last executing test programs: 5.510797305s ago: executing program 1 (id=563): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x977, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x11, 0x1a, r1}, 0x14) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 5.491066295s ago: executing program 1 (id=575): sigaltstack(&(0x7f0000000240)={0xffffffffffffffff, 0x80000002}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 5.448049836s ago: executing program 1 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.430580116s ago: executing program 1 (id=567): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x4, "f16c66cc"}, @local=@item_4={0x3, 0x2, 0x8, "c043690b"}, @main=@item_4={0x3, 0x0, 0xa, "f10c2c0f"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x4, "b3d3d36f"}, @main=@item_012={0x2, 0x0, 0x8, "b6bc"}, @global=@item_012={0x0, 0x1, 0x6}, @main=@item_012={0x2, 0x0, 0xc, "c031"}, @global=@item_012={0x0, 0x1, 0x9}, @main=@item_4={0x3, 0x0, 0xc, "b449f3c0"}]}}, 0x0}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) 3.073925719s ago: executing program 1 (id=589): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab4090619b34000000000000000000000924030000000000000924050000d8211cfd0924030504"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x0, 0x30, 0x9f, {0x9f, 0x22, "1d365bde634f58122e57cae591f193658d1a2b8198012f55f0046072892ea03fa37ed3561cb5bb44e839598b2c5c96dc5e9a9cefa1809874efefe15332dc6ea4df04ea4af4678c858afde1209775784dd56fa24a57a3c07c88ce92ade29468c79055c613e1a2ead9dc44dee9c8bbf1c82e4427068fbd21e42587c8bf96a2c66cb2d3cde7ecbc5db85986cc4fd27aa45f7711170170aac04f672d352261"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0x7}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x84, 0x1, "a0"}, 0x0}) 3.067474929s ago: executing program 0 (id=591): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000016}, 0x20004000) 3.056400729s ago: executing program 4 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, r1, 0x6, 0x0, @val=@netfilter={0xa, 0x0, 0x3}}, 0x3c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r1, 0x6, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.993669089s ago: executing program 0 (id=593): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180007000000000000000000030000008606000000030200"], 0x18}}], 0x2, 0x0) 2.993523809s ago: executing program 0 (id=594): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write(r1, 0x0, 0x0) 2.993378449s ago: executing program 4 (id=595): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) move_mount(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x154) 2.99328208s ago: executing program 4 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5a}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 2.877510491s ago: executing program 4 (id=597): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x44, {"0f9b9479f7ffffff0f0666bad004b800700000ef0fae69b76636f031ba6afe46220f0012410f01cf0f20074d0fc71f450f2164"}}], 0x44}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.783655762s ago: executing program 0 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000008000000e07f000001"], 0x50) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e30000000093c40800450000300004000000019078ac1e0001e000000136040190780300000045000000000000000000000064010102e0"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x40002002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40084) syz_socket_connect_nvme_tcp() r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x4e21, @multicast2}}, 0x1}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000001ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@data_err_ignore}, {@mb_optimize_scan}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") 2.730651883s ago: executing program 4 (id=602): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x40000, &(0x7f0000000300)={[{@test_dummy_encryption}], [{@uid_eq}, {@flag='nolazytime'}, {@fowner_lt}, {@dont_hash}, {@fowner_eq}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082000400"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00'}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa00000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0xb0000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x9, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) 2.22865916s ago: executing program 2 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) 2.19008062s ago: executing program 2 (id=608): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 537.299743ms ago: executing program 3 (id=609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='mmap_lock_acquire_returned\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 475.814523ms ago: executing program 0 (id=610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000005000/0x400000)=nil) 475.627323ms ago: executing program 2 (id=611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) 441.653314ms ago: executing program 3 (id=612): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c657874656e745f63616368652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6e6f646973636172642c6a71666d743d76667376312c6e6f61636c2c636865636b706f696e743d64697361626c652c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c6d656d6f72793d6c6f772c696e6c696e655f78617474725f73697a653d3078303030303030303030303030303030392c00fd6f61b352587257ebbb0935298e3f04b3b0867aa93eb8be85a6ff"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x143) io_uring_setup(0x4ca4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x9e}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1c, 0xe7b, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 340.655046ms ago: executing program 2 (id=613): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 295.255766ms ago: executing program 2 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 286.305176ms ago: executing program 4 (id=615): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 192.811327ms ago: executing program 0 (id=616): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = eventfd2(0x8, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x14, 0x4}) 192.573738ms ago: executing program 2 (id=617): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB="630b04000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 96.590789ms ago: executing program 3 (id=618): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file2\x00', 0xc4000480) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') 76.891009ms ago: executing program 3 (id=619): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 62.032629ms ago: executing program 3 (id=620): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x81012, r0, 0x0) 28.01744ms ago: executing program 3 (id=621): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7079a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ppoll(&(0x7f0000000040)=[{r1, 0x9000}], 0x1, &(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 1 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000008000000e07f000001"], 0x50) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e30000000093c40800450000300004000000019078ac1e0001e000000136040190780300000045000000000000000000000064010102e0"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x40002002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40084) syz_socket_connect_nvme_tcp() r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x4e21, @multicast2}}, 0x1}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000001ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@data_err_ignore}, {@mb_optimize_scan}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.828054][ T411] block device autoloading is deprecated and will be removed. [ 44.893260][ T417] syz.2.16: attempt to access beyond end of device [ 44.893260][ T417] loop2: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 44.972145][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 44.981945][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 44.992386][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 45.003199][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 45.013867][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 45.024366][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 45.034914][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 45.045117][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 45.055327][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 45.065940][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 45.075578][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 45.085858][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 45.096551][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 45.106405][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 45.117018][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 45.127630][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 45.138404][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 45.350907][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 45.360761][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 45.370638][ T417] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 45.381132][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 45.392223][ T417] syz.2.16: attempt to access beyond end of device [ 45.392223][ T417] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 45.407274][ T417] syz.2.16: attempt to access beyond end of device [ 45.407274][ T417] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 45.422305][ T417] syz.2.16: attempt to access beyond end of device [ 45.422305][ T417] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 45.436986][ T417] syz.2.16: attempt to access beyond end of device [ 45.436986][ T417] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 45.452288][ T417] syz.2.16: attempt to access beyond end of device [ 45.452288][ T417] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 45.467266][ T417] syz.2.16: attempt to access beyond end of device [ 45.467266][ T417] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 45.482111][ T417] syz.2.16: attempt to access beyond end of device [ 45.482111][ T417] loop2: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 45.681039][ T417] syz.2.16: attempt to access beyond end of device [ 45.681039][ T417] loop2: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 45.700378][ T417] syz.2.16: attempt to access beyond end of device [ 45.700378][ T417] loop2: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 45.722104][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 45.732096][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 45.742776][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 45.753584][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 45.764586][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 45.775131][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 45.785759][ T417] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 45.950336][ T398] sched: RT throttling activated [ 45.977189][ T416] loop3: detected capacity change from 0 to 1024 [ 45.990566][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 46.000133][ T417] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 46.010225][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 46.019726][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 46.029552][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 46.039235][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 46.049173][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 46.058997][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 46.068554][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 46.077982][ T417] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 46.087633][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 46.097506][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 46.107046][ T417] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 46.134290][ T422] loop0: detected capacity change from 0 to 512 [ 46.158342][ T410] netlink: 56 bytes leftover after parsing attributes in process `syz.4.19'. [ 46.216461][ T422] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.238862][ T422] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.256335][ T416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.265542][ T422] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 47.701876][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 47.955466][ T416] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.967631][ T422] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.21: invalid indirect mapped block 4278190080 (level 0) [ 47.991688][ T28] audit: type=1400 audit(2000000003.290:149): avc: denied { setopt } for pid=427 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.032501][ T422] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.21: invalid indirect mapped block 1 (level 1) [ 48.276805][ T422] EXT4-fs (loop0): 1 truncate cleaned up [ 48.290459][ T422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.306676][ T441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 48.316369][ T422] EXT4-fs (loop0): unmounting filesystem. [ 48.744479][ T444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 48.815604][ T286] EXT4-fs (loop3): unmounting filesystem. [ 48.880991][ T446] loop2: detected capacity change from 0 to 512 [ 48.940458][ T28] audit: type=1400 audit(2000000005.600:150): avc: denied { read } for pid=419 comm="syz.0.21" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.986235][ T446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.986971][ T420] netlink: 392 bytes leftover after parsing attributes in process `syz.0.21'. [ 48.996864][ T446] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.036435][ T28] audit: type=1400 audit(2000000005.600:151): avc: denied { open } for pid=419 comm="syz.0.21" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.062067][ T28] audit: type=1400 audit(2000000005.680:153): avc: denied { create } for pid=451 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.617337][ T28] audit: type=1400 audit(2000000005.680:152): avc: denied { create } for pid=419 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.760639][ T28] audit: type=1400 audit(2000000005.680:154): avc: denied { write } for pid=419 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.783710][ T28] audit: type=1400 audit(2000000005.680:155): avc: denied { nlmsg_write } for pid=419 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.037085][ T472] loop3: detected capacity change from 0 to 256 [ 52.321909][ T28] audit: type=1400 audit(2000000005.880:156): avc: denied { bind } for pid=451 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.364582][ T28] audit: type=1400 audit(2000000005.890:157): avc: denied { connect } for pid=451 comm="syz.4.28" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.388917][ T285] EXT4-fs (loop2): unmounting filesystem. [ 52.413482][ T28] audit: type=1400 audit(2000000006.100:158): avc: denied { mount } for pid=453 comm="syz.3.26" name="/" dev="ramfs" ino=16733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.619596][ T483] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 53.903601][ T28] audit: type=1400 audit(2000000007.010:159): avc: denied { write } for pid=445 comm="syz.2.27" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.951977][ T487] loop3: detected capacity change from 0 to 512 [ 54.018674][ T487] EXT4-fs: Ignoring removed i_version option [ 54.051480][ T28] audit: type=1400 audit(2000000007.010:160): avc: denied { add_name } for pid=445 comm="syz.2.27" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.319008][ T487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.513428][ T28] audit: type=1400 audit(2000000007.010:161): avc: denied { create } for pid=445 comm="syz.2.27" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.544534][ T487] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.717779][ T487] EXT4-fs (loop3): 1 truncate cleaned up [ 54.787027][ T487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.292241][ T28] audit: type=1400 audit(2000000007.010:162): avc: denied { write } for pid=445 comm="syz.2.27" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.370492][ T28] audit: type=1400 audit(2000000007.010:163): avc: denied { open } for pid=445 comm="syz.2.27" path="/4/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.530418][ T28] audit: type=1400 audit(2000000007.020:164): avc: denied { read } for pid=450 comm="syz.1.29" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.680148][ T505] syz.3.35[505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.680320][ T505] syz.3.35[505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.490640][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.512114][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.531153][ T505] device bridge_slave_0 left promiscuous mode [ 57.538230][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.650315][ T508] hub 8-0:1.0: USB hub found [ 57.655946][ T508] hub 8-0:1.0: 1 port detected [ 57.690536][ T28] audit: type=1400 audit(2000000007.020:165): avc: denied { open } for pid=450 comm="syz.1.29" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.874897][ T28] audit: type=1400 audit(2000000007.020:166): avc: denied { ioctl } for pid=450 comm="syz.1.29" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.939336][ T28] audit: type=1400 audit(2000000007.570:167): avc: denied { sqpoll } for pid=445 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.080574][ T28] audit: type=1400 audit(2000000007.570:168): avc: denied { ioctl } for pid=445 comm="syz.2.27" path="/4/file0/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.108671][ T505] device bridge_slave_1 left promiscuous mode [ 58.115459][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.145056][ T512] IPv6: syztnl0: Disabled Multicast RS [ 58.197981][ T505] syz.3.35 (505) used greatest stack depth: 21536 bytes left [ 58.207411][ T286] EXT4-fs (loop3): unmounting filesystem. [ 58.809025][ T521] x_tables: duplicate underflow at hook 1 [ 58.822408][ T521] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 59.277653][ T526] loop4: detected capacity change from 0 to 128 [ 59.350413][ T526] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.417774][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 59.417834][ T28] audit: type=1400 audit(2000000016.100:181): avc: denied { ioctl } for pid=522 comm="syz.3.42" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16877 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.636847][ T526] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.942774][ T531] tipc: Enabling of bearer rejected, failed to enable media [ 60.310051][ T533] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 60.354106][ T355] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.645794][ T535] loop3: detected capacity change from 0 to 4096 [ 60.662892][ T535] EXT4-fs (loop3): Test dummy encryption mode enabled [ 60.722819][ T535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.766570][ T28] audit: type=1400 audit(2000000017.460:182): avc: denied { create } for pid=534 comm="syz.3.46" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.817351][ T535] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 60.824307][ T28] audit: type=1400 audit(2000000017.520:183): avc: denied { create } for pid=543 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.752714][ T552] loop4: detected capacity change from 0 to 128 [ 62.804052][ T28] audit: type=1400 audit(2000000017.960:184): avc: denied { ioctl } for pid=545 comm="syz.1.48" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.868739][ T552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.881702][ T552] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.513042][ T558] syz.0.47 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.628866][ T284] EXT4-fs (loop4): unmounting filesystem. [ 64.665005][ T28] audit: type=1400 audit(2000000018.260:185): avc: denied { bind } for pid=534 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.311578][ T566] overlayfs: unrecognized mount option "verity=require" or missing value [ 65.479817][ T28] audit: type=1400 audit(2000000020.280:186): avc: denied { ioctl } for pid=543 comm="syz.0.47" path="socket:[16914]" dev="sockfs" ino=16914 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.493391][ T568] loop4: detected capacity change from 0 to 1024 [ 65.508402][ T28] audit: type=1400 audit(2000000021.290:187): avc: denied { write } for pid=557 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.519738][ T568] EXT4-fs: Ignoring removed i_version option [ 65.538562][ T286] EXT4-fs (loop3): unmounting filesystem. [ 65.548619][ T568] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.557586][ T28] audit: type=1400 audit(2000000021.300:188): avc: denied { mount } for pid=557 comm="syz.1.49" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.585715][ T28] audit: type=1400 audit(2000000021.320:189): avc: denied { accept } for pid=563 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 65.619984][ T28] audit: type=1400 audit(2000000022.040:190): avc: denied { read write } for pid=563 comm="syz.2.50" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.647658][ T28] audit: type=1400 audit(2000000022.040:191): avc: denied { open } for pid=563 comm="syz.2.50" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.655675][ T555] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 65.683344][ T28] audit: type=1400 audit(2000000022.040:192): avc: denied { ioctl } for pid=563 comm="syz.2.50" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.711706][ T28] audit: type=1400 audit(2000000022.160:193): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.728062][ T568] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.735477][ T28] audit: type=1400 audit(2000000022.170:194): avc: denied { write } for pid=567 comm="syz.4.51" name="igmp" dev="proc" ino=4026532486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.753064][ T570] process 'syz.0.52' launched './file0' with NULL argv: empty string added [ 65.784274][ T579] netlink: 96 bytes leftover after parsing attributes in process `syz.3.54'. [ 65.795191][ T579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 65.805300][ T579] netlink: 84 bytes leftover after parsing attributes in process `syz.3.54'. [ 65.922642][ T555] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 66.008049][ T555] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 66.108893][ T555] usb 3-1: config 1 interface 0 has no altsetting 0 [ 66.183169][ T555] usb 3-1: string descriptor 0 read error: -22 [ 66.236918][ T555] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.393801][ T555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.665595][ T582] fscrypt: AES-256-XTS using blk-crypto-fallback [ 67.673141][ T582] fscrypt (loop4): error -12 starting to use blk-crypto [ 67.753433][ T284] EXT4-fs (loop4): unmounting filesystem. [ 67.860014][ T555] usb 3-1: can't set config #1, error -71 [ 68.018398][ T555] usb 3-1: USB disconnect, device number 2 [ 69.014346][ T597] netlink: 'syz.4.56': attribute type 3 has an invalid length. [ 69.861860][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 69.861875][ T28] audit: type=1400 audit(2000000026.560:204): avc: denied { connect } for pid=595 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.893783][ T28] audit: type=1400 audit(2000000026.590:205): avc: denied { write } for pid=595 comm="syz.4.56" path="socket:[16002]" dev="sockfs" ino=16002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.950980][ T40] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.006647][ T28] audit: type=1400 audit(2000000026.700:206): avc: denied { create } for pid=603 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.086796][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.120429][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 71.276040][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.290705][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.004022][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 73.062306][ T627] syz.3.58[627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.062392][ T627] syz.3.58[627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.083455][ T627] loop3: detected capacity change from 0 to 128 [ 73.347641][ T627] EXT4-fs (loop3): Test dummy encryption mode enabled [ 73.440531][ T28] audit: type=1400 audit(2000000030.110:207): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.516818][ T627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.526858][ T627] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.564875][ T40] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 74.575611][ T24] usb 1-1: device descriptor read/all, error -71 [ 74.583514][ T28] audit: type=1400 audit(2000000030.730:208): avc: denied { write } for pid=631 comm="syz.2.64" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.640450][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.664357][ T640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.672253][ T640] IPv6: NLM_F_CREATE should be set when creating new route [ 74.680284][ T640] IPv6: NLM_F_CREATE should be set when creating new route [ 74.776003][ T286] EXT4-fs (loop3): unmounting filesystem. [ 74.812065][ T644] loop3: detected capacity change from 0 to 256 [ 74.819397][ T644] FAT-fs (loop3): Unrecognized mount option "no‹mnumtail=0" or missing value [ 74.856829][ T40] usb 4-1: config 0 descriptor?? [ 74.864244][ T40] usb 4-1: can't set config #0, error -71 [ 74.871502][ T40] usb 4-1: USB disconnect, device number 2 [ 74.900412][ T412] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.512310][ T654] loop2: detected capacity change from 0 to 128 [ 77.533135][ T28] audit: type=1326 audit(2000000034.230:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 77.558220][ T654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.580701][ T28] audit: type=1326 audit(2000000034.230:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 77.755491][ T654] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.820912][ T28] audit: type=1326 audit(2000000034.250:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 77.847032][ T28] audit: type=1326 audit(2000000034.250:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 77.883676][ T28] audit: type=1326 audit(2000000034.250:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 77.957584][ T28] audit: type=1326 audit(2000000034.250:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 77.988572][ T28] audit: type=1326 audit(2000000034.250:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 78.022194][ T28] audit: type=1326 audit(2000000034.250:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 78.058005][ T28] audit: type=1326 audit(2000000034.250:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f829978e929 code=0x7ffc0000 [ 78.101551][ T28] audit: type=1326 audit(2000000034.250:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=655 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f829978e963 code=0x7ffc0000 [ 78.670707][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.785608][ T638] syz.1.65 (638) used greatest stack depth: 21168 bytes left [ 79.076671][ T19] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 79.136736][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.339011][ T19] usb 3-1: config 0 descriptor?? [ 80.214683][ T686] netlink: 'syz.3.77': attribute type 27 has an invalid length. [ 80.363636][ T691] tipc: Started in network mode [ 80.369116][ T691] tipc: Node identity ac141425, cluster identity 4711 [ 80.377468][ T691] tipc: New replicast peer: 0.0.0.0 [ 80.383965][ T691] tipc: Enabled bearer , priority 10 [ 80.613255][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.645579][ T686] device veth0_vlan left promiscuous mode [ 80.652643][ T686] device veth0_vlan entered promiscuous mode [ 80.661942][ T686] device veth1_macvtap left promiscuous mode [ 80.670781][ T686] device veth1_macvtap entered promiscuous mode [ 