last executing test programs: 5.459344444s ago: executing program 1 (id=557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f57005"]) 5.387221782s ago: executing program 1 (id=560): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x93, 0x8, 0x5, 0x3, 0x3, 0x7, 0x6}}}, 0x0) 5.338442118s ago: executing program 0 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 4.892165529s ago: executing program 0 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 4.154658783s ago: executing program 0 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 3.66126716s ago: executing program 0 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 3.154884598s ago: executing program 1 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000180), 0x0}, 0x20) 3.129761841s ago: executing program 1 (id=572): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x22000d5, &(0x7f0000000580)={[{@noblock_validity}, {@noquota}]}, 0xfe, 0x236, &(0x7f0000000300)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 3.038623561s ago: executing program 1 (id=573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100007f0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00220500000000000000c6"], 0x0}, 0x0) 2.485981995s ago: executing program 0 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 1.3985586s ago: executing program 2 (id=578): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.341756306s ago: executing program 0 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 644.789946ms ago: executing program 1 (id=579): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000080000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x8, "8200279ea9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 644.343726ms ago: executing program 2 (id=580): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) unshare(0x62040200) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 643.531496ms ago: executing program 3 (id=581): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 626.033368ms ago: executing program 3 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x612, &(0x7f0000000740)="$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") 450.894518ms ago: executing program 2 (id=587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)={0x14, 0x15, 0x501, 0x0, 0x0, {0xa, 0x2}}, 0x14}}, 0x0) 431.81065ms ago: executing program 2 (id=589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}}, 0x0) 423.118971ms ago: executing program 4 (id=590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 412.310563ms ago: executing program 2 (id=591): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60400) fstat(r0, &(0x7f0000000300)) 398.142434ms ago: executing program 4 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 365.365778ms ago: executing program 3 (id=593): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 356.632049ms ago: executing program 4 (id=594): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0xffffffffffffffff) sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r0]}}], 0x20}, 0x1001) close_range(r0, 0xffffffffffffffff, 0x0) 347.67977ms ago: executing program 4 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 312.305294ms ago: executing program 3 (id=596): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 285.777757ms ago: executing program 3 (id=597): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000000b40)={0x800080, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) 250.740841ms ago: executing program 4 (id=598): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000002e00)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d9, &(0x7f0000002e80)="$eJzs3c9rHG0dAPDvTLJvf+U1edVDLdgWW0mLdjdpbBs81ApiTwVrvdeYbELIJhuym7YJRVK8K4io4MmTF8E/QJD+CSIU9eZBqiiirR48qCs7O1vbuNtEut2pyecD03meeXb3+30admaemYedAA6tsxFxIyJGIuJiRIzn29N8udluv9153fNnD+fbSxKt1p0/J5Hk27qfleTrExGxExFHI+LLNyO+lvx33MbW9spcrVbdyOuV5up6pbG1fWl5dW6pulRdm5mZvjp7bfbK7NRA+jkREde/8PvvfutHX7z+s0/f/+3dP174ejutsbz95X4MUqfrpez/oms0IjbeRrACjOTrUp/2b44MMRkAAPbUPsf/cER8Ijv/H4+R7OwUAAAAOEhanxuLfyQRLQAAAODASrM5sElazucCjEWalsudObwfjeNprd5ofmqxvrm20JkrOxGldHG5Vp3K5wpPRClp16fzObbd+uVd9ZmI+CAivjN+LKuX5+u1haIvfgAAAMAhcWLX+P9v49n4/0jReQEAAAADNlF0AgAAAMBbZ/wPAAAAB5/xPwAAABxoX7p1q720us+/Xri3tblSv3dpodpYKa9uzpfn6xvr5aV6fSn7zb7VvT6vVq+vfybWNh9UmtVGs9LY2r67Wt9ca95dfuUR2AAAAMAQfXDm8a+TiNj57LFsaXuv6KSAoUj2aM8eEvI0r/xuCAkBQzNSdAJAYUaLTgAoTKnoBIDC7XUdoO/knZ8PPhcAAODtmPxY//v/rg3AwZYWnQAAMHTu/8PhVXp1BuCV4jIBivKhPdrf/P5/q/U/JQQAAAzcWLYkaTm/FzgWaVouR7yfPRaglCwu16pT+fjgV+OlI+36dPbOZM85wwAAAAAAAAAAAAAAAAAAAAAAAABAR6uVRKvV+s0vWwAAAMBBFZH+Icl+zT9icvz82O7rA+8lfx/P1hFx/wd3vvdgrtncmG5v/8uL7c3v59svF3EFAwAAANitO07vjuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJCeP3s4312GGfdPn4+IiZ7xzxzNVkejFBHH/5rE6EvvSyJiZADxdx5FxMle8ZN2WjERnSx6xT9WYPw0Ik4MID4cZo/b+58bvb5/aZzN1r2/f6P58qb67//S6O7/Rvrsf97fZ4xTT35S6Rv/UcSp0d77n278pE/8c/uM/9WvbG/3a2v9MGKy5/EneSVWpbm6XmlsbV9aXp1bqi5V12Zmpq/OXpu9MjtVWVyuVfN/e8b49sd/+q/X9f94n/gTe/T//D77/88nD559pFMs9Yp/4Vzv4+/JPvHT/Nj3ybzcbp/slnc65Zed/vEvTr+u/wt9+v/i79/jQNuOeWGf/b94+xtP9/lSAGAIGlvbK3O1WnXj/7GQxjuRhsJACkfejTQUOoWi90wAAMCg/eekv+hMAAAAAAAAAAAAAAAAAAAA4PAaxs+J7QqZFNRVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDX+ncAAAD//zaO2LQ=") mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x20, 0x0) rmdir(&(0x7f0000000100)='./file2\x00') unlink(&(0x7f0000000080)='./file0/file0\x00') 235.729103ms ago: executing program 2 (id=599): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) write$binfmt_aout(r0, &(0x7f00000034c0)=ANY=[], 0x28) 203.312557ms ago: executing program 3 (id=600): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x10, 0x6, 0xcc03) 0s ago: executing program 4 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ff000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x6) sendmmsg$inet(r2, &(0x7f0000002280)=[{{&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_tos_int={{0x18, 0x0, 0x34}}], 0x18}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 937b17dff9 code=0x7ffc0000 [ 24.576952][ T441] loop3: detected capacity change from 0 to 1024 [ 24.583394][ T441] EXT4-fs: Ignoring removed nobh option [ 24.589530][ T441] EXT4-fs: Ignoring removed orlov option [ 24.595032][ T441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 24.624375][ T441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 24.739925][ T440] loop1: detected capacity change from 0 to 40427 [ 24.746735][ T440] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 24.754435][ T440] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 24.781093][ T294] EXT4-fs (loop3): unmounting filesystem. [ 24.787456][ T440] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.797762][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 24.814662][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 24.832169][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 24.846765][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 24.861065][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 24.872112][ T60] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 24.879978][ T440] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 24.887934][ T60] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 24.900275][ T440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.965952][ T471] Illegal XDP return value 3458740725 on prog (id 26) dev N/A, expect packet loss! [ 25.087342][ T60] usb 1-1: USB disconnect, device number 2 [ 25.254689][ T504] tmpfs: Unknown parameter 'd' [ 25.368708][ T481] loop2: detected capacity change from 0 to 40427 [ 25.386546][ T481] F2FS-fs (loop2): invalid crc value [ 25.396244][ T481] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.453818][ T481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.506553][ T293] syz-executor: attempt to access beyond end of device [ 25.506553][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 25.524417][ T532] loop3: detected capacity change from 0 to 4096 [ 25.526944][ T496] loop1: detected capacity change from 0 to 40427 [ 25.541006][ T496] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 25.551167][ T496] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 25.562184][ T496] F2FS-fs (loop1): invalid crc value [ 25.565739][ T532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.600089][ T532] process 'syz.3.82' launched './file0' with NULL argv: empty string added [ 25.601315][ T496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.621982][ T532] fs-verity: sha256 using implementation "sha256-avx2" [ 25.645472][ T532] fs-verity (loop3, inode 13): Error -27 writing Merkle tree block 2160165643 [ 25.648226][ T539] loop0: detected capacity change from 0 to 128 [ 25.660679][ T532] fs-verity (loop3, inode 13): Error -27 building Merkle tree [ 25.668309][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 25.697425][ T539] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 25.711543][ T294] EXT4-fs (loop3): unmounting filesystem. [ 25.717803][ T496] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 25.724650][ T496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 25.750318][ T539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.765299][ T539] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.85: checksumming directory block 0 [ 25.777990][ T341] kworker/u4:4: attempt to access beyond end of device [ 25.777990][ T341] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 25.811068][ T295] EXT4-fs (loop0): unmounting filesystem. [ 25.916747][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 25.937605][ T567] loop3: detected capacity change from 0 to 128 [ 25.945425][ T567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 25.953899][ T567] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 26.002788][ T294] EXT4-fs (loop3): unmounting filesystem. [ 26.046724][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.054205][ T576] loop1: detected capacity change from 0 to 2048 [ 26.066811][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.068364][ T576] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.086451][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 26.119229][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 26.134731][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.144945][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.162883][ T291] EXT4-fs (loop1): unmounting filesystem. [ 26.177081][ T520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 26.197090][ T19] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 26.297742][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 26.304673][ T605] loop0: detected capacity change from 0 to 256 [ 26.382166][ T609] loop1: detected capacity change from 0 to 256 [ 26.395935][ T609] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 26.416918][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.437530][ T19] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 26.447558][ T19] usb 5-1: USB disconnect, device number 3 [ 26.458635][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.472637][ T611] loop0: detected capacity change from 0 to 512 [ 26.475485][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 26.479757][ T598] loop3: detected capacity change from 0 to 40427 [ 26.494838][ T598] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 26.501288][ T598] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 26.507591][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.522544][ T24] usb 3-1: config 0 descriptor?? [ 26.529126][ T598] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 26.545422][ T326] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 26.562416][ T619] can0: slcan on ptm0. [ 26.570770][ T598] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 26.581794][ T598] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.609527][ T598] syz.3.107: attempt to access beyond end of device [ 26.609527][ T598] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 26.693191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 26.856908][ T60] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.978972][ T651] loop4: detected capacity change from 0 to 512 [ 26.994714][ T651] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.009277][ T651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 27.023878][ T651] EXT4-fs (loop4): 1 orphan inode deleted [ 27.027632][ T24] lenovo 0003:17EF:6009.0003: global environment stack underflow [ 27.029920][ T651] EXT4-fs (loop4): 1 truncate cleaned up [ 27.042499][ T651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.046810][ T24] lenovo 0003:17EF:6009.0003: item 0 4 1 11 parsing failed [ 27.066501][ T24] lenovo 0003:17EF:6009.0003: hid_parse failed [ 27.074287][ T292] EXT4-fs (loop4): unmounting filesystem. [ 27.080351][ T24] lenovo: probe of 0003:17EF:6009.0003 failed with error -22 [ 27.096898][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 27.143993][ T639] loop0: detected capacity change from 0 to 131072 [ 27.151414][ T639] F2FS-fs (loop0): Test dummy encryption mode enabled [ 27.158928][ T639] F2FS-fs (loop0): invalid crc value [ 27.165372][ T639] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.189058][ T639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.209475][ T639] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 27.219975][ T639] fscrypt: AES-256-XTS using blk-crypto-fallback [ 27.226787][ T60] usb 2-1: config 0 has no interfaces? [ 27.242109][ T295] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 27.261275][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.265071][ T39] usb 3-1: USB disconnect, device number 3 [ 27.376787][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 27.396841][ T60] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 27.405864][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.414138][ T60] usb 2-1: Product: syz [ 27.419329][ T60] usb 2-1: Manufacturer: syz [ 27.423757][ T60] usb 2-1: SerialNumber: syz [ 27.429080][ T60] usb 2-1: config 0 descriptor?? [ 27.455678][ T295] syz-executor (295) used greatest stack depth: 21232 bytes left [ 27.536795][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 27.550867][ T668] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.557957][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.565057][ T668] device bridge_slave_0 entered promiscuous mode [ 27.571836][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.579026][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.586119][ T668] device bridge_slave_1 entered promiscuous mode [ 27.623012][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.629891][ T668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.636985][ T668] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.643741][ T668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.662485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.670462][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.672438][ T311] usb 2-1: USB disconnect, device number 3 [ 27.683232][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.683294][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.694341][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.710993][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.723664][ T19] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 27.732658][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.742594][ T19] usb 4-1: config 0 descriptor?? [ 27.747504][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.758368][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.767997][ T619] can0 (unregistered): slcan off ptm0. [ 27.767995][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 27.768019][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.790471][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.799906][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.806796][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.807576][ T6] usb 5-1: config 0 descriptor?? [ 27.832701][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.840552][ T687] syz.2.130[687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.840635][ T687] syz.2.130[687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.854203][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.872047][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.879675][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.887851][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.905917][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.914418][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.922985][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.930898][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.939300][ T668] device veth0_vlan entered promiscuous mode [ 27.948842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.956122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.971771][ T668] device veth1_macvtap entered promiscuous mode [ 27.978308][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.986282][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.995360][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.015269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.024587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.046595][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.054775][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.247969][ T19] wacom 0003:056A:0022.0004: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 28.257705][ T19] wacom 0003:056A:0022.0004: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.3-1/input0 [ 28.269120][ T19] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0022.0004/input/input6 [ 28.321718][ T723] Bluetooth: hci0: sending frame failed (-49) [ 28.326773][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.327740][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 28.395614][ T728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 28.404401][ T728] device bridge_slave_1 left promiscuous mode [ 28.410507][ T728] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.418200][ T728] device bridge_slave_0 left promiscuous mode [ 28.424168][ T728] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.436786][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.455480][ T311] usb 4-1: USB disconnect, device number 3 [ 28.538192][ T732] loop1: detected capacity change from 0 to 512 [ 28.548745][ T732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 28.557624][ T732] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 28.566829][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 28.578260][ T291] EXT4-fs (loop1): unmounting filesystem. [ 28.597485][ T736] loop1: detected capacity change from 0 to 2048 [ 28.617899][ T736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.635814][ T291] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.650687][ T291] EXT4-fs (loop1): Remounting filesystem read-only [ 28.658400][ T291] EXT4-fs (loop1): unmounting filesystem. [ 28.686812][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.697716][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.707301][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 28.716086][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.724982][ T24] usb 1-1: config 0 descriptor?? [ 28.796802][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.807855][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.817731][ T60] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 28.829023][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.841772][ T60] usb 3-1: config 0 descriptor?? [ 28.867507][ T8] device bridge_slave_1 left promiscuous mode [ 28.873513][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.881052][ T8] device bridge_slave_0 left promiscuous mode [ 28.887205][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.894767][ T8] device veth1_macvtap left promiscuous mode [ 28.900827][ T8] device veth0_vlan left promiscuous mode [ 28.936877][ T6] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 28.945559][ T6] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 28.953539][ T6] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 28.961643][ T6] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 28.974231][ T6] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 28.984640][ T6] usb 5-1: USB disconnect, device number 4 [ 29.126771][ T315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.207799][ T24] kone 0003:1E7D:2CED.0006: collection stack underflow [ 29.214486][ T24] kone 0003:1E7D:2CED.0006: item 0 1 0 12 parsing failed [ 29.221621][ T24] kone 0003:1E7D:2CED.0006: parse failed [ 29.227096][ T24] kone: probe of 0003:1E7D:2CED.0006 failed with error -22 [ 29.327497][ T60] pantherlord 0003:0F30:0111.0007: item fetching failed at offset 6/7 [ 29.335634][ T60] pantherlord 0003:0F30:0111.0007: parse failed [ 29.342008][ T60] pantherlord: probe of 0003:0F30:0111.0007 failed with error -22 [ 29.366750][ T315] usb 2-1: Using ep0 maxpacket: 8 [ 29.427004][ T311] usb 1-1: USB disconnect, device number 3 [ 29.547021][ T6] usb 3-1: USB disconnect, device number 4 [ 29.566798][ T315] usb 2-1: config 238 has an invalid interface number: 189 but max is 0 [ 29.575011][ T315] usb 2-1: config 238 has no interface number 0 [ 29.581101][ T315] usb 2-1: config 238 interface 189 has no altsetting 0 [ 29.736791][ T60] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 29.747062][ T315] usb 2-1: New USB device found, idVendor=fff0, idProduct=0100, bcdDevice=cd.61 [ 29.755924][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.763841][ T315] usb 2-1: Product: syz [ 29.767850][ T315] usb 2-1: Manufacturer: syz [ 29.772232][ T315] usb 2-1: SerialNumber: syz [ 29.844792][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 29.844807][ T28] audit: type=1400 audit(1729734065.536:246): avc: denied { ioctl } for pid=765 comm="syz.3.153" path="socket:[16905]" dev="sockfs" ino=16905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.884452][ T28] audit: type=1400 audit(1729734065.576:247): avc: denied { relabelfrom } for pid=767 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 29.904307][ T28] audit: type=1400 audit(1729734065.576:248): avc: denied { relabelto } for pid=767 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 29.980522][ T774] loop3: detected capacity change from 0 to 512 [ 29.986949][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 29.990078][ T774] EXT4-fs: Ignoring removed i_version option [ 30.004793][ T774] EXT4-fs (loop3): orphan cleanup on readonly fs [ 30.011095][ T774] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.157: bad orphan inode 1 [ 30.021052][ T774] EXT4-fs (loop3): Remounting filesystem read-only [ 30.027585][ T774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.041474][ T28] audit: type=1400 audit(1729734065.736:249): avc: denied { mounton } for pid=773 comm="syz.3.157" path="/45/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.042710][ T774] EXT4-fs error (device loop3): __ext4_remount:6412: comm syz.3.157: Abort forced by user [ 30.093122][ T294] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /45/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0 [ 30.118337][ T315] usb 2-1: USB disconnect, device number 4 [ 30.125093][ T294] EXT4-fs error (device loop3): ext4_lookup:1855: inode #16: comm syz-executor: iget: bad extra_isize 2080 (inode size 256) [ 30.138309][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 30.152629][ T294] EXT4-fs error (device loop3): ext4_lookup:1855: inode #16: comm syz-executor: iget: bad extra_isize 2080 (inode size 256) [ 30.169955][ T60] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 30.181958][ T60] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 30.195475][ T60] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 30.209707][ T60] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 30.219395][ T60] usb 5-1: config 1 interface 0 has no altsetting 0 [ 30.225832][ T60] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 30.234720][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.244644][ T294] EXT4-fs (loop3): unmounting filesystem. [ 30.277178][ T60] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 30.284102][ T313] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.340419][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.347326][ T789] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.354444][ T789] device bridge_slave_0 entered promiscuous mode [ 30.364227][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.371272][ T789] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.379346][ T789] device bridge_slave_1 entered promiscuous mode [ 30.409055][ T28] audit: type=1400 audit(1729734066.106:250): avc: denied { mount } for pid=795 comm="syz.2.166" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.431215][ T28] audit: type=1400 audit(1729734066.106:251): avc: denied { remount } for pid=795 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.450975][ T28] audit: type=1400 audit(1729734066.106:252): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.494471][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.501355][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.507387][ T60] scsi host1: usb-storage 5-1:1.0 [ 30.508436][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.520075][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.520802][ T326] udevd[326]: setting mode of /dev/bus/usb/005/005 to 020664 failed: Read-only file system [ 30.546779][ T326] udevd[326]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: Read-only file system [ 30.551605][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.562555][ T326] udevd[326]: symlink '../bus/usb/005/005' '/dev/char/189:516.tmp-c189:516' failed: Read-only file system [ 30.575579][ T694] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.583202][ T694] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.599336][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.607303][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.614131][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.621522][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.629926][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.636790][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.643926][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.651949][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.656760][ T313] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 30.670811][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.682421][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.682565][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.692083][ T313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 30.692120][ T313] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 30.692141][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.700897][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.722844][ T313] usb 1-1: config 0 descriptor?? [ 30.730058][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.747117][ T60] usb 5-1: USB disconnect, device number 5 [ 30.755362][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.762666][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.770724][ T789] device veth0_vlan entered promiscuous mode [ 30.781685][ T326] udevd[326]: symlink '../bus/usb/005/005' '/dev/char/189:516.tmp-c189:516' failed: Read-only file system [ 30.786170][ T789] device veth1_macvtap entered promiscuous mode [ 30.800221][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.810842][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.820970][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.828851][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.836381][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.860779][ T28] audit: type=1326 audit(1729734066.556:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=802 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1c17dff9 code=0x7ffc0000 [ 30.886626][ T28] audit: type=1326 audit(1729734066.556:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=802 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fab1c17dff9 code=0x7ffc0000 [ 30.910011][ T28] audit: type=1326 audit(1729734066.556:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=802 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1c17dff9 code=0x7ffc0000 [ 30.949278][ T809] loop3: detected capacity change from 0 