last executing test programs: 3.547983559s ago: executing program 3 (id=572): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write(r0, &(0x7f0000000200)="99", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000001b00)="0d00201d", 0x4, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 3.529482471s ago: executing program 3 (id=573): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 3.518205703s ago: executing program 3 (id=574): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'tunl0\x00', @random="21b521e0279a"}) 3.507478834s ago: executing program 3 (id=575): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 3.487995456s ago: executing program 3 (id=576): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@local]}]}}}], 0x18}, 0x0) 3.427873383s ago: executing program 3 (id=577): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2.186660027s ago: executing program 2 (id=582): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_context(r2, &(0x7f00000002c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23) 2.15484415s ago: executing program 2 (id=583): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x34651}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 2.093252838s ago: executing program 2 (id=584): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000900)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@nogrpid}, {@nombcache}, {@inlinecrypt}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") unshare(0x22020400) unshare(0x2c060000) fchdir(r0) 1.931758216s ago: executing program 2 (id=586): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x600) 1.9017664s ago: executing program 2 (id=587): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000001440)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0}, 0x0) 1.837109297s ago: executing program 2 (id=589): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000240)) 1.322421877s ago: executing program 4 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x2c, r1, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) 1.305277319s ago: executing program 4 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = gettid() tkill(r2, 0x11) 1.283921861s ago: executing program 4 (id=615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 1.238560687s ago: executing program 4 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1.177362853s ago: executing program 4 (id=620): r0 = memfd_create(&(0x7f0000000980)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ| Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0}) syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1, r1], 0x2}, 0x58) 599.10703ms ago: executing program 1 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) 567.011214ms ago: executing program 1 (id=635): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "013528e0"}, @main=@item_4={0x3, 0x0, 0xc, "0c499a00"}, @main=@item_4={0x3, 0x0, 0x0, "4bd271b9"}]}}, 0x0}, 0x0) 269.567938ms ago: executing program 0 (id=639): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x40, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast2}}}], 0x20}}], 0x1, 0x0) 246.619201ms ago: executing program 0 (id=640): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1a5600, 0x0) 165.88355ms ago: executing program 4 (id=641): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x1064d, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)) 111.718477ms ago: executing program 0 (id=642): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 111.499657ms ago: executing program 0 (id=643): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 111.257127ms ago: executing program 0 (id=644): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000002e00)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d9, &(0x7f0000002e80)="$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") mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x20, 0x0) rmdir(&(0x7f0000000100)='./file2\x00') unlink(&(0x7f0000000080)='./file0/file0\x00') 0s ago: executing program 0 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='module_request\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) kernel console output (not intermixed with test programs): om 0 to 512 [ 23.618059][ T361] loop4: detected capacity change from 0 to 256 [ 23.683949][ T354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 23.700669][ T354] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 23.770503][ T354] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.14: corrupted inode contents [ 23.790324][ T354] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.14: mark_inode_dirty error [ 23.810579][ T354] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.14: corrupted inode contents [ 23.832573][ T354] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.14: mark_inode_dirty error [ 23.884395][ T294] EXT4-fs (loop2): unmounting filesystem. [ 23.937157][ T387] loop2: detected capacity change from 0 to 512 [ 23.953127][ T387] ======================================================= [ 23.953127][ T387] WARNING: The mand mount option has been deprecated and [ 23.953127][ T387] and is ignored by this kernel. Remove the mand [ 23.953127][ T387] option from the mount to silence this warning. [ 23.953127][ T387] ======================================================= [ 24.013667][ T316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.029227][ T394] loop0: detected capacity change from 0 to 512 [ 24.049076][ T396] loop3: detected capacity change from 0 to 1024 [ 24.057219][ T387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.075099][ T394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 24.084219][ T394] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 24.095123][ T387] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 24.110056][ T396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 24.121893][ T387] EXT4-fs (loop2): Remounting filesystem read-only [ 24.137453][ T292] EXT4-fs (loop0): unmounting filesystem. [ 24.143831][ T387] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.25: invalid indirect mapped block 1 (level 1) [ 24.158553][ T387] EXT4-fs (loop2): 1 truncate cleaned up [ 24.164209][ T387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 24.212365][ T294] EXT4-fs (loop2): unmounting filesystem. [ 24.212789][ T407] loop0: detected capacity change from 0 to 512 [ 24.224915][ T407] EXT4-fs: Ignoring removed bh option [ 24.230551][ T407] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 24.253148][ T407] EXT4-fs (loop0): 1 truncate cleaned up [ 24.258789][ T407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.319082][ T292] EXT4-fs (loop0): unmounting filesystem. [ 24.345091][ T396] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 24.377333][ T396] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 24.389701][ T316] usb 5-1: config 67 has an invalid descriptor of length 0, skipping remainder of the config [ 24.402772][ T316] usb 5-1: config 67 has 0 interfaces, different from the descriptor's value: 1 [ 24.422070][ T396] EXT4-fs (loop3): This should not happen!! Data will be lost [ 24.422070][ T396] [ 24.431887][ T316] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 24.450190][ T396] EXT4-fs (loop3): Total free blocks count 0 [ 24.489277][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.501946][ T396] EXT4-fs (loop3): Free/Dirty block details [ 24.517440][ T396] EXT4-fs (loop3): free_blocks=68451041280 [ 24.534497][ T396] EXT4-fs (loop3): dirty_blocks=16 [ 24.539745][ T396] EXT4-fs (loop3): Block reservation details [ 24.546588][ T396] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 24.599455][ T396] syz.3.30 (396) used greatest stack depth: 21088 bytes left [ 24.613768][ T296] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.633459][ T293] EXT4-fs (loop3): unmounting filesystem. [ 24.726430][ T440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.48'. [ 24.769248][ T447] loop0: detected capacity change from 0 to 512 [ 24.787217][ T447] EXT4-fs (loop0): 1 orphan inode deleted [ 24.793297][ T447] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 24.800743][ T453] loop3: detected capacity change from 0 to 512 [ 24.802237][ T447] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 24.850631][ T292] EXT4-fs (loop0): unmounting filesystem. [ 24.857314][ T453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 24.867224][ T453] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 24.877216][ T296] usb 2-1: Using ep0 maxpacket: 32 [ 24.905562][ T321] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 24.920434][ T321] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 24.932984][ T321] EXT4-fs (loop3): This should not happen!! Data will be lost [ 24.932984][ T321] [ 24.950994][ T321] EXT4-fs (loop3): Total free blocks count 0 [ 24.957822][ T321] EXT4-fs (loop3): Free/Dirty block details [ 24.963924][ T321] EXT4-fs (loop3): free_blocks=65280 [ 24.969258][ T321] EXT4-fs (loop3): dirty_blocks=1 [ 24.974422][ T321] EXT4-fs (loop3): Block reservation details [ 24.980810][ T321] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 24.995073][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 24.995091][ T28] audit: type=1400 audit(1729560849.858:152): avc: denied { validate_trans } for pid=460 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 25.021133][ T296] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 25.023964][ T463] netlink: 104 bytes leftover after parsing attributes in process `syz.2.58'. [ 25.030343][ T293] EXT4-fs (loop3): unmounting filesystem. [ 25.043589][ T296] usb 2-1: config 0 has no interface number 0 [ 25.050871][ T28] audit: type=1400 audit(1729560849.878:153): avc: denied { create } for pid=462 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.053609][ T316] usb 5-1: string descriptor 0 read error: -71 [ 25.078076][ T316] usb 5-1: USB disconnect, device number 2 [ 25.086685][ T28] audit: type=1400 audit(1729560849.888:154): avc: denied { write } for pid=462 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.130399][ T28] audit: type=1400 audit(1729560849.888:155): avc: denied { nlmsg_write } for pid=462 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.141320][ T469] loop3: detected capacity change from 0 to 512 [ 25.152232][ T28] audit: type=1400 audit(1729560849.888:156): avc: denied { nlmsg_read } for pid=462 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.171225][ T471] netpci0: tun_chr_ioctl cmd 1074025677 [ 25.182776][ T471] netpci0: linktype set to 0 [ 25.193715][ T469] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.202797][ T469] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 25.226540][ T293] EXT4-fs (loop3): unmounting filesystem. [ 25.242282][ T296] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 25.256278][ T296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.266637][ T296] usb 2-1: Product: syz [ 25.270637][ T296] usb 2-1: Manufacturer: syz [ 25.271718][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.275495][ T296] usb 2-1: SerialNumber: syz [ 25.283058][ T478] loop2: detected capacity change from 0 to 256 [ 25.294657][ T296] usb 2-1: config 0 descriptor?? [ 25.319162][ T28] audit: type=1400 audit(1729560850.178:157): avc: denied { write } for pid=477 comm="syz.2.63" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.362620][ T296] smsc95xx v2.0.0 [ 25.366030][ T28] audit: type=1400 audit(1729560850.178:158): avc: denied { add_name } for pid=477 comm="syz.2.63" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.410943][ T28] audit: type=1400 audit(1729560850.178:159): avc: denied { associate } for pid=477 comm="syz.2.63" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 25.433572][ T28] audit: type=1400 audit(1729560850.178:160): avc: denied { read write } for pid=477 comm="syz.2.63" name="file1" dev="loop2" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.457012][ T28] audit: type=1400 audit(1729560850.178:161): avc: denied { open } for pid=477 comm="syz.2.63" path="/14/file1/file1" dev="loop2" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.551814][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 25.834407][ T6] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 25.851983][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.870088][ T6] usb 1-1: Product: syz [ 25.874156][ T6] usb 1-1: Manufacturer: syz [ 25.878515][ T6] usb 1-1: SerialNumber: syz [ 25.906036][ T6] r8152-cfgselector 1-1: config 0 descriptor?? [ 25.948805][ T492] loop4: detected capacity change from 0 to 40427 [ 25.965934][ T492] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(2560) blocks(523776) [ 25.974614][ T492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.983898][ T492] F2FS-fs (loop4): invalid crc value [ 25.990839][ T492] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.039801][ T492] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.046871][ T492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.052205][ T476] loop3: detected capacity change from 0 to 131072 [ 26.064116][ T476] F2FS-fs (loop3): Test dummy encryption mode enabled [ 26.080724][ T476] F2FS-fs (loop3): invalid crc value [ 26.086779][ T290] syz-executor: attempt to access beyond end of device [ 26.086779][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.094191][ T476] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.153750][ T476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.171871][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 26.179104][ T476] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 26.251792][ T296] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 26.262977][ T296] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 26.291697][ T296] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 26.305349][ T296] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 26.315561][ T296] usb 2-1: USB disconnect, device number 2 [ 26.335758][ T516] loop4: detected capacity change from 0 to 2048 [ 26.363054][ T516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.371538][ T516] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 26.385724][ T516] fs-verity (loop4, inode 13): Unknown hash algorithm number: 0 [ 26.399723][ T290] EXT4-fs (loop4): unmounting filesystem. [ 26.431744][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 26.441664][ T6] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 26.445630][ T520] loop4: detected capacity change from 0 to 128 [ 26.462659][ T520] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.477861][ T520] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 26.531030][ T290] EXT4-fs (loop4): unmounting filesystem. [ 26.773238][ T554] loop1: detected capacity change from 0 to 512 [ 26.785039][ T554] EXT4-fs (loop1): 1 orphan inode deleted [ 26.790724][ T554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.799630][ T554] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 26.809697][ T390] EXT4-fs error (device loop1): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 1 [ 26.821753][ T316] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.830480][ T291] EXT4-fs (loop1): unmounting filesystem. [ 26.836360][ T390] EXT4-fs error (device loop1): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 1 [ 26.869632][ T560] netlink: 'syz.1.93': attribute type 13 has an invalid length. [ 26.877897][ T560] gretap0: refused to change device tx_queue_len [ 26.884214][ T295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.162897][ T572] loop0: detected capacity change from 0 to 40427 [ 27.181685][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.182031][ T572] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 27.198006][ T316] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 27.198842][ T572] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 27.217762][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.226736][ T316] usb 4-1: config 0 descriptor?? [ 27.233312][ T572] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 27.251750][ T295] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.266055][ T295] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.288415][ T572] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 27.295732][ T572] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.335769][ T292] syz-executor: attempt to access beyond end of device [ 27.335769][ T292] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.361717][ T295] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 27.375274][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 27.395787][ T295] usb 5-1: SerialNumber: syz [ 27.564794][ T566] loop1: detected capacity change from 0 to 131072 [ 27.572542][ T566] F2FS-fs (loop1): invalid crc value [ 27.579586][ T566] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.616847][ T566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 27.647264][ T589] loop0: detected capacity change from 0 to 512 [ 27.656546][ T589] EXT4-fs: Ignoring removed oldalloc option [ 27.664861][ T589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.103: inode #11614: comm syz.0.103: iget: illegal inode # [ 27.678479][ T589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.103: error while reading EA inode 11614 err=-117 [ 27.691806][ T295] usb 5-1: 0:2 : does not exist [ 27.696574][ T295] usb 5-1: unit 255 not found! [ 27.698344][ T589] EXT4-fs (loop0): 1 truncate cleaned up [ 27.704104][ T295] usb 5-1: USB disconnect, device number 3 [ 27.714600][ T316] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 27.721439][ T316] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 27.721510][ T589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 27.728175][ T316] elecom 0003:056E:00E6.0001: unknown main item tag 0x1 [ 27.745695][ T316] elecom 0003:056E:00E6.0001: unexpected long global item [ 27.753117][ T316] elecom: probe of 0003:056E:00E6.0001 failed with error -22 [ 27.794525][ T589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.103: inode #11614: comm syz.0.103: iget: illegal inode # [ 27.807910][ T589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.103: error while reading EA inode 11614 err=-117 [ 27.811424][ T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.829826][ T292] EXT4-fs (loop0): unmounting filesystem. [ 27.858732][ T592] tun0: tun_chr_ioctl cmd 1074025672 [ 27.864194][ T592] tun0: ignored: set checksum enabled [ 27.921280][ T6] usb 4-1: USB disconnect, device number 2 [ 27.960517][ T598] tipc: Enabling of bearer rejected, media not registered [ 28.144803][ T604] loop1: detected capacity change from 0 to 40427 [ 28.152061][ T604] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 28.158233][ T604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 28.180275][ T617] loop4: detected capacity change from 0 to 512 [ 28.186998][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.200492][ T604] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 28.211431][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.211483][ T313] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 28.252211][ T617] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.116: bad orphan inode 17 [ 28.262672][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.276241][ T617] ext4_test_bit(bit=16, block=4) = 1 [ 28.282273][ T617] is_bad_inode(inode)=0 [ 28.288643][ T313] usb 3-1: config 0 descriptor?? [ 28.293581][ T617] NEXT_ORPHAN(inode)=0 [ 28.295420][ T604] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 28.297467][ T617] max_ino=32 [ 28.297477][ T617] i_nlink=1 [ 28.307367][ T632] syz.0.121[632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.307593][ T617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.310632][ T632] syz.0.121[632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.321798][ T604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.345903][ T632] loop0: detected capacity change from 0 to 512 [ 28.355759][ T632] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.377205][ T617] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.116: bg 0: block 7: invalid block bitmap [ 28.390213][ T632] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.121: inline data xattr refers to an external xattr inode [ 28.405192][ T291] syz-executor: attempt to access beyond end of device [ 28.405192][ T291] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 28.419271][ T632] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.121: couldn't read orphan inode 12 (err -117) [ 28.436753][ T290] EXT4-fs (loop4): unmounting filesystem. [ 28.442495][ T632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.481103][ T632] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 28.503449][ T292] EXT4-fs (loop0): unmounting filesystem. [ 28.791679][ T313] belkin 0003:1020:0006.0002: report_id 0 is invalid [ 28.798278][ T313] belkin 0003:1020:0006.0002: item 0 0 1 8 parsing failed [ 28.805489][ T313] belkin 0003:1020:0006.0002: parse failed [ 28.811151][ T313] belkin: probe of 0003:1020:0006.0002 failed with error -22 [ 28.930788][ T314] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 28.981005][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.009083][ T313] usb 3-1: USB disconnect, device number 2 [ 29.014788][ T295] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.200662][ T314] usb 5-1: Using ep0 maxpacket: 16 [ 29.220967][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 29.340719][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.351681][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.361301][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.373876][ T6] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.382856][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.393726][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.401748][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.411831][ T295] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 29.421003][ T6] usb 1-1: config 0 descriptor?? [ 29.425969][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.438084][ T295] usb 2-1: config 0 descriptor?? [ 29.470011][ T683] loop3: detected capacity change from 0 to 128 [ 29.483733][ T683] FAT-fs (loop3): error, corrupted directory (invalid i_start) [ 29.491430][ T683] FAT-fs (loop3): Filesystem has been set read-only [ 29.520569][ T314] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 29.529572][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.537872][ T314] usb 5-1: Product: syz [ 29.542350][ T314] usb 5-1: Manufacturer: syz [ 29.546866][ T314] usb 5-1: SerialNumber: syz [ 29.552922][ T314] usb 5-1: config 0 descriptor?? [ 29.596565][ T696] loop3: detected capacity change from 0 to 512 [ 29.611808][ T314] usb_ehset_test: probe of 5-1:0.0 failed with error -32 [ 29.614426][ T696] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.149: casefold flag without casefold feature [ 29.631647][ T696] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.149: corrupted inode contents [ 29.643519][ T696] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #3: comm syz.3.149: mark_inode_dirty error [ 29.655377][ T696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.149: bg 0: block 64: padding at end of block bitmap is not set [ 29.669821][ T696] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.149: Failed to acquire dquot type 0 [ 29.681705][ T696] EXT4-fs (loop3): 1 truncate cleaned up [ 29.687174][ T696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.695983][ T696] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038 (0x7fffffff) [ 29.713162][ T696] syz.3.149 (696) used greatest stack depth: 19432 bytes left [ 29.722140][ T293] EXT4-fs (loop3): unmounting filesystem. [ 29.813246][ T19] usb 5-1: USB disconnect, device number 4 [ 29.907723][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input4 [ 29.922342][ T295] hid-generic 0003:1B1C:1C0D.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.1-1/input0 [ 29.981516][ T6] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 30.100250][ T313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.110660][ T314] usb 1-1: USB disconnect, device number 3 [ 30.124327][ T296] usb 2-1: USB disconnect, device number 3 [ 30.369431][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 30.369448][ T28] audit: type=1400 audit(1729560855.235:183): avc: denied { create } for pid=712 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.415891][ T28] audit: type=1400 audit(1729560855.235:184): avc: denied { write } for pid=712 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.441831][ T717] loop2: detected capacity change from 0 to 512 [ 30.457634][ T717] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.157: invalid block [ 30.469663][ T717] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.157: invalid indirect mapped block 4294967295 (level 1) [ 30.483984][ T717] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.157: invalid indirect mapped block 4294967295 (level 1) [ 30.498624][ T717] EXT4-fs (loop2): 2 truncates cleaned up [ 30.504826][ T717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.522800][ T717] EXT4-fs (loop2): shut down requested (2) [ 30.536472][ T294] EXT4-fs (loop2): unmounting filesystem. [ 30.589310][ T715] loop4: detected capacity change from 0 to 40427 [ 30.596476][ T715] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 30.604153][ T715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 30.613080][ T715] F2FS-fs (loop4): invalid crc value [ 30.619608][ T715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.641122][ T313] usb 4-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=fa.f1 [ 30.642793][ T728] loop1: detected capacity change from 0 to 128 [ 30.659680][ T28] audit: type=1400 audit(1729560855.525:185): avc: denied { create } for pid=729 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.659931][ T313] usb 4-1: New USB device strings: Mfr=29, Product=2, SerialNumber=3 [ 30.700012][ T28] audit: type=1400 audit(1729560855.555:186): avc: denied { write } for pid=729 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.709693][ T313] usb 4-1: Product: syz [ 30.727746][ T313] usb 4-1: Manufacturer: syz [ 30.732255][ T313] usb 4-1: SerialNumber: syz [ 30.737010][ T715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 30.743025][ T28] audit: type=1400 audit(1729560855.555:187): avc: denied { read } for pid=729 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.763703][ T715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.782541][ T728] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.791277][ T728] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 30.791292][ T313] usb 4-1: config 0 descriptor?? [ 30.813142][ T28] audit: type=1400 audit(1729560855.555:188): avc: denied { ioctl } for pid=729 comm="syz.0.160" path="socket:[16675]" dev="sockfs" ino=16675 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.841853][ T728] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x1c) [ 30.850897][ T313] usb 4-1: Found UVC 0.00 device syz (0408:4030) [ 30.857108][ T313] usb 4-1: No valid video chain found. [ 30.862689][ T290] syz-executor: attempt to access beyond end of device [ 30.862689][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.886507][ T291] EXT4-fs (loop1): unmounting filesystem. [ 31.075169][ T313] usb 4-1: USB disconnect, device number 3 [ 31.122773][ T28] audit: type=1400 audit(1729560855.995:189): avc: denied { bpf } for pid=761 comm="syz.2.176" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.149898][ T28] audit: type=1400 audit(1729560855.995:190): avc: denied { map_create } for pid=761 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.190258][ T771] loop2: detected capacity change from 0 to 128 [ 31.197243][ T28] audit: type=1400 audit(1729560855.995:191): avc: denied { map_read map_write } for pid=761 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.217400][ T28] audit: type=1400 audit(1729560855.995:192): avc: denied { create } for pid=762 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.335840][ T786] tun0: tun_chr_ioctl cmd 1074025675 [ 31.341398][ T786] tun0: persist disabled [ 31.370851][ T791] loop4: detected capacity change from 0 to 128 [ 31.392378][ T791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.427124][ T797] loop2: detected capacity change from 0 to 128 [ 31.438077][ T791] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 31.484758][ T791] fscrypt (loop4, inode 12): Mutually exclusive encryption flags (0x1a) [ 31.499917][ T290] EXT4-fs (loop4): unmounting filesystem. [ 31.502558][ T801] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 31.544119][ T801] device veth1_macvtap left promiscuous mode [ 31.602801][ T806] capability: warning: `syz.2.195' uses deprecated v2 capabilities in a way that may be insecure [ 31.656978][ T816] loop3: detected capacity change from 0 to 1024 [ 31.699996][ T816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.712770][ T816] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 31.784490][ T293] EXT4-fs (loop3): unmounting filesystem. [ 31.833834][ T832] loop3: detected capacity change from 0 to 2048 [ 31.852600][ T832] Alternate GPT is invalid, using primary GPT. [ 31.858758][ T832] loop3: p2 p3 p7 [ 31.909353][ T313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 31.920417][ T514] udevd[514]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 31.931741][ T513] udevd[513]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 31.944722][ T330] udevd[330]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 31.954866][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.968984][ T836] loop3: detected capacity change from 0 to 512 [ 31.996737][ T836] EXT4-fs: Ignoring removed oldalloc option [ 32.008680][ T836] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.208: inode #11614: comm syz.3.208: iget: illegal inode # [ 32.022096][ T836] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.208: error while reading EA inode 11614 err=-117 [ 32.034713][ T836] EXT4-fs (loop3): 1 truncate cleaned up [ 32.040320][ T836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.052396][ T836] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.208: inode #11614: comm syz.3.208: iget: illegal inode # [ 32.068128][ T836] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.208: error while reading EA inode 11614 err=-117 [ 32.089202][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.089270][ T293] EXT4-fs (loop3): unmounting filesystem. [ 32.140898][ T778] loop0: detected capacity change from 0 to 131072 [ 32.147935][ T778] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 32.158473][ T778] F2FS-fs (loop0): invalid crc value [ 32.165350][ T778] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 32.179150][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 32.192797][ T778] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 32.219133][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 32.329140][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 32.359148][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.449096][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.460596][ T313] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 32.470972][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.480972][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.489388][ T313] usb 5-1: Product: syz [ 32.493589][ T313] usb 5-1: Manufacturer: syz [ 32.498504][ T6] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 32.503531][ T865] loop0: detected capacity change from 0 to 128 [ 32.508039][ T313] usb 5-1: SerialNumber: syz [ 32.518226][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.528107][ T313] r8152-cfgselector 5-1: config 0 descriptor?? [ 32.535027][ T6] usb 2-1: config 0 descriptor?? [ 32.539922][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 32.551364][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.552940][ T865] FAT-fs (loop0): error, corrupted directory (invalid i_start) [ 32.559692][ T24] usb 3-1: Product: syz [ 32.567237][ T865] FAT-fs (loop0): Filesystem has been set read-only [ 32.572857][ T24] usb 3-1: Manufacturer: syz [ 32.582660][ T24] usb 3-1: SerialNumber: syz [ 32.587960][ T24] usb 3-1: config 0 descriptor?? [ 32.620379][ T870] loop0: detected capacity change from 0 to 2048 [ 32.642710][ T870] Alternate GPT is invalid, using primary GPT. [ 32.649011][ T870] loop0: p2 p3 p7 [ 32.682705][ T871] udevd[871]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 32.696519][ T319] udevd[319]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 32.696778][ T871] udevd[871]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 32.707951][ T365] udevd[365]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 32.728931][ T711] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.798990][ T313] r8152-cfgselector 5-1: Unknown version 0x0000 [ 32.839077][ T313] r8152-cfgselector 5-1: Unknown version 0x0000 [ 32.845250][ T313] r8152-cfgselector 5-1: bad CDC descriptors [ 32.978956][ T711] usb 4-1: Using ep0 maxpacket: 8 [ 33.020385][ T6] kye 0003:0458:0153.0005: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0 [ 33.088847][ T24] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 33.095175][ T24] usb 3-1: No valid video chain found. [ 33.095670][ T295] usb 5-1: USB disconnect, device number 5 [ 33.101115][ T43] usb 5-1: config 0 descriptor?? [ 33.112280][ T711] usb 4-1: config 0 has no interfaces? [ 33.118397][ T24] usb 3-1: USB disconnect, device number 3 [ 33.221924][ T314] usb 2-1: USB disconnect, device number 4 [ 33.268671][ T711] usb 4-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=45.03 [ 33.277546][ T711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.285806][ T711] usb 4-1: Product: syz [ 33.289820][ T711] usb 4-1: Manufacturer: syz [ 33.294218][ T711] usb 4-1: SerialNumber: syz [ 33.299795][ T711] usb 4-1: config 0 descriptor?? [ 33.541061][ T295] usb 4-1: USB disconnect, device number 4 [ 33.577356][ T879] tmpfs: Unknown parameter 'mp' [ 33.641929][ T889] Illegal XDP return value 2662558211 on prog (id 74) dev syz_tun, expect packet loss! [ 33.878331][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.933967][ T896] loop1: detected capacity change from 0 to 128 [ 33.949121][ T896] FAT-fs (loop1): error, corrupted directory (invalid i_start) [ 33.956671][ T896] FAT-fs (loop1): Filesystem has been set read-only [ 34.080710][ T906] loop3: detected capacity change from 0 to 16 [ 34.087493][ T906] erofs: (device loop3): mounted with root inode @ nid 36. [ 34.096305][ T906] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-95] [ 34.118195][ T313] usb 3-1: Using ep0 maxpacket: 16 [ 34.238215][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 34.249822][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.259674][ T313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.268132][ T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.272595][ T313] usb 3-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 34.288800][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.297512][ T313] usb 3-1: config 0 descriptor?? [ 34.348609][ T912] loop3: detected capacity change from 0 to 40427 [ 34.359276][ T912] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 34.367626][ T912] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 34.376920][ T912] F2FS-fs (loop3): invalid crc value [ 34.383891][ T912] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 34.427355][ T912] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 34.434752][ T912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.466625][ T912] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 34.541201][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.548856][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.556078][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.563776][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.571217][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.579939][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.587323][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.594934][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.603502][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.605675][ T936] loop3: detected capacity change from 0 to 4096 [ 34.611177][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.624613][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.626960][ T936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.632187][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.648235][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.655448][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.662765][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.670014][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.677220][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.684547][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.687965][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.691845][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.702857][ T314] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 34.709891][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.719058][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.725944][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.735011][ T314] usb 2-1: config 0 descriptor?? [ 34.741310][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.753025][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.760194][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.767437][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.774611][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.783538][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.790935][ T313] wacom 0003:056A:0307.0007: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.2-1/input0 [ 34.802818][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.810131][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.817244][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.824489][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.831700][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.839109][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.846442][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.853782][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.860964][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.868178][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.875355][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.882587][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.889787][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.896962][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.904227][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.911394][ T295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 34.920745][ T295] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 34.943766][ T293] EXT4-fs (loop3): unmounting filesystem. [ 34.976748][ T945] syz.3.250 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.990383][ T295] usb 3-1: USB disconnect, device number 4 [ 35.219384][ T314] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 35.228912][ T314] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input8 [ 35.297612][ T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.310564][ T314] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 35.453471][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 35.453490][ T28] audit: type=1400 audit(1729560860.317:308): avc: denied { read write } for pid=964 comm="syz.4.260" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.483276][ T28] audit: type=1400 audit(1729560860.317:309): avc: denied { open } for pid=964 comm="syz.4.260" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.506616][ T28] audit: type=1400 audit(1729560860.317:310): avc: denied { mount } for pid=964 comm="syz.4.260" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 35.532896][ T28] audit: type=1400 audit(1729560860.357:311): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 35.560589][ T28] audit: type=1400 audit(1729560860.397:312): avc: denied { create } for pid=966 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.588170][ T28] audit: type=1400 audit(1729560860.397:313): avc: denied { write } for pid=966 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.646794][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 35.677457][ T314] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.686033][ T28] audit: type=1400 audit(1729560860.547:314): avc: denied { read } for pid=982 comm="syz.2.267" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.687800][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.723614][ T28] audit: type=1400 audit(1729560860.547:315): avc: denied { open } for pid=982 comm="syz.2.267" path="/54/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.725162][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.750802][ T28] audit: type=1400 audit(1729560860.547:316): avc: denied { setattr } for pid=982 comm="syz.2.267" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.759601][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.796060][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.796095][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.797038][ T6] usb 4-1: config 0 descriptor?? [ 35.819160][ T987] loop2: detected capacity change from 0 to 256 [ 35.829699][ T987] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 35.846587][ T28] audit: type=1400 audit(1729560860.707:317): avc: denied { write } for pid=986 comm="syz.2.270" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.947254][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 36.217473][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.227191][ T296] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 36.297166][ T314] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 36.306335][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.308309][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.314282][ T314] usb 1-1: Product: syz [ 36.322314][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.325508][ T314] usb 1-1: Manufacturer: syz [ 36.333164][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.337297][ T314] usb 1-1: SerialNumber: syz [ 36.344743][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.349920][ T314] usb 1-1: config 0 descriptor?? [ 36.356853][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.368137][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.375338][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.382970][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.390650][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.397838][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.405074][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.407840][ T314] usb_ehset_test: probe of 1-1:0.0 failed with error -32 [ 36.412557][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.426467][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.433682][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.436692][ T314] usb 2-1: USB disconnect, device number 5 [ 36.440896][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.440941][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.461221][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.461252][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.461280][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.461304][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.461325][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.499569][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.506815][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.508142][ T296] usb 5-1: Using ep0 maxpacket: 8 [ 36.514136][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514162][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514184][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514206][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514226][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514247][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514267][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514288][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514310][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514332][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514353][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514375][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514396][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514417][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514438][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 36.514665][ T6] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 36.637046][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.645686][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.648947][ T6] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 36.663600][ T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.674198][ T6] usb 4-1: USB disconnect, device number 5 [ 36.680059][ T1002] usb 1-1: USB disconnect, device number 4 [ 36.690062][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 36.697970][ T296] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 36.708042][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.725672][ T296] usb 5-1: config 0 descriptor?? [ 36.776935][ T24] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 36.784848][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.794718][ T24] usb 3-1: config 1 has no interface number 1 [ 36.800723][ T24] usb 3-1: too many endpoints for config 1 interface 3 altsetting 8: 142, using maximum allowed: 30 [ 36.811662][ T24] usb 3-1: config 1 interface 3 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 142 [ 36.824667][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 36.835469][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 36.846475][ T24] usb 3-1: config 1 interface 3 has no altsetting 0 [ 37.006847][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.021020][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.029086][ T24] usb 3-1: Product: syz [ 37.033078][ T24] usb 3-1: Manufacturer: syz [ 37.037544][ T24] usb 3-1: SerialNumber: syz [ 37.168220][ T1015] loop0: detected capacity change from 0 to 256 [ 37.200969][ T1015] FAT-fs (loop0): Directory bread(block 64) failed [ 37.208448][ T296] logitech 0003:046D:C20E.000A: rdesc size test failed for formula gp [ 37.210477][ T1015] FAT-fs (loop0): Directory bread(block 65) failed [ 37.218225][ T296] logitech 0003:046D:C20E.000A: unbalanced delimiter at end of report description [ 37.232799][ T296] logitech 0003:046D:C20E.000A: parse failed [ 37.239308][ T296] logitech: probe of 0003:046D:C20E.000A failed with error -22 [ 37.241017][ T1015] FAT-fs (loop0): Directory bread(block 66) failed [ 37.253541][ T1015] FAT-fs (loop0): Directory bread(block 67) failed [ 37.260217][ T1015] FAT-fs (loop0): Directory bread(block 68) failed [ 37.266757][ T1015] FAT-fs (loop0): Directory bread(block 69) failed [ 37.273146][ T1015] FAT-fs (loop0): Directory bread(block 70) failed [ 37.279862][ T1015] FAT-fs (loop0): Directory bread(block 71) failed [ 37.286464][ T1015] FAT-fs (loop0): Directory bread(block 72) failed [ 37.293135][ T1015] FAT-fs (loop0): Directory bread(block 73) failed [ 37.325582][ T1015] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000616b) [ 37.338481][ T1015] syz.0.283: attempt to access beyond end of device [ 37.338481][ T1015] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 37.359922][ T314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.421290][ T711] usb 5-1: USB disconnect, device number 6 [ 37.556704][ T24] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 37.621721][ T24] usb 3-1: USB disconnect, device number 5 [ 37.656617][ T296] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.756521][ T314] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 37.766141][ T314] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.779721][ T1002] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.802351][ T1043] loop2: detected capacity change from 0 to 512 [ 37.809232][ T1043] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.820594][ T1043] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.833009][ T1043] EXT4-fs (loop2): 1 orphan inode deleted [ 37.838854][ T1043] EXT4-fs (loop2): 1 truncate cleaned up [ 37.844329][ T1043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.865670][ T294] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 458766: comm syz-executor: invalid block [ 37.877351][ T294] EXT4-fs (loop2): Remounting filesystem read-only [ 37.883781][ T294] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 458766: comm syz-executor: invalid block [ 37.895402][ T314] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.904351][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.912565][ T314] usb 4-1: SerialNumber: syz [ 37.936563][ T1013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 37.949008][ T1047] block device autoloading is deprecated and will be removed. [ 37.969171][ T294] EXT4-fs (loop2): unmounting filesystem. [ 38.036526][ T1002] usb 2-1: Using ep0 maxpacket: 16 [ 38.066525][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 38.124130][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.131033][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.138380][ T1054] device bridge_slave_0 entered promiscuous mode [ 38.145110][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.151993][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.158452][ T1013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.159614][ T1054] device bridge_slave_1 entered promiscuous mode [ 38.244219][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.246621][ T296] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 38.251107][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.261329][ T296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.267181][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.275205][ T296] usb 1-1: Product: syz [ 38.281740][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.293315][ T296] usb 1-1: Manufacturer: syz [ 38.298192][ T296] usb 1-1: SerialNumber: syz [ 38.306400][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.307271][ T296] usb 1-1: config 0 descriptor?? [ 38.318586][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.325795][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.347002][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.355172][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.362047][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.369238][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.377305][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.384146][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.391400][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.396592][ T1002] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 38.399369][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.408320][ T1002] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 38.423796][ T1002] usb 2-1: Product: syz [ 38.424268][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.428073][ T1002] usb 2-1: Manufacturer: syz [ 38.440629][ T1002] usb 2-1: SerialNumber: syz [ 38.443742][ T1054] device veth0_vlan entered promiscuous mode [ 38.449266][ T1002] usb 2-1: config 0 descriptor?? [ 38.458543][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.466630][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.474048][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.489028][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.491112][ T1002] usb 2-1: selecting invalid altsetting 1 [ 38.497600][ T1054] device veth1_macvtap entered promiscuous mode [ 38.512901][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.523254][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.586653][ T314] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 38.595671][ T296] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 38.606787][ T1002] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 38.617386][ T8] device bridge_slave_1 left promiscuous mode [ 38.623360][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.628536][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.645910][ T8] device bridge_slave_0 left promiscuous mode [ 38.650765][ T514] udevd[514]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.652874][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.675946][ T8] device veth1_macvtap left promiscuous mode [ 38.681968][ T8] device veth0_vlan left promiscuous mode [ 38.703251][ T6] usb 2-1: USB disconnect, device number 6 [ 38.791531][ T1002] usb 4-1: USB disconnect, device number 6 [ 38.802762][ T295] usb 1-1: USB disconnect, device number 5 [ 38.866479][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.146608][ T313] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 39.225838][ T1079] loop1: detected capacity change from 0 to 512 [ 39.232082][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 39.243274][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 39.254286][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.258404][ T1079] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.267415][ T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.276099][ T1079] ext4 filesystem being mounted at /54/bus supports timestamps until 2038 (0x7fffffff) [ 39.285088][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.321319][ T19] usb 3-1: config 0 descriptor?? [ 39.336576][ T1067] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 39.392272][ T291] EXT4-fs (loop1): unmounting filesystem. [ 39.440254][ T1096] netlink: 104 bytes leftover after parsing attributes in process `syz.3.316'. [ 39.506518][ T313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.525611][ T313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.557950][ T1108] Zero length message leads to an empty skb [ 39.626525][ T313] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.635617][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.647110][ T313] usb 5-1: SerialNumber: syz [ 39.797461][ T19] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 39.816637][ T19] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 39.835036][ T19] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 39.927357][ T313] usb 5-1: 0:2 : does not exist [ 39.937968][ T313] usb 5-1: USB disconnect, device number 7 [ 40.026001][ T1152] loop0: detected capacity change from 0 to 256 [ 40.050648][ T1152] FAT-fs (loop0): Directory bread(block 64) failed [ 40.057303][ T1152] FAT-fs (loop0): Directory bread(block 65) failed [ 40.063660][ T1152] FAT-fs (loop0): Directory bread(block 66) failed [ 40.070419][ T1152] FAT-fs (loop0): Directory bread(block 67) failed [ 40.077307][ T1152] FAT-fs (loop0): Directory bread(block 68) failed [ 40.079478][ T19] usb 3-1: USB disconnect, device number 6 [ 40.084738][ T1152] FAT-fs (loop0): Directory bread(block 69) failed [ 40.096027][ T1152] FAT-fs (loop0): Directory bread(block 70) failed [ 40.104389][ T1152] FAT-fs (loop0): Directory bread(block 71) failed [ 40.111107][ T1152] FAT-fs (loop0): Directory bread(block 72) failed [ 40.117759][ T1152] FAT-fs (loop0): Directory bread(block 73) failed [ 40.157241][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.174200][ T1156] loop0: detected capacity change from 0 to 4096 [ 40.183301][ T1156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.193851][ T1156] process 'syz.0.343' launched './file0' with NULL argv: empty string added [ 40.204446][ T1156] fs-verity: sha256 using implementation "sha256-avx2" [ 40.216203][ T1156] fs-verity (loop0, inode 13): Error -27 writing Merkle tree block 2160165643 [ 40.225013][ T1156] fs-verity (loop0, inode 13): Error -27 building Merkle tree [ 40.239002][ T292] EXT4-fs (loop0): unmounting filesystem. [ 40.316537][ T314] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 40.566509][ T1002] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.696502][ T314] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 40.722385][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.753636][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.775354][ T314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 40.785016][ T1180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 40.789219][ T314] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 40.816120][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.835176][ T314] usb 4-1: config 0 descriptor?? [ 40.895292][ T1172] loop2: detected capacity change from 0 to 40427 [ 40.905821][ T1172] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 40.919053][ T1172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.929968][ T1172] F2FS-fs (loop2): invalid crc value [ 40.942809][ T1172] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.978098][ T1172] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.985254][ T1172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 40.996558][ T1002] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 41.000243][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 41.000262][ T28] audit: type=1400 audit(1729560865.510:371): avc: denied { append } for pid=1171 comm="syz.2.350" path="/2/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.004595][ T1002] usb 1-1: config 0 has no interface number 0 [ 41.016218][ T28] audit: type=1400 audit(1729560865.520:372): avc: denied { quotaon } for pid=1171 comm="syz.2.350" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.033669][ T1002] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.071285][ T1002] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.071396][ T1054] syz-executor: attempt to access beyond end of device [ 41.071396][ T1054] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.080990][ T1002] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 41.081019][ T1002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.107058][ T1002] usb 1-1: config 0 descriptor?? [ 41.186498][ T1077] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 41.206498][ T19] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.357533][ T314] thrustmaster 0003:044F:B653.000C: unbalanced delimiter at end of report description [ 41.368973][ T314] thrustmaster 0003:044F:B653.000C: parse failed [ 41.375157][ T314] thrustmaster: probe of 0003:044F:B653.000C failed with error -22 [ 41.436538][ T1077] usb 5-1: Using ep0 maxpacket: 8 [ 41.497381][ T28] audit: type=1400 audit(1729560866.010:373): avc: denied { checkpoint_restore } for pid=1200 comm="syz.2.361" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.548490][ T28] audit: type=1400 audit(1729560866.060:374): avc: denied { bind } for pid=1205 comm="syz.2.363" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.569438][ T28] audit: type=1400 audit(1729560866.060:375): avc: denied { name_bind } for pid=1205 comm="syz.2.363" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 41.576610][ T1077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.590718][ T28] audit: type=1400 audit(1729560866.060:376): avc: denied { node_bind } for pid=1205 comm="syz.2.363" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 41.601215][ T1077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.633260][ T1077] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 41.634416][ T1002] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 41.642309][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.661004][ T1002] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 41.661378][ T1077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.673231][ T1002] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 41.678823][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.688909][ T1209] loop2: detected capacity change from 0 to 512 [ 41.695099][ T19] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 41.701197][ T1002] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 41.709774][ T1077] usb 5-1: config 0 descriptor?? [ 41.722934][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.732166][ T313] usb 4-1: USB disconnect, device number 7 [ 41.733675][ T1002] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 41.740236][ T19] usb 2-1: config 0 descriptor?? [ 41.748988][ T1002] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 41.756053][ T1209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.758885][ T1002] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 41.768661][ T1209] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 41.776888][ T1002] logitech-djreceiver 0003:046D:C71B.000D: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input32 [ 41.812071][ T1054] EXT4-fs (loop2): unmounting filesystem. [ 41.835768][ T1002] usb 1-1: USB disconnect, device number 6 [ 41.842109][ T28] audit: type=1400 audit(1729560866.350:377): avc: denied { ioctl } for pid=1215 comm="syz.2.366" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18793 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.146521][ T296] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.207309][ T1077] steelseries_srws1 0003:1038:1410.000E: unknown main item tag 0xd [ 42.215216][ T1077] steelseries_srws1 0003:1038:1410.000E: item fetching failed at offset 6/7 [ 42.223868][ T1077] steelseries_srws1 0003:1038:1410.000E: parse failed [ 42.231382][ T19] petalynx 0003:18B1:0037.000F: collection stack underflow [ 42.238482][ T1077] steelseries_srws1: probe of 0003:1038:1410.000E failed with error -22 [ 42.247042][ T19] petalynx 0003:18B1:0037.000F: item 0 1 0 12 parsing failed [ 42.257164][ T28] audit: type=1400 audit(1729560866.770:378): avc: denied { mounton } for pid=1220 comm="syz.3.368" path="/75/file0" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.259324][ T19] petalynx 0003:18B1:0037.000F: parse failed [ 42.285201][ T19] petalynx: probe of 0003:18B1:0037.000F failed with error -22 [ 42.289772][ T314] kernel write not supported for file bpf-prog (pid: 314 comm: kworker/1:3) [ 42.357343][ T28] audit: type=1400 audit(1729560866.870:379): avc: denied { set_context_mgr } for pid=1228 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 42.391811][ T1233] loop0: detected capacity change from 0 to 1024 [ 42.399508][ T1233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.410514][ T1233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.437663][ T1077] usb 5-1: USB disconnect, device number 8 [ 42.452715][ T28] audit: type=1400 audit(1729560866.960:380): avc: denied { ioctl } for pid=1232 comm="syz.0.374" path="/93/file0/blkio.bfq.avg_queue_size" dev="loop0" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.464077][ T314] usb 2-1: USB disconnect, device number 7 [ 42.487530][ T292] EXT4-fs (loop0): unmounting filesystem. [ 42.516627][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.527689][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.537446][ T296] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.550430][ T296] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 42.559306][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.568072][ T296] usb 3-1: config 0 descriptor?? [ 42.606554][ T1002] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.776532][ T19] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 42.966542][ T1002] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 42.976851][ T1002] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.001351][ T1243] xt_hashlimit: size too large, truncated to 1048576 [ 43.008079][ T1002] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 43.026470][ T1002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.047482][ T296] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 43.054549][ T296] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 43.076746][ T296] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 43.083832][ T296] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 43.106468][ T296] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0 [ 43.124426][ T296] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 43.206651][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.225397][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.245049][ T19] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 43.251785][ T1245] loop1: detected capacity change from 0 to 40427 [ 43.268983][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.269729][ T1245] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 43.288574][ T1077] usb 3-1: USB disconnect, device number 7 [ 43.289940][ T1245] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.294539][ T19] usb 1-1: config 0 descriptor?? [ 43.314281][ T1245] F2FS-fs (loop1): invalid crc value [ 43.323854][ T1245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.336518][ T1002] usb 4-1: string descriptor 0 read error: -71 [ 43.343593][ T1002] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 43.372493][ T1002] usb 4-1: USB disconnect, device number 8 [ 43.378992][ T1245] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.385937][ T1245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.411743][ T1245] syz.1.379: attempt to access beyond end of device [ 43.411743][ T1245] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.461770][ T291] syz-executor: attempt to access beyond end of device [ 43.461770][ T291] loop1: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 43.475980][ T291] F2FS-fs (loop1): Issue discard(5637, 5637, 1) failed, ret: -5 [ 43.572208][ T1261] loop1: detected capacity change from 0 to 256 [ 43.592617][ T1261] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 43.635536][ T1265] loop1: detected capacity change from 0 to 128 [ 43.657347][ T1265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.658302][ T1268] loop4: detected capacity change from 0 to 256 [ 43.666039][ T1265] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 43.708065][ T1268] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 43.739348][ T291] EXT4-fs (loop1): unmounting filesystem. [ 43.817969][ T19] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 43.919322][ T1289] loop1: detected capacity change from 0 to 512 [ 43.938431][ T1289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.947319][ T1289] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038 (0x7fffffff) [ 43.966153][ T291] EXT4-fs (loop1): unmounting filesystem. [ 44.022792][ T19] usb 1-1: USB disconnect, device number 7 [ 44.076954][ T1002] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.136596][ T296] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 44.256624][ T295] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.376603][ T711] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 44.384007][ T296] usb 5-1: Using ep0 maxpacket: 16 [ 44.436599][ T1002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.447398][ T1002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.457093][ T1002] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 44.465874][ T1002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.474522][ T1002] usb 3-1: config 0 descriptor?? [ 44.506556][ T296] usb 5-1: config 0 has no interfaces? [ 44.646569][ T295] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 44.657651][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.668823][ T296] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 44.668903][ T295] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 44.690523][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.691224][ T295] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 44.698321][ T296] usb 5-1: Product: syz [ 44.698342][ T296] usb 5-1: Manufacturer: syz [ 44.698356][ T296] usb 5-1: SerialNumber: syz [ 44.707539][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.724910][ T296] r8152-cfgselector 5-1: config 0 descriptor?? [ 44.736784][ T295] usb 2-1: config 0 descriptor?? [ 44.746675][ T711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.759782][ T711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.773147][ T711] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.782362][ T711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.792430][ T711] usb 4-1: config 0 descriptor?? [ 44.860827][ T1324] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 44.883020][ T1326] netlink: 272 bytes leftover after parsing attributes in process `syz.0.411'. [ 44.903509][ T1328] loop0: detected capacity change from 0 to 128 [ 44.913242][ T1328] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 44.920824][ T1328] FAT-fs (loop0): Filesystem has been set read-only [ 44.957902][ T1002] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 44.986657][ T43] usb 5-1: config 0 descriptor?? [ 45.176850][ T296] usb 3-1: USB disconnect, device number 8 [ 45.191572][ T1002] usb 5-1: USB disconnect, device number 9 [ 45.206846][ T43] usb 5-1: can't set config #0, error -71 [ 45.208681][ T295] holtek_mouse 0003:04D9:A0C2.0013: hidraw0: USB HID v0.00 Device [HID 04d9:a0c2] on usb-dummy_hcd.1-1/input0 [ 45.277354][ T711] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 45.284635][ T711] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 45.292180][ T711] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 45.300970][ T711] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 45.336517][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 45.409505][ T711] usb 2-1: USB disconnect, device number 8 [ 45.557231][ T296] usb 4-1: USB disconnect, device number 9 [ 45.586527][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 