop4: p1 p2 p4 < > [ 59.843899][ T2326] loop4: partition table partially beyond EOD, truncated [ 59.850945][ T2326] loop4: p1 size 8388608 extends beyond EOD, truncated [ 59.858072][ T2326] loop4: p2 size 67174400 extends beyond EOD, truncated [ 59.865165][ T2326] loop4: p4 start 131073 is beyond EOD, truncated [ 59.896310][ T403] udevd[403]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 59.896520][ T1673] udevd[1673]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 59.947236][ T2336] loop3: detected capacity change from 0 to 512 [ 59.954833][ T2336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.965676][ T2336] EXT4-fs (loop3): 1 truncate cleaned up [ 59.996437][ T2339] loop4: detected capacity change from 0 to 512 [ 60.008067][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.013630][ T2341] loop3: detected capacity change from 0 to 4096 [ 60.031495][ T1454] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 60.042213][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.057919][ T2339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.855: inode #1: comm syz.4.855: iget: illegal inode # [ 60.070792][ T1454] usb 2-1: USB disconnect, device number 9 [ 60.078888][ T2339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.855: error while reading EA inode 1 err=-117 [ 60.092079][ T2339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.855: inode #1: comm syz.4.855: iget: illegal inode # [ 60.094253][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 60.105408][ T2339] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.855: error while reading EA inode 1 err=-117 [ 60.114056][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.126455][ T2339] EXT4-fs (loop4): 1 orphan inode deleted [ 60.138359][ T24] usb 3-1: config 0 descriptor?? [ 60.150471][ T2339] EXT4-fs (loop4): shut down requested (2) [ 60.248032][ T336] usb 1-1: USB disconnect, device number 8 [ 60.254379][ T336] usblp0: removed [ 60.427949][ T944] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 60.619832][ T2363] loop1: detected capacity change from 0 to 256 [ 60.626103][ T2363] exfat: Deprecated parameter 'utf8' [ 60.631290][ T2363] exfat: Deprecated parameter 'utf8' [ 60.638493][ T2363] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 60.655656][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 60.655668][ T28] audit: type=1400 audit(1863845975.418:537): avc: denied { append } for pid=2362 comm="syz.1.864" path="/3/file0/cgroup.controllers" dev="loop1" ino=1048644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.686939][ T24] sony 0003:054C:024B.0019: unknown main item tag 0x0 [ 60.693607][ T24] sony 0003:054C:024B.0019: unknown main item tag 0x0 [ 60.700188][ T24] sony 0003:054C:024B.0019: unknown main item tag 0x0 [ 60.706733][ T24] sony 0003:054C:024B.0019: unknown main item tag 0x0 [ 60.713373][ T24] sony 0003:054C:024B.0019: item fetching failed at offset 4/5 [ 60.720919][ T24] sony 0003:054C:024B.0019: parse failed [ 60.726372][ T24] sony: probe of 0003:054C:024B.0019 failed with error -22 [ 60.760107][ T28] audit: type=1400 audit(1863845975.518:538): avc: denied { name_bind } for pid=2366 comm="syz.0.866" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 60.792504][ T2370] loop1: detected capacity change from 0 to 128 [ 60.799131][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.805708][ T2370] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 60.810119][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.828983][ T944] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 60.837879][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.846560][ T944] usb 4-1: config 0 descriptor?? [ 60.897406][ T1454] usb 3-1: USB disconnect, device number 11 [ 60.943601][ T2377] loop1: detected capacity change from 0 to 2048 [ 61.002195][ T2377] loop1: p2 p3 p7 [ 61.046246][ T2383] loop4: detected capacity change from 0 to 128 [ 61.048673][ T403] udevd[403]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 61.064480][ T2385] loop1: detected capacity change from 0 to 512 [ 61.071123][ T1673] udevd[1673]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 61.072667][ T1381] udevd[1381]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 61.091455][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 61.099286][ T2385] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.100361][ T28] audit: type=1400 audit(1863845975.858:539): avc: denied { execute } for pid=2386 comm="syz.4.875" path="/183/cpu.stat" dev="tmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.121567][ T403] udevd[403]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 