last executing test programs: 17.106011591s ago: executing program 3 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000ffff25bd7000fadbdf250000e000", @ANYRES32=0x0, @ANYBLOB="080002002b920500240012800b00010065727370616e00001400028006000200301d"], 0x44}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) 17.090240052s ago: executing program 3 (id=518): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) 16.468621798s ago: executing program 3 (id=527): personality(0x619641b6fb4b8591) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 16.382605899s ago: executing program 3 (id=529): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0xa1080a, &(0x7f0000000440)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES8, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES8, @ANYRES64, @ANYRESOCT=0x0], 0x21, 0x1508, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 16.258784463s ago: executing program 3 (id=532): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 16.083587567s ago: executing program 3 (id=535): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) 16.032356018s ago: executing program 32 (id=535): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) 5.734432246s ago: executing program 4 (id=740): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x1c}, [@fragment={0x3c, 0x0, 0x7, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 5.728463376s ago: executing program 4 (id=741): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x41001, 0x50, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.392070804s ago: executing program 4 (id=742): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x3e, "", [{{0x9, 0x4, 0x0, 0x9, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) symlink(0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="201125000000251383aad3059afec151ea6370d8e8de000000000000009726a53fa40e34fb428fa22a61a5e0453253fc2a87bfd49e28246a560a8ac270"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.929926081s ago: executing program 5 (id=751): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 3.929144391s ago: executing program 2 (id=752): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41001, 0x50, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.881016672s ago: executing program 2 (id=753): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000e80)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0xfff0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 3.872335313s ago: executing program 2 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c3b41, 0x10) stat(&(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}}) 3.847436263s ago: executing program 5 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x6, 0xc000000000000000, 0x9, 0x2, {0x2, 0x8c, 0x16, 0x2, 0x4, 0x92, 0x7, 0x0, 0xfab, 0x3000, 0xfffffffc, 0xee01, 0x0, 0x2628, 0x9}}, {0x0, 0x12}}}, 0xa0) 3.847322293s ago: executing program 5 (id=756): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x341}, {&(0x7f0000000a00)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3", 0x5b}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.847208653s ago: executing program 2 (id=757): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xd, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0x3, "00000002"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.846296223s ago: executing program 5 (id=758): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0\x00', 0x0}) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f0000006a80)="$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") r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2300012, 0x0, 0x40, 0x0, &(0x7f0000000140)) madvise(0xffffffffffffffff, 0x0, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.482775953s ago: executing program 4 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xb, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x50e74df21fafe04a}}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) 1.478473543s ago: executing program 4 (id=762): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) write$P9_RREAD(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0b10000075"], 0x100b) 1.427246384s ago: executing program 4 (id=764): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000200)=""/31) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00Option\x00'/36) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x6000000) 1.386070935s ago: executing program 5 (id=766): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/208, 0xd0) 999.409314ms ago: executing program 5 (id=778): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 126.485057ms ago: executing program 1 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 93.121907ms ago: executing program 0 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x5, 0x0, 0x0, @msi={0x1, 0x1, 0x400, 0x1}}]}) 92.270587ms ago: executing program 0 (id=792): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {0x825840505c7c76f1}, {0x8}}}, 0x24}}, 0x40004) 80.997578ms ago: executing program 0 (id=793): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x100, 0x41) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74dffffc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b06acc141802c4dae4162e438dd06a4833000100", [0xfffffffffffffce8, 0x2]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x207) 70.463578ms ago: executing program 1 (id=794): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) 49.450398ms ago: executing program 1 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/26, 0x1a, 0x8000000009) 49.341778ms ago: executing program 1 (id=796): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYRESDEC=0x0]) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') pread64(r0, 0x0, 0x0, 0x44a) 48.380328ms ago: executing program 0 (id=797): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x12, 0xb, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000022c0)={r2, &(0x7f0000002200), 0x0}, 0x20) 38.523509ms ago: executing program 1 (id=798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 37.630689ms ago: executing program 0 (id=799): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa"], 0x0) 19.572099ms ago: executing program 0 (id=800): r0 = socket$netlink(0x10, 0x3, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x800) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) poll(&(0x7f0000000100)=[{r3, 0x3040}], 0x1, 0xee16) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl(r0, 0x2, &(0x7f0000000640)="90398d6cd207beaeba0aac574b8cd36d3b718b9adb96271c28b258ef814d02d27e868838831862233e9fe65d7ec4b3e48da49c37bc4e8e549e19c8aa0523af27010f415192c2218bca3261af88e6f35e97d47cb5178d8e49830ac060ebf22d22") ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, 0x0) 11.235289ms ago: executing program 2 (id=801): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="a172", 0x2}], 0x1) 848.949µs ago: executing program 1 (id=802): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000009000000000000000280000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 0s ago: executing program 2 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/module/firmware_class/parameters/path\x00', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x1) kernel console output (not intermixed with test programs): [ T398] EXT4-fs (loop2): 1 orphan inode deleted [ 29.078186][ T398] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,prjquota,. Quota mode: writeback. [ 29.102225][ T401] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.235245][ T385] udevd[385]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 29.251050][ T386] udevd[386]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 29.436707][ T401] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.962135][ T419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18'. [ 31.343287][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 31.343299][ T30] audit: type=1400 audit(1791816993.973:155): avc: denied { accept } for pid=411 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.352063][ T431] loop2: detected capacity change from 0 to 1024 [ 32.385903][ T30] audit: type=1400 audit(1791816995.393:156): avc: denied { mount } for pid=428 comm="syz.3.27" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.652974][ T427] Zero length message leads to an empty skb [ 32.662086][ T434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=434 comm=syz.0.26 [ 32.697277][ T431] EXT4-fs (loop2): inodes count not valid: 0 vs 32 [ 33.364636][ T30] audit: type=1400 audit(1791816995.393:157): avc: denied { search } for pid=428 comm="syz.3.27" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 33.386109][ T30] audit: type=1400 audit(1791816995.403:158): avc: denied { write } for pid=428 comm="syz.3.27" name="filter" dev="tracefs" ino=2318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 33.450940][ T30] audit: type=1400 audit(1791816995.403:159): avc: denied { open } for pid=428 comm="syz.3.27" path="/4/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=2318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 33.479556][ T438] loop3: detected capacity change from 0 to 512 [ 33.490831][ T30] audit: type=1400 audit(1791816996.373:160): avc: denied { read write } for pid=435 comm="syz.4.28" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.535759][ T30] audit: type=1400 audit(1791816996.373:161): avc: denied { open } for pid=435 comm="syz.4.28" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.580909][ T440] loop1: detected capacity change from 0 to 8192 [ 33.590436][ T440] ======================================================= [ 33.590436][ T440] WARNING: The mand mount option has been deprecated and [ 33.590436][ T440] and is ignored by this kernel. Remove the mand [ 33.590436][ T440] option from the mount to silence this warning. [ 33.590436][ T440] ======================================================= [ 33.631119][ T438] EXT4-fs (loop3): Test dummy encryption mode enabled [ 33.637900][ T438] EXT4-fs (loop3): Ignoring removed oldalloc option [ 33.645541][ T30] audit: type=1400 audit(1791816996.373:162): avc: denied { ioctl } for pid=435 comm="syz.4.28" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.682789][ T30] audit: type=1400 audit(1791816996.373:163): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.709842][ T317] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.715313][ T30] audit: type=1400 audit(1791816996.583:164): avc: denied { create } for pid=441 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.717935][ T438] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none. [ 35.100576][ T287] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 35.110635][ T287] FAT-fs (loop1): Filesystem has been set read-only [ 35.159887][ T317] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.177983][ T491] loop2: detected capacity change from 0 to 512 [ 35.182953][ T317] usb 5-1: config 1 interface 0 altsetting 224 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 35.207557][ T491] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.208966][ T494] loop1: detected capacity change from 0 to 512 [ 35.236240][ T317] usb 5-1: config 1 interface 0 has no altsetting 0 [ 35.247756][ T491] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000800000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,nouid32,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 35.270628][ T491] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.297891][ T494] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 35.312311][ T494] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.599943][ T497] loop3: detected capacity change from 0 to 40427 [ 35.649928][ T317] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 35.659301][ T317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.667724][ T317] usb 5-1: Product: syz [ 35.672046][ T317] usb 5-1: Manufacturer: syz [ 35.676656][ T317] usb 5-1: SerialNumber: syz [ 35.692552][ T497] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 35.700958][ T497] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 35.710608][ T497] F2FS-fs (loop3): invalid crc value [ 35.717296][ T497] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.772707][ T497] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.779845][ T497] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.979510][ T526] syz.0.61 uses obsolete (PF_INET,SOCK_PACKET) [ 37.033942][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 37.033956][ T30] audit: type=1400 audit(1791816998.983:187): avc: denied { create } for pid=513 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.120144][ T30] audit: type=1400 audit(1791816998.993:188): avc: denied { setopt } for pid=513 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.327725][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 37.347164][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 37.350272][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.364324][ T30] audit: type=1400 audit(1791816998.993:189): avc: denied { write } for pid=513 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.467147][ T30] audit: type=1400 audit(1791816999.993:190): avc: denied { create } for pid=525 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.520449][ T30] audit: type=1400 audit(1791816999.993:191): avc: denied { ioctl } for pid=525 comm="syz.0.61" path="socket:[16624]" dev="sockfs" ino=16624 ioctlcmd=0x89a3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.545691][ T317] usb 5-1: selecting invalid altsetting 0 [ 37.553948][ T30] audit: type=1400 audit(1791817000.003:192): avc: denied { read write } for pid=527 comm="syz.0.62" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.577310][ T317] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 37.595770][ T317] usb 5-1: USB disconnect, device number 2 [ 37.612430][ T562] 9pnet: Could not find request transport: xe" [ 37.629846][ T30] audit: type=1400 audit(1791817000.003:193): avc: denied { open } for pid=527 comm="syz.0.62" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.668976][ T30] audit: type=1400 audit(1791817000.003:194): avc: denied { ioctl } for pid=527 comm="syz.0.62" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.717997][ T30] audit: type=1400 audit(1791817000.093:195): avc: denied { getopt } for pid=537 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.738068][ T30] audit: type=1400 audit(1791817000.513:196): avc: denied { read } for pid=551 comm="syz.1.74" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 37.833655][ T583] loop3: detected capacity change from 0 to 1024 [ 37.859865][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 37.899806][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 37.930716][ T583] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 37.941648][ T583] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 37.951237][ T583] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 37.994401][ T592] loop4: detected capacity change from 0 to 256 [ 38.079858][ T6] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 38.088990][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.099818][ T6] usb 3-1: Product: syz [ 38.104646][ T6] usb 3-1: Manufacturer: syz [ 38.109606][ T6] usb 3-1: SerialNumber: syz [ 38.119806][ T357] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 38.150866][ T6] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 38.170359][ T6] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 38.170359][ T6] Please send a copy of this message to and [ 38.261589][ T602] loop4: detected capacity change from 0 to 40427 [ 38.302318][ T602] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 38.310146][ T602] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 38.319032][ T602] F2FS-fs (loop4): invalid crc value [ 38.325733][ T602] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.347393][ T602] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 38.354740][ T602] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 38.435444][ T602] attempt to access beyond end of device [ 38.435444][ T602] loop4: rw=2049, want=81920, limit=40427 [ 38.451448][ T602] attempt to access beyond end of device [ 38.451448][ T602] loop4: rw=2049, want=52472, limit=40427 [ 38.464254][ T602] attempt to access beyond end of device [ 38.464254][ T602] loop4: rw=2049, want=53248, limit=40427 [ 38.478260][ T602] attempt to access beyond end of device [ 38.478260][ T602] loop4: rw=2049, want=59392, limit=40427 [ 38.512356][ T602] attempt to access beyond end of device [ 38.512356][ T602] loop4: rw=2049, want=69632, limit=40427 [ 38.514049][ T612] attempt to access beyond end of device [ 38.514049][ T612] loop4: rw=0, want=77832, limit=40427 [ 38.523617][ T357] usb 2-1: config 1 has an invalid interface number: 103 but max is 0 [ 38.534624][ T612] attempt to access beyond end of device [ 38.534624][ T612] loop4: rw=0, want=77832, limit=40427 [ 38.546408][ T602] attempt to access beyond end of device [ 38.546408][ T602] loop4: rw=2049, want=69640, limit=40427 [ 38.554057][ T612] attempt to access beyond end of device [ 38.554057][ T612] loop4: rw=0, want=77832, limit=40427 [ 38.564925][ T357] usb 2-1: config 1 has no interface number 0 [ 38.581941][ T357] usb 2-1: config 1 interface 103 has no altsetting 0 [ 38.588852][ T602] attempt to access beyond end of device [ 38.588852][ T602] loop4: rw=2049, want=69648, limit=40427 [ 38.630960][ T6] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 38.641261][ T6] usb 3-1: USB disconnect, device number 2 [ 38.673001][ T615] loop3: detected capacity change from 0 to 256 [ 38.712421][ T615] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 38.819875][ T357] usb 2-1: string descriptor 0 read error: -22 [ 38.826116][ T357] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 38.835505][ T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.882696][ T357] ftdi_sio 2-1:1.103: FTDI USB Serial Device converter detected [ 38.943025][ T357] usb 2-1: Detected FT-X [ 39.100000][ T357] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 39.129840][ T357] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 39.149855][ T357] ftdi_sio 2-1:1.103: GPIO initialisation failed: -71 [ 39.160039][ T357] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 39.185251][ T357] usb 2-1: USB disconnect, device number 2 [ 39.212044][ T357] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 39.249092][ T643] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 39.252394][ T357] ftdi_sio 2-1:1.103: device disconnected [ 39.264158][ T643] netlink: 144 bytes leftover after parsing attributes in process `syz.4.111'. [ 39.598795][ T650] loop4: detected capacity change from 0 to 1024 [ 39.599293][ T648] netlink: 276 bytes leftover after parsing attributes in process `syz.2.114'. [ 39.662142][ T650] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.741730][ T650] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 39.756695][ T625] syz.0.105 (625) used greatest stack depth: 20872 bytes left [ 39.980109][ T661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 40.042603][ T668] loop1: detected capacity change from 0 to 512 [ 41.470093][ T675] loop1: detected capacity change from 0 to 40427 [ 41.486924][ T675] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 41.495808][ T675] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.504912][ T675] F2FS-fs (loop1): invalid crc value [ 41.616181][ T675] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.789968][ T688] input: syz0 as /devices/virtual/input/input5 [ 42.349921][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 42.349932][ T30] audit: type=1400 audit(1791817005.353:295): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=616 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.381084][ T675] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.388125][ T675] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.615393][ T690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 42.633817][ T30] audit: type=1400 audit(1791817005.353:296): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=616 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.659425][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.668901][ T690] device bridge_slave_1 left promiscuous mode [ 42.675042][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.687844][ T30] audit: type=1400 audit(1791817005.353:297): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=616 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.714355][ T30] audit: type=1400 audit(1791817005.613:298): avc: denied { map } for pid=684 comm="syz.3.124" path="socket:[16990]" dev="sockfs" ino=16990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 42.950061][ T696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 42.958897][ T696] device bridge_slave_1 left promiscuous mode [ 42.965050][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.976078][ T696] device bridge_slave_0 left promiscuous mode [ 42.982364][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.111597][ T706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 43.354883][ T709] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 43.477384][ T717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 43.893600][ T724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 43.909566][ T724] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 43.920943][ T724] EXT4-fs (loop5): unable to read superblock [ 43.989710][ T726] loop2: detected capacity change from 0 to 4096 [ 43.999824][ T30] audit: type=1400 audit(1791817006.973:299): avc: denied { mount } for pid=719 comm="syz.0.133" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.041571][ T30] audit: type=1400 audit(1791817007.043:300): avc: denied { create } for pid=731 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.111995][ T30] audit: type=1400 audit(1791817007.053:301): avc: denied { bind } for pid=731 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.157329][ T726] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 44.238137][ T738] loop3: detected capacity change from 0 to 256 [ 44.369086][ T350] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.397486][ T30] audit: type=1400 audit(1791817007.143:302): avc: denied { write } for pid=734 comm="syz.1.138" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 45.087078][ T740] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 45.098140][ T30] audit: type=1400 audit(1791817008.093:303): avc: denied { remount } for pid=725 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.221447][ T738] FAT-fs (loop3): Directory bread(block 64) failed [ 45.351319][ T738] FAT-fs (loop3): Directory bread(block 65) failed [ 45.357911][ T738] FAT-fs (loop3): Directory bread(block 66) failed [ 45.381499][ T738] FAT-fs (loop3): Directory bread(block 67) failed [ 45.459800][ T350] usb 5-1: Using ep0 maxpacket: 8 [ 45.484552][ T738] FAT-fs (loop3): Directory bread(block 68) failed [ 45.513558][ T738] FAT-fs (loop3): Directory bread(block 69) failed [ 45.554357][ T738] FAT-fs (loop3): Directory bread(block 70) failed [ 45.571999][ T738] FAT-fs (loop3): Directory bread(block 71) failed [ 45.579917][ T350] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 45.598121][ T350] usb 5-1: config 0 has no interface number 0 [ 45.608239][ T738] FAT-fs (loop3): Directory bread(block 72) failed [ 45.628398][ T738] FAT-fs (loop3): Directory bread(block 73) failed [ 45.792104][ T747] SELinux: failed to load policy [ 45.796272][ T30] audit: type=1400 audit(1791817008.803:304): avc: denied { load_policy } for pid=746 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.817634][ T350] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 45.840546][ T350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.848546][ T350] usb 5-1: Product: syz [ 45.853358][ T350] usb 5-1: Manufacturer: syz [ 45.858593][ T350] usb 5-1: SerialNumber: syz [ 45.866055][ T350] usb 5-1: config 0 descriptor?? [ 45.897738][ T752] Restarting kernel threads ... done. [ 46.179089][ T755] loop3: detected capacity change from 0 to 256 [ 46.211142][ T350] usb 5-1: USB disconnect, device number 3 [ 46.299755][ T757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 46.326479][ T757] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 46.361940][ T757] EXT4-fs (loop7): unable to read superblock [ 46.652922][ T762] loop3: detected capacity change from 0 to 8192 [ 46.712609][ T743] loop1: detected capacity change from 0 to 131072 [ 46.740136][ T385] loop3: p3 < > p4 [ 46.744830][ T385] loop3: p4 size 851974 extends beyond EOD, truncated [ 46.755070][ T743] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.771718][ T762] loop3: p3 < > p4 [ 46.776022][ T762] loop3: p4 size 851974 extends beyond EOD, truncated [ 46.802726][ T767] loop4: detected capacity change from 0 to 512 [ 46.830654][ T767] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.843022][ T767] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.148: inode #88: comm syz.4.148: iget: illegal inode # [ 46.859649][ T743] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.865679][ T767] EXT4-fs (loop4): Remounting filesystem read-only [ 46.881094][ T767] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.148: error while reading EA inode 88 err=-117 [ 46.893654][ T767] EXT4-fs (loop4): Remounting filesystem read-only [ 46.893653][ T743] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 46.910624][ T743] F2FS-fs (loop1): recover xattr in inode (7) [ 46.916841][ T767] EXT4-fs (loop4): 1 orphan inode deleted [ 46.923609][ T767] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,jqfmt=vfsold,nodelalloc,bsdgroups,. Quota mode: none. [ 46.925030][ T743] F2FS-fs (loop1): set inode (7) has corrupted xattr [ 47.202012][ T771] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.217546][ T771] EXT4-fs (loop4): Remounting filesystem read-only [ 47.253177][ T771] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 47.264811][ T771] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 47.397114][ T315] udevd[315]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 47.399521][ T385] udevd[385]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.484048][ T775] loop3: detected capacity change from 0 to 4096 [ 47.545126][ T775] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.677437][ T789] loop1: detected capacity change from 0 to 512 [ 48.688236][ T785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 49.517959][ T788] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 49.583569][ T789] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.594817][ T789] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.611962][ T794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 49.638674][ T786] EXT4-fs error (device loop1): ext4_get_first_dir_block:3599: inode #12: comm syz.1.153: Directory block failed checksum [ 49.639818][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 49.639830][ T30] audit: type=1400 audit(1791817012.643:306): avc: denied { remove_name } for pid=778 comm="syz.1.153" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.653756][ T797] loop3: detected capacity change from 0 to 1024 [ 49.686253][ T30] audit: type=1400 audit(1791817012.643:307): avc: denied { rename } for pid=778 comm="syz.1.153" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.687339][ T798] loop4: detected capacity change from 0 to 4096 [ 49.715767][ T797] EXT4-fs (loop3): Ignoring removed bh option [ 49.718004][ T30] audit: type=1400 audit(1791817012.643:308): avc: denied { unlink } for pid=778 comm="syz.1.153" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.041384][ T30] audit: type=1400 audit(1791817012.643:309): avc: denied { rename } for pid=778 comm="syz.1.153" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.077805][ T30] audit: type=1400 audit(1791817012.643:310): avc: denied { rmdir } for pid=778 comm="syz.1.153" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.100753][ T797] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,commit=0x0000000000000005,noquota,grpid,auto_da_alloc,grpid,bh,,errors=continue. Quota mode: none. [ 50.143975][ T798] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.174938][ T798] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.199864][ T798] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 50.239905][ T30] audit: type=1400 audit(1791817013.193:311): avc: denied { ioctl } for pid=808 comm="syz.0.162" path="socket:[17177]" dev="sockfs" ino=17177 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.303161][ T803] syz.0.159 (803) used greatest stack depth: 19648 bytes left [ 50.365385][ T820] loop1: detected capacity change from 0 to 256 [ 50.384620][ T820] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5a63664b, utbl_chksum : 0xe619d30d) [ 50.399105][ T30] audit: type=1400 audit(1791817013.413:312): avc: denied { remove_name } for pid=819 comm="syz.1.160" name="file1" dev="loop1" ino=1048663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.410508][ T828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 50.430648][ T318] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.435078][ T30] audit: type=1400 audit(1791817013.413:313): avc: denied { rename } for pid=819 comm="syz.1.160" name="file1" dev="loop1" ino=1048663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.691408][ T829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 50.741165][ T831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 50.911482][ T832] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 50.922833][ T832] EXT4-fs (loop1): unable to read superblock [ 50.937809][ T30] audit: type=1400 audit(1791817013.943:314): avc: denied { read write } for pid=835 comm="syz.0.170" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.961446][ T30] audit: type=1400 audit(1791817013.943:315): avc: denied { open } for pid=835 comm="syz.0.170" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.129919][ T318] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 51.146307][ T318] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 51.197726][ T318] usb 3-1: config 0 has no interface number 0 [ 51.460061][ T318] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 51.498024][ T847] loop4: detected capacity change from 0 to 512 [ 51.516581][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.583375][ T318] usb 3-1: Product: syz [ 51.604530][ T318] usb 3-1: Manufacturer: syz [ 51.694546][ T318] usb 3-1: SerialNumber: syz [ 52.087214][ T318] usb 3-1: config 0 descriptor?? [ 52.111123][ T847] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.121934][ T847] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.154251][ T847] EXT4-fs error (device loop4): ext4_get_first_dir_block:3599: inode #12: comm syz.4.173: Directory block failed checksum [ 52.369594][ T844] loop3: detected capacity change from 0 to 40427 [ 52.450127][ T844] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 52.478494][ T844] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 52.495878][ T844] F2FS-fs (loop3): invalid crc value [ 52.522935][ T844] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.570436][ T844] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 52.577481][ T844] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.594367][ T874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 52.621686][ T874] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 52.633090][ T874] EXT4-fs (loop9): unable to read superblock [ 52.704534][ T844] handle_bad_sector: 2366 callbacks suppressed [ 52.704551][ T844] attempt to access beyond end of device [ 52.704551][ T844] loop3: rw=2049, want=81920, limit=40427 [ 52.709860][ T318] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 52.720818][ T844] attempt to access beyond end of device [ 52.720818][ T844] loop3: rw=2049, want=53248, limit=40427 [ 52.746597][ T844] attempt to access beyond end of device [ 52.746597][ T844] loop3: rw=2049, want=59672, limit=40427 [ 52.757868][ T318] usb 3-1: No valid video chain found. [ 52.762472][ T887] loop4: detected capacity change from 0 to 1024 [ 52.773594][ T318] usb 3-1: USB disconnect, device number 3 [ 52.779715][ T887] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 52.793980][ T887] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 52.796263][ T841] attempt to access beyond end of device [ 52.796263][ T841] loop3: rw=524288, want=78080, limit=40427 [ 52.819286][ T841] attempt to access beyond end of device [ 52.819286][ T841] loop3: rw=0, want=77832, limit=40427 [ 52.830578][ T841] attempt to access beyond end of device [ 52.830578][ T841] loop3: rw=0, want=77832, limit=40427 [ 52.840041][ T887] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 52.849551][ T844] attempt to access beyond end of device [ 52.849551][ T844] loop3: rw=0, want=77832, limit=40427 [ 52.861046][ T887] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.868053][ T887] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #3: block 3: comm syz.4.188: lblock 3 mapped to illegal pblock 3 (length 1) [ 52.882143][ T844] attempt to access beyond end of device [ 52.882143][ T844] loop3: rw=0, want=77832, limit=40427 [ 52.893304][ T844] attempt to access beyond end of device [ 52.893304][ T844] loop3: rw=0, want=77832, limit=40427 [ 52.898864][ T887] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.188: Failed to acquire dquot type 0 [ 52.904454][ T844] attempt to access beyond end of device [ 52.904454][ T844] loop3: rw=0, want=77832, limit=40427 [ 52.926624][ T887] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 3: comm syz.4.188: lblock 3 mapped to illegal pblock 3 (length 1) [ 52.940693][ T887] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.188: Failed to acquire dquot type 0 [ 52.952016][ T887] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.188: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.965473][ T887] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 3: comm syz.4.188: lblock 3 mapped to illegal pblock 3 (length 1) [ 52.989968][ T887] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.188: Failed to acquire dquot type 0 [ 53.009939][ T887] EXT4-fs (loop4): 1 orphan inode deleted [ 53.016266][ T887] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,data_err=ignore,acl,journal_dev=0x0000000000000001,nomblk_io_submit,jqfmt=vfsold,nobarrier,usrjquota=,,errors=continue. Quota mode: writeback. [ 53.059834][ T887] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.188: iget: bad extended attribute block 6 [ 53.980363][ T899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 54.032949][ T899] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 54.069137][ T899] EXT4-fs (loop5): unable to read superblock [ 54.217409][ T921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.203'. [ 54.231133][ T897] loop4: detected capacity change from 0 to 40427 [ 54.246315][ T921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.203'. [ 54.258793][ T902] loop1: detected capacity change from 0 to 40427 [ 54.259829][ T921] netlink: 1 bytes leftover after parsing attributes in process `syz.3.203'. [ 54.298467][ T925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 54.310874][ T897] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 54.317882][ T902] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 54.327333][ T897] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.337590][ T902] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 54.352356][ T897] F2FS-fs (loop4): fault_injection options not supported [ 54.356062][ T902] F2FS-fs (loop1): invalid crc value [ 54.365556][ T897] F2FS-fs (loop4): fault_type options not supported [ 54.377134][ T902] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.383853][ T897] F2FS-fs (loop4): invalid crc value [ 54.402221][ T897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.433619][ T902] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 54.440744][ T902] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.445054][ T897] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.455552][ T897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.553507][ T946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 54.730722][ T948] loop4: detected capacity change from 0 to 40427 [ 54.762922][ T948] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 54.772111][ T948] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.789180][ T948] F2FS-fs (loop4): invalid crc value [ 54.821535][ T948] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.905613][ T948] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.916798][ T948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.459406][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 55.459419][ T30] audit: type=1400 audit(1791817018.463:326): avc: denied { nlmsg_write } for pid=972 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 55.611490][ T976] loop2: detected capacity change from 0 to 512 [ 55.876872][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 55.931572][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 55.994129][ T976] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,i_version,errors=remount-ro,journal_ioprio=0x0000000000000005,. Quota mode: writeback. [ 56.037336][ T976] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.089825][ T976] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.221: corrupted xattr block 32 [ 56.154659][ T976] EXT4-fs (loop2): Remounting filesystem read-only [ 56.156338][ T985] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 56.173212][ T985] EXT4-fs (loop1): unable to read superblock [ 56.176859][ T991] loop4: detected capacity change from 0 to 512 [ 56.191725][ T976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 56.201758][ T976] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.221: corrupted xattr block 32 [ 56.213741][ T976] EXT4-fs (loop2): Remounting filesystem read-only [ 56.240487][ T991] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 56.259960][ T976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 56.269039][ T991] ext4 filesystem being mounted at /43/sys supports timestamps until 2038-01-19 (0x7fffffff) [ 56.290103][ T976] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #15: comm syz.2.221: corrupted xattr block 32 [ 56.316762][ T976] EXT4-fs (loop2): Remounting filesystem read-only [ 56.378389][ T998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 56.407100][ T998] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 56.418514][ T998] EXT4-fs (loop9): unable to read superblock [ 56.627675][ T1011] input: syz0 as /devices/virtual/input/input6 [ 56.651696][ T30] audit: type=1400 audit(1791817019.653:327): avc: denied { append } for pid=1003 comm="syz.2.231" name="event3" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.228801][ T1016] loop3: detected capacity change from 0 to 128 [ 57.586285][ T1019] fuse: Bad value for 'fd' [ 57.792524][ T30] audit: type=1400 audit(1791817020.593:328): avc: denied { mounton } for pid=1012 comm="syz.0.244" path="/75/file0" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.853194][ T1023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 57.863011][ T1023] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 57.874264][ T1023] EXT4-fs (loop5): unable to read superblock [ 57.894610][ T1026] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 57.898299][ T1016] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 57.906883][ T30] audit: type=1400 audit(1791817020.923:329): avc: denied { setopt } for pid=1027 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.920414][ T1016] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.948681][ T1026] EXT4-fs (loop9): unable to read superblock [ 57.982722][ T1032] overlayfs: empty lowerdir [ 58.011755][ T30] audit: type=1400 audit(1791817021.023:330): avc: denied { create } for pid=1015 comm="syz.3.234" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.049833][ T30] audit: type=1400 audit(1791817021.043:331): avc: denied { read append open } for pid=1015 comm="syz.3.234" path="/41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/net_prio.prioidx" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.132761][ T1036] loop4: detected capacity change from 0 to 256 [ 58.151029][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 58.172199][ T1038] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 58.382575][ T30] audit: type=1400 audit(1791817021.363:332): avc: denied { write } for pid=1015 comm="syz.3.234" path="/41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.782188][ T1038] EXT4-fs (loop5): unable to read superblock [ 58.806397][ T1036] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xc87975fb, utbl_chksum : 0xe619d30d) [ 58.825971][ T1044] loop1: detected capacity change from 0 to 1024 [ 58.838092][ T1036] exFAT-fs (loop4): error, found bogus dentry(13) beyond unused empty group(12) (start_clu : 5, cur_clu : 5) [ 58.844969][ T1047] loop2: detected capacity change from 0 to 512 [ 58.850907][ T1036] exFAT-fs (loop4): Filesystem has been set read-only [ 58.869096][ T1044] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 58.881174][ T1044] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 58.950269][ T1057] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 58.962129][ T1057] EXT4-fs (loop7): unable to read superblock [ 59.001083][ T1047] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.014722][ T1047] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.364687][ T1047] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 60.392137][ T1044] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.408208][ T1044] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.431688][ T1044] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #3: block 3: comm syz.1.245: lblock 3 mapped to illegal pblock 3 (length 1) [ 60.442048][ T1069] loop4: detected capacity change from 0 to 512 [ 60.451954][ T1044] Quota error (device loop1): write_blk: dquota write failed [ 60.454917][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 60.460581][ T1044] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 60.478125][ T1071] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 60.478352][ T1074] binder: 1072:1074 ioctl 400c620e 200000000240 returned -22 [ 60.489971][ T1071] EXT4-fs (loop7): unable to read superblock [ 60.503018][ T1044] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 60.515268][ T1044] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.245: Failed to acquire dquot type 0 [ 60.546929][ T1044] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 3: comm syz.1.245: lblock 3 mapped to illegal pblock 3 (length 1) [ 60.574315][ T1044] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 60.599990][ T1044] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.245: Failed to acquire dquot type 0 [ 60.617215][ T1069] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,i_version,errors=remount-ro,journal_ioprio=0x0000000000000005,. Quota mode: writeback. [ 60.619121][ T1044] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.245: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.642968][ T1069] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.647961][ T1044] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 3: comm syz.1.245: lblock 3 mapped to illegal pblock 3 (length 1) [ 60.782132][ T1044] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 60.830003][ T30] audit: type=1400 audit(1791817023.833:333): avc: denied { getopt } for pid=1082 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.870327][ T1044] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.245: Failed to acquire dquot type 0 [ 60.901250][ T1044] EXT4-fs (loop1): 1 orphan inode deleted [ 60.910018][ T1044] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,data_err=ignore,acl,journal_dev=0x0000000000000001,nomblk_io_submit,jqfmt=vfsold,nobarrier,usrjquota=,,errors=continue. Quota mode: writeback. [ 60.914073][ T1069] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.251: corrupted xattr block 32 [ 60.973038][ T1044] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.245: iget: bad extended attribute block 6 [ 60.973601][ T1069] EXT4-fs (loop4): Remounting filesystem