last executing test programs: 3.151245877s ago: executing program 2 (id=1676): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0xfd, 0xd9, 0xfffff038}, {0x20, 0x0, 0x4, 0xfffef034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3.067158738s ago: executing program 2 (id=1677): r0 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@mcast2, @in6=@loopback, 0x1, 0x0, 0x4e22, 0x4, 0xa, 0x0, 0x20}, {0x4ed2b3f1, 0x1, 0xfffffffffffff838, 0x8, 0x0, 0x3, 0xffffffffffffffff, 0x8000000000}, {0x3, 0x1, 0x0, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff80, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x2, 0x1, 0x0, 0x5, 0x2}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 3.066068978s ago: executing program 2 (id=1678): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast1, 0x400006}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 3.054322418s ago: executing program 2 (id=1679): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000980)='./file2\x00', 0x41, &(0x7f0000000a00), 0x64, 0x50b, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43]}, 0x2f) 2.851918901s ago: executing program 2 (id=1681): r0 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast1, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@link_local={0xb}, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @empty, @remote, [@hopopts={0x3a}, @dstopts={0x87}]}}}}}}}, 0x0) 2.727772783s ago: executing program 2 (id=1683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)='D]', 0x2}, {0x0}], 0x2) 2.727683513s ago: executing program 32 (id=1683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)='D]', 0x2}, {0x0}], 0x2) 2.326339318s ago: executing program 1 (id=1694): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 2.321427748s ago: executing program 1 (id=1695): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000a40)) 2.308792889s ago: executing program 0 (id=1696): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6e6f646973636172642c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6e6f666c7573685f6d657267652c64697361626c655f726f6c6c5f666f72776172642c696e6c696e655f646174612c6673796e635f6d6f64653d706f7369782c686561702c6e6f696e6c696e655f646174612c6e6f657874656e745f63616368652c6d6f64653d61646170746976652c6a71666d743d7666736f6c642c757365725f78617474722c00779cd4f02894cf964d909c186aac251e773b07a2a2349d810b3ec41107242d9e37b999afd91d5fe52bdddd57868a70f0b28523203ce742ef793e984a3e5c4fb9fa37eec6c48714f05711f8f7206ba61dcb3d975e8b544ca8aae49633e3cf0d015e32276cf811c1900db5f8e56ba59a7ec100000023000000000000000000"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x183f43, 0x8a) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0xc010f508, 0x0) 2.267684549s ago: executing program 1 (id=1697): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x6, 0x20, 0x62, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xbacc, 0x8}, [@mixer_unit={0x9, 0x24, 0x4, 0x1, 0x40, "9f999fe4"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x5, 0x80, "bc02fa"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0xf7, 0x6, {0x7, 0x25, 0x1, 0x1, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9, 0x10}, @as_header={0x7, 0x24, 0x1, 0x48, 0xc0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0x4, 0x6, {0x7, 0x25, 0x1, 0x2, 0x6, 0xff01}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 2.067787052s ago: executing program 4 (id=1701): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0xa, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "4c688a4f"}, @global=@item_012={0x1, 0x1, 0x7, 'J'}]}}, 0x0}, 0x0) 1.855448605s ago: executing program 0 (id=1703): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x4b65, &(0x7f00000007c0)={0x2, {0x2, 0x0, 0x0, 0x0, 0x8000}}) 1.846269595s ago: executing program 5 (id=1684): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.775594406s ago: executing program 5 (id=1704): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.774507896s ago: executing program 5 (id=1705): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@random="cf599d3baed5", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 1.719627596s ago: executing program 5 (id=1706): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8052, &(0x7f0000000140)={[{@dioread_lock}, {@sb={'sb', 0x3d, 0xd69a}}, {@lazytime}, {@test_dummy_encryption_v1}, {@grpid}, {@noacl}, {@grpjquota}, {@sb={'sb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}]}, 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x100) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x6611, 0x0) 1.592463678s ago: executing program 5 (id=1707): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x7, "5ec0b2b1"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0d00be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 1.587340738s ago: executing program 0 (id=1708): socket(0x15, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 1.480592s ago: executing program 0 (id=1709): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) execve(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 1.139163215s ago: executing program 0 (id=1710): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.134961835s ago: executing program 3 (id=1711): socket$inet6_tcp(0xa, 0x1, 0x0) setregid(0xee00, 0xee00) keyctl$session_to_parent(0x12) 1.123157875s ago: executing program 3 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x7458a69103aa9f16}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x20044000) 1.112060955s ago: executing program 3 (id=1713): syz_clone(0x20001200, 0x0, 0x0, &(0x7f0000002800), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 1.094505875s ago: executing program 3 (id=1714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000100001042abd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0301000000000000400012800b00010065727370616e000030000280040012000600180067040000050008000900000006000e"], 0x74}}, 0x0) 1.020695526s ago: executing program 3 (id=1715): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x9, 0x5, 0xb, 0x0, 0xfffffff0, 0x7}) 1.002771246s ago: executing program 0 (id=1716): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a9"], 0x0}, 0x0) 905.721847ms ago: executing program 3 (id=1717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x20, 0x10, 0x8, {0x8, 0x5, "debc596eac3a"}}, 0x0, 0x0, 0x0}, 0x0) 316.211696ms ago: executing program 1 (id=1718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4d) 255.718897ms ago: executing program 1 (id=1719): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4d8, &(0x7f0000000a40)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) 128.234859ms ago: executing program 4 (id=1720): unshare(0x2040400) r0 = socket$unix(0x1, 0x2, 0x0) listen(r0, 0x0) 90.605789ms ago: executing program 4 (id=1721): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x7, 0x1) 30.0751ms ago: executing program 4 (id=1722): setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) 27.80414ms ago: executing program 4 (id=1732): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x7fffffffffffffff) 175.43µs ago: executing program 1 (id=1723): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2e) 0s ago: executing program 4 (id=1724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a92", 0x4, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) kernel console output (not intermixed with test programs): =bluetooth_socket permissive=1 [ 58.714332][ T23] audit: type=1400 audit(1747835584.670:299): avc: denied { execmem } for pid=2053 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.750560][ T23] audit: type=1400 audit(1747835584.670:300): avc: denied { block_suspend } for pid=2053 comm="syz.2.732" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.778137][ T23] audit: type=1326 audit(1747835584.710:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f710f7a2969 code=0x0 [ 58.868262][ T2061] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 58.885682][ T2061] ext4 filesystem being mounted at /156/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 59.115250][ T2049] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 59.135179][ T2049] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 59.164654][ T2049] F2FS-fs (loop0): invalid crc value [ 59.220743][ T2049] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 59.229614][ T2049] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 59.323829][ T337] attempt to access beyond end of device [ 59.323829][ T337] loop0: rw=2049, want=45104, limit=40427 [ 59.346965][ T2085] netlink: 277 bytes leftover after parsing attributes in process `syz.2.744'. [ 59.419101][ T2037] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 59.420054][ T23] audit: type=1326 audit(1747835585.380:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.2.745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eb98aa969 code=0x0 [ 59.427916][ T2037] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.464874][ T2037] F2FS-fs (loop3): invalid crc value [ 59.486840][ T2037] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.553866][ T2037] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 59.563389][ T2037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 59.662428][ T342] F2FS-fs (loop3): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 59.695153][ T2105] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 59.753329][ T2105] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 59.763916][ T2105] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 59.775967][ T2105] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 59.787340][ T2105] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 59.798332][ T2105] EXT4-fs error (device loop1) in ext4_setattr:5884: error 27 [ 59.807543][ T23] audit: type=1400 audit(1747835585.770:303): avc: denied { rename } for pid=2104 comm="syz.1.750" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.807972][ T2108] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 59.833498][ T553] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 59.852375][ T23] audit: type=1400 audit(1747835585.770:304): avc: denied { unlink } for pid=2104 comm="syz.1.750" name="file3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.017361][ T2103] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 60.033578][ T2103] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 60.079649][ T2103] F2FS-fs (loop0): Found nat_bits in checkpoint [ 60.158240][ T2103] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 60.168210][ T2103] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 60.187304][ T2128] UHID_CREATE from different security context by process 337 (syz.1.757), this is not allowed. [ 60.216524][ T2120] EXT4-fs (loop3): Ignoring removed nobh option [ 60.242034][ T553] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 60.251930][ T2120] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 60.264907][ T553] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 60.294024][ T553] usb 5-1: config 220 has no interface number 2 [ 60.302272][ T553] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 60.317406][ T553] usb 5-1: config 220 interface 0 has no altsetting 0 [ 60.327042][ T553] usb 5-1: config 220 interface 76 has no altsetting 0 [ 60.335770][ T553] usb 5-1: config 220 interface 1 has no altsetting 0 [ 60.384161][ T2120] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 60.502144][ T553] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 60.527083][ T553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.556956][ T553] usb 5-1: Product: syz [ 60.568393][ T23] audit: type=1400 audit(1747835586.530:305): avc: denied { watch watch_reads } for pid=2160 comm="syz.2.774" path="/167" dev="tmpfs" ino=26215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.608694][ T553] usb 5-1: Manufacturer: syz [ 60.614860][ T553] usb 5-1: SerialNumber: syz [ 60.660364][ T23] audit: type=1400 audit(1747835586.570:306): avc: denied { create } for pid=2162 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 60.710474][ T2171] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 60.901987][ T554] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 60.972528][ T553] usb 5-1: selecting invalid altsetting 0 [ 60.979991][ T553] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 60.987973][ T553] uvcvideo: No valid video chain found. [ 61.036390][ T553] usb 5-1: USB disconnect, device number 7 [ 61.082082][ T341] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 61.234315][ T2187] F2FS-fs (loop1): Test dummy encryption mode enabled [ 61.247775][ T2187] F2FS-fs (loop1): invalid crc value [ 61.259251][ T2187] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.272164][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.285870][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.301089][ T554] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 61.303998][ T2187] F2FS-fs (loop1): Start checkpoint disabled! [ 61.313253][ T554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.321697][ T2187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 61.333907][ T554] usb 4-1: config 0 descriptor?? [ 61.349450][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 61.390515][ T2187] VFS:Filesystem freeze failed [ 61.482109][ T341] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 61.482123][ T341] usb 3-1: config 0 has no interface number 0 [ 61.482155][ T341] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.482168][ T341] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.482194][ T341] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 61.482207][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.482995][ T341] usb 3-1: config 0 descriptor?? [ 61.865337][ T23] audit: type=1400 audit(1747835587.830:307): avc: denied { connect } for pid=2208 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.983736][ T2211] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 61.983736][ T2211] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 61.983736][ T2211] [ 62.013897][ T2211] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,jqfmt=vfsv1,barrier=0x0000000000080000,max_batch_time=0x0000000000000008,nouser_xattr,resuid=0x0000000000000000,nombcache,noauto_da_alloc,nolazytime,,errors=continue [ 62.053145][ T554] hid-led: probe of 0003:0FC5:B080.0011 failed with error -71 [ 62.065710][ T554] usb 4-1: USB disconnect, device number 9 [ 62.262104][ T341] uclogic 0003:28BD:0094.0012: failed retrieving string descriptor #100: -71 [ 62.262126][ T341] uclogic 0003:28BD:0094.0012: failed retrieving pen parameters: -71 [ 62.262149][ T341] uclogic 0003:28BD:0094.0012: pen probing failed: -71 [ 62.298472][ T341] uclogic 0003:28BD:0094.0012: failed probing parameters: -71 [ 62.298542][ T341] uclogic: probe of 0003:28BD:0094.0012 failed with error -71 [ 62.302729][ T341] usb 3-1: USB disconnect, device number 9 [ 62.652225][ T509] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 62.742069][ T554] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.882107][ T341] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.912101][ T509] usb 2-1: Using ep0 maxpacket: 8 [ 62.982082][ T554] usb 5-1: Using ep0 maxpacket: 16 [ 63.032306][ T509] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 63.044420][ T509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.055670][ T509] usb 2-1: config 0 descriptor?? [ 63.112196][ T554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.129270][ T553] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.141373][ T554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.156525][ T554] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 63.169291][ T554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.182682][ T554] usb 5-1: config 0 descriptor?? [ 63.252093][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 63.269163][ T341] usb 4-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00 [ 63.279291][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.289175][ T341] usb 4-1: config 0 descriptor?? [ 63.392279][ T553] usb 3-1: Using ep0 maxpacket: 16 [ 63.512313][ T553] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 63.525667][ T553] usb 3-1: config 4 has no interface number 0 [ 63.532050][ T553] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 63.534979][ T509] wacom 0003:056A:00B4.0013: unknown main item tag 0x0 [ 63.543305][ T553] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 63.550931][ T509] wacom 0003:056A:00B4.0013: unknown main item tag 0x0 [ 63.563345][ T553] usb 3-1: config 4 interface 51 has no altsetting 0 [ 63.577127][ T509] wacom 0003:056A:00B4.0013: unknown main item tag 0x0 [ 63.600471][ T509] wacom 0003:056A:00B4.0013: unknown main item tag 0x0 [ 63.610718][ T509] wacom 0003:056A:00B4.0013: unknown main item tag 0x0 [ 63.621288][ T509] wacom 0003:056A:00B4.0013: unknown main item tag 0x0 [ 63.632543][ T509] wacom 0003:056A:00B4.0013: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 63.648037][ T509] wacom 0003:056A:00B4.0013: hidraw0: USB HID vff.fb Device [HID 056a:00b4] on usb-dummy_hcd.1-1/input0 [ 63.665422][ T509] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B4.0013/input/input9 [ 63.673217][ T554] hid-picolcd 0003:04D8:F002.0014: collection stack underflow [ 63.682047][ T23] audit: type=1400 audit(1747835589.650:308): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=27154 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.691376][ T554] hid-picolcd 0003:04D8:F002.0014: item 0 4 0 12 parsing failed [ 63.724847][ T23] audit: type=1400 audit(1747835589.650:309): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=27154 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.732628][ T554] hid-picolcd 0003:04D8:F002.0014: device report parse failed [ 63.771008][ T554] hid-picolcd: probe of 0003:04D8:F002.0014 failed with error -22 [ 63.797039][ T341] wacom 0003:056A:0014.0015: unbalanced collection at end of report description [ 63.809201][ T553] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 63.817343][ T23] audit: type=1400 audit(1747835589.730:310): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=27154 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.822243][ T553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.870964][ T341] wacom 0003:056A:0014.0015: parse failed [ 63.880668][ T341] wacom: probe of 0003:056A:0014.0015 failed with error -22 [ 63.909992][ T509] usb 2-1: USB disconnect, device number 10 [ 63.918014][ T553] usb 3-1: Product: syz [ 63.932027][ T553] usb 3-1: Manufacturer: syz [ 63.941021][ T553] usb 3-1: SerialNumber: syz [ 63.966742][ T5] usb 5-1: USB disconnect, device number 8 [ 63.982212][ T2230] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 63.992070][ T2230] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 64.005707][ T18] usb 4-1: USB disconnect, device number 10 [ 64.222132][ T553] cdc_eem: probe of 3-1:4.51 failed with error -71 [ 64.235114][ T553] usb 3-1: USB disconnect, device number 10 [ 64.277854][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 64.367534][ T2252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.812'. [ 64.613457][ T2292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.831'. [ 64.808758][ T2324] xt_hashlimit: size too large, truncated to 1048576 [ 64.829330][ T2318] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 64.840362][ T2318] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 64.853138][ T2318] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 64.867076][ T2318] EXT4-fs error (device loop0) in ext4_orphan_del:3257: error 27 [ 64.882899][ T2318] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 64.894724][ T2318] EXT4-fs error (device loop0) in ext4_orphan_cleanup:2816: error 27 [ 64.910814][ T2314] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue [ 64.938179][ T2318] EXT4-fs (loop0): 1 truncate cleaned up [ 64.948353][ T2318] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 64.965649][ T2318] ext4 filesystem being mounted at /122/file2 supports timestamps until (%ptR?) (0x7fffffff) [ 65.017402][ T2318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:402: comm syz.0.843: inode #59392: comm syz.0.843: iget: illegal inode # [ 65.037680][ T2318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:407: comm syz.0.843: error while reading EA inode 59392 err=-117 [ 65.323185][ T23] audit: type=1400 audit(1747835591.290:311): avc: denied { mount } for pid=2344 comm="syz.2.854" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 65.387886][ T2349] option changes via remount are deprecated (pid=2348 comm=syz.2.856) [ 65.398265][ T23] audit: type=1400 audit(1747835591.350:312): avc: denied { remount } for pid=2348 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.654260][ T2355] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 65.664573][ T2355] ext4 filesystem being mounted at /176/bus supports timestamps until (%ptR?) (0x7fffffff) [ 65.684143][ T2343] F2FS-fs (loop3): invalid crc value [ 65.704609][ T2343] F2FS-fs (loop3): Start checkpoint disabled! [ 65.711691][ T2343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 65.726247][ T2341] F2FS-fs (loop0): invalid crc value [ 65.757105][ T2355] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 65.789889][ T2355] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 65.790831][ T2341] F2FS-fs (loop0): Found nat_bits in checkpoint [ 65.868880][ T2381] mmap: syz.1.867 (2381): VmData 40833024 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 65.873633][ T2341] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 65.894523][ T2341] SELinux: (dev loop0, type f2fs) getxattr errno 2 [ 66.045639][ T2390] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 66.059143][ T2390] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.068740][ T2390] EXT4-fs error (device loop2): mb_free_blocks:1458: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 66.092293][ T2390] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 220 vs 221 free clusters [ 66.109572][ T2390] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 66.126013][ T2390] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #11: comm syz.2.871: invalid indirect mapped block 1 (level 1) [ 66.149445][ T2390] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 66.161503][ T2390] EXT4-fs error (device loop2) in ext4_orphan_del:3257: error 27 [ 66.173846][ T2390] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 66.184731][ T2390] EXT4-fs (loop2): 1 truncate cleaned up [ 66.191115][ T2390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 66.221116][ T2394] FAT-fs (loop3): Directory bread(block 64) failed [ 66.238253][ T2394] FAT-fs (loop3): Directory bread(block 65) failed [ 66.260083][ T2394] FAT-fs (loop3): Directory bread(block 66) failed [ 66.268567][ T23] audit: type=1400 audit(1747835592.230:313): avc: denied { mount } for pid=2389 comm="syz.2.871" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.268687][ T2394] FAT-fs (loop3): Directory bread(block 67) failed [ 66.304641][ T384] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 66.310024][ T23] audit: type=1400 audit(1747835592.270:314): avc: denied { unmount } for pid=340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.316589][ T2394] FAT-fs (loop3): Directory bread(block 68) failed [ 66.346067][ T2394] FAT-fs (loop3): Directory bread(block 69) failed [ 66.354660][ T2394] FAT-fs (loop3): Directory bread(block 70) failed [ 66.362780][ T2394] FAT-fs (loop3): Directory bread(block 71) failed [ 66.370167][ T2394] FAT-fs (loop3): Directory bread(block 72) failed [ 66.377721][ T2394] FAT-fs (loop3): Directory bread(block 73) failed [ 66.552007][ T384] usb 2-1: Using ep0 maxpacket: 32 [ 66.558437][ T23] audit: type=1326 audit(1747835592.520:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2371 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5107d0969 code=0x7fc00000 [ 66.702200][ T384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.715637][ T384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.728155][ T384] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 66.738628][ T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.748620][ T384] usb 2-1: config 0 descriptor?? [ 66.802314][ T2422] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.825006][ T2424] tipc: Started in network mode [ 66.830845][ T2424] tipc: Own node identity ff010000000000000000000000000001, cluster identity 4711 [ 66.842321][ T2424] tipc: Enabling of bearer rejected, failed to enable media [ 67.103509][ T2430] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.146152][ T2430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.234547][ T384] hid-generic 0003:044E:121E.0016: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.1-1/input0 [ 67.464804][ T5] usb 2-1: USB disconnect, device number 11 [ 67.533354][ T2483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 67.551133][ T2483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 67.564495][ T2483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 67.662009][ T553] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 67.912208][ T553] usb 3-1: Using ep0 maxpacket: 16 [ 68.202119][ T553] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 68.226088][ T553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.237831][ T553] usb 3-1: Product: syz [ 68.243127][ T553] usb 3-1: Manufacturer: syz [ 68.255157][ T553] usb 3-1: SerialNumber: syz [ 68.263047][ T553] usb 3-1: config 0 descriptor?? [ 68.533836][ T2565] EXT4-fs (loop3): Ignoring removed oldalloc option [ 68.536994][ T2563] FAT-fs (loop1): Directory bread(block 22913) failed [ 68.541593][ T2565] EXT4-fs (loop3): Ignoring removed nobh option [ 68.554610][ T2563] FAT-fs (loop1): Directory bread(block 22914) failed [ 68.564767][ T2563] FAT-fs (loop1): Directory bread(block 22915) failed [ 68.571615][ T2565] EXT4-fs error (device loop3): ext4_orphan_get:1238: inode #15: comm syz.3.948: iget: bad extended attribute block 1 [ 68.572933][ T2563] FAT-fs (loop1): Directory bread(block 22916) failed [ 68.590236][ T2565] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.948: couldn't read orphan inode 15 (err -117) [ 68.598181][ T2563] FAT-fs (loop1): Directory bread(block 22917) failed [ 68.614449][ T2565] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,nobh,resgid=0x0000000000000000,noload,journal_dev=0x0000000000000003,auto_da_alloc,,errors=continue [ 68.625250][ T2563] FAT-fs (loop1): Directory bread(block 22918) failed [ 68.658457][ T2563] FAT-fs (loop1): Directory bread(block 22919) failed [ 68.668080][ T2563] FAT-fs (loop1): Directory bread(block 22920) failed [ 68.678281][ T2563] FAT-fs (loop1): Directory bread(block 22921) failed [ 68.686627][ T2563] FAT-fs (loop1): Directory bread(block 22922) failed [ 68.690948][ T2565] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 13: comm syz.3.948: lblock 0 mapped to illegal pblock 13 (length 1) [ 68.698731][ T5] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 68.718466][ T2565] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1049: inode #2: lblock 0: comm syz.3.948: error -117 reading directory block [ 68.781357][ T553] usb 3-1: USB disconnect, device number 11 [ 68.910322][ T23] audit: type=1326 audit(1747835594.870:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2570 comm="syz.3.949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60f14ba969 code=0x0 [ 69.102145][ T5] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 69.113848][ T5] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.172190][ T384] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 69.282177][ T5] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.295319][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.304829][ T5] usb 5-1: Product: syz [ 69.310493][ T5] usb 5-1: Manufacturer: syz [ 69.316354][ T5] usb 5-1: SerialNumber: syz [ 69.323705][ T5] usb 5-1: config 0 descriptor?? [ 69.365752][ T5] usb 5-1: selecting invalid altsetting 0 [ 69.542181][ T384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.555624][ T384] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 69.591181][ T2579] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.612601][ T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.633368][ T384] usb 2-1: config 0 descriptor?? [ 69.652098][ T2597] EXT4-fs (loop2): Ignoring removed nobh option [ 69.665971][ T2597] EXT4-fs error (device loop2): ext4_ext_check_inode:543: inode #11: comm syz.2.959: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 69.670288][ T18] usb 5-1: USB disconnect, device number 9 [ 69.686817][ T2579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.701758][ T2597] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.959: couldn't read orphan inode 11 (err -117) [ 69.729810][ T2597] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue [ 69.786179][ T2597] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:455: comm syz.2.959: Invalid block bitmap block 0 in block_group 0 [ 69.806427][ T2597] Quota error (device loop2): write_blk: dquota write failed [ 69.816118][ T2597] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 69.841454][ T1194] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 70.033396][ T2616] SELinux: Context : is not valid (left unmapped). [ 70.044934][ T23] audit: type=1400 audit(1747835596.010:317): avc: denied { relabelto } for pid=2615 comm="syz.0.966" name="rdma.current" dev="tmpfs" ino=30011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 70.083770][ T23] audit: type=1400 audit(1747835596.010:318): avc: denied { associate } for pid=2615 comm="syz.0.966" name="rdma.current" dev="tmpfs" ino=30011 