last executing test programs: 4.811836046s ago: executing program 1 (id=2322): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403", @ANYRESHEX], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003080000000803"], 0x0, 0x0}, 0x0) 2.745213525s ago: executing program 1 (id=2336): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x8}) r1 = open(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') setxattr$security_evm(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 2.706516137s ago: executing program 1 (id=2337): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x22) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) fallocate(r0, 0x0, 0x0, 0x1000f4) 2.586990441s ago: executing program 1 (id=2339): r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300), 0x16) r4 = dup3(r3, r1, 0x0) sendfile(r3, r2, 0x0, 0x8038) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x23, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, &(0x7f0000000080), 0x41000, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r3, r1, r4, r3, r4], 0x0, 0x10, 0xfff}, 0x90) r5 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffff00000000, 0xff02}, 0x0, r6}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendfile(r1, r2, 0x0, 0xef84) 2.128732648s ago: executing program 4 (id=2346): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x2100c18, &(0x7f0000000180)=ANY=[], 0x9, 0x2be, &(0x7f0000000240)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) 1.988824344s ago: executing program 4 (id=2349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x48b, 0x0, 0xfffffffffffffffc}]}) 1.974171694s ago: executing program 4 (id=2350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) sendmmsg$sock(r0, &(0x7f0000007140)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003700)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 1.960359635s ago: executing program 4 (id=2351): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 1.943048496s ago: executing program 4 (id=2352): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x7, {0x7, 0x0, "b27814d066"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.918637736s ago: executing program 1 (id=2353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) 1.850539289s ago: executing program 1 (id=2354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string}, 0x0, 0x0}, 0x0) 1.083450889s ago: executing program 0 (id=2369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_gfeatures}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) 1.071577709s ago: executing program 2 (id=2370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000c40)={@val, @val={0x3, 0x4, 0x0, 0x1}, @x25}, 0x11) 1.027871831s ago: executing program 0 (id=2371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x48b, 0x0, 0xfffffffffffffffc}]}) 998.046292ms ago: executing program 2 (id=2372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) sendmmsg$sock(r0, &(0x7f0000007140)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003700)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 986.391612ms ago: executing program 2 (id=2373): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 975.533693ms ago: executing program 2 (id=2374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x764, &(0x7f0000000f80)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r2, 0xcd98) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4917e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020}, 0x2020) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000002c0)="f30fb1414a66b858ed26900f23c00f21f8663503000d000f23f8b8ed000f00d0baf80c66b86a61fc8266efbafc0ced0fc75b000f0f4618b466b9e902000066b8eda0df5b66ba86e1364b0f30f20f0764027b0d66b9330200000f32", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x8a, 0x0, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 967.188753ms ago: executing program 0 (id=2375): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x4) read$FUSE(r0, 0x0, 0x0) 757.381021ms ago: executing program 0 (id=2376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) 694.609354ms ago: executing program 0 (id=2377): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 679.052204ms ago: executing program 0 (id=2378): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)) 562.407538ms ago: executing program 2 (id=2381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_gfeatures}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) 466.776863ms ago: executing program 3 (id=2383): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) sendmmsg$sock(r0, &(0x7f0000007140)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003700)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) 438.081473ms ago: executing program 3 (id=2384): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 368.853516ms ago: executing program 2 (id=2385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x48b, 0x0, 0xfffffffffffffffc}]}) 350.618736ms ago: executing program 3 (id=2387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) 295.428858ms ago: executing program 3 (id=2388): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x2a0, &(0x7f0000000b00)="$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") 220.784521ms ago: executing program 3 (id=2389): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)) 211.189342ms ago: executing program 3 (id=2390): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4), 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000074c7b4206d04f6088a810009000109021200010000000009040000000e"], 0x0) 0s ago: executing program 4 (id=2391): ftruncate(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), &(0x7f00000000c0), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x59}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7a00, 0x0, 0x0) accept$inet6(r3, &(0x7f0000003100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000003140)=0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000004000000002000040a637a1e7a9ec8cfcc73c8651118000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'hsr0\x00', 0x2}) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') prctl$PR_SET_TSC(0x1a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000003180)='./file1\x00', 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000002100)={{r1}, "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"}) listen(r5, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f600000000000000"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x39a8c90d50e49153, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x22, 0x2}, @mptcp=@generic={0x0, 0x2}]}}}}}}}}, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000031c0)=ANY=[@ANYBLOB="030000009a7acddff7fd71cb0ac85f74582cdfe800000000000000000000000071124200000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0xc}, 0x90) kernel console output (not intermixed with test programs): nterface descriptor's value: 21 [ 171.243353][ T375] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.252209][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.261194][ T375] usb 1-1: config 0 descriptor?? [ 171.276548][ T5870] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 171.285361][ T5849] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 171.285464][ T5870] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038 (0x7fffffff) [ 171.306614][ T5875] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 171.518038][ T5873] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 171.728163][ T5882] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 171.745405][ T375] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd [ 171.753825][ T375] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 171.766056][ T375] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 171.768743][ T5887] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 171.787154][ T5887] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 171.798460][ T5884] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 171.856781][ T5892] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 172.028358][ T5519] usb 1-1: USB disconnect, device number 15 [ 172.123521][ T5901] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 172.186292][ T5904] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 172.195373][ T5904] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038 (0x7fffffff) [ 172.225049][ T5902] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 172.232322][ T5902] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 172.244132][ T5902] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.263914][ T5] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.305663][ T5902] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 172.312512][ T5902] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.362691][ T5912] attempt to access beyond end of device [ 172.362691][ T5912] loop4: rw=2049, want=45104, limit=40427 [ 172.400509][ T5920] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 172.498924][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.519291][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.533762][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 172.534385][ T5918] device bridge_slave_0 entered promiscuous mode [ 172.547975][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.554957][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.562645][ T5918] device bridge_slave_1 entered promiscuous mode [ 172.595281][ T5928] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 172.654086][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.658279][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.671613][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.676924][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.678844][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.690369][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.695072][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.714882][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 172.724595][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.734359][ T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 172.811395][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.820094][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.831522][ T352] udevd[352]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 172.845067][ T487] udevd[487]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 172.856153][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.908781][ T5933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 172.917822][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.938572][ T5519] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.938734][ T5933] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038 (0x7fffffff) [ 172.945551][ T5519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.945887][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.991781][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.005301][ T5519] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.012150][ T5519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.035120][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.042936][ T5] usb 4-1: Product: syz [ 173.066295][ T5] usb 4-1: Manufacturer: syz [ 173.079418][ T5] usb 4-1: SerialNumber: syz [ 173.108763][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.117598][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.139586][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.185512][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.226917][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.253580][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.278368][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.303923][ T179] device bridge_slave_1 left promiscuous mode [ 173.309920][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.349533][ T179] device bridge_slave_0 left promiscuous mode [ 173.363794][ T5] cdc_ncm 4-1:1.0: bind() failure [ 173.370790][ T5] cdc_ncm 4-1:1.1: bind() failure [ 173.373441][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.384949][ T5] usb 4-1: USB disconnect, device number 11 [ 173.490188][ T5943] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 173.509643][ T5943] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 174.275541][ T5940] F2FS-fs (loop0): invalid crc value [ 174.287983][ T5931] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.334050][ T5940] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.389359][ T5935] F2FS-fs (loop2): Found nat_bits in checkpoint [ 174.453589][ T5931] F2FS-fs (loop4): recover fsync data on readonly fs [ 174.470738][ T5931] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.508460][ T5935] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 174.518651][ T5940] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 174.576766][ T5935] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 175.064386][ T5948] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.182611][ T5948] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 175.363687][ T5950] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.625845][ T5950] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 175.708907][ T5980] F2FS-fs (loop0): Unrecognized mount option "00000000000000000311" or missing value [ 176.469558][ T5969] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.597225][ T5969] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 176.625588][ T5997] EXT4-fs (loop1): #clusters per group too big: 67141632 [ 177.036655][ T5987] F2FS-fs (loop3): invalid crc value [ 177.038048][ T5997] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 177.049235][ T5997] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 177.054372][ T5987] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.059475][ T5997] F2FS-fs (loop1): invalid crc value [ 177.085066][ T5997] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.132210][ T5987] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 177.137346][ T5997] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 177.145336][ T5997] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 177.149276][ T5987] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 177.192683][ T23] audit: type=1400 audit(1719931718.705:592): avc: denied { read write } for pid=5995 comm="syz.1.1903" name="file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 177.225179][ T23] audit: type=1400 audit(1719931718.705:593): avc: denied { open } for pid=5995 comm="syz.1.1903" path="/3/file0/file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 177.272125][ T5918] attempt to access beyond end of device [ 177.272125][ T5918] loop1: rw=2049, want=45112, limit=40427 [ 179.104916][ T6003] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.163258][ T6025] F2FS-fs (loop0): invalid crc value [ 179.171527][ T6003] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.201756][ T6025] F2FS-fs (loop0): Found nat_bits in checkpoint [ 179.222237][ T6029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.341854][ T6029] F2FS-fs (loop1): recover fsync data on readonly fs [ 179.353835][ T6029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.362905][ T6025] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 180.643613][ T162] loop0: p2 p3 p7 [ 180.668417][ T6090] loop0: p2 p3 p7 [ 180.751333][ T162] loop0: p2 p3 p7 [ 180.779186][ T23] audit: type=1326 audit(1719931721.290:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.0.1929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe24ec17f19 code=0x0 [ 180.809649][ T5519] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.857237][ T412] udevd[412]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 180.868559][ T487] udevd[487]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 180.880408][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 180.924292][ T412] udevd[412]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 180.935200][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 180.948819][ T487] udevd[487]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 180.969701][ T124] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.987810][ T412] udevd[412]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 180.998837][ T5923] udevd[5923]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 181.011199][ T487] udevd[487]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 181.069606][ T5519] usb 3-1: Using ep0 maxpacket: 32 [ 181.189680][ T5519] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.209429][ T5519] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.219561][ T124] usb 2-1: Using ep0 maxpacket: 32 [ 181.229347][ T5519] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 181.238244][ T5519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.300094][ T5519] hub 3-1:4.0: USB hub found [ 181.359483][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 181.375884][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 181.398871][ T124] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 181.416422][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.434315][ T124] usb 2-1: config 0 descriptor?? [ 181.459372][ T6093] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 181.479995][ T124] hub 2-1:0.0: USB hub found [ 181.599376][ T5519] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 181.689277][ T124] hub 2-1:0.0: 2 ports detected [ 182.073904][ T23] audit: type=1400 audit(1719931722.590:595): avc: denied { unmount } for pid=3810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 182.127834][ T6076] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.164486][ T6111] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 182.187435][ T6111] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 182.252062][ T6076] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.269029][ T6111] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.315600][ T6111] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 182.329195][ T6088] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 182.340289][ T6111] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.350524][ T6088] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.403952][ T6124] attempt to access beyond end of device [ 182.403952][ T6124] loop3: rw=2049, want=45104, limit=40427 [ 182.436864][ T6088] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.599600][ T6143] SELinux: Context system_u:object_r:initctl_t:s0 is not valid (left unmapped). [ 182.686827][ T23] audit: type=1400 audit(1719931722.550:596): avc: denied { relabelto } for pid=6139 comm="syz.0.1943" name="/" dev="tmpfs" ino=58272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:initctl_t:s0" [ 182.708213][ T6088] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.727647][ T6088] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.736558][ T23] audit: type=1400 audit(1719931722.550:597): avc: denied { associate } for pid=6139 comm="syz.0.1943" name="/" dev="tmpfs" ino=58272 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initctl_t:s0" [ 182.938701][ T5519] usb 3-1: USB disconnect, device number 10 [ 183.303293][ T6172] loop3: p1 < > p3 [ 183.308712][ T6172] loop3: p3 size 134217728 extends beyond EOD, truncated [ 183.569372][ T6197] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 183.608303][ T3315] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 183.709157][ T6209] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1969'. [ 183.718151][ T23] audit: type=1400 audit(1719931723.510:598): avc: denied { nlmsg_read } for pid=6208 comm="syz.2.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.847311][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.854404][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.862033][ T6210] device bridge_slave_0 entered promiscuous mode [ 183.869789][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.876642][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.884309][ T6210] device bridge_slave_1 entered promiscuous mode [ 183.962632][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.969535][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.977176][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.978351][ T3315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 183.983999][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.995406][ T3315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 184.014116][ T3315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.045338][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.045478][ T3315] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.062018][ T3315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.070375][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.081414][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.090010][ T3315] usb 4-1: config 0 descriptor?? [ 184.095243][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.122039][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.130366][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.137321][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.138045][ T6172] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 184.145348][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.160070][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.166928][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.169756][ T6232] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 184.174945][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.186982][ T6232] ext4 filesystem being mounted at /112/bus supports timestamps until 2038 (0x7fffffff) [ 184.190675][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.224811][ T5] usb 2-1: USB disconnect, device number 14 [ 184.229800][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.263457][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.310340][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.323949][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.355245][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.363112][ T357] hub 2-1:0.0: activate --> -19 [ 184.421778][ T23] audit: type=1400 audit(1719931724.220:599): avc: denied { mounton } for pid=6253 comm="syz.2.1982" path="/proc/1034/task" dev="proc" ino=59144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 184.589763][ T6278] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,discard,nolazytime,inode_readahead_blks=0x0000000000000020,lazytime,auto_da_alloc,init_itable=0x0000000000000008,bsdgroups,grpid,,errors=continue [ 184.610897][ T6278] ext4 filesystem being mounted at /437/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 184.629245][ T3315] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 184.639026][ T3315] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 184.654549][ T3315] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 184.673071][ T6278] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 184.681560][ T6278] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 184.689372][ T6277] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 184.698637][ T6277] ext4 filesystem being mounted at /119/bus supports timestamps until 2038 (0x7fffffff) [ 184.885685][ T6290] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 184.968306][ T6290] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue [ 184.990190][ T6290] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 184.995315][ T5] usb 4-1: USB disconnect, device number 12 [ 185.060474][ T6300] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 185.083232][ T6290] EXT4-fs error (device loop1): __ext4_new_inode:1122: comm syz.1.1992: failed to insert inode 16: doubly allocated? [ 185.091955][ T6300] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038 (0x7fffffff) [ 185.099471][ T23] audit: type=1400 audit(1719931724.890:600): avc: denied { map } for pid=6289 comm="syz.1.1992" path="socket:[60300]" dev="sockfs" ino=60300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.147361][ T23] audit: type=1400 audit(1719931724.890:601): avc: denied { read } for pid=6289 comm="syz.1.1992" path="socket:[60300]" dev="sockfs" ino=60300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.341051][ T6315] syz.2.1998[6315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.341106][ T6315] syz.2.1998[6315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.454659][ T6309] EXT4-fs (loop1): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 185.528984][ T6320] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 185.537923][ T6320] ext4 filesystem being mounted at /444/bus supports timestamps until 2038 (0x7fffffff) [ 185.664993][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.672610][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.695016][ T6329] device bridge_slave_0 entered promiscuous mode [ 185.712025][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.723983][ T23] audit: type=1400 audit(1719931725.521:602): avc: denied { unmount } for pid=4715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.724000][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.767768][ T6329] device bridge_slave_1 entered promiscuous mode [ 185.820113][ T23] audit: type=1400 audit(1719931725.621:603): avc: denied { watch watch_reads } for pid=6339 comm="syz.4.2006" path="/122/file1" dev="tmpfs" ino=61447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.865629][ T6337] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 185.900743][ T23] audit: type=1400 audit(1719931725.701:604): avc: denied { mount } for pid=6343 comm="syz.4.2009" name="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 185.949880][ T6337] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue [ 185.969069][ T6337] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038 (0x7fffffff) [ 185.980341][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.988510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.994660][ T6337] EXT4-fs error (device loop2): __ext4_new_inode:1122: comm syz.2.2005: failed to insert inode 16: doubly allocated? [ 186.017247][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.025819][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.034297][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.041191][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.049325][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.067599][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.075691][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.082557][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.115658][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.127403][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.147769][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.177363][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.191263][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.222644][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.251261][ T179] device bridge_slave_1 left promiscuous mode [ 186.258102][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.265544][ T179] device bridge_slave_0 left promiscuous mode [ 186.272043][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.377238][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.385499][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.410573][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.425117][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.453052][ T23] audit: type=1400 audit(1719931726.251:605): avc: denied { mount } for pid=6329 comm="syz-executor" name="/" dev="tmpfs" ino=60743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.487294][ T6369] loop4: p1 < > p3 [ 186.506563][ T6369] loop4: p3 size 134217728 extends beyond EOD, truncated [ 186.806743][ T357] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 186.928005][ T6410] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.984943][ T6410] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3002: comm syz.1.2033: Allocating blocks 41-42 which overlap fs metadata [ 187.017142][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2034'. [ 187.036299][ T6410] EXT4-fs (loop1): Remounting filesystem read-only [ 187.043697][ T6410] EXT4-fs (loop1): 1 truncate cleaned up [ 187.066570][ T6410] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,usrquota,noblock_validity,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002 [ 187.125884][ T5918] EXT4-fs (loop1): pa ffff8881d81ab9d8: logic 1, phys. 41, len 23 [ 187.133708][ T5918] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:3899: group 0, free 22, pa_free 23 [ 187.164323][ T5918] EXT4-fs (loop1): Remounting filesystem read-only [ 187.176523][ T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 187.196516][ T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 187.226415][ T357] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.252070][ T357] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.344446][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.373113][ T357] usb 5-1: config 0 descriptor?? [ 187.396496][ T6369] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 187.835231][ T6433] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 187.851444][ T6433] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue [ 187.867911][ T357] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 187.870583][ T6433] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 187.886619][ T357] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 187.903715][ T6433] EXT4-fs error (device loop0): __ext4_new_inode:1122: comm syz.0.2040: failed to insert inode 16: doubly allocated? [ 187.922494][ T357] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 188.143261][ T6398] F2FS-fs (loop3): invalid crc value [ 188.180271][ T6398] F2FS-fs (loop3): Found nat_bits in checkpoint [ 188.193363][ T382] usb 5-1: USB disconnect, device number 11 [ 188.242675][ T6398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 188.293070][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 188.293081][ T23] audit: type=1400 audit(1719931728.092:606): avc: denied { create } for pid=6397 comm="syz.3.2029" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 188.347740][ T6451] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 188.365992][ T6451] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff) [ 188.366470][ T23] audit: type=1400 audit(1719931728.122:607): avc: denied { read write open } for pid=6397 comm="syz.3.2029" path="/37/file0/file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 188.417398][ T23] audit: type=1400 audit(1719931728.122:608): avc: denied { ioctl } for pid=6397 comm="syz.3.2029" path="/37/file0/file1" dev="loop3" ino=10 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 189.139475][ T6453] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.191522][ T6453] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.219603][ T6453] F2FS-fs (loop2): inode (7) has corrupted xattr [ 189.226406][ T6453] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=7 [ 189.235446][ T6453] F2FS-fs (loop2): inode (7) has corrupted xattr [ 189.241841][ T6453] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=7 [ 189.270539][ T23] audit: type=1400 audit(1719931729.073:609): avc: denied { append } for pid=6452 comm="syz.2.2046" path="/459/file0/cgroup.controllers" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 189.287766][ T6453] F2FS-fs (loop2): inode (7) has corrupted xattr [ 189.322199][ T6474] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000200000,minixdf,,errors=continue [ 189.347416][ T6453] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=7 [ 189.362922][ T6474] ext4 filesystem being mounted at /22/bus supports timestamps until 2038 (0x7fffffff) [ 189.539328][ T6497] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 189.548371][ T6497] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038 (0x7fffffff) [ 189.623139][ T6497] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 189.651011][ T6497] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 190.073363][ T6511] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 190.081458][ T6511] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 190.136371][ T6511] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.186682][ T6511] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 190.193722][ T6511] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.228677][ T23] audit: type=1400 audit(1719931730.033:610): avc: denied { read write } for pid=6528 comm="syz.2.2059" name="uhid" dev="devtmpfs" ino=9908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 190.258207][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.302188][ T23] audit: type=1400 audit(1719931730.053:611): avc: denied { open } for pid=6528 comm="syz.2.2059" path="/dev/uhid" dev="devtmpfs" ino=9908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 190.303078][ T6519] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro, [ 190.405508][ T6519] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff) [ 190.415237][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.424911][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.452452][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.558207][ T6519] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #2: comm syz.1.2065: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 190.558215][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.667502][ T6519] EXT4-fs (loop1): Remounting filesystem read-only [ 190.669266][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.691942][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.711481][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.819833][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.827600][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.834915][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.843338][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.850923][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.858678][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.866143][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.873757][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.881341][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.888894][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.896971][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.904163][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.911438][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.918898][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.926420][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.933622][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.941322][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.948952][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.956292][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.963563][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.970974][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.978242][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.985462][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.992721][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 190.999954][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.007382][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.015449][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.022665][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.030276][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.037689][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.045111][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.052393][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.060358][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.067526][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.074762][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.081905][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.089293][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.096564][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.103855][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.111184][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.118369][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.125840][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.133259][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.140521][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.147774][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.155077][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.162367][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.169871][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.177020][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.184515][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.191683][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.199219][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.206423][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.213569][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.220918][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.228881][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.236358][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.237424][ T6542] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 191.243543][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.243563][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.252896][ T6542] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 191.259637][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.284191][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.291967][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.299261][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.306632][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.314136][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.321394][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.329402][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.337249][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.345086][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.352385][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.359613][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.367533][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.374840][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.382000][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.389263][ T382] hid-generic 0000:0002:0000.001B: unknown main item tag 0x0 [ 191.398796][ T382] hid-generic 0000:0002:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.521725][ T6542] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 191.530235][ T6542] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 191.674876][ T6549] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 191.704346][ T6549] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 191.725215][ T6569] input: syz1 as /devices/virtual/input/input24 [ 191.836090][ T23] audit: type=1400 audit(1719931731.634:612): avc: denied { associate } for pid=6567 comm="syz.0.2081" name="/" dev="tmpfs" ino=61335 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initctl_t:s0" [ 191.843660][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 191.881811][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 191.897174][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 191.910322][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 191.917870][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 191.925690][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 191.954654][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 191.981035][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 191.990228][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.008999][ T6577] EXT4-fs (loop4): Ignoring