read-only [ 60.991663][ T1069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 61.000657][ T1069] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.251: corrupted xattr block 32 [ 61.002831][ T1077] loop3: detected capacity change from 0 to 40427 [ 61.025134][ T1069] EXT4-fs (loop4): Remounting filesystem read-only [ 61.028376][ T1077] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 61.032045][ T1069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 61.041411][ T1077] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 61.048408][ T1069] EXT4-fs error (device loop4): ext4_xattr_block_list:713: inode #15: comm syz.4.251: corrupted xattr block 32 [ 61.067744][ T1077] F2FS-fs (loop3): fault_injection options not supported [ 61.075163][ T1069] EXT4-fs (loop4): Remounting filesystem read-only [ 61.081754][ T1077] F2FS-fs (loop3): fault_type options not supported [ 61.091265][ T1077] F2FS-fs (loop3): invalid crc value [ 61.099818][ T30] audit: type=1400 audit(1791817024.103:334): avc: denied { read } for pid=1092 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.124525][ T1077] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.124864][ T30] audit: type=1400 audit(1791817024.133:335): avc: denied { read } for pid=1097 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.164931][ T1077] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 61.172776][ T1077] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.187130][ T30] audit: type=1400 audit(1791817024.193:336): avc: denied { bind } for pid=1106 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.213350][ T1109] loop2: detected capacity change from 0 to 1024 [ 61.221868][ T1109] EXT4-fs (loop2): Ignoring removed oldalloc option [ 61.243167][ T1109] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,oldalloc,journal_dev=0x0000000000001000,delalloc,nogrpid,,errors=continue. Quota mode: none. [ 61.250390][ T1117] loop4: detected capacity change from 0 to 512 [ 61.261821][ T1109] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.294626][ T1109] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #12: comm syz.2.272: directory missing '..' [ 61.298636][ T1117] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 61.316922][ T1117] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.331455][ T1117] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 61.335902][ T30] audit: type=1400 audit(1791817024.343:337): avc: denied { write } for pid=1120 comm="syz.3.273" name="usbmon4" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.347021][ T1117] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.274: bg 0: block 248: padding at end of block bitmap is not set [ 61.389055][ T1117] Quota error (device loop4): write_blk: dquota write failed [ 61.392389][ T1125] loop2: detected capacity change from 0 to 256 [ 61.396914][ T1117] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 61.414776][ T1125] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.418089][ T1117] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.274: Failed to acquire dquot type 1 [ 61.437374][ T1117] EXT4-fs (loop4): 1 truncate cleaned up [ 61.443181][ T1117] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 61.457261][ T318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.493946][ T306] EXT4-fs error (device loop4): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 1 [ 61.551139][ T1151] loop4: detected capacity change from 0 to 256 [ 61.567921][ T1153] loop3: detected capacity change from 0 to 16 [ 61.629029][ T1143] loop2: detected capacity change from 0 to 40427 [ 61.641012][ T1153] erofs: (device loop3): mounted with root inode @ nid 36. [ 61.644799][ T1151] FAT-fs (loop4): Directory bread(block 64) failed [ 61.654821][ T1151] FAT-fs (loop4): Directory bread(block 65) failed [ 61.661472][ T1151] FAT-fs (loop4): Directory bread(block 66) failed [ 61.662438][ T1143] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 61.670018][ T1151] FAT-fs (loop4): Directory bread(block 67) failed [ 61.675483][ T1143] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 61.681722][ T1151] FAT-fs (loop4): Directory bread(block 68) failed [ 61.696314][ T1151] FAT-fs (loop4): Directory bread(block 69) failed [ 61.699666][ T1143] F2FS-fs (loop2): fault_injection options not supported [ 61.703160][ T1151] FAT-fs (loop4): Directory bread(block 70) failed [ 61.716732][ T1151] FAT-fs (loop4): Directory bread(block 71) failed [ 61.716988][ T1143] F2FS-fs (loop2): fault_type options not supported [ 61.723530][ T1151] FAT-fs (loop4): Directory bread(block 72) failed [ 61.730000][ T318] usb 2-1: Using ep0 maxpacket: 32 [ 61.736592][ T1151] FAT-fs (loop4): Directory bread(block 73) failed [ 61.746300][ T1143] F2FS-fs (loop2): invalid crc value [ 61.765836][ T1143] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.785046][ T1162] device bridge1 entered promiscuous mode [ 61.807252][ T1143] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 61.817326][ T1143] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.879863][ T318] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.894884][ T318] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.915333][ T1182] usb usb9: usbfs: process 1182 (syz.2.300) did not claim interface 0 before use [ 61.938740][ T1184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 61.948545][ T1184] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 61.959895][ T1184] EXT4-fs (loop5): unable to read superblock [ 62.004631][ T1180] loop4: detected capacity change from 0 to 40427 [ 62.020156][ T1180] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 62.028124][ T1180] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 62.037237][ T1180] F2FS-fs (loop4): invalid crc value [ 62.046516][ T1180] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.049867][ T318] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 62.066327][ T318] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 62.075258][ T1199] loop2: detected capacity change from 0 to 16 [ 62.081499][ T318] usb 2-1: Product: syz [ 62.082585][ T1180] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 62.085818][ T318] usb 2-1: Manufacturer: syz [ 62.092776][ T1180] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.097473][ T350] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.150794][ T318] hub 2-1:4.0: USB hub found [ 62.172434][ T1199] erofs: (device loop2): mounted with root inode @ nid 36. [ 62.191510][ T1180] handle_bad_sector: 3464 callbacks suppressed [ 62.191522][ T1180] attempt to access beyond end of device [ 62.191522][ T1180] loop4: rw=2049, want=79912, limit=40427 [ 62.214342][ T1180] attempt to access beyond end of device [ 62.214342][ T1180] loop4: rw=2049, want=81920, limit=40427 [ 62.234654][ T1180] attempt to access beyond end of device [ 62.234654][ T1180] loop4: rw=2049, want=53248, limit=40427 [ 62.266996][ T1179] attempt to access beyond end of device [ 62.266996][ T1179] loop4: rw=0, want=77832, limit=40427 [ 62.278054][ T1179] attempt to access beyond end of device [ 62.278054][ T1179] loop4: rw=0, want=77832, limit=40427 [ 62.279603][ T1180] attempt to access beyond end of device [ 62.279603][ T1180] loop4: rw=2049, want=69632, limit=40427 [ 62.289330][ T1201] attempt to access beyond end of device [ 62.289330][ T1201] loop4: rw=0, want=77832, limit=40427 [ 62.305698][ T1180] attempt to access beyond end of device [ 62.305698][ T1180] loop4: rw=2049, want=69640, limit=40427 [ 62.323132][ T1180] attempt to access beyond end of device [ 62.323132][ T1180] loop4: rw=2049, want=69648, limit=40427 [ 62.334951][ T1180] attempt to access beyond end of device [ 62.334951][ T1180] loop4: rw=2049, want=69656, limit=40427 [ 62.393835][ T1211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 62.436255][ T318] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 62.639839][ T350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.650029][ T350] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.829850][ T350] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 62.839022][ T350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.847232][ T350] usb 4-1: Product: syz [ 62.851545][ T350] usb 4-1: Manufacturer: syz [ 62.856153][ T350] usb 4-1: SerialNumber: syz [ 62.879964][ T356] usb 2-1: USB disconnect, device number 3 [ 63.012885][ T1214] F2FS-fs (loop4): invalid crc value [ 63.019595][ T1214] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.050618][ T1214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.127375][ T1222] usb usb5: usbfs: process 1222 (syz.2.316) did not claim interface 0 before use [ 63.146285][ T350] usb 4-1: USB disconnect, device number 2 [ 63.264182][ T1226] fuse: Bad value for 'fd' [ 63.544865][ T1232] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 63.557538][ T1232] EXT4-fs (loop3): unable to read superblock [ 63.829800][ T317] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.859860][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 63.877560][ T1262] netlink: 320 bytes leftover after parsing attributes in process `syz.0.333'. [ 63.927727][ T1264] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 63.939556][ T1264] EXT4-fs (loop1): unable to read superblock [ 64.348507][ T1292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 64.358237][ T1292] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 64.369712][ T1292] EXT4-fs (loop1): unable to read superblock [ 64.399859][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.410028][ T317] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 64.419049][ T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.437354][ T20] usb 2-1: config 1 interface 0 altsetting 224 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 64.457680][ T20] usb 2-1: config 1 interface 0 has no altsetting 0 [ 64.490281][ T317] usb-storage 5-1:1.0: USB Mass Storage device detected [ 64.530371][ T1302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 64.639857][ T20] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 64.648988][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.657001][ T20] usb 2-1: Product: syz [ 64.661233][ T20] usb 2-1: Manufacturer: syz [ 64.665846][ T20] usb 2-1: SerialNumber: syz [ 64.931502][ T317] scsi host1: usb-storage 5-1:1.0 [ 64.940352][ T317] usb 5-1: USB disconnect, device number 4 [ 65.535129][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 65.535143][ T30] audit: type=1400 audit(1791817028.543:347): avc: denied { setopt } for pid=1309 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.666026][ T1322] fuse: Bad value for 'fd' [ 65.798196][ T1320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 65.812649][ T1320] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 65.824184][ T1320] EXT4-fs (loop5): unable to read superblock [ 66.478409][ T1331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 66.491858][ T1331] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 66.508039][ T1331] EXT4-fs (loop5): unable to read superblock [ 66.649792][ T1347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 68.541396][ T1361] fuse: Bad value for 'fd' [ 68.793376][ T20] usb 2-1: selecting invalid altsetting 0 [ 68.799191][ T20] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 68.808666][ T20] usb 2-1: USB disconnect, device number 4 [ 68.854960][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 68.890617][ T1368] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 68.919859][ T1368] EXT4-fs (loop9): unable to read superblock [ 68.931325][ T1383] futex_wake_op: syz.0.384 tries to shift op by -1; fix this program [ 68.936294][ T30] audit: type=1400 audit(1791817031.933:348): avc: denied { mmap_zero } for pid=1382 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 68.961654][ T1387] 9pnet: Insufficient options for proto=fd [ 68.972058][ T1392] set_capacity_and_notify: 1 callbacks suppressed [ 68.972071][ T1392] loop3: detected capacity change from 0 to 256 [ 69.030112][ T1406] loop2: detected capacity change from 0 to 512 [ 69.040917][ T1406] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 69.040917][ T1406] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 69.040917][ T1406] [ 69.049869][ T30] audit: type=1400 audit(1791817032.053:349): avc: granted { setsecparam } for pid=1409 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 69.061425][ T1406] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 69.094001][ T1414] loop4: detected capacity change from 0 to 256 [ 69.112220][ T1406] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.395: corrupted in-inode xattr [ 69.131429][ T1406] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.395: couldn't read orphan inode 15 (err -117) [ 69.136169][ T1414] exfat: Deprecated parameter 'utf8' [ 69.143639][ T1406] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,inode_readahead_blks=0x0000000000001000,quota,noload,user_xattr,mblk_io_submit,noload,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 69.179607][ T30] audit: type=1400 audit(1791817032.183:350): avc: denied { setattr } for pid=1405 comm="syz.2.395" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.180117][ T1422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 69.201320][ T1414] exfat: Deprecated parameter 'utf8' [ 69.215413][ T1414] exfat: Deprecated parameter 'namecase' [ 69.221266][ T1414] exfat: Deprecated parameter 'utf8' [ 69.226660][ T1414] exfat: Deprecated parameter 'namecase' [ 69.239339][ T1422] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 69.250610][ T1422] EXT4-fs (loop1): unable to read superblock [ 69.294049][ T1414] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8be6bf04, utbl_chksum : 0xe619d30d) [ 69.332734][ T1435] netlink: 188 bytes leftover after parsing attributes in process `syz.2.407'. [ 69.337128][ T1416] loop3: detected capacity change from 0 to 40427 [ 69.363331][ T1441] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.374860][ T1441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.382081][ T1441] IPv6: NLM_F_CREATE should be set when creating new route [ 69.392998][ T1416] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.410116][ T1416] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.440903][ T1444] loop1: detected capacity change from 0 to 256 [ 69.467171][ T1447] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.490765][ T1444] exfat: Deprecated parameter 'utf8' [ 69.524995][ T1416] F2FS-fs (loop3): invalid crc value [ 69.534934][ T1444] exfat: Deprecated parameter 'namecase' [ 69.637750][ T1444] exfat: Deprecated parameter 'namecase' [ 69.643537][ T1444] exfat: Deprecated parameter 'utf8' [ 69.655207][ T1450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 69.670563][ T1454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 