last executing test programs: 11.413263295s ago: executing program 4 (id=1317): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e785", 0x6}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 11.370758737s ago: executing program 4 (id=1320): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11.360638389s ago: executing program 0 (id=1321): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x44c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002040) sendmmsg$inet(r4, 0x0, 0x0, 0xc804) write(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) 11.252996048s ago: executing program 4 (id=1322): syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb88a8410081000e000800451400280068000007069078e0000001640101004e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c7aac89c8cb1b8724bb129b51001810778ee693e1fc5b1cd864317bc7907a5020000579bc070b5e2ec9ea47ab362549446fab1bb33c3b7622dd40bae317be8256da7b6e299b2436c9d15884cb81e04572c011f0d9520a3f6274fc41fb8b4998bac87df112c02"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600010085000000610000009500000002000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000400)={[{@noblock_validity}, {@lazytime}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0xd3b, 0x2, 0x208, 0x0, 0x8, 0x3}) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getgroups(0x0, 0x0) 8.98334851s ago: executing program 0 (id=1324): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a00142c00fe8000000000000000000000000000bbfe800000000000000000001d000000aa11000003000000", @ANYRES32=0x41424344], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf003000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x34) ptrace(0x10, r3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x129a02, 0x5) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c437f278767bf8a90c19efd1f6e63bb000000c1350704adb91f94bc3d5fa46cf46bb90129e5162787cd8466bcc85090b4f520d5c03de715f50059889ff63b58c232605bbe", @ANYRES16=r5, @ANYBLOB="030328bd7000fbdbdf250a000000080003", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) 8.956069357s ago: executing program 4 (id=1326): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x9, 0xfffffffc, 0x0, {0x1c}}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) socket$nl_route(0x10, 0x3, 0x0) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 8.470733538s ago: executing program 3 (id=1328): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 8.239129861s ago: executing program 3 (id=1330): getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 8.238921561s ago: executing program 2 (id=1331): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x4, 0x4, 0x4, 0x1740, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 7.79481496s ago: executing program 2 (id=1332): epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1010008, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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") creat(&(0x7f0000000e40)='./bus\x00', 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002240), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0), 0x0) getegid() socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000c612e8789789d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000079006001000000001800000000130000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 7.166784939s ago: executing program 0 (id=1334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x2, 0x1, 0x2, "df00"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x8, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 4.919763395s ago: executing program 2 (id=1335): epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1010008, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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") creat(&(0x7f0000000e40)='./bus\x00', 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002240), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0), 0x0) getegid() socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000c612e8789789d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000079006001000000001800000000130000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 4.904525399s ago: executing program 3 (id=1336): unshare(0x6020400) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000003c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 2.218703212s ago: executing program 2 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000340)=r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) llistxattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = eventfd(0xfffffff7) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@local}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r7, r8, r9) 2.218068523s ago: executing program 1 (id=1338): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.217565133s ago: executing program 4 (id=1339): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000140)) r1 = socket(0x11, 0x2, 0x0) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f42000) 2.173511295s ago: executing program 1 (id=1340): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.158681209s ago: executing program 1 (id=1341): getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 2.11450004s ago: executing program 0 (id=1342): r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) r2 = openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000ee6aba463f75490502f46dbc3942c9fcc0ef49fc50d00caba524fe250c61f866a860fec683e041f49977d617b6f01c836421a1717daae7a0ec19835e3f19899cf7dbc58d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x40000000) write$binfmt_script(r2, 0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='xfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000440)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdbA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_open_procfs(0x0, &(0x7f0000019080)='net/sockstat6\x00') setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="8d", 0x1, 0x4008004, 0x0, 0x0) recvfrom(r3, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 417.405558ms ago: executing program 3 (id=1346): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 377.453428ms ago: executing program 0 (id=1347): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x152) getdents(r0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 376.998968ms ago: executing program 3 (id=1348): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) tkill(0x0, 0x13) tkill(0x0, 0x12) waitid(0x1, 0x0, 0x0, 0xb, &(0x7f00000003c0)) r3 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000040)={0x2, 0x200000005, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000000)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ftruncate(r5, 0x8008976) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000540)={r3, &(0x7f0000000100)='!*{]\'$^&%\\\x00', 0x2, &(0x7f0000000240)={@align=0xfff, {0x8001, 0x3671, 0x9, 0x8000}}, 0x8, 0x0, &(0x7f0000000480)=0x6}) read$FUSE(r5, &(0x7f0000001bc0)={0x2020}, 0x2020) 338.560289ms ago: executing program 4 (id=1349): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x9, 0xfffffffc, 0x0, {0x1c}}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 266.431909ms ago: executing program 1 (id=1350): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 245.989944ms ago: executing program 2 (id=1351): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 147.255321ms ago: executing program 1 (id=1352): getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 0s ago: executing program 1 (id=1353): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081a, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x506, &(0x7f0000000c40)="$eJzs3c9vW0kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeJg9J5fUje1m6hJ7BB/PtLTm3nj+PsdJ56Jx7IngKF1NSJ2I2IsIu5GxHR2PZcd8Vn7SG73bO/h0v7ew6VctFq3/5FL25Nr0fEziSvZfRYj4gffifhx7uW4je2dtcVqtbKZ1WebtY3ZxvbOjdXa4kplpbJeLi/ML8x9cvPj8pn19b3aWFb68tPf737jp0laU9mVzn6cpXbXC4dxEqMR8b3zCDYAI1l/xgadCK8lHxFvR8T76fN/OkbS3yYAcJm1WtPRmu6sAwCXXT5dA8vlS9lawFTk86VSew3vnZjMV+uN5vV79a315fZa2UwU8vdWq5W5bK1wJgq5pD6flp/Xy0fqNyPirYj4+fhEWi8t1avLg/zHBwCG2JUj8/+/x9vzPwBwyRUHnQAA0HfmfwAYPuZ/ABg+5n8AGD7t+X9i0GkAAH3k9T8ADJ9Xzv+7/csDAOiL79+6lRyt/ez7r5fvb2+t1e/fWK401kq1raXSUn1zo7RSr6+k39lTO+7+qvX6xvxHsfVg5psbjeZsY3vnTq2+td68k36v951KIb2V/ykAYJDeeu/Jn3LJjPzpRHpEx14OhYFmBpy3/KATAAZmZNAJAANjty8YXqd4jW95AC6JLlv0vqDY7QNCrVardX4pAefs2hes/8Ow6lj/9ykgGDLW/2F4Wf+H4dVq5U6653+c9IYAwMVmjR/o8f7/29n5N9mbAz9aPnqLx+eZFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxsB/v/lrK9wKciny+VIt6IiJko5O6tVitzEfFmRPxxvDCe1OcHnDMAcFr5v+ay/b+uTX849ULTu1cOi2MR8ZNf3v7Fg8Vmc/MPEWO5f44fXG8+zq6X+589AHC8g3k6PXe8kH+293Dp4OhnPn/7dkQU2/H398Zi/zD+aIym52IUImLyX7ms3pbrWLs4jd1HEfH5bv3PxVS6BtLe+fRo/CT2G32Nn38hfj5ta5+Tx+JzZ5ALDJsnyfjzWbfnXz6upufuz/9iOkKdXjb+JXe1tJ+Ogc/jH4x/Iz3Gv6snjfHR777bLk283PYo4oujEQex9zvGn4P4uR7xPzxh/D9/6d33e7W1fhVxLbrH74w126xtzDa2d26s1hZXKiuV9XJ5YX5h7pObH5dn0zXq2d6zwd8/vf5mr7ak/5M94heP6f9XT9j/X//37g+/8or4X/+gW/x8vPOK+Mmc+LUTxl+c/G2x199qEn+5R/+P+/1fP2H8p3/ZeWnbcABgcBrbO2uL1WplU+GcCzPZI35R8vm/LCQP4AVIo2vhW/2KNRbdm372Qfsv7EhTq/VasXqNGGex6gZcBIdP+oj4z6CTAQAAAAAAAAAAAAAAuurHJ5YG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAur/8FAAD//0FVzE8=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000bc0)=""/104, 0x68) utime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8914, &(0x7f00000000c0)="056574de4814230fd6ac70423778f711d2a78620e107") sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): comm syz.0.39: bg 0: block 7: invalid block bitmap [ 48.982618][ T480] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 48.991564][ T480] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.39: corrupted xattr block 95 [ 49.003711][ T480] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 49.012780][ T480] EXT4-fs (loop0): 1 orphan inode deleted [ 49.018514][ T480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.066014][ T287] EXT4-fs (loop0): unmounting filesystem. [ 49.082659][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 49.082671][ T28] audit: type=1400 audit(1790309671.087:152): avc: denied { write } for pid=495 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.410808][ T28] audit: type=1400 audit(1790309671.417:153): avc: denied { watch watch_reads } for pid=502 comm="syz.3.49" path="/8/file1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.603937][ T510] loop3: detected capacity change from 0 to 128 [ 49.627923][ T510] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 49.681545][ T319] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 49.697661][ T510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.708446][ T510] ext2 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.749792][ T510] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 34: comm syz.3.52: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 50.779251][ T510] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 50.828785][ T520] loop2: detected capacity change from 0 to 2048 [ 50.840610][ T319] usb 1-1: not running at top speed; connect to a high speed hub [ 50.849081][ T319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.851195][ T520] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.859530][ T319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 50.877170][ T319] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 50.886373][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.049705][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.079709][ T433] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 51.108056][ T319] usb 1-1: string descriptor 0 read error: -71 [ 51.114337][ T319] usb 1-1: Found UVC 0.00 device (046d:0825) [ 51.121388][ T319] usb 1-1: No valid video chain found. [ 51.130710][ T319] usb 1-1: USB disconnect, device number 2 [ 51.240864][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.251851][ T19] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 51.260913][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.269424][ T19] usb 5-1: config 0 descriptor?? [ 51.275225][ T433] usb 4-1: not running at top speed; connect to a high speed hub [ 51.284142][ T433] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.294313][ T433] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.303221][ T433] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 51.312302][ T433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.524775][ T510] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 34: comm syz.3.52: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 51.543050][ T510] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 51.553275][ T433] usb 4-1: string descriptor 0 read error: -71 [ 51.559491][ T433] usb 4-1: Found UVC 0.00 device (046d:0825) [ 51.566408][ T433] usb 4-1: No valid video chain found. [ 51.576038][ T433] usb 4-1: USB disconnect, device number 2 [ 51.712178][ T19] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 51.719097][ T531] 9pnet_fd: Insufficient options for proto=fd [ 51.722179][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input4 [ 51.727075][ T291] EXT4-fs (loop2): unmounting filesystem. [ 51.757444][ T535] loop1: detected capacity change from 0 to 128 [ 52.256830][ T28] audit: type=1400 audit(1790309674.257:154): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=618 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.279821][ T19] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 52.286035][ T28] audit: type=1400 audit(1790309674.257:155): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=618 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.292255][ T330] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.315075][ T28] audit: type=1400 audit(1790309674.287:156): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=618 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.329900][ T19] usb 5-1: USB disconnect, device number 3 [ 52.361210][ T288] EXT4-fs (loop3): unmounting filesystem. [ 52.441580][ T546] loop3: detected capacity change from 0 to 128 [ 52.451589][ T328] udevd[328]: incorrect ext4 checksum on /dev/loop3 [ 52.469693][ T542] fido_id[542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 52.590663][ T548] loop1: detected capacity change from 0 to 512 [ 52.904393][ T550] loop3: detected capacity change from 0 to 512 [ 53.664679][ T548] EXT4-fs (loop1): Test dummy encryption mode enabled [ 53.699688][ T550] EXT4-fs (loop3): Test dummy encryption mode enabled [ 53.832129][ T550] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.62: corrupted xattr block 95 [ 53.845121][ T550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.62: bg 0: block 7: invalid block bitmap [ 53.858551][ T550] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 53.868561][ T550] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.62: corrupted xattr block 95 [ 53.881294][ T550] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 53.890459][ T550] EXT4-fs (loop3): 1 orphan inode deleted [ 53.896231][ T550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 54.190197][ T548] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.1.60: corrupted xattr block 95 [ 54.204320][ T548] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.60: bg 0: block 7: invalid block bitmap [ 54.216949][ T548] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 54.226160][ T548] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #11: comm syz.1.60: corrupted xattr block 95 [ 54.238580][ T548] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 54.247778][ T548] EXT4-fs (loop1): 1 orphan inode deleted [ 54.253569][ T548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.498091][ T288] EXT4-fs (loop3): unmounting filesystem. [ 54.500385][ T555] loop2: detected capacity change from 0 to 128 [ 54.550550][ T543] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.974052][ T569] loop2: detected capacity change from 0 to 512 [ 55.055015][ T569] EXT4-fs (loop2): Test dummy encryption mode enabled [ 55.188001][ T290] EXT4-fs (loop1): unmounting filesystem. [ 57.377840][ T573] loop0: detected capacity change from 0 to 128 [ 57.388721][ T569] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.2.64: corrupted xattr block 95 [ 57.404634][ T569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.64: bg 0: block 7: invalid block bitmap [ 57.418433][ T569] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 57.428051][ T569] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #11: comm syz.2.64: corrupted xattr block 95 [ 57.441034][ T569] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 57.450426][ T569] EXT4-fs (loop2): 1 orphan inode deleted [ 57.454906][ T28] audit: type=1400 audit(1790309679.457:157): avc: denied { create } for pid=574 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.456160][ T569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.482545][ T28] audit: type=1400 audit(1790309679.487:158): avc: denied { write } for pid=574 