last executing test programs: 6.360101486s ago: executing program 2 (id=1379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="85000000070000001f0000000000000085000000080000009500000000000000e135dee43f5d62cdaf5bb32c301264de232ce03ca49ba60071b592758143664bf8505b4845e336472821027a89dba77c8ea9b6ee1398ae73749be1537086ae214b648801a3f00574709ddccbce9ffab959bc042fc0dfcd37b7baa14007c92d4cf2d339d4000000000000000957476eac9cdac23d9c280569e2dbfa6211813205b5b8cbd97b7563dcbdbfba95ec64e00d93bfada6b71d91340a4508bcd72d77eba909bd6a9d45359cf11ad81000fb0f5548ced9733ca0fe9d8ca129b43551e5ca8cdad72f668dbfa9a21d9e8c4afb7203e71a4dcefc7a45ea63c8899caca26b63ddd0f7f5b45ad90b198709e6826217fd21bb69ba143e01ccbef34bdce3099f80a5ae740c01ffa4f0a207fa54f5112a341a195af0662c97c480fce27ae5abd0dfbd0fcdcf8b8c362667a67813555101d3f6abaaea7370a50445c52f0a0354dab0acdc6955a5f2dae85280f9f5a66b411fafe99d8a79d24cc9cf88e456cc54dda94eeda37b147dde6eb00ed338864d7d9855f9ee3a194294c73491ec0000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x44, 0x10, 0x0, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000100000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f0000001380)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0xfffffffffffffd57}, 0x28) 6.325100516s ago: executing program 2 (id=1380): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa7adee4e8bcc8f90dd26e065bc9cf7c355547bae484812f5fa7e37d6393a98c5637b1ac5874382a363c1f884fbb1f5fcccb087f98b6", 0x5c}, {&(0x7f0000000080)="976c3f466bc97261dd0c8d1b48fc881faf7277ef87eba502b3c1ba0e8fd045ce99c4d79171e5b8644bba5c5c9c6ec9547c660a87910000", 0x37}, {&(0x7f0000000380)="911e85f55c07", 0x6}], 0x3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) 6.259240866s ago: executing program 2 (id=1381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 6.245377126s ago: executing program 2 (id=1382): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x9}}, {@utf8}, {@discard}, {@errors_continue}, {}, {}, {@errors_remount}, {@utf8}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.164005416s ago: executing program 2 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 5.993228166s ago: executing program 2 (id=1390): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan1\x00', {0x2, 0x4e20, @rand_addr=0xfffffc13}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) 5.980858617s ago: executing program 32 (id=1390): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan1\x00', {0x2, 0x4e20, @rand_addr=0xfffffc13}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) 5.703579616s ago: executing program 1 (id=1398): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./file0\x00', 0x2008412, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f00000024c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) fallocate(r0, 0x8, 0x0, 0x10000) 4.688898797s ago: executing program 1 (id=1413): unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.124654287s ago: executing program 1 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.971117047s ago: executing program 1 (id=1432): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0xe, 0x7, "cf13216e9aa60f"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0}) 2.698235598s ago: executing program 0 (id=1464): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2.697718328s ago: executing program 0 (id=1465): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x2}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 1.427985508s ago: executing program 0 (id=1480): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x11000, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x3026c25, &(0x7f0000000840)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) 1.427574929s ago: executing program 1 (id=1473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f0100000000000000000009058103400000000009058202000000000009050302a6"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.407017219s ago: executing program 3 (id=1474): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1.339561859s ago: executing program 4 (id=1476): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40012002) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)}, 0x10040) 1.338231019s ago: executing program 0 (id=1477): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 1.044929929s ago: executing program 3 (id=1478): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xcc) 953.613208ms ago: executing program 0 (id=1479): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000009c0)) 454.489069ms ago: executing program 5 (id=1486): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 438.644249ms ago: executing program 5 (id=1487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write(r1, &(0x7f0000000200)="99", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x11, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 418.862909ms ago: executing program 5 (id=1488): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000540)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c73686f72746e616d653d6c6f7765722c696f636861727365743d757466382c6e66732c757466383d302c0058d9541b34c21f59fd1dc02f64ceca0d28dbd6ac31fa892e8882a8f40e543fb894e93968c918049f4cd74ba4643d71300b914b9c27e8a30bc320fe09dbe3ae9b224d948323b0eab53b2998168f45575ff38221fab1fe07f5931054f155123f882b37e61f54710d2533f75851e95691e088d95a2fc1d721e548091256c5d44cc13c7e89382452c990be90a4bd5800d25d7f22"], 0x0, 0x237, &(0x7f0000000300)="$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") renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./bus\x00') 398.242479ms ago: executing program 4 (id=1489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$security_selinux(r2, &(0x7f0000000080), 0x0, 0x0, 0x2) 333.342949ms ago: executing program 5 (id=1490): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 333.028049ms ago: executing program 4 (id=1491): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8ddab6479a6f1514ce8523c1f80508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x4cf7}], 0x1, 0x10001, 0x0) 319.254649ms ago: executing program 4 (id=1492): r0 = io_uring_setup(0x38af, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 273.811769ms ago: executing program 5 (id=1493): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001580)="d882f29bcdf7e8fdffffff08f4c01700", 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 238.138489ms ago: executing program 4 (id=1494): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800b000100697036746e6c000018000280140002002001000000000000000000000000000008000a00", @ANYRES32], 0x50}}, 0x0) 187.357239ms ago: executing program 3 (id=1495): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x174}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/59, 0x3b}, 0x0) 159.998029ms ago: executing program 3 (id=1496): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) 138.764699ms ago: executing program 3 (id=1497): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r1) 130.726539ms ago: executing program 4 (id=1498): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3810744, &(0x7f00000004c0)={[{@noauto_da_alloc}, {@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@data_ordered}, {@jqfmt_vfsv0}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 44.077069ms ago: executing program 5 (id=1499): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 17.888129ms ago: executing program 1 (id=1500): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000280)={0x0, 0x0, 0x20000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 11.050779ms ago: executing program 0 (id=1501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 0s ago: executing program 3 (id=1502): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xc) kernel console output (not intermixed with test programs): (loop1): Invalid log_blocksize (268), supports only 12 [ 40.969620][ T1066] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.002981][ T1066] F2FS-fs (loop1): invalid crc value [ 41.024181][ T1066] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.107860][ T1066] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 41.121133][ T1066] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.195601][ T1105] loop0: detected capacity change from 0 to 16 [ 41.203058][ T1105] erofs: (device loop0): mounted with root inode @ nid 36. [ 41.257014][ T1107] loop0: detected capacity change from 0 to 256 [ 41.308382][ T1107] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 41.332784][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 41.332800][ T28] audit: type=1400 audit(1733514159.297:262): avc: denied { create } for pid=1106 comm="syz.0.315" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.421720][ T1102] loop4: detected capacity change from 0 to 40427 [ 41.437610][ T1102] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 41.455433][ T1102] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.502016][ T1102] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.560243][ T1059] loop3: detected capacity change from 0 to 131072 [ 41.563736][ T1102] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.570769][ T1059] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(83886083) [ 41.575270][ T1102] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 41.581834][ T1059] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.597831][ T1059] F2FS-fs (loop3): invalid crc value [ 41.610798][ T1059] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.639772][ T28] audit: type=1400 audit(1733514159.597:263): avc: denied { create } for pid=1124 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.661117][ T317] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.672104][ T1102] syz.4.312: attempt to access beyond end of device [ 41.672104][ T1102] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.701807][ T294] syz-executor: attempt to access beyond end of device [ 41.701807][ T294] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 41.710257][ T1059] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.723725][ T1059] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 41.727485][ T28] audit: type=1400 audit(1733514159.597:264): avc: denied { bind } for pid=1124 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.862232][ T317] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.901515][ T317] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.926959][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.942913][ T1132] loop2: detected capacity change from 0 to 40427 [ 41.951190][ T317] usb 1-1: Product: syz [ 41.955349][ T317] usb 1-1: Manufacturer: syz [ 41.959704][ T317] usb 1-1: SerialNumber: syz [ 41.965058][ T1132] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 41.986330][ T1132] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.997268][ T1132] F2FS-fs (loop2): fault_injection options not supported [ 42.015301][ T1132] F2FS-fs (loop2): invalid crc value [ 42.039844][ T1132] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.088236][ T1132] F2FS-fs (loop2): Start checkpoint disabled! [ 42.095395][ T1132] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.103079][ T1132] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 42.145688][ T1132] syz.2.323: attempt to access beyond end of device [ 42.145688][ T1132] loop2: rw=2049, sector=77824, nr_sectors = 768 limit=40427 [ 42.199444][ T8] kworker/u4:0: attempt to access beyond end of device [ 42.199444][ T8] loop2: rw=1, sector=77848, nr_sectors = 8 limit=40427 [ 42.214140][ T8] kworker/u4:0: attempt to access beyond end of device [ 42.214140][ T8] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 42.355851][ T1153] loop4: detected capacity change from 0 to 128 [ 42.362755][ T1153] FAT-fs (loop4): bogus number of reserved sectors [ 42.369564][ T1153] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 42.379006][ T1153] FAT-fs (loop4): Can't find a valid FAT filesystem [ 42.543822][ T1153] loop4: detected capacity change from 0 to 40427 [ 42.550700][ T1153] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 42.556971][ T1153] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 42.566017][ T1153] F2FS-fs (loop4): invalid crc value [ 42.572949][ T1153] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 42.595343][ T28] audit: type=1400 audit(1733514416.559:265): avc: denied { ioctl } for pid=1160 comm="syz.1.332" path="socket:[19551]" dev="sockfs" ino=19551 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.610478][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.627148][ T1153] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 42.634373][ T1153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.661807][ T294] syz-executor: attempt to access beyond end of device [ 42.661807][ T294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 42.739411][ T1166] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 42.749160][ T28] audit: type=1400 audit(1733514416.709:266): avc: denied { relabelto } for pid=1165 comm="syz.4.333" name="tty29" dev="devtmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_exec_t:s0" [ 42.751119][ T40] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.783426][ T28] audit: type=1400 audit(1733514416.709:267): avc: denied { associate } for pid=1165 comm="syz.4.333" name="tty29" dev="devtmpfs" ino=47 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_exec_t:s0" [ 42.938903][ T28] audit: type=1400 audit(1733514416.899:268): avc: denied { sys_module } for pid=1173 comm="syz.3.336" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 42.939169][ T1174] Invalid ELF header magic: != ELF [ 42.960024][ T28] audit: type=1400 audit(1733514416.899:269): avc: denied { module_load } for pid=1173 comm="syz.3.336" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 42.992782][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.013175][ T317] cdc_ncm 1-1:1.0: bind() failure [ 43.014143][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.019225][ T317] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 43.046091][ T40] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 43.052322][ T317] cdc_ncm 1-1:1.1: bind() failure [ 43.064542][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.077238][ T40] usb 3-1: config 0 descriptor?? [ 43.077491][ T317] usb 1-1: USB disconnect, device number 5 [ 43.261701][ T28] audit: type=1400 audit(1733514417.229:270): avc: denied { read } for pid=1201 comm="syz.4.349" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 43.301001][ T28] audit: type=1400 audit(1733514417.229:271): avc: denied { open } for pid=1201 comm="syz.4.349" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 43.417168][ T1215] loop4: detected capacity change from 0 to 128 [ 43.423904][ T1215] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.436507][ T1215] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.458205][ T316] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.492695][ T40] hid-led 0003:0FC5:B080.0005: item fetching failed at offset 0/3 [ 43.500465][ T40] hid-led: probe of 0003:0FC5:B080.0005 failed with error -22 [ 43.585239][ T1228] kvm [1227]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xb9200080000 [ 43.667530][ T1233] loop0: detected