to 16 [ 30.957026][ T809] erofs: (device loop3): mounted with root inode @ nid 36. [ 30.959738][ T326] udevd[326]: symlink '../../loop3' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 31.016192][ T810] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 31.025627][ T810] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 31.038340][ T810] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 31.097688][ T341] device bridge_slave_1 left promiscuous mode [ 31.103662][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.111223][ T341] device bridge_slave_0 left promiscuous mode [ 31.117267][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.125164][ T341] device veth1_macvtap left promiscuous mode [ 31.131235][ T341] device veth0_vlan left promiscuous mode [ 31.146840][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.157115][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.216915][ T313] hid (null): invalid report_size 43000 [ 31.223280][ T313] nintendo 0003:057E:2009.0008: invalid report_size 43000 [ 31.226859][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.230421][ T313] nintendo 0003:057E:2009.0008: item 0 4 1 7 parsing failed [ 31.241222][ T6] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.248321][ T313] nintendo 0003:057E:2009.0008: HID parse failed [ 31.263341][ T313] nintendo 0003:057E:2009.0008: probe - fail = -22 [ 31.263356][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.273111][ T313] nintendo: probe of 0003:057E:2009.0008 failed with error -22 [ 31.279336][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.294648][ T19] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 31.304038][ T6] usb 3-1: SerialNumber: syz [ 31.309084][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.318233][ T19] usb 2-1: config 0 descriptor?? [ 31.436765][ T313] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.449128][ T694] usb 1-1: USB disconnect, device number 4 [ 31.597491][ T6] usb 3-1: 0:2 : does not exist [ 31.605050][ T6] usb 3-1: USB disconnect, device number 5 [ 31.796889][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.807649][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.817649][ T313] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 31.826545][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.827529][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.837848][ T313] usb 4-1: config 0 descriptor?? [ 31.850170][ T323] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 32.217364][ T19] hid-led: probe of 0003:27B8:01ED.0009 failed with error -71 [ 32.226387][ T19] usb 2-1: USB disconnect, device number 5 [ 32.246786][ T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.256801][ T323] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.267974][ T323] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.277842][ T323] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 32.286699][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.337468][ T313] pantherlord 0003:0F30:0111.000A: item fetching failed at offset 6/7 [ 32.345547][ T313] pantherlord 0003:0F30:0111.000A: parse failed [ 32.351598][ T313] pantherlord: probe of 0003:0F30:0111.000A failed with error -22 [ 32.446825][ T694] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.496758][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 32.549536][ T19] usb 4-1: USB disconnect, device number 4 [ 32.617129][ T311] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.625040][ T311] usb 1-1: config 0 has no interface number 0 [ 32.686809][ T694] usb 3-1: Using ep0 maxpacket: 16 [ 32.718883][ T840] loop1: detected capacity change from 0 to 256 [ 32.758667][ T323] logitech-hidpp-device 0003:046D:C086.000B: item fetching failed at offset 2/5 [ 32.768090][ T323] logitech-hidpp-device 0003:046D:C086.000B: hidpp_probe:parse failed [ 32.776092][ T323] logitech-hidpp-device: probe of 0003:046D:C086.000B failed with error -22 [ 32.787009][ T311] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.796770][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.804576][ T311] usb 1-1: Product: syz [ 32.808753][ T694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.819545][ T311] usb 1-1: Manufacturer: syz [ 32.823964][ T311] usb 1-1: SerialNumber: syz [ 32.828476][ T694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.838618][ T311] usb 1-1: config 0 descriptor?? [ 32.843448][ T694] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.856054][ T694] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 32.865783][ T694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.874096][ T694] usb 3-1: config 0 descriptor?? [ 32.879203][ T311] smsc95xx v2.0.0 [ 32.963389][ T323] usb 5-1: USB disconnect, device number 6 [ 33.126750][ T313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.162764][ T861] loop3: detected capacity change from 0 to 128 [ 33.173436][ T316] udevd[316]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 33.185733][ T316] udevd[316]: symlink '../../loop3' '/dev/disk/by-uuid/8AF2-64A5.tmp-b7:3' failed: Read-only file system [ 33.229675][ T869] loop3: detected capacity change from 0 to 128 [ 33.258950][ T316] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.291055][ T875] loop3: detected capacity change from 0 to 512 [ 33.297605][ T875] EXT4-fs: Ignoring removed nobh option [ 33.302233][ T316] udevd[316]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 33.303290][ T875] journal_path: Lookup failure for './bus' [ 33.320421][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 33.320988][ T875] EXT4-fs: error: could not find journal device path [ 33.331459][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.357384][ T694] ryos 0003:1E7D:31CE.000C: ignoring exceeding usage max [ 33.364992][ T694] ryos 0003:1E7D:31CE.000C: ignoring exceeding usage max [ 33.371966][ T694] ryos 0003:1E7D:31CE.000C: usage index exceeded [ 33.378151][ T694] ryos 0003:1E7D:31CE.000C: item 0 0 2 2 parsing failed [ 33.384969][ T694] ryos 0003:1E7D:31CE.000C: parse failed [ 33.392486][ T694] ryos: probe of 0003:1E7D:31CE.000C failed with error -22 [ 33.396733][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 33.537341][ T313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.563238][ T694] usb 3-1: USB disconnect, device number 6 [ 33.756764][ T313] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 33.765661][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.773601][ T313] usb 2-1: Product: syz [ 33.778040][ T313] usb 2-1: Manufacturer: syz [ 33.782428][ T313] usb 2-1: SerialNumber: syz [ 33.790229][ T313] usb 2-1: config 0 descriptor?? [ 33.816782][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 33.827630][ T311] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 33.839367][ T311] usb 1-1: USB disconnect, device number 5 [ 33.946911][ T60] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.097625][ T915] loop2: detected capacity change from 0 to 16 [ 34.104150][ T915] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.109242][ T326] udevd[326]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 34.137080][ T917] loop2: detected capacity change from 0 to 512 [ 34.147455][ T917] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 34.155565][ T917] EXT4-fs (loop2): invalid journal inode [ 34.161184][ T917] EXT4-fs (loop2): can't get journal size [ 34.168039][ T917] EXT4-fs (loop2): 1 truncate cleaned up [ 34.173500][ T917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.181859][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 34.194433][ T293] EXT4-fs (loop2): unmounting filesystem. [ 34.207613][ T921] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.214644][ T921] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.326849][ T313] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 34.333116][ T60] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 34.343034][ T313] usb 2-1: No valid video chain found. [ 34.348708][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 34.365537][ T313] usb 2-1: USB disconnect, device number 6 [ 34.415775][ T927] loop2: detected capacity change from 0 to 40427 [ 34.424802][ T927] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 34.432981][ T927] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.446523][ T927] F2FS-fs (loop2): invalid crc value [ 34.453162][ T927] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.456796][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.481816][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 34.492062][ T60] usb 4-1: SerialNumber: syz [ 34.497886][ T927] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.505151][ T927] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.526841][ T880] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.538852][ T938] capability: warning: `syz.0.226' uses deprecated v2 capabilities in a way that may be insecure [ 34.550246][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 34.560002][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 34.570316][ T938] printk: syz.0.226 (938): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 34.581653][ T24] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 34.589841][ T24] usb 5-1: config 0 has no interface number 0 [ 34.596050][ T24] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.612389][ T24] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.622238][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 34.631189][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.642911][ T24] usb 5-1: config 0 descriptor?? [ 34.776883][ T60] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 34.788668][ T60] usb 4-1: USB disconnect, device number 5 [ 34.826959][ T951] loop1: detected capacity change from 0 to 512 [ 34.841937][ T951] EXT4-fs (loop1): Test dummy encryption mode enabled [ 34.867973][ T951] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.232: inline data xattr refers to an external xattr inode [ 34.882956][ T951] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.232: couldn't read orphan inode 12 (err -117) [ 34.905869][ T951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.937727][ T951] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 34.966149][ T291] EXT4-fs (loop1): unmounting filesystem. [ 35.032993][ T949] loop2: detected capacity change from 0 to 40427 [ 35.052126][ T949] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 35.062207][ T949] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.074149][ T949] F2FS-fs (loop2): invalid crc value [ 35.083340][ T949] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.106750][ T949] F2FS-fs (loop2): Start checkpoint disabled! [ 35.113707][ T949] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.120616][ T949] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 35.128062][ T24] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 35.144035][ T24] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 35.156372][ T24] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 35.157127][ T949] syz.2.231: attempt to access beyond end of device [ 35.157127][ T949] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 35.164896][ T24] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 35.193725][ T24] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 35.202315][ T24] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 35.202820][ T949] syz.2.231: attempt to access beyond end of device [ 35.202820][ T949] loop2: rw=0, sector=53376, nr_sectors = 8 limit=40427 [ 35.210741][ T24] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0 [ 35.244440][ T24] logitech-djreceiver 0003:046D:C71B.000D: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input32 [ 35.279280][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 35.279295][ T28] audit: type=1400 audit(1729734326.980:279): avc: denied { map } for pid=972 comm="syz.3.241" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.309470][ T43] kworker/u4:2: attempt to access beyond end of device [ 35.309470][ T43] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 35.315370][ T28] audit: type=1400 audit(1729734326.980:280): avc: denied { execute } for pid=972 comm="syz.3.241" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.356735][ T311] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.435248][ T24] usb 5-1: USB disconnect, device number 7 [ 35.453088][ T28] audit: type=1400 audit(1729734327.150:281): avc: denied { ioctl } for pid=986 comm="syz.2.239" path="socket:[18326]" dev="sockfs" ino=18326 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.502022][ T28] audit: type=1400 audit(1729734327.150:282): avc: denied { bind } for pid=986 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.525567][ T28] audit: type=1400 audit(1729734327.220:283): avc: denied { read } for pid=991 comm="syz.2.248" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.549585][ T28] audit: type=1400 audit(1729734327.220:284): avc: denied { open } for pid=991 comm="syz.2.248" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.596793][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 35.639393][ T1009] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 35.652473][ T1011] loop3: detected capacity change from 0 to 256 [ 35.680659][ T28] audit: type=1400 audit(1729734327.380:285): avc: denied { create } for pid=1010 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.687439][ T1011] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 35.736854][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.748174][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.762142][ T311] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 35.771370][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.781043][ T311] usb 2-1: config 0 descriptor?? [ 35.977829][ T1031] loop4: detected capacity change from 0 to 512 [ 35.989376][ T1031] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.267: inode #1: comm syz.4.267: iget: illegal inode # [ 35.989703][ T327] udevd[327]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 36.002255][ T1031] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.267: error while reading EA inode 1 err=-117 [ 36.025158][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.027071][ T1031] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.045527][ T1031] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.267: inode #1: comm syz.4.267: iget: illegal inode # [ 36.058837][ T1031] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.267: error while reading EA inode 1 err=-117 [ 36.071468][ T1031] EXT4-fs (loop4): 1 orphan inode deleted [ 36.077180][ T1031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.085970][ T28] audit: type=1400 audit(1729734327.780:286): avc: denied { mount } for pid=1030 comm="syz.4.267" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.090123][ T327] udevd[327]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 36.107348][ T60] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.125639][ T752] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.134702][ T1031] EXT4-fs (loop4): shut down requested (2) [ 36.143876][ T28] audit: type=1400 audit(1729734327.840:287): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.163849][ T292] EXT4-fs (loop4): unmounting filesystem. [ 36.174992][ T28] audit: type=1400 audit(1729734327.870:288): avc: denied { read write } for pid=1035 comm="syz.4.268" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 36.176854][ T315] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 36.205882][ T315] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 36.213560][ T315] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.257409][ T311] hid-multitouch 0003:1FD2:6007.000F: unknown main item tag 0x0 [ 36.264901][ T311] hid-multitouch 0003:1FD2:6007.000F: item fetching failed at offset 4/5 [ 36.273584][ T311] hid-multitouch: probe of 0003:1FD2:6007.000F failed with error -22 [ 36.477960][ T315] usb 2-1: USB disconnect, device number 7 [ 36.526803][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.546824][ T752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.557847][ T60] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 36.567404][ T60] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.580309][ T752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.589894][ T752] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 36.598772][ T752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.607431][ T752] usb 3-1: config 0 descriptor?? [ 36.616850][ T24] usb 4-1: config 174 has an invalid interface number: 178 but max is 0 [ 36.624998][ T24] usb 4-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 36.635365][ T24] usb 4-1: config 174 has no interface number 0 [ 36.641550][ T24] usb 4-1: config 174 interface 178 has no altsetting 0 [ 36.676825][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.685872][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.693697][ T60] usb 1-1: SerialNumber: syz [ 36.716801][ T1001] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 36.836788][ T24] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 36.845706][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.853483][ T24] usb 4-1: Product: syz [ 36.857643][ T24] usb 4-1: Manufacturer: syz [ 36.862036][ T24] usb 4-1: SerialNumber: syz [ 36.946794][ T60] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 36.957607][ T60] usb 1-1: USB disconnect, device number 6 [ 37.077627][ T752] holtek 0003:1241:5015.0010: item fetching failed at offset 1/5 [ 37.085322][ T752] holtek 0003:1241:5015.0010: parse failed [ 37.091051][ T752] holtek: probe of 0003:1241:5015.0010 failed with error -22 [ 37.176943][ T24] cdc_ether 4-1:174.178: skipping garbage [ 37.182487][ T24] usb 4-1: bad CDC descriptors [ 37.187452][ T24] usb 4-1: unsupported MDLM descriptors [ 37.192959][ T24] cdc_acm 4-1:174.178: skipping garbage [ 37.200343][ T24] usb 4-1: USB disconnect, device number 6 [ 37.280471][ T60] usb 3-1: USB disconnect, device number 7 [ 37.296766][ T315] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.396727][ T311] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 37.536747][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 37.756809][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.767580][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.777066][ T311] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 37.785943][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.794802][ T311] usb 5-1: config 0 descriptor?? [ 37.866816][ T315] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 37.875993][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.883800][ T315] usb 2-1: Product: syz [ 37.887776][ T315] usb 2-1: Manufacturer: syz [ 37.892152][ T315] usb 2-1: SerialNumber: syz [ 37.897116][ T315] usb 2-1: config 0 descriptor?? [ 37.937281][ T315] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 37.944831][ T315] usb 2-1: Detected FT-X [ 38.066739][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.166886][ T315] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 38.196849][ T315] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 38.216955][ T1067] tmpfs: Unknown parameter 'subj_role' [ 38.226877][ T315] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 38.235948][ T315] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 38.258473][ T315] usb 2-1: USB disconnect, device number 8 [ 38.265664][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 38.275629][ T315] ftdi_sio 2-1:0.0: device disconnected [ 38.277797][ T311] smartjoyplus 0003:0925:0005.0011: unbalanced collection at end of report description [ 38.291127][ T311] smartjoyplus 0003:0925:0005.0011: parse failed [ 38.299977][ T311] smartjoyplus: probe of 0003:0925:0005.0011 failed with error -22 [ 38.316769][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 38.335650][ T1077] input: syz0 as /devices/virtual/input/input9 [ 38.358245][ T1079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 38.367174][ T1079] tipc: Started in network mode [ 38.371905][ T1079] tipc: Node identity 802.15.4n, cluster identity 8 [ 38.446839][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.457829][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.469564][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.493703][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.505459][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.519278][ T315] usb 5-1: USB disconnect, device number 8 [ 38.526825][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.529200][ T24] usb 3-1: config 0 descriptor?? [ 38.614136][ T1093] loop0: detected capacity change from 0 to 16 [ 38.623173][ T327] udevd[327]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 38.626788][ T1093] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.654277][ T1093] syz.0.293: attempt to access beyond end of device [ 38.654277][ T1093] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 38.667843][ T1093] syz.0.293: attempt to access beyond end of device [ 38.667843][ T1093] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 38.668266][ T327] udevd[327]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 38.704884][ T1099] loop0: detected capacity change from 0 to 512 [ 38.722064][ T327] udevd[327]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 38.723919][ T1099] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.295: bg 0: block 5: invalid block bitmap [ 38.745901][ T1099] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 38.755641][ T1099] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.295: invalid indirect mapped block 3 (level 2) [ 38.757778][ T1104] loop1: detected capacity change from 0 to 128 [ 38.776936][ T1099] EXT4-fs (loop0): 1 orphan inode deleted [ 38.782486][ T1099] EXT4-fs (loop0): 1 truncate cleaned up [ 38.790070][ T1099] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.813519][ T327] udevd[327]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 38.842088][ T668] EXT4-fs (loop0): unmounting filesystem. [ 38.886775][ T19] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 38.894952][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.906566][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.920432][ T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.931332][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.939853][ T19] usb 4-1: config 0 descriptor?? [ 39.027712][ T24] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 39.038908][ T24] microsoft 0003:045E:07DA.0012: item 0 4 0 8 parsing failed [ 39.046213][ T24] microsoft 0003:045E:07DA.0012: parse failed [ 39.052321][ T24] microsoft: probe of 0003:045E:07DA.0012 failed with error -22 [ 39.237014][ T694] usb 3-1: USB disconnect, device number 8 [ 39.346767][ T323] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 39.417403][ T19] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 39.425322][ T19] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 39.434161][ T19] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 39.586711][ T323] usb 5-1: Using ep0 maxpacket: 16 [ 39.620975][ T315] usb 4-1: USB disconnect, device number 7 [ 39.642263][ T1127] netlink: 104 bytes leftover after parsing attributes in process `syz.1.308'. [ 39.770734][ T1131] loop2: detected capacity change from 0 to 1024 [ 39.788508][ T326] udevd[326]: symlink '../../loop2' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:2' failed: Read-only file system [ 39.813041][ T1131] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.310: Invalid block bitmap block 0 in block_group 0 [ 39.813910][ T1135] loop1: detected capacity change from 0 to 512 [ 39.826629][ T1131] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.310: Failed to acquire dquot type 0 [ 39.843579][ T1135] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.852588][ T326] udevd[326]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 39.869879][ T1135] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.311: invalid block [ 39.876785][ T323] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 39.887612][ T1135] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.311: couldn't read orphan inode 11 (err -117) [ 39.890940][ T1131] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.310: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.901319][ T1135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.916788][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.930526][ T323] usb 5-1: Product: syz [ 39.934508][ T323] usb 5-1: Manufacturer: syz [ 39.937534][ T326] udevd[326]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 39.939042][ T323] usb 5-1: SerialNumber: syz [ 39.952410][ T1131] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.310: Invalid inode bitmap blk 0 in block_group 0 [ 39.955023][ T323] r8152-cfgselector 5-1: config 0 descriptor?? [ 39.976749][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:0: Failed to release dquot type 0 [ 39.998396][ T1131] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 40.018734][ T291] EXT4-fs (loop1): unmounting filesystem. [ 40.019074][ T1131] EXT4-fs (loop2): 1 orphan inode deleted [ 40.042582][ T1131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.092025][ T326] udevd[326]: symlink '../../loop2' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:2' failed: Read-only file system [ 40.109335][ T1131] syz.2.310 (1131) used greatest stack depth: 20552 bytes left [ 40.122608][ T293] EXT4-fs (loop2): unmounting filesystem. [ 40.177257][ T1163] xt_hashlimit: size too large, truncated to 1048576 [ 40.203715][ T1166] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 40.226826][ T323] r8152-cfgselector 5-1: Unknown version 0x0000 [ 40.248455][ T1171] loop3: detected capacity change from 0 to 256 [ 40.372870][ T1174] loop3: detected capacity change from 0 to 512 [ 40.385783][ T1174] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 40.395739][ T1174] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.328: iget: bad i_size value: -67835469387268086 [ 40.407926][ T1177] netlink: 'syz.0.329': attribute type 13 has an invalid length. [ 40.410085][ T1174] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.328: couldn't read orphan inode 15 (err -117) [ 40.418154][ T1177] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 40.428240][ T1174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.443776][ T1177] device gretap1 entered promiscuous mode [ 40.444899][ T1174] ext2 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 40.449986][ T315] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 40.459222][ T323] r8152-cfgselector 5-1: Unknown version 0x0000 [ 40.473087][ T323] r8152-cfgselector 5-1: bad CDC descriptors [ 40.486836][ T60] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.496765][ T323] r8152-cfgselector 5-1: Unknown version 0x0000 [ 40.498622][ T1174] overlayfs: upper fs needs to support d_type. [ 40.513147][ T323] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 40.527198][ T789] EXT4-fs (loop3): unmounting filesystem. [ 40.730474][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 40.746534][ T1190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1190 comm=syz.3.335 [ 40.836734][ T694] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.886815][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.898853][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.908521][ T315] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.916002][ T60] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 40.924889][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.933202][ T60] usb 2-1: config 0 descriptor?? [ 40.946895][ T315] usb 3-1: not running at top speed; connect to a high speed hub [ 40.982709][ T1198] loop4: detected capacity change from 0 to 256 [ 40.989159][ T1198] exfat: Deprecated parameter 'utf8' [ 40.994354][ T1198] exfat: Deprecated parameter 'utf8' [ 41.000053][ T1198] exfat: Deprecated parameter 'utf8' [ 41.008325][ T1198] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 41.030430][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 41.030444][ T28] audit: type=1400 audit(1729734332.730:299): avc: denied { append } for pid=1197 comm="syz.4.338" path="/57/file1/memory.events" dev="loop4" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.061314][ T315] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 41.066811][ T28] audit: type=1400 audit(1729734332.740:300): avc: denied { map } for pid=1197 comm="syz.4.338" path="/57/file1/memory.events" dev="loop4" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.069269][ T315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.103285][ T315] usb 3-1: config 1 has no interface number 1 [ 41.109829][ T315] usb 3-1: too many endpoints for config 1 interface 3 altsetting 8: 142, using maximum allowed: 30 [ 41.121878][ T315] usb 3-1: config 1 interface 3 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 142 [ 41.135207][ T315] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 41.147127][ T315] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 41.158757][ T315] usb 3-1: config 1 interface 3 has no altsetting 0 [ 41.216807][ T694] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 41.224769][ T694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.235692][ T694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.248401][ T694] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.257247][ T694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.265578][ T694] usb 1-1: config 0 descriptor?? [ 41.296794][ T323] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.335619][ T28] audit: type=1400 audit(1729734333.030:301): avc: denied { connect } for pid=1215 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.356867][ T315] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.365731][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.373711][ T315] usb 3-1: Product: syz [ 41.377943][ T315] usb 3-1: Manufacturer: syz [ 41.382375][ T315] usb 3-1: SerialNumber: syz [ 41.417573][ T60] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 41.424802][ T60] hid-picolcd 0003:04D8:F002.0014: item fetching failed at offset 5/7 [ 41.432989][ T60] hid-picolcd 0003:04D8:F002.0014: device report parse failed [ 41.440536][ T60] hid-picolcd: probe of 0003:04D8:F002.0014 failed with error -22 [ 41.546730][ T323] usb 4-1: Using ep0 maxpacket: 8 [ 41.635658][ T312] usb 2-1: USB disconnect, device number 9 [ 41.643086][ T28] audit: type=1400 audit(1729734333.340:302): avc: denied { create } for pid=1153 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.676833][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.687611][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.697101][ T323] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 41.705902][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.714225][ T323] usb 4-1: config 0 descriptor?? [ 41.737648][ T694] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 41.746026][ T694] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 41.754698][ T694] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 41.906825][ T315] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 41.958305][ T60] usb 1-1: USB disconnect, device number 7 [ 41.969838][ T315] usb 3-1: USB disconnect, device number 9 [ 42.187283][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.189471][ T1224] loop4: detected capacity change from 0 to 128 [ 42.211976][ T323] holtek_mouse 0003:04D9:A067.0016: item fetching failed at offset 5/7 [ 42.222348][ T323] holtek_mouse 0003:04D9:A067.0016: hid parse failed: -22 [ 42.229390][ T323] holtek_mouse: probe of 0003:04D9:A067.0016 failed with error -22 [ 42.243764][ T327] udevd[327]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 42.257744][ T1224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.262527][ T723] Bluetooth: hci0: sending frame failed (-49) [ 42.268309][ T1224] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038 (0x7fffffff) [ 42.272127][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 42.286761][ T28] audit: type=1400 audit(1729734333.980:303): avc: denied { ioctl } for pid=1229 comm="syz.2.352" path="socket:[19906]" dev="sockfs" ino=19906 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.319741][ T326] udevd[326]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 42.321482][ T1224] fscrypt (loop4, inode 12): Unsupported encryption flags (0x08) [ 42.351119][ T292] EXT4-fs (loop4): unmounting filesystem. [ 42.393972][ T28] audit: type=1400 audit(1729734334.090:304): avc: denied { read } for pid=1239 comm="syz.2.357" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.418624][ T28] audit: type=1400 audit(1729734334.090:305): avc: denied { open } for pid=1239 comm="syz.2.357" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.444019][ T28] audit: type=1400 audit(1729734334.090:306): avc: denied { ioctl } for pid=1239 comm="syz.2.357" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.473382][ T323] usb 4-1: USB disconnect, device number 8 [ 42.484504][ T1242] loop0: detected capacity change from 0 to 512 [ 42.495938][ T1242] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.500854][ T326] udevd[326]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 42.515778][ T1242] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.358: invalid block [ 42.528943][ T28] audit: type=1400 audit(1729734334.230:307): avc: denied { bind } for pid=1246 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.528975][ T1242] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.358: couldn't read orphan inode 11 (err -117) [ 42.560434][ T1242] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.571301][ T28] audit: type=1400 audit(1729734334.270:308): avc: denied { create } for pid=1248 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.592432][ T326] udevd[326]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 42.619388][ T668] EXT4-fs (loop0): unmounting filesystem. [ 42.667135][ T312] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 42.791780][ T1262] loop2: detected capacity change from 0 to 128 [ 42.996745][ T315] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.026830][ T312] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 43.038270][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.049723][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.060243][ T312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 43.073277][ T312] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 43.083092][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.093945][ T312] usb 5-1: config 0 descriptor?? [ 43.256708][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 43.556802][ T315] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 43.565929][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.586707][ T315] usb 1-1: Product: syz [ 43.590706][ T315] usb 1-1: Manufacturer: syz [ 43.595121][ T315] usb 1-1: SerialNumber: syz [ 43.597623][ T312] thrustmaster 0003:044F:B653.0017: unbalanced delimiter at end of report description [ 43.614568][ T312] thrustmaster 0003:044F:B653.0017: parse failed [ 43.621030][ T315] r8152-cfgselector 1-1: config 0 descriptor?? [ 43.636456][ T312] thrustmaster: probe of 0003:044F:B653.0017 failed with error -22 [ 43.679152][ T1269] loop1: detected capacity change from 0 to 131072 [ 43.685957][ T1269] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(8963) [ 43.694024][ T1269] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.705237][ T1269] F2FS-fs (loop1): invalid crc value [ 43.711222][ T326] udevd[326]: symlink '../../loop1' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:1' failed: Read-only file system [ 43.732097][ T1269] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 43.757633][ T1269] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.764729][ T1269] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 43.780970][ T326] udevd[326]: symlink '../../loop1' '/dev/disk/by-uuid/a3bd865d-a4e8-4b25-9caa-c903308887eb.tmp-b7:1' failed: Read-only file system [ 43.795478][ T1269] syz.1.370 (pid 1269) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 43.816186][ T1280] tipc: Started in network mode [ 43.821090][ T1280] tipc: Node identity 7f000001, cluster identity 4711 [ 43.828129][ T1280] tipc: Enabled bearer , priority 10 [ 43.835459][ T312] usb 5-1: USB disconnect, device number 10 [ 43.851525][ T1282] loop2: detected capacity change from 0 to 512 [ 43.874506][ T326] udevd[326]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 43.886148][ T1282] EXT4-fs (loop2): Test dummy encryption mode enabled [ 43.894867][ T1282] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.374: invalid block [ 43.905983][ T1282] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.374: couldn't read orphan inode 11 (err -117) [ 43.926917][ T1282] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.961806][ T326] udevd[326]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 43.999842][ T293] EXT4-fs (loop2): unmounting filesystem. [ 44.116915][ T315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 44.123007][ T315] r8152-cfgselector 1-1: bad CDC descriptors [ 44.129130][ T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 44.154610][ T1287] loop2: detected capacity change from 0 to 40427 [ 44.163478][ T1287] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 44.166804][ T315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 44.171277][ T1287] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 44.178591][ T315] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 44.197929][ T1287] F2FS-fs (loop2): invalid crc value [ 44.207017][ T326] udevd[326]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 44.217199][ T1287] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 44.231996][ T1287] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 44.240826][ T1287] F2FS-fs (loop2): f2fs_commit_super fails to record errors:4, err:-30 [ 44.257476][ T1287] F2FS-fs (loop2): write access unavailable, skipping recovery [ 44.264971][ T1287] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 44.272233][ T1287] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.372543][ T1304] loop4: detected capacity change from 0 to 1024 [ 44.382435][ T1304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.400229][ T292] EXT4-fs (loop4): unmounting filesystem. [ 44.427238][ T1310] tipc: Started in network mode [ 44.432128][ T1310] tipc: Node identity 7f000001, cluster identity 4711 [ 44.439024][ T1310] tipc: Enabled bearer , priority 10 [ 44.546847][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.557639][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.567602][ T60] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 44.576441][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.587397][ T60] usb 4-1: config 0 descriptor?? [ 44.846736][ T24] tipc: Node number set to 2130706433 [ 45.117889][ T60] wacom 0003:056A:0029.0018: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 45.127640][ T60] wacom 0003:056A:0029.0018: hidraw0: USB HID v0.00 Device [HID 056a:0029] on usb-dummy_hcd.3-1/input0 [ 45.139051][ T60] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0029.0018/input/input12 [ 45.317918][ T1325] loop4: detected capacity change from 0 to 512 [ 45.325197][ T1325] EXT4-fs (loop4): Test dummy encryption mode enabled [ 45.331492][ T312] usb 4-1: USB disconnect, device number 9 [ 45.349714][ T1325] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.388: invalid block [ 45.368822][ T1325] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.388: couldn't read orphan inode 11 (err -117) [ 45.385152][ T1325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.430603][ T292] EXT4-fs (loop4): unmounting filesystem. [ 45.445907][ T1338] loop0: detected capacity change from 0 to 128 [ 45.461812][ T1338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.474931][ T1338] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038 (0x7fffffff) [ 45.488848][ T1338] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 45.500209][ T668] EXT4-fs (loop0): unmounting filesystem. [ 45.557220][ T1350] loop4: detected capacity change from 0 to 128 [ 45.563720][ T1350] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.575419][ T312] tipc: Node number set to 2130706433 [ 45.581114][ T1350] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.605199][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 45.612608][ T60] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.622348][ T1354] loop4: detected capacity change from 0 to 128 [ 45.630534][ T1354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.639603][ T1354] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 45.680311][ T292] EXT4-fs (loop4): unmounting filesystem. [ 45.700350][ T1359] loop4: detected capacity change from 0 to 256 [ 45.711974][ T1359] FAT-fs (loop4): Directory bread(block 64) failed [ 45.718813][ T1359] FAT-fs (loop4): Directory bread(block 65) failed [ 45.725261][ T1359] FAT-fs (loop4): Directory bread(block 66) failed [ 45.731597][ T1359] FAT-fs (loop4): Directory bread(block 67) failed [ 45.737975][ T1359] FAT-fs (loop4): Directory bread(block 68) failed [ 45.744252][ T1359] FAT-fs (loop4): Directory bread(block 69) failed [ 45.750668][ T1359] FAT-fs (loop4): Directory bread(block 70) failed [ 45.756961][ T1359] FAT-fs (loop4): Directory bread(block 71) failed [ 45.763279][ T1359] FAT-fs (loop4): Directory bread(block 72) failed [ 45.769660][ T1359] FAT-fs (loop4): Directory bread(block 73) failed [ 45.789988][ T8] kworker/u4:0: attempt to access beyond end of device [ 45.789988][ T8] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 45.832829][ T39] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 46.028096][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 46.037745][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.048484][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 46.058495][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.068330][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.081249][ T60] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 46.090369][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.101245][ T60] usb 3-1: config 0 descriptor?? [ 46.106451][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 46.212624][ T1371] syz.3.411[1371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.212698][ T1371] syz.3.411[1371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.233673][ T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 46.238490][ T1363] loop4: detected capacity