61.137668][ T1381] udevd[1381]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 61.143599][ T2385] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 61.156977][ T1673] udevd[1673]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 61.171419][ T2385] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.874: invalid indirect mapped block 2683928664 (level 1) [ 61.188195][ T2385] EXT4-fs (loop1): Remounting filesystem read-only [ 61.197024][ T2385] EXT4-fs (loop1): 1 truncate cleaned up [ 61.215357][ T2385] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 13: comm syz.1.874: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 61.235219][ T2385] EXT4-fs (loop1): Remounting filesystem read-only [ 61.244812][ T2190] EXT4-fs error (device loop1): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 61.265721][ T2190] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor: corrupted in-inode xattr [ 61.278044][ T2190] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor: corrupted in-inode xattr [ 61.318742][ T944] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 61.325595][ T944] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 61.333110][ T944] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 61.340271][ T944] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 61.347178][ T944] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 61.354431][ T944] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 61.361540][ T944] uclogic 0003:5543:0781.001A: unknown main item tag 0x0 [ 61.368686][ T944] uclogic 0003:5543:0781.001A: No inputs registered, leaving [ 61.378094][ T944] uclogic 0003:5543:0781.001A: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input0 [ 61.467901][ T1478] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 61.483171][ T2397] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.490080][ T2397] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.497137][ T2397] device bridge_slave_0 entered promiscuous mode [ 61.503883][ T2397] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.510864][ T2397] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.518120][ T2397] device bridge_slave_1 entered promiscuous mode [ 61.537946][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.548710][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.558222][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 61.567037][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.576781][ T24] usb 1-1: config 0 descriptor?? [ 61.582055][ T1454] usb 4-1: USB disconnect, device number 9 [ 61.602101][ T2397] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.608940][ T2397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.616031][ T2397] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.622837][ T2397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.643224][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.650544][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.657492][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.665781][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.673933][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.680801][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.690811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.697967][ T944] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 61.699008][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.712849][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.720033][ T1478] usb 5-1: Using ep0 maxpacket: 32 [ 61.735522][ T2397] device veth0_vlan entered promiscuous mode [ 61.742782][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.751117][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.758891][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.766019][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.773143][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.780828][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.793945][ T2397] device veth1_macvtap entered promiscuous mode [ 61.800567][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.813525][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.821851][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.838017][ T1478] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 61.847714][ T1478] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 61.856337][ T1478] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 61.865391][ T1478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.877082][ T1478] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 61.887049][ T1478] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 