69.671687][ T1444] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 69.680434][ T1454] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 69.704821][ T1416] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.705396][ T1454] EXT4-fs (loop9): unable to read superblock [ 69.768000][ T1416] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.778172][ T1416] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.827481][ T1471] loop4: detected capacity change from 0 to 128 [ 69.848760][ T1473] loop1: detected capacity change from 0 to 16 [ 69.863400][ T1473] erofs: (device loop1): mounted with root inode @ nid 36. [ 69.876618][ T1474] handle_bad_sector: 1520 callbacks suppressed [ 69.876632][ T1474] attempt to access beyond end of device [ 69.876632][ T1474] loop3: rw=2049, want=79912, limit=40427 [ 69.923857][ T1474] attempt to access beyond end of device [ 69.923857][ T1474] loop3: rw=2049, want=81920, limit=40427 [ 69.941927][ T1474] attempt to access beyond end of device [ 69.941927][ T1474] loop3: rw=2049, want=52296, limit=40427 [ 69.976299][ T1479] loop4: detected capacity change from 0 to 16 [ 69.988028][ T1474] attempt to access beyond end of device [ 69.988028][ T1474] loop3: rw=2049, want=52936, limit=40427 [ 70.020541][ T1479] erofs: (device loop4): mounted with root inode @ nid 36. [ 70.077541][ T306] attempt to access beyond end of device [ 70.077541][ T306] loop3: rw=1, want=53248, limit=40427 [ 70.104083][ T306] attempt to access beyond end of device [ 70.104083][ T306] loop3: rw=1, want=60336, limit=40427 [ 70.133453][ T306] attempt to access beyond end of device [ 70.133453][ T306] loop3: rw=1, want=65288, limit=40427 [ 70.147193][ T306] attempt to access beyond end of device [ 70.147193][ T306] loop3: rw=1, want=65616, limit=40427 [ 70.179831][ T20] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 70.236352][ T1485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 70.246588][ T1485] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 70.257906][ T1485] EXT4-fs (loop5): unable to read superblock [ 70.301479][ T30] audit: type=1400 audit(1791817033.313:351): avc: denied { read } for pid=1488 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.397773][ T1493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 70.413792][ T1493] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 70.437625][ T1493] EXT4-fs (loop7): unable to read superblock [ 70.444109][ T30] audit: type=1400 audit(1791817033.453:352): avc: denied { name_bind } for pid=1498 comm="syz.2.433" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.467841][ T1499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 70.484734][ T30] audit: type=1400 audit(1791817033.483:353): avc: denied { node_bind } for pid=1498 comm="syz.2.433" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.513276][ T30] audit: type=1400 audit(1791817033.523:354): avc: denied { getopt } for pid=1501 comm="syz.0.434" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.549896][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.560417][ T20] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.570763][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 70.587589][ T20] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 70.596647][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.683340][ T1518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 70.697913][ T1483] loop4: detected capacity change from 0 to 131072 [ 70.713522][ T1483] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 70.732200][ T1483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.748024][ T1483] F2FS-fs (loop4): invalid crc value [ 70.754962][ T1483] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.788826][ T1483] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.796218][ T1483] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 70.827745][ T30] audit: type=1400 audit(1791817033.833:355): avc: denied { link } for pid=1482 comm="syz.4.425" name="file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.854750][ T289] F2FS-fs (loop4): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 70.870851][ T318] usb 2-1: USB disconnect, device number 5 [ 70.932125][ T1531] loop3: detected capacity change from 0 to 40427 [ 70.972075][ T1531] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 70.988921][ T1531] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 70.998342][ T1531] F2FS-fs (loop3): invalid crc value [ 71.004819][ T1531] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.040147][ T1531] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 71.047297][ T1531] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.138285][ T1542] attempt to access beyond end of device [ 71.138285][ T1542] loop3: rw=2049, want=81920, limit=40427 [ 71.172239][ T1542] attempt to access beyond end of device [ 71.172239][ T1542] loop3: rw=2049, want=53248, limit=40427 [ 71.391819][ T1552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 71.401405][ T1550] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.423092][ T30] audit: type=1400 audit(1791817034.433:356): avc: denied { read write } for pid=1549 comm="syz.2.451" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.475599][ T30] audit: type=1400 audit(1791817034.463:357): avc: denied { open } for pid=1549 comm="syz.2.451" path="/103/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.509339][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 71.810898][ T1548] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 71.810993][ T1571] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.819658][ T1548] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 71.841681][ T1548] F2FS-fs (loop4): invalid crc value [ 71.866588][ T1548] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.940037][ T1548] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 71.948366][ T1548] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 72.184292][ T1587] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 72.193895][ T1587] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.202923][ T1587] F2FS-fs (loop1): invalid crc value [ 72.230993][ T1587] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.244036][ T1575] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 72.261444][ T1592] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 72.266997][ T1575] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.273342][ T1592] EXT4-fs (loop9): unable to read superblock [ 72.281658][ T1575] F2FS-fs (loop3): invalid crc value [ 72.293756][ T1575] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.327935][ T1575] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.333022][ T1587] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.335059][ T1575] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 72.342213][ T1587] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.391361][ T285] F2FS-fs (loop3): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 72.425407][ T1604] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 72.443123][ T1604] EXT4-fs (loop9): unable to read superblock [ 72.637326][ T30] audit: type=1400 audit(1791817035.643:358): avc: denied { ioctl } for pid=1620 comm="syz.4.478" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.711647][ T1629] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 72.749610][ T1629] EXT4-fs (loop5): unable to read superblock [ 72.805949][ T1644] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.961760][ T1635] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 72.969508][ T1635] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.041699][ T1662] xt_TPROXY: Can be used only with -p tcp or -p udp [ 73.124011][ T1635] F2FS-fs (loop3): invalid crc value [ 73.274700][ T1635] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.309429][ T1635] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.317801][ T1674] erofs: (device loop1): mounted with root inode @ nid 36. [ 73.322674][ T1635] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.331752][ T1674] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 73.362360][ T1678] EXT4-fs (loop2): Test dummy encryption mode enabled [ 73.380185][ T1678] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 73.413027][ T1678] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000003,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,auto_da_alloc,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 73.500663][ T30] audit: type=1400 audit(1791817036.513:359): avc: denied { create } for pid=1697 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.532121][ T30] audit: type=1400 audit(1791817036.533:360): avc: denied { write } for pid=1697 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.532704][ T1700] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 73.560290][ T1700] SELinux: failed to load policy [ 73.609718][ T1704] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 73.620937][ T1704] EXT4-fs (loop7): unable to read superblock [ 73.863613][ T30] audit: type=1400 audit(1791817036.853:361): avc: denied { write } for pid=1721 comm="syz.2.521" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 73.901111][ T30] audit: type=1400 audit(1791817036.903:362): avc: denied { ioctl } for pid=1715 comm="syz.3.518" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.932322][ T30] audit: type=1400 audit(1791817036.943:363): avc: denied { getopt } for pid=1727 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.381720][ T1735] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.438405][ T1741] set_capacity_and_notify: 13 callbacks suppressed [ 74.438420][ T1741] loop2: detected capacity change from 0 to 128 [ 74.457747][ T30] audit: type=1400 audit(1791817037.443:364): avc: denied { map } for pid=1739 comm="syz.3.527" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.486839][ T1743] loop3: detected capacity change from 0 to 256 [ 74.514988][ T1745] loop1: detected capacity change from 0 to 256 [ 74.522481][ T1743] exfat: Deprecated parameter 'utf8' [ 74.527839][ T1743] exfat: Deprecated parameter 'namecase' [ 74.533809][ T1743] exfat: Deprecated parameter 'namecase' [ 74.541246][ T1747] loop2: detected capacity change from 0 to 512 [ 74.543604][ T1743] exfat: Deprecated parameter 'utf8' [ 74.556408][ T1745] FAT-fs (loop1): Directory bread(block 64) failed [ 74.558460][ T1743] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 74.563026][ T1745] FAT-fs (loop1): Directory bread(block 65) failed [ 74.583755][ T1747] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.593363][ T1747] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 74.604968][ T1745] FAT-fs (loop1): Directory bread(block 66) failed [ 74.612398][ T1747] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 74.615776][ T1745] FAT-fs (loop1): Directory bread(block 67) failed [ 74.621961][ T1747] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 74.635823][ T1745] FAT-fs (loop1): Directory bread(block 68) failed [ 74.636489][ T1747] System zones: 0-2, 18-18, 34-35 [ 74.648587][ T1745] FAT-fs (loop1): Directory bread(block 69) failed [ 74.648627][ T1747] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 74.655155][ T1745] FAT-fs (loop1): Directory bread(block 70) failed [ 74.673847][ T1745] FAT-fs (loop1): Directory bread(block 71) failed [ 74.680502][ T1745] FAT-fs (loop1): Directory bread(block 72) failed [ 74.687109][ T1745] FAT-fs (loop1): Directory bread(block 73) failed [ 74.829041][ T1754] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.832837][ T1750] loop2: detected capacity change from 0 to 40427 [ 74.891387][ T1750] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 74.919809][ T1750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.928632][ T1750] F2FS-fs (loop2): invalid crc value [ 74.940530][ T1750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.977118][ T1750] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 74.984200][ T1750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.010913][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.022778][ T1763] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.029997][ T1779] capability: warning: `syz.0.545' uses deprecated v2 capabilities in a way that may be insecure [ 75.041595][ T1763] device bridge_slave_0 entered promiscuous mode [ 75.050491][ T1763] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.063527][ T1763] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.070990][ T1763] device bridge_slave_1 entered promiscuous mode [ 75.088057][ T1750] handle_bad_sector: 1677 callbacks suppressed [ 75.088072][ T1750] attempt to access beyond end of device [ 75.088072][ T1750] loop2: rw=2049, want=81920, limit=40427 [ 75.089823][ T318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 75.103575][ T1750] attempt to access beyond end of device [ 75.103575][ T1750] loop2: rw=2049, want=53248, limit=40427 [ 75.152186][ T1750] attempt to access beyond end of device [ 75.152186][ T1750] loop2: rw=2049, want=68680, limit=40427 [ 75.198157][ T1750] attempt to access beyond end of device [ 75.198157][ T1750] loop2: rw=524288, want=78080, limit=40427 [ 75.210024][ T1750] attempt to access beyond end of device [ 75.210024][ T1750] loop2: rw=0, want=77832, limit=40427 [ 75.221127][ T1750] attempt to access beyond end of device [ 75.221127][ T1750] loop2: rw=0, want=77832, limit=40427 [ 75.232442][ T1750] attempt to access beyond end of device [ 75.232442][ T1750] loop2: rw=0, want=77832, limit=40427 [ 75.243843][ T1750] attempt to access beyond end of device [ 75.243843][ T1750] loop2: rw=0, want=77832, limit=40427 [ 75.260818][ T1749] attempt to access beyond end of device [ 75.260818][ T1749] loop2: rw=0, want=77832, limit=40427 [ 75.271895][ T1749] attempt to access beyond end of device [ 75.271895][ T1749] loop2: rw=0, want=77832, limit=40427 [ 75.272107][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.290343][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.307359][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.317504][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.326049][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.333091][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.341288][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.349602][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.357981][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.365033][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.381970][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.389564][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.397525][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.405191][ T1798] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 75.410798][ T1763] device veth0_vlan