removed nobh option [ 192.014598][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.022456][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.030956][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.041698][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.058629][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.071637][ T6577] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,errors=remount-ro, [ 192.072466][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.088978][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.096244][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.103405][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.110659][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.118087][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.125376][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.132637][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.139862][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.144286][ T6577] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.2083: bg 0: block 255: padding at end of block bitmap is not set [ 192.147325][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.162646][ T6577] EXT4-fs (loop4): Remounting filesystem read-only [ 192.168516][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.182147][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.182418][ T6577] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.2083: inline data xattr refers to an external xattr inode [ 192.189580][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.212250][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.219472][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.227001][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.234274][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.241989][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.249387][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.256926][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.264081][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.271662][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.279123][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.286732][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.294189][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.301485][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.308852][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.316124][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.323410][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.330785][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.338340][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.345514][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.352701][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.359991][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.367219][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.374524][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.382196][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.389515][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.396705][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.404200][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.411898][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.419298][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.426719][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.433895][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.441080][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.448689][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.456274][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.463769][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.471021][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.478247][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.485480][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.493026][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.500228][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.507506][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.514700][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.522022][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.529671][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.537367][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.545168][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.552409][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.560454][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.568125][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.575904][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.584271][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.592077][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.599623][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.607281][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.614830][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.621988][ T382] hid-generic 0000:0002:0000.001C: unknown main item tag 0x0 [ 192.635084][ T382] hid-generic 0000:0002:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.746033][ T6604] input: syz1 as /devices/virtual/input/input25 [ 192.760860][ T6606] TCP: tcp_parse_options: Illegal window scaling value 131 > 14 received [ 192.854723][ T6592] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 192.864334][ T6592] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038 (0x7fffffff) [ 192.892193][ T6608] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #15: comm syz.2.2098: casefold flag without casefold feature [ 192.905984][ T6608] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.2098: bad orphan inode 15 [ 192.916638][ T6608] ext4_test_bit(bit=14, block=4) = 1 [ 192.921899][ T6608] is_bad_inode(inode)=0 [ 192.926034][ T6608] NEXT_ORPHAN(inode)=0 [ 192.930042][ T6608] max_ino=32 [ 192.932967][ T6608] i_nlink=1 [ 192.935996][ T6608] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 192.942071][ T6610] EXT4-fs (loop3): Ignoring removed nobh option [ 192.961076][ T6608] EXT4-fs error (device loop2): ext4_validate_block_bitmap:409: comm syz.2.2098: bg 0: block 5: invalid block bitmap [ 192.980855][ T6592] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 193.001271][ T6592] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 193.026770][ T6610] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,errors=remount-ro, [ 193.129310][ T6610] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.2097: bg 0: block 255: padding at end of block bitmap is not set [ 193.146208][ T6610] EXT4-fs (loop3): Remounting filesystem read-only [ 193.153737][ T6610] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2097: inline data xattr refers to an external xattr inode [ 193.167959][ T23] audit: type=1400 audit(1719931732.954:613): avc: denied { name_bind } for pid=6643 comm="syz.4.2108" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 193.309801][ T6651] ------------[ cut here ]------------ [ 193.316441][ T6651] General protection fault in user access. Non-canonical address? [ 193.316490][ T6651] WARNING: CPU: 1 PID: 6651 at arch/x86/mm/extable.c:77 ex_handler_uaccess+0x9b/0xc0 [ 193.334593][ T6651] Modules linked in: [ 193.338695][ T6651] CPU: 1 PID: 6651 Comm: syz.3.2113 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 193.349949][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 193.360443][ T6651] RIP: 0010:ex_handler_uaccess+0x9b/0xc0 [ 193.366189][ T6651] Code: f7 e8 09 a4 63 00 49 89 2e b0 01 5b 41 5e 41 5f 5d c3 e8 58 be 33 00 c6 05 82 1e 19 05 01 48 c7 c7 e0 d1 a6 84 e8 75 72 0a 00 <0f> 0b eb 9a 89 d9 80 e1 07 80 c1 03 38 c1 7c ac 48 89 df e8 3d a3 [ 193.386552][ T6651] RSP: 0018:ffff8881e30f7630 EFLAGS: 00010046 [ 193.392580][ T6651] RAX: aa10d20de5955600 RBX: ffffffff8480788c RCX: 0000000000040000 [ 193.393361][ T382] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 193.400567][ T6651] RDX: ffffc90003a6a000 RSI: 000000000000662b RDI: 000000000000662c [ 193.400575][ T6651] RBP: 000000000000000d R08: ffffffff814d4702 R09: fffffbfff0dd7a10 [ 193.400582][ T6651] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 193.400591][ T6651] R13: ffff8881e30f7758 R14: ffff8881e30f7758 R15: ffffffff84807894 [ 193.400601][ T6651] FS: 00007f3a916f86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 193.400616][ T6651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.456753][ T6651] CR2: 0000000020001000 CR3: 00000001dea50000 CR4: 00000000003406a0 [ 193.464656][ T6651] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.473422][ T6651] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.481239][ T6651] Call Trace: [ 193.484335][ T6651] ? __warn+0x162/0x250 [ 193.488418][ T6651] ? report_bug+0x3a1/0x4e0 [ 193.492833][ T6651] ? ex_handler_uaccess+0x9b/0xc0 [ 193.497709][ T6651] ? ex_handler_uaccess+0x9b/0xc0 [ 193.502559][ T6651] ? do_invalid_op+0x6e/0x110 [ 193.507069][ T6651] ? invalid_op+0x1e/0x30 [ 193.511246][ T6651] ? __start___ex_table+0x5864/0x5ebc [ 193.516462][ T6651] ? __start___ex_table+0x585c/0x5ebc [ 193.521900][ T6651] ? vprintk_emit+0x192/0x3f0 [ 193.526413][ T6651] ? ex_handler_uaccess+0x9b/0xc0 [ 193.531392][ T6651] ? ex_handler_fprestore+0xe0/0xe0 [ 193.536495][ T6651] ? __start___ex_table+0x5864/0x5ebc [ 193.541624][ T6651] ? __start___ex_table+0x585c/0x5ebc [ 193.546927][ T6651] fixup_exception+0x93/0xd0 [ 193.551441][ T6651] do_general_protection+0x1a3/0x3c0 [ 193.556766][ T6651] ? do_trap+0x340/0x340 [ 193.560961][ T6651] general_protection+0x28/0x30 [ 193.565639][ T6651] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 193.571880][ T6651] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 66 66 [ 193.592068][ T6651] RSP: 0018:ffff8881e30f7800 EFLAGS: 00050002 [ 193.598298][ T6651] RAX: ffffffff819962c7 RBX: ffff8881d7f61a18 RCX: 0000000000000002 [ 193.606215][ T6651] RDX: 0000000000000002 RSI: fc1a000000000000 RDI: ffff8881e30f78a8 [ 193.614032][ T6651] RBP: 1ffff1103afec343 R08: 0000000000000005 R09: ffffffff819962b0 [ 193.622504][ T6651] R10: ffff8881d7f60fc0 R11: 0000000000000003 R12: ffff8881e30f78a8 [ 193.631343][ T6651] R13: ffff8881d7f60fc0 R14: 1ffff1103afec36b R15: 0000000000000002 [ 193.639497][ T6651] ? __check_object_size+0x70/0x3a0 [ 193.645072][ T6651] ? __check_object_size+0x87/0x3a0 [ 193.650535][ T6651] __probe_kernel_read+0xd9/0x190 [ 193.655515][ T6651] bpf_probe_read+0x3f/0x80 [ 193.660730][ T6651] bpf_prog_661afe553e78869a+0x87d/0x1000 [ 193.666805][ T6651] bpf_trace_run3+0x128/0x2f0 [ 193.671481][ T6651] ? bpf_trace_run2+0x2d0/0x2d0 [ 193.676252][ T6651] ? pcpu_free_area+0x82b/0x9d0 [ 193.680929][ T6651] ? pcpu_chunk_relocate+0xdc/0x3a0 [ 193.686150][ T6651] ? __bpf_trace_percpu_alloc_percpu+0x50/0x50 [ 193.692122][ T6651] free_percpu+0x5af/0x910 [ 193.696532][ T6651] percpu_counter_destroy+0x17e/0x1b0 [ 193.701793][ T6651] wb_exit+0xc4/0x2d0 [ 193.705690][ T6651] ? bdi_register_owner+0xf0/0xf0 [ 193.710645][ T6651] ? cgwb_release_workfn+0x4b0/0x4b0 [ 193.716371][ T6651] ? _raw_spin_lock+0xa4/0x1b0 [ 193.720979][ T6651] ? up_read+0x1b0/0x1b0 [ 193.725041][ T6651] release_bdi+0xa1/0x140 [ 193.729258][ T6651] generic_shutdown_super+0x24f/0x2a0 [ 193.734627][ T6651] kill_anon_super+0x37/0x60 [ 193.739262][ T6651] v9fs_kill_super+0x48/0x90 [ 193.743737][ T6651] deactivate_locked_super+0xa8/0x110 [ 193.749336][ T6651] v9fs_mount+0x4ff/0x770 [ 193.753609][ T6651] legacy_get_tree+0xdf/0x170 [ 193.758191][ T6651] ? asan.module_dtor+0x20/0x20 [ 193.762855][ T6651] vfs_get_tree+0x85/0x260 [ 193.763255][ T382] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.767111][ T6651] do_new_mount+0x292/0x570 [ 193.767125][ T6651] ? do_move_mount_old+0x160/0x160 [ 193.767145][ T6651] ? security_capable+0x86/0xb0 [ 193.777190][ T382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.781352][ T6651] do_mount+0x688/0xe10 [ 193.781373][ T6651] ? copy_mount_string+0x30/0x30 [ 193.808708][ T6651] ? copy_mount_options+0x1c6/0x300 [ 193.814028][ T6651] ? copy_mount_options+0x29a/0x300 [ 193.819057][ T6651] ksys_mount+0xc2/0xf0 [ 193.823251][ T6651] __x64_sys_mount+0xb1/0xc0 [ 193.827665][ T6651] do_syscall_64+0xca/0x1c0 [ 193.832003][ T6651] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 193.837914][ T6651] RIP: 0033:0x7f3a92476f19 [ 193.842163][ T6651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.861948][ T6651] RSP: 002b:00007f3a916f8048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.863288][ T382] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.870250][ T6651] RAX: ffffffffffffffda RBX: 00007f3a92604f60 RCX: 00007f3a92476f19 [ 193.870256][ T6651] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 193.870263][ T6651] RBP: 00007f3a924e5bcd R08: 0000000020000180 R09: 0000000000000000 [ 193.870269][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.870276][ T6651] R13: 000000000000000b R14: 00007f3a92604f60 R15: 00007ffddb582998 [ 193.870294][ T6651] ---[ end trace aa681526418d6bcd ]--- [ 193.879510][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.932852][ T382] usb 3-1: SerialNumber: syz [ 194.015387][ T6648] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro, [ 194.033050][ T357] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.037127][ T6648] EXT4-fs error (device loop1): ext4_find_extent:963: inode #2: comm syz.1.2110: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 194.064375][ T6648] EXT4-fs (loop1): Remounting filesystem read-only [ 194.083385][ T6648] EXT4-fs error (device loop1): ext4_find_extent:963: inode #2: comm syz.1.2110: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 194.125391][ T6666] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 194.134561][ T6666] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff) [ 194.199011][ T6666] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 194.213579][ T6666] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 194.224026][ T382] usb 3-1: 0:2 : does not exist [ 194.261878][ T382] usb 3-1: USB disconnect, device number 11 [ 194.283610][ T357] usb 5-1: Using ep0 maxpacket: 8 [ 194.394419][ T6679] EXT4-fs (loop1): Ignoring removed nobh option [ 194.402664][ T6681] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 194.410095][ T357] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 194.419378][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.428991][ T357] usb 5-1: config 0 descriptor?? [ 194.433280][ T6681] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 194.454477][ T6679] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,errors=remount-ro, [ 194.459497][ T6681] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.2124: bg 0: block 234: padding at end of block bitmap is not set [ 194.472932][ T6679] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.2123: bg 0: block 255: padding at end of block bitmap is not set [ 194.492310][ T5519] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 194.500297][ T6679] EXT4-fs (loop1): Remounting filesystem read-only [ 194.510837][ T6679] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2123: inline data xattr refers to an external xattr inode [ 194.518632][ T6681] EXT4-fs (loop3): Remounting filesystem read-only [ 194.826844][ T6711] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 194.836073][ T6711] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038 (0x7fffffff) [ 194.853645][ T6711] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 194.861959][ T6711] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 195.126710][ T5519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.157466][ T5519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.168177][ T5519] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 195.172536][ T357] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.185887][ T5519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.190187][ T357] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 195.204346][ T6728] input: syz1 as /devices/virtual/input/input26 [ 195.212722][ T5519] usb 1-1: config 0 descriptor?? [ 195.232555][ T357] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.272586][ T357] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 195.287806][ T357] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 195.322475][ T357] asix: probe of 5-1:0.0 failed with error -71 [ 195.324429][ T6736] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 195.330006][ T357] usb 5-1: USB disconnect, device number 12 [ 195.345943][ T6736] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 195.786647][ T5519] petalynx 0003:18B1:0037.001D: unknown main item tag 0x0 [ 195.793794][ T5519] petalynx 0003:18B1:0037.001D: unknown main item tag 0x0 [ 196.072873][ T5] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 196.080363][ T5519] petalynx 0003:18B1:0037.001D: unknown main item tag 0x0 [ 196.087290][ T5519] petalynx 0003:18B1:0037.001D: unknown main item tag 0x0 [ 196.094269][ T5519] petalynx 0003:18B1:0037.001D: unknown main item tag 0x0 [ 196.126306][ T5519] petalynx 0003:18B1:0037.001D: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.0-1/input0 [ 196.170837][ T5519] usb 1-1: USB disconnect, device number 16 [ 196.189155][ T6750] EXT4-fs (loop2): Test dummy encryption mode enabled [ 196.206021][ T6750] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,nombcache,bsddf,test_dummy_encryption,,errors=continue [ 196.239782][ T6752] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 196.261582][ T6752] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038 (0x7fffffff) [ 196.287997][ T6752] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 196.297170][ T6752] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 196.341860][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 196.461949][ T5] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.487282][ T6762] attempt to access beyond end of device [ 196.487282][ T6762] loop3: rw=0, want=161, limit=128 [ 196.497821][ T5] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.508009][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 196.518636][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.562411][ T5] hub 2-1:4.0: USB hub found [ 196.591229][ T6776] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 196.637496][ T6776] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 197.069047][ T5] hub 2-1:4.0: 2 ports detected [ 197.445830][ T6793] syz.3.2162[6793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.445925][ T6793] syz.3.2162[6793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.459019][ T6786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 197.517219][ T6786] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.2160: bg 0: block 234: padding at end of block bitmap is not set [ 197.704748][ T6808] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 197.715592][ T6805] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold, [ 197.777030][ T23] audit: type=1400 audit(1719931737.577:614): avc: denied { mounton } for pid=6804 comm="syz.2.2166" path="/479/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 197.791222][ T5] hub 2-1:4.0: set hub depth failed [ 197.812869][ T354] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /479/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 197.814050][ T6797] F2FS-fs (loop3): Found nat_bits in checkpoint [ 197.847350][ T23] audit: type=1400 audit(1719931737.607:615): avc: denied { map } for pid=6820 comm="syz.0.2170" path="/dev/zero" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 197.876653][ T354] EXT4-fs (loop2): Remounting filesystem read-only [ 197.887338][ T5] usb 2-1: USB disconnect, device number 15 [ 197.891743][ T354] EXT4-fs error (device loop2): ext4_lookup:1814: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 197.893587][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 197.915411][ T354] EXT4-fs error (device loop2): ext4_lookup:1814: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 197.922425][ T4715] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 197.939893][ T6797] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 197.957415][ T6797] attempt to access beyond end of device [ 197.957415][ T6797] loop3: rw=2049, want=45104, limit=40427 [ 197.973703][ T23] audit: type=1400 audit(1719931737.777:616): avc: denied { read } for pid=6796 comm="syz.3.2163" name="file0" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 197.976966][ T6797] attempt to access beyond end of device [ 197.976966][ T6797] loop3: rw=34817, want=77952, limit=40427 [ 198.011864][ T6797] attempt to access beyond end of device [ 198.011864][ T6797] loop3: rw=524288, want=77952, limit=40427 [ 198.016544][ T23] audit: type=1400 audit(1719931737.807:617): avc: denied { map } for pid=6796 comm="syz.3.2163" path="/64/file0/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 198.028890][ T6797] attempt to access beyond end of device [ 198.028890][ T6797] loop3: rw=0, want=77832, limit=40427 [ 198.050363][ T23] audit: type=1400 audit(1719931737.807:618): avc: denied { execute } for pid=6796 comm="syz.3.2163" path="/64/file0/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 198.079173][ T6797] attempt to access beyond end of device [ 198.079173][ T6797] loop3: rw=0, want=77832, limit=40427 [ 198.090174][ T6797] attempt to access beyond end of device [ 198.090174][ T6797] loop3: rw=0, want=77832, limit=40427 [ 198.102089][ T6797] attempt to access beyond end of device [ 198.102089][ T6797] loop3: rw=0, want=77832, limit=40427 [ 198.113292][ T6797] attempt to access beyond end of device [ 198.113292][ T6797] loop3: rw=0, want=77832, limit=40427 [ 198.125905][ T6797] attempt to access beyond end of device [ 198.125905][ T6797] loop3: rw=0, want=77832, limit=40427 [ 198.340708][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.349401][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.357624][ T6840] device bridge_slave_0 entered promiscuous mode [ 198.360301][ T6843] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,,errors=continue [ 198.374242][ T6843] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff) [ 198.382033][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.391740][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.399261][ T6840] device bridge_slave_1 entered promiscuous mode [ 198.426170][ T6843] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2180: Logical block already allocated [ 198.442998][ T6848] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold, [ 198.481027][ T6858] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 198.533120][ T5918] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /51/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 198.564517][ T179] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 198.566255][ T5918] EXT4-fs (loop1): Remounting filesystem read-only [ 198.574396][ T6329] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 198.591261][ T5918] EXT4-fs error (device loop1): ext4_lookup:1814: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 198.607196][ T5918] EXT4-fs error (device loop1): ext4_lookup:1814: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 198.720914][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.727764][ T6840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.734942][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.741888][ T6840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.020750][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.029889][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.047555][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.056100][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.074453][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.093480][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.101942][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.108980][ T3315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.116260][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.124605][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.132760][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.139594][ T3315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.152071][ T6871] EXT4-fs (loop0): Test dummy encryption mode enabled [ 199.158724][ T6871] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 199.168173][ T6871] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 199.177713][ T6871] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 199.201916][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.209984][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.234756][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.244984][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.280746][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.289431][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.298584][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.307679][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.350555][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.358852][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.367710][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.376276][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.385517][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.393731][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.450390][ T5] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 199.536831][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.544730][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.552695][ T6887] device bridge_slave_0 entered promiscuous mode [ 199.568806][ T5817] device bridge_slave_1 left promiscuous mode [ 199.575282][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.583344][ T5817] device bridge_slave_0 left promiscuous mode [ 199.589878][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.591586][ T6897] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,,errors=continue [ 199.606541][ T6897] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 199.631698][ T6897] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.2195: Logical block already allocated [ 199.695342][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.702383][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.709650][ T6887] device bridge_slave_1 entered promiscuous mode [ 199.716052][ T3315] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 199.728192][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.735335][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.743841][ T6877] device bridge_slave_0 entered promiscuous mode [ 199.754344][ T6902] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold, [ 199.758687][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.784750][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.792857][ T6877] device bridge_slave_1 entered promiscuous mode [ 199.799482][ T6329] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /42/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 199.827429][ T6329] EXT4-fs (loop0): Remounting filesystem read-only [ 199.830325][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.834974][ T6329] EXT4-fs error (device loop0): ext4_lookup:1814: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 199.857636][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.858259][ T6329] EXT4-fs error (device loop0): ext4_lookup:1814: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 199.869818][ T5] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.889837][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.911944][ T5] usb 4-1: config 0 descriptor?? [ 199.963037][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.970185][ T6887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.977662][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.980022][ T3315] usb 3-1: Using ep0 maxpacket: 8 [ 199.984518][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.031689][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.038544][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.045722][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.052706][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.068661][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.076456][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.084519][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.091792][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.120128][ T3315] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.130237][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.137733][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.146940][ T3315] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 200.157098][ T3315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.170448][ T3315] usb 3-1: config 0 descriptor?? [ 200.181120][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.189494][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.198088][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.205140][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.212473][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.220909][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.229189][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.236085][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.264882][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.273023][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.281439][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.289783][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.309566][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.317201][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.330341][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.338835][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.347488][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.354496][ T3315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.361950][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.370212][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.389050][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.397361][ T5] hid (null): bogus close delimiter [ 200.404785][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.413411][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.420282][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.423427][ T6791] usb 3-1: USB disconnect, device number 12 [ 200.452079][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.460930][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.486893][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.495229][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.510031][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.518178][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.546983][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.553904][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.561717][ T6907] device bridge_slave_0 entered promiscuous mode [ 200.569891][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.576726][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.584519][ T6907] device bridge_slave_1 entered promiscuous mode [ 200.598088][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.606695][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.619780][ T5] usb 4-1: string descriptor 0 read error: -22 [ 200.648493][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.657560][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.666137][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.674701][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.694491][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.702827][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.711464][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.719291][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.759184][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.768853][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.808198][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.826359][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.837009][ T5] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001E/input/input27 [ 200.852104][ T5] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001E/input/input28 [ 200.871231][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.881489][ T5] uclogic 0003:256C:006D.001E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 200.896712][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.905271][ T6915] EXT4-fs error (device loop4): ext4_orphan_get:1260: comm syz.4.2201: bad orphan inode 15 [ 200.916013][ T6915] ext4_test_bit(bit=14, block=5) = 0 [ 200.921507][ T6915] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 200.976435][ T6887] EXT4-fs error (device loop4): ext4_lookup:1814: inode #17: comm syz-executor: iget: bad extra_isize 255 (inode size 256) [ 200.997262][ T6887] EXT4-fs error (device loop4): ext4_lookup:1814: inode #17: comm syz-executor: iget: bad extra_isize 255 (inode size 256) [ 201.010968][ T5817] device bridge_slave_1 left promiscuous mode [ 201.017053][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.026195][ T5817] device bridge_slave_0 left promiscuous mode [ 201.034415][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.048541][ T18] usb 4-1: USB disconnect, device number 13 [ 201.059928][ T5817] device bridge_slave_1 left promiscuous mode [ 201.067918][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.075622][ T5817] device bridge_slave_0 left promiscuous mode [ 201.081825][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.082702][ T6920] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 201.233761][ T6920] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz.2.2202: Invalid inode table block 0 in block_group 0 [ 201.248167][ T6920] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 201.265942][ T6840] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /1/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 201.288866][ T6840] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 201.409242][ T6840] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 201.501184][ T458] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 201.533601][ T6931] EXT4-fs (loop1): Test dummy encryption mode enabled [ 201.540368][ T6931] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 201.549739][ T6931] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 201.557090][ T6931] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 201.651814][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.659700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.691562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.699982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.708160][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.715056][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.722725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.731616][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.754664][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.761590][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.772700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.784476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.797507][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.806757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.827283][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.864780][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.874914][ T6941] EXT4-fs error (device loop3): ext4_orphan_get:1260: comm syz.3.2212: bad orphan inode 15 [ 201.875774][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.892484][ T6941] ext4_test_bit(bit=14, block=5) = 0 [ 201.905403][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.913696][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.921392][ T6941] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 201.960901][ T5792] EXT4-fs error (device loop3): ext4_lookup:1814: inode #17: comm syz-executor: iget: bad extra_isize 255 (inode size 256) [ 201.974312][ T5792] EXT4-fs error (device loop3): ext4_lookup:1814: inode #17: comm syz-executor: iget: bad extra_isize 255 (inode size 256) [ 202.050119][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.058252][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.067857][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.075445][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.083135][ T6943] device bridge_slave_0 entered promiscuous mode [ 202.132050][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.139104][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.146914][ T6943] device bridge_slave_1 entered promiscuous mode [ 202.197784][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.205224][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.218238][ T6935] device bridge_slave_0 entered promiscuous mode [ 202.246168][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.262070][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.274103][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.286168][ T3315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.295255][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.302541][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.310482][ T6935] device bridge_slave_1 entered promiscuous mode [ 202.439233][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.446087][ T6943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.453257][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.460236][ T6943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.551170][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.558020][ T6935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.565228][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.572388][ T6935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.630249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.637821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.646184][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.654064][ T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.662068][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.669647][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.922910][ T6976] EXT4-fs (loop0): Test dummy encryption mode enabled [ 202.929688][ T6976] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 202.938875][ T6976] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 202.938998][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.946077][ T6976] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 203.004223][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.016783][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.025432][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.033887][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.042751][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.049631][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.068059][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.075210][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.082975][ T6964] device bridge_slave_0 entered promiscuous mode [ 203.090450][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.097379][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.105683][ T6964] device bridge_slave_1 entered promiscuous mode [ 203.112591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.120729][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 