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 70.124865][ T384] hid-generic 0003:046D:C222.0017: unbalanced collection at end of report description [ 70.137388][ T23] audit: type=1400 audit(1747835596.020:319): avc: denied { unlink } for pid=337 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=30011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 70.169192][ T384] hid-generic: probe of 0003:046D:C222.0017 failed with error -22 [ 70.231995][ T5] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 70.357082][ T553] usb 2-1: USB disconnect, device number 12 [ 70.602233][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.618710][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 70.636294][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.655382][ T5] usb 3-1: config 0 descriptor?? [ 70.782059][ T384] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 70.983062][ T2663] EXT4-fs (loop1): Ignoring removed oldalloc option [ 70.996864][ T2663] EXT4-fs (loop1): Ignoring removed nobh option [ 71.006730][ T2663] EXT4-fs error (device loop1): ext4_orphan_get:1238: inode #15: comm syz.1.986: iget: bad extended attribute block 1 [ 71.029060][ T2663] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.986: couldn't read orphan inode 15 (err -117) [ 71.031162][ T2665] EXT4-fs (loop3): 1 orphan inode deleted [ 71.045662][ T2663] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,nobh,resgid=0x0000000000000000,noload,journal_dev=0x0000000000000003,auto_da_alloc,,errors=continue [ 71.052968][ T2665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 71.072928][ T384] usb 5-1: Using ep0 maxpacket: 32 [ 71.083050][ T2665] ext4 filesystem being mounted at /230/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 71.124084][ T2663] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 13: comm syz.1.986: lblock 0 mapped to illegal pblock 13 (length 1) [ 71.133293][ T5] hid-generic 0003:046D:C222.0018: unbalanced collection at end of report description [ 71.141373][ T2663] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1049: inode #2: lblock 0: comm syz.1.986: error -117 reading directory block [ 71.168421][ T5] hid-generic: probe of 0003:046D:C222.0018 failed with error -22 [ 71.252165][ T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.272513][ T384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.289127][ T384] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 71.303635][ T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.315560][ T384] usb 5-1: config 0 descriptor?? [ 71.410372][ T5] usb 3-1: USB disconnect, device number 12 [ 71.572880][ T2685] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 71.596131][ T2685] ext4 filesystem being mounted at /213/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 71.764542][ T23] audit: type=1400 audit(1747835597.730:320): avc: denied { set_context_mgr } for pid=2699 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.796573][ T2702] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1002'. [ 71.815756][ T384] hid-generic 0003:044E:121E.0019: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.4-1/input0 [ 71.956128][ T2715] tmpfs: Cannot retroactively limit inodes [ 72.096250][ T5] usb 5-1: USB disconnect, device number 10 [ 72.206827][ T2729] EXT4-fs (loop2): 1 orphan inode deleted [ 72.218279][ T2729] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 72.232939][ T2729] ext4 filesystem being mounted at /200/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 72.264005][ T2712] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 72.283731][ T2712] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.316276][ T2712] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.359142][ T2712] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.370944][ T2712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.612017][ T509] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 72.785596][ T2766] tipc: Bearer : already 2 bearers with priority 10 [ 72.798677][ T2766] tipc: Bearer : trying with adjusted priority [ 72.810085][ T2766] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 72.992196][ T509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.008317][ T509] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 73.025213][ T509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.038181][ T509] usb 4-1: config 0 descriptor?? [ 73.122115][ T5] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 73.136368][ T341] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 73.382134][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 73.410823][ T2787] EXT4-fs (loop0): Ignoring removed orlov option [ 73.421324][ T2787] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 73.451009][ T2787] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,grpquota,nomblk_io_submit,,errors=continue [ 73.534043][ T509] hid-generic 0003:046D:C222.001A: unbalanced collection at end of report description [ 73.552124][ T5] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 73.557360][ T509] hid-generic: probe of 0003:046D:C222.001A failed with error -22 [ 73.572094][ T341] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 73.601843][ T5] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.614919][ T341] usb 3-1: config 0 has no interface number 0 [ 73.742651][ T2811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 73.780395][ T384] usb 4-1: USB disconnect, device number 11 [ 73.792309][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.806351][ T341] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 73.818379][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.830831][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.841375][ T341] usb 3-1: Product: syz [ 73.848626][ T5] usb 2-1: Product: syz [ 73.855754][ T341] usb 3-1: Manufacturer: syz [ 73.863005][ T5] usb 2-1: Manufacturer: syz [ 73.869792][ T341] usb 3-1: SerialNumber: syz [ 73.876663][ T5] usb 2-1: SerialNumber: syz [ 73.885848][ T341] usb 3-1: config 0 descriptor?? [ 73.896774][ T5] usb 2-1: config 0 descriptor?? [ 73.942932][ T5] usb 2-1: selecting invalid altsetting 0 [ 73.954226][ T341] smsc95xx v1.0.6 [ 73.982288][ T18] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 74.164255][ T509] usb 2-1: USB disconnect, device number 13 [ 74.334689][ T2825] EXT4-fs (loop3): Ignoring removed orlov option [ 74.342810][ T2830] mmap: syz.0.1056 (2830) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 74.352445][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.366227][ T2825] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 74.381066][ T18] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 74.397093][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.403728][ T2825] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,grpquota,nomblk_io_submit,,errors=continue [ 74.409392][ T18] usb 5-1: config 0 descriptor?? [ 74.574935][ T2844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 74.602212][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 74.619747][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 74.652187][ T341] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 74.673630][ T341] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 74.685460][ T341] usb 3-1: USB disconnect, device number 13 [ 74.821646][ T2871] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1075'. [ 74.867109][ T2878] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 74.897286][ T23] audit: type=1400 audit(1747835600.860:321): avc: denied { write } for pid=2879 comm="syz.3.1080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 74.944239][ T18] wacom 0003:056A:00D0.001B: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 74.965510][ T18] wacom 0003:056A:00D0.001B: hidraw0: USB HID v0.0c Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 74.986892][ T18] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.001B/input/input12 [ 74.988709][ T23] audit: type=1400 audit(1747835600.950:322): avc: denied { map } for pid=2885 comm="syz.3.1083" path="socket:[32098]" dev="sockfs" ino=32098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.162038][ T509] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 75.200277][ T18] usb 5-1: USB disconnect, device number 11 [ 75.241500][ T2896] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,,errors=continue [ 75.261041][ T2896] ext4 filesystem being mounted at /265/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 75.263681][ T2903] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 75.297880][ T2896] EXT4-fs (loop3): re-mounted. Opts: quota,noload,block_validity, [ 75.542210][ T509] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.560273][ T509] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.587352][ T123] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 75.601991][ T509] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.614141][ T509] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 75.628843][ T509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.646294][ T509] usb 2-1: config 0 descriptor?? [ 75.726561][ T2908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 75.982182][ T123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.999722][ T123] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 76.023486][ T123] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 76.039138][ T123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.051607][ T18] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 76.063160][ T123] usb 3-1: config 0 descriptor?? [ 76.123376][ T509] wacom 0003:056A:0015.001C: unknown main item tag 0x4 [ 76.133435][ T509] wacom 0003:056A:0015.001C: unknown main item tag 0x0 [ 76.143129][ T509] wacom 0003:056A:0015.001C: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 76.157325][ T509] wacom 0003:056A:0015.001C: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.1-1/input0 [ 76.177392][ T509] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0015.001C/input/input15 [ 76.312175][ T18] usb 4-1: Using ep0 maxpacket: 32 [ 76.360693][ T509] usb 2-1: USB disconnect, device number 14 [ 76.432475][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.450901][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.469136][ T18] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 76.486388][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.500587][ T18] usb 4-1: config 0 descriptor?? [ 76.543908][ T123] cypress 0003:04B4:DE61.001D: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 76.747777][ T5] usb 3-1: USB disconnect, device number 14 [ 76.984204][ T18] hid-generic 0003:044E:121E.001E: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.3-1/input0 [ 77.162163][ T123] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 77.182488][ T341] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 77.211829][ T18] usb 4-1: USB disconnect, device number 12 [ 77.422100][ T123] usb 5-1: Using ep0 maxpacket: 32 [ 77.542294][ T123] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.565386][ T123] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 77.580916][ T123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.594978][ T509] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 77.602066][ T341] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.611374][ T123] usb 5-1: config 0 descriptor?? [ 77.633394][ T341] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.651519][ T341] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 77.670021][ T341] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.687365][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.722169][ T2925] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 77.742730][ T341] hub 2-1:1.0: bad descriptor, ignoring hub [ 77.752943][ T341] hub: probe of 2-1:1.0 failed with error -5 [ 77.763535][ T341] cdc_wdm 2-1:1.0: skipping garbage [ 77.771632][ T341] cdc_wdm 2-1:1.0: skipping garbage [ 77.781518][ T341] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 77.844520][ T2950] PF_BRIDGE: br_mdb_parse() with invalid entry [ 77.852124][ T509] usb 3-1: Using ep0 maxpacket: 16 [ 77.972163][ T509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.011474][ T509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.032043][ T509] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 78.052140][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.072861][ T509] usb 3-1: config 0 descriptor?? [ 78.084900][ T2956] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 78.102174][ T2956] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.123625][ T2956] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.134331][ T123] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 78.145386][ T123] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 78.152422][ T553] usb 2-1: USB disconnect, device number 15 [ 78.168413][ T123] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 78.180829][ T123] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 78.190453][ T123] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 78.196967][ T2956] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.212724][ T123] kye 0003:0458:0138.001F: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 78.215724][ T2956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.372392][ T123] usb 5-1: USB disconnect, device number 12 [ 78.463741][ T2963] netlink: 'syz.3.1118': attribute type 61 has an invalid length. [ 78.564065][ T509] wacom 0003:056A:0084.0020: unbalanced collection at end of report description [ 78.584074][ T509] wacom 0003:056A:0084.0020: parse failed [ 78.595947][ T509] wacom: probe of 0003:056A:0084.0020 failed with error -22 [ 78.654012][ T2981] netlink: 'syz.1.1127': attribute type 3 has an invalid length. [ 78.828622][ T509] usb 3-1: USB disconnect, device number 15 [ 79.053501][ T3013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1152'. [ 79.412116][ T509] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 79.443131][ T3003] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 79.453643][ T3003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.468153][ T3003] F2FS-fs (loop1): invalid crc value [ 79.478016][ T3003] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.503873][ T3003] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 79.516035][ T3003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 79.562247][ T339] F2FS-fs (loop1): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 79.622172][ T5] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 79.782107][ T509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.795805][ T509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.807168][ T509] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 79.818356][ T509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.832414][ T509] usb 4-1: config 0 