change from 0 to 131072 [ 46.244907][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.272964][ T1363] F2FS-fs (loop4): Test dummy encryption mode enabled [ 46.273216][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.288417][ T24] usb 2-1: Product: syz [ 46.292491][ T24] usb 2-1: Manufacturer: syz [ 46.296962][ T24] usb 2-1: SerialNumber: syz [ 46.297135][ T1363] F2FS-fs (loop4): invalid crc value [ 46.301685][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.316361][ T24] usb 2-1: config 0 descriptor?? [ 46.321344][ T39] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 46.330358][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.338983][ T39] usb 1-1: config 0 descriptor?? [ 46.344115][ T1323] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 46.351192][ T1323] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 46.359256][ T1363] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.406948][ T1363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.461714][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 46.461731][ T28] audit: type=1400 audit(1729734338.077:316): avc: denied { rename } for pid=1362 comm="syz.4.408" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.541512][ T1379] loop3: detected capacity change from 0 to 40427 [ 46.548602][ T1379] F2FS-fs (loop3): Unrecognized mount option "r9 ¿ŸÔflush_merge" or missing value [ 46.593000][ T1323] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 46.602026][ T1323] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 46.635418][ T60] prodikeys 0003:041E:2801.0019: item fetching failed at offset 0/5 [ 46.643384][ T60] prodikeys 0003:041E:2801.0019: hid parse failed [ 46.660675][ T60] prodikeys: probe of 0003:041E:2801.0019 failed with error -22 [ 46.693636][ T1382] loop4: detected capacity change from 0 to 512 [ 46.711906][ T1382] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 46.719967][ T1382] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.726772][ T1382] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 46.741413][ T1382] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 46.752889][ T1382] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.414: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 46.775079][ T1382] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.414: couldn't read orphan inode 13 (err -117) [ 46.787207][ T1382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.822181][ T1395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.420'. [ 46.854160][ T323] usb 3-1: USB disconnect, device number 10 [ 46.895180][ T39] apple 0003:05AC:0246.001A: unknown main item tag 0xd [ 46.901976][ T39] apple 0003:05AC:0246.001A: unexpected long global item [ 46.909389][ T39] apple 0003:05AC:0246.001A: parse failed [ 46.915209][ T39] apple: probe of 0003:05AC:0246.001A failed with error -22 [ 46.939791][ T1404] syz.3.424[1404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.939854][ T1404] syz.3.424[1404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.969568][ T1408] loop3: detected capacity change from 0 to 512 [ 46.990050][ T1408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.001118][ T1408] EXT4-fs (loop3): 1 truncate cleaned up [ 47.006775][ T1408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.022878][ T789] EXT4-fs (loop3): unmounting filesystem. [ 47.043533][ T1413] loop3: detected capacity change from 0 to 256 [ 47.051617][ T1413] exfat: Deprecated parameter 'utf8' [ 47.059881][ T1413] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 47.078791][ T24] dm9601: No valid MAC address in EEPROM, using 4a:f6:eb:c5:51:52 [ 47.098606][ T1415] mmap: syz.3.429 (1415) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.111249][ T60] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 47.137722][ T39] usb 1-1: USB disconnect, device number 9 [ 47.235271][ T1417] loop3: detected capacity change from 0 to 40427 [ 47.244611][ T1417] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 47.250762][ T1417] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 47.260785][ T1417] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 47.282177][ T1417] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 47.289091][ T1417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.314875][ T789] syz-executor: attempt to access beyond end of device [ 47.314875][ T789] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.328776][ T24] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 47.338914][ T24] usb 2-1: USB disconnect, device number 10 [ 47.440577][ T1434] loop2: detected capacity change from 0 to 1024 [ 47.447549][ T1434] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 47.457165][ T1434] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 47.468734][ T326] udevd[326]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 47.483357][ T1434] EXT4-fs error (device loop2): ext4_get_journal_inode:5720: inode #5: comm syz.2.436: unexpected bad inode w/o EXT4_IGET_BAD [ 47.497306][ T1434] EXT4-fs (loop2): no journal found [ 47.502942][ T1434] EXT4-fs (loop2): can't get journal size [ 47.510398][ T1434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.523438][ T326] udevd[326]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 47.534979][ T1434] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.436: bg 0: block 32: padding at end of block bitmap is not set [ 47.555629][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.567030][ T293] EXT4-fs (loop2): unmounting filesystem. [ 47.574667][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.586093][ T326] udevd[326]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 47.601510][ T28] audit: type=1400 audit(1729734339.130:317): avc: denied { read } for pid=1442 comm="syz.2.440" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.624140][ T28] audit: type=1400 audit(1729734339.130:318): avc: denied { open } for pid=1442 comm="syz.2.440" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.647820][ T28] audit: type=1400 audit(1729734339.148:319): avc: denied { map } for pid=1442 comm="syz.2.440" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.671393][ T60] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 47.680769][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.688655][ T60] usb 5-1: SerialNumber: syz [ 47.823826][ T1449] incfs: Options parsing error. -22 [ 47.828957][ T1449] incfs: mount failed -22 [ 49.234595][ C1] sched: RT throttling activated [ 49.256911][ T60] usb 5-1: 0:2 : does not exist [ 49.262721][ T60] usb 5-1: USB disconnect, device number 11 [ 49.269469][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.397188][ T694] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 49.404652][ T28] audit: type=1400 audit(1729734340.791:320): avc: denied { read } for pid=1458 comm="syz.1.446" dev="nsfs" ino=4026532291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.458022][ T28] audit: type=1400 audit(1729734340.791:321): avc: denied { open } for pid=1458 comm="syz.1.446" path="net:[4026532291]" dev="nsfs" ino=4026532291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.557825][ T1477] capability: warning: `syz.1.455' uses 32-bit capabilities (legacy support in use) [ 49.558989][ T28] audit: type=1400 audit(1729734340.930:322): avc: denied { mount } for pid=1476 comm="syz.1.455" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.592925][ T1479] loop0: detected capacity change from 0 to 512 [ 49.610957][ T326] udevd[326]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 49.646932][ T1479] EXT4-fs (loop0): 1 orphan inode deleted [ 49.652491][ T1479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.661405][ T1479] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 49.675572][ T326] udevd[326]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 49.687840][ T292] EXT4-fs (loop4): unmounting filesystem. [ 49.690559][ T1469] loop3: detected capacity change from 0 to 40427 [ 49.710026][ T326] udevd[326]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 49.742738][ T327] udevd[327]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 49.745635][ T28] audit: type=1400 audit(1729734341.105:323): avc: denied { sqpoll } for pid=1495 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.782026][ T1469] F2FS-fs (loop3): invalid crc value [ 49.787291][ T694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.799456][ T668] EXT4-fs (loop0): unmounting filesystem. [ 49.804422][ T694] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.824628][ T1469] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.832603][ T28] audit: type=1400 audit(1729734341.142:324): avc: denied { mount } for pid=1497 comm="syz.4.463" name="/" dev="configfs" ino=13658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 49.842022][ T694] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.855613][ T28] audit: type=1400 audit(1729734341.151:325): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 49.881222][ T694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.893563][ T1469] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.901200][ T694] usb 3-1: config 0 descriptor?? [ 49.921796][ T327] udevd[327]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 50.009216][ T1514] syz.0.470[1514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.009293][ T1514] syz.0.470[1514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.058902][ T323] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 50.077735][ T323] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 50.097647][ T323] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x3 [ 50.105838][ T323] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 50.198889][ T312] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 50.270384][ T1518] loop3: detected capacity change from 0 to 40427 [ 50.282016][ T1518] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 50.293574][ T1518] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.301857][ T1518] F2FS-fs (loop3): fault_injection options not supported [ 50.309120][ T1518] F2FS-fs (loop3): fault_type options not supported [ 50.316498][ T1518] F2FS-fs (loop3): invalid crc value [ 50.328557][ T327] udevd[327]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 50.352510][ T1518] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.387181][ T1518] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.396181][ T1518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.428453][ T694] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 50.430865][ T1518] syz.3.467: attempt to access beyond end of device [ 50.430865][ T1518] loop3: rw=2049, sector=53248, nr_sectors = 2072 limit=40427 [ 50.452684][ T1518] syz.3.467: attempt to access beyond end of device [ 50.452684][ T1518] loop3: rw=2049, sector=55320, nr_sectors = 496 limit=40427 [ 50.470649][ T694] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 50.516261][ T789] syz-executor: attempt to access beyond end of device [ 50.516261][ T789] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.561240][ T1569] loop4: detected capacity change from 0 to 8192 [ 50.675993][ T60] usb 3-1: USB disconnect, device number 11 [ 50.776555][ T312] usb 2-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 50.787432][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.797942][ T312] usb 2-1: Product: syz [ 50.802763][ T312] usb 2-1: Manufacturer: syz [ 50.807239][ T312] usb 2-1: SerialNumber: syz [ 50.814338][ T312] usb 2-1: config 0 descriptor?? [ 50.819241][ T694] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.861133][ T312] pl2303 2-1:0.0: required endpoints missing [ 51.041895][ T1618] incfs: Options parsing error. -22 [ 51.047275][ T1618] incfs: mount failed -22 [ 51.054635][ T1620] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.080346][ T312] usb 2-1: USB disconnect, device number 11 [ 51.137229][ T1632] loop4: detected capacity change from 0 to 1024 [ 51.146713][ T1632] EXT4-fs: Ignoring removed nobh option [ 51.153955][ T1632] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.522: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 51.172835][ T1632] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.522: couldn't read orphan inode 11 (err -117) [ 51.185067][ T1632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.192124][ T1637] loop3: detected capacity change from 0 to 512 [ 51.208441][ T694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.219618][ T1637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.219766][ T694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.239111][ T694] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 51.239679][ T292] EXT4-fs (loop4): unmounting filesystem. [ 51.248732][ T694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.272207][ T694] usb 1-1: config 0 descriptor?? [ 51.279023][ T1637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 51.288682][ T1637] System zones: 1-12 [ 51.293878][ T1637] EXT4-fs (loop3): 1 truncate cleaned up [ 51.299699][ T1637] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.328205][ T789] EXT4-fs (loop3): unmounting filesystem. [ 51.347831][ T1646] loop3: detected capacity change from 0 to 2048 [ 51.360127][ T1646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.385985][ T789] EXT4-fs (loop3): unmounting filesystem. [ 51.476087][ T1665] loop4: detected capacity change from 0 to 512 [ 51.486849][ T1665] EXT4-fs: Ignoring removed orlov option [ 51.495855][ T1665] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.513711][ T1665] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.536: casefold flag without casefold feature [ 51.526354][ T1665] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.536: missing EA_INODE flag [ 51.539276][ T1665] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.536: error while reading EA inode 12 err=-117 [ 51.555525][ T1665] EXT4-fs (loop4): 1 orphan inode deleted [ 51.561325][ T1665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.586988][ T292] EXT4-fs (loop4): unmounting filesystem. [ 51.639650][ T1661] syz.3.535 (1661) used greatest stack depth: 20528 bytes left [ 51.792312][ T694] logitech-hidpp-device 0003:046D:C086.001D: unknown main item tag 0x0 [ 