203.125914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.134045][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.140900][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.169888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.177887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.210576][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.218690][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.238532][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.251779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.260731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.290514][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.299524][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.323479][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.331420][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.338669][ T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 203.348605][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 203.413298][ T13] usb 2-1: SerialNumber: syz [ 203.421794][ T13] usb 2-1: config 0 descriptor?? [ 203.430552][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.439945][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.448019][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.456486][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.465574][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.473997][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.511850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.526580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.548997][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.556778][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.592478][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.602171][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.626793][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.634920][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.650726][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.659547][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.672767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.681584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.689603][ T13] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 203.696392][ T13] uvcvideo: No valid video chain found. [ 203.702079][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.708934][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.719177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.727410][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.735552][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.742502][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.758850][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.766380][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.774721][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.783332][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.791654][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.804770][ T5817] device bridge_slave_1 left promiscuous mode [ 203.811598][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.819189][ T5817] device bridge_slave_0 left promiscuous mode [ 203.825178][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.833127][ T5817] device bridge_slave_1 left promiscuous mode [ 203.839319][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.846684][ T5817] device bridge_slave_0 left promiscuous mode [ 203.853067][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.860530][ T5817] device bridge_slave_1 left promiscuous mode [ 203.866471][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.873911][ T5817] device bridge_slave_0 left promiscuous mode [ 203.879969][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.892230][ T374] usb 2-1: USB disconnect, device number 16 [ 203.908163][ T5] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 204.088682][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.096773][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.124585][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.133615][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.148003][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 204.151187][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.167169][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.185726][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.194305][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.212562][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.221054][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.230510][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.238878][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.278007][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.290344][ T5] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 204.301928][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.310893][ T5] usb 5-1: config 0 descriptor?? [ 204.588088][ T107] usb 5-1: USB disconnect, device number 13 [ 204.989250][ T7005] F2FS-fs (loop3): Found nat_bits in checkpoint [ 205.036572][ T7005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 205.080318][ T7005] handle_bad_sector: 2150 callbacks suppressed [ 205.080332][ T7005] attempt to access beyond end of device [ 205.080332][ T7005] loop3: rw=2049, want=45104, limit=40427 [ 205.106743][ T7005] attempt to access beyond end of device [ 205.106743][ T7005] loop3: rw=34817, want=77952, limit=40427 [ 205.120056][ T7005] attempt to access beyond end of device [ 205.120056][ T7005] loop3: rw=524288, want=77952, limit=40427 [ 205.131507][ T7005] attempt to access beyond end of device [ 205.131507][ T7005] loop3: rw=0, want=77832, limit=40427 [ 205.142578][ T7005] attempt to access beyond end of device [ 205.142578][ T7005] loop3: rw=0, want=77832, limit=40427 [ 205.153578][ T7005] attempt to access beyond end of device [ 205.153578][ T7005] loop3: rw=0, want=77832, limit=40427 [ 205.170141][ T7005] attempt to access beyond end of device [ 205.170141][ T7005] loop3: rw=0, want=77832, limit=40427 [ 205.184222][ T7005] attempt to access beyond end of device [ 205.184222][ T7005] loop3: rw=0, want=77832, limit=40427 [ 205.195974][ T7005] attempt to access beyond end of device [ 205.195974][ T7005] loop3: rw=0, want=77832, limit=40427 [ 205.206938][ T7005] attempt to access beyond end of device [ 205.206938][ T7005] loop3: rw=0, want=77832, limit=40427 [ 205.230243][ T6990] F2FS-fs (loop2): invalid crc value [ 205.323194][ T6990] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 205.496246][ T7041] EXT4-fs (loop1): Ignoring removed orlov option [ 205.504274][ T7041] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 205.528723][ T7041] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 205.572781][ T7052] 9pnet: p9_errstr2errno: server reported unknown error v=g̫;txe04o(na/> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.400225][ T7167] RSP: 002b:00007f5657d08048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.406443][ T6791] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.408445][ T7167] RAX: ffffffffffffffda RBX: 00007f5658c14f60 RCX: 00007f5658a86f19 [ 207.408453][ T7167] RDX: 0000000020003340 RSI: 000000004020ae46 RDI: 0000000000000008 [ 207.408459][ T7167] RBP: 00007f5658af5bcd R08: 0000000000000000 R09: 0000000000000000 [ 207.408472][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.436308][ T689] usb 3-1: Using ep0 maxpacket: 32 [ 207.439343][ T7167] R13: 000000000000000b R14: 00007f5658c14f60 R15: 00007fff7a4f18b8 [ 207.442286][ T7167] Mem-Info: [ 207.463002][ T7167] active_anon:14102 inactive_anon:72 isolated_anon:0 [ 207.463002][ T7167] active_file:19130 inactive_file:2927 isolated_file:0 [ 207.463002][ T7167] unevictable:0 dirty:349 writeback:0 unstable:0 [ 207.463002][ T7167] slab_reclaimable:6843 slab_unreclaimable:74046 [ 207.463002][ T7167] mapped:13995 shmem:162 pagetables:424 bounce:0 [ 207.463002][ T7167] free:1596072 free_pcp:845 free_cma:0 [ 207.501482][ T7167] Node 0 active_anon:56408kB inactive_anon:288kB active_file:76520kB inactive_file:11708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55980kB dirty:1396kB writeback:0kB shmem:648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 207.530687][ T7167] DMA free:15908kB min:500kB low:624kB high:748kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.557227][ T7167] lowmem_reserve[]: 0 2888 6828 6828 [ 207.562422][ T7167] DMA32 free:2962060kB min:93324kB low:116652kB high:139980kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2963396kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1336kB local_pcp:1288kB free_cma:0kB [ 207.597260][ T7167] lowmem_reserve[]: 0 0 3940 3940 [ 207.608091][ T7167] Normal free:3406160kB min:127352kB low:159188kB high:191024kB active_anon:56468kB inactive_anon:288kB active_file:76520kB inactive_file:11708kB unevictable:0kB writepending:1404kB present:5242880kB managed:4035536kB mlocked:0kB kernel_stack:4448kB pagetables:1704kB bounce:0kB free_pcp:2004kB local_pcp:768kB free_cma:0kB [ 207.644656][ T7167] lowmem_reserve[]: 0 0 0 0 [ 207.649089][ T7167] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 3*4096kB (M) = 15908kB [ 207.663837][ T7167] DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 6*64kB (M) 6*128kB (M) 5*256kB (M) 4*512kB (M) 4*1024kB (M) 2*2048kB (M) 720*4096kB (M) = 2962060kB [ 207.679163][ T6791] usb 2-1: Using ep0 maxpacket: 8 [ 207.679243][ T7167] Normal: 754*4kB (UME) 1059*8kB (UME) 443*16kB (UME) 307*32kB (UME) 255*64kB (UME) 136*128kB (UME) 80*256kB (ME) 57*512kB (UM) 33*1024kB (UME) 22*2048kB (UM) 785*4096kB (M) = 3406000kB [ 207.702237][ T7167] 22107 total pagecache pages [ 207.706862][ T7167] 29 pages in swap cache [ 207.710892][ T7167] Swap cache stats: add 7589, delete 7560, find 7290/7299 [ 207.718275][ T7167] Free swap = 124484kB [ 207.723728][ T7167] Total swap = 124996kB [ 207.727749][ T7167] 2097051 pages RAM [ 207.731360][ T7167] 0 pages HighMem/MovableOnly [ 207.736685][ T7167] 343341 pages reserved [ 207.736695][ T689] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 207.736712][ T689] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 207.740706][ T7167] 0 pages cma reserved [ 207.761717][ T689] usb 3-1: Product: syz [ 207.772546][ T689] usb 3-1: config 0 descriptor?? [ 207.779859][ T124] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 207.796186][ T6791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.808178][ T124] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 207.815488][ T124] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 207.823242][ T124] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 207.830755][ T124] uclogic 0003:28BD:0075.001F: unknown main item tag 0x0 [ 207.840724][ T124] uclogic 0003:28BD:0075.001F: No inputs registered, leaving [ 207.851360][ T124] uclogic 0003:28BD:0075.001F: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.4-1/input0 [ 207.886295][ T6791] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 207.895333][ T6791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 207.903615][ T6791] usb 2-1: SerialNumber: syz [ 207.908906][ T6791] usb 2-1: config 0 descriptor?? [ 207.969797][ T7192] EXT4-fs (loop3): Ignoring removed orlov option [ 207.976422][ T7192] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 207.986704][ T13] usb 5-1: USB disconnect, device number 14 [ 208.002392][ T7192] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 208.055290][ T107] usb 3-1: USB disconnect, device number 13 [ 208.126034][ T689] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 208.156109][ T6791] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 208.162900][ T6791] uvcvideo: No valid video chain found. [ 208.363113][ T6791] usb 2-1: USB disconnect, device number 17 [ 208.368888][ T689] usb 1-1: Using ep0 maxpacket: 8 [ 208.485941][ T689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.496742][ T689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.510672][ T689] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 208.522879][ T689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.531708][ T689] usb 1-1: config 0 descriptor?? [ 208.658329][ T7210] 9pnet: p9_errstr2errno: server reported unknown error v=g̫;txe04o(na/> (05ac:8501) [ 211.202024][ T357] uvcvideo: No valid video chain found. [ 211.234556][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.246412][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.256724][ T13] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 211.272976][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.291836][ T13] usb 3-1: config 0 descriptor?? [ 211.294672][ T124] usb 2-1: USB disconnect, device number 18 [ 211.418001][ T23] audit: type=1400 audit(1719931751.224:623): avc: denied { read } for pid=7288 comm="syz.0.2334" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 211.484352][ T23] audit: type=1400 audit(1719931751.224:624): avc: denied { watch } for pid=7288 comm="syz.0.2334" path="/24/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 211.544420][ T689] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 211.563728][ T689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.596324][ T689] usb 5-1: config 0 descriptor?? [ 211.645017][ T689] usb 5-1: bad CDC descriptors [ 211.775758][ T13] steelseries_srws1 0003:1038:1410.0021: unknown main item tag 0xd [ 211.783609][ T13] steelseries_srws1 0003:1038:1410.0021: item fetching failed at offset 6/7 [ 211.814705][ T13] steelseries_srws1 0003:1038:1410.0021: parse failed [ 211.834192][ T13] steelseries_srws1: probe of 0003:1038:1410.0021 failed with error -22 [ 211.865935][ T7276] syz.4.2330[7276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.865999][ T7276] syz.4.2330[7276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.980935][ T124] usb 3-1: USB disconnect, device number 15 [ 212.014027][ T5] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.028473][ T13] usb 5-1: USB disconnect, device number 15 [ 212.253904][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 212.384001][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.394497][ T5] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 212.404581][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.416146][ T5] usb 4-1: config 0 descriptor?? [ 212.669838][ T689] usb 4-1: USB disconnect, device number 15 [ 212.787043][ T23] audit: type=1326 audit(1719931752.594:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.2.2348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48f8a78f19 code=0x0 [ 212.883228][ T7339] 9pnet: Insufficient options for proto=fd [ 213.143441][ T5] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 213.253815][ T689] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 213.383349][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 213.503351][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.514502][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.524274][ T5] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 213.533280][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.543303][ T5] usb 5-1: config 0 descriptor?? [ 213.615997][ T689] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 213.631063][ T689] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 213.640776][ T689] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 213.649969][ T689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.657874][ T7377] usb usb8: usbfs: process 7377 (syz.2.2367) did not claim interface 0 before use [ 213.974723][ T7396] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 213.996682][ T7393] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.2374: bad orphan inode 8192 [ 214.007327][ T7393] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 214.017805][ T5] steelseries_srws1 0003:1038:1410.0022: unknown main item tag 0xd [ 214.025949][ T5] steelseries_srws1 0003:1038:1410.0022: item fetching failed at offset 6/7 [ 214.035703][ T5] steelseries_srws1 0003:1038:1410.0022: parse failed [ 214.042357][ T5] steelseries_srws1: probe of 0003:1038:1410.0022 failed with error -22 [ 214.119442][ T7393] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 214.129863][ T7393] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 214.139625][ T7393] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 214.149102][ T7393] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 214.169245][ T7393] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 214.179097][ T7393] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 214.218622][ T6935] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 214.223260][ T124] usb 5-1: USB disconnect, device number 16 [ 214.273052][ T689] usb 2-1: string descriptor 0 read error: -22 [ 214.342250][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.353965][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.361486][ T7414] device bridge_slave_0 entered promiscuous mode [ 214.369198][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.378741][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.386953][ T7414] device bridge_slave_1 entered promiscuous mode [ 214.474794][ T689] usb 2-1: USB disconnect, device number 19 [ 214.529985][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.537009][ T7414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.544182][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.551020][ T7414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.625717][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.632561][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.640148][ T7423] device bridge_slave_0 entered promiscuous mode [ 214.648619][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.656181][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.664509][ T7423] device bridge_slave_1 entered promiscuous mode [ 214.705505][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.713191][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.720331][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.747020][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.755274][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.762095][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.775973][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.784340][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.791193][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.825083][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.833081][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.845934][ T458] device bridge_slave_1 left promiscuous mode [ 214.851914][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.860385][ T458] device bridge_slave_0 left promiscuous mode [ 214.866360][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.882641][ T5] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 214.982471][ C0] ================================================================== [ 214.990387][ C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 214.997309][ C0] Read of size 8 at addr ffff8881e793f780 by task syz.4.2391/7438 [ 215.005022][ C0] [ 215.007202][ C0] CPU: 0 PID: 7438 Comm: syz.4.2391 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 215.018653][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 215.028981][ C0] Call Trace: [ 215.032099][ C0] [ 215.034923][ C0] dump_stack+0x1d8/0x241 [ 215.039090][ C0] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 215.044803][ C0] ? printk+0xd1/0x111 [ 215.048704][ C0] ? profile_pc+0xa4/0xe0 [ 215.052881][ C0] ? wake_up_klogd+0xb2/0xf0 [ 215.057312][ C0] ? profile_pc+0xa4/0xe0 [ 215.061465][ C0] print_address_description+0x8c/0x600 [ 215.066939][ C0] ? panic+0x89d/0x89d [ 215.070972][ C0] ? profile_pc+0xa4/0xe0 [ 215.075093][ C0] __kasan_report+0xf3/0x120 [ 215.079522][ C0] ? profile_pc+0xa4/0xe0 [ 215.083683][ C0] ? _raw_spin_lock+0x75/0x1b0 [ 215.088282][ C0] kasan_report+0x30/0x60 [ 215.092598][ C0] profile_pc+0xa4/0xe0 [ 215.096532][ C0] profile_tick+0xb9/0x100 [ 215.100805][ C0] tick_sched_timer+0x237/0x3c0 [ 215.105473][ C0] ? tick_setup_sched_timer+0x460/0x460 [ 215.110856][ C0] __hrtimer_run_queues+0x3e9/0xb90 [ 215.115888][ C0] ? tracing_stop_tgid_record+0xa0/0xa0 [ 215.121275][ C0] ? tracing_stop_tgid_record+0xa0/0xa0 [ 215.126654][ C0] ? hrtimer_interrupt+0x890/0x890 [ 215.131598][ C0] ? ktime_get_update_offsets_now+0x26c/0x280 [ 215.137501][ C0] hrtimer_interrupt+0x38a/0x890 [ 215.142443][ C0] smp_apic_timer_interrupt+0x110/0x460 [ 215.147826][ C0] apic_timer_interrupt+0xf/0x20 [ 215.152593][ C0] [ 215.155449][ C0] RIP: 0010:_raw_spin_lock+0x75/0x1b0 [ 215.160650][ C0] Code: c0 14 51 84 48 89 e3 48 c1 eb 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 4a 89 04 23 bf 01 00 00 00 e8 72 c9 f3 fc 4d 89 fe 49 c1 ee 03 <43> 0f b6 04 26 84 c0 0f 85 bb 00 00 00 c7 44 24 20 00 00 00 00 4c [ 215.180378][ C0] RSP: 0018:ffff8881e793f780 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 215.188798][ C0] RAX: 1ffff1103d79acff RBX: 1ffff1103cf27ef0 RCX: ffffffff84512a00 [ 215.196804][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 215.204615][ C0] RBP: ffff8881e793f820 R08: ffffffff81bd6e0a R09: ffffed103c6756c9 [ 215.212420][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 215.220317][ C0] R13: ffffffff86eeb840 R14: 1ffff1103cf27ef4 R15: ffff8881e793f7a0 [ 215.228140][ C0] ? kernfs_put+0x16a/0x4b0 [ 215.232474][ C0] ? _raw_write_unlock_irq+0x60/0x60 [ 215.237594][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 215.242888][ C0] ? kernfs_iop_rename+0x830/0x830 [ 215.247961][ C0] kernfs_put+0x2c3/0x4b0 [ 215.252122][ C0] kernfs_remove_by_name_ns+0x99/0x100 [ 215.257415][ C0] sysfs_remove_group+0xfa/0x2a0 [ 215.262207][ C0] sysfs_remove_groups+0x50/0xa0 [ 215.266966][ C0] __kobject_del+0x85/0x260 [ 215.271300][ C0] kobject_put+0x1fa/0x2f0 [ 215.275819][ C0] net_rx_queue_update_kobjects+0x3b5/0x420 [ 215.281753][ C0] netdev_unregister_kobject+0x100/0x240 [ 215.287403][ C0] rollback_registered_many+0xed6/0x1330 [ 215.292864][ C0] ? tun_net_mclist+0x10/0x10 [ 215.297401][ C0] ? unregister_netdevice_many+0x250/0x250 [ 215.303025][ C0] ? finish_wait+0xa5/0x1a0 [ 215.307462][ C0] ? mutex_unlock+0x18/0x40 [ 215.311799][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 215.317255][ C0] ? synchronize_rcu+0x120/0x120 [ 215.322005][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 215.326714][ C0] ? locks_remove_file+0x391/0x1060 [ 215.331845][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 215.337304][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 215.342112][ C0] unregister_netdevice_queue+0x333/0x500 [ 215.347761][ C0] ? alloc_netdev_mqs+0xc70/0xc70 [ 215.352629][ C0] ? linkwatch_fire_event+0x2c1/0x360 [ 215.357976][ C0] __tun_detach+0x8de/0x1390 [ 215.362407][ C0] tun_chr_close+0x8f/0x130 [ 215.366746][ C0] ? tun_chr_open+0x500/0x500 [ 215.371333][ C0] __fput+0x262/0x680 [ 215.375510][ C0] task_work_run+0x140/0x170 [ 215.379928][ C0] exit_to_usermode_loop+0x190/0x1a0 [ 215.385046][ C0] prepare_exit_to_usermode+0x199/0x200 [ 215.390445][ C0] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 215.396163][ C0] RIP: 0033:0x7f17fa252c4a [ 215.400406][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 73 8a 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 d3 8a 02 00 8b 44 24 [ 215.420348][ C0] RSP: 002b:00007ffd8857da00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 215.428678][ C0] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f17fa252c4a [ 215.436696][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 215.444672][ C0] RBP: 00007f17fa3e3a60 R08: 0000000000000006 R09: 0000001e8857dd4f [ 215.452493][ C0] R10: 00000000003ffbac R11: 0000000000000293 R12: 0000000000034b91 [ 215.460299][ C0] R13: 0000000000000226 R14: 00007f17fa3e3a60 R15: 00007f17fa3e2038 [ 215.468386][ C0] [ 215.470532][ C0] The buggy address belongs to the page: [ 215.476020][ C0] page:ffffea00079e4fc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 215.484947][ C0] flags: 0x8000000000000000() [ 215.489463][ C0] raw: 8000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 215.498142][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 215.506558][ C0] page dumped because: kasan: bad access detected [ 215.512815][ C0] page_owner tracks the page as allocated [ 215.518363][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT) [ 215.529913][ C0] prep_new_page+0x18f/0x370 [ 215.534338][ C0] get_page_from_freelist+0x2d13/0x2d90 [ 215.539717][ C0] __alloc_pages_nodemask+0x393/0x840 [ 215.544931][ C0] dup_task_struct+0x85/0x600 [ 215.549561][ C0] copy_process+0x56d/0x3230 [ 215.553979][ C0] _do_fork+0x197/0x900 [ 215.557999][ C0] __x64_sys_clone+0x26b/0x2c0 [ 215.562581][ C0] do_syscall_64+0xca/0x1c0 [ 215.566915][ C0] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 215.572740][ C0] page last free stack trace: [ 215.577259][ C0] __free_pages_ok+0x847/0x950 [ 215.581855][ C0] skb_release_data+0x210/0x640 [ 215.586626][ C0] __kfree_skb+0x4c/0x60 [ 215.590710][ C0] tcp_ack+0x206c/0x6090 [ 215.594830][ C0] tcp_rcv_established+0x6ea/0x1a80 [ 215.599911][ C0] tcp_v4_do_rcv+0x3a9/0x770 [ 215.604333][ C0] tcp_v4_rcv+0x219a/0x26f0 [ 215.608763][ C0] ip_protocol_deliver_rcu+0x2e0/0x630 [ 215.614054][ C0] ip_local_deliver+0x2c6/0x5a0 [ 215.618918][ C0] ip_sublist_rcv+0xc02/0xc80 [ 215.623433][ C0] ip_list_rcv+0x477/0x4c0 [ 215.627696][ C0] __netif_receive_skb_list_core+0x6dd/0x8f0 [ 215.633534][ C0] netif_receive_skb_list_internal+0x944/0xc90 [ 215.639541][ C0] napi_gro_receive+0x49a/0xa60 [ 215.644174][ C0] receive_buf+0x351c/0x51c0 [ 215.648607][ C0] virtnet_poll+0x5f3/0x1250 [ 215.653024][ C0] [ 215.655216][ C0] addr ffff8881e793f780 is located in stack of task syz.4.2391/7438 at offset 0 in frame: [ 215.664920][ C0] _raw_spin_lock+0x0/0x1b0 [ 215.669338][ C0] [ 215.671596][ C0] this frame has 1 object: [ 215.676060][ C0] [32, 36) 'val.i.i.i' [ 215.676062][ C0] [ 215.682210][ C0] Memory state around the buggy address: [ 215.687697][ C0] ffff8881e793f680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 215.695602][ C0] ffff8881e793f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 215.703579][ C0] >ffff8881e793f780: f1 f1 f1 f1 04 f3 f3 f3 00 00 00 00 00 00 00 00 [ 215.711489][ C0] ^ [ 215.715489][ C0] ffff8881e793f800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 215.723355][ C0] ffff8881e793f880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 215.731287][ C0] ================================================================== [ 215.739153][ C0] Disabling lock debugging due to kernel taint [ 215.757925][ T23] audit: type=1400 audit(1719931755.566:626): avc: denied { write } for pid=343 comm="syz-executor" path="pipe:[675]" dev="pipefs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 215.806115][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [