last executing test programs: 1m14.878820811s ago: executing program 3 (id=1593): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup=r1, r0, 0x20, 0x0, r1, @void, @value=r1}, 0x20) 1m14.812193583s ago: executing program 32 (id=1582): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x10001, 0x0, 0x0, 0x10, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x1fffffc, 0x33}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 1m14.792580593s ago: executing program 3 (id=1587): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x35, "", [{{0x9, 0x4, 0x0, 0xb, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffc, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0xbe, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x0, 0x9, 0x2a, {0x2a, 0x11, "c263138526792c3cbdeace6f842505df71d6d8e1ae0fb74237cc6e446c4e881bee80ce06aba4bc63"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m12.915409323s ago: executing program 3 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40844}, 0x20008094) 1m12.863402344s ago: executing program 3 (id=1634): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@volatile}]}) 1m12.788491076s ago: executing program 3 (id=1637): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002600)) 1m12.645729549s ago: executing program 3 (id=1645): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x29, 0x1013, 0x1}, 0x28) 1m12.635145159s ago: executing program 33 (id=1645): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4115, 0x29, 0x1013, 0x1}, 0x28) 1m11.64493605s ago: executing program 6 (id=1646): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x207e, 0x0) close_range(r0, r0, 0x0) 1m11.61789134s ago: executing program 6 (id=1650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc) 1m11.571072362s ago: executing program 6 (id=1654): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@volatile}]}) 1m11.387865316s ago: executing program 6 (id=1659): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x340, 0x150, 0xa8, 0xffffffff, 0xa8, 0x268, 0x380, 0xa8, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'syz_tun\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @rand_addr=0x64010102, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "91658aec48a054065601ac2a430354a2a0715ee0326698c380b297e62065"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 1m11.17773081s ago: executing program 6 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x24060004) 1m11.138818221s ago: executing program 34 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x24060004) 1m10.136297702s ago: executing program 2 (id=1690): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000015c0)={0xf, {"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", 0x1000}}, 0x1006) 1m9.923924277s ago: executing program 7 (id=1670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc) 1m9.906223227s ago: executing program 7 (id=1691): unshare(0x20060400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4000000}) 1m9.905689287s ago: executing program 2 (id=1701): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003fc0)={0x2020}, 0x2020) 1m9.857183069s ago: executing program 7 (id=1693): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@volatile}]}) 1m9.731372161s ago: executing program 7 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1m9.513833196s ago: executing program 7 (id=1698): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x4044}, {r0, 0xe80}], 0x2, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 1m9.503083006s ago: executing program 35 (id=1698): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x4044}, {r0, 0xe80}], 0x2, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 1m8.959358597s ago: executing program 2 (id=1710): unshare(0x60000600) r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 1m8.750033192s ago: executing program 2 (id=1707): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@volatile}]}) 1m8.650609764s ago: executing program 2 (id=1709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1m8.485740658s ago: executing program 2 (id=1712): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x1) io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x2, 0x9841, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 1m8.479017668s ago: executing program 36 (id=1712): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x1) io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x2, 0x9841, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 18.209442921s ago: executing program 4 (id=3322): mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f00000dc000/0x3000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 18.167736622s ago: executing program 4 (id=3325): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 18.123360823s ago: executing program 4 (id=3329): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x3) 18.093998004s ago: executing program 4 (id=3332): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c666d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c0092803b831534d131135366249e8a045ee656058ddf6f41400b01a0870e4c656ef6f11325a20c319fd81269acc3b77200feb4294a821f553876d64b4a41390c44492e6f79c4b09bbe8e5cb02585b919505651c34f3e21f9532204a0c936a1da6422edb1108cf73536e8fbe241e030f5b5e1d081994fbe8a093c44b63f3da6a8a46706b47fa3"], 0x1, 0x153e, &(0x7f00000034c0)="$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") mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mount$9p_virtio(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100020, 0x0) 17.941500437s ago: executing program 4 (id=3339): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x28}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff57}, 0x54) 17.80576233s ago: executing program 4 (id=3346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)={0x14, r1, 0xe29, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008855}, 0x24040044) 17.746294311s ago: executing program 37 (id=3346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)={0x14, r1, 0xe29, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008855}, 0x24040044) 3.925763026s ago: executing program 8 (id=3901): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 3.794031159s ago: executing program 8 (id=3909): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x200000cc, &(0x7f0000000380)=ANY=[], 0xfe, 0x152b, &(0x7f0000003e00)="$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") chdir(&(0x7f0000004340)='./file0\x00') open(&(0x7f00000004c0)='./file0\x00', 0x601, 0x0) 3.556474124s ago: executing program 8 (id=3921): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xa}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24040800) 3.461583186s ago: executing program 8 (id=3925): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0xfffffffd}, 0x1c) 3.458648026s ago: executing program 8 (id=3928): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x40, 0xf, 0x13, {0x13, 0x6, "7d77c89622a0f02ed26f82316a5dbee75a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.355219641s ago: executing program 5 (id=3961): r0 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000a80)) 1.084343857s ago: executing program 5 (id=3972): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x3ff, 0xfff, 0xd6, 0x6}) 861.049271ms ago: executing program 0 (id=3978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0e000000040000000800000003"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 826.990163ms ago: executing program 0 (id=3979): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001e00431b000000000000000007", @ANYRESDEC=r0], 0x28}}, 0x4048014) 807.157363ms ago: executing program 1 (id=3980): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000001100)=""/236, 0xec) 768.774164ms ago: executing program 1 (id=3981): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) getsockopt$MRT6(r0, 0x29, 0xcf, 0x0, 0x0) 757.402944ms ago: executing program 0 (id=3982): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) 748.451714ms ago: executing program 5 (id=3983): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000000000003"]) 715.135465ms ago: executing program 0 (id=3985): unshare(0x24060400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc5) 709.664035ms ago: executing program 1 (id=3986): setreuid(0xffffffffffffffff, 0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 660.801926ms ago: executing program 5 (id=3988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0xc3, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 660.326056ms ago: executing program 1 (id=3989): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@deltclass={0x24, 0x29, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0xffe0, 0xfff3}, {0x3, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) 660.158526ms ago: executing program 0 (id=3990): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0xff, 0x204, &(0x7f0000000300)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000480)) 620.175096ms ago: executing program 1 (id=3991): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/86, 0x56) 617.126216ms ago: executing program 0 (id=3992): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400ed6"], 0x0, 0x0, 0x0, 0x0}, 0x0) 591.012508ms ago: executing program 5 (id=3994): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 321.079283ms ago: executing program 9 (id=3995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2e}, 0x14) 298.693954ms ago: executing program 9 (id=3996): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 280.784084ms ago: executing program 9 (id=3997): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 264.318784ms ago: executing program 8 (id=3998): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) fallocate(r0, 0x20, 0x204, 0x8003) 189.259966ms ago: executing program 9 (id=3999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) 189.123436ms ago: executing program 5 (id=4000): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x5, 0x4) 83.905828ms ago: executing program 9 (id=4001): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback, 0x3c7}, 0x7e) 38.762369ms ago: executing program 9 (id=4002): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455cb, 0x1000000000) 0s ago: executing program 1 (id=4003): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000080)=""/73, 0x49) getdents(r0, 0xfffffffffffffffd, 0x58) kernel console output (not intermixed with test programs): .9.2623'. [ 123.055274][ T6226] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.090205][ T6222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 123.159141][ T6226] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 123.174917][ T6226] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 123.275738][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x7 [ 123.292863][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x5 [ 123.321224][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x6 [ 123.349368][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x0 [ 123.371808][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x0 [ 123.413428][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x0 [ 123.435008][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x0 [ 123.457466][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x0 [ 123.487316][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x0 [ 123.522525][ T40] uclogic 0003:5543:0042.0019: unknown main item tag 0x0 [ 123.552126][ T40] uclogic 0003:5543:0042.0019: No inputs registered, leaving [ 123.610147][ T6334] F2FS-fs (loop8): invalid crc value [ 123.619578][ T40] uclogic 0003:5543:0042.0019: hidraw0: USB HID v0.c1 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 123.657762][ T40] usb 6-1: USB disconnect, device number 8 [ 123.756050][ T6337] fido_id[6337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 123.776396][ T6334] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 123.967559][ T6334] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 124.046075][ T6334] F2FS-fs (loop8): Can't flush 6 in 0 for segs_per_sec 1 != 1 [ 124.066509][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2632'. [ 124.101593][ T4190] syz-executor: attempt to access beyond end of device [ 124.101593][ T4190] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.127527][ T6343] device vlan2 entered promiscuous mode [ 124.145094][ T6343] device gretap0 entered promiscuous mode [ 124.204721][ T6345] can0: slcan on ttyS3. [ 124.263480][ T6344] can0 (unregistered): slcan off ttyS3. [ 124.447566][ T6363] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.2639: corrupted inode contents [ 124.511240][ T6363] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #15: comm syz.4.2639: mark_inode_dirty error [ 124.560324][ T28] audit: type=1400 audit(1784724569.485:628): avc: denied { bind } for pid=6396 comm="syz.9.