capacity change from 0 to 8192 [ 43.708774][ T228] usb 3-1: USB disconnect, device number 6 [ 43.741225][ T1235] tipc: Started in network mode [ 43.745960][ T1235] tipc: Node identity 7f000001, cluster identity 4711 [ 43.753178][ T1235] tipc: Enabled bearer , priority 10 [ 43.779286][ T1240] syz.4.366[1240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.779365][ T1240] syz.4.366[1240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.880668][ T1248] device vlan2 entered promiscuous mode [ 43.897671][ T1248] device veth1_to_batadv entered promiscuous mode [ 43.937742][ T1252] loop4: detected capacity change from 0 to 512 [ 43.944714][ T1252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.972911][ T1252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.982103][ T1252] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.009271][ T1252] EXT4-fs (loop4): shut down requested (0) [ 44.029763][ T294] EXT4-fs (loop4): unmounting filesystem. [ 44.342953][ T1289] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 44.412538][ T1238] loop0: detected capacity change from 0 to 131072 [ 44.450549][ T1238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.489019][ T1310] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 44.537747][ T1238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.661130][ T1163] Bluetooth: hci0: command 0x1003 tx timeout [ 44.661127][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.871321][ T40] tipc: Node number set to 2130706433 [ 45.236328][ T1385] request_module fs-autofs succeeded, but still no fs? [ 45.571109][ T844] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.655281][ T1433] loop4: detected capacity change from 0 to 256 [ 45.670156][ T1433] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 45.714791][ T1439] loop4: detected capacity change from 0 to 128 [ 45.728695][ T1439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.737303][ T1439] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.769449][ T844] usb 1-1: Using ep0 maxpacket: 16 [ 45.780064][ T1439] EXT4-fs (loop4): shut down requested (0) [ 45.781234][ T317] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.786578][ T1425] loop3: detected capacity change from 0 to 40427 [ 45.793664][ T844] usb 1-1: config 0 has no interfaces? [ 45.805345][ T1425] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 45.813113][ T1425] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.822215][ T844] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 45.822630][ T294] EXT4-fs (loop4): unmounting filesystem. [ 45.831460][ T1425] F2FS-fs (loop3): invalid crc value [ 45.841834][ T844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.849615][ T844] usb 1-1: Product: syz [ 45.853743][ T844] usb 1-1: Manufacturer: syz [ 45.858078][ T844] usb 1-1: SerialNumber: syz [ 45.863357][ T844] r8152-cfgselector 1-1: config 0 descriptor?? [ 45.870285][ T1425] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.930969][ T1425] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.937998][ T1425] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.982328][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.993169][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.003124][ T317] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 46.012232][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.020892][ T317] usb 3-1: config 0 descriptor?? [ 46.075925][ T844] r8152-cfgselector 1-1: Unknown version 0x0000 [ 46.083787][ T844] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 46.164372][ T1425] F2FS-fs (loop3): Start checkpoint disabled! [ 46.171178][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 46.351122][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 46.357372][ T19] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.365844][ T19] usb 5-1: config 179 has no interface number 0 [ 46.372285][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 46.383555][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 46.395632][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.406761][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 46.418684][ T19] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.434208][ T317] isku 0003:1E7D:319C.0006: invalid report_size 23040 [ 46.440893][ T317] isku 0003:1E7D:319C.0006: item 0 2 1 7 parsing failed [ 46.448115][ T19] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 46.457678][ T317] isku 0003:1E7D:319C.0006: parse failed [ 46.463455][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.471471][ T317] isku: probe of 0003:1E7D:319C.0006 failed with error -22 [ 46.479530][ T1448] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 46.619915][ T1465] loop3: detected capacity change from 0 to 40427 [ 46.650960][ T317] usb 3-1: USB disconnect, device number 7 [ 46.659162][ T1465] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 46.679801][ T1465] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 46.702482][ T1465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.712436][ T844] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 46.735825][ T1469] loop1: detected capacity change from 0 to 40427 [ 46.751081][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 46.751098][ T28] audit: type=1400 audit(1733514420.709:291): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=711 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.764813][ T1469] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 46.792911][ T1465] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 46.797983][ T1469] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 46.800193][ T1465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.808876][ T28] audit: type=1400 audit(1733514420.709:292): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=711 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.820692][ T1469] F2FS-fs (loop1): invalid crc value [ 46.844625][ T28] audit: type=1400 audit(1733514420.709:293): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=711 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.874581][ T1469] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.912191][ T1448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.920474][ T1448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.958823][ T1469] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 46.976004][ T1469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.019893][ T28] audit: type=1400 audit(1733514420.979:294): avc: denied { unlink } for pid=1468 comm="syz.1.464" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.020475][ T1469] syz.1.464: attempt to access beyond end of device [ 47.020475][ T1469] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 47.063281][ T293] syz-executor: attempt to access beyond end of device [ 47.063281][ T293] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 47.086866][ T293] syz-executor: attempt to access beyond end of device [ 47.086866][ T293] loop3: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 47.101451][ T293] syz-executor: attempt to access beyond end of device [ 47.101451][ T293] loop3: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 47.116573][ T293] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 47.116615][ T293] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 47.124374][ T293] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 47.142899][ T40] usb 5-1: USB disconnect, device number 6 [ 47.142964][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 47.165052][ T40] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 47.165231][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 47.452889][ T1492] loop2: detected capacity change from 0 to 40427 [ 47.453333][ T1498] loop1: detected capacity change from 0 to 512 [ 47.471139][ T1492] F2FS-fs (loop2): invalid crc value [ 47.489193][ T1492] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.507474][ T1498] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.532820][ T1504] syz.3.474[1504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.532897][ T1504] syz.3.474[1504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.566005][ T1498] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.469: corrupted inode contents [ 47.596083][ T28] audit: type=1400 audit(1733514421.559:295): avc: denied { watch watch_reads } for pid=1503 comm="syz.3.474" path="/118" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.620029][ T1492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.634971][ T1498] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #16: comm syz.1.469: mark_inode_dirty error [ 47.694704][ T1498] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.469: corrupted inode contents [ 47.706972][ T1498] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.469: mark_inode_dirty error [ 47.730314][ T1498] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.469: corrupted inode contents [ 47.748584][ T1498] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 47.757893][ T1498] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.469: corrupted inode contents [ 47.770168][ T1498] EXT4-fs error (device loop1): ext4_truncate:4313: inode #16: comm syz.1.469: mark_inode_dirty error [ 47.781434][ T1498] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 47.791958][ T1498] EXT4-fs (loop1): 1 truncate cleaned up [ 47.797458][ T1498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.815818][ T316] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 47.831164][ T1498] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.841798][ T316] EXT4-fs error (device loop1): ext4_release_dquot:6811: comm kworker/u4:4: Failed to release dquot type 1 [ 47.917826][ T290] EXT4-fs (loop1): unmounting filesystem. [ 47.926235][ T1520] SELinux: policydb version 0 does not match my version range 15-33 [ 47.936161][ T1518] syz.2.471: attempt to access beyond end of device [ 47.936161][ T1518] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.950401][ T1520] SELinux: failed to load policy [ 48.211306][ T1533] loop2: detected capacity change from 0 to 2048 [ 48.234609][ T844] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 48.242727][ T1536] SELinux: policydb version 0 does not match my version range 15-33 [ 48.250704][ T1536] SELinux: failed to load policy [ 48.289491][ T1533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.298032][ T1533] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.331244][ T1533] fs-verity: sha512 using implementation "sha512-avx2" [ 48.380575][ T1533] syz.2.482 (1533) used greatest stack depth: 20840 bytes left [ 48.399620][ T292] EXT4-fs (loop2): unmounting filesystem. [ 48.433247][ T844] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 48.446594][ T844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.457406][ T844] usb 2-1: config 0 descriptor?? [ 48.523632][ T28] audit: type=1400 audit(1733514422.489:296): avc: denied { read } for pid=1560 comm="syz.0.497" dev="nsfs" ino=4026532748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.545618][ T28] audit: type=1400 audit(1733514422.489:297): avc: denied { open } for pid=1560 comm="syz.0.497" path="net:[4026532748]" dev="nsfs" ino=4026532748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.597473][ T1565] loop3: detected capacity change from 0 to 256 [ 48.609129][ T1565] FAT-fs (loop3): Directory bread(block 64) failed [ 48.615748][ T1565] FAT-fs (loop3): Directory bread(block 65) failed [ 48.622208][ T1565] FAT-fs (loop3): Directory bread(block 66) failed [ 48.628643][ T1565] FAT-fs (loop3): Directory bread(block 67) failed [ 48.635627][ T1565] FAT-fs (loop3): Directory bread(block 68) failed [ 48.642364][ T1565] FAT-fs (loop3): Directory bread(block 69) failed [ 48.649037][ T1565] FAT-fs (loop3): Directory bread(block 70) failed [ 48.655967][ T1565] FAT-fs (loop3): Directory bread(block 71) failed [ 48.663118][ T1565] FAT-fs (loop3): Directory bread(block 72) failed [ 48.669535][ T1565] FAT-fs (loop3): Directory bread(block 73) failed [ 48.854087][ T1589] loop0: detected capacity change from 0 to 256 [ 48.873893][ T1589] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 48.891643][ T1589] exFAT-fs (loop0): hint_cluster is invalid (17) [ 48.900584][ T1589] exFAT-fs (loop0): error, broken FAT chain. [ 48.906606][ T1589] exFAT-fs (loop0): Filesystem has been set read-only [ 48.913560][ T1589] exFAT-fs (loop0): error, failed to bmap (inode : ffff888117081570 iblock : 8, err : -5) [ 48.951113][ T317] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 49.110247][ T1598] loop0: detected capacity change from 0 to 40427 [ 49.117080][ T1598] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 49.124741][ T1598] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 49.133768][ T1598] F2FS-fs (loop0): invalid crc value [ 49.140337][ T1598] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.147659][ T317] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.160232][ T317] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.169419][ T317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.177341][ T317] usb 5-1: Product: syz [ 49.181351][ T317] usb 5-1: Manufacturer: syz [ 49.185791][ T317] usb 5-1: SerialNumber: syz [ 49.190211][ T1598] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 49.197118][ T1598] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.424104][ T1612] loop2: detected capacity change from 0 to 256 [ 49.445087][ T1612] FAT-fs (loop2): Directory bread(block 64) failed [ 49.451587][ T1612] FAT-fs (loop2): Directory bread(block 65) failed [ 49.461526][ T1612] FAT-fs (loop2): Directory bread(block 66) failed [ 49.470123][ T1612] FAT-fs (loop2): Directory bread(block 67) failed [ 49.477879][ T844] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 49.488039][ T844] asix: probe of 2-1:0.0 failed with error -71 [ 49.494311][ T1612] FAT-fs (loop2): Directory bread(block 68) failed [ 49.505031][ T844] usb 2-1: USB disconnect, device number 5 [ 49.510858][ T1612] FAT-fs (loop2): Directory bread(block 69) failed [ 49.527339][ T1612] FAT-fs (loop2): Directory bread(block 70) failed [ 49.533899][ T1612] FAT-fs (loop2): Directory bread(block 71) failed [ 49.540462][ T1612] FAT-fs (loop2): Directory bread(block 72) failed [ 49.549176][ T1612] FAT-fs (loop2): Directory bread(block 73) failed [ 49.568597][ T1598] F2FS-fs (loop0): Start checkpoint disabled! [ 49.640797][ T28] audit: type=1400 audit(1733514423.599:298): avc: denied { ioctl } for pid=1620 comm="syz.3.523" path="socket:[21782]" dev="sockfs" ino=21782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.667537][ T28] audit: type=1400 audit(1733514423.629:299): avc: denied { write } for pid=1620 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.716403][ T1629] loop3: detected capacity change from 0 to 512 [ 49.744555][ T1629] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.525: corrupted inode contents [ 49.761915][ T1629] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #16: comm syz.3.525: mark_inode_dirty error [ 49.774409][ T1629] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.525: corrupted inode contents [ 49.792447][ T1629] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.525: mark_inode_dirty error [ 49.804388][ T1629] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.525: corrupted inode contents [ 49.816619][ T1629] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 49.825757][ T1629] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.525: corrupted inode contents [ 49.838076][ T1629] EXT4-fs error (device loop3): ext4_truncate:4313: inode #16: comm syz.3.525: mark_inode_dirty error [ 49.849947][ T1629] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 49.859774][ T1629] EXT4-fs (loop3): 1 truncate cleaned up [ 49.866027][ T1629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.875293][ T316] EXT4-fs error (device loop3): ext4_release_dquot:6811: comm kworker/u4:4: Failed to release dquot type 1 [ 49.877284][ T1629] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.911322][ T19] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 49.924688][ T293] EXT4-fs (loop3): unmounting filesystem. [ 49.964363][ T1643] syz.0.530[1643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.964464][ T1643] syz.0.530[1643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.968006][ T1645] loop3: detected capacity change from 0 to 256 [ 50.035282][ T1649] loop0: detected capacity change from 0 to 256 [ 50.069453][ T1649] FAT-fs (loop0): Directory bread(block 64) failed [ 50.084982][ T1649] FAT-fs (loop0): Directory bread(block 65) failed [ 50.092141][ T1649] FAT-fs (loop0): Directory bread(block 66) failed [ 50.098547][ T1649] FAT-fs (loop0): Directory bread(block 67) failed [ 50.105531][ T1649] FAT-fs (loop0): Directory bread(block 68) failed [ 50.108700][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.112508][ T1649] FAT-fs (loop0): Directory bread(block 69) failed [ 50.131078][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.136007][ T1649] FAT-fs (loop0): Directory bread(block 70) failed [ 50.153652][ T1649] FAT-fs (loop0): Directory bread(block 71) failed [ 50.160762][ T1649] FAT-fs (loop0): Directory bread(block 72) failed [ 50.162386][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 50.167667][ T1649] FAT-fs (loop0): Directory bread(block 73) failed [ 50.204151][ T19] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 50.217944][ T317] cdc_ncm 5-1:1.0: bind() failure [ 50.223806][ T317] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 50.230407][ T317] cdc_ncm 5-1:1.1: bind() failure [ 50.243822][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.260966][ T317] usb 5-1: USB disconnect, device number 7 [ 50.268706][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.277276][ T19] usb 3-1: Product: syz [ 50.282183][ T19] usb 3-1: Manufacturer: syz [ 50.291072][ T19] usb 3-1: SerialNumber: syz [ 50.297083][ T1623] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.327178][ T1647] loop1: detected capacity change from 0 to 40427 [ 50.334078][ T1647] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 50.341998][ T1647] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 50.350946][ T1647] F2FS-fs (loop1): invalid crc value [ 50.358123][ T1647] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.410613][ T1647] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 50.417732][ T1647] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 50.691314][ T1647] F2FS-fs (loop1): Start checkpoint disabled! [ 50.801090][ T40] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.928008][ T1702] loop1: detected capacity change from 0 to 2048 [ 50.942625][ T1702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 50.968258][ T290] EXT4-fs (loop1): unmounting filesystem. [ 50.992335][ T40] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 51.001901][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.010669][ T40] usb 1-1: config 0 descriptor?? [ 51.326423][ T19] cdc_ncm 3-1:1.0: bind() failure [ 51.332518][ T19] hub: probe of 3-1:1.1 failed with error -71 [ 51.339411][ T19] usb 3-1: USB disconnect, device number 8 [ 51.811956][ T1715] loop4: detected capacity change from 0 to 40427 [ 51.818841][ T1715] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 51.827062][ T1715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 51.836369][ T1715] F2FS-fs (loop4): invalid crc value [ 51.845196][ T1715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.888451][ T1715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 51.895588][ T1715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.981097][ T228] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 52.028380][ T40] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 52.039765][ T40] asix: probe of 1-1:0.0 failed with error -71 [ 52.052740][ T40] usb 1-1: USB disconnect, device number 7 [ 52.125553][ T1715] F2FS-fs (loop4): Start checkpoint disabled! [ 52.172977][ T228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.192471][ T228] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.211134][ T228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.224682][ T1727] loop4: detected capacity change from 0 to 256 [ 52.229218][ T228] usb 2-1: Product: syz [ 52.234827][ T228] usb 2-1: Manufacturer: syz [ 52.240528][ T228] usb 2-1: SerialNumber: syz [ 52.252307][ T1727] FAT-fs (loop4): Directory bread(block 64) failed [ 52.258722][ T1727] FAT-fs (loop4): Directory bread(block 65) failed [ 52.265688][ T1727] FAT-fs (loop4): Directory bread(block 66) failed [ 52.272273][ T1727] FAT-fs (loop4): Directory bread(block 67) failed [ 52.278676][ T1727] FAT-fs (loop4): Directory bread(block 68) failed [ 52.285369][ T1727] FAT-fs (loop4): Directory bread(block 69) failed [ 52.291972][ T1727] FAT-fs (loop4): Directory bread(block 70) failed [ 52.298367][ T1727] FAT-fs (loop4): Directory bread(block 71) failed [ 52.305001][ T1727] FAT-fs (loop4): Directory bread(block 72) failed [ 52.311647][ T1727] FAT-fs (loop4): Directory bread(block 73) failed [ 52.367511][ T1725] loop2: detected capacity change from 0 to 40427 [ 52.379385][ T1725] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 52.388406][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 52.388423][ T28] audit: type=1400 audit(1733514426.349:345): avc: denied { create } for pid=1729 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.389442][ T1725] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.436151][ T1725] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.482336][ T1725] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 52.489215][ T1725] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.518881][ T28] audit: type=1400 audit(1733514426.479:346): avc: denied { write } for pid=1724 comm="syz.2.561" path="/85/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.559150][ T1740] loop0: detected capacity change from 0 to 16 [ 52.577339][ T1740] erofs: (device loop0): mounted with root inode @ nid 36. [ 52.598435][ T28] audit: type=1400 audit(1733514426.559:347): avc: denied { execute } for pid=1739 comm="syz.0.564" name="file0" dev="loop0" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.621214][ T28] audit: type=1400 audit(1733514426.559:348): avc: denied { read open } for pid=1739 comm="syz.0.564" path="/43/file1/file0/file0" dev="loop0" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.662502][ T1744] loop0: detected capacity change from 0 to 2048 [ 52.681224][ T28] audit: type=1400 audit(1733514426.559:349): avc: denied { execute_no_trans } for pid=1739 comm="syz.0.564" path="/43/file1/file0/file0" dev="loop0" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.708448][ T28] audit: type=1400 audit(1733514426.579:350): avc: denied { setopt } for pid=1741 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.729714][ T28] audit: type=1400 audit(1733514426.579:351): avc: denied { write } for pid=1741 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.751236][ T1744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.790955][ T292] syz-executor: attempt to access beyond end of device [ 52.790955][ T292] loop2: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 52.805806][ T292] syz-executor: attempt to access beyond end of device [ 52.805806][ T292] loop2: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 52.820434][ T292] syz-executor: attempt to access beyond end of device [ 52.820434][ T292] loop2: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 52.836051][ T292] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5 [ 52.836088][ T292] F2FS-fs (loop2): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 52.843861][ T292] F2FS-fs (loop2): Issue discard(10240, 10240, 512) failed, ret: -5 [ 52.860500][ T959] EXT4-fs (loop0): unmounting filesystem. [ 52.993842][ T28] audit: type=1400 audit(1733514426.959:352): avc: denied { mount } for pid=1755 comm="syz.2.572" name="/" dev="incremental-fs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.028096][ T28] audit: type=1400 audit(1733514426.979:353): avc: denied { read } for pid=1755 comm="syz.2.572" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.052111][ T28] audit: type=1400 audit(1733514426.979:354): avc: denied { open } for pid=1755 comm="syz.2.572" path="/86/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.246922][ T1771] loop3: detected capacity change from 0 to 16 [ 53.253598][ T1771] erofs: (device loop3): mounted with root inode @ nid 36. [ 53.264202][ T228] cdc_ncm 2-1:1.0: bind() failure [ 53.269991][ T228] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 53.279566][ T228] cdc_ncm 2-1:1.1: bind() failure [ 53.309851][ T228] usb 2-1: USB disconnect, device number 6 [ 53.577580][ T1765] loop4: detected capacity change from 0 to 131072 [ 53.603482][ T1765] F2FS-fs (loop4): Found nat_bits in checkpoint [ 53.649803][ T1765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.860648][ T1779] loop3: detected capacity change from 0 to 131072 [ 53.881084][ T1779] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 53.887634][ T1779] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.917317][ T1779] F2FS-fs (loop3): invalid crc value [ 53.952455][ T1779] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.048342][ T1785] loop1: detected capacity change from 0 to 40427 [ 54.062133][ T1779] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.069367][ T1779] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 54.077090][ T1785] F2FS-fs (loop1): invalid crc value [ 54.095913][ T1785] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.168278][ T1785] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.329742][ T1785] syz.1.583: attempt to access beyond end of device [ 54.329742][ T1785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 54.491847][ T1815] loop3: detected capacity change from 0 to 128 [ 54.511764][ T1815] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.534487][ T1815] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.586007][ T1821] syz.2.597[1821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.586109][ T1821] syz.2.597[1821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.612690][ T316] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.612920][ T1824] loop1: detected capacity change from 0 to 256 [ 54.653411][ T1824] FAT-fs (loop1): Directory bread(block 64) failed [ 54.667031][ T1824] FAT-fs (loop1): Directory bread(block 65) failed [ 54.679085][ T1824] FAT-fs (loop1): Directory bread(block 66) failed [ 54.688470][ T1824] FAT-fs (loop1): Directory bread(block 67) failed [ 54.699510][ T1824] FAT-fs (loop1): Directory bread(block 68) failed [ 54.707033][ T1824] FAT-fs (loop1): Directory bread(block 69) failed [ 54.713567][ T1824] FAT-fs (loop1): Directory bread(block 70) failed [ 54.720010][ T1824] FAT-fs (loop1): Directory bread(block 71) failed [ 54.726561][ T1824] FAT-fs (loop1): Directory bread(block 72) failed [ 54.733174][ T1824] FAT-fs (loop1): Directory bread(block 73) failed [ 54.862533][ T1846] kvm [1841]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xb9200080000 [ 55.111093][ T317] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 55.147841][ T1884] device erspan1 entered promiscuous mode [ 55.288499][ T1898] loop4: detected capacity change from 0 to 512 [ 55.294210][ T1879] loop1: detected capacity change from 0 to 40427 [ 55.302275][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.320550][ T1879] F2FS-fs (loop1): invalid crc value [ 55.321439][ T1898] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.332173][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.342734][ T1879] F2FS-fs (loop1): Found nat_bits in checkpoint [ 55.351826][ T317] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.360774][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.381129][ T1162] Bluetooth: hci0: command 0x1003 tx timeout [ 55.387002][ T1333] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.388961][ T317] usb 3-1: Product: syz [ 55.401583][ T1898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.417380][ T317] usb 3-1: Manufacturer: syz [ 55.431748][ T1879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 55.436155][ T317] usb 3-1: SerialNumber: syz [ 55.473943][ T294] EXT4-fs (loop4): unmounting filesystem. [ 55.499964][ T1879] syz.1.622: attempt to access beyond end of device [ 55.499964][ T1879] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 55.524512][ T1895] loop3: detected capacity change from 0 to 40427 [ 55.531284][ T290] syz-executor: attempt to access beyond end of device [ 55.531284][ T290] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 55.536812][ T1895] F2FS-fs (loop3): fault_injection options not supported [ 55.558123][ T1895] F2FS-fs (loop3): heap/no_heap options were deprecated [ 55.565335][ T1895] F2FS-fs (loop3): Image doesn't support compression [ 55.572935][ T1895] F2FS-fs (loop3): invalid crc value [ 55.579319][ T1895] F2FS-fs (loop3): Found nat_bits in checkpoint [ 55.631165][ T1895] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 55.669794][ T317] usb 3-1: 0:2 : does not exist [ 55.678436][ T317] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 55.698731][ T317] usb 3-1: USB disconnect, device number 9 [ 55.706997][ T293] syz-executor: attempt to access beyond end of device [ 55.706997][ T293] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.731302][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 55.866089][ T1929] loop3: detected capacity change from 0 to 1024 [ 55.883159][ T1929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.350281][ T1980] netlink: 'syz.4.663': attribute type 322 has an invalid length. [ 56.575530][ T1982] loop4: detected capacity change from 0 to 40427 [ 56.591076][ T40] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 56.603317][ T1982] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.652492][ T1982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.701650][ T294] syz-executor: attempt to access beyond end of device [ 56.701650][ T294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.781234][ T40] usb 3-1: Using ep0 maxpacket: 16 [ 56.788734][ T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.816881][ T293] EXT4-fs (loop3): unmounting filesystem. [ 56.816886][ T40] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 56.816926][ T40] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 56.843900][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.869834][ T40] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 56.938012][ T2013] loop4: detected capacity change from 0 to 16 [ 56.948158][ T2013] erofs: (device loop4): mounted with root inode @ nid 36. [ 57.071967][ T228] usb 3-1: USB disconnect, device number 10 [ 57.121842][ T2034] tmpfs: Unknown parameter '9' [ 57.284172][ T2059] loop1: detected capacity change from 0 to 512 [ 57.292054][ T2059] EXT4-fs (loop1): unsupported inode size: 143 [ 57.298242][ T2059] EXT4-fs (loop1): blocksize: 1024 [ 57.406068][ T2076] loop1: detected capacity change from 0 to 512 [ 57.420810][ T2076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.427497][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 57.427519][ T28] audit: type=1400 audit(1733514431.379:413): avc: denied { ioctl } for pid=2077 comm="syz.4.705" path="socket:[23667]" dev="sockfs" ino=23667 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.435098][ T2076] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.704: corrupted inode contents [ 57.435271][ T2076] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #16: comm syz.1.704: mark_inode_dirty error [ 57.482922][ T2076] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.704: corrupted inode contents [ 57.497197][ T2076] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.704: mark_inode_dirty error [ 57.503264][ T28] audit: type=1400 audit(1733514431.459:414): avc: denied { mount } for pid=2081 comm="syz.4.706" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.508470][ T2076] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.704: corrupted inode contents [ 57.539069][ T28] audit: type=1400 audit(1733514431.489:415): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.542038][ T2076] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 57.569703][ T2076] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.704: corrupted inode contents [ 57.608403][ T2076] EXT4-fs error (device loop1): ext4_truncate:4313: inode #16: comm syz.1.704: mark_inode_dirty error [ 57.624153][ T2076] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 57.636962][ T2076] EXT4-fs (loop1): 1 truncate cleaned up [ 57.642495][ T2076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.651731][ T2076] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.666966][ T2090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.708'. [ 57.690891][ T316] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.731551][ T316] EXT4-fs error (device loop1): ext4_release_dquot:6811: comm kworker/u4:4: Failed to release dquot type 1 [ 57.751922][ T28] audit: type=1400 audit(1733514431.712:416): avc: denied { setopt } for pid=2097 comm="syz.2.715" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.804643][ T28] audit: type=1400 audit(1733514431.752:417): avc: denied { create } for pid=2101 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.840442][ T290] EXT4-fs (loop1): unmounting filesystem. [ 57.851990][ T28] audit: type=1400 audit(1733514431.752:418): avc: denied { write } for pid=2101 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.885646][ T2104] loop2: detected capacity change from 0 to 8192 [ 57.906145][ T28] audit: type=1400 audit(1733514431.852:419): avc: denied { mounton } for pid=2103 comm="syz.2.717" path="/108/file0/file0" dev="loop2" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 57.940423][ T28] audit: type=1400 audit(1733514431.852:420): avc: denied { write } for pid=2103 comm="syz.2.717" name="/" dev="incremental-fs" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.028123][ T28] audit: type=1400 audit(1733514431.852:421): avc: denied { remove_name } for pid=2103 comm="syz.2.717" name="file0" dev="incremental-fs" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.130813][ T2131] capability: warning: `syz.2.729' uses 32-bit capabilities (legacy support in use) [ 58.164892][ T2100] loop0: detected capacity change from 0 to 40427 [ 58.181839][ T2100] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 58.191804][ T2100] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.249761][ T2100] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.342097][ T2100] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.348974][ T2100] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.367248][ T2100] syz.0.714: attempt to access beyond end of device [ 58.367248][ T2100] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.374562][ T2123] loop4: detected capacity change from 0 to 40427 [ 58.385887][ T2100] syz.0.714: attempt to access beyond end of device [ 58.385887][ T2100] loop0: rw=2049, sector=77824, nr_sectors = 792 limit=40427 [ 58.399524][ T2123] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 58.401389][ T2100] syz.0.714: attempt to access beyond end of device [ 58.401389][ T2100] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.408375][ T2123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 58.431491][ T2123] F2FS-fs (loop4): invalid crc value [ 58.437986][ T2123] F2FS-fs (loop4): Found nat_bits in checkpoint [ 58.489463][ T2123] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 58.496516][ T2123] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 58.563906][ T2159] Invalid ELF header magic: != ELF [ 58.581685][ T40] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 58.611096][ T313] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 58.772242][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.783243][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.792886][ T40] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.801848][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 58.807043][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.815756][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.829061][ T40] usb 2-1: config 0 descriptor?? [ 58.835111][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.845044][ T313] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 58.854079][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.867658][ T313] usb 3-1: config 0 descriptor?? [ 58.872569][ T317] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 58.913188][ T2175] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 59.062240][ T317] usb 1-1: Using ep0 maxpacket: 16 [ 59.068318][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.079098][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.088711][ T317] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 59.097644][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.106077][ T317] usb 1-1: config 0 descriptor?? [ 59.264072][ T40] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 59.274103][ T40] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input8 [ 59.287466][ T313] hid-generic 0003:0403:6030.0008: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 59.353895][ T40] keytouch 0003:0926:3333.0007: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 59.466070][ T40] usb 2-1: USB disconnect, device number 7 [ 59.514128][ T317] hid-multitouch 0003:1FD2:6007.0009: item fetching failed at offset 3/5 [ 59.522632][ T317] hid-multitouch: probe of 0003:1FD2:6007.0009 failed with error -22 [ 59.715464][ T317] usb 1-1: USB disconnect, device number 10 [ 60.313184][ T2239] loop4: detected capacity change from 0 to 16 [ 60.319699][ T2239] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 21004) [ 60.353670][ T2243] syz.4.776[2243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.353808][ T2243] syz.4.776[2243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.386920][ T2245] xt_hashlimit: max too large, truncated to 1048576 [ 60.437779][ T2250] hub 6-0:1.0: USB hub found [ 60.442501][ T2250] hub 6-0:1.0: 1 port detected [ 60.688440][ T2275] syz.0.790[2275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.688517][ T2275] syz.0.790[2275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.038051][ T2299] loop4: detected capacity change from 0 to 40427 [ 61.056173][ T2299] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 61.064044][ T2299] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 61.073180][ T2299] F2FS-fs (loop4): invalid crc value [ 61.079904][ T2299] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.116319][ T2299] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 61.123375][ T2299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 61.142253][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 61.164088][ T2299] syz.4.800: attempt to access beyond end of device [ 61.164088][ T2299] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 61.221113][ T317] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 61.341113][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 61.347318][ T19] usb 1-1: config 0 has no interfaces? [ 61.349051][ T40] usb 3-1: USB disconnect, device number 11 [ 61.355148][ T19] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 61.380864][ T2318] tipc: Started in network mode [ 61.390464][ T2318] tipc: Node identity ffffffff, cluster identity 4711 [ 61.393796][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 61.397546][ T2318] tipc: Node number set to 4294967295 [ 61.405252][ T317] usb 2-1: Using ep0 maxpacket: 8 [ 61.416034][ T19] usb 1-1: Product: syz [ 61.420144][ T19] usb 1-1: Manufacturer: syz [ 61.427215][ T19] usb 1-1: SerialNumber: syz [ 61.432506][ T317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.442917][ T19] r8152-cfgselector 1-1: config 0 descriptor?? [ 61.449738][ T317] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 61.459177][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 61.467410][ T317] usb 2-1: SerialNumber: syz [ 61.472754][ T317] usb 2-1: config 0 descriptor?? [ 61.478496][ T317] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 61.485433][ T317] usb 2-1: No valid video chain found. [ 61.650135][ T10] usb 1-1: config 0 descriptor?? [ 61.682949][ T40] usb 2-1: USB disconnect, device number 8 [ 61.852516][ T313] usb 1-1: USB disconnect, device number 11 [ 61.853644][ T10] usb 1-1: can't set config #0, error -71 [ 62.254034][ T2337] syz.2.814 uses obsolete (PF_INET,SOCK_PACKET) [ 62.693472][ T2341] loop2: detected capacity change from 0 to 40427 [ 62.702268][ T2341] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 62.709933][ T2341] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.718778][ T2341] F2FS-fs (loop2): invalid crc value [ 62.725309][ T2341] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.760358][ T2341] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 62.767271][ T2341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 62.798788][ T2341] syz.2.816: attempt to access beyond end of device [ 62.798788][ T2341] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 62.827648][ T2377] loop4: detected capacity change from 0 to 256 [ 62.874247][ T2377] FAT-fs (loop4): Directory bread(block 64) failed [ 62.880624][ T2377] FAT-fs (loop4): Directory bread(block 65) failed [ 62.890713][ T2386] loop3: detected capacity change from 0 to 512 [ 62.905316][ T2386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.908299][ T2377] FAT-fs (loop4): Directory bread(block 66) failed [ 62.943535][ T2377] FAT-fs (loop4): Directory bread(block 67) failed [ 62.950027][ T2377] FAT-fs (loop4): Directory bread(block 68) failed [ 62.956583][ T2377] FAT-fs (loop4): Directory bread(block 69) failed [ 62.971299][ T2377] FAT-fs (loop4): Directory bread(block 70) failed [ 62.984837][ T2386] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.836: corrupted inode contents [ 62.987907][ T2377] FAT-fs (loop4): Directory bread(block 71) failed [ 63.007153][ T2386] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #16: comm syz.3.836: mark_inode_dirty error [ 63.019190][ T2377] FAT-fs (loop4): Directory bread(block 72) failed [ 63.030392][ T2386] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.836: corrupted inode contents [ 63.033726][ T2377] FAT-fs (loop4): Directory bread(block 73) failed [ 63.054405][ T2386] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.836: mark_inode_dirty error [ 63.071901][ T2386] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.836: corrupted inode contents [ 63.085684][ T2386] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 63.095186][ T2386] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.836: corrupted inode contents [ 63.107182][ T2386] EXT4-fs error (device loop3): ext4_truncate:4313: inode #16: comm syz.3.836: mark_inode_dirty error [ 63.118349][ T2386] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 63.118377][ T314] kworker/u4:3: attempt to access beyond end of device [ 63.118377][ T314] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 63.127849][ T2386] EXT4-fs (loop3): 1 truncate cleaned up [ 63.147232][ T2386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.159315][ T2386] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.171254][ T314] __quota_error: 50 callbacks suppressed [ 63.171271][ T314] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 63.196532][ T28] audit: type=1400 audit(1733514437.152:472): avc: denied { mount } for pid=2401 comm="syz.0.852" name="/" dev="ramfs" ino=25643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 63.200354][ T314] EXT4-fs error (device loop3): ext4_release_dquot:6811: comm kworker/u4:3: Failed to release dquot type 1 [ 63.290324][ T293] EXT4-fs (loop3): unmounting filesystem. [ 63.444383][ T2414] loop0: detected capacity change from 0 to 40427 [ 63.451908][ T2414] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 63.459635][ T2414] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.468898][ T2414] F2FS-fs (loop0): invalid crc value [ 63.475744][ T2414] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.513214][ T2414] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 63.520127][ T2414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.550241][ T2414] syz.0.844: attempt to access beyond end of device [ 63.550241][ T2414] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 63.641120][ T40] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 63.832132][ T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.842164][ T40] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.852018][ T40] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.860917][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.868863][ T40] usb 3-1: SerialNumber: syz [ 64.077270][ T40] usb 3-1: 0:2 : does not exist [ 64.093567][ T40] usb 3-1: USB disconnect, device number 12 [ 64.323545][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.342223][ T2436] loop1: detected capacity change from 0 to 512 [ 64.348972][ T2436] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.372555][ T2436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.381456][ T2436] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.395915][ T2436] EXT4-fs (loop1): shut down requested (0) [ 64.408325][ T290] EXT4-fs (loop1): unmounting filesystem. [ 64.423179][ T2443] syz.1.851[2443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.423260][ T2443] syz.1.851[2443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.597466][ T228] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 64.637900][ T2451] syz.2.855[2451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.637980][ T2451] syz.2.855[2451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.644419][ T2445] syz.1.854 (2445) used greatest stack depth: 20176 bytes left [ 64.842071][ T228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.857285][ T2454] loop4: detected capacity change from 0 to 40427 [ 64.863577][ T228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.873610][ T228] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 64.882544][ T2454] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 64.890065][ T2454] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 64.898092][ T228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.907337][ T228] usb 1-1: config 0 descriptor?? [ 64.913221][ T2454] F2FS-fs (loop4): Found nat_bits in checkpoint [ 64.950035][ T2454] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 64.957158][ T2454] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.111841][ T2460] loop1: detected capacity change from 0 to 8192 [ 65.239488][ T2464] loop4: detected capacity change from 0 to 40427 [ 65.249958][ T2464] F2FS-fs (loop4): invalid crc value [ 65.256740][ T2464] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.293565][ T2464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.322103][ T228] isku 0003:1E7D:319C.000A: invalid report_size 23040 [ 65.328827][ T228] isku 0003:1E7D:319C.000A: item 0 2 1 7 parsing failed [ 65.344473][ T228] isku 0003:1E7D:319C.000A: parse failed [ 65.356497][ T228] isku: probe of 0003:1E7D:319C.000A failed with error -22 [ 65.414772][ T2464] syz.4.857: attempt to access beyond end of device [ 65.414772][ T2464] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.525396][ T317] usb 1-1: USB disconnect, device number 12 [ 65.622926][ T2473] loop1: detected capacity change from 0 to 40427 [ 65.629758][ T2473] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 65.637994][ T2473] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.648534][ T2473] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.691379][ T2473] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 65.698381][ T2473] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.870031][ T290] syz-executor: attempt to access beyond end of device [ 65.870031][ T290] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 65.884159][ T290] syz-executor: attempt to access beyond end of device [ 65.884159][ T290] loop1: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 65.896929][ T2487] loop4: detected capacity change from 0 to 40427 [ 65.898906][ T290] syz-executor: attempt to access beyond end of device [ 65.898906][ T290] loop1: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 65.909355][ T2487] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 65.920691][ T290] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 65.927083][ T290] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 65.940571][ T2487] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.947329][ T290] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 65.977119][ T2487] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.041125][ T2487] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.048102][ T2487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.085723][ T2487] syz.4.864: attempt to access beyond end of device [ 66.085723][ T2487] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.106219][ T2487] syz.4.864: attempt to access beyond end of device [ 66.106219][ T2487] loop4: rw=2049, sector=77824, nr_sectors = 792 limit=40427 [ 66.120336][ T2487] syz.4.864: attempt to access beyond end of device [ 66.120336][ T2487] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.152460][ T28] audit: type=1400 audit(1733514440.112:473): avc: denied { write } for pid=2501 comm="syz.1.872" laddr=fe80::a8aa:aaff:feaa:aaaa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.311118][ T228] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 66.361105][ T40] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 66.511340][ T228] usb 3-1: Using ep0 maxpacket: 8 [ 66.517353][ T228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.528007][ T228] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 66.536880][ T228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 66.544985][ T228] usb 3-1: SerialNumber: syz [ 66.549987][ T228] usb 3-1: config 0 descriptor?? [ 66.555952][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.566729][ T228] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 66.573334][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.583207][ T228] usb 3-1: No valid video chain found. [ 66.589018][ T40] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.601889][ T40] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.610773][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.619282][ T40] usb 1-1: config 0 descriptor?? [ 66.758047][ T228] usb 3-1: USB disconnect, device number 13 [ 67.027182][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.034592][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.041850][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.049064][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.056361][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.063641][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.071721][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.079127][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.086427][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.093651][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.100970][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.108139][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.115497][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.122643][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.129864][ T40] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 67.137363][ T40] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 67.146433][ T40] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 67.291668][ T317] usb 1-1: USB disconnect, device number 13 [ 67.509298][ T2529] loop2: detected capacity change from 0 to 1024 [ 67.510074][ T2513] loop3: detected capacity change from 0 to 40427 [ 67.525424][ T2513] F2FS-fs (loop3): invalid crc value [ 67.532548][ T2513] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.534207][ T2529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.578984][ T2513] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.661065][ T40] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 67.710726][ T2513] syz.3.875: attempt to access beyond end of device [ 67.710726][ T2513] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.841055][ T40] usb 2-1: Using ep0 maxpacket: 8 [ 67.848707][ T40] usb 2-1: New USB device found, idVendor=10c4, idProduct=81c8, bcdDevice=fa.86 [ 67.857844][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.866525][ T40] usb 2-1: Product: syz [ 67.870956][ T40] usb 2-1: Manufacturer: syz [ 67.875831][ T40] usb 2-1: SerialNumber: syz [ 67.882142][ T40] usb 2-1: config 0 descriptor?? [ 68.084999][ T28] audit: type=1400 audit(1733514442.042:474): avc: denied { read } for pid=2557 comm="syz.0.896" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.114660][ T317] usb 2-1: USB disconnect, device number 9 [ 68.155997][ T28] audit: type=1400 audit(1733514442.042:475): avc: denied { open } for pid=2557 comm="syz.0.896" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.478453][ T292] EXT4-fs (loop2): unmounting filesystem. [ 68.586066][ T2563] loop0: detected capacity change from 0 to 40427 [ 68.595570][ T2563] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 68.603218][ T28] audit: type=1400 audit(1733514442.552:476): avc: denied { bind } for pid=2595 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.618318][ T2563] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.638253][ T2563] F2FS-fs (loop0): invalid crc value [ 68.666071][ T2563] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.756159][ T2563] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 68.763996][ T2563] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 68.801589][ T2614] loop1: detected capacity change from 0 to 1024 [ 68.851559][ T2614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 69.135825][ T2609] loop2: detected capacity change from 0 to 40427 [ 69.145607][ T2609] F2FS-fs (loop2): fault_type options not supported [ 69.159023][ T2609] F2FS-fs (loop2): invalid crc value [ 69.174724][ T2609] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.187182][ T2621] loop0: detected capacity change from 0 to 40427 [ 69.212979][ T2621] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 69.220810][ T2621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 69.247692][ T2621] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.248318][ T2609] F2FS-fs (loop2): Start checkpoint disabled! [ 69.270181][ T2609] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 69.332722][ T2621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 69.339911][ T2621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.432440][ T2609] syz.2.918: attempt to access beyond end of device [ 69.432440][ T2609] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 69.492431][ T2609] syz.2.918: attempt to access beyond end of device [ 69.492431][ T2609] loop2: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 69.538218][ T2609] syz.2.918: attempt to access beyond end of device [ 69.538218][ T2609] loop2: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 69.575772][ T2609] syz.2.918: attempt to access beyond end of device [ 69.575772][ T2609] loop2: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 69.613087][ T2609] syz.2.918: attempt to access beyond end of device [ 69.613087][ T2609] loop2: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 69.628019][ T2609] syz.2.918: attempt to access beyond end of device [ 69.628019][ T2609] loop2: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 69.641971][ T959] syz-executor: attempt to access beyond end of device [ 69.641971][ T959] loop0: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 69.656393][ T959] syz-executor: attempt to access beyond end of device [ 69.656393][ T959] loop0: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 69.670797][ T959] syz-executor: attempt to access beyond end of device [ 69.670797][ T959] loop0: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 69.685515][ T959] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 69.685548][ T959] F2FS-fs (loop0): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 69.706198][ T959] F2FS-fs (loop0): Issue discard(10240, 10240, 512) failed, ret: -5 [ 69.742263][ T10] kworker/u4:1: attempt to access beyond end of device [ 69.742263][ T10] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 69.784643][ T290] EXT4-fs (loop1): unmounting filesystem. [ 69.918616][ T2663] loop0: detected capacity change from 0 to 256 [ 70.059897][ T2674] loop2: detected capacity change from 0 to 1024 [ 70.076808][ T2674] EXT4-fs: Ignoring removed orlov option [ 70.091659][ T2674] EXT4-fs (loop2): Test dummy encryption mode enabled [ 70.116390][ T2674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.150178][ T28] audit: type=1400 audit(1733514444.102:477): avc: denied { rmdir } for pid=292 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.177782][ T292] EXT4-fs (loop2): unmounting filesystem. [ 70.195924][ T28] audit: type=1400 audit(1733514444.142:478): avc: denied { unlink } for pid=292 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.286798][ T28] audit: type=1400 audit(1733514444.142:479): avc: denied { unlink } for pid=292 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 70.307853][ T2694] loop4: detected capacity change from 0 to 256 [ 70.312025][ T2692] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 70.343909][ T2694] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 70.351120][ T28] audit: type=1400 audit(1733514444.302:480): avc: denied { read } for pid=2697 comm="syz.0.952" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.391719][ T28] audit: type=1400 audit(1733514444.342:481): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.394393][ T2700] loop1: detected capacity change from 0 to 512 [ 70.438187][ T2694] exFAT-fs (loop4): error, invalid size(size(35) > aligned(9223372036854777344) [ 70.438187][ T2694] [ 70.448339][ T28] audit: type=1400 audit(1733514444.392:482): avc: denied { write } for pid=2693 comm="syz.4.949" name="file0" dev="loop4" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.471623][ T2694] exFAT-fs (loop4): Filesystem has been set read-only [ 70.472399][ T2694] exFAT-fs (loop4): error, invalid size(size(35) > aligned(9223372036854777344) [ 70.472399][ T2694] [ 70.496739][ T2700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.515714][ T2700] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.546559][ T28] audit: type=1400 audit(1733514444.502:483): avc: denied { create } for pid=2699 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 70.569214][ T2700] EXT4-fs (loop1): shut down requested (0) [ 70.586681][ T290] EXT4-fs (loop1): unmounting filesystem. [ 70.592556][ T10] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 70.640769][ T28] audit: type=1400 audit(1733514444.592:484): avc: denied { write } for pid=2718 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.710810][ T2729] loop4: detected capacity change from 0 to 512 [ 70.748440][ T2729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.779146][ T2739] device bridge0 entered promiscuous mode [ 70.792234][ T2729] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.964: inode #1: comm syz.4.964: iget: illegal inode # [ 70.808440][ T2729] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.964: error while reading EA inode 1 err=-117 [ 70.835904][ T2729] EXT4-fs (loop4): 1 orphan inode deleted [ 70.845257][ T2746] loop0: detected capacity change from 0 to 512 [ 70.850709][ T2729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.882830][ T2746] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.891824][ T2746] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.903622][ T294] EXT4-fs (loop4): unmounting filesystem. [ 70.928037][ T959] EXT4-fs (loop0): unmounting filesystem. [ 70.933941][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 71.019949][ T2762] loop0: detected capacity change from 0 to 2048 [ 71.045876][ T2762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.070469][ T2762] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 71.085105][ T959] EXT4-fs (loop0): unmounting filesystem. [ 71.125782][ T2772] device bridge0 entered promiscuous mode [ 71.143948][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.168119][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.172596][ T2754] loop4: detected capacity change from 0 to 40427 [ 71.178367][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.185749][ T2754] F2FS-fs (loop4): fault_injection