51.800642][ T694] logitech-hidpp-device 0003:046D:C086.001D: unknown main item tag 0x0 [ 51.809051][ T694] logitech-hidpp-device 0003:046D:C086.001D: unknown main item tag 0x0 [ 51.817377][ T694] logitech-hidpp-device 0003:046D:C086.001D: unknown main item tag 0x0 [ 51.825673][ T694] logitech-hidpp-device 0003:046D:C086.001D: unknown main item tag 0x0 [ 51.834470][ T694] logitech-hidpp-device 0003:046D:C086.001D: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 51.986559][ T312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 52.019225][ T694] usb 1-1: USB disconnect, device number 10 [ 52.073503][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 52.344102][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 52.376704][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.387659][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.397193][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice=11.00 [ 52.406327][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.414528][ T312] usb 4-1: config 0 descriptor?? [ 52.617041][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 52.617054][ T28] audit: type=1400 audit(1729734343.754:337): avc: denied { read } for pid=1707 comm="syz.0.554" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.645719][ T694] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.653147][ T60] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 52.662196][ T60] usb 5-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 52.662202][ T28] audit: type=1400 audit(1729734343.791:338): avc: denied { open } for pid=1707 comm="syz.0.554" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.702835][ T60] usb 5-1: Product: syz [ 52.707183][ T60] usb 5-1: Manufacturer: syz [ 52.714551][ T60] usb 5-1: config 0 descriptor?? [ 52.815728][ T8] tipc: Left network mode [ 52.894154][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.901203][ T1720] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.908510][ T1720] device bridge_slave_0 entered promiscuous mode [ 52.915143][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.922193][ T1720] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.929719][ T1720] device bridge_slave_1 entered promiscuous mode [ 52.941252][ T312] lg-g15 0003:046D:C222.001E: unknown main item tag 0x0 [ 52.948574][ T312] lg-g15 0003:046D:C222.001E: item fetching failed at offset 10/11 [ 52.956507][ T312] lg-g15: probe of 0003:046D:C222.001E failed with error -22 [ 52.999341][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.006196][ T1720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.013294][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.020090][ T1720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.027218][ T60] snd-usb-audio: probe of 5-1:0.0 failed with error -71 [ 53.038849][ T60] usb 5-1: USB disconnect, device number 12 [ 53.049433][ T694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.059906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.062730][ T694] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.067550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.080350][ T694] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.088925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.104779][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 53.105235][ T694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.123573][ T694] usb 3-1: config 0 descriptor?? [ 53.134792][ T1720] device veth0_vlan entered promiscuous mode [ 53.142421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.150668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.158520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.165764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.169161][ T323] usb 4-1: USB disconnect, device number 10 [ 53.173206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.186361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.201123][ T1720] device veth1_macvtap entered promiscuous mode [ 53.210925][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.219029][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.227355][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.364017][ T1725] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.370919][ T1725] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.378206][ T1725] device bridge_slave_0 entered promiscuous mode [ 53.384633][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 53.391599][ T1725] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.398546][ T1725] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.405569][ T1725] device bridge_slave_1 entered promiscuous mode [ 53.438919][ T8] device bridge_slave_1 left promiscuous mode [ 53.444859][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.452175][ T8] device bridge_slave_0 left promiscuous mode [ 53.458076][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.466060][ T8] device veth1_macvtap left promiscuous mode [ 53.471966][ T8] device veth0_vlan left promiscuous mode [ 53.514251][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.526750][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.566069][ T1725] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.573056][ T1725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.580143][ T1725] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.586885][ T1725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.606069][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.613564][ T752] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.620796][ T752] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.630115][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.639044][ T694] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 53.647097][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.653978][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.672153][ T694] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 53.686983][ T1725] device veth0_vlan entered promiscuous mode [ 53.696584][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.698882][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 53.705333][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.721967][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.727421][ T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 53.732659][ T28] audit: type=1400 audit(1729734344.778:339): avc: denied { write } for pid=1730 comm="syz.4.562" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.737634][ T24] usb 2-1: Product: syz [ 53.760598][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.771617][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.774287][ T24] usb 2-1: Manufacturer: syz [ 53.785357][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.792205][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.799515][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.807415][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.822165][ T1725] device veth1_macvtap entered promiscuous mode [ 53.834761][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.842937][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.850544][ T24] hub 2-1:4.0: USB hub found [ 53.851302][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.897213][ T28] audit: type=1400 audit(1729734344.935:340): avc: denied { bind } for pid=1742 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.915189][ T752] usb 3-1: USB disconnect, device number 12 [ 53.922767][ T28] audit: type=1400 audit(1729734344.963:341): avc: denied { setopt } for pid=1742 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.088588][ T24] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 54.114291][ T1745] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.121283][ T1745] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.128368][ T1745] device bridge_slave_0 entered promiscuous mode [ 54.136763][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.143701][ T1745] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.150925][ T1745] device bridge_slave_1 entered promiscuous mode [ 54.164219][ T323] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 54.200592][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.207448][ T1745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.214560][ T1745] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.221340][ T1745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.239760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.247270][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.255296][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.266113][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.274226][ T694] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.281048][ T694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.300239][ T1745] device veth0_vlan entered promiscuous mode [ 54.309128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.317665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.325489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.333142][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.341148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.349631][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.356479][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.364154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.371922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.385693][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.394674][ T1745] device veth1_macvtap entered promiscuous mode [ 54.404965][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.418748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.424297][ T323] usb 5-1: Using ep0 maxpacket: 32 [ 54.478760][ T1751] loop3: detected capacity change from 0 to 512 [ 54.488807][ T326] udevd[326]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 54.500349][ T311] usb 2-1: USB disconnect, device number 12 [ 54.508630][ T1751] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 54.521988][ T1751] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038 (0x7fffffff) [ 54.545979][ T1751] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 54.563604][ T326] udevd[326]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 54.582533][ T789] EXT4-fs (loop3): unmounting filesystem. [ 54.598617][ T8] device bridge_slave_1 left promiscuous mode [ 54.604604][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.611600][ T323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 54.619819][ T8] device bridge_slave_0 left promiscuous mode [ 54.625726][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.633279][ T8] device veth1_macvtap left promiscuous mode [ 54.639091][ T8] device veth0_vlan left promiscuous mode [ 54.695275][ T323] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 54.705024][ T323] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1015 [ 54.720295][ T323] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.733173][ T323] usb 5-1: config 1 interface 0 has no altsetting 0 [ 54.792641][ T694] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.912078][ T323] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.922383][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.930365][ T323] usb 5-1: Product: syz [ 54.934443][ T323] usb 5-1: Manufacturer: syz [ 54.938799][ T323] usb 5-1: SerialNumber: syz [ 54.955287][ T1735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 54.962241][ T1735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 55.054372][ T1763] loop1: detected capacity change from 0 to 128 [ 55.062069][ T1763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.072168][ T327] udevd[327]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 55.094434][ T28] audit: type=1400 audit(1729734346.034:342): avc: denied { remount } for pid=1762 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.118505][ T1763] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 55.124785][ T1763] ext4 filesystem being remounted at /82/mnt supports timestamps until 2038 (0x7fffffff) [ 55.139868][ T291] EXT4-fs (loop1): unmounting filesystem. [ 55.171705][ T1765] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.178811][ T1765] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.186626][ T1765] device bridge_slave_0 entered promiscuous mode [ 55.193512][ T694] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 55.201477][ T694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.212173][ T28] audit: type=1400 audit(1729734346.135:343): avc: denied { ioctl } for pid=1730 comm="syz.4.562" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 55.236908][ T1765] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.243752][ T1765] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.250783][ T694] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.263844][ T1765] device bridge_slave_1 entered promiscuous mode [ 55.270025][ T694] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.278827][ T694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.289928][ T694] usb 3-1: config 0 descriptor?? [ 55.323500][ T311] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 55.339220][ T1765] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.346109][ T1765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.353149][ T1765] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.359974][ T1765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.379207][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.386661][ T752] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.394053][ T752] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.411063][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.419018][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.425884][ T1772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.433218][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.441153][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.448111][ T1772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.455206][ T19] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.462720][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.470989][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.488109][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.498498][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.506268][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.513741][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.524752][ T1765] device veth0_vlan entered promiscuous mode [ 55.535025][ T1765] device veth1_macvtap entered promiscuous mode [ 55.541699][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.554850][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.563337][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.713611][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.724447][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.733997][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 55.742993][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.754350][ T311] usb 4-1: config 0 descriptor?? [ 55.802510][ T694] plantronics 0003:047F:FFFF.0020: unknown main item tag 0xd [ 55.811157][ T694] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 55.819871][ T694] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 55.844110][ T8] device bridge_slave_1 left promiscuous mode [ 55.850034][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.857192][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.868178][ T8] device bridge_slave_0 left promiscuous mode [ 55.874084][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.881085][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.890899][ T19] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 55.899803][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.900254][ T8] device bridge_slave_1 left promiscuous mode [ 55.913754][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.914053][ T19] usb 2-1: config 0 descriptor?? [ 55.925765][ T8] device bridge_slave_0 left promiscuous mode [ 55.931867][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.939705][ T8] device veth1_macvtap left promiscuous mode [ 55.945656][ T8] device veth0_vlan left promiscuous mode [ 55.951517][ T8] device veth1_macvtap left promiscuous mode [ 55.957640][ T8] device veth0_vlan left promiscuous mode [ 56.022268][ T1772] usb 3-1: USB disconnect, device number 13 [ 56.277893][ T311] logitech 0003:046D:CA03.0021: report_id 0 is invalid [ 56.287313][ T311] logitech 0003:046D:CA03.0021: item 0 0 1 8 parsing failed [ 56.297116][ T311] logitech 0003:046D:CA03.0021: parse failed [ 56.303354][ T311] logitech: probe of 0003:046D:CA03.0021 failed with error -22 [ 56.333027][ T1776] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.339872][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.347485][ T1776] device bridge_slave_0 entered promiscuous mode [ 56.354897][ T1776] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.361803][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.369023][ T1776] device bridge_slave_1 entered promiscuous mode [ 56.409177][ T1776] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.416017][ T1776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.423149][ T1776] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.429930][ T1776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.438427][ T19] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 56.445109][ T19] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 56.452011][ T19] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 56.458658][ T19] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 56.465259][ T19] sony 0003:054C:024B.0022: item fetching failed at offset 4/5 [ 56.472784][ T19] sony 0003:054C:024B.0022: parse failed [ 56.474518][ T752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.478250][ T19] sony: probe of 0003:054C:024B.0022 failed with error -22 [ 56.492416][ T752] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.500013][ T752] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.515635][ T311] usb 4-1: USB disconnect, device number 11 [ 56.522179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.530781][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.537669][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.544949][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.553235][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.560101][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.579056][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.589662][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.612076][ T1783] loop2: detected capacity change from 0 to 256 [ 56.612353][ T1776] device veth0_vlan entered promiscuous mode [ 56.622630][ T28] audit: type=1400 audit(1729734347.455:344): avc: denied { remount } for pid=1782 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.625669][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.652727][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.661657][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.669387][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.686466][ T1776] device veth1_macvtap entered promiscuous mode [ 56.696121][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.709123][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.717508][ T39] usb 2-1: USB disconnect, device number 13 [ 56.739407][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.787468][ T1790] loop2: detected capacity change from 0 to 512 [ 56.793831][ T1790] /dev/loop2: Can't open blockdev [ 56.800560][ T327] udevd[327]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 56.812647][ T327] udevd[327]: symlink '../../loop2' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:2' failed: Read-only file system [ 57.013746][ T323] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 57.021248][ T323] usb 5-1: USB disconnect, device number 13 [ 57.090294][ T8] device bridge_slave_1 left promiscuous mode [ 57.096232][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.103782][ T8] device bridge_slave_0 left promiscuous mode [ 57.109712][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.117799][ T8] device veth1_macvtap left promiscuous mode [ 57.123679][ T8] device veth0_vlan left promiscuous mode [ 57.582473][ T1803] loop3: detected capacity change from 0 to 1024 [ 57.617647][ T326] udevd[326]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 57.631955][ T1803] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 57.645666][ T1803] EXT4-fs error (device loop3): ext4_get_journal_inode:5720: inode #32: comm syz.3.583: iget: special inode unallocated [ 57.658221][ T28] audit: type=1400 audit(1729734348.415:345): avc: denied { read } for pid=1810 comm="syz.4.586" path="socket:[22726]" dev="sockfs" ino=22726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.683348][ T1803] EXT4-fs (loop3): no journal found [ 57.688757][ T1803] EXT4-fs (loop3): can't get journal size [ 57.694957][ T1803] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.583: iget: special inode unallocated [ 57.708608][ T1803] EXT4-fs (loop3): failed to initialize system zone (-117) [ 57.750391][ T1803] EXT4-fs (loop3): mount failed [ 57.791662][ T1808] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.810004][ T1826] loop2: detected capacity change from 0 to 1024 [ 57.837024][ T1808] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.844158][ T1808] device bridge_slave_0 entered promiscuous mode [ 57.848240][ T1826] /dev/loop2: Can't open blockdev [ 57.850435][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 57.870033][ T326] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.899351][ T28] audit: type=1326 audit(1729734348.627:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1837 comm="syz.3.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1c17dff9 code=0x7ffc0000 [ 57.936293][ T1840] loop4: detected capacity change from 0 to 512 [ 57.948442][ T1840] EXT4-fs: Ignoring removed oldalloc option [ 57.957710][ T1808] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.964580][ T1808] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.979236][ T1840] EXT4-fs (loop4): 1 orphan inode deleted [ 57.982637][ T1808] device bridge_slave_1 entered promiscuous mode [ 57.991313][ T1840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.994943][ T1847] loop3: detected capacity change from 0 to 512 [ 58.000486][ T1840] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038 (0x7fffffff) [ 58.022294][ T326] udevd[326]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 58.025930][ T327] udevd[327]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 58.055376][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 58.055405][ T28] audit: type=1400 audit(1729734348.775:358): avc: denied { setattr } for pid=1839 comm="syz.4.598" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.076493][ T1840] incfs_lookup_dentry err:-2 [ 58.084584][ T28] audit: type=1400 audit(1729734348.775:359): avc: denied { unlink } for pid=1839 comm="syz.4.598" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.151235][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 58.168536][ T1847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.181891][ T1847] ext4 filesystem being mounted at /111/bus supports timestamps until 2038 (0x7fffffff) [ 58.191700][ T292] ------------[ cut here ]------------ [ 58.197043][ T292] kernel BUG at fs/namei.c:2956! [ 58.206402][ T326] udevd[326]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 58.212677][ T292] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 58.223393][ T292] CPU: 1 PID: 292 Comm: syz-executor Not tainted 6.1.99-syzkaller-00073-g5bdef2817ade #0 [ 58.233026][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.242919][ T292] RIP: 0010:may_delete+0x6eb/0x6f0 [ 58.247865][ T292] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 6c 1c ac ff 0f 0b e8 65 1c ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 51 1c ac ff 4c 8d [ 58.267315][ T292] RSP: 0000:ffffc900045bfbd8 EFLAGS: 00010293 [ 58.273214][ T292] RAX: ffffffff81c986db RBX: ffff88810db5ead0 RCX: ffff88811f8fbcc0 [ 58.281025][ T292] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 58.288836][ T292] RBP: ffffc900045bfc40 R08: ffffffff81c9806f R09: 0000000000000003 [ 58.296648][ T292] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881110aa220 [ 58.304461][ T292] R13: 1ffff11022215444 R14: ffff888100590168 R15: dffffc0000000000 [ 58.312266][ T292] FS: 0000555556c14500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.321039][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.327457][ T292] CR2: 0000001b2d41eff8 CR3: 00000001298ba000 CR4: 00000000003506a0 [ 58.335270][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.343088][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.350941][ T292] Call Trace: [ 58.354013][ T292] [ 58.356793][ T292] ? __die_body+0x62/0xb0 [ 58.360966][ T292] ? die+0x88/0xb0 [ 58.364520][ T292] ? do_trap+0x103/0x330 [ 58.368601][ T292] ? may_delete+0x6eb/0x6f0 [ 58.372936][ T292] ? handle_invalid_op+0x95/0xc0 [ 58.377715][ T292] ? may_delete+0x6eb/0x6f0 [ 58.382225][ T292] ? exc_invalid_op+0x32/0x50 [ 58.386737][ T292] ? asm_exc_invalid_op+0x1b/0x20 [ 58.391605][ T292] ? may_delete+0x7f/0x6f0 [ 58.395847][ T292] ? may_delete+0x6eb/0x6f0 [ 58.400186][ T292] ? may_delete+0x6eb/0x6f0 [ 58.404526][ T292] ? may_delete+0x6eb/0x6f0 [ 58.408869][ T292] vfs_rmdir+0x32/0x500 [ 58.412859][ T292] ? generic_shutdown_super+0x2b8/0x370 [ 58.418242][ T292] incfs_kill_sb+0x113/0x230 [ 58.422667][ T292] deactivate_locked_super+0xad/0x110 [ 58.427874][ T292] deactivate_super+0xbe/0xf0 [ 58.432390][ T292] cleanup_mnt+0x485/0x510 [ 58.436639][ T292] ? user_path_at_empty+0x14e/0x1a0 [ 58.441677][ T292] __cleanup_mnt+0x19/0x20 [ 58.445934][ T292] task_work_run+0x24d/0x2e0 [ 58.450355][ T292] ? task_work_cancel+0x2b0/0x2b0 [ 58.455213][ T292] ? __x64_sys_umount+0x122/0x170 [ 58.460073][ T292] exit_to_user_mode_loop+0x94/0xa0 [ 58.465109][ T292] exit_to_user_mode_prepare+0x5a/0xa0 [ 58.470403][ T292] syscall_exit_to_user_mode+0x26/0x130 [ 58.475784][ T292] do_syscall_64+0x47/0xb0 [ 58.480060][ T292] ? clear_bhb_loop+0x55/0xb0 [ 58.484548][ T292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.490279][ T292] RIP: 0033:0x7f937b17f327 [ 58.494532][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 58.514059][ T292] RSP: 002b:00007fffff9c6d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 58.522303][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f937b17f327 [ 58.530290][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffff9c6e10 [ 58.538105][ T292] RBP: 00007fffff9c6e10 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 58.545912][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffff9c7f00 [ 58.553724][ T292] R13: 00007f937b1f0134 R14: 000000000000de73 R15: 00007fffff9c8fc0 [ 58.561539][ T292] [ 58.564420][ T292] Modules linked in: [ 58.571418][ T292] ---[ end trace 0000000000000000 ]--- [ 58.573611][ T789] EXT4-fs (loop3): unmounting filesystem. [ 58.576738][ T292] RIP: 0010:may_delete+0x6eb/0x6f0 [ 58.576766][ T292] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 6c 1c ac ff 0f 0b e8 65 1c ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 51 1c ac ff 4c 8d [ 58.576781][ T292] RSP: 0000:ffffc900045bfbd8 EFLAGS: 00010293 [ 58.576797][ T292] RAX: ffffffff81c986db RBX: ffff88810db5ead0 RCX: ffff88811f8fbcc0 [ 58.576811][ T292] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 58.576823][ T292] RBP: ffffc900045bfc40 R08: ffffffff81c9806f R09: 0000000000000003 [ 58.576834][ T292] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881110aa220 [ 58.652565][ T326] udevd[326]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 58.722958][ T292] R13: 1ffff11022215444 R14: ffff888100590168 R15: dffffc0000000000 [ 58.732424][ T292] FS: 0000555556c14500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.742037][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.748552][ T292] CR2: fffffffff0000000 CR3: 00000001298ba000 CR4: 00000000003506a0 [ 58.756318][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.756587][ T8] device bridge_slave_1 left promiscuous mode [ 58.764094][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.777782][ T292] Kernel panic - not syncing: Fatal exception [ 58.783882][ T292] Kernel Offset: disabled [ 58.788008][ T292] Rebooting in 86400 seconds..