entered promiscuous mode [ 75.418777][ T1798] SELinux: failed to load policy [ 75.430672][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.445519][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.470216][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.487881][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.500860][ T741] device bridge_slave_0 left promiscuous mode [ 75.506989][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.515162][ T741] device veth0_vlan left promiscuous mode [ 75.519891][ T318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.531156][ T318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.540130][ T318] usb 2-1: config 1 has no interface number 0 [ 75.546275][ T318] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.686504][ T1763] device veth1_macvtap entered promiscuous mode [ 75.700519][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.710820][ T318] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.725672][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.727946][ T1807] loop2: detected capacity change from 0 to 40427 [ 75.735875][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.748602][ T1807] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 75.760550][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.766608][ T1807] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.771201][ T318] usb 2-1: Product: syz [ 75.782564][ T1807] F2FS-fs (loop2): invalid crc value [ 75.788132][ T318] usb 2-1: Manufacturer: syz [ 75.805256][ T318] usb 2-1: SerialNumber: syz [ 75.818917][ T1807] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.860364][ T318] usb 2-1: selecting invalid altsetting 1 [ 75.878984][ T1807] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 75.887694][ T1807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.946856][ T1826] loop5: detected capacity change from 0 to 256 [ 76.038612][ T1837] loop5: detected capacity change from 0 to 256 [ 76.090274][ T1837] exfat: Deprecated parameter 'utf8' [ 76.095705][ T1837] exfat: Deprecated parameter 'utf8' [ 76.119065][ T1837] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 76.239172][ T1855] ip_tables: iptables: counters copy to user failed while replacing table [ 76.279291][ T1862] __nla_validate_parse: 9 callbacks suppressed [ 76.279305][ T1862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 76.304415][ T1862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 76.309854][ T318] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 76.313456][ T1862] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 76.319374][ T318] cdc_ncm 2-1:1.1: bind() failure [ 76.332296][ T1864] loop5: detected capacity change from 0 to 512 [ 76.338575][ T318] usb 2-1: USB disconnect, device number 6 [ 76.389528][ T1868] ip_tables: iptables: counters copy to user failed while replacing table [ 76.430499][ T1864] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 76.436711][ T1873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 76.510736][ T1873] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 76.522598][ T1873] EXT4-fs (loop5): unable to read superblock [ 76.638562][ T1884] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 76.889145][ T1904] usb usb8: usbfs: process 1904 (syz.1.598) did not claim interface 3 before use [ 76.928201][ T1900] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 76.939448][ T1024] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.949173][ T1900] EXT4-fs (loop9): unable to read superblock [ 76.962727][ T1906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 76.975175][ T1906] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 76.986828][ T1906] EXT4-fs (loop3): unable to read superblock [ 77.024609][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 77.024620][ T30] audit: type=1400 audit(1791817040.033:371): avc: denied { write } for pid=1914 comm="syz.1.603" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.076692][ T1921] tipc: Started in network mode [ 77.081833][ T1921] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 77.090754][ T1921] tipc: Enabling of bearer rejected, failed to enable media [ 77.129814][ T356] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 77.299843][ T1024] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.310768][ T1024] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.439981][ T1024] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 77.449023][ T1024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 77.457016][ T1024] usb 6-1: Product: syz [ 77.461199][ T1024] usb 6-1: Manufacturer: syz [ 77.500412][ T1024] hub 6-1:1.0: USB hub found [ 77.549865][ T356] usb 3-1: config 1 has an invalid interface number: 103 but max is 0 [ 77.558073][ T356] usb 3-1: config 1 has no interface number 0 [ 77.564193][ T356] usb 3-1: config 1 interface 103 has no altsetting 0 [ 77.720559][ T1024] hub 6-1:1.0: config failed, can't read hub descriptor (err -90) [ 77.829917][ T356] usb 3-1: string descriptor 0 read error: -22 [ 77.836098][ T356] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 77.845160][ T356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.890231][ T356] ftdi_sio 3-1:1.103: FTDI USB Serial Device converter detected [ 77.898064][ T356] usb 3-1: Detected FT-X [ 78.039861][ T1024] usb 6-1: USB disconnect, device number 2 [ 78.099845][ T356] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 78.119830][ T356] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 78.139835][ T356] ftdi_sio 3-1:1.103: GPIO initialisation failed: -71 [ 78.146958][ T356] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 78.158054][ T356] usb 3-1: USB disconnect, device number 4 [ 78.164555][ T356] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 78.174026][ T356] ftdi_sio 3-1:1.103: device disconnected [ 78.439478][ T1927] loop4: detected capacity change from 0 to 1024 [ 78.510828][ T1931] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 78.522411][ T1931] EXT4-fs (loop3): unable to read superblock [ 78.523416][ T1927] EXT4-fs (loop4): Ignoring removed orlov option [ 78.542972][ T1927] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 78.551410][ T1927] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.560753][ T1927] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.608: Invalid inode table block 0 in block_group 0 [ 78.575599][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.582253][ T1927] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 78.639898][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.702938][ T1927] EXT4-fs error (device loop4): ext4_quota_write:6639: inode #3: comm syz.4.608: mark_inode_dirty error [ 78.749130][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.773854][ T1927] Quota error (device loop4): write_blk: dquota write failed [ 78.788412][ T1927] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 78.804564][ T1927] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.608: Failed to acquire dquot type 0 [ 78.828327][ T30] audit: type=1400 audit(1791817041.813:372): avc: denied { shutdown } for pid=1946 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.849381][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.856362][ T1927] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.608: Invalid inode table block 0 in block_group 0 [ 78.869257][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.875833][ T1927] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 78.885435][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.892218][ T1927] EXT4-fs error (device loop4): ext4_ext_truncate:4487: inode #15: comm syz.4.608: mark_inode_dirty error [ 78.903818][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.910567][ T1927] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.608: Invalid inode table block 0 in block_group 0 [ 78.923392][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.930039][ T1927] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 78.939667][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.946330][ T1927] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 78.955127][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.961851][ T1927] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.608: Invalid inode table block 0 in block_group 0 [ 78.974638][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.981266][ T1927] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 78.990938][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 78.997487][ T1927] EXT4-fs error (device loop4): ext4_truncate:4317: inode #15: comm syz.4.608: mark_inode_dirty error [ 79.008751][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 79.015397][ T1927] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 79.024535][ T1927] EXT4-fs (loop4): Remounting filesystem read-only [ 79.031195][ T1927] EXT4-fs (loop4): 1 truncate cleaned up [ 79.037033][ T1927] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,norecovery,errors=remount-ro,lazytime,data_err=ignore,noblock_validity,minixdf,orlov,. Quota mode: writeback. [ 79.120236][ T1949] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 79.186419][ T30] audit: type=1400 audit(1791817042.193:373): avc: denied { mount } for pid=1954 comm="syz.4.621" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.214303][ T30] audit: type=1400 audit(1791817042.213:374): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.322586][ T1961] xt_hashlimit: size too large, truncated to 1048576 [ 79.781914][ T1974] set_capacity_and_notify: 1 callbacks suppressed [ 79.781930][ T1974] loop2: detected capacity change from 0 to 40427 [ 79.798109][ T1974] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 79.806117][ T1974] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.819449][ T1974] F2FS-fs (loop2): invalid crc value [ 79.826073][ T1974] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.849905][ T355] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.867735][ T1974] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 79.875138][ T1974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.017663][ T1970] loop1: detected capacity change from 0 to 131072 [ 80.061255][ T1970] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 80.073711][ T30] audit: type=1326 audit(1791817043.083:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.0.634" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976c7461d9 code=0x7ffc0000 [ 80.079837][ T1970] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.098607][ T1973] handle_bad_sector: 1220 callbacks suppressed [ 80.098620][ T1973] attempt to access beyond end of device [ 80.098620][ T1973] loop2: rw=0, want=77832, limit=40427 [ 80.107527][ T30] audit: type=1326 audit(1791817043.123:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.0.634" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976c7461d9 code=0x7ffc0000 [ 80.113304][ T355] usb 5-1: Using ep0 maxpacket: 16 [ 80.124018][ T1970] F2FS-fs (loop1): invalid crc value [ 80.163392][ T30] audit: type=1326 audit(1791817043.163:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.0.634" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f976c7461d9 code=0x7ffc0000 [ 80.173716][ T1973] attempt to access beyond end of device [ 80.173716][ T1973] loop2: rw=0, want=77832, limit=40427 [ 80.199039][ T30] audit: type=1326 audit(1791817043.163:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1987 comm="syz.0.634" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976c7461d9 code=0x7ffc0000 [ 80.208795][ T1974] attempt to access beyond end of device [ 80.208795][ T1974] loop2: rw=0, want=77832, limit=40427 [ 80.225124][ T1970] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.235200][ T1974] attempt to access beyond end of device [ 80.235200][ T1974] loop2: rw=0, want=77832, limit=40427 [ 80.252333][ T1974] attempt to access beyond end of device [ 80.252333][ T1974] loop2: rw=0, want=77832, limit=40427 [ 80.263618][ T1979] attempt to access beyond end of device [ 80.263618][ T1979] loop2: rw=0, want=77832, limit=40427 [ 80.277725][ T1974] attempt to access beyond end of device [ 80.277725][ T1974] loop2: rw=0, want=77832, limit=40427 [ 80.289228][ T1970] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 80.296314][ T1970] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 80.339903][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.356165][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.365971][ T355] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.378887][ T355] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.387951][ T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.408735][ T355] usb 5-1: config 0 descriptor?? [ 80.497064][ T1997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1997 comm=syz.1.636 [ 80.520110][ T1997] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 80.531395][ T1997] EXT4-fs (loop3): unable to read superblock [ 80.618040][ T2008] loop1: detected capacity change from 0 to 2048 [ 80.661423][ T2008] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.696934][ T2008] incfs: Can't find or create .index dir in ./file0 [ 80.703781][ T2008] incfs: mount failed -28 [ 80.901710][ T355] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 80.913751][ T355] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 80.937615][ T355] microsoft 0003:045E:07DA.0001: no inputs found [ 80.951431][ T355] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 81.143641][ T355] usb 5-1: USB disconnect, device number 5 [ 81.157469][ T2028] loop1: detected capacity change from 0 to 40427 [ 81.233388][ T2028] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 81.245412][ T2028] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 81.253950][ T2028] F2FS-fs (loop1): fault_injection options not supported [ 81.261841][ T2028] F2FS-fs (loop1): invalid crc value [ 81.268008][ T2028] F2FS-fs (loop1): invalid journal entries nats 0 sits 64 [ 81.275343][ T2028] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-22) [ 81.419149][ T2038] device bridge0 entered promiscuous mode [ 81.425893][ T2038] device macsec0 entered promiscuous mode [ 81.432857][ T2038] bridge0: port 3(macsec0) entered blocking state [ 81.450227][ T2038] bridge0: port 3(macsec0) entered disabled state [ 81.467310][ T2038] device bridge0 left promiscuous mode [ 81.598686][ T2045] loop2: detected capacity change from 0 to 40427 [ 81.660438][ T2045] F2FS-fs (loop2): invalid crc value [ 81.677566][ T2045] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 81.697980][ T2045] F2FS-fs (loop2): Start checkpoint disabled! [ 81.705384][ T2045] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 81.728111][ T8] attempt to access beyond end of device [ 81.728111][ T8] loop2: rw=2049, want=40976, limit=40427 [ 81.755946][ T2058] loop4: detected capacity change from 0 to 512 [ 81.762245][ T318] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 81.786117][ T2058] EXT4-fs error (device loop4): __ext4_iget:4950: inode #11: block 1: comm syz.4.661: invalid block [ 81.797268][ T2058] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.661: couldn't read orphan inode 11 (err -117) [ 81.809348][ T2058] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.819991][ T1024] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 81.846339][ T2065] tipc: Started in network mode [ 81.851251][ T2065] tipc: Node identity , cluster identity 4711 [ 81.857314][ T2065] tipc: Failed to set node id, please configure manually [ 81.864564][ T2065] tipc: Enabling of bearer rejected, failed to enable media [ 81.948637][ T2073] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 81.960845][ T2073] EXT4-fs (loop5): unable to read superblock [ 82.040106][ T318] usb 6-1: Using ep0 maxpacket: 32 [ 82.045591][ T2075] loop2: detected capacity change from 0 to 40427 [ 82.100411][ T2075] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 82.108211][ T2075] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.117205][ T2075] F2FS-fs (loop2): invalid crc value [ 82.123914][ T2075] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.145121][ T2075] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 82.152177][ T355] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.152862][ T2075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.159958][ T318] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.177946][ T318] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.209856][ T1024] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 82.221176][ T1024] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.239992][ T1024] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.246620][ T1024] usb 2-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.00 [ 82.255805][ T1024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.264398][ T2075] attempt to access beyond end of device [ 82.264398][ T2075] loop2: rw=2049, want=81920, limit=40427 [ 82.276094][ T1024] usb 2-1: config 0 descriptor?? [ 82.285590][ T2075] attempt to access beyond end of device [ 82.285590][ T2075] loop2: rw=2049, want=53248, limit=40427 [ 82.299869][ T318] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.309269][ T318] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 82.329236][ T318] usb 6-1: Product: syz [ 82.333915][ T318] usb 6-1: Manufacturer: syz [ 82.380755][ T318] hub 6-1:4.0: USB hub found [ 82.510004][ T355] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.521804][ T355] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.535098][ T355] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.541720][ T355] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 82.550756][ T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.559288][ T355] usb 5-1: config 0 descriptor?? [ 82.599891][ T318] hub 6-1:4.0: 2 ports detected [ 82.603197][ T2085] ip_tables: iptables: counters copy to user failed while replacing table [ 82.750901][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.757824][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.764713][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.771608][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.778440][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.785313][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.792165][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.799007][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.806016][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.812894][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.819736][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.826605][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.833467][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.840319][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.847159][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.854006][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.860855][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.867682][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.874533][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.881421][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.888740][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.895609][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.902467][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.909315][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.916181][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.923047][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.929912][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.936759][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.943608][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.950866][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.957730][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.964582][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.971466][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.978298][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.985147][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.992034][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 82.998895][ T1024] wacom 0003:056A:0047.0002: unknown main item tag 0x0 [ 83.006056][ T1024] wacom 0003:056A:0047.0002: Unknown device_type for 'HID 056a:0047'. Assuming pen. [ 83.016421][ T1024] wacom 0003:056A:0047.0002: hidraw0: USB HID v0.08 Device [HID 056a:0047] on usb-dummy_hcd.1-1/input0 [ 83.027936][ T1024] input: Wacom Intuos2 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0047.0002/input/input8 [ 83.042134][ T1024] usb 2-1: USB disconnect, device number 7 [ 83.052680][ T355] sony 0003:054C:0268.0003: unbalanced collection at end of report description [ 83.061747][ T318] hub 6-1:4.0: set hub depth failed [ 83.067306][ T355] sony 0003:054C:0268.0003: parse failed [ 83.073103][ T355] sony: probe of 0003:054C:0268.0003 failed with error -22 [ 83.112940][ T318] usb 6-1: USB disconnect, device number 3 [ 83.218522][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 83.218535][ T30] audit: type=1400 audit(1791817046.223:387): avc: denied { write } for pid=2098 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.266366][ T355] usb 5-1: USB disconnect, device number 6 [ 83.288008][ T2103] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 83.299285][ T2103] EXT4-fs (loop1): unable to read superblock [ 83.497817][ T2111] loop2: detected capacity change from 0 to 256 [ 83.570787][ T2111] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.589995][ T2111] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 83.619032][ T2111] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 83.635846][ T2126] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 83.655051][ T2124] loop5: detected capacity change from 0 to 4096 [ 83.662021][ T2126] EXT4-fs (loop3): unable to read superblock [ 83.705125][ T2124] EXT4-fs (loop5): Test dummy encryption mode enabled [ 83.716227][ T2124] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 83.734722][ T2132] loop1: detected capacity change from 0 to 256 [ 83.747140][ T2124] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 83.775521][ T2132] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 83.877604][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 83.906019][ T30] audit: type=1400 audit(1791817046.913:388): avc: denied { mount } for pid=2150 comm="syz.0.701" name="/" dev="configfs" ino=13741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.930033][ T30] audit: type=1400 audit(1791817046.943:389): avc: denied { search } for pid=2150 comm="syz.0.701" name="/" dev="configfs" ino=13741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.974637][ T30] audit: type=1400 audit(1791817046.963:390): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.982782][ T2147] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 84.002612][ T2159] ip_tables: iptables: counters copy to user failed while replacing table [ 84.014346][ T2147] EXT4-fs (loop5): unable to read superblock [ 84.031346][ T30] audit: type=1400 audit(1791817046.983:391): avc: denied { ioctl } for pid=2154 comm="syz.0.702" path="socket:[22984]" dev="sockfs" ino=22984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.152838][ T30] audit: type=1400 audit(1791817047.163:392): avc: denied { setopt } for pid=2184 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.289604][ T2193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 84.299738][ T2193] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 84.310973][ T2193] EXT4-fs (loop9): unable to read superblock [ 84.341710][ T2199] xt_hashlimit: size too large, truncated to 1048576 [ 84.349863][ T318] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.389873][ T355] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 84.533708][ T2209] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 84.545403][ T2209] EXT4-fs (loop9): unable to read superblock [ 84.562560][ T2211] device bridge0 entered promiscuous mode [ 84.568305][ T2211] device macsec0 entered promiscuous mode [ 84.574468][ T2211] bridge0: port 3(macsec0) entered blocking state [ 84.581008][ T2211] bridge0: port 3(macsec0) entered disabled state [ 84.588352][ T2211] device bridge0 left promiscuous mode [ 84.589817][ T318] usb 6-1: Using ep0 maxpacket: 16 [ 84.629828][ T355] usb 2-1: Using ep0 maxpacket: 16 [ 84.710062][ T318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.721031][ T318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.730995][ T318] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.744029][ T318] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.753420][ T355] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.763679][ T318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.771852][ T355] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.781588][ T318] usb 6-1: config 0 descriptor?? [ 84.843075][ T2218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 84.853616][ T2218] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 84.864839][ T2218] EXT4-fs (loop9): unable to read superblock [ 84.884480][ T30] audit: type=1400 audit(1791817047.893:393): avc: denied { mount } for pid=2221 comm="syz.4.733" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 84.907485][ T30] audit: type=1400 audit(1791817047.923:394): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 84.934404][ T2224] xt_hashlimit: size too large, truncated to 1048576 [ 84.941185][ T355] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.950245][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.958225][ T355] usb 2-1: Product: syz [ 84.962432][ T355] usb 2-1: Manufacturer: syz [ 84.967018][ T355] usb 2-1: SerialNumber: syz [ 85.086991][ T30] audit: type=1400 audit(1791817048.093:395): avc: denied { bind } for pid=2230 comm="syz.4.737" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.107470][ T30] audit: type=1400 audit(1791817048.113:396): avc: denied { name_bind } for pid=2230 comm="syz.4.737" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 85.131809][ T2233] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 85.143067][ T2233] EXT4-fs (loop9): unable to read superblock [ 85.365335][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.390895][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.398853][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.406353][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.413825][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.421164][ T355] usb 2-1: 0:2 : does not exist [ 85.426504][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.435539][ T355] usb 2-1: USB disconnect, device number 8 [ 85.441548][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.448766][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.456195][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.464311][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.472003][ T318] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 85.480496][ T318] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0004/input/input11 [ 85.561286][ T318] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 85.574845][ T318] usb 6-1: USB disconnect, device number 4 [ 85.592204][ T2246] fido_id[2246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 85.670363][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.799805][ T1024] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.039819][ T1024] usb 5-1: Using ep0 maxpacket: 8 [ 86.139839][ T20] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 86.159896][ T1024] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 86.170818][ T1024] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 86.183881][ T1024] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.190492][ T1024] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 86.199494][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.208092][ T1024] usb 5-1: config 0 descriptor?? [ 86.379830][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 86.499865][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.510043][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.589946][ T20] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 86.599027][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.607168][ T20] usb 2-1: SerialNumber: syz [ 86.650337][ T20] usb 2-1: 0:2 : does not exist [ 86.690624][ T1024] hid-generic 0003:057E:200E.0005: item fetching failed at offset 7/37 [ 86.699037][ T1024] hid-generic: probe of 0003:057E:200E.0005 failed with error -22 [ 86.753708][ T2256] loop2: detected capacity change from 0 to 1024 [ 86.763176][ T2256] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.780993][ T2256] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 86.892590][ T1024] usb 5-1: USB disconnect, device number 7 [ 86.929190][ T2263] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 86.942068][ T2263] EXT4-fs (loop5): unable to read superblock [ 87.026506][ T2274] fuseblk: Bad value for 'user_id' [ 87.134312][ T2282] loop5: detected capacity change from 0 to 40427 [ 87.144165][ T2282] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 87.153415][ T2282] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 87.169604][ T2282] F2FS-fs (loop5): invalid crc value [ 87.176370][ T2282] F2FS-fs (loop5): Found nat_bits in checkpoint [ 87.210486][ T2282] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 87.217587][ T2282] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 87.298074][ T2282] handle_bad_sector: 3149 callbacks suppressed [ 87.298091][ T2282] attempt to access beyond end of device [ 87.298091][ T2282] loop5: rw=2049, want=80184, limit=40427 [ 87.319804][ T355] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.327856][ T2282] attempt to access beyond end of device [ 87.327856][ T2282] loop5: rw=2049, want=81920, limit=40427 [ 87.344380][ T2282] attempt to access beyond end of device [ 87.344380][ T2282] loop5: rw=2049, want=51200, limit=40427 [ 87.360832][ T2282] attempt to access beyond end of device [ 87.360832][ T2282] loop5: rw=2049, want=53248, limit=40427 [ 87.377690][ T2282] attempt to access beyond end of device [ 87.377690][ T2282] loop5: rw=2049, want=59392, limit=40427 [ 87.394594][ T2282] attempt to access beyond end of device [ 87.394594][ T2282] loop5: rw=2049, want=61456, limit=40427 [ 87.428382][ T2282] attempt to access beyond end of device [ 87.428382][ T2282] loop5: rw=2049, want=66720, limit=40427 [ 88.579615][ T2292] attempt to access beyond end of device [ 88.579615][ T2292] loop5: rw=524288, want=78080, limit=40427 [ 89.356881][ T2281] attempt to access beyond end of device [ 89.356881][ T2281] loop5: rw=0, want=77832, limit=40427 [ 89.367940][ T2281] attempt to access beyond end of device [ 89.367940][ T2281] loop5: rw=0, want=77832, limit=40427 [ 89.389919][ T20] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 89.409995][ T355] usb 3-1: Using ep0 maxpacket: 32 [ 89.434319][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 89.434340][ T30] audit: type=1400 audit(1791817052.443:398): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.496567][ T2304] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 89.504398][ T2304] netlink: 'syz.0.765': attribute type 5 has an invalid length. [ 89.512261][ T2304] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.765'. [ 89.559854][ T355] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 89.572969][ T2311] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 89.584306][ T355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.599812][ T355] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 89.621686][ T355] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 89.632156][ T355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.633136][ T355] usb 3-1: config 0 descriptor?? [ 89.649360][ T2319] loop5: detected capacity change from 0 to 512 [ 89.659852][ T20] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 89.685117][ T20] usb 2-1: USB disconnect, device number 9 [ 89.745575][ T2319] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.766: bad orphan inode 15 [ 89.765890][ T2319] ext4_test_bit(bit=14, block=5) = 0 [ 89.779804][ T318] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.787346][ T2319] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 89.872208][ T2325] loop1: detected capacity change from 0 to 40427 [ 89.890790][ T2325] F2FS-fs (loop1): invalid crc value [ 89.900174][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.918882][ T2325] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 89.946907][ T2325] F2FS-fs (loop1): Start checkpoint disabled! [ 89.953621][ T2325] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 90.121104][ T355] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 90.128405][ T355] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 90.135626][ T355] hid-led 0003:0FC5:B080.0006: item fetching failed at offset 5/6 [ 90.148932][ T355] hid-led: probe of 0003:0FC5:B080.0006 failed with error -22 [ 90.168888][ T333] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.179982][ T318] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 90.196269][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.250287][ T318] usb-storage 5-1:1.0: USB Mass Storage device detected [ 90.333619][ T6] usb 3-1: USB disconnect, device number 5 [ 90.422918][ T30] audit: type=1400 audit(1791817053.433:399): avc: denied { read write } for pid=2345 comm="syz.1.779" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.451825][ T30] audit: type=1400 audit(1791817053.463:400): avc: denied { open } for pid=2345 comm="syz.1.779" path="/124/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.476565][ T30] audit: type=1400 audit(1791817053.463:401): avc: denied { ioctl } for pid=2345 comm="syz.1.779" path="/124/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.512733][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 90.528547][ T30] audit: type=1400 audit(1791817053.533:402): avc: denied { read write } for pid=2352 comm="syz.0.784" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 90.543869][ T2355] loop1: detected capacity change from 0 to 1024 [ 90.552194][ T30] audit: type=1400 audit(1791817053.533:403): avc: denied { open } for pid=2352 comm="syz.0.784" path="/195/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 90.581602][ T333] usb 6-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.584951][ T30] audit: type=1400 audit(1791817053.533:404): avc: denied { ioctl } for pid=2352 comm="syz.0.784" path="/195/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 90.609970][ T333] usb 6-1: config 0 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.632722][ T333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 90.633714][ T30] audit: type=1400 audit(1791817053.643:405): avc: denied { append } for pid=2358 comm="syz.0.787" name="cpu_dma_latency" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 90.639987][ T333] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 90.669221][ T30] audit: type=1400 audit(1791817053.673:406): avc: denied { open } for pid=2358 comm="syz.0.787" path="/197/dev/cpu_dma_latency" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 90.675971][ T333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.708589][ T333] usb 6-1: config 0 descriptor?? [ 90.714734][ T2355] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 90.734182][ T2355] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.746602][ T2355] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.786: lblock 0 mapped to illegal pblock 0 (length 6) [ 90.898228][ T2395] ================================================================== [ 90.906328][ T2395] BUG: KASAN: slab-out-of-bounds in firmware_param_path_get+0x348/0x350 [ 90.914649][ T2395] Write of size 1 at addr ffff88810dcdffff by task syz.2.803/2395 [ 90.922435][ T2395] [ 90.924740][ T2395] CPU: 1 PID: 2395 Comm: syz.2.803 Not tainted syzkaller #0 [ 90.932003][ T2395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.942046][ T2395] Call Trace: [ 90.945310][ T2395] [ 90.948221][ T2395] __dump_stack+0x21/0x30 [ 90.952540][ T2395] dump_stack_lvl+0x110/0x170 [ 90.957206][ T2395] ? show_regs_print_info+0x20/0x20 [ 90.962389][ T2395] ? load_image+0x3f0/0x3f0 [ 90.966873][ T2395] print_address_description+0x7f/0x2c0 [ 90.972404][ T2395] ? firmware_param_path_get+0x348/0x350 [ 90.978020][ T2395] kasan_report+0x10f/0x150 [ 90.982504][ T2395] ? firmware_param_path_get+0x348/0x350 [ 90.988124][ T2395] __asan_report_store1_noabort+0x17/0x20 [ 90.993826][ T2395] firmware_param_path_get+0x348/0x350 [ 90.999267][ T2395] param_attr_show+0x150/0x1b0 [ 91.004015][ T2395] ? module_destroy_params+0x100/0x100 [ 91.009457][ T2395] ? param_attr_store+0x320/0x320 [ 91.014464][ T2395] module_attr_show+0x56/0x70 [ 91.019121][ T2395] sysfs_kf_seq_show+0x266/0x3d0 [ 91.024043][ T2395] kernfs_seq_show+0x119/0x160 [ 91.028787][ T2395] seq_read_iter+0x472/0xce0 [ 91.033361][ T2395] kernfs_fop_read_iter+0x146/0x460 [ 91.038541][ T2395] generic_file_splice_read+0x3ea/0x5f0 [ 91.044073][ T2395] ? splice_shrink_spd+0xb0/0xb0 [ 91.048992][ T2395] ? __kasan_check_read+0x11/0x20 [ 91.054000][ T2395] ? fsnotify_perm+0x269/0x5b0 [ 91.058748][ T2395] ? security_file_permission+0x83/0xa0 [ 91.064277][ T2395] ? rw_verify_area+0xa7/0x1c0 [ 91.069023][ T2395] splice_direct_to_actor+0x40f/0xb40 [ 91.074378][ T2395] ? do_splice_direct+0x2d0/0x2d0 [ 91.079380][ T2395] ? pipe_to_sendpage+0x320/0x320 [ 91.084381][ T2395] ? security_file_permission+0x83/0xa0 [ 91.089909][ T2395] ? rw_verify_area+0xa7/0x1c0 [ 91.094655][ T2395] do_splice_direct+0x1c2/0x2d0 [ 91.099488][ T2395] ? splice_direct_to_actor+0xb40/0xb40 [ 91.105010][ T2395] ? security_file_permission+0x83/0xa0 [ 91.110541][ T2395] do_sendfile+0x515/0xe20 [ 91.114940][ T2395] ? do_preadv+0x390/0x390 [ 91.119336][ T2395] ? __se_sys_futex+0x135/0x330 [ 91.124167][ T2395] __x64_sys_sendfile64+0x199/0x1f0 [ 91.129347][ T2395] ? __ia32_sys_sendfile+0x190/0x190 [ 91.134618][ T2395] ? __kasan_check_write+0x14/0x20 [ 91.139723][ T2395] ? switch_fpu_return+0x15d/0x2c0 [ 91.144822][ T2395] x64_sys_call+0x88d/0x9a0 [ 91.149310][ T2395] do_syscall_64+0x4c/0xa0 [ 91.153709][ T2395] ? clear_bhb_loop+0x50/0xa0 [ 91.158369][ T2395] ? clear_bhb_loop+0x50/0xa0 [ 91.163030][ T2395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.168922][ T2395] RIP: 0033:0x7f613b4491d9 [ 91.173325][ T2395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.192916][ T2395] RSP: 002b:00007f6139ea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 91.201312][ T2395] RAX: ffffffffffffffda RBX: 00007f613b6d0fa0 RCX: 00007f613b4491d9 [ 91.209265][ T2395] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 91.217217][ T2395] RBP: 00007f613b4e0888 R08: 0000000000000000 R09: 0000000000000000 [ 91.225175][ T2395] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 91.233128][ T2395] R13: 00007f613b6d1038 R14: 00007f613b6d0fa0 R15: 00007ffc90394058 [ 91.241082][ T2395] [ 91.244085][ T2395] [ 91.246386][ T2395] Allocated by task 2383: [ 91.250688][ T2395] __kasan_slab_alloc+0xb7/0xe0 [ 91.255523][ T2395] slab_post_alloc_hook+0x4f/0x2b0 [ 91.260614][ T2395] kmem_cache_alloc+0xf7/0x260 [ 91.265360][ T2395] getname_flags+0xba/0x510 [ 91.269843][ T2395] getname+0x19/0x20 [ 91.273715][ T2395] do_sys_openat2+0xeb/0x7f0 [ 91.278284][ T2395] __x64_sys_openat+0x136/0x160 [ 91.283112][ T2395] x64_sys_call+0x219/0x9a0 [ 91.287595][ T2395] do_syscall_64+0x4c/0xa0 [ 91.291990][ T2395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.297865][ T2395] [ 91.300167][ T2395] Freed by task 2383: [ 91.304121][ T2395] kasan_set_track+0x4a/0x70 [ 91.308690][ T2395] kasan_set_free_info+0x23/0x40 [ 91.313604][ T2395] ____kasan_slab_free+0x125/0x160 [ 91.318694][ T2395] __kasan_slab_free+0x11/0x20 [ 91.323437][ T2395] slab_free_freelist_hook+0xc2/0x190 [ 91.328786][ T2395] kmem_cache_free+0x100/0x320 [ 91.333527][ T2395] putname+0x111/0x160 [ 91.337575][ T2395] do_sys_openat2+0x6df/0x7f0 [ 91.342233][ T2395] __x64_sys_openat+0x136/0x160 [ 91.347060][ T2395] x64_sys_call+0x219/0x9a0 [ 91.351544][ T2395] do_syscall_64+0x4c/0xa0 [ 91.355938][ T2395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.361810][ T2395] [ 91.364112][ T2395] The buggy address belongs to the object at ffff88810dcde600 [ 91.364112][ T2395] which belongs to the cache names_cache of size 4096 [ 91.378230][ T2395] The buggy address is located 2559 bytes to the right of [ 91.378230][ T2395] 4096-byte region [ffff88810dcde600, ffff88810dcdf600) [ 91.392177][ T2395] The buggy address belongs to the page: [ 91.397794][ T2395] page:ffffea0004373600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dcd8 [ 91.408013][ T2395] head:ffffea0004373600 order:3 compound_mapcount:0 compound_pincount:0 [ 91.416313][ T2395] flags: 0x4000000000010200(slab|head|zone=1) [ 91.422373][ T2395] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881001c5500 [ 91.430940][ T2395] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 91.439493][ T2395] page dumped because: kasan: bad access detected [ 91.445876][ T2395] page_owner tracks the page as allocated [ 91.451564][ T2395] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2383, ts 90853092991, free_ts 90828476081 [ 91.472028][ T2395] post_alloc_hook+0x192/0x1b0 [ 91.476779][ T2395] prep_new_page+0x1c/0x110 [ 91.481261][ T2395] get_page_from_freelist+0x2c3a/0x2cd0 [ 91.486787][ T2395] __alloc_pages+0x1a2/0x460 [ 91.491356][ T2395] new_slab+0xa0/0x4d0 [ 91.495399][ T2395] ___slab_alloc+0x3ac/0x840 [ 91.499968][ T2395] __slab_alloc+0x49/0x90 [ 91.504276][ T2395] kmem_cache_alloc+0x138/0x260 [ 91.509104][ T2395] getname_flags+0xba/0x510 [ 91.513587][ T2395] __x64_sys_symlinkat+0x7c/0xb0 [ 91.518503][ T2395] x64_sys_call+0x74b/0x9a0 [ 91.522984][ T2395] do_syscall_64+0x4c/0xa0 [ 91.527377][ T2395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.533250][ T2395] page last free stack trace: [ 91.537897][ T2395] free_unref_page_prepare+0x5fa/0x600 [ 91.543338][ T2395] free_unref_page+0xae/0x540 [ 91.547994][ T2395] __free_pages+0x6c/0x100 [ 91.552387][ T2395] __free_slab+0xe5/0x1e0 [ 91.556694][ T2395] __unfreeze_partials+0x15a/0x190 [ 91.561784][ T2395] put_cpu_partial+0xc6/0x120 [ 91.566441][ T2395] __slab_free+0x1d4/0x290 [ 91.570839][ T2395] ___cache_free+0x104/0x120 [ 91.575408][ T2395] qlink_free+0x4d/0x90 [ 91.579542][ T2395] qlist_free_all+0x5f/0xb0 [ 91.584022][ T2395] kasan_quarantine_reduce+0x14a/0x170 [ 91.589460][ T2395] __kasan_slab_alloc+0x2f/0xe0 [ 91.594287][ T2395] slab_post_alloc_hook+0x4f/0x2b0 [ 91.599387][ T2395] kmem_cache_alloc+0xf7/0x260 [ 91.604130][ T2395] __alloc_skb+0xe4/0x730 [ 91.608437][ T2395] sk_stream_alloc_skb+0x216/0xb70 [ 91.613530][ T2395] [ 91.615830][ T2395] Memory state around the buggy address: [ 91.621432][ T2395] ffff88810dcdfe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.629467][ T2395] ffff88810dcdff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.637504][ T2395] >ffff88810dcdff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.645540][ T2395] ^ [ 91.653488][ T2395] ffff88810dce0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.661524][ T2395] ffff88810dce0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.669556][ T2395] ================================================================== [ 91.677591][ T2395] Disabling lock debugging due to kernel taint [ 91.700029][ T30] audit: type=1400 audit(1791817054.713:407): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 91.723051][ T2390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2390 comm=syz.0.800 [ 91.744044][ T2390] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 91.755251][ T2390] EXT4-fs (loop1): unable to read superblock [ 91.770457][ T318] usb-storage: probe of 5-1:1.0 failed with error -5 [ 91.779106][ T318] usb 5-1: USB disconnect, device number 8 [ 91.940967][ T333] input: HID 6666:8804 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:6666:8804.0007/input/input12 [ 91.953251][ T333] smartjoyplus 0003:6666:8804.0007: input,hidraw0: USB HID v36.2c Joystick [HID 6666:8804] on usb-dummy_hcd.5-1/input0 [ 91.965683][ T333] smartjoyplus 0003:6666:8804.0007: no output reports found [ 92.163983][ T318] usb 6-1: USB disconnect, device number 5