options not supported [ 71.202246][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.204033][ T2754] F2FS-fs (loop4): Image doesn't support compression [ 71.212989][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.225552][ T2754] F2FS-fs (loop4): Image doesn't support compression [ 71.228304][ T19] usb 2-1: config 0 descriptor?? [ 71.238699][ T2754] F2FS-fs (loop4): invalid crc value [ 71.252728][ T2754] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.255295][ T2779] loop0: detected capacity change from 0 to 512 [ 71.281341][ T2779] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.294705][ T2779] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.986: inode #1: comm syz.0.986: iget: illegal inode # [ 71.300494][ T2754] F2FS-fs (loop4): Start checkpoint disabled! [ 71.308008][ T2779] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.986: error while reading EA inode 1 err=-117 [ 71.314292][ T2754] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 71.325624][ T2779] EXT4-fs (loop0): 1 orphan inode deleted [ 71.345300][ T2779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.389298][ T959] EXT4-fs (loop0): unmounting filesystem. [ 71.431173][ T228] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 71.632137][ T228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 71.648202][ T19] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 71.651166][ T228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.664096][ T19] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 71.697969][ T228] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 71.725518][ T228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.741815][ T228] usb 3-1: config 0 descriptor?? [ 72.160698][ T228] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 72.171090][ T228] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 72.180452][ T2816] loop4: detected capacity change from 0 to 512 [ 72.187117][ T228] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 72.195030][ T228] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 72.202366][ T228] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 72.210194][ T228] hid-steam 0003:28DE:1102.000D: hidraw1: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 72.223423][ T2816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.240431][ T2816] EXT4-fs (loop4): shut down requested (0) [ 72.253185][ T294] EXT4-fs (loop4): unmounting filesystem. [ 72.275537][ T2822] loop4: detected capacity change from 0 to 512 [ 72.304763][ T2822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.319870][ T2826] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 72.339907][ T294] EXT4-fs (loop4): unmounting filesystem. [ 72.366430][ T228] usb 3-1: USB disconnect, device number 14 [ 72.545272][ T2832] loop4: detected capacity change from 0 to 40427 [ 72.554190][ T2832] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 72.561067][ T2832] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 72.569821][ T2832] F2FS-fs (loop4): invalid crc value [ 72.576345][ T2832] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.615522][ T2832] F2FS-fs (loop4): Start checkpoint disabled! [ 72.622542][ T2832] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 72.629512][ T2832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 73.422106][ T2863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2863 comm=syz.2.1019 [ 73.540470][ T2874] loop1: detected capacity change from 0 to 512 [ 73.567993][ T2874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.603091][ T2874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.648418][ T290] EXT4-fs (loop1): unmounting filesystem. [ 73.831479][ T228] usb 2-1: USB disconnect, device number 10 [ 73.895038][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 73.895056][ T28] audit: type=1400 audit(73.876:495): avc: denied { read } for pid=2892 comm="syz.2.1031" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.964527][ T28] audit: type=1400 audit(73.876:496): avc: denied { open } for pid=2892 comm="syz.2.1031" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.988118][ T28] audit: type=1400 audit(73.976:497): avc: denied { write } for pid=2899 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.007798][ T28] audit: type=1400 audit(73.976:498): avc: denied { read } for pid=2899 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.055006][ T2904] loop1: detected capacity change from 0 to 512 [ 74.061858][ T2904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.076700][ T2904] EXT4-fs (loop1): 1 truncate cleaned up [ 74.082911][ T2904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.126541][ T290] EXT4-fs (loop1): unmounting filesystem. [ 74.145443][ T28] audit: type=1400 audit(74.126:499): avc: denied { write } for pid=2906 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.180747][ T28] audit: type=1400 audit(74.146:500): avc: denied { read } for pid=2906 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.368313][ T2937] loop4: detected capacity change from 0 to 512 [ 74.423227][ T2937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.459905][ T294] EXT4-fs (loop4): unmounting filesystem. [ 74.494802][ T2951] device batadv_slave_1 entered promiscuous mode [ 74.547952][ T2956] SELinux: Context Ü is not valid (left unmapped). [ 74.565715][ T2958] mmap: syz.4.1060 (2958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.612656][ T28] audit: type=1400 audit(74.596:501): avc: denied { create } for pid=2962 comm="syz.4.1062" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.657275][ T2965] syz.4.1064[2965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.657361][ T2965] syz.4.1064[2965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.678424][ T28] audit: type=1400 audit(74.596:502): avc: denied { read } for pid=2962 comm="syz.4.1062" name="file7" dev="tmpfs" ino=1519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.757820][ T28] audit: type=1400 audit(74.596:503): avc: denied { watch watch_reads } for pid=2962 comm="syz.4.1062" path="/285/file7" dev="tmpfs" ino=1519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.887496][ T28] audit: type=1400 audit(74.866:504): avc: denied { setopt } for pid=2981 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.285077][ T3006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 75.414666][ T3003] loop2: detected capacity change from 0 to 40427 [ 75.425211][ T3006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 75.434423][ T3003] F2FS-fs (loop2): heap/no_heap options were deprecated [ 75.448745][ T3003] F2FS-fs (loop2): fault_injection options not supported [ 75.466547][ T3003] F2FS-fs (loop2): heap/no_heap options were deprecated [ 75.475342][ T3003] F2FS-fs (loop2): fault_type options not supported [ 75.481989][ T3003] F2FS-fs (loop2): Image doesn't support compression [ 75.488570][ T3003] F2FS-fs (loop2): Image doesn't support compression [ 75.496709][ T3003] F2FS-fs (loop2): invalid crc value [ 75.507744][ T3003] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.542517][ T3003] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.571568][ T3003] bio_check_eod: 6 callbacks suppressed [ 75.571585][ T3003] syz.2.1078: attempt to access beyond end of device [ 75.571585][ T3003] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 75.611234][ T3003] syz.2.1078: attempt to access beyond end of device [ 75.611234][ T3003] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.668469][ T292] syz-executor: attempt to access beyond end of device [ 75.668469][ T292] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 75.687210][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.3.1084 [ 75.955854][ T3021] loop4: detected capacity change from 0 to 40427 [ 75.973583][ T3021] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 75.973612][ T3021] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.001394][ T3053] device pim6reg1 entered promiscuous mode [ 76.009587][ T3021] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.098987][ T3021] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.108937][ T3021] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.309674][ T294] syz-executor: attempt to access beyond end of device [ 76.309674][ T294] loop4: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 76.324216][ T294] syz-executor: attempt to access beyond end of device [ 76.324216][ T294] loop4: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 76.339013][ T294] syz-executor: attempt to access beyond end of device [ 76.339013][ T294] loop4: rw=2051, sector=81920, nr_sectors = 4096 limit=40427 [ 76.353609][ T294] F2FS-fs (loop4): Issue discard(6144, 6144, 512) failed, ret: -5 [ 76.353641][ T294] F2FS-fs (loop4): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 76.361696][ T294] F2FS-fs (loop4): Issue discard(10240, 10240, 512) failed, ret: -5 [ 76.456118][ T3081] xt_hashlimit: size too large, truncated to 1048576 [ 76.550285][ T3089] loop1: detected capacity change from 0 to 1024 [ 76.564004][ T3089] EXT4-fs: Ignoring removed orlov option [ 76.569863][ T3089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.580503][ T3089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.606979][ T290] EXT4-fs (loop1): unmounting filesystem. [ 76.717773][ T3101] loop3: detected capacity change from 0 to 256 [ 76.781590][ T319] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.868089][ T3121] syz.3.1129[3121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.868164][ T3121] syz.3.1129[3121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.984510][ T3137] loop1: detected capacity change from 0 to 256 [ 77.034604][ T3137] syz.1.1134: attempt to access beyond end of device [ 77.034604][ T3137] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 77.057919][ T3145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 77.066784][ T3145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 77.084330][ T3145] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1139'. [ 77.251703][ T3165] loop2: detected capacity change from 0 to 512 [ 77.289429][ T3165] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 77.314510][ T3165] EXT4-fs (loop2): mount failed [ 77.389832][ T3153] loop3: detected capacity change from 0 to 40427 [ 77.418755][ T3153] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 77.441719][ T3153] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.472393][ T3153] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.557782][ T3153] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 77.564924][ T3153] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.715881][ T3206] loop1: detected capacity change from 0 to 16 [ 77.741311][ T3206] erofs: (device loop1): mounted with root inode @ nid 36. [ 77.770310][ T3206] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 77.781074][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 77.790614][ T3206] syz.1.1163: attempt to access beyond end of device [ 77.790614][ T3206] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 77.805271][ T3206] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 77.814719][ T3208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1165'. [ 77.818602][ T3206] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 77.824175][ T3208] device bridge_slave_1 left promiscuous mode [ 77.838919][ T293] syz-executor: attempt to access beyond end of device [ 77.838919][ T293] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 77.853585][ T3208] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.860842][ T293] syz-executor: attempt to access beyond end of device [ 77.860842][ T293] loop3: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 77.876023][ T3208] device bridge_slave_0 left promiscuous mode [ 77.882404][ T3208] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.889603][ T293] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 77.889640][ T293] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 77.906379][ T293] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 77.972172][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.991169][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 77.999997][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.008918][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.027541][ T24] usb 3-1: config 0 descriptor?? [ 78.239538][ T24] usb 3-1: string descriptor 0 read error: -71 [ 78.251905][ T24] usb 3-1: USB disconnect, device number 15 [ 78.321055][ T313] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 78.339205][ T3232] loop4: detected capacity change from 0 to 40427 [ 78.348534][ T3232] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 78.356134][ T3232] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 78.364719][ T3232] F2FS-fs (loop4): invalid crc value [ 78.371755][ T3232] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.407145][ T3232] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 78.414252][ T3232] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 78.441934][ T3232] F2FS-fs (loop4): Unexpected flush for atomic writes: ino=10, npages=1 [ 78.511113][ T313] usb 1-1: Using ep0 maxpacket: 8 [ 78.517471][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.528271][ T313] usb 1-1: New USB device found, idVendor=03eb, idProduct=2118, bcdDevice= 0.00 [ 78.537171][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.555299][ T313] usb 1-1: config 0 descriptor?? [ 78.924616][ T3257] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 78.935445][ T3257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 78.965085][ T313] hid-generic 0003:03EB:2118.000E: unknown main item tag 0x0 [ 78.981067][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.988708][ T313] hid-generic 0003:03EB:2118.000E: unknown main item tag 0x0 [ 79.006270][ T313] hid-generic 0003:03EB:2118.000E: unknown main item tag 0x0 [ 79.021098][ T313] hid-generic 0003:03EB:2118.000E: unknown main item tag 0x0 [ 79.032939][ T313] hid-generic 0003:03EB:2118.000E: unknown main item tag 0x0 [ 79.050293][ T313] hid-generic 0003:03EB:2118.000E: unknown main item tag 0x0 [ 79.060371][ T313] hid-generic 0003:03EB:2118.000E: unknown main item tag 0x0 [ 79.078776][ T313] hid-generic 0003:03EB:2118.000E: hidraw0: USB HID v0.00 Device [HID 03eb:2118] on usb-dummy_hcd.0-1/input0 [ 79.167105][ T313] usb 1-1: USB disconnect, device number 14 [ 79.173963][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.192043][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.211731][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.224533][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.233434][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.251273][ T24] usb 5-1: config 0 descriptor?? [ 79.428509][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 79.428526][ T28] audit: type=1400 audit(79.406:524): avc: denied { read } for pid=3286 comm="syz.2.1196" path="socket:[28689]" dev="sockfs" ino=28689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.664580][ T24] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 79.679068][ T24] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 79.996697][ T28] audit: type=1400 