80.679520][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.688260][ T19] usb 3-1: Cannot read MAC address [ 80.695619][ T19] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -32 [ 80.700962][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.740166][ T686] syz.3.77 (686) used greatest stack depth: 19008 bytes left [ 80.746836][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.768502][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.778533][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.788974][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.798636][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 80.807923][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.817987][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 80.826844][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.838331][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.847951][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.857233][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.869090][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.927161][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.947309][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.960487][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.069682][ T702] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 81.314859][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.324686][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.334040][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.343152][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.353006][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.361812][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.377815][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.388972][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.398052][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.406787][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.415606][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.424233][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.433947][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.500977][ T24] tipc: Node number set to 2886997029 [ 81.509287][ T339] usb 3-1: USB disconnect, device number 3 [ 81.520927][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.612322][ T711] x_tables: duplicate underflow at hook 1 [ 81.632967][ T711] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 83.148590][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 83.148610][ T28] audit: type=1400 audit(2000000039.810:300): avc: denied { getopt } for pid=712 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.333007][ T285] EXT4-fs (loop2): unmounting filesystem. [ 84.217107][ T28] audit: type=1400 audit(2000000040.910:301): avc: denied { read } for pid=709 comm="syz.1.82" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.251684][ T28] audit: type=1400 audit(2000000040.910:302): avc: denied { open } for pid=709 comm="syz.1.82" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.052778][ T751] loop2: detected capacity change from 0 to 256 [ 85.149938][ T28] audit: type=1326 audit(2000000041.840:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 85.595185][ T28] audit: type=1326 audit(2000000041.840:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 85.671014][ T28] audit: type=1326 audit(2000000041.840:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 85.731483][ T28] audit: type=1326 audit(2000000041.840:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 85.756773][ T28] audit: type=1326 audit(2000000041.840:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 85.782377][ T28] audit: type=1326 audit(2000000041.840:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 85.808306][ T28] audit: type=1326 audit(2000000041.840:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 85.860388][ T354] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.050415][ T354] usb 3-1: Using ep0 maxpacket: 8 [ 86.063969][ T354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.093207][ T354] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 86.115670][ T354] usb 3-1: config 0 has no interface number 0 [ 86.125789][ T354] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 86.497863][ T354] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 86.509259][ T354] usb 3-1: config 0 interface 88 has no altsetting 0 [ 86.526502][ T354] usb 3-1: string descriptor 0 read error: -22 [ 86.540629][ T354] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 86.560262][ T354] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 86.580976][ T354] usb 3-1: config 0 descriptor?? [ 86.588906][ T354] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input6 [ 86.624685][ T412] udevd[412]: Error opening device "/dev/input/event3": Input/output error [ 86.989882][ T770] loop4: detected capacity change from 0 to 512 [ 86.997962][ T770] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.007027][ T770] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 87.035964][ T770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 87.045044][ T770] System zones: 1-12 [ 87.056833][ T770] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.93: corrupted in-inode xattr [ 87.064086][ T412] udevd[412]: Unable to EVIOCGABS device "/dev/input/event3" [ 87.070368][ T770] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.93: couldn't read orphan inode 15 (err -117) [ 87.078340][ T412] udevd[412]: Unable to EVIOCGABS device "/dev/input/event3" [ 87.090810][ T770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.207829][ T777] netlink: 'syz.0.94': attribute type 27 has an invalid length. [ 87.251427][ T777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.259743][ T777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.378889][ T284] EXT4-fs (loop4): unmounting filesystem. [ 87.451932][ T776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.740651][ T776] device veth0_vlan left promiscuous mode [ 87.747026][ T776] device veth0_vlan entered promiscuous mode [ 87.755349][ T776] device veth1_macvtap left promiscuous mode [ 87.763274][ T776] device veth1_macvtap entered promiscuous mode [ 87.845890][ T787] tipc: Started in network mode [ 87.854460][ T787] tipc: Node identity ac141425, cluster identity 4711 [ 87.864255][ T787] tipc: New replicast peer: 0.0.0.0 [ 87.871385][ T787] tipc: Enabled bearer , priority 10 [ 87.881446][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.891372][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.901985][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.912486][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.920662][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.931519][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.951297][ T793] loop4: detected capacity change from 0 to 512 [ 87.965793][ T793] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.299626][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.336487][ T793] EXT4-fs (loop4): 1 truncate cleaned up [ 88.342771][ T793] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.943239][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.951608][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.990518][ T40] tipc: Node number set to 2886997029 [ 90.005373][ T354] usb 3-1: USB disconnect, device number 4 [ 90.064888][ T284] EXT4-fs (loop4): unmounting filesystem. [ 90.092413][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.111104][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 90.131249][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.140451][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 90.140470][ T28] audit: type=1400 audit(2000000046.800:341): avc: denied { listen } for pid=792 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.236571][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 90.245842][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.629830][ T805] loop2: detected capacity change from 0 to 512 [ 91.011098][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.688162][ T817] loop4: detected capacity change from 0 to 1024 [ 91.706781][ T817] EXT4-fs: Ignoring removed bh option [ 91.722101][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.731492][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.760645][ T817] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.776837][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.810229][ T28] audit: type=1400 audit(2000000047.700:342): avc: denied { read } for pid=796 comm="syz.3.101" path="socket:[16382]" dev="sockfs" ino=16382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.933864][ T805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.942989][ T805] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.943004][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.943372][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.358546][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.403784][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.458902][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.841676][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.870806][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.901479][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.924177][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.945908][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.971950][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.002839][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.028732][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.050107][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.070947][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.091348][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.111719][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.130981][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.182884][ T285] EXT4-fs (loop2): unmounting filesystem. [ 94.264679][ T284] EXT4-fs (loop4): unmounting filesystem. [ 98.629505][ T855] loop4: detected capacity change from 0 to 128 [ 99.985830][ T28] audit: type=1326 audit(2000000056.640:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.017974][ T28] audit: type=1326 audit(2000000056.640:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.018009][ T28] audit: type=1326 audit(2000000056.640:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.018034][ T28] audit: type=1326 audit(2000000056.640:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.018058][ T28] audit: type=1326 audit(2000000056.640:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.018082][ T28] audit: type=1326 audit(2000000056.640:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.018105][ T28] audit: type=1326 audit(2000000056.640:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.018129][ T28] audit: type=1326 audit(2000000056.640:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.018160][ T28] audit: type=1326 audit(2000000056.640:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 100.018183][ T28] audit: type=1326 audit(2000000056.640:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=876 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56d8e929 code=0x7ffc0000 [ 101.991812][ T874] tty tty1: ldisc open failed (-12), clearing slot 0 [ 102.024362][ T899] loop2: detected capacity change from 0 to 256 [ 102.034571][ T899] exfat: Deprecated parameter 'utf8' [ 102.040019][ T899] exfat: Deprecated parameter 'utf8' [ 102.046332][ T899] exfat: Deprecated parameter 'utf8' [ 102.054418][ T899] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 102.892254][ T896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'. [ 103.881835][ T902] netlink: 'syz.3.119': attribute type 8 has an invalid length. [ 103.985991][ T897] loop4: detected capacity change from 0 to 1024 [ 104.042107][ T897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.075414][ T931] loop2: detected capacity change from 0 to 2048 [ 105.287403][ T931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.155576][ T284] EXT4-fs (loop4): unmounting filesystem. [ 106.175516][ T285] EXT4-fs (loop2): unmounting filesystem. [ 107.251260][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 107.251279][ T28] audit: type=1400 audit(2000000063.160:385): avc: denied { name_bind } for pid=939 comm="syz.1.127" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 107.427009][ T954] loop2: detected capacity change from 0 to 512 [ 107.438071][ T954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.635121][ T954] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.129: corrupted in-inode xattr [ 107.648808][ T960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.128'. [ 107.658728][ T960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.128'. [ 107.669685][ T954] EXT4-fs (loop2): Remounting filesystem read-only [ 107.677086][ T954] EXT4-fs (loop2): 1 truncate cleaned up [ 107.682858][ T954] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.625172][ T28] audit: type=1400 audit(2000000064.100:386): avc: denied { connect } for pid=945 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.652218][ T28] audit: type=1400 audit(2000000064.100:387): avc: denied { write } for pid=945 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.768229][ T28] audit: type=1400 audit(2000000065.340:388): avc: denied { ioctl } for pid=953 comm="syz.1.131" path="socket:[17560]" dev="sockfs" ino=17560 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.112305][ T966] device bridge0 entered promiscuous mode [ 110.118694][ T966] bridge0: port 3(macsec1) entered blocking state [ 110.125205][ T966] bridge0: port 3(macsec1) entered disabled state [ 110.418184][ T966] device bridge0 left promiscuous mode [ 110.459770][ T285] EXT4-fs (loop2): unmounting filesystem. [ 110.782200][ T28] audit: type=1400 audit(2000000067.480:389): avc: denied { ioctl } for pid=968 comm="syz.0.133" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.790171][ T973] loop4: detected capacity change from 0 to 128 [ 110.815502][ T977] loop2: detected capacity change from 0 to 256 [ 110.848648][ T977] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.860423][ T977] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 110.871638][ T977] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 110.917739][ T846] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.959381][ T28] audit: type=1400 audit(2000000067.650:390): avc: denied { write } for pid=974 comm="syz.2.134" name="file1" dev="loop2" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.280002][ T28] audit: type=1400 audit(2000000067.650:391): avc: denied { open } for pid=974 comm="syz.2.134" name="file1" dev="loop2" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.340459][ T339] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.422488][ T28] audit: type=1400 audit(2000000069.110:392): avc: denied { write } for pid=974 comm="syz.2.134" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.460877][ T991] loop4: detected capacity change from 0 to 128 [ 112.469488][ T992] overlayfs: filesystem on './file2' not supported [ 112.472850][ T28] audit: type=1400 audit(2000000069.160:393): avc: denied { mounton } for pid=974 comm="syz.2.134" path="/22/file0/file0" dev="loop2" ino=1048606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.529131][ T991] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.570397][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 112.575910][ T991] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.669913][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.678630][ T339] usb 1-1: config 4 has an invalid interface number: 36 but max is 0 [ 112.686844][ T339] usb 1-1: config 4 has no interface number 0 [ 112.711755][ T339] usb 1-1: New USB device found, idVendor=045e, idProduct=046a, bcdDevice=a7.c1 [ 112.720941][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.729354][ T339] usb 1-1: Product: syz [ 112.733605][ T339] usb 1-1: Manufacturer: syz [ 112.738391][ T339] usb 1-1: SerialNumber: syz [ 112.880448][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 112.887506][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.896296][ T6] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 112.904586][ T6] usb 4-1: config 0 has no interface number 0 [ 112.911152][ T6] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 112.922580][ T6] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 112.932895][ T6] usb 4-1: config 0 interface 88 has no altsetting 0 [ 112.941833][ T6] usb 4-1: string descriptor 0 read error: -22 [ 112.948197][ T6] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 112.957286][ T6] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 112.966193][ T6] usb 4-1: config 0 descriptor?? [ 112.972684][ T6] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input9 [ 113.040202][ T1007] syz.1.148[1007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.040585][ T1007] syz.1.148[1007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.143673][ T40] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.574047][ T40] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 113.594718][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.170038][ T40] usb 5-1: config 0 descriptor?? [ 114.259944][ T6] usb 4-1: USB disconnect, device number 3 [ 114.266059][ T339] usb 1-1: USB disconnect, device number 4 [ 114.318720][ T28] audit: type=1326 audit(2000000071.010:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 114.448376][ T28] audit: type=1326 audit(2000000071.010:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 114.472646][ T28] audit: type=1326 audit(2000000071.010:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 114.961365][ T28] audit: type=1326 audit(2000000071.010:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 114.987919][ T28] audit: type=1326 audit(2000000071.020:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 115.027721][ T28] audit: type=1326 audit(2000000071.020:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 115.051152][ T28] audit: type=1326 audit(2000000071.020:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1fd8e929 code=0x7ffc0000 [ 115.168266][ T40] usb 5-1: Cannot read MAC address [ 115.173733][ T40] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 115.300406][ T339] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.360675][ T297] usb 5-1: USB disconnect, device number 2 [ 115.490542][ T339] usb 3-1: Using ep0 maxpacket: 16 [ 115.497145][ T339] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 115.507438][ T339] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.516534][ T339] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 115.525697][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.534761][ T339] usb 3-1: config 0 descriptor?? [ 115.540537][ T6] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 115.722141][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.731239][ T6] usb 1-1: not running at top speed; connect to a high speed hub [ 115.739645][ T6] usb 1-1: config index 0 descriptor too short (expected 2560, got 155) [ 115.748234][ T6] usb 1-1: config 1 has too many interfaces: 36, using maximum allowed: 32 [ 115.756971][ T6] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 115.765705][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.775833][ T6] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 36 [ 115.787190][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.796424][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.804623][ T6] usb 1-1: Product: syz [ 115.808918][ T6] usb 1-1: Manufacturer: syz [ 115.813594][ T6] usb 1-1: SerialNumber: syz [ 115.893861][ T284] EXT4-fs (loop4): unmounting filesystem. [ 116.024061][ T6] usb 1-1: USB disconnect, device number 5 [ 116.329838][ T1046] loop2: detected capacity change from 0 to 512 [ 116.338926][ T1046] EXT4-fs: Ignoring removed oldalloc option [ 116.458149][ T1046] EXT4-fs (loop2): 1 truncate cleaned up [ 116.463947][ T1046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.786032][ T1057] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 117.964056][ T1067] loop4: detected capacity change from 0 to 128 [ 118.052888][ T1012] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.920793][ T1055] usb 3-1: USB disconnect, device number 5 [ 119.057587][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 119.057604][ T28] audit: type=1400 audit(2000000075.750:433): avc: denied { getopt } for pid=1078 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.205314][ T285] EXT4-fs (loop2): unmounting filesystem. [ 119.491599][ T1057] netlink: 96 bytes leftover after parsing attributes in process `syz.3.150'. [ 119.895165][ T1094] loop2: detected capacity change from 0 to 2048 [ 119.937682][ T1099] incfs: iterate_incfs_dir / -22 [ 119.949397][ T1099] incfs: iterate_incfs_dir / -22 [ 119.955730][ T1094] loop2: p1 < > p3 [ 119.962996][ T1094] loop2: p3 size 134217728 extends beyond EOD, truncated [ 120.032325][ T1103] cgroup: subsys name conflicts with all [ 120.471756][ T1106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 123.051401][ T1127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 123.987935][ T28] audit: type=1400 audit(2000000079.740:434): avc: denied { bind } for pid=1122 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.264951][ T1125] loop4: detected capacity change from 0 to 128 [ 124.318787][ T28] audit: type=1400 audit(2000000079.750:435): avc: denied { setopt } for pid=1122 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.459010][ T1125] loop4: detected capacity change from 0 to 512 [ 124.485882][ T1125] EXT4-fs: Ignoring removed bh option [ 124.815150][ T28] audit: type=1400 audit(2000000081.510:436): avc: denied { ioctl } for pid=1138 comm="syz.3.174" path="socket:[18951]" dev="sockfs" ino=18951 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.930494][ T1125] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 124.947391][ T1144] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 124.949953][ T28] audit: type=1400 audit(2000000081.640:437): avc: denied { read write } for pid=1143 comm="syz.3.176" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.987721][ T1125] EXT4-fs (loop4): 1 truncate cleaned up [ 125.040577][ T1125] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.379908][ T28] audit: type=1400 audit(2000000081.640:438): avc: denied { open } for pid=1143 comm="syz.3.176" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 125.475850][ T28] audit: type=1400 audit(2000000082.170:439): avc: denied { checkpoint_restore } for pid=1123 comm="syz.4.170" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.264695][ T1162] loop2: detected capacity change from 0 to 40427 [ 126.406505][ T1162] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 126.414437][ T1162] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 126.433657][ T1162] F2FS-fs (loop2): invalid crc value [ 126.491764][ T1162] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.532494][ T1162] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.539627][ T1162] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.591104][ T284] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 126.605646][ T284] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 126.623896][ T28] audit: type=1400 audit(2000000083.270:440): avc: denied { mounton } for pid=1156 comm="syz.2.179" path="/29/file2/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 126.652593][ T28] audit: type=1400 audit(2000000083.270:441): avc: denied { write } for pid=1156 comm="syz.2.179" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 126.676831][ T28] audit: type=1400 audit(2000000083.270:442): avc: denied { add_name } for pid=1156 comm="syz.2.179" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 126.689266][ T284] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 126.697972][ T28] audit: type=1400 audit(2000000083.280:443): avc: denied { remove_name } for pid=284 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.739009][ T284] EXT4-fs (loop4): unmounting filesystem. [ 126.743364][ T28] audit: type=1400 audit(2000000083.280:444): avc: denied { rmdir } for pid=284 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.971511][ T285] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 126.971538][ T285] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 127.071433][ T1184] loop4: detected capacity change from 0 to 4096 [ 127.086537][ T285] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 127.086558][ T285] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 127.102946][ T285] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 127.110833][ T285] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 127.111846][ T1184] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.118586][ T285] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 127.128659][ T1184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.737608][ T1193] loop2: detected capacity change from 0 to 128 [ 127.816870][ T284] EXT4-fs (loop4): unmounting filesystem. [ 127.825226][ T1012] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.583465][ T1197] netlink: 88 bytes leftover after parsing attributes in process `syz.3.187'. [ 129.015529][ T1214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.095602][ T715] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.127808][ T1214] hub 8-0:1.0: USB hub found [ 129.134476][ T1214] hub 8-0:1.0: 1 port detected [ 129.380423][ T715] usb 1-1: Using ep0 maxpacket: 16 [ 129.387753][ T715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.399654][ T715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.409707][ T715] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 129.418803][ T715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.428072][ T715] usb 1-1: config 0 descriptor?? [ 129.470389][ T380] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.651538][ T380] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 129.661065][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.698673][ T380] usb 2-1: config 0 descriptor?? [ 129.837415][ T715] lua 0003:1E7D:2C2E.