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.583693][ T6400] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 124.600224][ T6363] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.2639: corrupted inode contents [ 124.612826][ T6394] ext4 filesystem being mounted at /502/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.637456][ T6405] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.638276][ T3970] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 124.651886][ T6394] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 3: comm syz.1.2648: lblock 8 mapped to illegal pblock 3 (length 26) [ 124.669149][ T6400] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 124.680637][ T6405] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #2: comm syz.9.2650: No space for directory leaf checksum. Please run e2fsck -D. [ 124.701128][ T6363] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.2639: mark_inode_dirty error [ 124.709945][ T6405] EXT4-fs error (device loop9): htree_dirblock_to_tree:1083: inode #2: comm syz.9.2650: Directory block failed checksum [ 124.710071][ T6400] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 124.786985][ T6363] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.2639: corrupted inode contents [ 124.803933][ T6400] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 124.815985][ T6363] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.2639: mark_inode_dirty error [ 124.819090][ T6400] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 124.846368][ T6400] EXT4-fs (loop5): orphan cleanup on readonly fs [ 124.854592][ T6363] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.2639: corrupted inode contents [ 124.865307][ T6400] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2646: bg 0: block 34: padding at end of block bitmap is not set [ 124.891424][ T6363] EXT4-fs error (device loop4): ext4_truncate:4327: inode #15: comm syz.4.2639: mark_inode_dirty error [ 124.911723][ T6400] Quota error (device loop5): write_blk: dquota write failed [ 124.932690][ T6400] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 124.936553][ T6363] EXT4-fs error (device loop4) in ext4_setattr:5697: Corrupt filesystem [ 124.972219][ T6400] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.2646: Failed to acquire dquot type 1 [ 124.988803][ T6388] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.2639: corrupted inode contents [ 125.011004][ T3970] usb 9-1: Using ep0 maxpacket: 16 [ 125.022036][ T3970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.044833][ T6443] set_capacity_and_notify: 10 callbacks suppressed [ 125.044849][ T6443] loop9: detected capacity change from 0 to 256 [ 125.051838][ T6400] EXT4-fs (loop5): 1 truncate cleaned up [ 125.073897][ T28] audit: type=1400 audit(1784724570.012:629): avc: denied { mount } for pid=6442 comm="syz.9.2661" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 125.082731][ T3970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.162169][ T6452] loop1: detected capacity change from 0 to 128 [ 125.188207][ T28] audit: type=1326 audit(1784724570.063:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.1.2663" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 125.193355][ T3970] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.231161][ T6454] loop4: detected capacity change from 0 to 256 [ 125.300615][ T6454] FAT-fs (loop4): Directory bread(block 64) failed [ 125.328245][ T28] audit: type=1326 audit(1784724570.063:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.1.2663" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 125.337503][ T3970] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.363041][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.365314][ T6454] FAT-fs (loop4): Directory bread(block 65) failed [ 125.416229][ T6472] loop9: detected capacity change from 0 to 256 [ 125.422985][ T28] audit: type=1326 audit(1784724570.063:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.1.2663" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 125.461739][ T6454] FAT-fs (loop4): Directory bread(block 66) failed [ 125.465486][ T3970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.479689][ T3970] usb 9-1: config 0 descriptor?? [ 125.487780][ T28] audit: type=1326 audit(1784724570.063:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.1.2663" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 125.517450][ T28] audit: type=1326 audit(1784724570.063:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.1.2663" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 125.529603][ T6454] FAT-fs (loop4): Directory bread(block 67) failed [ 125.550403][ T28] audit: type=1326 audit(1784724570.063:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.1.2663" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 125.589771][ T6454] FAT-fs (loop4): Directory bread(block 68) failed [ 125.595850][ T6472] FAT-fs (loop9): Directory bread(block 64) failed [ 125.600589][ T6454] FAT-fs (loop4): Directory bread(block 69) failed [ 125.612916][ T6472] FAT-fs (loop9): Directory bread(block 65) failed [ 125.612982][ T6472] FAT-fs (loop9): Directory bread(block 66) failed [ 125.628247][ T6454] FAT-fs (loop4): Directory bread(block 70) failed [ 125.641269][ T6454] FAT-fs (loop4): Directory bread(block 71) failed [ 125.656159][ T6454] FAT-fs (loop4): Directory bread(block 72) failed [ 125.656885][ T6472] FAT-fs (loop9): Directory bread(block 67) failed [ 125.665068][ T6454] FAT-fs (loop4): Directory bread(block 73) failed [ 125.704377][ T6472] FAT-fs (loop9): Directory bread(block 68) failed [ 125.731915][ T6472] FAT-fs (loop9): Directory bread(block 69) failed [ 125.748996][ T6472] FAT-fs (loop9): Directory bread(block 70) failed [ 125.765257][ T6472] FAT-fs (loop9): Directory bread(block 71) failed [ 125.782904][ T6472] FAT-fs (loop9): Directory bread(block 72) failed [ 125.800593][ T6472] FAT-fs (loop9): Directory bread(block 73) failed [ 125.887196][ T3970] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 125.908719][ T6496] loop5: detected capacity change from 0 to 256 [ 125.926779][ T6478] loop1: detected capacity change from 0 to 40427 [ 125.928858][ T6495] loop4: detected capacity change from 0 to 256 [ 125.937568][ T3970] HID 045e:07da: Invalid code 65791 type 1 [ 125.968353][ T6478] F2FS-fs (loop1): invalid crc value [ 125.974812][ T3970] HID 045e:07da: Invalid code 768 type 1 [ 126.003920][ T3970] HID 045e:07da: Invalid code 769 type 1 [ 126.026852][ T6478] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.032888][ T3970] HID 045e:07da: Invalid code 770 type 1 [ 126.043080][ T3970] HID 045e:07da: Invalid code 771 type 1 [ 126.063429][ T3970] HID 045e:07da: Invalid code 772 type 1 [ 126.072690][ T3970] HID 045e:07da: Invalid code 773 type 1 [ 126.093047][ T3970] HID 045e:07da: Invalid code 774 type 1 [ 126.099597][ T3970] HID 045e:07da: Invalid code 775 type 1 [ 126.122041][ T3970] HID 045e:07da: Invalid code 776 type 1 [ 126.147981][ T6478] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.193160][ T3970] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.001A/input/input26 [ 126.230426][ T6534] usb usb8: usbfs: process 6534 (syz.5.2703) did not claim interface 0 before use [ 126.299579][ T3970] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 126.342021][ T3970] usb 9-1: USB disconnect, device number 3 [ 126.392045][ T6545] fido_id[6545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 126.453408][ T6557] loop1: detected capacity change from 0 to 256 [ 126.494458][ T6557] exfat: Deprecated parameter 'utf8' [ 126.501579][ T6557] exfat: Deprecated parameter 'namecase' [ 126.510958][ T6557] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 126.556109][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2719'. [ 126.560952][ T6571] loop4: detected capacity change from 0 to 512 [ 126.589260][ T6571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.614624][ T6571] EXT4-fs (loop4): 1 truncate cleaned up [ 126.699002][ T6584] loop4: detected capacity change from 0 to 512 [ 126.718229][ T6584] EXT4-fs (loop4): Test dummy encryption mode enabled [ 126.735609][ T6584] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.751716][ T583] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 126.758922][ T6584] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.2725: bad orphan inode 131072 [ 126.812241][ T6586] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 126.827938][ T6586] FAT-fs (loop8): Filesystem has been set read-only [ 126.836722][ T6586] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 126.950425][ T583] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 126.969093][ T583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.999448][ T583] usb 6-1: config 0 descriptor?? [ 127.162907][ T6591] F2FS-fs (loop4): heap/no_heap options were deprecated [ 127.196576][ T6591] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.308534][ T6591] F2FS-fs (loop4): Start checkpoint disabled! [ 127.322835][ T6618] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 127.334980][ T6618] FAT-fs (loop8): Filesystem has been set read-only [ 127.335228][ T6591] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 127.367841][ T6591] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 127.407053][ T583] samsung 0003:0419:0001.001B: unknown global tag 0xe [ 127.424475][ T583] samsung 0003:0419:0001.001B: item 0 4 1 14 parsing failed [ 127.441576][ T583] samsung 0003:0419:0001.001B: parse failed [ 127.455500][ T6578] F2FS-fs (loop1): Test dummy encryption mode enabled [ 127.463546][ T583] samsung: probe of 0003:0419:0001.001B failed with error -22 [ 127.486228][ T6578] F2FS-fs (loop1): invalid crc value [ 127.531568][ T6578] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.538664][ T315] kworker/u4:3: attempt to access beyond end of device [ 127.538664][ T315] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 127.598277][ T6637] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 127.618418][ T583] usb 6-1: USB disconnect, device number 9 [ 127.622869][ T6639] EXT4-fs: Ignoring removed orlov option [ 127.646974][ T6637] FAT-fs (loop9): Filesystem has been set read-only [ 127.657004][ T6578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.766954][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 127.811229][ T6658] tipc: Enabling of bearer rejected, already enabled [ 127.970623][ T6675] loop9: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 128.074524][ T6686] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 128.079643][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2754'. [ 128.409611][ T6715] erofs: (device loop4): mounted with root inode @ nid 36. [ 128.505287][ T6722] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 128.581785][ T583] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 128.622030][ T6729] netlink: 'syz.4.2790': attribute type 25 has an invalid length. [ 128.663831][ T6731] exfat: Deprecated parameter 'utf8' [ 128.673581][ T6731] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 128.695802][ T6731] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 128.713413][ T6731] exFAT-fs (loop4): IO charset iso8859 not found [ 128.769533][ T583] usb 6-1: Using ep0 maxpacket: 16 [ 128.778017][ T583] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 128.783588][ T6733] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 128.794961][ T1082] udevd[1082]: inotify_add_watch(7, /dev/loop9p17, 10) failed: No such file or directory [ 128.801716][ T387] udevd[387]: inotify_add_watch(7, /dev/loop9p15, 10) failed: No such file or directory [ 128.816535][ T1087] udevd[1087]: inotify_add_watch(7, /dev/loop9p20, 10) failed: No such file or directory [ 128.829653][ T6232] udevd[6232]: inotify_add_watch(7, /dev/loop9p21, 10) failed: No such file or directory [ 128.850461][ T6229] udevd[6229]: inotify_add_watch(7, /dev/loop9p19, 10) failed: No such file or directory [ 128.850506][ T357] udevd[357]: inotify_add_watch(7, /dev/loop9p18, 10) failed: No such file or directory [ 128.862974][ T388] udevd[388]: inotify_add_watch(7, /dev/loop9p16, 10) failed: No such file or directory [ 128.885677][ T6733] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.2792: corrupted in-inode xattr [ 128.887439][ T6233] udevd[6233]: inotify_add_watch(7, /dev/loop9p25, 10) failed: No such file or directory [ 128.902644][ T6231] udevd[6231]: inotify_add_watch(7, /dev/loop9p22, 10) failed: No such file or directory [ 128.923994][ T6234] udevd[6234]: inotify_add_watch(7, /dev/loop9p23, 10) failed: No such file or directory [ 128.925900][ T6733] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2792: couldn't read orphan inode 15 (err -117) [ 128.945290][ T583] usb 6-1: config 0 interface 0 has no altsetting 0 [ 128.950754][ T6733] EXT4-fs mount: 18 callbacks suppressed [ 128.950769][ T6733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.961057][ T583] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 128.983921][ T583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.984286][ T287] EXT4-fs (loop4): unmounting filesystem. [ 129.000505][ T583] usb 6-1: config 0 descriptor?? [ 129.197929][ T3970] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 129.264589][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2796'. [ 129.359060][ T6752] xt_hashlimit: size too large, truncated to 1048576 [ 129.423033][ T3970] usb 10-1: Using ep0 maxpacket: 32 [ 129.432613][ T3970] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 129.436369][ T583] isku 0003:1E7D:319C.001C: unknown main item tag 0xd [ 129.486928][ T3970] usb 10-1: config 0 has no interface number 0 [ 129.516024][ T583] isku 0003:1E7D:319C.001C: unknown global tag 0xe [ 129.539928][ T3970] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 129.543375][ T583] isku 0003:1E7D:319C.001C: item 0 0 1 14 parsing failed [ 129.600482][ T583] isku 0003:1E7D:319C.001C: parse failed [ 129.626166][ T3970] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 129.630768][ T583] isku: probe of 0003:1E7D:319C.001C failed with error -22 [ 129.667989][ T583] usb 6-1: USB disconnect, device number 10 [ 129.672105][ T3970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.724348][ T3970] usb 10-1: Product: syz [ 129.729638][ T3970] usb 10-1: Manufacturer: syz [ 129.748818][ T3970] usb 10-1: SerialNumber: syz [ 129.767323][ T3970] usb 10-1: config 0 descriptor?? [ 129.784615][ T6739] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 129.795809][ T6761] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 129.869367][ T6750] F2FS-fs (loop8): invalid crc value [ 129.902945][ T6750] F2FS-fs (loop8): Found nat_bits in checkpoint [ 129.967413][ T6764] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.977298][ T6764] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 129.989154][ T6750] F2FS-fs (loop8): Start checkpoint disabled! [ 129.997455][ T6750] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 130.000870][ T6764] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 130.006936][ T6739] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 130.030469][ T6764] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2805: attempt to clear invalid blocks 2 len 1 [ 130.060928][ T6750] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 130.064966][ T6764] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2805: invalid indirect mapped block 1819239214 (level 0) [ 130.106648][ T6764] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2805: invalid indirect mapped block 1819239214 (level 1) [ 130.132428][ T6764] EXT4-fs (loop1): 1 truncate cleaned up [ 130.146894][ T6764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.163195][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2810'. [ 130.186016][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 130.198511][ T1375] kworker/u4:5: attempt to access beyond end of device [ 130.198511][ T1375] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 130.198765][ T6778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.258925][ T6764] EXT4-fs: Ignoring removed bh option [ 130.266519][ T6764] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 130.276954][ T6764] EXT4-fs error (device loop1): __ext4_remount:6637: comm syz.1.2805: Abort forced by user [ 130.318327][ T6764] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 130.354649][ T288] EXT4-fs (loop1): unmounting filesystem. [ 130.389657][ T6786] set_capacity_and_notify: 16 callbacks suppressed [ 130.389674][ T6786] loop1: detected capacity change from 0 to 512 [ 130.421368][ T6786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.447456][ T6794] loop4: detected capacity change from 0 to 512 [ 130.475132][ T6786] EXT4-fs (loop1): 1 truncate cleaned up [ 130.486288][ T6786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.496215][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 130.496256][ T28] audit: type=1400 audit(1784724575.482:644): avc: denied { mounton } for pid=6793 comm="syz.4.2817" path="/529/file0/bus" dev="loop4" ino=1048890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 130.497157][ T6794] incfs: Can't find or create .incomplete dir in . [ 130.545162][ T3970] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 130.557698][ T3970] asix: probe of 10-1:0.188 failed with error -71 [ 130.566810][ T288] EXT4-fs (loop1): unmounting filesystem. [ 130.572937][ T3970] usb 10-1: USB disconnect, device number 5 [ 130.583372][ T6794] incfs: mount failed -22 [ 130.637483][ T28] audit: type=1400 audit(1784724575.633:645): avc: denied { ioctl } for pid=6811 comm="syz.5.2825" path="/208/file0" dev="tmpfs" ino=1095 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.699770][ T6820] loop4: detected capacity change from 0 to 512 [ 130.736574][ T6818] loop1: detected capacity change from 0 to 8192 [ 130.750624][ T6820] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.2829: Unrecognised inode hash code 255 [ 130.764960][ T6820] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2829: Corrupt directory, running e2fsck is recommended [ 130.779311][ T6820] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 130.791991][ T6820] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.2829: corrupted in-inode xattr [ 130.817253][ T6820] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2829: couldn't read orphan inode 15 (err -117) [ 130.833242][ T6820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.876411][ T6820] EXT4-fs error (device loop4): __ext4_remount:6637: comm syz.4.2829: Abort forced by user [ 130.927194][ T6820] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 130.966622][ T6814] loop8: detected capacity change from 0 to 40427 [ 130.975100][ T287] EXT4-fs (loop4): unmounting filesystem. [ 130.983792][ T6814] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 131.011494][ T6814] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 131.039871][ T6814] F2FS-fs (loop8): invalid crc value [ 131.088467][ T6814] F2FS-fs (loop8): Found nat_bits in checkpoint [ 131.151256][ T6814] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 131.168272][ T6814] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 131.205953][ T315] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 131.224807][ T315] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 131.243896][ T6862] kernel profiling enabled (shift: 0) [ 131.326952][ T3970] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.336500][ T28] audit: type=1400 audit(1784724576.329:646): avc: denied { setopt } for pid=6873 comm="syz.5.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.374873][ T385] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 131.400845][ T6878] loop5: detected capacity change from 0 to 256 [ 131.438596][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2857'. [ 131.497739][ T6890] loop5: detected capacity change from 0 to 256 [ 131.553397][ T3970] usb 2-1: Using ep0 maxpacket: 8 [ 131.560156][ T3970] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.564216][ T385] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 131.584427][ T3970] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.600881][ T385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.615231][ T385] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 131.622865][ T3970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.643197][ T385] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 131.647169][ T6896] loop8: detected capacity change from 0 to 256 [ 131.652624][ T385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.671146][ T3970] usb 2-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00 [ 131.675748][ T385] usb 5-1: config 0 descriptor?? [ 131.689642][ T6847] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 131.699469][ T3970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.730304][ T3970] usb 2-1: config 0 descriptor?? [ 131.745931][ T28] audit: type=1400 audit(1784724576.753:647): avc: denied { create } for pid=6899 comm="syz.5.2865" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 131.840187][ T6910] loop5: detected capacity change from 0 to 128 [ 131.865538][ T6910] FAT-fs (loop5): Directory bread(block 32) failed [ 131.873554][ T6910] FAT-fs (loop5): Directory bread(block 33) failed [ 131.881577][ T6910] FAT-fs (loop5): Directory bread(block 34) failed [ 131.890678][ T6910] FAT-fs (loop5): Directory bread(block 35) failed [ 131.898914][ T6910] FAT-fs (loop5): Directory bread(block 36) failed [ 131.907124][ T6910] FAT-fs (loop5): Directory bread(block 37) failed [ 131.917241][ T6910] FAT-fs (loop5): Directory bread(block 38) failed [ 131.926659][ T6910] FAT-fs (loop5): Directory bread(block 39) failed [ 131.935635][ T6910] FAT-fs (loop5): Directory bread(block 40) failed [ 131.942857][ T6910] FAT-fs (loop5): Directory bread(block 41) failed [ 132.007691][ T6910] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000a009) [ 132.016797][ T6910] FAT-fs (loop5): Filesystem has been set read-only [ 132.025807][ T6910] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000a009) [ 132.035330][ T6910] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000a009) [ 132.049100][ T40] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 132.116928][ T385] hid-multitouch 0003:1FD2:6007.001D: unknown main item tag 0x2 [ 132.130929][ T6914] loop5: detected capacity change from 0 to 512 [ 132.139279][ T385] hid-multitouch 0003:1FD2:6007.001D: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 132.153556][ T3970] thrustmaster 0003:044F:B605.001E: unknown main item tag 0x3 [ 132.178122][ T3970] thrustmaster 0003:044F:B605.001E: unknown main item tag 0x0 [ 132.194098][ T3970] thrustmaster 0003:044F:B605.001E: unknown main item tag 0x0 [ 132.205287][ T3970] thrustmaster 0003:044F:B605.001E: unknown main item tag 0x0 [ 132.215865][ T6914] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 132.227971][ T3970] thrustmaster 0003:044F:B605.001E: unknown main item tag 0x0 [ 132.240283][ T40] usb 9-1: Using ep0 maxpacket: 16 [ 132.257540][ T40] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 132.268369][ T3970] thrustmaster 0003:044F:B605.001E: unknown main item tag 0x0 [ 132.270215][ T6914] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 132.278901][ T40] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.297422][ T3970] thrustmaster 0003:044F:B605.001E: unknown main item tag 0x0 [ 132.306278][ T3970] thrustmaster 0003:044F:B605.001E: unknown main item tag 0x0 [ 132.326230][ T40] usb 9-1: Product: syz [ 132.336330][ T40] usb 9-1: Manufacturer: syz [ 132.341495][ T40] usb 9-1: SerialNumber: syz [ 132.353040][ T3970] thrustmaster 0003:044F:B605.001E: item fetching failed at offset 39/40 [ 132.366142][ T3970] thrustmaster 0003:044F:B605.001E: parse failed [ 132.373295][ T3970] thrustmaster: probe of 0003:044F:B605.001E failed with error -22 [ 132.386050][ T3970] usb 2-1: USB disconnect, device number 11 [ 132.413357][ T583] usb 5-1: USB disconnect, device number 13 [ 132.480364][ T3939] EXT4-fs (loop5): unmounting filesystem. [ 132.537288][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2875'. [ 132.708467][ T6934] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 132.721486][ T6934] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 132.739837][ T6934] F2FS-fs (loop5): invalid crc value [ 132.755080][ T6934] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.783694][ T6934] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 132.790996][ T6934] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 132.950981][ T6957] xt_hashlimit: size too large, truncated to 1048576 [ 132.974464][ T40] snd-usb-audio: probe of 9-1:222.0 failed with error -71 [ 133.005064][ T40] usb 9-1: USB disconnect, device number 4 [ 133.148282][ T6976] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2897: invalid indirect mapped block 10 (level 1) [ 133.178567][ T6976] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2897: invalid indirect mapped block 8 (level 1) [ 133.196844][ T6976] EXT4-fs (loop9): 1 truncate cleaned up [ 133.204372][ T6976] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 133.330509][ T4224] EXT4-fs (loop9): unmounting filesystem. [ 133.339076][ T6963] F2FS-fs (loop1): fault_injection options not supported [ 133.355009][ T6963] F2FS-fs (loop1): fault_type options not supported [ 133.368214][ T6963] F2FS-fs (loop1): invalid crc value [ 133.384501][ T6963] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.402738][ T6989] EXT4-fs: Ignoring removed orlov option [ 133.433815][ T6989] EXT4-fs: Ignoring removed bh option [ 133.479916][ T6963] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.500930][ T7006] EXT4-fs: Ignoring removed oldalloc option [ 133.513074][ T6989] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 133.570003][ T6989] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.628396][ T7006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.677434][ T6989] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 133.693666][ T287] EXT4-fs (loop4): unmounting filesystem. [ 133.717523][ T3939] EXT4-fs (loop5): unmounting filesystem. [ 133.750781][ T7019] usb usb8: usbfs: process 7019 (syz.8.2917) did not claim interface 0 before use [ 133.768494][ T28] audit: type=1400 audit(1784724578.789:648): avc: denied { read } for pid=7021 comm="syz.5.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.859943][ T7028] xt_hashlimit: size too large, truncated to 1048576 [ 133.905497][ T7034] EXT4-fs (loop1): orphan cleanup on readonly fs [ 133.912786][ T7034] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.2922: ea_inode with extended attributes [ 134.062535][ T7034] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2922: error while reading EA inode 11 err=-117 [ 134.091621][ T7044] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 134.157783][ T7034] EXT4-fs (loop1): 1 orphan inode deleted [ 134.177020][ T7034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 134.257609][ T288] EXT4-fs (loop1): unmounting filesystem. [ 134.401248][ T7070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.479960][ T7070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.521133][ T7070] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.575337][ T28] audit: type=1400 audit(1784724579.605:649): avc: denied { setattr } for pid=7069 comm="syz.1.2938" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 134.604982][ T288] EXT4-fs (loop1): unmounting filesystem. [ 134.669690][ T7084] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.722702][ T7074] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 134.748597][ T7074] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 134.749676][ T7084] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.2944: bad orphan inode 13 [ 134.772587][ T7074] F2FS-fs (loop4): invalid crc value [ 134.780410][ T7084] ext4_test_bit(bit=12, block=18) = 1 [ 134.803443][ T7084] is_bad_inode(inode)=0 [ 134.822781][ T7074] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 134.839736][ T7084] NEXT_ORPHAN(inode)=0 [ 134.844961][ T7084] max_ino=32 [ 134.850557][ T7084] i_nlink=1 [ 134.851599][ T7082] F2FS-fs (loop9): invalid crc value [ 134.855334][ T7084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.903261][ T7084] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 134.928186][ T7082] F2FS-fs (loop9): Found nat_bits in checkpoint [ 134.933152][ T7074] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 134.946371][ T7074] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.993006][ T7084] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2944: bg 0: block 248: padding at end of block bitmap is not set [ 135.014032][ T7084] Quota error (device loop1): write_blk: dquota write failed [ 135.030057][ T7082] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 135.056731][ T7084] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 135.087522][ T7084] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.2944: Failed to acquire dquot type 1 [ 135.137023][ T288] EXT4-fs (loop1): unmounting filesystem. [ 135.155842][ T315] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 135.167063][ T7084] syz.1.2944 (7084) used greatest stack depth: 20744 bytes left [ 135.186570][ T315] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 1 [ 135.246715][ T28] audit: type=1400 audit(1784724580.280:650): avc: denied { connect } for pid=7105 comm="syz.4.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.269528][ T7066] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945) [ 135.293417][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 135.311724][ T7066] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 135.346150][ T7066] F2FS-fs (loop8): invalid crc value [ 135.356837][ T7117] mmap: syz.4.2954 (7117) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.385141][ T7066] F2FS-fs (loop8): Found nat_bits in checkpoint [ 135.474749][ T7066] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 135.493048][ T7066] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 135.513373][ T385] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 135.591951][ T7066] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 135.633548][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2967'. [ 135.678910][ T7149] set_capacity_and_notify: 13 callbacks suppressed [ 135.678929][ T7149] loop1: detected capacity change from 0 to 16 [ 135.702248][ T7149] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 135.715368][ T7149] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 135.734678][ T385] usb 10-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 135.756058][ T385] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 135.778515][ T385] usb 10-1: config 0 interface 0 has no altsetting 0 [ 135.787394][ T7149] erofs: (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 135.805090][ T7149] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.813695][ T385] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 135.836849][ T385] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.848129][ T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 135.859991][ T385] usb 10-1: config 0 descriptor?? [ 135.901704][ T7161] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2975'. [ 135.937628][ T7165] netlink: 'syz.5.2977': attribute type 10 has an invalid length. [ 136.021485][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 136.052183][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 136.076829][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 136.109555][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 136.125540][ T7185] loop8: detected capacity change from 0 to 512 [ 136.134690][ T6] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 136.157122][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.186766][ T7187] loop8: detected capacity change from 0 to 512 [ 136.193961][ T6] usb 5-1: Product: syz [ 136.208829][ T6] usb 5-1: Manufacturer: syz [ 136.218913][ T6] usb 5-1: SerialNumber: syz [ 136.229691][ T6] usb 5-1: config 0 descriptor?? [ 136.230848][ T7187] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 136.249183][ T6] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 136.270271][ T7187] ext4 filesystem being mounted at /294/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.290717][ T385] pyra 0003:1E7D:2C24.001F: ignoring exceeding usage max [ 136.306451][ T4190] EXT4-fs (loop8): unmounting filesystem. [ 136.334263][ T385] pyra 0003:1E7D:2C24.001F: hidraw0: USB HID v0.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.9-1/input0 [ 136.436428][ T7196] xt_hashlimit: size too large, truncated to 1048576 [ 136.497137][ T6] ums-isd200: probe of 5-1:0.0 failed with error -22 [ 136.527124][ T6] usb 10-1: USB disconnect, device number 6 [ 136.666828][ T385] usb 5-1: USB disconnect, device number 14 [ 136.785932][ T7182] loop1: detected capacity change from 0 to 131072 [ 136.804035][ T7182] F2FS-fs (loop1): invalid crc value [ 136.832310][ T7182] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.882923][ T7179] loop5: detected capacity change from 0 to 131072 [ 136.887040][ T7203] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2990'. [ 136.890026][ T7182] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 136.921936][ T7179] F2FS-fs (loop5): invalid crc value [ 136.941152][ T7206] loop8: detected capacity change from 0 to 16 [ 136.954815][ T7179] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.984142][ T7206] erofs: (device loop8): mounted with root inode @ nid 36. [ 136.999061][ T7179] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 137.084568][ T7179] F2FS-fs (loop5): f2fs_convert_inline_page: corrupted inline inode ino=7, i_addr[0]:0x24, run fsck to fix. [ 137.305255][ T7234] loop8: detected capacity change from 0 to 512 [ 137.339615][ T7231] loop9: detected capacity change from 0 to 8192 [ 137.388693][ T7234] EXT4-fs: Ignoring removed bh option [ 137.432953][ T7234] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 137.464547][ T7234] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 137.477582][ T7234] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3005: Corrupt directory, running e2fsck is recommended [ 137.495732][ T7234] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 137.505981][ T7234] EXT4-fs error (device loop8): ext4_iget_extra_inode:4765: inode #15: comm syz.8.3005: corrupted in-inode xattr [ 137.523986][ T7234] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.3005: couldn't read orphan inode 15 (err -117) [ 137.537617][ T7234] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 137.562457][ T28] audit: type=1400 audit(1784724582.614:651): avc: denied { write } for pid=7260 comm="syz.9.3016" name="file0" dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.616729][ T7267] loop1: detected capacity change from 0 to 256 [ 137.624556][ T7234] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 137.624597][ T7234] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 137.624612][ T7234] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3005: Corrupt directory, running e2fsck is recommended [ 137.624645][ T7234] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.3005: path /303/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 137.724624][ T7272] loop5: detected capacity change from 0 to 512 [ 137.741488][ T7272] EXT4-fs: Ignoring removed oldalloc option [ 137.756295][ T7234] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 22: comm syz.8.3005: path /303/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 137.787309][ T7272] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.808512][ T7234] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 8: comm syz.8.3005: path /303/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 137.835893][ T7272] EXT4-fs (loop5): 1 truncate cleaned up [ 137.844591][ T7272] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 137.869296][ T3939] EXT4-fs (loop5): unmounting filesystem. [ 137.920456][ T7282] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3025: invalid indirect mapped block 10 (level 1) [ 137.942706][ T4190] EXT4-fs (loop8): unmounting filesystem. [ 137.953248][ T7290] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 137.968670][ T7282] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3025: invalid indirect mapped block 8 (level 1) [ 137.981287][ T7290] exFAT-fs (loop1): hint_cluster is invalid (1) [ 137.991396][ T7295] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 137.996901][ T7290] syz.1.3029: attempt to access beyond end of device [ 137.996901][ T7290] loop1: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 138.001325][ T7282] EXT4-fs (loop4): 1 truncate cleaned up [ 138.025481][ T7295] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.025848][ T7282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.112815][ T4224] EXT4-fs (loop9): unmounting filesystem. [ 138.166675][ T287] EXT4-fs (loop4): unmounting filesystem. [ 138.189794][ T385] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 138.392596][ T385] usb 6-1: Using ep0 maxpacket: 16 [ 138.400836][ T583] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 138.420655][ T385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.443819][ T385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.462835][ T7336] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 138.465094][ T385] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.486669][ T7338] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.3048: invalid block [ 138.502260][ T385] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.540649][ T385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.547106][ T7336] EXT4-fs (loop4): Remounting filesystem read-only [ 138.551659][ T385] usb 6-1: config 0 descriptor?? [ 138.568309][ T7338] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3048: invalid indirect mapped block 10 (level 1) [ 138.575093][ T7336] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3051: invalid indirect mapped block 4278190080 (level 0) [ 138.583964][ T7338] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3048: invalid indirect mapped block 8 (level 1) [ 138.620188][ T7338] EXT4-fs (loop8): 1 truncate cleaned up [ 138.627032][ T7338] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 138.634512][ T7336] EXT4-fs (loop4): Remounting filesystem read-only [ 138.644649][ T583] usb 2-1: Using ep0 maxpacket: 8 [ 138.655791][ T583] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.664951][ T7336] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3051: invalid indirect mapped block 1 (level 1) [ 138.684789][ T583] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 138.696072][ T7336] EXT4-fs (loop4): Remounting filesystem read-only [ 138.708092][ T7336] EXT4-fs (loop4): 1 truncate cleaned up [ 138.714408][ T7336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.724186][ T583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.755695][ T583] usb 2-1: config 0 descriptor?? [ 138.773869][ T287] EXT4-fs (loop4): unmounting filesystem. [ 138.788341][ T4190] EXT4-fs (loop8): unmounting filesystem. [ 138.844729][ T7344] device bridge0 entered promiscuous mode [ 138.970831][ T385] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 138.994409][ T385] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 139.007573][ T385] microsoft 0003:045E:07DA.0020: no inputs found [ 139.015597][ T385] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 139.016066][ T7320] F2FS-fs (loop9): Test dummy encryption mode enabled [ 139.036594][ T7320] F2FS-fs (loop9): invalid crc value [ 139.057450][ T7320] F2FS-fs (loop9): Found nat_bits in checkpoint [ 139.089857][ T7320] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 139.165211][ T583] nintendo 0003:057E:2009.0021: unknown main item tag 0x0 [ 139.201096][ T583] nintendo 0003:057E:2009.0021: unknown main item tag 0x0 [ 139.219984][ T583] nintendo 0003:057E:2009.0021: unknown main item tag 0x0 [ 139.240217][ T583] nintendo 0003:057E:2009.0021: unknown main item tag 0x0 [ 139.260122][ T583] nintendo 0003:057E:2009.0021: unknown main item tag 0x0 [ 139.270916][ T583] nintendo 0003:057E:2009.0021: unknown main item tag 0x0 [ 139.280913][ T583] nintendo 0003:057E:2009.0021: unknown main item tag 0x0 [ 139.290688][ T583] nintendo 0003:057E:2009.0021: unbalanced collection at end of report description [ 139.302304][ T583] nintendo 0003:057E:2009.0021: HID parse failed [ 139.310539][ T583] nintendo 0003:057E:2009.0021: probe - fail = -22 [ 139.317756][ T583] nintendo: probe of 0003:057E:2009.0021 failed with error -22 [ 139.331597][ T583] usb 6-1: USB disconnect, device number 11 [ 139.385549][ T6] usb 2-1: USB disconnect, device number 12 [ 139.641072][ T7407] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 139.654253][ T7407] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.684596][ T4190] EXT4-fs (loop8): unmounting filesystem. [ 139.709148][ T385] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 139.810511][ T7427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.819399][ T7429] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3092'. [ 139.841943][ T7427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.858932][ T7427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.881005][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3095'. [ 139.898053][ T385] usb 10-1: Using ep0 maxpacket: 16 [ 139.905708][ T385] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.929686][ T7427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.935985][ T385] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.956285][ T7427] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.979651][ T385] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.004382][ T385] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.022604][ T385] usb 10-1: Product: syz [ 140.028120][ T385] usb 10-1: Manufacturer: syz [ 140.038211][ T287] EXT4-fs (loop4): unmounting filesystem. [ 140.046175][ T385] usb 10-1: SerialNumber: syz [ 140.123568][ T7470] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 140.232096][ T7486] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 140.254458][ T7486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 140.269657][ T385] usb 10-1: 0:2 : does not exist [ 140.272102][ T7486] System zones: 1-12 [ 140.281681][ T7486] EXT4-fs (loop8): orphan cleanup on readonly fs [ 140.291547][ T7486] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.3117: attempt to clear invalid blocks 1024 len 1 [ 140.292874][ T385] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 140.317074][ T7486] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3117: bg 0: block 361: padding at end of block bitmap is not set [ 140.338070][ T7486] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 140.349606][ T7486] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3117: invalid indirect mapped block 1811939328 (level 0) [ 140.364854][ T385] usb 10-1: USB disconnect, device number 7 [ 140.388322][ T7486] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3117: invalid indirect mapped block 2 (level 2) [ 140.410609][ T7486] EXT4-fs (loop8): 1 truncate cleaned up [ 140.419748][ T7486] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 140.430504][ T7504] EXT4-fs: Ignoring removed orlov option [ 140.443722][ T7504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.460859][ T4190] EXT4-fs (loop8): unmounting filesystem. [ 140.470028][ T7504] EXT4-fs (loop4): 1 truncate cleaned up [ 140.477646][ T7504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 140.505256][ T6] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 140.515309][ T287] EXT4-fs (loop4): unmounting filesystem. [ 140.565074][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.642442][ T7514] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 140.658077][ T7514] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 140.669191][ T7514] F2FS-fs (loop4): invalid crc value [ 140.677071][ T7514] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 140.702260][ T6] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 140.712477][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.721166][ T7514] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 140.722729][ T6] usb 6-1: Product: syz [ 140.731889][ T7514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.736269][ T6] usb 6-1: Manufacturer: syz [ 140.758716][ T6] usb 6-1: SerialNumber: syz [ 140.769609][ T287] syz-executor: attempt to access beyond end of device [ 140.769609][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.813734][ T3970] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 140.862210][ T7531] set_capacity_and_notify: 13 callbacks suppressed [ 140.862229][ T7531] loop4: detected capacity change from 0 to 256 [ 140.915665][ T7535] loop4: detected capacity change from 0 to 1024 [ 140.940055][ T7535] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.3138: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.969556][ T7535] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 140.978652][ T7535] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.3138: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.997517][ T7535] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 141.016611][ T7535] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.3138: Failed to acquire dquot type 0 [ 141.030472][ T7535] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 141.042878][ T7535] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.3138: mark_inode_dirty error [ 141.058831][ T3970] usb 9-1: config 0 interface 0 has no altsetting 0 [ 141.071912][ T7535] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 141.087738][ T3970] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 141.103200][ T7535] EXT4-fs (loop4): 1 orphan inode deleted [ 141.111364][ T3970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.122029][ T7535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.133625][ T315] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.158132][ T3970] usb 9-1: config 0 descriptor?? [ 141.188738][ T315] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 141.206550][ T315] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0 [ 141.223687][ T287] EXT4-fs (loop4): unmounting filesystem. [ 141.252082][ T315] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.269001][ T315] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 141.277751][ T315] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0 [ 141.290653][ T287] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 141.306410][ T287] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 141.319453][ T287] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 141.375552][ T7533] loop9: detected capacity change from 0 to 131072 [ 141.387691][ T6] rtl8150 6-1:1.0: couldn't reset the device [ 141.387819][ T7533] F2FS-fs (loop9): invalid crc value [ 141.395763][ T6] rtl8150: probe of 6-1:1.0 failed with error -5 [ 141.413361][ T6] usb 6-1: USB disconnect, device number 12 [ 141.426552][ T7533] F2FS-fs (loop9): Found nat_bits in checkpoint [ 141.456378][ T7533] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 141.474918][ T7533] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 141.584865][ T3970] samsung 0003:0419:0600.0022: unknown main item tag 0x1 [ 141.594181][ T3970] samsung 0003:0419:0600.0022: collection stack underflow [ 141.604763][ T3970] samsung 0003:0419:0600.0022: item 0 2 0 12 parsing failed [ 141.620556][ T583] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 141.625908][ T3970] samsung 0003:0419:0600.0022: parse failed [ 141.637759][ T3970] samsung: probe of 0003:0419:0600.0022 failed with error -22 [ 141.647155][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3143'. [ 141.711421][ T7554] loop1: detected capacity change from 0 to 1024 [ 141.719017][ T7554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.750997][ T7554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.773484][ T288] EXT4-fs (loop1): unmounting filesystem. [ 141.798090][ T385] kernel read not supported for file /usbmon9 (pid: 385 comm: kworker/0:3) [ 141.811353][ T583] usb 5-1: Using ep0 maxpacket: 16 [ 141.818770][ T6] usb 9-1: USB disconnect, device number 5 [ 141.832265][ T583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.846432][ T583] usb 5-1: config 0 has no interfaces? [ 141.854730][ T583] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 141.866484][ T583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.878425][ T583] usb 5-1: config 0 descriptor?? [ 141.949180][ T28] audit: type=1400 audit(1784724587.016:652): avc: denied { shutdown } for pid=7578 comm="syz.9.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.063527][ T7583] loop5: detected capacity change from 0 to 40427 [ 142.073010][ T7583] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 142.083477][ T7583] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 142.087541][ T7538] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3139'. [ 142.103803][ T7538] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3139'. [ 142.104407][ T7583] F2FS-fs (loop5): invalid crc value [ 142.116678][ T3970] usb 5-1: USB disconnect, device number 15 [ 142.131856][ T7583] F2FS-fs (loop5): Found nat_bits in checkpoint [ 142.158219][ T7583] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 142.168538][ T7583] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 142.187612][ T583] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 142.247640][ T40] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 142.268941][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3160'. [ 142.376849][ T583] usb 2-1: Using ep0 maxpacket: 32 [ 142.386047][ T583] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.399117][ T583] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.414801][ T583] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 142.428277][ T583] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 142.440254][ T7606] netlink: 'syz.5.3167': attribute type 5 has an invalid length. [ 142.446298][ T583] usb 2-1: Product: syz [ 142.455909][ T40] usb 10-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.460388][ T583] usb 2-1: Manufacturer: syz [ 142.472122][ T40] usb 10-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.479742][ T7608] device vlan2 entered promiscuous mode [ 142.491199][ T40] usb 10-1: config 0 interface 0 has no altsetting 0 [ 142.495162][ T583] hub 2-1:4.0: USB hub found [ 142.510900][ T40] usb 10-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 142.529269][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.544172][ T40] usb 10-1: config 0 descriptor?? [ 142.684177][ T7634] loop4: detected capacity change from 0 to 128 [ 142.684177][ T7632] loop5: detected capacity change from 0 to 512 [ 142.702403][ T7634] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 142.713362][ T583] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 142.722503][ T7638] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3183'. [ 142.750463][ T7638] tipc: Enabling of bearer rejected, failed to enable media [ 142.757880][ T7632] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.3180: inode has both inline data and extents flags [ 142.783159][ T7632] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3180: couldn't read orphan inode 15 (err -117) [ 142.804310][ T7632] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.847574][ T3939] EXT4-fs (loop5): unmounting filesystem. [ 142.966163][ T40] uclogic 0003:5543:0064.0023: unknown main item tag 0x0 [ 142.981298][ T40] uclogic 0003:5543:0064.0023: item fetching failed at offset 5/6 [ 142.997982][ T40] uclogic 0003:5543:0064.0023: parse failed [ 143.014057][ T40] uclogic: probe of 0003:5543:0064.0023 failed with error -22 [ 143.031072][ T7651] loop8: detected capacity change from 0 to 40427 [ 143.039312][ T7651] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 143.047922][ T7651] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 143.060619][ T7651] F2FS-fs (loop8): invalid crc value [ 143.077649][ T7651] F2FS-fs (loop8): Found nat_bits in checkpoint [ 143.087071][ T6] usb 2-1: USB disconnect, device number 13 [ 143.128989][ T7651] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 143.137510][ T7651] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 143.163502][ T583] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 143.167308][ T40] usb 10-1: USB disconnect, device number 8 [ 143.198450][ T4190] syz-executor: attempt to access beyond end of device [ 143.198450][ T4190] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 143.264764][ T7666] loop4: detected capacity change from 0 to 40427 [ 143.281760][ T7666] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 143.292011][ T7666] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 143.301486][ T7666] F2FS-fs (loop4): Image doesn't support compression [ 143.311689][ T7666] F2FS-fs (loop4): Image doesn't support compression [ 143.324300][ T7666] F2FS-fs (loop4): invalid crc value [ 143.332258][ T7666] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 143.352687][ T583] usb 6-1: Using ep0 maxpacket: 16 [ 143.365553][ T7666] F2FS-fs (loop4): Start checkpoint disabled! [ 143.373815][ T7666] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 143.386342][ T583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.400717][ T583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.415602][ T583] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.417937][ T7666] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 143.431028][ T583] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.431057][ T583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.438461][ T583] usb 6-1: config 0 descriptor?? [ 143.438965][ T7666] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 143.552288][ T28] audit: type=1400 audit(1784724588.633:653): avc: denied { getopt } for pid=7683 comm="syz.1.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.633864][ T7692] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3205'. [ 143.814919][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3216'. [ 143.830852][ T6] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 143.859387][ T583] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 143.888166][ T583] hid_map_usage: 11766 callbacks suppressed [ 143.888184][ T583] HID 045e:07da: Invalid code 65791 type 1 [ 143.901845][ T583] HID 045e:07da: Invalid code 768 type 1 [ 143.909668][ T583] HID 045e:07da: Invalid code 769 type 1 [ 143.918945][ T583] HID 045e:07da: Invalid code 770 type 1 [ 143.928669][ T583] HID 045e:07da: Invalid code 771 type 1 [ 143.935434][ T583] HID 045e:07da: Invalid code 772 type 1 [ 143.942165][ T583] HID 045e:07da: Invalid code 773 type 1 [ 143.961854][ T583] HID 045e:07da: Invalid code 774 type 1 [ 143.970314][ T583] HID 045e:07da: Invalid code 775 type 1 [ 143.977420][ T583] HID 045e:07da: Invalid code 776 type 1 [ 144.000557][ T583] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0024/input/input28 [ 144.089815][ T6] usb 9-1: Using ep0 maxpacket: 16 [ 144.097025][ T583] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 144.121157][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.139697][ T583] usb 6-1: USB disconnect, device number 13 [ 144.149159][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.199322][ T6] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.215803][ T6] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.228023][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.240696][ T7749] fido_id[7749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 144.248996][ T6] usb 9-1: config 0 descriptor?? [ 144.342099][ T40] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 144.522147][ T7733] loop9: detected capacity change from 0 to 131072 [ 144.530916][ T7733] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945) [ 144.543185][ T7733] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 144.560116][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.576774][ T7733] F2FS-fs (loop9): invalid crc value [ 144.583407][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.596409][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.613347][ T40] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.626698][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.639186][ T7733] F2FS-fs (loop9): Found nat_bits in checkpoint [ 144.651456][ T40] usb 5-1: config 0 descriptor?? [ 144.693292][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0025/input/input29 [ 144.720243][ T28] audit: type=1400 audit(1784724589.797:654): avc: denied { bind } for pid=7780 comm="syz.1.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.723753][ T6] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 144.761271][ T7733] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 144.782865][ T7733] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 144.850612][ T7733] F2FS-fs (loop9): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 145.009157][ T24] usb 9-1: USB disconnect, device number 6 [ 145.059345][ T40] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 145.062930][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3265'. [ 145.083806][ T40] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 145.087257][ T7819] netlink: 'syz.1.3266': attribute type 2 has an invalid length. [ 145.211068][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3256'. [ 145.264637][ T24] usb 5-1: USB disconnect, device number 16 [ 145.326852][ T7832] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 145.355826][ T7832] EXT4-fs error (device loop9): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.9.3271: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 145.355839][ T28] audit: type=1400 audit(1784724590.439:655): avc: denied { unlink } for pid=7831 comm="syz.9.3271" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 145.416842][ T7832] EXT4-fs (loop9): Remounting filesystem read-only [ 145.425552][ T7832] EXT4-fs error (device loop9) in ext4_delete_inline_entry:1822: Corrupt filesystem [ 145.437912][ T7832] EXT4-fs (loop9): Remounting filesystem read-only [ 145.458866][ T4224] EXT4-fs (loop9): unmounting filesystem. [ 145.507593][ T7840] erofs: (device loop9): mounted with root inode @ nid 36. [ 145.531074][ T7842] netlink: 'syz.9.3274': attribute type 1 has an invalid length. [ 145.558981][ T7844] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3276'. [ 145.571284][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3276'. [ 145.571611][ T28] audit: type=1326 audit(1784724590.650:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.8.3275" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d899de99 code=0x7ffc0000 [ 145.583209][ T7844] tipc: Started in network mode [ 145.624476][ T7844] tipc: Node identity 4, cluster identity 4711 [ 145.641885][ T7844] tipc: Node number set to 4 [ 145.647498][ T28] audit: type=1326 audit(1784724590.650:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.8.3275" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d899de99 code=0x7ffc0000 [ 145.659498][ T7844] tipc: Cannot configure node identity twice [ 145.687947][ T28] audit: type=1326 audit(1784724590.670:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.8.3275" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d899de99 code=0x7ffc0000 [ 145.727916][ T28] audit: type=1326 audit(1784724590.670:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.8.3275" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d899de99 code=0x7ffc0000 [ 145.789852][ T28] audit: type=1326 audit(1784724590.700:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.8.3275" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19d899de99 code=0x7ffc0000 [ 145.824847][ T28] audit: type=1326 audit(1784724590.700:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.8.3275" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d899de99 code=0x7ffc0000 [ 145.871829][ T28] audit: type=1326 audit(1784724590.700:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.8.3275" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d899de99 code=0x7ffc0000 [ 145.873958][ T7822] F2FS-fs (loop5): Test dummy encryption mode enabled [ 145.925900][ T7863] set_capacity_and_notify: 3 callbacks suppressed [ 145.925921][ T7863] loop4: detected capacity change from 0 to 512 [ 145.933258][ T7822] F2FS-fs (loop5): invalid crc value [ 145.955711][ T7863] FAT-fs (loop4): Unrecognized mount option "åü—±·ë¤íâýA" or missing value [ 145.994040][ T7822] F2FS-fs (loop5): Found nat_bits in checkpoint [ 146.051244][ T7822] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 146.080408][ T7886] loop8: detected capacity change from 0 to 256 [ 146.108140][ T7889] loop1: detected capacity change from 0 to 512 [ 146.118279][ T7886] exfat: Deprecated parameter 'namecase' [ 146.125582][ T7889] EXT4-fs (loop1): Test dummy encryption mode enabled [ 146.149935][ T7886] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 146.165866][ T7889] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.3295: inode #1: comm syz.1.3295: iget: illegal inode # [ 146.196075][ T7889] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3295: error while reading EA inode 1 err=-117 [ 146.236001][ T7889] EXT4-fs (loop1): 1 orphan inode deleted [ 146.244643][ T7889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.336034][ T288] EXT4-fs (loop1): unmounting filesystem. [ 146.462975][ T7921] loop8: detected capacity change from 0 to 256 [ 146.482738][ T7925] loop5: detected capacity change from 0 to 512 [ 146.491374][ T7921] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.511985][ T7925] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 146.524449][ T7925] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 146.526475][ T7928] loop1: detected capacity change from 0 to 256 [ 146.535903][ T7925] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 146.563070][ T7921] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 146.572876][ T7925] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 146.573781][ T7921] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 146.582377][ T7925] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 146.610443][ T7925] EXT4-fs (loop5): orphan cleanup on readonly fs [ 146.620334][ T7925] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3313: bg 0: block 34: padding at end of block bitmap is not set [ 146.640725][ T7925] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.3313: Failed to acquire dquot type 1 [ 146.655950][ T7925] EXT4-fs (loop5): 1 truncate cleaned up [ 146.664141][ T7925] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 146.716140][ T7928] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 146.719657][ T7922] loop9: detected capacity change from 0 to 40427 [ 146.752434][ T7922] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 146.762830][ T7922] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 146.772575][ T3939] EXT4-fs (loop5): unmounting filesystem. [ 146.773350][ T7922] F2FS-fs (loop9): Image doesn't support compression [ 146.812309][ T7922] F2FS-fs (loop9): Image doesn't support compression [ 146.848471][ T7922] F2FS-fs (loop9): invalid crc value [ 146.882661][ T7922] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 146.999493][ T7922] F2FS-fs (loop9): Start checkpoint disabled! [ 147.007575][ T7964] sch_fq: defrate 4294964870 ignored. [ 147.024118][ T7969] loop4: detected capacity change from 0 to 256 [ 147.031415][ T7922] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 147.044617][ T7969] exfat: Deprecated parameter 'namecase' [ 147.069373][ T7922] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 147.081169][ T7969] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 147.101429][ T7922] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 147.232469][ T287] syz-executor (287) used greatest stack depth: 20664 bytes left [ 147.241648][ T10] tipc: Disabling bearer [ 147.251638][ T10] tipc: Left network mode [ 147.508634][ T8025] loop1: detected capacity change from 0 to 128 [ 147.556813][ T8025] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 147.588783][ T8025] FAT-fs (loop1): Filesystem has been set read-only [ 147.603341][ T8025] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 147.638666][ T8044] xt_hashlimit: size too large, truncated to 1048576 [ 147.655854][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.666864][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.676461][ T8028] device bridge_slave_0 entered promiscuous mode [ 147.686932][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.695776][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.704155][ T8028] device bridge_slave_1 entered promiscuous mode [ 147.760120][ T10] device bridge_slave_1 left promiscuous mode [ 147.770244][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.781785][ T10] device bridge_slave_0 left promiscuous mode [ 147.788527][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.798537][ T10] device bridge0 left promiscuous mode [ 147.805313][ T10] device veth1_macvtap left promiscuous mode [ 147.813249][ T10] device veth0_vlan left promiscuous mode [ 147.912956][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3379'. [ 147.984656][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3382'. [ 148.006417][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.016366][ T8028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.024680][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.035149][ T8028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.046602][ T24] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 148.069543][ T8075] loop1: detected capacity change from 0 to 512 [ 148.076329][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.092114][ T8075] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.104718][ T8075] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.117721][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.129649][ T8075] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.3384: bad orphan inode 131083 [ 148.132386][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.142931][ T8075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.218418][ T8028] device veth0_vlan entered promiscuous mode [ 148.227599][ T8085] exfat: Deprecated parameter 'utf8' [ 148.233457][ T8085] exfat: Deprecated parameter 'namecase' [ 148.239798][ T8085] exfat: Deprecated parameter 'utf8' [ 148.247697][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 148.262991][ T8085] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 148.278865][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.281875][ T288] EXT4-fs (loop1): unmounting filesystem. [ 148.295253][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.304320][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.310806][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.328902][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.338476][ T24] usb 9-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 148.351990][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.361080][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.370549][ T24] usb 9-1: config 0 descriptor?? [ 148.379585][ T8057] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 148.406173][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.414784][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.426924][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.439874][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.448211][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.466101][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.477794][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.504735][ T8028] device veth1_macvtap entered promiscuous mode [ 148.515350][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.534030][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.553239][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.574516][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.606470][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.620088][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.637761][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.768744][ T8152] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 148.807543][ T24] zeroplus 0003:0C12:0030.0027: unknown main item tag 0x3 [ 148.834571][ T24] zeroplus 0003:0C12:0030.0027: item fetching failed at offset 20/40 [ 148.863202][ T24] zeroplus 0003:0C12:0030.0027: parse failed [ 148.892110][ T24] zeroplus: probe of 0003:0C12:0030.0027 failed with error -22 [ 148.986335][ T8181] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.000565][ T8181] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 149.018937][ T8181] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 149.045130][ T3970] usb 9-1: USB disconnect, device number 7 [ 149.163679][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 149.163694][ T28] audit: type=1400 audit(1784724594.261:688): avc: denied { getopt } for pid=8201 comm="syz.5.3444" laddr=fe80::a8aa:aaff:feaa:aaaa lport=14 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.205818][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 149.260688][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3453'. [ 149.272724][ T8219] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 149.293732][ T8221] FAT-fs (loop5): Directory bread(block 64) failed [ 149.317956][ T8221] FAT-fs (loop5): Directory bread(block 65) failed [ 149.318167][ T8223] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.327298][ T8221] FAT-fs (loop5): Directory bread(block 66) failed [ 149.346354][ T8223] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.353528][ T8221] FAT-fs (loop5): Directory bread(block 67) failed [ 149.372365][ T8221] FAT-fs (loop5): Directory bread(block 68) failed [ 149.378993][ T8221] FAT-fs (loop5): Directory bread(block 69) failed [ 149.389056][ T8221] FAT-fs (loop5): Directory bread(block 70) failed [ 149.394138][ T24] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 149.399445][ T8221] FAT-fs (loop5): Directory bread(block 71) failed [ 149.417612][ T8221] FAT-fs (loop5): Directory bread(block 72) failed [ 149.431723][ T8221] FAT-fs (loop5): Directory bread(block 73) failed [ 149.433669][ T24] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 149.498823][ T24] usb 2-1: config 0 has no interface number 0 [ 149.508081][ T8028] EXT4-fs (loop0): unmounting filesystem. [ 149.529293][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 149.547218][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.560447][ T24] usb 2-1: Product: syz [ 149.566838][ T24] usb 2-1: Manufacturer: syz [ 149.589291][ T24] usb 2-1: SerialNumber: syz [ 149.597658][ T24] usb 2-1: config 0 descriptor?? [ 149.638311][ T8254] exfat: Deprecated parameter 'utf8' [ 149.683868][ T8254] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 149.757475][ T8270] exfat: Deprecated parameter 'utf8' [ 149.785918][ T28] audit: type=1400 audit(1784724594.883:689): avc: denied { mounton } for pid=8268 comm="syz.0.3477" path="/syzcgroup/unified/syz0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 149.786477][ T8270] exfat: Deprecated parameter 'namecase' [ 149.913103][ T8270] exfat: Deprecated parameter 'utf8' [ 149.939680][ T8270] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 149.960020][ T8269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.982416][ T8269] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.3477: reserved inode found cleared - inode=1 [ 150.121899][ T24] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 150.140894][ T24] usb 2-1: No valid video chain found. [ 150.160862][ T24] usb 2-1: USB disconnect, device number 14 [ 150.183487][ T8285] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 150.229797][ T8285] EXT4-fs (loop5): orphan cleanup on readonly fs [ 150.305956][ T8285] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 150.324902][ T8285] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 150.338992][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.3483: Failed to acquire dquot type 0 [ 150.365764][ T8285] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 150.396009][ T8285] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 150.430186][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.3483: Failed to acquire dquot type 0 [ 150.460062][ T8285] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.3483: Freeing blocks not in datazone - block = 0, count = 4096 [ 150.490312][ T8285] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 150.511116][ T8285] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 150.539822][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.3483: Failed to acquire dquot type 0 [ 150.578616][ T8285] EXT4-fs (loop5): 1 orphan inode deleted [ 150.590808][ T8285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 150.624104][ T8313] tipc: Enabling of bearer rejected, failed to enable media [ 150.650596][ T8275] F2FS-fs (loop9): Test dummy encryption mode enabled [ 150.697267][ T8275] F2FS-fs (loop9): invalid crc value [ 150.710294][ T3939] EXT4-fs (loop5): unmounting filesystem. [ 150.740642][ T8275] F2FS-fs (loop9): Found nat_bits in checkpoint [ 150.821127][ T8275] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 150.851573][ T8334] EXT4-fs (loop8): Test dummy encryption mode enabled [ 150.894118][ T8334] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 150.992622][ T8355] binder: 8354:8355 ioctl c018620c 200000000000 returned -22 [ 151.002644][ T28] audit: type=1400 audit(1784724596.086:690): avc: denied { create } for pid=8351 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 151.030399][ T28] audit: type=1400 audit(1784724596.086:691): avc: denied { write } for pid=8351 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 151.336954][ T8380] xt_hashlimit: size too large, truncated to 1048576 [ 151.586837][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3533'. [ 151.806771][ T8078] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 151.967230][ T8429] set_capacity_and_notify: 12 callbacks suppressed [ 151.967252][ T8429] loop9: detected capacity change from 0 to 1024 [ 152.026355][ T8434] loop5: detected capacity change from 0 to 512 [ 152.053557][ T8434] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.124435][ T8434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 152.146183][ T8434] System zones: 1-12 [ 152.153472][ T8434] EXT4-fs (loop5): 1 truncate cleaned up [ 152.234803][ T8374] loop8: detected capacity change from 0 to 131072 [ 152.261516][ T8449] netlink: 'syz.5.3555': attribute type 1 has an invalid length. [ 152.279216][ T8374] F2FS-fs (loop8): Test dummy encryption mode enabled [ 152.296934][ T8374] F2FS-fs (loop8): invalid crc value [ 152.340195][ T8374] F2FS-fs (loop8): Found nat_bits in checkpoint [ 152.425442][ T8374] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 152.634890][ T19] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 152.835986][ T19] usb 10-1: unable to get BOS descriptor or descriptor too short [ 152.856248][ T19] usb 10-1: config index 0 descriptor too short (expected 198, got 134) [ 152.889044][ T19] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.915799][ T19] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.949556][ T19] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 152.972337][ T19] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.997159][ T19] usb 10-1: Product: syz [ 153.017981][ T19] usb 10-1: Manufacturer: syz [ 153.034542][ T19] usb 10-1: SerialNumber: syz [ 153.157164][ T8494] loop8: detected capacity change from 0 to 40427 [ 153.180650][ T8494] F2FS-fs (loop8): invalid crc value [ 153.206928][ T8494] F2FS-fs (loop8): Found nat_bits in checkpoint [ 153.243567][ T3970] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 153.261944][ T19] usb 10-1: 0:1 : does not exist [ 153.274114][ T19] usb 10-1: unit 255 not found! [ 153.303180][ T8494] F2FS-fs (loop8): Start checkpoint disabled! [ 153.304295][ T19] usb 10-1: USB disconnect, device number 9 [ 153.319243][ T8494] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 153.344101][ T8494] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 153.418891][ T315] kworker/u4:3: attempt to access beyond end of device [ 153.418891][ T315] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 153.453163][ T3970] usb 6-1: Using ep0 maxpacket: 16 [ 153.460886][ T3970] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 153.493116][ T3970] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 153.532974][ T3970] usb 6-1: config 0 interface 0 has no altsetting 0 [ 153.543058][ T3970] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 153.563583][ T3970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.593767][ T3970] usb 6-1: config 0 descriptor?? [ 153.713156][ T8488] loop1: detected capacity change from 0 to 131072 [ 153.721880][ T8488] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(512) [ 153.731858][ T8488] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.749972][ T8488] F2FS-fs (loop1): invalid crc value [ 153.808403][ T8488] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.810480][ T8530] loop8: detected capacity change from 0 to 4096 [ 153.854942][ T8530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.879107][ T8488] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 153.894393][ T8488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 153.894523][ T8530] EXT4-fs (loop8): Test dummy encryption mode enabled [ 153.930199][ T8530] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 153.952285][ T8530] System zones: 0-5 [ 154.005610][ T3970] uclogic 0003:2179:0077.0028: interface is invalid, ignoring [ 154.026058][ T8548] loop8: detected capacity change from 0 to 256 [ 154.205933][ T3970] usb 6-1: USB disconnect, device number 14 [ 154.390680][ T8585] loop8: detected capacity change from 0 to 256 [ 154.438231][ T8585] exFAT-fs (loop8): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 154.488965][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 154.488988][ T28] audit: type=1400 audit(1784724599.594:721): avc: denied { setattr } for pid=8584 comm="syz.8.3616" name="file1" dev="loop8" ino=1048936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.552290][ T8599] IPv6: Can't replace route, no match found [ 154.606305][ T8604] loop9: detected capacity change from 0 to 512 [ 154.669245][ T8604] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.670533][ T8620] loop1: detected capacity change from 0 to 256 [ 154.698274][ T8620] exfat: Deprecated parameter 'utf8' [ 154.708161][ T8604] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 154.744335][ T8620] exfat: Deprecated parameter 'namecase' [ 154.769174][ T8620] exfat: Deprecated parameter 'namecase' [ 154.772185][ T28] audit: type=1400 audit(1784724599.884:722): avc: denied { relabelto } for pid=8603 comm="syz.9.3625" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 154.811798][ T8630] EXT4-fs (loop8): 1 truncate cleaned up [ 154.818439][ T8620] exfat: Deprecated parameter 'utf8' [ 154.836925][ T8620] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 155.040221][ T3970] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 155.048793][ T8658] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 155.082829][ T8662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.214753][ T8680] ext4 filesystem being mounted at /692/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.229734][ T3970] usb 6-1: Using ep0 maxpacket: 8 [ 155.241250][ T3970] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.259845][ T3970] usb 6-1: config 0 interface 0 has no altsetting 0 [ 155.263529][ T8680] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 155.269709][ T3970] usb 6-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 155.287362][ T3970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.302896][ T3970] usb 6-1: config 0 descriptor?? [ 155.360741][ T8696] EXT4-fs: Ignoring removed bh option [ 155.368211][ T8696] EXT4-fs: Ignoring removed bh option [ 155.459339][ T6] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 155.473391][ T28] audit: type=1326 audit(1784724600.585:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.1.3675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 155.510769][ T28] audit: type=1326 audit(1784724600.616:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.1.3675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 155.543541][ T28] audit: type=1326 audit(1784724600.616:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.1.3675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 155.573763][ T28] audit: type=1326 audit(1784724600.616:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.1.3675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 155.607618][ T28] audit: type=1326 audit(1784724600.616:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.1.3675" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fdf39de99 code=0x7ffc0000 [ 155.711168][ T3970] lg-g15 0003:046D:C225.0029: collection stack underflow [ 155.720165][ T3970] lg-g15 0003:046D:C225.0029: item 0 2 0 12 parsing failed [ 155.731803][ T3970] lg-g15: probe of 0003:046D:C225.0029 failed with error -22 [ 155.749829][ T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.775624][ T6] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.788781][ T6] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 155.808906][ T6] usb 10-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 155.819336][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.819361][ T6] usb 10-1: Product: syz [ 155.819373][ T6] usb 10-1: Manufacturer: syz [ 155.838792][ T6] usb 10-1: SerialNumber: syz [ 155.924376][ T3970] usb 6-1: USB disconnect, device number 15 [ 156.098157][ T6] usb 10-1: Can't get UAC3 power state for id 10 [ 156.108233][ T6] usb 10-1: 0:2 : does not exist [ 156.113883][ T6] usb 10-1: BAAD SPEAKERPHONE c_chmask mismatch [ 156.122726][ T19] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.139944][ T6] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 156.149824][ T6] usb 10-1: USB disconnect, device number 10 [ 156.307759][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 156.318771][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.332626][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.344539][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.360565][ T1082] udevd[1082]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.386753][ T19] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.399193][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.413322][ T19] usb 2-1: config 0 descriptor?? [ 156.467829][ T28] audit: type=1400 audit(1784724601.577:728): avc: denied { listen } for pid=8782 comm="syz.5.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 156.515626][ T8787] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3709'. [ 156.550158][ T8791] EXT4-fs (loop5): 1 truncate cleaned up [ 156.606066][ T8796] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.626523][ T8798] device macsec1 entered promiscuous mode [ 156.640429][ T8798] device vlan1 entered promiscuous mode [ 156.664987][ T8798] device vlan1 left promiscuous mode [ 156.778882][ T28] audit: type=1400 audit(1784724601.888:729): avc: denied { create } for pid=8823 comm="syz.8.3726" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 156.817407][ T8829] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3729'. [ 156.830537][ T19] microsoft 0003:045E:07DA.002A: item 0 4 0 8 parsing failed [ 156.877509][ T19] microsoft 0003:045E:07DA.002A: parse failed [ 156.884238][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3735'. [ 156.895185][ T19] microsoft: probe of 0003:045E:07DA.002A failed with error -22 [ 156.904668][ T8841] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3735'. [ 156.916415][ T28] audit: type=1400 audit(1784724602.028:730): avc: denied { lock } for pid=8842 comm="syz.9.3733" path="socket:[45410]" dev="sockfs" ino=45410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 157.032442][ T40] usb 2-1: USB disconnect, device number 15 [ 157.058181][ T8867] set_capacity_and_notify: 6 callbacks suppressed [ 157.058201][ T8867] loop5: detected capacity change from 0 to 256 [ 157.080043][ T8867] exfat: Deprecated parameter 'utf8' [ 157.085787][ T8867] exfat: Deprecated parameter 'utf8' [ 157.094913][ T8867] exfat: Deprecated parameter 'namecase' [ 157.104077][ T8867] exfat: Deprecated parameter 'namecase' [ 157.114190][ T8867] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 157.164195][ T8882] loop8: detected capacity change from 0 to 256 [ 157.181407][ T8882] FAT-fs (loop8): Directory bread(block 64) failed [ 157.199593][ T8882] FAT-fs (loop8): Directory bread(block 65) failed [ 157.213709][ T8882] FAT-fs (loop8): Directory bread(block 66) failed [ 157.228088][ T8882] FAT-fs (loop8): Directory bread(block 67) failed [ 157.235880][ T8882] FAT-fs (loop8): Directory bread(block 68) failed [ 157.257104][ T8882] FAT-fs (loop8): Directory bread(block 69) failed [ 157.265729][ T8882] FAT-fs (loop8): Directory bread(block 70) failed [ 157.273922][ T8882] FAT-fs (loop8): Directory bread(block 71) failed [ 157.281677][ T8882] FAT-fs (loop8): Directory bread(block 72) failed [ 157.291679][ T8882] FAT-fs (loop8): Directory bread(block 73) failed [ 157.348554][ T8896] loop8: detected capacity change from 0 to 2048 [ 157.375537][ T8896] EXT4-fs error (device loop8): __ext4_iget:5104: inode #2: block 127754: comm syz.8.3761: invalid block [ 157.388807][ T8896] EXT4-fs (loop8): get root inode failed [ 157.396550][ T8896] EXT4-fs (loop8): mount failed [ 157.422417][ T8904] netlink: 'syz.5.3764': attribute type 2 has an invalid length. [ 157.513739][ T8912] loop8: detected capacity change from 0 to 512 [ 157.527353][ T8912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.583431][ T8912] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.3769: couldn't read orphan inode 16 (err -116) [ 157.600762][ T8912] EXT4-fs (loop8): Remounting filesystem read-only [ 157.608638][ T8912] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.628424][ T8912] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.3769: Failed to acquire dquot type 0 [ 157.642042][ T8912] EXT4-fs (loop8): Remounting filesystem read-only [ 157.684660][ T8928] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3775'. [ 158.035043][ T6] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 158.054079][ T8979] loop9: detected capacity change from 0 to 1024 [ 158.063737][ T8979] EXT4-fs: Ignoring removed bh option [ 158.132832][ T8989] loop9: detected capacity change from 0 to 4096 [ 158.214645][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 158.223009][ T6] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 158.243264][ T6] usb 6-1: config 0 interface 0 has no altsetting 0 [ 158.253157][ T6] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 158.265171][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.292110][ T6] usb 6-1: config 0 descriptor?? [ 158.428242][ T9024] loop1: detected capacity change from 0 to 2048 [ 158.436591][ T9026] loop9: detected capacity change from 0 to 512 [ 158.466027][ T9026] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.557510][ T9038] device dummy0 entered promiscuous mode [ 158.689023][ T9053] loop1: detected capacity change from 0 to 1024 [ 158.715996][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x2 [ 158.727121][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.735952][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.736512][ T9053] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.1.3832: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 158.744686][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.744714][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.744734][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.801668][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.810009][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.812374][ T9053] EXT4-fs error (device loop1) in ext4_delete_inline_entry:1822: Corrupt filesystem [ 158.819725][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.835884][ T9058] loop8: detected capacity change from 0 to 512 [ 158.841180][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.858721][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.867120][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.867916][ T9058] EXT4-fs: Ignoring removed i_version option [ 158.877724][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.892633][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.902311][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.914978][ T6] monterey 0003:0566:3004.002B: unknown main item tag 0x0 [ 158.915852][ T288] EXT4-fs unmount: 30 callbacks suppressed [ 158.915869][ T288] EXT4-fs (loop1): unmounting filesystem. [ 158.939402][ T9058] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.939403][ T6] monterey 0003:0566:3004.002B: hidraw0: USB HID v0.04 Device [HID 0566:3004] on usb-dummy_hcd.5-1/input0 [ 158.942194][ T6] usb 6-1: USB disconnect, device number 16 [ 158.966828][ T9058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.024001][ T9058] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 159.052492][ T9058] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.117945][ T4190] EXT4-fs (loop8): unmounting filesystem. [ 159.588939][ T9061] F2FS-fs (loop1): invalid crc value [ 159.619980][ T9061] F2FS-fs (loop1): Found nat_bits in checkpoint [ 159.663895][ T9061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 159.709649][ T9081] netlink: 'syz.5.3842': attribute type 2 has an invalid length. [ 159.734910][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 159.734923][ T28] audit: type=1326 audit(1784724604.852:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 159.808665][ T9088] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 159.830453][ T28] audit: type=1326 audit(1784724604.852:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 159.862753][ T28] audit: type=1326 audit(1784724604.892:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 159.921396][ T28] audit: type=1326 audit(1784724604.892:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 159.957702][ T28] audit: type=1326 audit(1784724604.892:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 159.984513][ T28] audit: type=1326 audit(1784724604.892:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 160.021026][ T28] audit: type=1326 audit(1784724604.892:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 160.105241][ T28] audit: type=1326 audit(1784724604.892:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 160.146753][ T9112] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.161636][ T9112] EXT4-fs (loop5): Test dummy encryption mode enabled [ 160.193752][ T9124] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.202180][ T9124] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.234655][ T28] audit: type=1326 audit(1784724604.892:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 160.234686][ T28] audit: type=1326 audit(1784724604.892:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9082 comm="syz.9.3843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fbb0539de99 code=0x7ffc0000 [ 160.255956][ T9112] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003] [ 160.256018][ T9112] System zones: 0-5 [ 160.261428][ T9112] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 160.313435][ T3939] EXT4-fs (loop5): unmounting filesystem. [ 160.353831][ T9133] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 160.353927][ T9133] ext4 filesystem being mounted at /524/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.379634][ T4190] EXT4-fs (loop8): unmounting filesystem. [ 160.498991][ T9127] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 