45.726521][ T19] usb 1-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.742308][ T19] usb 1-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.752494][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.759335][ T19] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 45.776891][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.795798][ T19] usb 1-1: config 0 descriptor?? [ 45.807415][ T1352] loop4: detected capacity change from 0 to 256 [ 45.813766][ T1352] exfat: Deprecated parameter 'utf8' [ 45.821846][ T1352] exfat: Deprecated parameter 'utf8' [ 45.829831][ T1352] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 45.906150][ T1358] loop4: detected capacity change from 0 to 512 [ 45.922977][ T1358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.941276][ T1358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 45.949712][ T1358] System zones: 1-12 [ 45.973853][ T1358] EXT4-fs (loop4): 1 truncate cleaned up [ 45.979729][ T1358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.007625][ T290] EXT4-fs (loop4): unmounting filesystem. [ 46.031659][ T1366] loop4: detected capacity change from 0 to 256 [ 46.066785][ T1366] syz.4.428: attempt to access beyond end of device [ 46.066785][ T1366] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 46.080604][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 46.080621][ T28] audit: type=1400 audit(1729560870.590:394): avc: denied { read } for pid=1363 comm="syz.1.427" path="socket:[19105]" dev="sockfs" ino=19105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.277470][ T19] hkems 0003:2006:0118.0015: bogus close delimiter [ 46.285715][ T19] hkems 0003:2006:0118.0015: item 0 4 2 10 parsing failed [ 46.299785][ T19] hkems 0003:2006:0118.0015: parse failed [ 46.318728][ T19] hkems: probe of 0003:2006:0118.0015 failed with error -22 [ 46.350736][ T1379] loop3: detected capacity change from 0 to 512 [ 46.375668][ T1379] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.383117][ T1371] loop4: detected capacity change from 0 to 40427 [ 46.395166][ T1371] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 46.403349][ T1371] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.419189][ T1379] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.434: casefold flag without casefold feature [ 46.432031][ T1379] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.434: missing EA_INODE flag [ 46.444178][ T1379] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.434: error while reading EA inode 12 err=-117 [ 46.457693][ T1371] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.476233][ T1379] EXT4-fs (loop3): 1 orphan inode deleted [ 46.486519][ T19] usb 1-1: USB disconnect, device number 8 [ 46.505249][ T1379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.561016][ T293] EXT4-fs (loop3): unmounting filesystem. [ 46.572160][ T1371] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 46.589895][ T1386] loop3: detected capacity change from 0 to 128 [ 46.592940][ T1371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.612799][ T1386] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 46.626970][ T1386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.635985][ T1386] ext2 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 46.652099][ T28] audit: type=1400 audit(1729560871.160:395): avc: denied { link } for pid=1385 comm="syz.3.435" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.697005][ T293] EXT4-fs (loop3): unmounting filesystem. [ 46.715001][ T1394] loop3: detected capacity change from 0 to 128 [ 46.742807][ T28] audit: type=1326 audit(1729560871.250:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.2.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc0937dff9 code=0x0 [ 46.810683][ T28] audit: type=1326 audit(1729560871.310:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1363 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0af77dff9 code=0x7fc00000 [ 46.834936][ T28] audit: type=1326 audit(1729560871.310:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1363 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa0af77dff9 code=0x7fc00000 [ 46.860160][ T28] audit: type=1326 audit(1729560871.310:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1363 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0af77dff9 code=0x7fc00000 [ 46.884173][ T28] audit: type=1326 audit(1729560871.320:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1363 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0af77dff9 code=0x7fc00000 [ 46.923890][ T28] audit: type=1326 audit(1729560871.320:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1363 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0af77dff9 code=0x7fc00000 [ 46.977491][ T28] audit: type=1326 audit(1729560871.320:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1363 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0af77dff9 code=0x7fc00000 [ 47.003448][ T28] audit: type=1326 audit(1729560871.320:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1363 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0af77dff9 code=0x7fc00000 [ 47.062956][ T1416] syz.0.446[1416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.063040][ T1416] syz.0.446[1416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.075395][ T1419] xt_hashlimit: size too large, truncated to 1048576 [ 47.115567][ T1405] loop2: detected capacity change from 0 to 40427 [ 47.126325][ T1405] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 47.140961][ T1405] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.160490][ T1427] loop3: detected capacity change from 0 to 512 [ 47.173048][ T1405] F2FS-fs (loop2): invalid crc value [ 47.181765][ T1427] EXT4-fs (loop3): Test dummy encryption mode enabled [ 47.200666][ T1405] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.207707][ T1427] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.449: invalid block [ 47.227460][ T1432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.451'. [ 47.267143][ T1427] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.449: couldn't read orphan inode 11 (err -117) [ 47.321896][ T1427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.334487][ T1440] loop4: detected capacity change from 0 to 512 [ 47.355696][ T1427] fscrypt: AES-256-XTS using blk-crypto-fallback [ 47.373827][ T1440] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.383134][ T1440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.396096][ T1405] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 47.405981][ T1405] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.428947][ T1440] EXT4-fs (loop4): 1 orphan inode deleted [ 47.435318][ T1440] EXT4-fs (loop4): 1 truncate cleaned up [ 47.439103][ T1405] syz.2.442: attempt to access beyond end of device [ 47.439103][ T1405] loop2: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 47.441311][ T1440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.464529][ T293] EXT4-fs (loop3): unmounting filesystem. [ 47.478040][ T1439] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.518534][ T290] EXT4-fs (loop4): unmounting filesystem. [ 47.576549][ T296] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 47.654577][ T1467] loop4: detected capacity change from 0 to 256 [ 47.713523][ T1471] loop4: detected capacity change from 0 to 512 [ 47.757770][ T1471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.771048][ T1471] ext4 filesystem being mounted at /86/bus supports timestamps until 2038 (0x7fffffff) [ 47.820449][ T290] EXT4-fs (loop4): unmounting filesystem. [ 47.929598][ T1469] loop2: detected capacity change from 0 to 40427 [ 47.938516][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.950701][ T1469] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 47.957512][ T296] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.966668][ T1469] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 47.982788][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.992666][ T296] usb 1-1: config 0 descriptor?? [ 47.998650][ T1469] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 48.033965][ T1469] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 48.041076][ T1469] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.062918][ T1054] syz-executor: attempt to access beyond end of device [ 48.062918][ T1054] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.139881][ T1500] loop2: detected capacity change from 0 to 256 [ 48.149010][ T1500] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 48.168759][ T1500] incfs_lookup_dentry err:-22 [ 48.276481][ T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 48.359915][ T1517] loop1: detected capacity change from 0 to 512 [ 48.378326][ T1517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.387488][ T1517] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038 (0x7fffffff) [ 48.397388][ T1002] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 48.477231][ T296] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 48.487758][ T296] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0016/input/input11 [ 48.508050][ T295] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.569993][ T296] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 48.582852][ T291] EXT4-fs (loop1): unmounting filesystem. [ 48.646518][ T1002] usb 4-1: Using ep0 maxpacket: 16 [ 48.686574][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.696856][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.766586][ T1002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.777536][ T1002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.787572][ T19] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 48.787605][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.787627][ T19] usb 5-1: SerialNumber: syz [ 48.809146][ T1002] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.822046][ T1002] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 48.831719][ T1002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.840601][ T1002] usb 4-1: config 0 descriptor?? [ 48.896588][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.907710][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.917451][ T295] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 48.917483][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.918403][ T295] usb 3-1: config 0 descriptor?? [ 49.067085][ T19] usb 5-1: 0:2 : does not exist [ 49.156720][ T314] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 49.297482][ T19] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 49.308419][ T19] usb 5-1: USB disconnect, device number 10 [ 49.317628][ T1002] microsoft 0003:045E:07DA.0017: unknown main item tag 0x7 [ 49.324714][ T1002] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 49.331935][ T1002] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 49.339164][ T1002] microsoft 0003:045E:07DA.0017: unknown main item tag 0x2 [ 49.346260][ T1002] microsoft 0003:045E:07DA.0017: unknown main item tag 0x2 [ 49.353345][ T1002] microsoft 0003:045E:07DA.0017: unknown main item tag 0x2 [ 49.364657][ T1002] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0017/input/input12 [ 49.377369][ T1002] microsoft 0003:045E:07DA.0017: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 49.397527][ T295] appleir 0003:05AC:8243.0018: report_id 0 is invalid [ 49.404333][ T295] appleir 0003:05AC:8243.0018: item 0 0 1 8 parsing failed [ 49.411626][ T295] appleir 0003:05AC:8243.0018: parse failed [ 49.417608][ T295] appleir: probe of 0003:05AC:8243.0018 failed with error -22 [ 49.440562][ T295] usb 1-1: USB disconnect, device number 9 [ 49.516621][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.520312][ T19] usb 4-1: USB disconnect, device number 10 [ 49.528207][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.551749][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.567313][ T314] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 49.576477][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.589988][ T314] usb 2-1: config 0 descriptor?? [ 49.612265][ T296] usb 3-1: USB disconnect, device number 9 [ 49.629106][ T1546] loop4: detected capacity change from 0 to 512 [ 49.638568][ T1546] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2760: inode #11: comm syz.4.496: corrupted xattr block 95 [ 49.650950][ T1546] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.496: bg 0: block 7: invalid block bitmap [ 49.663411][ T1546] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 49.672500][ T1546] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #11: comm syz.4.496: corrupted xattr block 95 [ 49.684560][ T1546] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 49.693789][ T1546] EXT4-fs (loop4): 1 orphan inode deleted [ 49.699383][ T1546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.768803][ T290] EXT4-fs (loop4): unmounting filesystem. [ 49.784024][ T1550] loop4: detected capacity change from 0 to 512 [ 49.798674][ T1550] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #16: comm syz.4.497: corrupted xattr block 8 [ 49.810770][ T1550] EXT4-fs (loop4): Remounting filesystem read-only [ 49.817298][ T1550] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 49.826365][ T1550] EXT4-fs (loop4): 1 orphan inode deleted [ 49.832166][ T1550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.841302][ T1550] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038 (0x7fffffff) [ 49.853393][ T1550] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.497: deleted inode referenced: 16 [ 49.865004][ T1550] EXT4-fs (loop4): Remounting filesystem read-only [ 49.876373][ T290] EXT4-fs (loop4): unmounting filesystem. [ 50.057760][ T314] cypress 0003:04B4:07B1.0019: unknown main item tag 0x0 [ 50.064762][ T314] cypress 0003:04B4:07B1.0019: item fetching failed at offset 4/5 [ 50.072825][ T314] cypress 0003:04B4:07B1.0019: parse failed [ 50.078713][ T314] cypress: probe of 0003:04B4:07B1.0019 failed with error -22 [ 