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 130.225997][ T1217] syz.0.190[1217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.226737][ T1217] syz.0.190[1217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.712487][ T380] usb 2-1: Cannot read MAC address [ 130.745670][ T380] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -32 [ 132.322987][ T380] usb 1-1: USB disconnect, device number 6 [ 132.346983][ T715] usb 2-1: USB disconnect, device number 2 [ 133.312147][ T1238] loop2: detected capacity change from 0 to 512 [ 133.320559][ T1238] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.355647][ T1238] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 133.595730][ T1238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 133.604423][ T1238] System zones: 1-12 [ 133.622080][ T1238] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.195: corrupted in-inode xattr [ 133.639479][ T1238] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.195: couldn't read orphan inode 15 (err -117) [ 133.660455][ T1055] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.683545][ T1238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 133.895758][ T285] EXT4-fs (loop2): unmounting filesystem. [ 134.189617][ T1055] usb 5-1: Using ep0 maxpacket: 16 [ 134.219626][ T1055] usb 5-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 134.224222][ T1257] loop2: detected capacity change from 0 to 256 [ 134.239021][ T1055] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.263428][ T1257] FAT-fs (loop2): Directory bread(block 64) failed [ 134.276792][ T1055] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 134.286613][ T1055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.306027][ T1257] FAT-fs (loop2): Directory bread(block 65) failed [ 134.316900][ T1055] usb 5-1: config 0 descriptor?? [ 134.328002][ T1257] FAT-fs (loop2): Directory bread(block 66) failed [ 134.335013][ T1257] FAT-fs (loop2): Directory bread(block 67) failed [ 134.343586][ T1257] FAT-fs (loop2): Directory bread(block 68) failed [ 134.350202][ T1257] FAT-fs (loop2): Directory bread(block 69) failed [ 134.357067][ T1257] FAT-fs (loop2): Directory bread(block 70) failed [ 134.364409][ T1257] FAT-fs (loop2): Directory bread(block 71) failed [ 134.372389][ T1257] FAT-fs (loop2): Directory bread(block 72) failed [ 134.379178][ T1257] FAT-fs (loop2): Directory bread(block 73) failed [ 134.675760][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 134.675776][ T28] audit: type=1400 audit(2000000091.370:449): avc: denied { nlmsg_read } for pid=1263 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.794214][ T1267] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 134.982100][ T1269] overlayfs: unrecognized mount option "smackfsfloor=]**\(\%&:{@" or missing value [ 135.077886][ T1271] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1538 sclass=netlink_xfrm_socket pid=1271 comm=syz.3.206 [ 135.146185][ T28] audit: type=1400 audit(2000000091.470:450): avc: denied { mounton } for pid=1260 comm="syz.2.202" path="/34/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 135.275022][ T1277] loop4: detected capacity change from 0 to 512 [ 135.285727][ T1277] EXT4-fs: Ignoring removed oldalloc option [ 136.086031][ T1277] EXT4-fs (loop4): 1 truncate cleaned up [ 136.092092][ T1277] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.201903][ T305] usb 5-1: USB disconnect, device number 3 [ 138.310055][ T284] EXT4-fs (loop4): unmounting filesystem. [ 138.555113][ T1300] loop2: detected capacity change from 0 to 512 [ 138.569073][ T1300] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.352134][ T1300] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 139.373799][ T1300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 139.386956][ T1300] System zones: 1-12 [ 139.392697][ T1300] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.213: corrupted in-inode xattr [ 143.826559][ T1300] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.213: couldn't read orphan inode 15 (err -117) [ 144.511070][ T1300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.614762][ T285] EXT4-fs (loop2): unmounting filesystem. [ 144.644535][ T1321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.220'. [ 145.957345][ T28] audit: type=1400 audit(2000000102.650:451): avc: denied { wake_alarm } for pid=1331 comm="syz.2.219" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.990352][ T28] audit: type=1400 audit(2000000102.650:452): avc: denied { write } for pid=1341 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.993851][ T1345] loop4: detected capacity change from 0 to 128 [ 146.332298][ T305] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.540399][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 146.547067][ T305] usb 2-1: config 4 has an invalid interface number: 36 but max is 0 [ 146.555603][ T305] usb 2-1: config 4 has no interface number 0 [ 146.563392][ T305] usb 2-1: New USB device found, idVendor=045e, idProduct=046a, bcdDevice=a7.c1 [ 146.572574][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.580650][ T305] usb 2-1: Product: syz [ 146.584880][ T305] usb 2-1: Manufacturer: syz [ 146.589506][ T305] usb 2-1: SerialNumber: syz [ 146.620374][ T1055] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 146.802100][ T1055] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.812742][ T1055] usb 5-1: config 1 interface 0 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.825970][ T1055] usb 5-1: config 1 interface 0 has no altsetting 0 [ 146.836003][ T1055] usb 5-1: string descriptor 0 read error: -22 [ 146.842391][ T1055] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.851805][ T1055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.863241][ T1055] usb 5-1: bad CDC descriptors [ 147.069602][ T1055] usb 5-1: USB disconnect, device number 4 [ 147.368315][ T305] usb 2-1: USB disconnect, device number 3 [ 147.593378][ T1364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 147.692290][ T1368] loop4: detected capacity change from 0 to 2048 [ 147.765454][ T1368] loop4: p1 < > p3 [ 147.770117][ T1368] loop4: p3 size 134217728 extends beyond EOD, truncated [ 148.368796][ T28] audit: type=1400 audit(2000000105.060:453): avc: denied { read write } for pid=1375 comm="syz.3.235" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 148.968963][ T28] audit: type=1400 audit(2000000105.100:454): avc: denied { open } for pid=1375 comm="syz.3.235" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 148.994838][ T1380] netlink: 'syz.3.237': attribute type 2 has an invalid length. [ 149.231347][ T1388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'. [ 149.245854][ T28] audit: type=1400 audit(2000000105.950:455): avc: denied { getopt } for pid=1391 comm="syz.3.244" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.280586][ T28] audit: type=1400 audit(2000000105.980:456): avc: denied { create } for pid=1393 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.309911][ T28] audit: type=1400 audit(2000000106.000:457): avc: denied { write } for pid=1393 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.338843][ T1363] loop4: detected capacity change from 0 to 2048 [ 150.440257][ T1012] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.448313][ T28] audit: type=1400 audit(2000000107.140:458): avc: denied { mounton } for pid=1405 comm="syz.3.250" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 150.462297][ T1404] usb usb8: usbfs: process 1404 (syz.2.249) did not claim interface 0 before use [ 150.865857][ T1363] loop4: detected capacity change from 0 to 512 [ 150.905782][ T1363] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.991691][ T1363] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.998289][ T1363] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.231: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 151.043338][ T1363] EXT4-fs error (device loop4): ext4_quota_enable:7000: comm syz.4.231: Bad quota inode: 3, type: 0 [ 151.054520][ T1363] EXT4-fs warning (device loop4): ext4_enable_quotas:7041: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 151.069279][ T1363] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 151.076086][ T1363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.106490][ T1439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 152.749363][ T354] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 152.824258][ T1446] netlink: 256 bytes leftover after parsing attributes in process `syz.1.263'. [ 152.982182][ T354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.990951][ T354] usb 4-1: not running at top speed; connect to a high speed hub [ 153.001195][ T354] usb 4-1: config index 0 descriptor too short (expected 2560, got 155) [ 153.010049][ T354] usb 4-1: config 1 has too many interfaces: 36, using maximum allowed: 32 [ 153.019663][ T354] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 153.030111][ T354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.042153][ T354] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 36 [ 153.054574][ T354] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.066370][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.075608][ T354] usb 4-1: Product: syz [ 153.080513][ T354] usb 4-1: Manufacturer: syz [ 153.085912][ T354] usb 4-1: SerialNumber: syz [ 153.163909][ T1452] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 153.213339][ T284] EXT4-fs (loop4): unmounting filesystem. [ 153.279491][ T28] audit: type=1400 audit(2000000109.970:459): avc: denied { read } for pid=1460 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.363117][ T1464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 153.518084][ T1465] netlink: 'syz.0.265': attribute type 8 has an invalid length. [ 155.312281][ T354] usb 4-1: USB disconnect, device number 4 [ 155.608973][ T28] audit: type=1326 audit(2000000112.300:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1486 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72358e929 code=0x7ffc0000 [ 156.046707][ T28] audit: type=1326 audit(2000000112.300:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1486 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff72358e929 code=0x7ffc0000 [ 156.152608][ T327] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.160752][ T28] audit: type=1326 audit(2000000112.300:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1486 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72358e929 code=0x7ffc0000 [ 156.227679][ T1504] loop2: detected capacity change from 0 to 128 [ 156.420058][ T327] usb 1-1: Using ep0 maxpacket: 8 [ 156.430127][ T327] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 156.441344][ T327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.451859][ T327] usb 1-1: config 0 has no interface number 0 [ 156.528066][ T1515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.578078][ T1515] hub 8-0:1.0: USB hub found [ 156.583668][ T1515] hub 8-0:1.0: 1 port detected [ 156.674263][ T1517] loop4: detected capacity change from 0 to 256 [ 156.772978][ T1517] FAT-fs (loop4): Directory bread(block 64) failed [ 156.786082][ T1517] FAT-fs (loop4): Directory bread(block 65) failed [ 156.793146][ T1517] FAT-fs (loop4): Directory bread(block 66) failed [ 156.799824][ T1517] FAT-fs (loop4): Directory bread(block 67) failed [ 156.806532][ T1517] FAT-fs (loop4): Directory bread(block 68) failed [ 156.806652][ T327] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 156.822279][ T327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.830371][ T327] usb 1-1: Product: syz [ 156.830392][ T327] usb 1-1: Manufacturer: syz [ 156.830407][ T327] usb 1-1: SerialNumber: syz [ 156.832157][ T327] usb 1-1: config 0 descriptor?? [ 156.848932][ T1517] FAT-fs (loop4): Directory bread(block 69) failed [ 156.861820][ T1517] FAT-fs (loop4): Directory bread(block 70) failed [ 156.873672][ T1517] FAT-fs (loop4): Directory bread(block 71) failed [ 156.882113][ T1517] FAT-fs (loop4): Directory bread(block 72) failed [ 156.892229][ T1517] FAT-fs (loop4): Directory bread(block 73) failed [ 157.058454][ T327] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 157.066081][ T327] usb 1-1: No valid video chain found. [ 157.241417][ T28] audit: type=1400 audit(2000000113.940:463): avc: denied { ioctl } for pid=1530 comm="syz.1.294" path="socket:[20490]" dev="sockfs" ino=20490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.261413][ T327] usb 1-1: USB disconnect, device number 7 [ 157.789253][ T1547] loop2: detected capacity change from 0 to 128 [ 157.841465][ T1012] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.920330][ T28] audit: type=1400 audit(2000000114.600:464): avc: denied { getopt } for pid=1553 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.954773][ T28] audit: type=1400 audit(2000000114.640:465): avc: denied { ioctl } for pid=1555 comm="syz.3.303" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.137138][ T1571] loop2: detected capacity change from 0 to 256 [ 158.149587][ T1571] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 158.167474][ T28] audit: type=1400 audit(2000000114.870:466): avc: denied { write } for pid=1570 comm="syz.2.309" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.392781][ T1573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.584164][ T1573] hub 8-0:1.0: USB hub found [ 158.590152][ T1573] hub 8-0:1.0: 1 port detected [ 158.755383][ T28] audit: type=1400 audit(2000000115.390:467): avc: denied { remove_name } for pid=1570 comm="syz.2.309" name="file1" dev="loop2" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.795371][ T28] audit: type=1400 audit(2000000115.390:468): avc: denied { rename } for pid=1570 comm="syz.2.309" name="file1" dev="loop2" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.796258][ T1579] loop4: detected capacity change from 0 to 128 [ 158.818373][ T28] audit: type=1400 audit(2000000115.390:469): avc: denied { add_name } for pid=1570 comm="syz.2.309" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.951366][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.959517][ T846] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.030535][ T28] audit: type=1400 audit(2000000115.690:470): avc: denied { block_suspend } for pid=1584 comm="syz.0.313" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.073379][ T1587] loop2: detected capacity change from 0 to 512 [ 159.082133][ T1587] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.110722][ T1587] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 159.186739][ T1587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 159.195022][ T1587] System zones: 1-12 [ 159.223677][ T1587] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.311: corrupted in-inode xattr [ 159.235807][ T1587] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.311: couldn't read orphan inode 15 (err -117) [ 159.251022][ T1587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.330337][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 159.339798][ T6] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 159.360507][ T6] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 159.373987][ T6] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 159.388973][ T6] usb 2-1: config 0 has no interface number 0 [ 159.397082][ T6] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 159.407260][ T6] usb 2-1: config 0 interface 104 has no altsetting 1 [ 159.422504][ T6] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 159.431748][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.450340][ T6] usb 2-1: Product: syz [ 159.458483][ T6] usb 2-1: Manufacturer: syz [ 159.464202][ T6] usb 2-1: SerialNumber: syz [ 159.471301][ T6] usb 2-1: config 0 descriptor?? [ 159.685820][ T6] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 159.702376][ T6] asix: probe of 2-1:0.104 failed with error -71 [ 159.725103][ T6] usb 2-1: USB disconnect, device number 4 [ 159.804288][ T285] EXT4-fs (loop2): unmounting filesystem. [ 160.249357][ T1618] loop4: detected capacity change from 0 to 128 [ 160.473611][ T1615] loop2: detected capacity change from 0 to 40427 [ 160.510694][ T1615] F2FS-fs (loop2): heap/no_heap options were deprecated [ 160.518274][ T1615] F2FS-fs (loop2): heap/no_heap options were deprecated [ 160.527346][ T1615] F2FS-fs (loop2): Image doesn't support compression [ 160.683968][ T1631] netlink: 'syz.1.324': attribute type 8 has an invalid length. [ 160.883254][ T1615] F2FS-fs (loop2): invalid crc value [ 160.941239][ T1615] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.061543][ T1615] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.114428][ T1654] loop4: detected capacity change from 0 to 128 [ 162.998764][ T1677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.327586][ T1676] hub 8-0:1.0: USB hub found [ 163.332857][ T1676] hub 8-0:1.0: 1 port detected [ 163.373461][ T28] audit: type=1400 audit(2000000120.070:471): avc: denied { remount } for pid=1681 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.407912][ T28] audit: type=1400 audit(2000000120.090:472): avc: denied { setopt } for pid=1686 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.446701][ T1692] loop4: detected capacity change from 0 to 256 [ 163.502808][ T1692] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 163.627592][ T28] audit: type=1400 audit(2000000120.320:473): avc: denied { create } for pid=1691 comm="syz.4.345" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.327792][ T28] audit: type=1400 audit(2000000120.320:474): avc: denied { associate } for pid=1691 comm="syz.4.345" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 164.755306][ T28] audit: type=1400 audit(2000000120.320:475): avc: denied { read } for pid=1691 comm="syz.4.345" name="file1" dev="loop4" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.782482][ T28] audit: type=1400 audit(2000000120.340:476): avc: denied { map } for pid=1691 comm="syz.4.345" path="/54/file1/file1" dev="loop4" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.801368][ T1715] loop4: detected capacity change from 0 to 256 [ 164.831048][ T1715] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.843796][ T28] audit: type=1400 audit(2000000120.340:477): avc: denied { execute } for pid=1691 comm="syz.4.345" path="/54/file1/file1" dev="loop4" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.906180][ T1715] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 164.948854][ T1715] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 166.519977][ T1744] loop4: detected capacity change from 0 to 512 [ 166.527467][ T1744] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.543046][ T1747] loop2: detected capacity change from 0 to 512 [ 166.551199][ T1747] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.974584][ T1747] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 166.985251][ T1744] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 166.998437][ T40] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.027966][ T1744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 167.027979][ T1747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 167.028034][ T1747] System zones: [ 167.037953][ T1744] System zones: [ 167.047173][ T1747] 1-12 [ 167.052013][ T1744] 1-12 [ 167.062172][ T1747] [ 167.062736][ T1752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'. [ 167.070387][ T715] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.081277][ T1744] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.364: corrupted in-inode xattr [ 167.084221][ T1752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.098959][ T1744] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.364: couldn't read orphan inode 15 (err -117) [ 167.103944][ T1752] IPv6: NLM_F_CREATE should be set when creating new route [ 167.103966][ T1752] IPv6: NLM_F_CREATE should be set when creating new route [ 167.117004][ T1744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.123932][ T1747] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.365: corrupted in-inode xattr [ 167.153714][ T1747] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.365: couldn't read orphan inode 15 (err -117) [ 167.167300][ T1747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 167.279044][ T284] EXT4-fs (loop4): unmounting filesystem. [ 167.323113][ T285] EXT4-fs (loop2): unmounting filesystem. [ 167.370533][ T715] usb 4-1: Using ep0 maxpacket: 16 [ 167.378851][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.410168][ T1759] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 167.533040][ T715] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 167.572046][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.585062][ T1761] loop4: detected capacity change from 0 to 128 [ 167.591951][ T715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.632957][ T40] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.633198][ T1012] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.646424][ T715] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.726419][ T40] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.736449][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.746240][ T715] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.755958][ T40] usb 2-1: config 0 descriptor?? [ 167.809050][ T715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.818001][ T715] usb 4-1: Product: syz [ 167.822468][ T715] usb 4-1: Manufacturer: syz [ 167.830344][ T715] usb 4-1: SerialNumber: syz [ 168.215128][ T715] usb 4-1: 0:2 : does not exist [ 168.222066][ T40] usbhid 2-1:0.0: can't add hid device: -71 [ 168.228286][ T40] usbhid: probe of 2-1:0.0 failed with error -71 [ 168.237130][ T40] usb 2-1: USB disconnect, device number 5 [ 168.243248][ T715] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 168.262792][ T715] usb 4-1: USB disconnect, device number 5 [ 169.671082][ T1810] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 169.752258][ T1819] loop2: detected capacity change from 0 to 128 [ 170.020424][ T380] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.053536][ T1012] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.708510][ T1834] loop4: detected capacity change from 0 to 512 [ 171.715608][ T1834] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.722758][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 171.722886][ T715] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.800381][ T1834] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 171.811199][ T380] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.819486][ T380] usb 2-1: config 179 has no interface number 0 [ 171.826021][ T380] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 171.857326][ T1834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 171.857332][ T380] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 171.857365][ T380] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.865441][ T1834] System zones: 1-12 [ 171.893497][ T1834] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.394: corrupted in-inode xattr [ 171.905770][ T1834] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.394: couldn't read orphan inode 15 (err -117) [ 171.918104][ T380] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 171.918383][ T1834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.929840][ T380] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.959143][ T380] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 171.968557][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.012141][ T1813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.030843][ T715] usb 4-1: Using ep0 maxpacket: 8 [ 172.046178][ T715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.072030][ T715] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 172.082052][ T715] usb 4-1: config 0 has no interface number 0 [ 172.088410][ T715] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 172.102429][ T284] EXT4-fs (loop4): unmounting filesystem. [ 172.110962][ T715] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 172.129907][ T715] usb 4-1: config 0 interface 88 has no altsetting 0 [ 172.136828][ T1851] loop2: detected capacity change from 0 to 128 [ 172.139387][ T715] usb 4-1: string descriptor 0 read error: -22 [ 172.158226][ T1853] loop4: detected capacity change from 0 to 512 [ 172.178651][ T715] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 172.188294][ T715] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 172.197461][ T715] usb 4-1: config 0 descriptor?? [ 172.205129][ T715] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input13 [ 172.229339][ T1853] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.268086][ T1853] EXT4-fs (loop4): 1 truncate cleaned up [ 172.274257][ T1853] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.290650][ T28] audit: type=1400 audit(2000000128.990:478): avc: denied { read } for pid=1852 comm="syz.4.399" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.325925][ T1012] udevd[1012]: Error opening device "/dev/input/event3": Input/output error [ 172.341696][ T284] EXT4-fs (loop4): unmounting filesystem. [ 172.347567][ T1012] udevd[1012]: Unable to EVIOCGABS device "/dev/input/event3" [ 172.347602][ T1012] udevd[1012]: Unable to EVIOCGABS device "/dev/input/event3" [ 174.054956][ T1055] usb 2-1: USB disconnect, device number 6 [ 174.055022][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 174.070337][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 174.147673][ T28] audit: type=1400 audit(2000000130.840:479): avc: denied { read write } for pid=1871 comm="syz.0.405" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 174.171108][ T28] audit: type=1400 audit(2000000130.870:480): avc: denied { open } for pid=1871 comm="syz.0.405" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 174.264157][ T1866] loop4: detected capacity change from 0 to 40427 [ 174.279967][ T1866] F2FS-fs (loop4): fault_injection options not supported [ 174.288300][ T1866] F2FS-fs (loop4): Image doesn't support compression [ 174.295877][ T1866] F2FS-fs (loop4): Image doesn't support compression [ 174.326036][ T1866] F2FS-fs (loop4): invalid crc value [ 174.346296][ T1866] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.361554][ T28] audit: type=1400 audit(2000000131.060:481): avc: denied { load_policy } for pid=1885 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 174.384576][ T1888] SELinux: failed to load policy [ 174.400094][ T1893] loop2: detected capacity change from 0 to 128 [ 174.457063][ T1866] F2FS-fs (loop4): Start checkpoint disabled! [ 174.464010][ T1866] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 174.480015][ T28] audit: type=1400 audit(2000000131.170:482): avc: denied { read open } for pid=1865 comm="syz.4.401" path="/63/file2/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.516841][ T28] audit: type=1400 audit(2000000131.210:483): avc: denied { ioctl } for pid=1865 comm="syz.4.401" path="/63/file2/file0" dev="loop4" ino=10 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.562463][ T1864] bio_check_eod: 18 callbacks suppressed [ 174.562482][ T1864] kworker/u4:9: attempt to access beyond end of device [ 174.562482][ T1864] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 174.654495][ T1055] usb 4-1: USB disconnect, device number 6 [ 174.685106][ T1912] capability: warning: `syz.0.422' uses deprecated v2 capabilities in a way that may be insecure [ 174.771723][ T28] audit: type=1400 audit(2000000131.470:484): avc: denied { write } for pid=1911 comm="syz.0.422" path="socket:[21432]" dev="sockfs" ino=21432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.841080][ T1919] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 175.200339][ T1055] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 175.531563][ T1055] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.541898][ T1055] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.555826][ T1055] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 175.565056][ T1055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.573202][ T1055] usb 4-1: SerialNumber: syz [ 175.579399][ T1055] usb 4-1: 0:2 : does not exist [ 175.800358][ T715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.869259][ T1956] loop4: detected capacity change from 0 to 512 [ 175.889941][ T1956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.906618][ T1956] EXT4-fs (loop4): 1 truncate cleaned up [ 175.912635][ T1956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.941133][ T1956] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #2: block 13: comm syz.4.438: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 175.968459][ T284] EXT4-fs (loop4): unmounting filesystem. [ 175.987007][ T1055] usb 4-1: USB disconnect, device number 7 [ 176.060390][ T715] usb 3-1: Using ep0 maxpacket: 32 [ 176.067133][ T715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.078104][ T715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.088130][ T715] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.097321][ T715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.259966][ T715] usb 3-1: config 0 descriptor?? [ 176.369527][ T715] hub 3-1:0.0: USB hub found [ 176.560255][ T715] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 176.763468][ T715] usbhid 3-1:0.0: can't add hid device: -71 [ 176.772550][ T715] usbhid: probe of 3-1:0.0 failed with error -71 [ 176.830767][ T715] usb 3-1: USB disconnect, device number 6 [ 176.919085][ T28] audit: type=1400 audit(2000000133.610:485): avc: denied { create } for pid=1979 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.946085][ T28] audit: type=1400 audit(2000000133.640:486): avc: denied { setopt } for pid=1979 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.154091][ T1999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.351139][ T1983] hub 8-0:1.0: USB hub found [ 177.355914][ T1983] hub 8-0:1.0: 1 port detected [ 177.749837][ T2010] loop2: detected capacity change from 0 to 512 [ 177.756613][ T2010] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.777231][ T2010] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 177.791697][ T2010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 177.799745][ T2010] System zones: 1-12 [ 177.805163][ T2010] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.455: corrupted in-inode xattr [ 177.818090][ T2010] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.455: couldn't read orphan inode 15 (err -117) [ 177.929441][ T2015] netlink: 88 bytes leftover after parsing attributes in process `syz.1.456'. [ 178.130612][ T2010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 178.182615][ T2017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 178.270493][ T327] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.285252][ T28] audit: type=1400 audit(2000000134.980:487): avc: denied { getopt } for pid=2022 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.316014][ T2025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 178.459384][ T285] EXT4-fs (loop2): unmounting filesystem. [ 178.460338][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.476120][ T327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.490338][ T715] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 178.492433][ T327] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.507313][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.524896][ T327] usb 5-1: config 0 descriptor?? [ 178.691679][ T715] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.704720][ T715] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.713823][ T715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.738734][ T715] usb 4-1: config 0 descriptor?? [ 178.769423][ T715] hub 4-1:0.0: bad descriptor, ignoring hub [ 178.815466][ T715] hub: probe of 4-1:0.0 failed with error -5 [ 178.845074][ T715] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 179.033755][ T2021] netlink: 182 bytes leftover after parsing attributes in process `syz.3.460'. [ 179.108543][ T327] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 179.117361][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.127214][ T327] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input14 [ 179.160675][ T715] usb 4-1: USB disconnect, device number 8 [ 179.169677][ T28] audit: type=1400 audit(2000000135.860:488): avc: denied { write } for pid=2049 comm="syz.0.473" name="raw" dev="proc" ino=4026532344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 179.213974][ T28] audit: type=1400 audit(2000000135.910:489): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=863 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.215317][ T327] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 179.330312][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 179.336853][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.357320][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.367605][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.377356][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.386852][ T6] usb 3-1: config 0 descriptor?? [ 179.393326][ T6] hub 3-1:0.0: USB hub found [ 179.489244][ T28] audit: type=1400 audit(2000000136.180:490): avc: denied { write } for pid=2054 comm="syz.1.475" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 181.582836][ T292] usb 5-1: USB disconnect, device number 5 [ 181.981766][ T6] hub 3-1:0.0: 1 port detected [ 182.377016][ T6] usb 3-1: USB disconnect, device number 7 [ 182.640111][ T2090] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 182.900360][ T40] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 182.980422][ T327] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.010556][ T292] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.081590][ T40] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 183.090064][ T40] usb 1-1: config 54 has no interface number 0 [ 183.099229][ T40] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 183.108411][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.116507][ T40] usb 1-1: Product: syz [ 183.120725][ T40] usb 1-1: Manufacturer: syz [ 183.125353][ T40] usb 1-1: SerialNumber: syz [ 183.170568][ T327] usb 2-1: Using ep0 maxpacket: 16 [ 183.177250][ T327] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.188251][ T327] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.198049][ T327] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.200332][ T292] usb 5-1: Using ep0 maxpacket: 16 [ 183.204807][ T327] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 183.211524][ T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.219110][ T327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.230716][ T292] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 183.240386][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.246200][ T292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.253485][ T327] usb 2-1: config 0 descriptor?? [ 183.326769][ T292] usb 5-1: Product: syz [ 183.332967][ T292] usb 5-1: Manufacturer: syz [ 183.337917][ T292] usb 5-1: SerialNumber: syz [ 183.338418][ T2084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.344452][ T292] usb 5-1: config 0 descriptor?? [ 183.357246][ T2084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.367559][ T292] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 183.389948][ T40] usb 1-1: USB disconnect, device number 8 [ 183.451430][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.462549][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.473170][ T6] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 183.482439][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.491159][ T6] usb 3-1: config 0 descriptor?? [ 183.578807][ T292] usb 5-1: USB disconnect, device number 6 [ 183.683672][ T327] chicony 0003:04F2:0418.0003: unknown main item tag 0x0 [ 183.691576][ T327] chicony 0003:04F2:0418.0003: hidraw0: USB HID v0.00 Device [HID 04f2:0418] on usb-dummy_hcd.1-1/input0 [ 183.897499][ T327] usb 2-1: USB disconnect, device number 7 [ 183.905053][ T6] sony 0003:054C:09CC.0004: hidraw1: USB HID v80.00 Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 183.919750][ T6] sony 0003:054C:09CC.0004: failed to claim input [ 183.968452][ T2107] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 183.978218][ T2107] SELinux: failed to load policy [ 184.145261][ T327] usb 3-1: USB disconnect, device number 8 [ 184.355239][ T2126] loop4: detected capacity change from 0 to 512 [ 184.371617][ T2126] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.384008][ T2126] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 184.402238][ T2128] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 184.444498][ T2126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 184.455000][ T2126] System zones: 1-12 [ 184.477856][ T2128] overlayfs: overlapping lowerdir path [ 184.494323][ T2126] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.502: corrupted in-inode xattr [ 184.561768][ T2126] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.502: couldn't read orphan inode 15 (err -117) [ 184.612472][ T2126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.627223][ T28] audit: type=1400 audit(2000000141.330:491): avc: denied { remount } for pid=2140 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 184.732652][ T2156] SELinux: failed to load policy [ 184.897433][ T2173] loop2: detected capacity change from 0 to 512 [ 184.904288][ T2173] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.914172][ T2173] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 184.971170][ T2173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 184.979213][ T2173] System zones: 1-12 [ 184.986240][ T2173] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.517: corrupted in-inode xattr [ 185.000842][ T2173] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.517: couldn't read orphan inode 15 (err -117) [ 185.013161][ T2173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.083518][ T284] EXT4-fs (loop4): unmounting filesystem. [ 185.174853][ T2193] Illegal XDP return value 4294967274 on prog (id 266) dev N/A, expect packet loss! [ 185.230415][ T327] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.317605][ T28] audit: type=1400 audit(2000000142.010:492): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.410420][ T40] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 185.420466][ T327] usb 4-1: Using ep0 maxpacket: 16 [ 185.426897][ T327] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.433852][ T327] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 185.443229][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.456564][ T327] usb 4-1: config 0 descriptor?? [ 185.576464][ T285] EXT4-fs (loop2): unmounting filesystem. [ 185.598767][ T2209] loop2: detected capacity change from 0 to 2048 [ 185.618462][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.620827][ T354] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 185.630076][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.647407][ T40] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 185.648250][ T2209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.667563][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.684279][ T40] usb 5-1: config 0 descriptor?? [ 185.690108][ T28] audit: type=1400 audit(2000000142.380:493): avc: denied { append } for pid=2208 comm="syz.2.542" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.721824][ T285] EXT4-fs (loop2): unmounting filesystem. [ 185.763230][ T2213] loop2: detected capacity change from 0 to 512 [ 185.782616][ T2213] EXT4-fs: Ignoring removed i_version option [ 185.797616][ T2213] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.543: corrupted in-inode xattr [ 185.809784][ T2213] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.543: couldn't read orphan inode 15 (err -117) [ 185.822342][ T2213] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.842369][ T2213] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.543: Directory hole found for htree leaf block 0 [ 185.860637][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.874803][ T327] hid (null): nested delimiters [ 185.880005][ T327] hid (null): bogus close delimiter [ 185.889466][ T285] EXT4-fs (loop2): unmounting filesystem. [ 185.895361][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.925924][ T354] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 185.935124][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.946277][ T2216] kvm [2215]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x7e000000000001, nop [ 185.948700][ T354] usb 1-1: config 0 descriptor?? [ 186.054864][ T2226] loop2: detected capacity change from 0 to 256 [ 186.068322][ T2226] exfat: Deprecated parameter 'utf8' [ 186.074275][ T2226] exfat: Deprecated parameter 'utf8' [ 186.084032][ T2226] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 186.108232][ T327] usb 4-1: USB disconnect, device number 9 [ 186.120571][ T40] sony 0003:054C:09CC.0006: hidraw0: USB HID v80.00 Device [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 186.140142][ T40] sony 0003:054C:09CC.0006: failed to claim input [ 186.332992][ T40] usb 5-1: USB disconnect, device number 7 [ 186.489835][ T354] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 186.630325][ T1055] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.811578][ T1055] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.821765][ T1055] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.831579][ T1055] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.840675][ T1055] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.848677][ T1055] usb 3-1: SerialNumber: syz [ 186.867461][ T40] usb 1-1: USB disconnect, device number 9 [ 187.064180][ T1055] usb 3-1: 0:2 : does not exist [ 187.073483][ T1055] usb 3-1: USB disconnect, device number 9 [ 187.091813][ T2274] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 187.106160][ T2274] overlayfs: overlapping lowerdir path [ 187.130549][ T327] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 187.280923][ T1012] udevd[1012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 187.311608][ T327] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.321979][ T327] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.331672][ T327] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 187.341291][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.349462][ T327] usb 5-1: SerialNumber: syz [ 187.354165][ T354] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 187.363994][ T327] usb 5-1: 0:2 : does not exist [ 187.390388][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.540344][ T354] usb 4-1: Using ep0 maxpacket: 16 [ 187.546796][ T354] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.558503][ T354] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.568863][ T354] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.575939][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 187.581431][ T354] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 187.590917][ T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.599945][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.634692][ T354] usb 4-1: config 0 descriptor?? [ 187.645575][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.665494][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.095658][ T24] usb 5-1: USB disconnect, device number 8 [ 188.271641][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.280797][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.289751][ T354] chicony 0003:04F2:0418.0008: unknown main item tag 0x0 [ 188.299350][ T6] usb 2-1: config 0 descriptor?? [ 188.304556][ T354] chicony 0003:04F2:0418.0008: hidraw0: USB HID v0.00 Device [HID 04f2:0418] on usb-dummy_hcd.3-1/input0 [ 188.511311][ T24] usb 4-1: USB disconnect, device number 10 [ 188.527015][ T2298] loop2: detected capacity change from 0 to 128 [ 188.534089][ T2298] EXT4-fs (loop2): Test dummy encryption mode enabled [ 188.542484][ T2298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.551592][ T2298] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.563545][ T28] audit: type=1400 audit(2000000145.260:494): avc: denied { remount } for pid=2297 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 188.571732][ T2298] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 188.601144][ T285] EXT4-fs (loop2): unmounting filesystem. [ 188.703659][ T2311] loop4: detected capacity change from 0 to 512 [ 188.720205][ T6] microsoft 0003:045E:07DA.0009: collection stack underflow [ 188.731226][ T6] microsoft 0003:045E:07DA.0009: item 0 4 0 12 parsing failed [ 188.742066][ T2311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.755431][ T6] microsoft 0003:045E:07DA.0009: parse failed [ 188.767410][ T6] microsoft: probe of 0003:045E:07DA.0009 failed with error -22 [ 188.796708][ T2311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.815570][ T2311] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.859614][ T2311] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 188.869029][ T28] audit: type=1400 audit(2000000145.570:495): avc: denied { relabelto } for pid=2310 comm="syz.4.580" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 188.895408][ T2311] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 188.929601][ T24] usb 2-1: USB disconnect, device number 8 [ 188.930959][ T284] EXT4-fs (loop4): unmounting filesystem. [ 188.999214][ T28] audit: type=1400 audit(2000000145.690:496): avc: denied { listen } for pid=2326 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.522807][ T380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 189.530435][ T28] audit: type=1400 audit(2000000146.220:497): avc: denied { mounton } for pid=2348 comm="syz.4.595" path="/dev/net/tun" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 189.556317][ T380] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.651782][ T2347] hid-generic 0000:0000:0000.000A: pid 2347 passed too short report [ 189.750393][ T354] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 189.841881][ T2371] loop4: detected capacity change from 0 to 128 [ 189.976454][ T2374] syz.2.603[2374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.976714][ T2374] syz.2.603[2374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.993101][ T354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.021403][ T354] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.038582][ T28] audit: type=1400 audit(2000000146.740:498): avc: denied { map } for pid=2373 comm="syz.2.603" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.063854][ T354] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 190.074994][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.084372][ T354] usb 2-1: SerialNumber: syz [ 190.098724][ T354] usb 2-1: 0:2 : does not exist [ 190.110968][ T2374] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 190.112177][ T28] audit: type=1400 audit(2000000146.760:499): avc: denied { create } for pid=2377 comm="syz.3.605" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.140139][ T28] audit: type=1400 audit(2000000146.780:500): avc: denied { mounton } for pid=2377 comm="syz.3.605" path="/134/file0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.163897][ T28] audit: type=1400 audit(2000000146.780:501): avc: denied { append } for pid=2377 comm="syz.3.605" name="file0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.187134][ T28] audit: type=1400 audit(2000000146.780:502): avc: denied { open } for pid=2377 comm="syz.3.605" path="/134/file0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.245411][ T28] audit: type=1400 audit(2000000146.940:503): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.903285][ T24] usb 2-1: USB disconnect, device number 9 [ 192.306681][ T285] ------------[ cut here ]------------ [ 192.312262][ T285] WARNING: CPU: 0 PID: 285 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 192.320243][ T285] Modules linked in: [ 192.324214][ T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted 6.1.138-syzkaller-00056-g7af56ffc913d #0 [ 192.334166][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.344297][ T285] RIP: 0010:drop_nlink+0xc5/0x110 [ 192.349365][ T285] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 63 ee f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 94 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 192.369075][ T285] RSP: 0018:ffffc9000da4fc38 EFLAGS: 00010293 [ 192.375203][ T285] RAX: ffffffff81c35c75 RBX: ffff888139deede0 RCX: ffff88810de7a880 [ 192.383224][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.391499][ T285] RBP: ffffc9000da4fc60 R08: 0000000000000004 R09: 0000000000000003 [ 192.399497][ T285] R10: fffff52001b49f78 R11: 1ffff92001b49f78 R12: dffffc0000000000 [ 192.407524][ T285] R13: 1ffff110273bddc5 R14: ffff888139deee28 R15: 0000000000000000 [ 192.415644][ T285] FS: 000055555e990500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 192.424646][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.431285][ T285] CR2: 000055555e9b34e8 CR3: 0000000130c5b000 CR4: 00000000003526b0 [ 192.439287][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.447337][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.455382][ T285] Call Trace: [ 192.458680][ T285] [ 192.461664][ T285] shmem_rmdir+0x5b/0x90 [ 192.465940][ T285] vfs_rmdir+0x393/0x500 [ 192.470203][ T285] incfs_kill_sb+0x105/0x220 [ 192.474843][ T285] deactivate_locked_super+0xb5/0x120 [ 192.480243][ T285] deactivate_super+0xaf/0xe0 [ 192.484987][ T285] cleanup_mnt+0x45f/0x4e0 [ 192.489433][ T285] __cleanup_mnt+0x19/0x20 [ 192.493905][ T285] task_work_run+0x1db/0x240 [ 192.498535][ T285] ? __cfi_task_work_run+0x10/0x10 [ 192.503715][ T285] ? __x64_sys_umount+0x125/0x160 [ 192.508769][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 192.514212][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 192.519438][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 192.524953][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 192.528384][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 192.530559][ T285] do_syscall_64+0x58/0xa0 [ 192.542443][ T285] ? clear_bhb_loop+0x15/0x70 [ 192.547152][ T285] ? clear_bhb_loop+0x15/0x70 [ 192.551899][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.554957][ T24] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.557839][ T285] RIP: 0033:0x7ff72358fc57 [ 192.571880][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 192.591591][ T285] RSP: 002b:00007fff0163dc08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.600031][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff72358fc57 [ 192.608116][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0163dcc0 [ 192.616227][ T285] RBP: 00007fff0163dcc0 R08: 0000000000000000 R09: 0000000000000000 [ 192.624253][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0163ed50 [ 192.632284][ T285] R13: 00007ff723610925 R14: 000000000002eefe R15: 00007fff0163ed90 [ 192.640320][ T285] [ 192.643347][ T285] ---[ end trace 0000000000000000 ]--- [ 192.649785][ T285] ================================================================== [ 192.657866][ T285] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 192.664164][ T285] Write of size 4 at addr 0000000000000170 by task syz-executor/285 [ 192.672168][ T285] [ 192.674520][ T285] CPU: 0 PID: 285 Comm: syz-executor Tainted: G W 6.1.138-syzkaller-00056-g7af56ffc913d #0 [ 192.685907][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.695994][ T285] Call Trace: [ 192.699289][ T285] [ 192.702239][ T285] __dump_stack+0x21/0x24 [ 192.706602][ T285] dump_stack_lvl+0xee/0x150 [ 192.711220][ T285] ? __cfi_dump_stack_lvl+0x8/0x8 [ 192.716276][ T285] ? ihold+0x20/0x60 [ 192.720217][ T285] ? ihold+0x20/0x60 [ 192.724140][ T285] print_report+0x3d/0x60 [ 192.728499][ T285] kasan_report+0x122/0x150 [ 192.733021][ T285] ? ihold+0x20/0x60 [ 192.736950][ T285] kasan_check_range+0x280/0x290 [ 192.742090][ T285] __kasan_check_write+0x14/0x20 [ 192.747056][ T285] ihold+0x20/0x60 [ 192.750804][ T285] vfs_rmdir+0x25f/0x500 [ 192.755070][ T285] incfs_kill_sb+0x105/0x220 [ 192.759679][ T285] deactivate_locked_super+0xb5/0x120 [ 192.765079][ T285] deactivate_super+0xaf/0xe0 [ 192.769783][ T285] cleanup_mnt+0x45f/0x4e0 [ 192.774377][ T285] __cleanup_mnt+0x19/0x20 [ 192.778834][ T285] task_work_run+0x1db/0x240 [ 192.783472][ T285] ? __cfi_task_work_run+0x10/0x10 [ 192.788616][ T285] ? __x64_sys_umount+0x125/0x160 [ 192.793670][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 192.799257][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 192.804482][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 192.809965][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 192.815636][ T285] do_syscall_64+0x58/0xa0 [ 192.820148][ T285] ? clear_bhb_loop+0x15/0x70 [ 192.824843][ T285] ? clear_bhb_loop+0x15/0x70 [ 192.829541][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.835483][ T285] RIP: 0033:0x7ff72358fc57 [ 192.839945][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 192.859573][ T285] RSP: 002b:00007fff0163dc08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.868155][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff72358fc57 [ 192.876208][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0163dcc0 [ 192.884185][ T285] RBP: 00007fff0163dcc0 R08: 0000000000000000 R09: 0000000000000000 [ 192.892155][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0163ed50 [ 192.900188][ T285] R13: 00007ff723610925 R14: 000000000002eefe R15: 00007fff0163ed90 [ 192.908164][ T285] [ 192.911203][ T285] ================================================================== [ 192.922462][ T285] Disabling lock debugging due to kernel taint [ 192.929198][ T285] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 192.937377][ T285] #PF: supervisor write access in kernel mode [ 192.943451][ T285] #PF: error_code(0x0002) - not-present page [ 192.949439][ T285] PGD 133201067 P4D 133201067 PUD 0 [ 192.954751][ T285] Oops: 0002 [#1] PREEMPT SMP KASAN [ 192.959958][ T285] CPU: 0 PID: 285 Comm: syz-executor Tainted: G B W 6.1.138-syzkaller-00056-g7af56ffc913d #0 [ 192.971357][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.981412][ T285] RIP: 0010:ihold+0x26/0x60 [ 192.985954][ T285] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 8c ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 a0 e5 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 193.005671][ T285] RSP: 0018:ffffc9000da4fc78 EFLAGS: 00010246 [ 193.011770][ T285] RAX: ffff88810de7a800 RBX: 0000000000000000 RCX: ffff88810de7a880 [ 193.019752][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.027723][ T285] RBP: ffffc9000da4fc88 R08: dffffc0000000000 R09: fffffbfff0f2cafd [ 193.035803][ T285] R10: fffffbfff0f2cafd R11: 1ffffffff0f2cafc R12: ffff888139deedec [ 193.044085][ T285] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 193.052058][ T285] FS: 000055555e990500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 193.060991][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.067660][ T285] CR2: 0000000000000170 CR3: 0000000130c5b000 CR4: 00000000003526b0 [ 193.075747][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.083804][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.091776][ T285] Call Trace: [ 193.095047][ T285] [ 193.097977][ T285] vfs_rmdir+0x25f/0x500 [ 193.102223][ T285] incfs_kill_sb+0x105/0x220 [ 193.106843][ T285] deactivate_locked_super+0xb5/0x120 [ 193.112225][ T285] deactivate_super+0xaf/0xe0 [ 193.116988][ T285] cleanup_mnt+0x45f/0x4e0 [ 193.121415][ T285] __cleanup_mnt+0x19/0x20 [ 193.125838][ T285] task_work_run+0x1db/0x240 [ 193.130431][ T285] ? __cfi_task_work_run+0x10/0x10 [ 193.135570][ T285] ? __x64_sys_umount+0x125/0x160 [ 193.140633][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 193.146126][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 193.151324][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 193.156793][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 193.162283][ T285] do_syscall_64+0x58/0xa0 [ 193.166704][ T285] ? clear_bhb_loop+0x15/0x70 [ 193.171381][ T285] ? clear_bhb_loop+0x15/0x70 [ 193.176057][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.181957][ T285] RIP: 0033:0x7ff72358fc57 [ 193.186371][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 193.205978][ T285] RSP: 002b:00007fff0163dc08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 193.214416][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff72358fc57 [ 193.222435][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0163dcc0 [ 193.230440][ T285] RBP: 00007fff0163dcc0 R08: 0000000000000000 R09: 0000000000000000 [ 193.238437][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0163ed50 [ 193.246406][ T285] R13: 00007ff723610925 R14: 000000000002eefe R15: 00007fff0163ed90 [ 193.254381][ T285] [ 193.257399][ T285] Modules linked in: [ 193.261301][ T285] CR2: 0000000000000170 [ 193.265491][ T285] ---[ end trace 0000000000000000 ]--- [ 193.270960][ T285] RIP: 0010:ihold+0x26/0x60 [ 193.275506][ T285] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 8c ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 a0 e5 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 193.295196][ T285] RSP: 0018:ffffc9000da4fc78 EFLAGS: 00010246 [ 193.301262][ T285] RAX: ffff88810de7a800 RBX: 0000000000000000 RCX: ffff88810de7a880 [ 193.309422][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.317482][ T285] RBP: ffffc9000da4fc88 R08: dffffc0000000000 R09: fffffbfff0f2cafd [ 193.325553][ T285] R10: fffffbfff0f2cafd R11: 1ffffffff0f2cafc R12: ffff888139deedec [ 193.333880][ T285] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 193.341849][ T285] FS: 000055555e990500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 193.350779][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.357360][ T285] CR2: 0000000000000170 CR3: 0000000130c5b000 CR4: 00000000003526b0 [ 193.365849][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.373837][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.381838][ T285] Kernel panic - not syncing: Fatal exception [ 193.388175][ T285] Kernel Offset: disabled [ 193.392502][ T285] Rebooting in 86400 seconds..