160.499020][ T9127] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 160.501317][ T9127] F2FS-fs (loop9): Image doesn't support compression [ 160.504805][ T9127] F2FS-fs (loop9): Image doesn't support compression [ 160.507285][ T9127] F2FS-fs (loop9): invalid crc value [ 160.508511][ T9127] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 160.566330][ T9127] F2FS-fs (loop9): Start checkpoint disabled! [ 160.566974][ T9127] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 160.571767][ T9127] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 160.641440][ T9127] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 160.729656][ T9163] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.3878: inode #1: comm syz.1.3878: iget: illegal inode # [ 160.757333][ T9163] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3878: error while reading EA inode 1 err=-117 [ 160.780259][ T9163] EXT4-fs (loop1): 1 orphan inode deleted [ 160.789618][ T9168] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 160.794947][ T9163] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.828630][ T3939] EXT4-fs (loop5): unmounting filesystem. [ 160.849422][ T9127] F2FS-fs (loop9): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 160.863373][ T288] EXT4-fs (loop1): unmounting filesystem. [ 160.881124][ T9127] F2FS-fs (loop9): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 160.931082][ T9127] F2FS-fs (loop9): f2fs_enable_checkpoint() finishes, writeback:41, sync:28 [ 161.014581][ T9201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.045220][ T9201] EXT4-fs (loop1): 1 truncate cleaned up [ 161.057471][ T9201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 161.112105][ T288] EXT4-fs (loop1): unmounting filesystem. [ 161.123844][ T9208] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 161.136937][ T9208] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.160272][ T328] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 161.161092][ T328] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 161.161114][ T328] EXT4-fs (loop9): This should not happen!! Data will be lost [ 161.161114][ T328] [ 161.189736][ T4224] EXT4-fs (loop9): unmounting filesystem. [ 161.245992][ T40] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 161.330920][ T9233] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 161.396642][ T9233] exFAT-fs (loop8): error, invalid size(size(0) > aligned(9223372036854777344) [ 161.396642][ T9233] [ 161.421475][ T40] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 161.426028][ T9233] exFAT-fs (loop8): Filesystem has been set read-only [ 161.435689][ T9249] random: crng reseeded on system resumption [ 161.455341][ T40] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 161.480202][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 161.494724][ T40] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 161.508241][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.562642][ T40] usb 6-1: config 0 descriptor?? [ 161.564306][ T9254] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 161.588629][ T9195] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.820719][ T9294] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3937'. [ 161.871365][ T9296] FAT-fs (loop9): Directory bread(block 64) failed [ 161.897671][ T9296] FAT-fs (loop9): Directory bread(block 65) failed [ 161.915638][ T9296] FAT-fs (loop9): Directory bread(block 66) failed [ 161.924678][ T9296] FAT-fs (loop9): Directory bread(block 67) failed [ 161.934288][ T9296] FAT-fs (loop9): Directory bread(block 68) failed [ 161.943082][ T9296] FAT-fs (loop9): Directory bread(block 69) failed [ 161.954445][ T9296] FAT-fs (loop9): Directory bread(block 70) failed [ 161.962202][ T9296] FAT-fs (loop9): Directory bread(block 71) failed [ 162.007103][ T9296] FAT-fs (loop9): Directory bread(block 72) failed [ 162.015118][ T9296] FAT-fs (loop9): Directory bread(block 73) failed [ 163.036012][ T319] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 163.045461][ T40] hid-led 0003:1294:1320.002C: unknown main item tag 0x7 [ 163.076005][ T40] hid-led 0003:1294:1320.002C: hidraw0: USB HID v0.0c Device [HID 1294:1320] on usb-dummy_hcd.5-1/input0 [ 163.112936][ T40] hid-led 0003:1294:1320.002C: Riso Kagaku Webmail Notifier initialized [ 163.141361][ T40] usb 6-1: USB disconnect, device number 17 [ 163.172219][ T9315] set_capacity_and_notify: 14 callbacks suppressed [ 163.172241][ T9315] loop9: detected capacity change from 0 to 512 [ 163.173011][ T307] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 163.219309][ T307] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 163.235342][ T307] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 163.244520][ T9318] fido_id[9318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 163.246761][ T319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.295023][ T9315] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 163.306553][ T9315] EXT4-fs (loop9): orphan cleanup on readonly fs [ 163.317948][ T9315] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.3948: Failed to acquire dquot type 1 [ 163.333848][ T9315] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3948: bg 0: block 40: padding at end of block bitmap is not set [ 163.345777][ T9302] loop5: detected capacity change from 0 to 40427 [ 163.353296][ T9315] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 163.364284][ T319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.373398][ T9315] EXT4-fs (loop9): 1 truncate cleaned up [ 163.386003][ T9325] device bridge0 entered promiscuous mode [ 163.392560][ T9315] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 163.399618][ T9325] device macsec1 entered promiscuous mode [ 163.410056][ T9302] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 163.445909][ T319] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.459191][ T9302] F2FS-fs (loop5): invalid crc value [ 163.461597][ T319] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.467975][ T9315] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #16: comm syz.9.3948: corrupted xattr block 31 [ 163.481812][ T319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.504067][ T9315] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 163.509381][ T319] usb 9-1: config 0 descriptor?? [ 163.514364][ T9329] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #16: comm syz.9.3948: corrupted xattr block 31 [ 163.538218][ T9302] F2FS-fs (loop5): Found nat_bits in checkpoint [ 163.538264][ T9315] EXT4-fs error (device loop9): ext4_xattr_block_get:543: inode #16: comm syz.9.3948: corrupted xattr block 31 [ 163.570713][ T9329] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 163.585704][ T9315] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 163.600404][ T9329] EXT4-fs error (device loop9): ext4_get_link:104: inode #16: comm syz.9.3948: bad symlink. [ 163.612108][ T9315] EXT4-fs error (device loop9): ext4_get_link:104: inode #16: comm syz.9.3948: bad symlink. [ 163.639032][ T9302] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 163.655800][ T4224] EXT4-fs (loop9): unmounting filesystem. [ 163.694170][ T9302] F2FS-fs (loop5): Try to recover all the superblocks, ret: 0 [ 163.961156][ T319] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x1 [ 163.968662][ T9346] loop9: detected capacity change from 0 to 40427 [ 163.988049][ T9346] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 163.998022][ T9346] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 163.998413][ T319] plantronics 0003:047F:FFFF.002D: invalid report_count 40994 [ 163.998432][ T319] plantronics 0003:047F:FFFF.002D: item 0 2 1 9 parsing failed [ 163.998620][ T319] plantronics 0003:047F:FFFF.002D: parse failed [ 163.998641][ T319] plantronics: probe of 0003:047F:FFFF.002D failed with error -22 [ 163.999588][ T9346] F2FS-fs (loop9): invalid crc value [ 164.034168][ T9346] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 164.085618][ T9346] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 164.085644][ T9346] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 164.292356][ T319] usb 9-1: USB disconnect, device number 8 [ 164.363603][ T9400] loop5: detected capacity change from 0 to 16 [ 164.387258][ T9400] erofs: (device loop5): mounted with root inode @ nid 36. [ 164.408971][ T9408] loop9: detected capacity change from 0 to 256 [ 164.515246][ T9420] loop9: detected capacity change from 0 to 1024 [ 164.545643][ T9420] EXT4-fs: Ignoring removed nobh option [ 164.556981][ T9420] EXT4-fs: Ignoring removed bh option [ 164.603954][ T9420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 164.623762][ T9420] System zones: 0-1, 3-12 [ 164.664645][ T9420] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 164.692282][ T9422] loop5: detected capacity change from 0 to 40427 [ 164.711144][ T9416] loop1: detected capacity change from 0 to 40427 [ 164.719328][ T9422] F2FS-fs (loop5): invalid crc value [ 164.720624][ T4224] EXT4-fs (loop9): unmounting filesystem. [ 164.740070][ T9416] F2FS-fs (loop1): fault_injection options not supported [ 164.749106][ T9422] F2FS-fs (loop5): Found nat_bits in checkpoint [ 164.749458][ T9416] F2FS-fs (loop1): fault_type options not supported [ 164.777125][ T9416] F2FS-fs (loop1): invalid crc value [ 164.797835][ T9422] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 164.822361][ T9416] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.856858][ T3939] syz-executor: attempt to access beyond end of device [ 164.856858][ T3939] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.880755][ T9439] loop8: detected capacity change from 0 to 1024 [ 164.882108][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 164.882123][ T28] audit: type=1400 audit(1784724609.998:763): avc: denied { bind } for pid=9440 comm="syz.9.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.904920][ T9439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.946621][ T9439] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.954959][ T28] audit: type=1400 audit(1784724610.058:764): avc: denied { getopt } for pid=9440 comm="syz.9.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.961976][ T9416] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.026563][ T9439] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c018, mo2=0002] [ 165.058059][ T9439] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 165.068948][ T288] syz-executor: attempt to access beyond end of device [ 165.068948][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.068985][ T8276] ------------[ cut here ]------------ [ 165.094082][ T8276] kernel BUG at fs/buffer.c:2714! [ 165.107356][ T8276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 165.113673][ T8276] CPU: 1 PID: 8276 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 165.123349][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 165.135865][ T8276] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 165.144185][ T8276] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 c8 de e7 ff e9 b0 fe ff ff e8 3e 54 a2 ff 0f 0b e8 37 54 a2 ff <0f> 0b e8 30 54 a2 ff 0f 0b e8 29 54 a2 ff 0f 0b e8 22 54 a2 ff 0f [ 165.174103][ T8276] RSP: 0018:ffffc9000bb77ca0 EFLAGS: 00010293 [ 165.181216][ T8276] RAX: ffffffff81cf1209 RBX: 0000000000000000 RCX: ffff888127396540 [ 165.191073][ T8276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.199502][ T8276] RBP: ffffc9000bb77cf0 R08: ffff88813305a0af R09: 1ffff1102660b415 [ 165.208233][ T8276] R10: dffffc0000000000 R11: ffffed102660b416 R12: 0000000000000000 [ 165.217136][ T8276] R13: 1ffff1102660b415 R14: ffff88813305a0a8 R15: 0000000000003801 [ 165.227577][ T8276] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 165.241814][ T8276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.249866][ T8276] CR2: 0000001b32d23ffc CR3: 0000000125302000 CR4: 00000000003506a0 [ 165.260018][ T8276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.271345][ T8276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.283152][ T8276] Call Trace: [ 165.286610][ T8276] [ 165.290501][ T8276] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 165.298717][ T8276] submit_bh+0x1f/0x30 [ 165.303525][ T8276] write_mmp_block_thawed+0x397/0x510 [ 165.309967][ T8276] ? __cfi_schedule_timeout+0x10/0x10 [ 165.318056][ T8276] ? read_mmp_block+0x700/0x700 [ 165.323558][ T8276] ? __cfi_process_timeout+0x10/0x10 [ 165.329040][ T8276] ? switch_mm_irqs_off+0x730/0x960 [ 165.335661][ T8276] write_mmp_block+0x138/0x2b0 [ 165.341066][ T8276] kmmpd+0x382/0x940 [ 165.346417][ T8276] kthread+0x281/0x320 [ 165.351961][ T8276] ? __cfi_kmmpd+0x10/0x10 [ 165.357115][ T8276] ? __cfi_kthread+0x10/0x10 [ 165.365288][ T8276] ret_from_fork+0x1f/0x30 [ 165.369984][ T8276] [ 165.373197][ T8276] Modules linked in: [ 165.380326][ T8276] ---[ end trace 0000000000000000 ]--- [ 165.396800][ T4190] EXT4-fs (loop8): unmounting filesystem. [ 165.429348][ T8276] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 165.435883][ T8276] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 c8 de e7 ff e9 b0 fe ff ff e8 3e 54 a2 ff 0f 0b e8 37 54 a2 ff <0f> 0b e8 30 54 a2 ff 0f 0b e8 29 54 a2 ff 0f 0b e8 22 54 a2 ff 0f [ 165.459556][ T8276] RSP: 0018:ffffc9000bb77ca0 EFLAGS: 00010293 [ 165.467170][ T8276] RAX: ffffffff81cf1209 RBX: 0000000000000000 RCX: ffff888127396540 [ 165.476874][ T8276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.485732][ T8276] RBP: ffffc9000bb77cf0 R08: ffff88813305a0af R09: 1ffff1102660b415 [ 165.498529][ T8276] R10: dffffc0000000000 R11: ffffed102660b416 R12: 0000000000000000 [ 165.510711][ T8276] R13: 1ffff1102660b415 R14: ffff88813305a0a8 R15: 0000000000003801 [ 165.522501][ T8276] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 165.537005][ T8276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.545316][ T8276] CR2: 000000110c2af7c1 CR3: 0000000122efb000 CR4: 00000000003506b0 [ 165.558951][ T8276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.568869][ T8276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.584655][ T8276] Kernel panic - not syncing: Fatal exception [ 165.585760][ T28] audit: type=1400 audit(1784724610.709:765): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 165.585786][ T28] audit: type=1400 audit(1784724610.709:766): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.585805][ T28] audit: type=1400 audit(1784724610.709:767): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.585825][ T28] audit: type=1400 audit(1784724610.709:768): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.585843][ T28] audit: type=1400 audit(1784724610.709:769): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.585861][ T28] audit: type=1400 audit(1784724610.709:770): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.585880][ T28] audit: type=1400 audit(1784724610.709:771): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.767415][ T8276] Kernel Offset: disabled [ 165.772118][ T8276] Rebooting in 86400 seconds..