descriptor?? [ 80.012439][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.029138][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.062098][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.080729][ T5] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 80.093021][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.103922][ T5] usb 3-1: config 0 descriptor?? [ 80.154750][ T3055] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 80.166684][ T3055] ext4 filesystem being mounted at /246/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 80.188620][ T3055] incfs_lookup_dentry err:-117 [ 80.195379][ T3055] incfs: Can't find or create .index dir in ./file0 [ 80.203674][ T3055] incfs: mount failed -117 [ 80.287806][ T3062] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 80.302121][ T509] steelseries_srws1 0003:1038:1410.0021: missing HID_OUTPUT_REPORT 0 [ 80.326546][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 80.352175][ T18] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 80.515450][ T341] usb 4-1: USB disconnect, device number 13 [ 80.573718][ T5] waltop 0003:172F:0501.0022: unknown main item tag 0x0 [ 80.586676][ T5] waltop 0003:172F:0501.0022: unknown main item tag 0x0 [ 80.599312][ T5] waltop 0003:172F:0501.0022: unknown main item tag 0x0 [ 80.610804][ T5] waltop 0003:172F:0501.0022: unknown main item tag 0x0 [ 80.621591][ T5] waltop 0003:172F:0501.0022: unknown main item tag 0x0 [ 80.642151][ T5] waltop 0003:172F:0501.0022: unknown main item tag 0x0 [ 80.651768][ T5] waltop 0003:172F:0501.0022: unknown main item tag 0x0 [ 80.673250][ T5] waltop 0003:172F:0501.0022: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.2-1/input0 [ 80.772166][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.832176][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.862770][ T18] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 80.888322][ T341] usb 3-1: USB disconnect, device number 16 [ 80.892015][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.908474][ T18] usb 5-1: config 0 descriptor?? [ 80.972824][ T3065] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 80.983848][ T3065] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.993646][ T3076] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 81.001131][ T3065] F2FS-fs (loop1): invalid crc value [ 81.024675][ T3065] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 81.063178][ T3065] F2FS-fs (loop1): recover fsync data on readonly fs [ 81.082233][ T3065] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 81.104927][ T3065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.190604][ T3091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 81.209527][ T3091] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 81.221500][ T3091] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 81.236289][ T3091] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 81.253103][ T3091] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 81.267079][ T3091] EXT4-fs error (device loop3) in ext4_setattr:5884: error 27 [ 81.282082][ T3094] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 81.373018][ T18] betop 0003:8380:1850.0023: unbalanced delimiter at end of report description [ 81.393120][ T18] betop 0003:8380:1850.0023: parse failed [ 81.401449][ T18] betop: probe of 0003:8380:1850.0023 failed with error -22 [ 81.617018][ T341] usb 5-1: USB disconnect, device number 13 [ 81.676792][ T3114] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 81.686633][ T18] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 81.698006][ T3114] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 81.708337][ T3114] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.736554][ T3114] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 81.747174][ T3114] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 81.764201][ T5] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 82.022140][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 82.062335][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 82.078045][ T18] usb 2-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00 [ 82.093044][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.106911][ T18] usb 2-1: config 0 descriptor?? [ 82.162161][ T5] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.177278][ T5] usb 4-1: config 0 has no interface number 0 [ 82.186591][ T5] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.214834][ T5] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.228450][ T5] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 82.240339][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.271457][ T5] usb 4-1: config 0 descriptor?? [ 82.525874][ T3125] F2FS-fs (loop2): Test dummy encryption mode enabled [ 82.545288][ T3125] F2FS-fs (loop2): invalid crc value [ 82.559047][ T3125] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.587741][ T3125] F2FS-fs (loop2): Start checkpoint disabled! [ 82.600001][ T3125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 82.617967][ T18] wacom 0003:056A:0014.0024: unbalanced collection at end of report description [ 82.642391][ T18] wacom 0003:056A:0014.0024: parse failed [ 82.655658][ T18] wacom: probe of 0003:056A:0014.0024 failed with error -22 [ 82.691341][ T3125] VFS:Filesystem freeze failed [ 82.837553][ T18] usb 2-1: USB disconnect, device number 16 [ 82.952127][ T5] uclogic 0003:28BD:0094.0025: failed retrieving string descriptor #100: -71 [ 82.965214][ T5] uclogic 0003:28BD:0094.0025: failed retrieving pen parameters: -71 [ 82.979070][ T5] uclogic 0003:28BD:0094.0025: pen probing failed: -71 [ 82.990177][ T5] uclogic 0003:28BD:0094.0025: failed probing parameters: -71 [ 83.004117][ T5] uclogic: probe of 0003:28BD:0094.0025 failed with error -71 [ 83.023999][ T5] usb 4-1: USB disconnect, device number 14 [ 83.710790][ T3149] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 83.725816][ T3149] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.741296][ T3149] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.770598][ T3149] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 83.781286][ T3149] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.122025][ T553] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 84.302005][ T5] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 84.372442][ T553] usb 5-1: Using ep0 maxpacket: 16 [ 84.502155][ T553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.520126][ T553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.537773][ T341] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 84.549600][ T553] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 84.562841][ T553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.579479][ T553] usb 5-1: config 0 descriptor?? [ 84.682394][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.700078][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.714888][ T5] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 84.728187][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.746120][ T5] usb 2-1: config 0 descriptor?? [ 84.932196][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 84.959726][ T341] usb 3-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00 [ 84.973387][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.000786][ T341] usb 3-1: config 0 descriptor?? [ 85.054131][ T553] wacom 0003:056A:0084.0026: unbalanced collection at end of report description [ 85.083695][ T553] wacom 0003:056A:0084.0026: parse failed [ 85.098134][ T553] wacom: probe of 0003:056A:0084.0026 failed with error -22 [ 85.154848][ T3184] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 85.169882][ T3184] ext4 filesystem being mounted at /165/bus supports timestamps until (%ptR?) (0x7fffffff) [ 85.221452][ T3184] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 85.223186][ T5] betop 0003:8380:1850.0027: unbalanced delimiter at end of report description [ 85.241555][ T3184] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 85.311360][ T5] betop 0003:8380:1850.0027: parse failed [ 85.322342][ T5] betop: probe of 0003:8380:1850.0027 failed with error -22 [ 85.338970][ T5] usb 5-1: USB disconnect, device number 14 [ 85.367794][ T3179] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 85.382108][ T3179] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.400999][ T3179] F2FS-fs (loop3): invalid crc value [ 85.442819][ T3179] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 85.495236][ T3179] F2FS-fs (loop3): recover fsync data on readonly fs [ 85.505825][ T509] usb 2-1: USB disconnect, device number 17 [ 85.513818][ T341] wacom 0003:056A:0014.0028: unbalanced collection at end of report description [ 85.536522][ T3179] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 85.536590][ T341] wacom 0003:056A:0014.0028: parse failed [ 85.549796][ T3179] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.567822][ T341] wacom: probe of 0003:056A:0014.0028 failed with error -22 [ 85.755031][ T341] usb 3-1: USB disconnect, device number 17 [ 85.855927][ T23] audit: type=1400 audit(1747835611.820:323): avc: denied { read } for pid=3208 comm="syz.4.1220" name="msr" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.891066][ T23] audit: type=1400 audit(1747835611.820:324): avc: denied { open } for pid=3208 comm="syz.4.1220" path="/dev/cpu/0/msr" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.951875][ T3211] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 86.069686][ T23] audit: type=1400 audit(1747835612.030:325): avc: denied { bind } for pid=3223 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.119338][ T23] audit: type=1400 audit(1747835612.070:326): avc: denied { setopt } for pid=3223 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.222123][ T3234] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,sysvgroups,journal_ioprio=0x0000000000000007,noauto_da_alloc,nombcache,,errors=continue [ 86.246712][ T3234] ext4 filesystem being mounted at /255/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 86.490505][ T3264] FAT-fs (loop1): Directory bread(block 64) failed [ 86.502443][ T3264] FAT-fs (loop1): Directory bread(block 65) failed [ 86.514135][ T3264] FAT-fs (loop1): Directory bread(block 66) failed [ 86.525141][ T3264] FAT-fs (loop1): Directory bread(block 67) failed [ 86.540600][ T3264] FAT-fs (loop1): Directory bread(block 68) failed [ 86.551469][ T3264] FAT-fs (loop1): Directory bread(block 69) failed [ 86.572126][ T3264] FAT-fs (loop1): Directory bread(block 70) failed [ 86.580409][ T23] audit: type=1400 audit(1747835612.540:327): avc: denied { connect } for pid=3270 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.621905][ T3245] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 86.636538][ T3264] FAT-fs (loop1): Directory bread(block 71) failed [ 86.652346][ T3245] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.652729][ T3264] FAT-fs (loop1): Directory bread(block 72) failed [ 86.672922][ T3245] F2FS-fs (loop2): invalid crc value [ 86.692130][ T3275] xt_hashlimit: size too large, truncated to 1048576 [ 86.703924][ T3245] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 86.712123][ T3264] FAT-fs (loop1): Directory bread(block 73) failed [ 86.768174][ T23] audit: type=1326 audit(1747835612.730:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.0.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95072d969 code=0x7fc00000 [ 86.801851][ T3245] F2FS-fs (loop2): recover fsync data on readonly fs [ 86.858842][ T3245] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 86.880462][ T23] audit: type=1326 audit(1747835612.730:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.0.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa95072d969 code=0x7fc00000 [ 86.916187][ T3245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.949317][ T23] audit: type=1326 audit(1747835612.730:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.0.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95072d969 code=0x7fc00000 [ 87.071518][ T23] audit: type=1326 audit(1747835612.730:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.0.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95072d969 code=0x7fc00000 [ 87.119995][ T23] audit: type=1326 audit(1747835612.730:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3213 comm="syz.0.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95072d969 code=0x7fc00000 [ 87.194462][ T3290] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 87.221562][ T3290] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.232666][ T3290] EXT4-fs error (device loop3): mb_free_blocks:1458: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 87.252413][ T3290] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 220 vs 221 free clusters [ 87.285611][ T3290] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 87.308316][ T3290] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #11: comm syz.3.1252: invalid indirect mapped block 1 (level 1) [ 87.337667][ T3290] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 87.355648][ T3290] EXT4-fs error (device loop3) in ext4_orphan_del:3257: error 27 [ 87.378582][ T3290] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 87.395105][ T3307] usb usb8: usbfs: process 3307 (syz.0.1257) did not claim interface 0 before use [ 87.398120][ T3290] EXT4-fs (loop3): 1 truncate cleaned up [ 87.429618][ T3290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 87.511839][ T3317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1261'. [ 87.755686][ T3326] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 88.236976][ T3346] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,sysvgroups,journal_ioprio=0x0000000000000007,noauto_da_alloc,nombcache,,errors=continue [ 88.288092][ T3346] ext4 filesystem being mounted at /187/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 88.643705][ T3371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1286'. [ 89.188221][ T3434] xt_hashlimit: size too large, truncated to 1048576 [ 89.579899][ T3395] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.653847][ T3465] EXT4-fs (loop0): 1 orphan inode deleted [ 89.676835][ T3465] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 89.693272][ T3395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.705875][ T3465] ext4 filesystem being mounted at /209/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 89.881253][ T3475] tmpfs: Cannot retroactively limit inodes [ 89.987206][ T3483] FAT-fs (loop0): Directory bread(block 64) failed [ 90.009885][ T3483] FAT-fs (loop0): Directory bread(block 65) failed [ 90.031420][ T3483] FAT-fs (loop0): Directory bread(block 66) failed [ 90.045162][ T3483] FAT-fs (loop0): Directory bread(block 67) failed [ 90.072130][ T3483] FAT-fs (loop0): Directory bread(block 68) failed [ 90.085131][ T3495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1340'. [ 90.092128][ T3483] FAT-fs (loop0): Directory bread(block 69) failed [ 90.112072][ T3483] FAT-fs (loop0): Directory bread(block 70) failed [ 90.138860][ T3483] FAT-fs (loop0): Directory bread(block 71) failed [ 90.149125][ T3483] FAT-fs (loop0): Directory bread(block 72) failed [ 90.159377][ T3483] FAT-fs (loop0): Directory bread(block 73) failed [ 90.380609][ T3519] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 90.522805][ T3537] FAT-fs (loop3): Directory bread(block 64) failed [ 90.542036][ T3537] FAT-fs (loop3): Directory bread(block 65) failed [ 90.557602][ T3537] FAT-fs (loop3): Directory bread(block 66) failed [ 90.580080][ T3537] FAT-fs (loop3): Directory bread(block 67) failed [ 90.582343][ T553] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 90.600063][ T3537] FAT-fs (loop3): Directory bread(block 68) failed [ 90.652060][ T3537] FAT-fs (loop3): Directory bread(block 69) failed [ 90.661648][ T3537] FAT-fs (loop3): Directory bread(block 70) failed [ 90.674785][ T3537] FAT-fs (loop3): Directory bread(block 71) failed [ 90.698931][ T3537] FAT-fs (loop3): Directory bread(block 72) failed [ 90.714360][ T3537] FAT-fs (loop3): Directory bread(block 73) failed [ 90.912066][ T553] usb 5-1: Using ep0 maxpacket: 16 [ 91.072249][ T553] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 91.095494][ T553] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 91.217563][ T3521] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 91.229550][ T3521] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 91.254552][ T3521] F2FS-fs (loop2): invalid crc value [ 91.276940][ T3521] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.286361][ T553] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 91.302403][ T553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.330426][ T553] usb 5-1: Product: syz [ 91.346294][ T553] usb 5-1: Manufacturer: syz [ 91.365725][ T553] usb 5-1: SerialNumber: syz [ 91.380228][ T3521] F2FS-fs (loop2): recover fsync data on readonly fs [ 91.391462][ T553] usb 5-1: config 0 descriptor?? [ 91.402283][ T3521] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 91.421500][ T3521] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 91.441437][ T3521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 91.452923][ T553] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 91.666672][ T18] usb 5-1: USB disconnect, device number 15 [ 91.778982][ T3568] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 91.802716][ T3568] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.839820][ T3568] F2FS-fs (loop3): invalid crc value [ 91.873754][ T3568] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.946778][ T3568] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 91.973109][ T3568] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.992123][ T3568] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 92.272030][ T553] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 92.302951][ T3574] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 92.342127][ T3574] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 92.357712][ T3568] F2FS-fs (loop3): Start checkpoint disabled! [ 92.375086][ T3574] F2FS-fs (loop1): invalid crc value [ 92.417814][ T3574] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.494538][ T3574] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 92.512350][ T3574] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 92.692111][ T553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.721342][ T553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.757770][ T553] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.795632][ T553] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.824270][ T553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.858089][ T553] usb 3-1: config 0 descriptor?? [ 93.169484][ T3611] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 93.196444][ T3611] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 93.215748][ T3611] F2FS-fs (loop0): invalid crc value [ 93.330915][ T3611] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 93.343392][ T553] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 93.351430][ T3611] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.367508][ T553] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 93.398795][ T553] plantronics 0003:047F:FFFF.0029: unbalanced delimiter at end of report description [ 93.440810][ T553] plantronics 0003:047F:FFFF.0029: parse failed [ 93.463678][ T553] plantronics: probe of 0003:047F:FFFF.0029 failed with error -22 [ 93.534098][ T23] kauditd_printk_skb: 135 callbacks suppressed [ 93.534111][ T23] audit: type=1400 audit(1747835619.500:468): avc: denied { mounton } for pid=3622 comm="syz.4.1394" path="/303/file0" dev="tmpfs" ino=38185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.549412][ T18] usb 3-1: USB disconnect, device number 18 [ 93.606367][ T3626] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.612454][ T3632] F2FS-fs (loop3): fault_injection options not supported [ 93.642415][ T3626] FAT-fs (loop9): unable to read boot sector [ 93.652491][ T3632] F2FS-fs (loop3): invalid crc value [ 93.665667][ T3632] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.706883][ T3632] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.850277][ T23] audit: type=1400 audit(1747835619.810:469): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 94.067590][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.075759][ T3672] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 94.186412][ T23] audit: type=1400 audit(1747835620.150:470): avc: denied { read } for pid=3681 comm="syz.3.1415" name="usbmon7" dev="devtmpfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.214280][ T341] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 94.226481][ T23] audit: type=1400 audit(1747835620.150:471): avc: denied { open } for pid=3681 comm="syz.3.1415" path="/dev/usbmon7" dev="devtmpfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.275372][ T23] audit: type=1400 audit(1747835620.190:472): avc: denied { write } for pid=3681 comm="syz.3.1415" name="usbmon7" dev="devtmpfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.308011][ T23] audit: type=1400 audit(1747835620.220:473): avc: denied { map } for pid=3681 comm="syz.3.1415" path="/dev/usbmon7" dev="devtmpfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.347039][ T23] audit: type=1400 audit(1747835620.220:474): avc: denied { execute } for pid=3681 comm="syz.3.1415" path="/dev/usbmon7" dev="devtmpfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.612475][ T553] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 94.628364][ T3701] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 94.632882][ T341] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.640530][ T3701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.663561][ T341] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.674472][ T3701] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.677316][ T341] usb 5-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 94.701556][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.714765][ T341] usb 5-1: config 0 descriptor?? [ 94.748797][ T3701] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.758605][ T3701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.872016][ T553] usb 4-1: Using ep0 maxpacket: 32 [ 95.002625][ T553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.045980][ T553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.068590][ T553] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 95.088677][ T553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.107172][ T553] usb 4-1: config 0 descriptor?? [ 95.183840][ T341] hid-generic 0003:0463:1215.002A: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.4-1/input0 [ 95.236239][ T3711] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 95.248099][ T3711] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.263698][ T3711] F2FS-fs (loop1): invalid crc value [ 95.274438][ T3711] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.305616][ T3711] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 95.318827][ T3711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 95.382155][ T13] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 95.421899][ T341] usb 5-1: USB disconnect, device number 16 [ 95.583534][ T553] thrustmaster 0003:044F:B654.002B: unknown main item tag 0x0 [ 95.594857][ T553] thrustmaster 0003:044F:B654.002B: unbalanced collection at end of report description [ 95.607830][ T553] thrustmaster 0003:044F:B654.002B: parse failed [ 95.615632][ T553] thrustmaster: probe of 0003:044F:B654.002B failed with error -22 [ 95.642003][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 95.762181][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.780266][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.795093][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 95.808802][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.832284][ T13] usb 3-1: config 0 descriptor?? [ 95.848653][ T509] usb 4-1: USB disconnect, device number 15 [ 95.907308][ T23] audit: type=1400 audit(1747835621.870:475): avc: denied { append } for pid=3723 comm="syz.1.1430" name="ppp" dev="devtmpfs" ino=9519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.044782][ T3734] tipc: Enabling of bearer rejected, failed to enable media [ 96.274202][ T3743] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 96.314384][ T13] magicmouse 0003:05AC:0265.002C: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 96.332067][ T13] magicmouse 0003:05AC:0265.002C: magicmouse input not registered [ 96.344522][ T13] magicmouse: probe of 0003:05AC:0265.002C failed with error -12 [ 96.381002][ T3749] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1441'. [ 96.527670][ T509] usb 3-1: USB disconnect, device number 19 [ 96.776843][ T3754] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 96.792046][ T3754] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 96.822546][ T3754] F2FS-fs (loop3): invalid crc value [ 96.929734][ T3754] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 96.943195][ T3754] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.999984][ T342] attempt to access beyond end of device [ 96.999984][ T342] loop3: rw=2049, want=45104, limit=40427 [ 97.143828][ T3771] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 97.159344][ T3771] ext4 filesystem being mounted at /255/bus supports timestamps until (%ptR?) (0x7fffffff) [ 97.202264][ T3771] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 97.222583][ T3771] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 97.252679][ T3779] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 97.289219][ T3779] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 97.318992][ T3779] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 97.339045][ T23] audit: type=1400 audit(1747835623.300:476): avc: denied { unlink } for pid=339 comm="syz-executor" name="file6" dev="tmpfs" ino=38983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.552015][ T123] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 97.582772][ T509] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 97.756454][ T3803] F2FS-fs (loop0): Insane cp_payload (553648128 > 510) [ 97.778549][ T3803] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.792569][ T23] audit: type=1400 audit(1747835623.760:477): avc: denied { map } for pid=3825 comm="syz.2.1472" path="socket:[39992]" dev="sockfs" ino=39992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 97.831202][ T3803] F2FS-fs (loop0): invalid crc value [ 97.868006][ T3803] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.872014][ T509] usb 4-1: Using ep0 maxpacket: 32 [ 97.938268][ T3803] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 97.942075][ T123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.948237][ T3803] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.972431][ T123] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.986567][ T123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.001837][ T123] usb 5-1: config 0 descriptor?? [ 98.022628][ T509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.046089][ T509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.058518][ T337] attempt to access beyond end of device [ 98.058518][ T337] loop0: rw=2049, want=45104, limit=40427 [ 98.058867][ T509] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 98.084250][ T509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.095301][ T509] usb 4-1: config 0 descriptor?? [ 98.219903][ T3847] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 98.230483][ T3847] ext4 filesystem being mounted at /314/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 98.272448][ T3847] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 98.319691][ T3853] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 98.330224][ T3853] ext4 filesystem being mounted at /231/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 98.491644][ T3865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1486'. [ 98.542217][ T123] usbhid 5-1:0.0: can't add hid device: -71 [ 98.549926][ T123] usbhid: probe of 5-1:0.0 failed with error -71 [ 98.560852][ T123] usb 5-1: USB disconnect, device number 17 [ 98.568580][ T509] apple 0003:05AC:029C.002D: unbalanced collection at end of report description [ 98.586644][ T509] apple 0003:05AC:029C.002D: parse failed [ 98.594791][ T509] apple: probe of 0003:05AC:029C.002D failed with error -22 [ 98.836430][ T13] usb 4-1: USB disconnect, device number 16 [ 99.122030][ T123] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 99.362239][ T123] usb 3-1: Using ep0 maxpacket: 8 [ 99.492216][ T123] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.509469][ T123] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.526546][ T509] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 99.588486][ T3913] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 99.606123][ T3913] EXT4-fs (loop3): invalid journal inode [ 99.614606][ T3913] EXT4-fs (loop3): can't get journal size [ 99.624859][ T3913] EXT4-fs (loop3): 1 truncate cleaned up [ 99.636589][ T3913] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue [ 99.702117][ T123] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.713380][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.723706][ T123] usb 3-1: Product: syz [ 99.729486][ T123] usb 3-1: Manufacturer: syz [ 99.735545][ T123] usb 3-1: SerialNumber: syz [ 99.826767][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 99.826779][ T23] audit: type=1400 audit(1747835625.790:482): avc: denied { lock } for pid=3926 comm="syz.4.1515" path="socket:[39548]" dev="sockfs" ino=39548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.932336][ T509] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.948296][ T509] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.975930][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 100.032102][ T509] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.048175][ T509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.062580][ T509] usb 2-1: SerialNumber: syz [ 100.102997][ T341] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 100.212105][ T123] usb 3-1: cannot find UAC_HEADER [ 100.219285][ T123] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 100.342885][ T509] usb 2-1: 0:2 : does not exist [ 100.351182][ T509] usb 2-1: USB disconnect, device number 18 [ 100.422562][ T553] usb 3-1: USB disconnect, device number 20 [ 100.482072][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.496881][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.509559][ T341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 100.524620][ T341] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 100.535617][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.547018][ T341] usb 4-1: config 0 descriptor?? [ 100.899862][ T4001] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,block_validity,inode_readahead_blks=0x0000000000000020,sb=0x0000000000000401,nouid32,lazytime,init_itable=0x0000000000000005,jqfmt=vfsold,grpjquota=,,errors=continue [ 100.934827][ T23] audit: type=1400 audit(1747835626.900:483): avc: denied { rmdir } for pid=4000 comm="syz.1.1551" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.988575][ T23] audit: type=1400 audit(1747835626.900:484): avc: denied { rename } for pid=4000 comm="syz.1.1551" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.033631][ T341] wacom 0003:056A:0027.002E: unknown main item tag 0x0 [ 101.061654][ T341] wacom 0003:056A:0027.002E: unknown main item tag 0x0 [ 101.070280][ T341] wacom 0003:056A:0027.002E: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 101.084078][ T341] wacom 0003:056A:0027.002E: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0 [ 101.099206][ T341] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.002E/input/input18 [ 101.148224][ T4011] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 101.165435][ T4011] fs-verity (loop2, inode 16): Unknown hash algorithm number: 0 [ 101.317204][ T509] usb 4-1: USB disconnect, device number 17 [ 101.381303][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.395227][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.405506][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.417437][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.428853][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.442989][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.453327][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.462892][ T4032] FAT-fs (loop1): Directory bread(block 64) failed [ 101.464308][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.475526][ T4032] FAT-fs (loop1): Directory bread(block 65) failed [ 101.482529][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.492815][ T4032] FAT-fs (loop1): Directory bread(block 66) failed [ 101.504916][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.512967][ T4032] FAT-fs (loop1): Directory bread(block 67) failed [ 101.532271][ T4032] FAT-fs (loop1): Directory bread(block 68) failed [ 101.532915][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.544790][ T4032] FAT-fs (loop1): Directory bread(block 69) failed [ 101.553391][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.562203][ T4032] FAT-fs (loop1): Directory bread(block 70) failed [ 101.570549][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.579215][ T4032] FAT-fs (loop1): Directory bread(block 71) failed [ 101.589636][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 101.596708][ T4032] FAT-fs (loop1): Directory bread(block 72) failed [ 101.596729][ T4032] FAT-fs (loop1): Directory bread(block 73) failed [ 101.609098][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.641031][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.655719][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.667821][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.682392][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.693596][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.703547][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.714778][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.725683][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.734473][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.744719][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.754333][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.763623][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.772590][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.782558][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791503][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791519][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791534][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791549][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791562][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791577][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791591][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791606][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791621][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791635][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791649][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791673][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791687][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791702][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.791717][ T123] hid-generic 0000:007F:FFFFFFFE.002F: unknown main item tag 0x0 [ 101.793623][ T123] hid-generic 0000:007F:FFFFFFFE.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.016822][ T4062] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 102.054074][ T4064] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 102.069016][ T4064] EXT4-fs (loop3): group descriptors corrupted! [ 102.073005][ T4062] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[9000] [ 102.090512][ T4062] ------------[ cut here ]------------ [ 102.092115][ T123] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 102.097296][ T4062] WARNING: CPU: 0 PID: 4062 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 102.097301][ T4062] Modules linked in: [ 102.097315][ T4062] CPU: 0 PID: 4062 Comm: syz.1.1576 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 102.097321][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.097335][ T4062] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 102.097348][ T4062] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 102.097362][ T4062] RSP: 0018:ffff8881ecc86bd8 EFLAGS: 00010246 [ 102.198865][ T4062] RAX: c5cc93405340a900 RBX: ffff8881ecc871e0 RCX: c5cc93405340a900 [ 102.208214][ T4062] RDX: ffffc90000944000 RSI: 00000000000282bd RDI: 00000000000282be [ 102.218201][ T4062] RBP: ffff8881ecc86c90 R08: 0000000000000004 R09: 0000000000000003 [ 102.227763][ T4062] R10: ffffed103d990cc4 R11: 1ffff1103d990cc4 R12: 1ffff1103d990e3c [ 102.237993][ T4062] R13: 000000000000002e R14: 0000000000000fd2 R15: ffff8881decc8fd2 [ 102.248063][ T4062] FS: 00007f710de0b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 102.260719][ T4062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.269292][ T4062] CR2: 0000000000000000 CR3: 00000001e0457000 CR4: 00000000003406b0 [ 102.281147][ T4062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.292733][ T4062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.303936][ T4062] Call Trace: [ 102.307814][ T4062] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 102.314674][ T4062] z_erofs_decompress+0xc1e/0xf80 [ 102.320584][ T4062] z_erofs_vle_unzip_all+0x137a/0x1980 [ 102.330749][ T4062] ? z_erofs_onlinepage_endio+0x140/0x140 [ 102.339662][ T4062] ? __queue_delayed_work+0x185/0x200 [ 102.347006][ T4062] ? __kasan_check_write+0x14/0x20 [ 102.353477][ T4062] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 102.360953][ T4062] ? _raw_spin_lock+0xe0/0xe0 [ 102.366976][ T4062] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 102.374810][ T4062] ? finish_wait+0x17f/0x190 [ 102.380496][ T4062] z_erofs_submit_and_unzip+0x1254/0x12c0 [ 102.387302][ T4062] ? z_erofs_do_read_page+0x2430/0x2430 [ 102.393764][ T4062] ? init_wait_entry+0xe0/0xe0 [ 102.400171][ T4062] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 102.409930][ T4062] ? lru_cache_add+0x15/0x20 [ 102.415492][ T4062] z_erofs_vle_normalaccess_readpages+0x7b6/0xa60 [ 102.424414][ T4062] ? preempt_count_add+0x90/0x1b0 [ 102.430832][ T4062] ? z_erofs_vle_normalaccess_readpage+0x540/0x540 [ 102.438711][ T4062] ? __this_cpu_preempt_check+0x1c/0x20 [ 102.445616][ T4062] ? should_fail+0x196/0x7e0 [ 102.451461][ T4062] ? check_preemption_disabled+0x9b/0x300 [ 102.459365][ T4062] ? blk_start_plug+0x5a/0x140 [ 102.467011][ T4062] ? z_erofs_vle_normalaccess_readpage+0x540/0x540 [ 102.478488][ T4062] read_pages+0x117/0x3f0 [ 102.483921][ T4062] ? search_extable+0x8c/0xd0 [ 102.489730][ T4062] ? __do_page_cache_readahead+0x4b0/0x4b0 [ 102.496491][ T4062] __do_page_cache_readahead+0x41e/0x4b0 [ 102.503250][ T4062] ? xas_load+0x511/0x580 [ 102.508945][ T4062] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 102.517719][ T4062] ? find_get_entry+0x342/0x3c0 [ 102.524150][ T4062] ? page_cache_prev_miss+0x270/0x270 [ 102.531092][ T4062] ondemand_readahead+0x6ae/0xad0 [ 102.537586][ T4062] ? preempt_schedule+0xa7/0xb0 [ 102.543174][ T4062] page_cache_sync_readahead+0x1f7/0x460 [ 102.550057][ T4062] generic_file_read_iter+0x632/0x2100 [ 102.557029][ T4062] ? __do_page_fault+0xa0e/0xb20 [ 102.562634][ T4062] ? find_get_pages_range_tag+0x7a0/0x7a0 [ 102.569479][ T4062] ? __check_object_size+0x84/0x3c0 [ 102.575941][ T4062] ? iov_iter_init+0x88/0x160 [ 102.581616][ T4062] __vfs_read+0x47d/0x5c0 [ 102.587315][ T4062] ? rw_verify_area+0x360/0x360 [ 102.595365][ T4062] ? avc_policy_seqno+0x1b/0x70 [ 102.601054][ T4062] ? rw_verify_area+0x1c0/0x360 [ 102.606527][ T4062] vfs_read+0x15a/0x370 [ 102.611158][ T4062] ksys_read+0x140/0x240 [ 102.615911][ T4062] ? vfs_write+0x4c0/0x4c0 [ 102.622857][ T4062] ? task_work_run+0x15e/0x170 [ 102.630664][ T4062] ? __kasan_check_read+0x11/0x20 [ 102.638615][ T4062] __x64_sys_read+0x7b/0x90 [ 102.645195][ T4062] do_syscall_64+0xcf/0x170 [ 102.650776][ T4062] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 102.659626][ T4062] RIP: 0033:0x7f710f7a2969 [ 102.665593][ T4062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.691501][ T4062] RSP: 002b:00007f710de0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.702104][ T4062] RAX: ffffffffffffffda RBX: 00007f710f9c9fa0 RCX: 00007f710f7a2969 [ 102.712553][ T4062] RDX: 0000000000002020 RSI: 000020000000ce00 RDI: 0000000000000004 [ 102.723433][ T4062] RBP: 00007f710f824ab1 R08: 0000000000000000 R09: 0000000000000000 [ 102.734101][ T4062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.746435][ T4062] R13: 0000000000000000 R14: 00007f710f9c9fa0 R15: 00007ffeec700f58 [ 102.756009][ T4062] ---[ end trace 86682d5f1d94b937 ]--- [ 102.768086][ T4062] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[8192] [ 102.780154][ T4062] ------------[ cut here ]------------ [ 102.786450][ T4062] WARNING: CPU: 0 PID: 4062 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 102.797986][ T4062] Modules linked in: [ 102.802636][ T4062] CPU: 0 PID: 4062 Comm: syz.1.1576 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 102.816324][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.829462][ T4062] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 102.836407][ T4062] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 102.858284][ T4062] RSP: 0018:ffff8881ecc86f78 EFLAGS: 00010246 [ 102.865320][ T4062] RAX: c5cc93405340a900 RBX: ffff8881ecc87580 RCX: c5cc93405340a900 [ 102.875226][ T4062] RDX: ffffc90000944000 RSI: 000000000007ffff RDI: 0000000000080000 [ 102.884426][ T4062] RBP: ffff8881ecc87030 R08: 0000000000000004 R09: 0000000000000003 [ 102.894688][ T4062] R10: ffffed103d990d38 R11: 1ffff1103d990d38 R12: 1ffff1103d990eb0 [ 102.904600][ T4062] R13: 000000000000002e R14: 0000000000000fd2 R15: ffff8881decc8fd2 [ 102.916608][ T4062] FS: 00007f710de0b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 102.928375][ T4062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.938505][ T4062] CR2: 000020000000d000 CR3: 00000001e0457000 CR4: 00000000003406b0 [ 102.951883][ T4062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.963545][ T4062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.976788][ T4062] Call Trace: [ 102.981756][ T4062] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 102.994253][ T4062] z_erofs_decompress+0xc1e/0xf80 [ 103.000277][ T4062] z_erofs_vle_unzip_all+0x137a/0x1980 [ 103.006208][ T4062] ? stack_trace_snprint+0x170/0x170 [ 103.014044][ T4062] ? __reset_page_owner+0x110/0x110 [ 103.020795][ T4062] ? z_erofs_onlinepage_endio+0x140/0x140 [ 103.027852][ T4062] ? handle_mm_fault+0x1cd6/0x3930 [ 103.034789][ T4062] ? __kasan_check_write+0x14/0x20 [ 103.041064][ T4062] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 103.047147][ T4062] ? _raw_spin_lock+0xe0/0xe0 [ 103.053276][ T4062] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 103.061599][ T4062] ? z_erofs_vle_unzip_kickoff+0xd9/0xf0 [ 103.068301][ T4062] z_erofs_submit_and_unzip+0x113d/0x12c0 [ 103.074680][ T4062] ? z_erofs_do_read_page+0x2430/0x2430 [ 103.080741][ T4062] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 103.088634][ T4062] z_erofs_vle_normalaccess_readpage+0x24e/0x540 [ 103.095181][ T4062] ? z_erofs_rcu_callback+0x30/0x30 [ 103.100771][ T4062] generic_file_read_iter+0xcf9/0x2100 [ 103.107204][ T4062] ? __do_page_fault+0xa0e/0xb20 [ 103.113707][ T4062] ? find_get_pages_range_tag+0x7a0/0x7a0 [ 103.120787][ T4062] ? __check_object_size+0x84/0x3c0 [ 103.128357][ T4062] ? iov_iter_init+0x88/0x160 [ 103.133481][ T4062] __vfs_read+0x47d/0x5c0 [ 103.138566][ T4062] ? rw_verify_area+0x360/0x360 [ 103.144484][ T4062] ? avc_policy_seqno+0x1b/0x70 [ 103.150597][ T4062] ? rw_verify_area+0x1c0/0x360 [ 103.157024][ T4062] vfs_read+0x15a/0x370 [ 103.162624][ T4062] ksys_read+0x140/0x240 [ 103.167419][ T4062] ? vfs_write+0x4c0/0x4c0 [ 103.172671][ T4062] ? task_work_run+0x15e/0x170 [ 103.178009][ T4062] ? __kasan_check_read+0x11/0x20 [ 103.183570][ T4062] __x64_sys_read+0x7b/0x90 [ 103.189177][ T4062] do_syscall_64+0xcf/0x170 [ 103.194994][ T4062] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 103.201510][ T4062] RIP: 0033:0x7f710f7a2969 [ 103.206102][ T4062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.228694][ T4062] RSP: 002b:00007f710de0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.237924][ T4062] RAX: ffffffffffffffda RBX: 00007f710f9c9fa0 RCX: 00007f710f7a2969 [ 103.246964][ T4062] RDX: 0000000000002020 RSI: 000020000000ce00 RDI: 0000000000000004 [ 103.256116][ T4062] RBP: 00007f710f824ab1 R08: 0000000000000000 R09: 0000000000000000 [ 103.264531][ T4062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.273055][ T4062] R13: 0000000000000000 R14: 00007f710f9c9fa0 R15: 00007ffeec700f58 [ 103.282667][ T4062] ---[ end trace 86682d5f1d94b938 ]--- [ 103.299327][ T23] audit: type=1400 audit(1747835629.260:485): avc: denied { unlink } for pid=144 comm="syslogd" name="messages.0" dev="tmpfs" ino=9735 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.542164][ T123] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.554756][ T123] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.566848][ T123] usb 3-1: config 1 has no interface number 0 [ 103.576514][ T123] usb 3-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 103.597259][ T123] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 103.609943][ T123] usb 3-1: config 1 interface 2 has no altsetting 1 [ 103.748430][ T4079] EXT4-fs (loop3): 1 orphan inode deleted [ 103.765896][ T4079] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 103.779620][ T4079] ext4 filesystem being mounted at /368/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 103.791580][ T123] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.807068][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.816717][ T4079] EXT4-fs error (device loop3): ext4_lookup:1817: inode #14: comm syz.3.1584: iget: bogus i_mode (0) [ 103.831350][ T123] usb 3-1: Product: syz [ 103.836428][ T123] usb 3-1: Manufacturer: syz [ 103.842399][ T123] usb 3-1: SerialNumber: syz [ 104.080253][ T4103] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.110897][ T341] usb 3-1: USB disconnect, device number 21 [ 104.122620][ T4103] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.192126][ T123] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 104.282080][ T509] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 104.412185][ T18] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 104.542252][ T509] usb 5-1: Using ep0 maxpacket: 16 [ 104.572259][ T123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.588729][ T123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.602768][ T123] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 104.613246][ T123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.623798][ T123] usb 4-1: config 0 descriptor?? [ 104.643096][ T4124] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.663026][ T509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.676357][ T18] usb 2-1: Using ep0 maxpacket: 32 [ 104.682859][ T509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.695757][ T509] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.714544][ T509] usb 5-1: New USB device found, idVendor=0400, idProduct=07da, bcdDevice= 0.00 [ 104.738983][ T509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.761452][ T4134] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1606'. [ 104.764314][ T509] usb 5-1: config 0 descriptor?? [ 104.777640][ T4134] device gretap0 entered promiscuous mode [ 104.790557][ T4134] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1606'. [ 104.801914][ T4134] 0ªX¹¦D: renamed from gretap0 [ 104.808225][ T4134] device 30ªX¹¦D left promiscuous mode [ 104.816089][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.829498][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.846302][ T18] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.857721][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.868600][ T18] usb 2-1: config 0 descriptor?? [ 104.913020][ T18] hub 2-1:0.0: USB hub found [ 105.093754][ T123] hid-steam 0003:28DE:1142.0030: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 105.121767][ T4144] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 105.132200][ T18] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 105.146431][ T23] audit: type=1400 audit(1747835631.110:486): avc: denied { append } for pid=4143 comm="syz.2.1611" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.153420][ T4144] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 105.183065][ T4144] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 105.192716][ T4144] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 105.204094][ T4144] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 105.216319][ T4144] EXT4-fs error (device loop2) in ext4_setattr:5884: error 27 [ 105.226918][ T4147] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 105.234076][ T509] hid (null): report_id 375521560 is invalid [ 105.246299][ T509] hid-generic 0003:0400:07DA.0031: ignoring exceeding usage max [ 105.257205][ T509] hid-generic 0003:0400:07DA.0031: report_id 375521560 is invalid [ 105.265873][ T509] hid-generic 0003:0400:07DA.0031: item 0 4 1 8 parsing failed [ 105.276791][ T509] hid-generic: probe of 0003:0400:07DA.0031 failed with error -22 [ 105.315327][ T553] usb 4-1: USB disconnect, device number 18 [ 105.361148][ T4149] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 105.373504][ T4149] FAT-fs (loop2): Filesystem has been set read-only [ 105.432020][ T18] usbhid 2-1:0.0: can't add hid device: -71 [ 105.445979][ T18] usbhid: probe of 2-1:0.0 failed with error -71 [ 105.483166][ T18] usb 2-1: USB disconnect, device number 19 [ 105.533878][ T13] usb 5-1: USB disconnect, device number 18 [ 105.607219][ T4160] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 105.619123][ T4160] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.1617: bg 0: block 255: padding at end of block bitmap is not set [ 105.638041][ T4160] EXT4-fs error (device loop2) in ext4_free_blocks:5016: Corrupt filesystem [ 105.648357][ T4160] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #11: comm syz.2.1617: invalid indirect mapped block 1 (level 1) [ 105.665431][ T4160] EXT4-fs (loop2): 1 truncate cleaned up [ 105.672301][ T4160] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue [ 105.797912][ T23] audit: type=1400 audit(1747835631.760:487): avc: denied { write } for pid=4171 comm="syz.2.1622" name="file0" dev="tmpfs" ino=41406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.825478][ T23] audit: type=1400 audit(1747835631.760:488): avc: denied { open } for pid=4171 comm="syz.2.1622" path="/301/file0" dev="tmpfs" ino=41406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.867767][ T23] audit: type=1400 audit(1747835631.770:489): avc: denied { ioctl } for pid=4171 comm="syz.2.1622" path="/301/file0" dev="tmpfs" ino=41406 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.909463][ T23] audit: type=1400 audit(1747835631.870:490): avc: denied { map } for pid=4179 comm="syz.3.1625" path="/dev/zero" dev="devtmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 106.072255][ T4197] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 106.186630][ T4202] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,norecovery,noload,errors=remount-ro,dioread_lock, [ 106.208126][ T4194] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf, [ 106.211367][ T4202] ext4 filesystem being mounted at /335/bus supports timestamps until (%ptR?) (0x7fffffff) [ 106.229426][ T4194] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 106.285614][ T4202] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #2: comm syz.1.1624: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 106.301535][ T4223] syz.3.1644 uses obsolete (PF_INET,SOCK_PACKET) [ 106.319697][ T4202] EXT4-fs (loop1): Remounting filesystem read-only [ 106.336829][ T23] audit: type=1400 audit(1747835632.300:491): avc: denied { getopt } for pid=4222 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.369931][ T4194] EXT4-fs error (device loop2): ext4_xattr_inode_iget:402: comm syz.2.1634: inode #64: comm syz.2.1634: iget: illegal inode # [ 106.370557][ T23] audit: type=1400 audit(1747835632.330:492): avc: denied { rename } for pid=4193 comm="syz.2.1634" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.387357][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 106.423594][ T4194] EXT4-fs error (device loop2): ext4_xattr_inode_iget:407: comm syz.2.1634: error while reading EA inode 64 err=-117 [ 106.444623][ T4194] EXT4-fs error (device loop2): ext4_xattr_inode_iget:402: comm syz.2.1634: inode #64: comm syz.2.1634: iget: illegal inode # [ 106.465660][ T4194] EXT4-fs error (device loop2): ext4_xattr_inode_iget:407: comm syz.2.1634: error while reading EA inode 64 err=-117 [ 106.504453][ T1194] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 106.520552][ T1194] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 106.537005][ T1194] Quota error (device loop2): write_blk: dquota write failed [ 106.546539][ T1194] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 106.562398][ T1194] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 106.574502][ T1194] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 106.594063][ T4237] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 106.607658][ T123] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 106.618044][ T4237] ext4 filesystem being mounted at /381/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 106.762196][ T18] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 106.852069][ T123] usb 5-1: Using ep0 maxpacket: 16 [ 106.972576][ T384] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 106.986233][ T123] usb 5-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 106.991977][ T553] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 107.001588][ T123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.022438][ T123] usb 5-1: config 0 descriptor?? [ 107.142138][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.158003][ T18] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 107.168205][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.179474][ T18] usb 2-1: config 0 descriptor?? [ 107.232128][ T384] usb 3-1: Using ep0 maxpacket: 16 [ 107.242308][ T553] usb 4-1: Using ep0 maxpacket: 16 [ 107.352155][ T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.367269][ T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.379521][ T384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.382068][ T553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.394539][ T384] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.406961][ T553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.416929][ T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.428506][ T553] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.438903][ T384] usb 3-1: config 0 descriptor?? [ 107.452697][ T553] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.468649][ T553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.480257][ T553] usb 4-1: config 0 descriptor?? [ 107.493642][ T123] wacom 0003:056A:00B7.0032: unknown main item tag 0x5 [ 107.505159][ T123] wacom 0003:056A:00B7.0032: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 107.521339][ T123] wacom 0003:056A:00B7.0032: hidraw0: USB HID v20.00 Device [HID 056a:00b7] on usb-dummy_hcd.4-1/input0 [ 107.536775][ T123] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B7.0032/input/input21 [ 107.663366][ T18] hkems 0003:2006:0118.0033: item fetching failed at offset 5/7 [ 107.674547][ T18] hkems 0003:2006:0118.0033: parse failed [ 107.683747][ T18] hkems: probe of 0003:2006:0118.0033 failed with error -22 [ 107.736996][ T18] usb 5-1: USB disconnect, device number 19 [ 107.866642][ T123] usb 2-1: USB disconnect, device number 20 [ 107.923671][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 107.937188][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 107.954069][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 107.963968][ T553] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 107.966639][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 107.983416][ T553] microsoft 0003:045E:07DA.0035: No inputs registered, leaving [ 107.991762][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 108.005092][ T553] microsoft 0003:045E:07DA.0035: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 108.011832][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 108.035800][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 108.035883][ T553] microsoft 0003:045E:07DA.0035: no inputs found [ 108.044297][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 108.061733][ T553] microsoft 0003:045E:07DA.0035: could not initialize ff, continuing anyway [ 108.062143][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 108.083309][ T384] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 108.096018][ T384] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0034/input/input25 [ 108.200887][ T384] microsoft 0003:045E:07DA.0034: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 108.230709][ T553] usb 4-1: USB disconnect, device number 19 [ 108.247307][ T384] usb 3-1: USB disconnect, device number 22 [ 108.552096][ T341] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 108.622112][ T4265] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 108.631424][ T4265] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.646668][ T4265] F2FS-fs (loop1): invalid crc value [ 108.659502][ T4265] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.701341][ T4265] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.710004][ T4265] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.922103][ T341] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.937339][ T341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.022263][ T341] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.033293][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.043106][ T341] usb 5-1: SerialNumber: syz [ 109.116260][ T4281] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 109.125373][ T4281] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.137858][ T4281] F2FS-fs (loop3): invalid crc value [ 109.145443][ T4281] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.209026][ T4281] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 109.220088][ T4281] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.301230][ T1194] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 109.323766][ T1194] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 109.339253][ T341] usb 5-1: 0:2 : does not exist [ 109.346060][ T341] usb 5-1: unit 255 not found! [ 109.353326][ T341] usb 5-1: USB disconnect, device number 20 [ 109.534047][ T4313] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.543873][ T4313] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.1679: bg 0: block 248: padding at end of block bitmap is not set [ 109.562068][ T4313] EXT4-fs (loop2): 1 