61.900063][ T1478] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 61.908930][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.917371][ T1478] usb 5-1: config 0 descriptor?? [ 61.938837][ T419] device bridge_slave_1 left promiscuous mode [ 61.944791][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.952792][ T419] device bridge_slave_0 left promiscuous mode [ 61.960077][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.968685][ T419] device veth1_macvtap left promiscuous mode [ 61.974542][ T419] device veth0_vlan left promiscuous mode [ 62.048514][ T24] logitech 0003:046D:CA03.001B: report_id 0 is invalid [ 62.055382][ T24] logitech 0003:046D:CA03.001B: item 0 0 1 8 parsing failed [ 62.062752][ T24] logitech 0003:046D:CA03.001B: parse failed [ 62.068223][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.071828][ T24] logitech: probe of 0003:046D:CA03.001B failed with error -22 [ 62.079437][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.100024][ T944] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 62.109920][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.120292][ T944] usb 3-1: config 0 descriptor?? [ 62.198760][ T1478] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 62.224151][ T2422] loop3: detected capacity change from 0 to 1024 [ 62.241452][ T2422] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 62.256939][ T2422] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 62.269240][ T60] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 62.269485][ T6] usb 1-1: USB disconnect, device number 9 [ 62.276736][ T2422] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.276736][ T2422] [ 62.291837][ T2422] EXT4-fs (loop3): Total free blocks count 0 [ 62.297613][ T2422] EXT4-fs (loop3): Free/Dirty block details [ 62.303471][ T2422] EXT4-fs (loop3): free_blocks=68451041280 [ 62.309513][ T2422] EXT4-fs (loop3): dirty_blocks=32 [ 62.314447][ T2422] EXT4-fs (loop3): Block reservation details [ 62.320416][ T2422] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 62.418311][ T19] usb 5-1: USB disconnect, device number 8 [ 62.428590][ T19] usblp0: removed [ 62.527862][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 62.566159][ T28] audit: type=1400 audit(1863845978.318:540): avc: denied { append } for pid=2449 comm="syz.3.901" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.600968][ T944] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 62.677926][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.688632][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.698169][ T60] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 62.707021][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.715341][ T60] usb 2-1: config 0 descriptor?? [ 62.806705][ T944] usb 3-1: USB disconnect, device number 12 [ 62.845700][ T28] audit: type=1400 audit(1863845978.598:541): avc: denied { mount } for pid=2457 comm="syz.0.905" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.868870][ T28] audit: type=1400 audit(1863845978.598:542): avc: denied { remount } for pid=2457 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.888521][ T1478] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.896057][ T28] audit: type=1400 audit(1863845978.628:543): avc: denied { unmount } for pid=1418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.928135][ T28] audit: type=1400 audit(1863845978.688:544): avc: denied { ioctl } for pid=2461 comm="syz.4.907" path="/186/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.007385][ T28] audit: type=1400 audit(1863845978.758:545): avc: denied { write } for pid=2473 comm="syz.4.913" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.167884][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 63.177873][ T1478] usb 4-1: Using ep0 maxpacket: 32 [ 63.208098][ T60] hid (null): report_id 0 is invalid [ 63.213895][ T60] lenovo 0003:17EF:60A3.001D: report_id 0 is invalid [ 63.220469][ T60] lenovo 0003:17EF:60A3.001D: item 0 1 1 8 parsing failed [ 63.227761][ T60] lenovo 0003:17EF:60A3.001D: hid_parse failed [ 63.233827][ T60] lenovo: probe of 0003:17EF:60A3.001D failed with error -22 [ 63.307915][ T1478] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.318654][ T1478] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.328166][ T1478] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 63.337097][ T1478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.388846][ T1478] hub 4-1:4.0: USB hub found [ 63.407870][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 63.418228][ T944] usb 2-1: USB disconnect, device number 10 [ 