audit(79.976:525): avc: denied { write } for pid=3313 comm="syz.2.1208" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.021386][ T19] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 80.064939][ T28] audit: type=1400 audit(80.046:526): avc: denied { lock } for pid=3321 comm="syz.1.1211" path="socket:[28823]" dev="sockfs" ino=28823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 80.201061][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 80.207194][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.224225][ T3340] loop1: detected capacity change from 0 to 128 [ 80.230389][ T19] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.260591][ T19] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 80.270211][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.283689][ T19] usb 1-1: Product: syz [ 80.287709][ T19] usb 1-1: Manufacturer: syz [ 80.292976][ T19] usb 1-1: SerialNumber: syz [ 80.307932][ T19] usb 1-1: config 0 descriptor?? [ 80.389848][ T3353] loop1: detected capacity change from 0 to 2048 [ 80.423217][ T3353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.434720][ T3353] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.450745][ T3353] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 80.463800][ T3353] EXT4-fs (loop1): This should not happen!! Data will be lost [ 80.463800][ T3353] [ 80.473459][ T3353] EXT4-fs (loop1): Total free blocks count 0 [ 80.479311][ T3353] EXT4-fs (loop1): Free/Dirty block details [ 80.485676][ T3353] EXT4-fs (loop1): free_blocks=2415919104 [ 80.491596][ T3353] EXT4-fs (loop1): dirty_blocks=48 [ 80.496795][ T3353] EXT4-fs (loop1): Block reservation details [ 80.502956][ T3353] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 80.516929][ T290] EXT4-fs (loop1): unmounting filesystem. [ 80.526757][ T19] usb 1-1: USB disconnect, device number 15 [ 80.647770][ T3381] loop1: detected capacity change from 0 to 128 [ 80.691544][ T319] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.888380][ T3405] syz.1.1248[3405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.888464][ T3405] syz.1.1248[3405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.351110][ T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 81.374148][ T3422] loop1: detected capacity change from 0 to 131072 [ 81.383993][ T3422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.421574][ T3422] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 81.437929][ T28] audit: type=1400 audit(81.416:527): avc: denied { create } for pid=3421 comm="syz.1.1256" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.458075][ T28] audit: type=1400 audit(81.416:528): avc: denied { write } for pid=3421 comm="syz.1.1256" name="encrypted_dir" dev="loop1" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.479523][ T28] audit: type=1400 audit(81.416:529): avc: denied { add_name } for pid=3421 comm="syz.1.1256" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.552230][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.563078][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.572809][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.585465][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.594346][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.602694][ T6] usb 1-1: config 0 descriptor?? [ 81.751863][ T3443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1263'. [ 81.797667][ T24] usb 5-1: USB disconnect, device number 8 [ 82.019331][ T6] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 82.035008][ T6] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 82.130600][ T3483] loop1: detected capacity change from 0 to 1024 [ 82.131745][ T3485] xt_hashlimit: size too large, truncated to 1048576 [ 82.144039][ T3483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.155923][ T3483] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.173613][ T3483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 82.187310][ T3483] System zones: 0-1, 3-36 [ 82.201588][ T3483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.231520][ T3483] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 82.246822][ T3483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 82.263793][ T3483] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 82.290427][ T290] EXT4-fs (loop1): unmounting filesystem. [ 82.298446][ T6] usb 1-1: USB disconnect, device number 16 [ 82.598946][ T28] audit: type=1400 audit(82.576:530): avc: denied { read write } for pid=3500 comm="syz.3.1287" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.621544][ T28] audit: type=1400 audit(82.576:531): avc: denied { open } for pid=3500 comm="syz.3.1287" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.645213][ T24] kernel write not supported for file /vcsa1 (pid: 24 comm: kworker/1:0) [ 82.671378][ T28] audit: type=1326 audit(82.656:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93997fed9 code=0x7ffc0000 [ 82.703975][ T28] audit: type=1326 audit(82.656:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93997fed9 code=0x7ffc0000 [ 82.783869][ T3506] SELinux: policydb version 0 does not match my version range 15-33 [ 82.792076][ T3506] SELinux: failed to load policy [ 83.170288][ T3565] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1316'. [ 83.383312][ T3560] loop2: detected capacity change from 0 to 40427 [ 83.410749][ T3560] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 83.430614][ T3558] syz.3.1313 (3558) used greatest stack depth: 20168 bytes left [ 83.439279][ T3560] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.491693][ T3560] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.555721][ T3607] x_tables: duplicate underflow at hook 4 [ 83.595093][ T3560] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.602419][ T3560] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.631547][ T3560] bio_check_eod: 3 callbacks suppressed [ 83.631567][ T3560] syz.2.1314: attempt to access beyond end of device [ 83.631567][ T3560] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.670261][ T3614] input: syz0 as /devices/virtual/input/input9 [ 83.674272][ T3560] syz.2.1314: attempt to access beyond end of device [ 83.674272][ T3560] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 83.716792][ T292] syz-executor: attempt to access beyond end of device [ 83.716792][ T292] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 83.983836][ T3638] overlayfs: missing 'lowerdir' [ 84.025494][ T3641] loop2: detected capacity change from 0 to 512 [ 84.062835][ T3641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.118576][ T3647] loop1: detected capacity change from 0 to 8192 [ 84.239312][ T3641] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 84.254304][ T3641] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 3 with max blocks 1 with error 28 [ 84.266972][ T3641] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.266972][ T3641] [ 84.276896][ T3641] EXT4-fs (loop2): Total free blocks count 0 [ 84.283421][ T3641] EXT4-fs (loop2): Free/Dirty block details [ 84.295572][ T3641] EXT4-fs (loop2): free_blocks=39626 [ 84.300795][ T3641] EXT4-fs (loop2): dirty_blocks=1 [ 84.305923][ T3641] EXT4-fs (loop2): Block reservation details [ 84.311998][ T3641] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 84.398979][ T292] EXT4-fs (loop2): unmounting filesystem. [ 84.472884][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 84.472903][ T28] audit: type=1400 audit(84.456:553): avc: denied { map } for pid=3677 comm="syz.2.1365" path="socket:[29680]" dev="sockfs" ino=29680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.502029][ T28] audit: type=1400 audit(84.456:554): avc: denied { read } for pid=3677 comm="syz.2.1365" path="socket:[29680]" dev="sockfs" ino=29680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.524947][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.527194][ T28] audit: type=1326 audit(84.496:555): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6457d7fed9 code=0x0 [ 84.661140][ T6] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 84.671176][ T313] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 84.842142][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.852283][ T313] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 84.853177][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.862016][ T313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.871369][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 84.881335][ T313] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 84.890109][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.898959][ T313] usb 5-1: config 1 has no interface number 1 [ 84.907427][ T6] usb 2-1: config 0 descriptor?? [ 84.917628][ T313] usb 5-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.928390][ T313] usb 5-1: config 1 interface 2 has no altsetting 1 [ 84.936313][ T313] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.945281][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.953163][ T313] usb 5-1: Product: syz [ 84.957136][ T313] usb 5-1: Manufacturer: syz [ 84.961559][ T313] usb 5-1: SerialNumber: syz [ 85.171267][ T313] usb 5-1: 2:2 : no or invalid class specific endpoint descriptor [ 85.201344][ T313] usb 5-1: USB disconnect, device number 9 [ 85.321325][ T6] hid (null): nested delimiters [ 85.327035][ T6] magicmouse 0003:05AC:0269.0011: nested delimiters [ 85.333582][ T6] magicmouse 0003:05AC:0269.0011: item 0 2 2 10 parsing failed [ 85.341306][ T6] magicmouse 0003:05AC:0269.0011: magicmouse hid parse failed [ 85.349042][ T6] magicmouse: probe of 0003:05AC:0269.0011 failed with error -22 [ 85.396010][ T28] audit: type=1400 audit(85.376:556): avc: denied { ioctl } for pid=3708 comm="syz.2.1378" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.549983][ T3718] loop2: detected capacity change from 0 to 256 [ 85.553665][ T6] usb 2-1: USB disconnect, device number 11 [ 85.557514][ T3718] exfat: Deprecated parameter 'utf8' [ 85.567192][ T3718] exfat: Deprecated parameter 'utf8' [ 85.584646][ T3718] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 85.603129][ T28] audit: type=1400 audit(85.586:557): avc: denied { add_name } for pid=3717 comm="syz.2.1382" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.627374][ T28] audit: type=1400 audit(85.586:558): avc: denied { associate } for pid=3717 comm="syz.2.1382" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.648037][ T28] audit: type=1400 audit(85.586:559): avc: denied { mounton } for pid=3717 comm="syz.2.1382" path="/258/file0/bus" dev="loop2" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.670947][ T28] audit: type=1400 audit(85.596:560): avc: denied { rmdir } for pid=292 comm="syz-executor" name="file0" dev="loop2" ino=1048669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.921116][ T28] audit: type=1400 audit(2000000000.210:561): avc: denied { mounton } for pid=3741 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.037372][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.046494][ T3753] loop4: detected capacity change from 0 to 128 [ 86.051026][ T3741] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.060127][ T3741] device bridge_slave_0 entered promiscuous mode [ 86.073447][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.080413][ T3741] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.087824][ T3741] device bridge_slave_1 entered promiscuous mode [ 86.139476][ T316] kworker/u4:4: attempt to access beyond end of device [ 86.139476][ T316] loop4: rw=1, sector=145, nr_sectors = 97 limit=128 [ 86.190792][ T28] audit: type=1400 audit(2000000000.480:562): avc: denied { execute_no_trans } for pid=3756 comm="syz.4.1399" path="/328/file0" dev="tmpfs" ino=1745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.301959][ T314] device bridge_slave_1 left promiscuous mode [ 86.318071][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.328447][ T314] device bridge_slave_0 left promiscuous mode [ 86.361154][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.376366][ T314] device veth1_macvtap left promiscuous mode [ 86.382412][ T314] device veth0_vlan left promiscuous mode [ 86.425297][ T3755] loop1: detected capacity change from 0 to 40427 [ 86.450667][ T3755] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.465818][ T3767] loop4: detected capacity change from 0 to 128 [ 86.481023][ T3755] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.521896][ T3755] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.560315][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.567216][ T3741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.574368][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.581062][ T1162] Bluetooth: hci0: command 0x1003 tx timeout [ 86.581226][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.587060][ T1333] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.641561][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.651848][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.669309][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.679018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.701383][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.708280][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.716681][ T3755] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.726084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.740725][ T3755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.741399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.776296][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.783206][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.816024][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.831410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.850831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.864243][ T3755] syz.1.1398: attempt to access beyond end of device [ 86.864243][ T3755] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.869567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.936454][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.951360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.955998][ T3755] syz.1.1398: attempt to access beyond end of device [ 86.955998][ T3755] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 86.976624][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.989570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.022354][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.029719][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.050772][ T3741] device veth0_vlan entered promiscuous mode [ 87.082389][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.094531][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.104219][ T290] syz-executor: attempt to access beyond end of device [ 87.104219][ T290] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 87.122727][ T3741] device veth1_macvtap entered promiscuous mode [ 87.138922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.167587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.218172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.228997][ T3801] loop4: detected capacity change from 0 to 256 [ 