50.119216][ T1561] loop0: detected capacity change from 0 to 40427 [ 50.126019][ T1561] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 50.134681][ T1561] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 50.151541][ T1561] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.157872][ T296] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 50.197094][ T1561] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 50.203947][ T1561] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.223540][ T1561] syz.0.501: attempt to access beyond end of device [ 50.223540][ T1561] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.260794][ T295] usb 2-1: USB disconnect, device number 9 [ 50.396555][ T296] usb 5-1: Using ep0 maxpacket: 8 [ 50.417112][ T313] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.466552][ T19] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 50.516548][ T296] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 50.524789][ T296] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 50.533304][ T296] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 50.542433][ T296] usb 5-1: config 250 has no interface number 0 [ 50.548545][ T296] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 50.559903][ T296] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 50.570148][ T296] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.580479][ T296] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 50.590610][ T296] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 50.603877][ T296] usb 5-1: config 250 interface 228 has no altsetting 0 [ 50.646549][ T1077] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.726564][ T296] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 50.735584][ T296] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 50.743717][ T296] usb 5-1: Product: syz [ 50.747713][ T296] usb 5-1: SerialNumber: syz [ 50.792072][ T296] hub 5-1:250.228: bad descriptor, ignoring hub [ 50.798973][ T296] hub: probe of 5-1:250.228 failed with error -5 [ 50.799900][ T1581] SELinux: failed to load policy [ 50.810307][ T313] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.821181][ T313] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.831137][ T313] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 50.845119][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.876549][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.889899][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.903619][ T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.912516][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.920403][ T1077] usb 1-1: Using ep0 maxpacket: 32 [ 50.925927][ T19] usb 4-1: config 0 descriptor?? [ 50.997496][ T296] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 51.036589][ T1077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.036804][ T296] usb 5-1: USB disconnect, device number 11 [ 51.047615][ T1077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.055060][ T296] usblp0: removed [ 51.064298][ T1077] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.075593][ T1077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.084205][ T1077] usb 1-1: config 0 descriptor?? [ 51.127085][ T1077] hub 1-1:0.0: USB hub found [ 51.156570][ T1002] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.327843][ T313] logitech-hidpp-device 0003:046D:C086.001A: item fetching failed at offset 2/5 [ 51.337109][ T313] logitech-hidpp-device 0003:046D:C086.001A: hidpp_probe:parse failed [ 51.345114][ T313] logitech-hidpp-device: probe of 0003:046D:C086.001A failed with error -22 [ 51.386608][ T1077] hub 1-1:0.0: 8 ports detected [ 51.396519][ T1002] usb 2-1: Using ep0 maxpacket: 32 [ 51.407629][ T19] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 51.415324][ T1077] hub 1-1:0.0: insufficient power available to use all downstream ports [ 51.425007][ T19] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 51.516770][ T1002] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 51.524923][ T1002] usb 2-1: config 0 has no interface number 0 [ 51.531609][ T1002] usb 2-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 51.542462][ T1002] usb 2-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 51.552999][ T1002] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 51.562991][ T1002] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 51.576966][ T711] usb 3-1: USB disconnect, device number 10 [ 51.606522][ T1077] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 51.612775][ T1077] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 51.687146][ T313] usb 4-1: USB disconnect, device number 11 [ 51.716791][ T1077] usbhid 1-1:0.0: can't add hid device: -71 [ 51.722650][ T1077] usbhid: probe of 1-1:0.0 failed with error -71 [ 51.723140][ T1592] SELinux: failed to load policy [ 51.733769][ T1002] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 51.743163][ T1002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.751070][ T1002] usb 2-1: Product: syz [ 51.755278][ T1002] usb 2-1: Manufacturer: syz [ 51.759984][ T1002] usb 2-1: SerialNumber: syz [ 51.765035][ T1002] usb 2-1: config 0 descriptor?? [ 51.766921][ T1077] usb 1-1: USB disconnect, device number 10 [ 51.786595][ T1590] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 51.793836][ T1590] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 52.036524][ T314] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 52.047669][ T1002] usb 2-1: USB disconnect, device number 10 [ 52.276515][ T314] usb 5-1: Using ep0 maxpacket: 8 [ 52.386531][ T296] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 52.396701][ T314] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.404783][ T314] usb 5-1: config 179 has no interface number 0 [ 52.410961][ T314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 52.422011][ T314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 52.433166][ T314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.444225][ T314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 52.455516][ T314] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.468899][ T711] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 52.476233][ T314] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 52.476479][ T1077] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 52.485073][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.516577][ T1594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 52.548735][ T1610] loop1: detected capacity change from 0 to 256 [ 52.559208][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 52.559225][ T28] audit: type=1400 audit(2000000004.940:488): avc: denied { mounton } for pid=1609 comm="syz.1.521" path="/98/file0/file0" dev="loop1" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 52.731600][ T1612] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.739634][ T1612] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.747758][ T314] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input14 [ 52.755452][ T1612] device bridge_slave_0 entered promiscuous mode [ 52.758043][ T296] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 52.766214][ T1612] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.782132][ T1612] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.782381][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.794899][ T1612] device bridge_slave_1 entered promiscuous mode [ 52.800032][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.815881][ T296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 52.829001][ T296] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 52.838102][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.846545][ T711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.857973][ T296] usb 1-1: config 0 descriptor?? [ 52.862765][ T711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.872527][ T711] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 52.881533][ T711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.890414][ T711] usb 4-1: config 0 descriptor?? [ 52.926530][ T1077] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 52.937226][ T1077] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.951536][ T1077] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 52.952080][ T1594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.962329][ T1077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.973702][ T1594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.994053][ T1612] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.000953][ T1612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.008129][ T1612] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.014886][ T1612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.038963][ T1002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.047181][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.054381][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.063829][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.072182][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.079145][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.097457][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.105431][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.112429][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.119599][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.127463][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.146318][ T1612] device veth0_vlan entered promiscuous mode [ 53.152653][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.161131][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.169143][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.176511][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.190945][ T1002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.196101][ T313] usb 5-1: USB disconnect, device number 12 [ 53.198997][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 53.212946][ T313] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 53.215009][ T1612] device veth1_macvtap entered promiscuous mode [ 53.234640][ T1002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.244705][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.266590][ T1077] usb 3-1: string descriptor 0 read error: -71 [ 53.273432][ T1077] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 53.299112][ T1077] usb 3-1: USB disconnect, device number 11 [ 53.327588][ T296] thrustmaster 0003:044F:B653.001C: unbalanced delimiter at end of report description [ 53.338968][ T390] device bridge_slave_1 left promiscuous mode [ 53.344899][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.352434][ T390] device bridge_slave_0 left promiscuous mode [ 53.353847][ T296] thrustmaster 0003:044F:B653.001C: parse failed [ 53.359360][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.364812][ T711] pyra 0003:1E7D:2CF6.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 53.382377][ T296] thrustmaster: probe of 0003:044F:B653.001C failed with error -22 [ 53.392191][ T390] device veth0_vlan left promiscuous mode [ 53.543889][ T296] usb 1-1: USB disconnect, device number 11 [ 53.641697][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.728634][ T28] audit: type=1400 audit(2000000006.110:489): avc: denied { connect } for pid=1645 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.748699][ T28] audit: type=1400 audit(2000000006.110:490): avc: denied { ioctl } for pid=1645 comm="syz.4.536" path="socket:[20975]" dev="sockfs" ino=20975 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.774192][ T28] audit: type=1400 audit(2000000006.140:491): avc: denied { read } for pid=1645 comm="syz.4.536" path="socket:[20975]" dev="sockfs" ino=20975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.016785][ T1668] Invalid ELF header magic: != ELF [ 54.019994][ T28] audit: type=1400 audit(2000000006.390:492): avc: denied { sys_module } for pid=1667 comm="syz.4.546" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.022627][ T711] pyra 0003:1E7D:2CF6.001D: couldn't init struct pyra_device [ 54.043673][ T28] audit: type=1400 audit(2000000006.400:493): avc: denied { module_load } for pid=1667 comm="syz.4.546" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 54.074893][ T711] pyra 0003:1E7D:2CF6.001D: couldn't install mouse [ 54.093965][ T711] pyra: probe of 0003:1E7D:2CF6.001D failed with error -71 [ 54.103230][ T711] usb 4-1: USB disconnect, device number 12 [ 54.206872][ T28] audit: type=1400 audit(2000000006.590:494): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.276581][ T1077] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 54.328378][ T1698] loop0: detected capacity change from 0 to 512 [ 54.348339][ T1698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.357619][ T1698] ext4 filesystem being mounted at /126/bus supports timestamps until 2038 (0x7fffffff) [ 54.391361][ T292] EXT4-fs (loop0): unmounting filesystem. [ 54.412722][ T1711] SELinux: Context Ü is not valid (left unmapped). [ 54.448713][ T1715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 54.516586][ T1077] usb 3-1: Using ep0 maxpacket: 8 [ 54.603352][ T1725] raw_sendmsg: syz.3.572 forgot to set AF_INET. Fix it! [ 54.647992][ T1077] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 54.656351][ T1077] usb 3-1: config 179 has no interface number 0 [ 54.662798][ T1077] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 54.674294][ T313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 54.682155][ T1077] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 54.693608][ T1077] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 54.704796][ T1077] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 54.716577][ T1077] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 54.730170][ T1077] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 54.739132][ T1077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.750728][ T1002] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 54.761133][ T1670] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.009592][ T1077] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 55.081116][ T313] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 55.091792][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.102515][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.112136][ T313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 55.125176][ T313] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 55.125312][ T1002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.134326][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.152664][ T1002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.159080][ T313] usb 5-1: config 0 descriptor?? [ 55.162419][ T1002] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 55.176036][ T1002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.184580][ T1002] usb 1-1: config 0 descriptor?? [ 55.198682][ T1670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.207093][ T1670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.422497][ T711] usb 3-1: USB disconnect, device number 12 [ 55.442278][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 55.450571][ T711] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 55.681338][ T313] thrustmaster 0003:044F:B653.001E: unbalanced delimiter at end of report description [ 55.691159][ T313] thrustmaster 0003:044F:B653.001E: parse failed [ 55.697315][ T313] thrustmaster: probe of 0003:044F:B653.001E failed with error -22 [ 55.731284][ T1642] Bluetooth: hci0: command 0x1003 tx timeout [ 55.731537][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.755529][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 55.897760][ T313] usb 5-1: USB disconnect, device number 13 [ 55.929031][ T1744] loop1: detected capacity change from 0 to 40427 [ 55.937096][ T1744] F2FS-fs (loop1): invalid crc value [ 55.943959][ T1744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 55.994610][ T1744] F2FS-fs (loop1): Start checkpoint disabled! [ 56.001368][ T1744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 56.023211][ T1753] loop2: detected capacity change from 0 to 512 [ 56.030209][ T1753] EXT4-fs: Ignoring removed bh option [ 56.039764][ T1753] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.584: inode #1: comm syz.2.584: iget: illegal inode # [ 56.052823][ T1753] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.584: error while reading EA inode 1 err=-117 [ 56.065477][ T1753] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.584: inode #1: comm syz.2.584: iget: illegal inode # [ 56.071981][ T10] kworker/u4:1: attempt to access beyond end of device [ 56.071981][ T10] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 56.078583][ T1753] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.584: error while reading EA inode 1 err=-117 [ 56.092744][ T10] kworker/u4:1: attempt to access beyond end of device [ 56.092744][ T10] loop1: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 56.104323][ T1753] EXT4-fs (loop2): 1 orphan inode deleted [ 56.123800][ T1753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.143377][ T1002] hid-led 0003:27B8:01ED.001F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 56.171822][ T1002] hid-led 0003:27B8:01ED.001F: ThingM blink(1) v1 initialized [ 56.179733][ T1054] EXT4-fs (loop2): unmounting filesystem. [ 56.206814][ T28] audit: type=1400 audit(2000000008.541:495): avc: denied { unlink } for pid=1755 comm="syz.2.586" name="#1" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.230549][ T1756] overlayfs: failed to set xattr on upper [ 56.257625][ T28] audit: type=1400 audit(2000000008.590:496): avc: denied { bind } for pid=1761 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.287251][ T28] audit: type=1400 audit(2000000008.590:497): avc: denied { write } for pid=1761 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.349871][ T313] usb 1-1: USB disconnect, device number 12 [ 56.586232][ T1077] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 56.694224][ T1803] loop1: detected capacity change from 0 to 8192 [ 56.756948][ T1808] loop1: detected capacity change from 0 to 512 [ 56.766790][ T1808] EXT4-fs (loop1): Test dummy encryption mode enabled [ 56.777599][ T1808] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.608: invalid block [ 56.788681][ T1808] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.608: couldn't read orphan inode 11 (err -117) [ 56.807163][ T1808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.845828][ T1612] EXT4-fs (loop1): unmounting filesystem. [ 56.883703][ T1823] loop1: detected capacity change from 0 to 512 [ 56.912185][ T1829] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 56.926271][ T1829] overlayfs: filesystem on './bus' not supported as upperdir [ 56.946120][ T1823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.956167][ T1823] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 56.983759][ T1823] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 57.008026][ T1077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.026333][ T1077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.038808][ T1077] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.052720][ T1612] EXT4-fs (loop1): unmounting filesystem. [ 57.059345][ T1077] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 57.068298][ T1077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.082579][ T1077] usb 3-1: config 0 descriptor?? [ 57.095654][ T1843] loop0: detected capacity change from 0 to 1024 [ 57.114251][ T1845] loop1: detected capacity change from 0 to 256 [ 57.128254][ T1843] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.144759][ T1845] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 57.158678][ T292] EXT4-fs (loop0): unmounting filesystem. [ 57.219961][ T1850] loop0: detected capacity change from 0 to 512 [ 57.232689][ T1850] EXT4-fs (loop0): Test dummy encryption mode enabled [ 57.254048][ T1850] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.625: invalid block [ 57.268624][ T1850] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.625: couldn't read orphan inode 11 (err -117) [ 57.284651][ T1855] loop1: detected capacity change from 0 to 512 [ 57.293368][ T1850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.302955][ T1855] EXT4-fs: Ignoring removed nobh option [ 57.313417][ T1855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.334317][ T292] EXT4-fs (loop0): unmounting filesystem. [ 57.342552][ T1855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.356678][ T1855] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 57.466766][ T1612] EXT4-fs (loop1): unmounting filesystem. [ 57.565312][ T1077] acrux 0003:1A34:0802.0020: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 57.594043][ T1077] acrux 0003:1A34:0802.0020: no inputs found [ 57.600124][ T1077] acrux 0003:1A34:0802.0020: Failed to enable force feedback support, error: -19 [ 57.773330][ T296] usb 3-1: USB disconnect, device number 13 [ 57.826204][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 57.826223][ T28] audit: type=1400 audit(2000000010.116:499): avc: denied { mount } for pid=1877 comm="syz.0.637" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.903047][ T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 57.909859][ T28] audit: type=1400 audit(2000000010.194:500): avc: denied { connect } for pid=1883 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.931322][ T28] audit: type=1400 audit(2000000010.223:501): avc: denied { read append } for pid=1883 comm="syz.0.640" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.956007][ T28] audit: type=1400 audit(2000000010.223:502): avc: denied { open } for pid=1883 comm="syz.0.640" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.037699][ T1893] loop0: detected capacity change from 0 to 512 [ 58.058399][ T1893] EXT4-fs: Ignoring removed oldalloc option [ 58.069058][ T1893] EXT4-fs (loop0): 1 orphan inode deleted [ 58.074630][ T1893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.083722][ T1893] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038 (0x7fffffff) [ 58.108824][ T28] audit: type=1400 audit(2000000010.399:503): avc: denied { mounton } for pid=1892 comm="syz.0.644" path="/150/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.134192][ T1893] incfs_lookup_dentry err:-2 [ 58.144899][ T292] ------------[ cut here ]------------ [ 58.150255][ T292] kernel BUG at fs/namei.c:2956! [ 58.155028][ T28] audit: type=1400 audit(2000000010.418:504): avc: denied { write } for pid=1892 comm="syz.0.644" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.177739][ T292] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 58.183628][ T292] CPU: 1 PID: 292 Comm: syz-executor Not tainted 6.1.99-syzkaller-00053-g5e1f4bb11f0d #0 [ 58.193261][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.203246][ T292] RIP: 0010:may_delete+0x6eb/0x6f0 [ 58.208501][ T292] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 ac 2a ac ff 0f 0b e8 a5 2a ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 91 2a ac ff 4c 8d [ 58.228190][ T292] RSP: 0018:ffffc9000b0f7bd8 EFLAGS: 00010293 [ 58.234090][ T292] RAX: ffffffff81c9789b RBX: ffff888110c48ad0 RCX: ffff88811dcdbcc0 [ 58.241902][ T292] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 58.249711][ T292] RBP: ffffc9000b0f7c40 R08: ffffffff81c9722f R09: 0000000000000003 [ 58.257527][ T292] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881324ceaa0 [ 58.265335][ T292] R13: 1ffff11026499d54 R14: ffff88810bedd730 R15: dffffc0000000000 [ 58.273147][ T292] FS: 0000555556dc3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.282222][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.288631][ T292] CR2: 0000555556dee528 CR3: 000000012be94000 CR4: 00000000003506a0 [ 58.296452][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.304341][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.312401][ T292] Call Trace: [ 58.315519][ T292] [ 58.318295][ T292] ? __die_body+0x62/0xb0 [ 58.322461][ T292] ? die+0x88/0xb0 [ 58.326022][ T292] ? do_trap+0x103/0x330 [ 58.330105][ T292] ? may_delete+0x6eb/0x6f0 [ 58.334531][ T292] ? handle_invalid_op+0x95/0xc0 [ 58.339311][ T292] ? may_delete+0x6eb/0x6f0 [ 58.343657][ T292] ? exc_invalid_op+0x32/0x50 [ 58.348251][ T292] ? asm_exc_invalid_op+0x1b/0x20 [ 58.353247][ T292] ? may_delete+0x7f/0x6f0 [ 58.357499][ T292] ? may_delete+0x6eb/0x6f0 [ 58.361841][ T292] ? may_delete+0x6eb/0x6f0 [ 58.366181][ T292] ? may_delete+0x6eb/0x6f0 [ 58.370524][ T292] vfs_rmdir+0x32/0x500 [ 58.374510][ T292] ? generic_shutdown_super+0x2b8/0x370 [ 58.379898][ T292] incfs_kill_sb+0x113/0x230 [ 58.384323][ T292] deactivate_locked_super+0xad/0x110 [ 58.389737][ T292] deactivate_super+0xbe/0xf0 [ 58.394249][ T292] cleanup_mnt+0x485/0x510 [ 58.398490][ T292] ? user_path_at_empty+0x14e/0x1a0 [ 58.403526][ T292] __cleanup_mnt+0x19/0x20 [ 58.407776][ T292] task_work_run+0x24d/0x2e0 [ 58.412222][ T292] ? task_work_cancel+0x2b0/0x2b0 [ 58.417159][ T292] ? __x64_sys_umount+0x122/0x170 [ 58.422009][ T292] exit_to_user_mode_loop+0x94/0xa0 [ 58.427049][ T292] exit_to_user_mode_prepare+0x5a/0xa0 [ 58.432339][ T292] syscall_exit_to_user_mode+0x26/0x130 [ 58.436055][ T28] audit: type=1400 audit(2000000010.418:505): avc: denied { setattr } for pid=1892 comm="syz.0.644" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.438202][ T292] do_syscall_64+0x47/0xb0 [ 58.438236][ T292] ? clear_bhb_loop+0x55/0xb0 [ 58.469125][ T292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.474942][ T292] RIP: 0033:0x7fe29497f327 [ 58.479191][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 58.488935][ T28] audit: type=1400 audit(2000000010.428:506): avc: denied { rmdir } for pid=292 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.498722][ T292] RSP: 002b:00007fff5560d3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 58.498750][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe29497f327 [ 58.498764][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5560d4b0 [ 58.498777][ T292] RBP: 00007fff5560d4b0 R08: 0000000000000000 R09: 0000000000000000 [ 58.498790][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5560e5a0 [ 58.498803][ T292] R13: 00007fe2949f0134 R14: 000000000000e23c R15: 00007fff5560f660 [ 58.498825][ T292] [ 58.498831][ T292] Modules linked in: [ 58.522412][ T292] ---[ end trace 0000000000000000 ]--- [ 58.529790][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.553740][ T292] RIP: 0010:may_delete+0x6eb/0x6f0 [ 58.589856][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.617911][ T292] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 ac 2a ac ff 0f 0b e8 a5 2a ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 91 2a ac ff 4c 8d [ 58.630958][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.637887][ T292] RSP: 0018:ffffc9000b0f7bd8 EFLAGS: 00010293 [ 58.652870][ T292] RAX: ffffffff81c9789b RBX: ffff888110c48ad0 RCX: ffff88811dcdbcc0 [ 58.652904][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.660735][ T292] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 58.677154][ T292] RBP: ffffc9000b0f7c40 R08: ffffffff81c9722f R09: 0000000000000003 [ 58.685158][ T292] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881324ceaa0 [ 58.693406][ T19] usb 2-1: config 0 descriptor?? [ 58.693587][ T292] R13: 1ffff11026499d54 R14: ffff88810bedd730 R15: dffffc0000000000 [ 58.706994][ T292] FS: 0000555556dc3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.716096][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.722615][ T292] CR2: 00007fdc09508178 CR3: 000000012be94000 CR4: 00000000003506a0 [ 58.730758][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.738843][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.746810][ T292] Kernel panic - not syncing: Fatal exception [ 58.752958][ T292] Kernel Offset: disabled [ 58.757086][ T292] Rebooting in 86400 seconds..