63.538032][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.548992][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.558653][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.571362][ T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 63.580232][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.588406][ T19] usb 1-1: config 0 descriptor?? [ 63.597905][ T1478] hub 4-1:4.0: 2 ports detected [ 63.807886][ T60] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 63.856659][ T2495] loop4: detected capacity change from 0 to 256 [ 63.865131][ T2495] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 64.017408][ T2514] loop4: detected capacity change from 0 to 512 [ 64.029724][ T2514] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.040994][ T2514] EXT4-fs (loop4): 1 truncate cleaned up [ 64.046510][ T2514] EXT4-fs mount: 40 callbacks suppressed [ 64.046522][ T2514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 64.068754][ T19] ryos 0003:1E7D:31CE.001E: ignoring exceeding usage max [ 64.078827][ T19] ryos 0003:1E7D:31CE.001E: ignoring exceeding usage max [ 64.086699][ T19] ryos 0003:1E7D:31CE.001E: usage index exceeded [ 64.094099][ T312] EXT4-fs (loop4): unmounting filesystem. [ 64.099856][ T19] ryos 0003:1E7D:31CE.001E: item 0 0 2 2 parsing failed [ 64.114173][ T19] ryos 0003:1E7D:31CE.001E: parse failed [ 64.118998][ T2502] loop1: detected capacity change from 0 to 40427 [ 64.120191][ T19] ryos: probe of 0003:1E7D:31CE.001E failed with error -22 [ 64.139081][ T2502] F2FS-fs (loop1): invalid crc value [ 64.149408][ T2502] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.187709][ T2502] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 64.189720][ T2527] loop4: detected capacity change from 0 to 128 [ 64.201412][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.212486][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.222902][ T2397] syz-executor: attempt to access beyond end of device [ 64.222902][ T2397] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.224332][ T2527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.243784][ T2527] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 64.288828][ T19] usb 1-1: USB disconnect, device number 10 [ 64.309614][ T2530] netlink: 'syz.1.937': attribute type 153 has an invalid length. [ 64.327943][ T60] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.336810][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.344861][ T60] usb 3-1: SerialNumber: syz [ 64.361473][ T2532] loop4: detected capacity change from 0 to 512 [ 64.368755][ T2532] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.380749][ T2532] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 64.389066][ T2532] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.938: invalid indirect mapped block 2683928664 (level 1) [ 64.403000][ T2532] EXT4-fs (loop4): Remounting filesystem read-only [ 64.409461][ T2532] EXT4-fs (loop4): 1 truncate cleaned up [ 64.415151][ T2532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.429975][ T2532] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 13: comm syz.4.938: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 64.430183][ T2538] loop1: detected capacity change from 0 to 512 [ 64.453186][ T2532] EXT4-fs (loop4): Remounting filesystem read-only [ 64.467366][ T2538] EXT4-fs: Ignoring removed oldalloc option [ 64.470728][ T312] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 64.494533][ T312] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor: corrupted in-inode xattr [ 64.500072][ T2538] EXT4-fs (loop1): 1 orphan inode deleted [ 64.508130][ T312] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor: corrupted in-inode xattr [ 64.512267][ T2538] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.532716][ T2538] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 64.550112][ T28] audit: type=1400 audit(1863845980.308:546): avc: denied { setattr } for pid=2537 comm="syz.1.939" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.550629][ T2538] incfs_lookup_dentry err:-2 [ 64.583281][ T2397] ------------[ cut here ]------------ [ 64.588576][ T2397] kernel BUG at fs/namei.c:2956! [ 64.593357][ T2397] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 64.598935][ T1409] EXT4-fs (loop4): unmounting filesystem. [ 64.599208][ T2397] CPU: 1 PID: 2397 Comm: syz-executor Not tainted 6.1.99-syzkaller-00054-g00f19bd9ed42 #0 [ 64.614658][ T2397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.624552][ T2397] RIP: 0010:may_delete+0x6eb/0x6f0 [ 64.629504][ T2397] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 ac 2a ac ff 0f 0b e8 a5 2a ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 91 2a ac ff 4c 8d [ 64.648940][ T2397] RSP: 0018:ffffc900013dfbd8 EFLAGS: 00010293 [ 64.654849][ T2397] RAX: ffffffff81c9789b RBX: ffff88811a468690 RCX: ffff88811a386540 [ 64.662652][ T2397] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 64.670465][ T2397] RBP: ffffc900013dfc40 R08: ffffffff81c9722f R09: 0000000000000003 [ 64.678275][ T2397] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811a695330 [ 64.686085][ T2397] R13: 1ffff110234d2a66 R14: ffff8881350aba98 R15: dffffc0000000000 [ 64.693898][ T2397] FS: 00005555567ab500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.702669][ T2397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.709085][ T2397] CR2: 00005555567d6528 CR3: 000000012557a000 CR4: 00000000003506a0 [ 64.716899][ T2397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.724708][ T2397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.732520][ T2397] Call Trace: [ 64.735644][ T2397] [ 64.738423][ T2397] ? __die_body+0x62/0xb0 [ 64.742587][ T2397] ? die+0x88/0xb0 [ 64.746144][ T2397] ? do_trap+0x103/0x330 [ 64.750225][ T2397] ? may_delete+0x6eb/0x6f0 [ 64.754563][ T2397] ? handle_invalid_op+0x95/0xc0 [ 64.759339][ T2397] ? may_delete+0x6eb/0x6f0 [ 64.763678][ T2397] ? exc_invalid_op+0x32/0x50 [ 64.768191][ T2397] ? asm_exc_invalid_op+0x1b/0x20 [ 64.773051][ T2397] ? may_delete+0x7f/0x6f0 [ 64.777303][ T2397] ? may_delete+0x6eb/0x6f0 [ 64.781644][ T2397] ? may_delete+0x6eb/0x6f0 [ 64.785983][ T2397] ? may_delete+0x6eb/0x6f0 [ 64.790322][ T2397] vfs_rmdir+0x32/0x500 [ 64.794313][ T2397] ? generic_shutdown_super+0x2b8/0x370 [ 64.799696][ T2397] incfs_kill_sb+0x113/0x230 [ 64.804121][ T2397] deactivate_locked_super+0xad/0x110 [ 64.809330][ T2397] deactivate_super+0xbe/0xf0 [ 64.813841][ T2397] cleanup_mnt+0x485/0x510 [ 64.818094][ T2397] ? user_path_at_empty+0x14e/0x1a0 [ 64.823129][ T2397] __cleanup_mnt+0x19/0x20 [ 64.827391][ T2397] task_work_run+0x24d/0x2e0 [ 64.831809][ T2397] ? task_work_cancel+0x2b0/0x2b0 [ 64.836668][ T2397] ? __x64_sys_umount+0x122/0x170 [ 64.841528][ T2397] exit_to_user_mode_loop+0x94/0xa0 [ 64.846562][ T2397] exit_to_user_mode_prepare+0x5a/0xa0 [ 64.851856][ T2397] syscall_exit_to_user_mode+0x26/0x130 [ 64.857238][ T2397] do_syscall_64+0x47/0xb0 [ 64.861501][ T2397] ? clear_bhb_loop+0x55/0xb0 [ 64.866002][ T2397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.871731][ T2397] RIP: 0033:0x7f227c37f327 [ 64.875983][ T2397] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 64.895424][ T2397] RSP: 002b:00007ffe84e4f5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 64.903669][ T2397] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f227c37f327 [ 64.911482][ T2397] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe84e4f670 [ 64.919291][ T2397] RBP: 00007ffe84e4f670 R08: 0000000000000000 R09: 0000000000000000 [ 64.927104][ T2397] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe84e50760 [ 64.934940][ T2397] R13: 00007f227c3f0134 R14: 000000000000fad9 R15: 00007ffe84e51820 [ 64.942729][ T2397] [ 64.945589][ T2397] Modules linked in: [ 64.952542][ T2397] ---[ end trace 0000000000000000 ]--- [ 64.960947][ T2397] RIP: 0010:may_delete+0x6eb/0x6f0 [ 64.965937][ T2397] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 ac 2a ac ff 0f 0b e8 a5 2a ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 91 2a ac ff 4c 8d [ 64.987043][ T2397] RSP: 0018:ffffc900013dfbd8 EFLAGS: 00010293 [ 64.993295][ T2397] RAX: ffffffff81c9789b RBX: ffff88811a468690 RCX: ffff88811a386540 [ 65.001400][ T2397] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 65.008540][ T60] usb 3-1: 0:2 : does not exist [ 65.009665][ T2397] RBP: ffffc900013dfc40 R08: ffffffff81c9722f R09: 0000000000000003 [ 65.023283][ T2397] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811a695330 [ 65.030064][ T60] usb 3-1: USB disconnect, device number 13 [ 65.031103][ T2397] R13: 1ffff110234d2a66 R14: ffff8881350aba98 R15: dffffc0000000000 [ 65.044795][ T2397] FS: 00005555567ab500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.057544][ T2397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.064030][ T2397] CR2: 0000001b2f61bff8 CR3: 000000012557a000 CR4: 00000000003506b0 [ 65.067894][ T1478] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 65.072189][ T2397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.083497][ T1478] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 65.086081][ T2397] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.102011][ T2397] Kernel panic - not syncing: Fatal exception [ 65.108095][ T2397] Kernel Offset: disabled [ 65.112324][ T2397] Rebooting in 86400 seconds..