truncate cleaned up [ 109.568842][ T4313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 109.609918][ T340] EXT4-fs error (device loop2): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 12 [ 109.624778][ T340] EXT4-fs error (device loop2): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 12 [ 109.858927][ T4321] F2FS-fs (loop3): invalid crc value [ 109.910296][ T4321] F2FS-fs (loop3): Start checkpoint disabled! [ 109.915725][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.927388][ T4321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 109.935256][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.978394][ T4323] device bridge_slave_0 entered promiscuous mode [ 109.994290][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 110.005401][ T1194] attempt to access beyond end of device [ 110.005401][ T1194] loop3: rw=2049, want=40976, limit=40427 [ 110.011356][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.027923][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.038656][ T4323] device bridge_slave_1 entered promiscuous mode [ 110.115495][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.123004][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.130982][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.139018][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.182294][ T1194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.194397][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.212890][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.247854][ T1194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.266913][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.275845][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.284774][ T1194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.322262][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.329979][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.391579][ T1194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.412976][ T1194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.433530][ T1194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.453049][ T4352] F2FS-fs (loop0): invalid crc value [ 110.471530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.483403][ T4352] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.499385][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.502154][ T384] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 110.527612][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.541706][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.550244][ T4352] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.576257][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 110.576269][ T23] audit: type=1400 audit(1747835636.540:496): avc: denied { mounton } for pid=4323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=12912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 110.582382][ T9] device bridge_slave_1 left promiscuous mode [ 110.618829][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.630834][ T337] attempt to access beyond end of device [ 110.630834][ T337] loop0: rw=2049, want=45104, limit=40427 [ 110.642051][ T123] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 110.665444][ T9] device bridge_slave_0 left promiscuous mode [ 110.673375][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.803745][ T4380] EXT4-fs (loop5): Test dummy encryption mode enabled [ 110.812791][ T4380] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 110.812791][ T4380] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 110.812791][ T4380] [ 110.844839][ T4380] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,sb=0x000000000000d69a,lazytime,test_dummy_encryption=v1,grpid,noacl,grpjquota=,sb=0x0000000000000005,init_itable=0x0000000000000001,errors=remount-ro, [ 110.922009][ T384] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.934571][ T23] audit: type=1400 audit(1747835636.900:497): avc: denied { create } for pid=4385 comm="syz.0.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.010215][ T4390] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 111.012237][ T384] usb 2-1: too many endpoints for config 1 interface 1 altsetting 64: 159, using maximum allowed: 30 [ 111.039181][ T123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.046217][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue [ 111.052710][ T123] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 111.071390][ T4390] ext4 filesystem being mounted at /252/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 111.082965][ T384] usb 2-1: config 1 interface 1 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 159 [ 111.082984][ T384] usb 2-1: config 1 interface 1 has no altsetting 0 [ 111.083167][ T123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.134492][ T123] usb 5-1: config 0 descriptor?? [ 111.140531][ T4390] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.1709: corrupted xattr block 32 [ 111.156983][ T4390] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 111.167872][ T4390] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.1709: corrupted xattr block 32 [ 111.181429][ T4390] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 111.191741][ T23] audit: type=1400 audit(1747835637.160:498): avc: denied { execute } for pid=4389 comm="syz.0.1709" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.218042][ T4390] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.1709: corrupted xattr block 32 [ 111.238299][ T4390] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 111.250504][ T23] audit: type=1400 audit(1747835637.210:499): avc: denied { read open } for pid=4389 comm="syz.0.1709" path="/252/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.250533][ T4390] process 'syz.0.1709' launched './file1' with NULL argv: empty string added [ 111.289735][ T4390] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.1709: corrupted xattr block 32 [ 111.291995][ T509] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.312935][ T384] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.324365][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.334049][ T384] usb 2-1: Product: syz [ 111.345318][ T384] usb 2-1: Manufacturer: syz [ 111.356630][ T384] usb 2-1: SerialNumber: syz [ 111.420869][ T4405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'. [ 111.431512][ T4405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1714'. [ 111.487058][ T4407] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 111.497938][ T4407] EXT4-fs (loop3): invalid journal inode [ 111.505204][ T4407] EXT4-fs (loop3): can't get journal size [ 111.514611][ T4407] EXT4-fs (loop3): 1 truncate cleaned up [ 111.522434][ T4407] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 111.548625][ T4407] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 111.572021][ T509] usb 6-1: Using ep0 maxpacket: 16 [ 111.623258][ T123] logitech 0003:046D:CA03.0036: unbalanced collection at end of report description [ 111.634008][ T123] logitech 0003:046D:CA03.0036: parse failed [ 111.640693][ T123] logitech: probe of 0003:046D:CA03.0036 failed with error -22 [ 111.692296][ T509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.704599][ T509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.716362][ T509] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.730721][ T509] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.740123][ T509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.748783][ T384] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 111.759517][ T384] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 111.766538][ T509] usb 6-1: config 0 descriptor?? [ 111.830597][ T553] usb 5-1: USB disconnect, device number 21 [ 111.845132][ T384] usb 2-1: USB disconnect, device number 21 [ 111.873047][ T13] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 112.112612][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 112.203387][ T4419] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 112.203387][ T4419] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 112.203387][ T4419] [ 112.223891][ T4419] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 112.223891][ T4419] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 112.223891][ T4419] [ 112.244103][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.256457][ T4419] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.258825][ T509] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0037/input/input26 [ 112.266422][ T13] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 112.290734][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.291908][ T509] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 112.300465][ T13] usb 4-1: config 0 descriptor?? [ 112.326367][ T4419] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 112.344300][ T4419] EXT4-fs (loop1): 1 truncate cleaned up [ 112.353131][ T23] audit: type=1400 audit(1747835638.320:500): avc: denied { listen } for pid=4423 comm="syz.4.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 112.361059][ T4419] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue [ 112.410283][ T9] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 112.426070][ T4419] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 112.473508][ T339] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 112.479983][ T18] usb 6-1: USB disconnect, device number 2 [ 112.496594][ T339] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 112.532271][ T2856] ------------[ cut here ]------------ [ 112.538483][ T2856] kernel BUG at fs/namei.c:2894! [ 112.549526][ T2856] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 112.556324][ T2856] CPU: 0 PID: 2856 Comm: syz.1.1079 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 112.571825][ T2856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.584917][ T2856] RIP: 0010:may_delete+0x7b1/0x7c0 [ 112.591203][ T2856] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 90 bf f6 ff e9 d0 fd ff ff e8 76 c5 c8 ff 0f 0b e8 6f c5 c8 ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 56 53 [ 112.615366][ T2856] RSP: 0018:ffff8881e62af770 EFLAGS: 00010293 [ 112.623184][ T2856] RAX: ffffffff8196b971 RBX: ffff8881dcb6b880 RCX: ffff8881e99f2f40 [ 112.634258][ T2856] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 112.644665][ T2856] RBP: ffff8881e62af7f0 R08: 0000000000000004 R09: 0000000000000003 [ 112.653575][ T2856] R10: ffffed103cc55ed4 R11: 1ffff1103cc55ed4 R12: ffff8881dca51ac8 [ 112.663430][ T2856] R13: 1ffff1103b96d710 R14: ffff8881dcb6b898 R15: ffff8881ea288be0 [ 112.673378][ T2856] FS: 00007f710de0b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 112.685003][ T2856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.692598][ T2856] CR2: 00002000000012c0 CR3: 00000001ece05000 CR4: 00000000003406b0 [ 112.703600][ T2856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.715702][ T2856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.725636][ T2856] Call Trace: [ 112.729701][ T2856] ? __kasan_check_write+0x14/0x20 [ 112.735761][ T2856] ? up_write+0x5b/0x160 [ 112.741039][ T2856] vfs_rmdir+0x2c/0x3e0 [ 112.745879][ T2856] incfs_kill_sb+0xfe/0x210 [ 112.751077][ T2856] deactivate_locked_super+0xa0/0x100 [ 112.757725][ T2856] deactivate_super+0x14f/0x1d0 [ 112.763147][ T2856] ? __kasan_check_write+0x14/0x20 [ 112.769999][ T2856] ? deactivate_locked_super+0x100/0x100 [ 112.777129][ T2856] ? fast_dput+0x83/0x290 [ 112.783239][ T2856] cleanup_mnt+0x446/0x500 [ 112.788966][ T2856] __cleanup_mnt+0x19/0x20 [ 112.795765][ T2856] task_work_run+0x146/0x170 [ 112.802495][ T2856] do_exit+0xa43/0x2660 [ 112.806649][ T2856] ? put_task_struct+0x90/0x90 [ 112.812765][ T2856] ? __kasan_check_write+0x14/0x20 [ 112.818844][ T2856] ? _raw_spin_lock_irq+0x8f/0xe0 [ 112.825288][ T2856] ? __kasan_check_read+0x11/0x20 [ 112.831679][ T2856] ? cgroup_update_frozen+0x15c/0xab0 [ 112.838111][ T2856] ? _raw_spin_lock_irqsave+0x110/0x110 [ 112.844210][ T2856] do_group_exit+0x13e/0x300 [ 112.849957][ T2856] get_signal+0xdee/0x13d0 [ 112.855266][ T2856] do_signal+0xad/0xda0 [ 112.860565][ T2856] ? signal_fault+0x1d0/0x1d0 [ 112.867067][ T2856] ? __free_pages+0x8c/0x110 [ 112.873924][ T2856] ? slab_free_freelist_hook+0xb7/0x180 [ 112.880531][ T2856] ? __kasan_check_write+0x14/0x20 [ 112.885751][ T2856] ? _raw_spin_lock_irq+0x8f/0xe0 [ 112.890959][ T2856] ? _raw_spin_lock_irqsave+0x110/0x110 [ 112.896859][ T2856] exit_to_usermode_loop+0xc4/0x1b0 [ 112.902418][ T2856] prepare_exit_to_usermode+0x18e/0x1f0 [ 112.908941][ T2856] syscall_return_slowpath+0x61/0x80 [ 112.914891][ T2856] ret_from_fork+0x15/0x30 [ 112.920839][ T2856] RIP: 0033:0x7f710f7a2969 [ 112.926343][ T2856] Code: Bad RIP value. [ 112.931935][ T2856] RSP: 002b:00007f710de0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 112.943952][ T2856] RAX: 0000000000000000 RBX: 00007f710f9c9fa0 RCX: 00007f710f7a2969 [ 112.954482][ T2856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.964339][ T2856] RBP: 00007f710f824ab1 R08: 0000000000000000 R09: 0000000000000000 [ 112.975559][ T2856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.984700][ T2856] R13: 0000000000000001 R14: 00007f710f9c9fa0 R15: 00007ffeec700f58 [ 112.996336][ T2856] Modules linked in: [ 113.001612][ T2856] ---[ end trace 86682d5f1d94b939 ]--- [ 113.007655][ T2856] RIP: 0010:may_delete+0x7b1/0x7c0 [ 113.013591][ T2856] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 90 bf f6 ff e9 d0 fd ff ff e8 76 c5 c8 ff 0f 0b e8 6f c5 c8 ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 56 53 [ 113.038747][ T13] pantherlord 0003:0E8F:0003.0038: item fetching failed at offset 4/5 [ 113.049866][ T2856] RSP: 0018:ffff8881e62af770 EFLAGS: 00010293 [ 113.050253][ T13] pantherlord 0003:0E8F:0003.0038: parse failed [ 113.057963][ T2856] RAX: ffffffff8196b971 RBX: ffff8881dcb6b880 RCX: ffff8881e99f2f40 [ 113.066600][ T13] pantherlord: probe of 0003:0E8F:0003.0038 failed with error -22 [ 113.090342][ T2856] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 113.101425][ T2856] RBP: ffff8881e62af7f0 R08: 0000000000000004 R09: 0000000000000003 [ 113.111578][ T2856] R10: ffffed103cc55ed4 R11: 1ffff1103cc55ed4 R12: ffff8881dca51ac8 [ 113.121990][ T2856] R13: 1ffff1103b96d710 R14: ffff8881dcb6b898 R15: ffff8881ea288be0 [ 113.132753][ T2856] FS: 00007f710de0b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 113.143526][ T2856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.151875][ T2856] CR2: 00007f60efb00ff0 CR3: 00000001f0e57000 CR4: 00000000003406a0 [ 113.161704][ T2856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.172863][ T2856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.183069][ T2856] Kernel panic - not syncing: Fatal exception [ 113.190188][ T2856] Kernel Offset: disabled [ 113.195098][ T2856] Rebooting in 86400 seconds..