87.237253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.267557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.282069][ T3801] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 87.401709][ T3801] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930439) [ 87.401709][ T3801] [ 87.420828][ T3801] exFAT-fs (loop4): Filesystem has been set read-only [ 87.534726][ T3821] loop3: detected capacity change from 0 to 512 [ 87.680571][ T3821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.699957][ T3821] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.728178][ T3821] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.1424: corrupted inode contents [ 87.743539][ T3821] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #2: comm syz.3.1424: mark_inode_dirty error [ 87.787516][ T3821] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.1424: corrupted inode contents [ 87.854073][ T3821] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1424: mark_inode_dirty error [ 87.906779][ T3847] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1434'. [ 87.924044][ T293] EXT4-fs (loop3): unmounting filesystem. [ 88.101225][ T313] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 88.281049][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 88.287137][ T313] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.321329][ T313] usb 2-1: config 0 has no interface number 0 [ 88.332263][ T313] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.361064][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.368902][ T313] usb 2-1: Product: syz [ 88.394662][ T313] usb 2-1: Manufacturer: syz [ 88.399329][ T313] usb 2-1: SerialNumber: syz [ 88.431323][ T313] usb 2-1: config 0 descriptor?? [ 88.436954][ T313] smsc95xx v2.0.0 [ 88.839445][ T313] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 88.860428][ T313] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.098864][ T3861] loop5: detected capacity change from 0 to 131072 [ 89.128185][ T3861] F2FS-fs (loop5): invalid crc value [ 89.134796][ T3861] F2FS-fs (loop5): Found nat_bits in checkpoint [ 89.181893][ T3861] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 89.210963][ T3912] loop3: detected capacity change from 0 to 40427 [ 89.229725][ T3912] F2FS-fs (loop3): fault_type options not supported [ 89.237279][ T3912] F2FS-fs (loop3): invalid crc value [ 89.243769][ T3912] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.282111][ T313] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.298326][ T313] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 89.308183][ T3912] F2FS-fs (loop3): Start checkpoint disabled! [ 89.314971][ T313] usb 2-1: USB disconnect, device number 12 [ 89.321859][ T3912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 89.448746][ T10] kworker/u4:1: attempt to access beyond end of device [ 89.448746][ T10] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 89.669129][ T3925] loop5: detected capacity change from 0 to 40427 [ 89.676512][ T3925] F2FS-fs (loop5): Unrecognized mount option "errors=continue" or missing value [ 90.381699][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 90.381715][ T28] audit: type=1400 audit(2000000004.680:579): avc: denied { mounton } for pid=3940 comm="syz.0.1480" path="/207/file0" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 90.412975][ T3943] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 90.457508][ T28] audit: type=1400 audit(2000000004.710:580): avc: denied { remount } for pid=3940 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.483206][ T28] audit: type=1400 audit(2000000004.740:581): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.505014][ T28] audit: type=1400 audit(2000000004.740:582): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.565510][ T28] audit: type=1400 audit(2000000004.740:583): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.607699][ T28] audit: type=1400 audit(2000000004.740:584): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.657110][ T28] audit: type=1400 audit(2000000004.740:585): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.701089][ T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 90.709505][ T28] audit: type=1400 audit(2000000004.740:586): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.882917][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 90.889030][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.900831][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.912379][ T6] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 90.926830][ T6] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 166 [ 90.936716][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 90.950801][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.960137][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.968219][ T6] usb 2-1: SerialNumber: syz [ 90.981139][ T3939] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.994900][ T6] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 91.010663][ T6] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 91.220354][ T317] usb 2-1: USB disconnect, device number 13 [ 91.382841][ T3982] loop5: detected capacity change from 0 to 128 [ 91.402741][ T3982] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.420434][ T28] audit: type=1400 audit(2000000005.710:587): avc: denied { read write } for pid=3983 comm="syz.4.1489" name="tty29" dev="devtmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_exec_t:s0" [ 91.472495][ T28] audit: type=1400 audit(2000000005.740:588): avc: denied { open } for pid=3983 comm="syz.4.1489" path="/dev/tty29" dev="devtmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_exec_t:s0" [ 91.668303][ T4003] loop3: detected capacity change from 0 to 512 [ 91.675774][ T4004] loop4: detected capacity change from 0 to 512 [ 91.685745][ T4004] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.696399][ T4003] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 91.707732][ T4003] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.714528][ T4003] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.1497: Block bitmap for bg 0 marked uninitialized [ 91.728813][ T4004] EXT4-fs (loop4): 1 truncate cleaned up [ 91.734382][ T4004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.743960][ T4003] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 91.753049][ T4003] EXT4-fs (loop3): 1 orphan inode deleted [ 91.758705][ T4003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.788570][ T293] EXT4-fs (loop3): unmounting filesystem. [ 91.799065][ T4013] overlayfs: failed to clone upperpath [ 91.819023][ T4004] ================================================================== [ 91.827360][ T4004] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x909/0x1fa0 [ 91.834914][ T4004] Read of size 18446744073709551572 at addr ffff888111186050 by task syz.4.1498/4004 [ 91.844197][ T4004] [ 91.846367][ T4004] CPU: 1 PID: 4004 Comm: syz.4.1498 Not tainted 6.1.115-syzkaller-00006-gc276c53965a8 #0 [ 91.856004][ T4004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.865897][ T4004] Call Trace: [ 91.869039][ T4004] [ 91.871798][ T4004] dump_stack_lvl+0x151/0x1b7 [ 91.876313][ T4004] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 91.881608][ T4004] ? _printk+0xd1/0x111 [ 91.885599][ T4004] ? __virt_addr_valid+0x242/0x2f0 [ 91.890632][ T4004] print_report+0x158/0x4e0 [ 91.894974][ T4004] ? __virt_addr_valid+0x242/0x2f0 [ 91.899917][ T4004] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 91.905996][ T4004] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 91.911287][ T4004] kasan_report+0x13c/0x170 [ 91.915635][ T4004] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 91.920921][ T4004] kasan_check_range+0x294/0x2a0 [ 91.925702][ T4004] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 91.930988][ T4004] memmove+0x2d/0x70 [ 91.934733][ T4004] ext4_xattr_set_entry+0x909/0x1fa0 [ 91.939845][ T4004] ? ext4_xattr_inode_lookup_create+0x1a60/0x1a60 [ 91.946090][ T4004] ? memcpy+0x56/0x70 [ 91.949909][ T4004] ext4_xattr_block_set+0x99c/0x37f0 [ 91.955029][ T4004] ? ext4_drop_inode+0x90/0x1a0 [ 91.959718][ T4004] ? __getblk_gfp+0x3d/0x7d0 [ 91.964141][ T4004] ? ext4_xattr_block_find+0x320/0x320 [ 91.969438][ T4004] ? xattr_find_entry+0x23c/0x300 [ 91.974301][ T4004] ? ext4_xattr_block_find+0x2ac/0x320 [ 91.979592][ T4004] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 91.985327][ T4004] ? ext4_xattr_set+0x3d0/0x3d0 [ 91.990003][ T4004] ? rwsem_write_trylock+0x153/0x340 [ 91.995132][ T4004] ? dquot_initialize_needed+0x13d/0x370 [ 92.000595][ T4004] __ext4_expand_extra_isize+0x31a/0x420 [ 92.006064][ T4004] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 92.011360][ T4004] ? sb_end_intwrite+0x130/0x130 [ 92.016328][ T4004] ? current_time+0x1ba/0x300 [ 92.020821][ T4004] ? atime_needs_update+0x810/0x810 [ 92.025854][ T4004] ? __kasan_check_write+0x14/0x20 [ 92.030801][ T4004] ? drop_nlink+0xa9/0x110 [ 92.035048][ T4004] __ext4_unlink+0x6ed/0xba0 [ 92.039486][ T4004] ? __ext4_read_dirblock+0x8e0/0x8e0 [ 92.044686][ T4004] ? rwsem_mark_wake+0x770/0x770 [ 92.049458][ T4004] ext4_unlink+0x142/0x3f0 [ 92.053817][ T4004] vfs_unlink+0x38c/0x630 [ 92.057985][ T4004] do_unlinkat+0x483/0x920 [ 92.062251][ T4004] ? fsnotify_link_count+0x100/0x100 [ 92.067353][ T4004] ? strncpy_from_user+0x169/0x2b0 [ 92.072301][ T4004] ? getname_flags+0x1fd/0x520 [ 92.076900][ T4004] __x64_sys_unlink+0x49/0x50 [ 92.081410][ T4004] x64_sys_call+0x289/0x9a0 [ 92.085756][ T4004] do_syscall_64+0x3b/0xb0 [ 92.090002][ T4004] ? clear_bhb_loop+0x55/0xb0 [ 92.094519][ T4004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.100445][ T4004] RIP: 0033:0x7fa36857fed9 [ 92.104707][ T4004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.124139][ T4004] RSP: 002b:00007fa3693ba058 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 92.132381][ T4004] RAX: ffffffffffffffda RBX: 00007fa368745fa0 RCX: 00007fa36857fed9 [ 92.140188][ T4004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 92.148004][ T4004] RBP: 00007fa3685f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 92.155813][ T4004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.163629][ T4004] R13: 0000000000000000 R14: 00007fa368745fa0 R15: 00007ffdc2dbebd8 [ 92.171444][ T4004] [ 92.174301][ T4004] [ 92.176468][ T4004] Allocated by task 4004: [ 92.180637][ T4004] kasan_set_track+0x4b/0x70 [ 92.185060][ T4004] kasan_save_alloc_info+0x1f/0x30 [ 92.190006][ T4004] __kasan_kmalloc+0x9c/0xb0 [ 92.194433][ T4004] __kmalloc_node_track_caller+0xb3/0x1e0 [ 92.199988][ T4004] kmemdup+0x29/0x60 [ 92.203720][ T4004] ext4_xattr_block_set+0x80f/0x37f0 [ 92.208843][ T4004] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 92.214572][ T4004] __ext4_expand_extra_isize+0x31a/0x420 [ 92.220036][ T4004] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 92.225332][ T4004] __ext4_unlink+0x6ed/0xba0 [ 92.229760][ T4004] ext4_unlink+0x142/0x3f0 [ 92.234009][ T4004] vfs_unlink+0x38c/0x630 [ 92.238177][ T4004] do_unlinkat+0x483/0x920 [ 92.242433][ T4004] __x64_sys_unlink+0x49/0x50 [ 92.246944][ T4004] x64_sys_call+0x289/0x9a0 [ 92.251282][ T4004] do_syscall_64+0x3b/0xb0 [ 92.255533][ T4004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.261261][ T4004] [ 92.263439][ T4004] The buggy address belongs to the object at ffff888111186000 [ 92.263439][ T4004] which belongs to the cache kmalloc-1k of size 1024 [ 92.277496][ T4004] The buggy address is located 80 bytes inside of [ 92.277496][ T4004] 1024-byte region [ffff888111186000, ffff888111186400) [ 92.290600][ T4004] [ 92.292773][ T4004] The buggy address belongs to the physical page: [ 92.299021][ T4004] page:ffffea0004446000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111180 [ 92.309089][ T4004] head:ffffea0004446000 order:3 compound_mapcount:0 compound_pincount:0 [ 92.317243][ T4004] flags: 0x4000000000010200(slab|head|zone=1) [ 92.323157][ T4004] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 92.331577][ T4004] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 92.339981][ T4004] page dumped because: kasan: bad access detected [ 92.346254][ T4004] page_owner tracks the page as allocated [ 92.351787][ T4004] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 290, tgid 290 (syz-executor), ts 21817075974, free_ts 21799198343 [ 92.372879][ T4004] post_alloc_hook+0x213/0x220 [ 92.377481][ T4004] prep_new_page+0x1b/0x110 [ 92.381814][ T4004] get_page_from_freelist+0x2980/0x2a10 [ 92.387195][ T4004] __alloc_pages+0x234/0x610 [ 92.391694][ T4004] alloc_slab_page+0x6c/0xf0 [ 92.396055][ T4004] new_slab+0x90/0x3e0 [ 92.399955][ T4004] ___slab_alloc+0x6f9/0xb80 [ 92.404381][ T4004] __slab_alloc+0x5d/0xa0 [ 92.408550][ T4004] __kmem_cache_alloc_node+0x207/0x2a0 [ 92.413844][ T4004] __kmalloc_node_track_caller+0xa2/0x1e0 [ 92.416054][ T4021] loop3: detected capacity change from 0 to 131072 [ 92.419390][ T4004] __alloc_skb+0x125/0x2d0 [ 92.429985][ T4004] alloc_uevent_skb+0x80/0x230 [ 92.434583][ T4004] kobject_uevent_net_broadcast+0x188/0x590 [ 92.440320][ T4004] kobject_uevent_env+0x53c/0x720 [ 92.445174][ T4004] kobject_uevent+0x1f/0x30 [ 92.449518][ T4004] device_add+0xa6e/0xf10 [ 92.451709][ T4021] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 92.453676][ T4004] page last free stack trace: [ 92.453685][ T4004] free_unref_page_prepare+0x83d/0x850 [ 92.469158][ T4021] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 92.470857][ T4004] free_unref_page+0xb2/0x5c0 [ 92.479698][ T4021] F2FS-fs (loop3): Test dummy encryption mode enabled [ 92.483355][ T4004] __free_pages+0x61/0xf0 [ 92.483380][ T4004] __free_slab+0xce/0x1a0 [ 92.490430][ T4021] F2FS-fs (loop3): Can't change test_dummy_encryption on remount [ 92.494119][ T4004] __unfreeze_partials+0x165/0x1a0 [ 92.494148][ T4004] put_cpu_partial+0xa9/0x100 [ 92.515299][ T4004] __slab_free+0x1c8/0x280 [ 92.519549][ T4004] ___cache_free+0xc6/0xd0 [ 92.523803][ T4004] qlist_free_all+0xc5/0x140 [ 92.528226][ T4004] kasan_quarantine_reduce+0x15a/0x180 [ 92.533527][ T4004] __kasan_slab_alloc+0x24/0x80 [ 92.538206][ T4004] slab_post_alloc_hook+0x53/0x2c0 [ 92.543153][ T4004] __kmem_cache_alloc_node+0x193/0x2a0 [ 92.548449][ T4004] kmalloc_trace+0x2a/0xa0 [ 92.552710][ T4004] kset_create_and_add+0x5c/0x2b0 [ 92.557562][ T4004] netdev_register_kobject+0x1a6/0x320 [ 92.562858][ T4004] [ 92.565028][ T4004] Memory state around the buggy address: [ 92.570500][ T4004] ffff888111185f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.578395][ T4004] ffff888111185f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.586296][ T4004] >ffff888111186000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.594192][ T4004] ^ [ 92.600710][ T4004] ffff888111186080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.608612][ T4004] ffff888111186100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.616588][ T4004] ================================================================== [ 92.630884][ T4004] Disabling lock debugging due to kernel taint [ 92.693305][ T294] EXT4-fs (loop4): unmounting filesystem. [ 94.021091][ T1162] Bluetooth: hci0: command 0x1003 tx timeout [ 94.021095][ T1333] Bluetooth: hci0: Opcode 0x1003 failed: -110