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.509387][ T28] audit: type=1400 audit(1790309679.487:159): avc: denied { shutdown } for pid=574 comm="syz.4.69" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.537709][ T328] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.555491][ T291] EXT4-fs (loop2): unmounting filesystem. [ 57.574655][ T28] audit: type=1400 audit(1790309679.577:160): avc: denied { read } for pid=578 comm="syz.4.72" path="socket:[16116]" dev="sockfs" ino=16116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.672933][ T593] loop3: detected capacity change from 0 to 2048 [ 60.723024][ T593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.739722][ T593] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.776575][ T589] loop1: detected capacity change from 0 to 40427 [ 60.786929][ T288] EXT4-fs (loop3): unmounting filesystem. [ 60.803601][ T589] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 60.815123][ T589] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 60.823979][ T589] F2FS-fs (loop1): invalid crc value [ 60.830433][ T589] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.859767][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 60.873789][ T589] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 60.881036][ T589] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.934512][ T28] audit: type=1400 audit(1790309682.927:161): avc: denied { read append } for pid=588 comm="syz.1.73" path="/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.956729][ T603] process 'syz.0.76' launched './file0' with NULL argv: empty string added [ 60.997923][ T28] audit: type=1400 audit(1790309682.997:162): avc: denied { map } for pid=588 comm="syz.1.73" path="/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.077976][ T28] audit: type=1400 audit(1790309683.057:163): avc: denied { execute } for pid=602 comm="syz.0.76" name="file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.086101][ T604] syz.1.73: attempt to access beyond end of device [ 61.086101][ T604] loop1: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 61.099860][ T28] audit: type=1400 audit(1790309683.057:164): avc: denied { execute_no_trans } for pid=602 comm="syz.0.76" path="/14/file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.114882][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.394136][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 61.439763][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.558207][ T24] usb 3-1: config 0 descriptor?? [ 61.811902][ T610] loop4: detected capacity change from 0 to 128 [ 62.059172][ T610] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 62.081547][ T604] syz.1.73: attempt to access beyond end of device [ 62.081547][ T604] loop1: rw=2049, sector=49152, nr_sectors = 3696 limit=40427 [ 62.100748][ T610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.129280][ T610] ext2 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.208107][ T610] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 34: comm syz.4.77: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 62.239845][ T610] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 62.305168][ T603] loop0: detected capacity change from 0 to 40427 [ 62.578089][ T603] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 62.594466][ T24] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 62.664509][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input5 [ 62.689807][ T431] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 62.699922][ T603] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.765839][ T603] F2FS-fs (loop0): invalid crc value [ 62.837836][ T603] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.859518][ T24] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 62.876202][ T588] syz.1.73: attempt to access beyond end of device [ 62.876202][ T588] loop1: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 62.931003][ T431] usb 5-1: not running at top speed; connect to a high speed hub [ 62.947762][ T431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.028037][ T588] syz.1.73: attempt to access beyond end of device [ 63.028037][ T588] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 63.043695][ T588] syz.1.73: attempt to access beyond end of device [ 63.043695][ T588] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 63.057296][ T588] syz.1.73: attempt to access beyond end of device [ 63.057296][ T588] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 63.071733][ T588] syz.1.73: attempt to access beyond end of device [ 63.071733][ T588] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 63.106574][ T24] usb 3-1: USB disconnect, device number 3 [ 63.118808][ T431] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.130836][ T603] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 63.135074][ T431] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 63.137939][ T603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 63.149943][ T431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.159700][ T588] syz.1.73: attempt to access beyond end of device [ 63.159700][ T588] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 63.175659][ T28] audit: type=1400 audit(1790309685.167:165): avc: denied { mount } for pid=602 comm="syz.0.76" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.207546][ T620] fido_id[620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 63.219748][ T588] syz.1.73: attempt to access beyond end of device [ 63.219748][ T588] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 63.235173][ T588] syz.1.73: attempt to access beyond end of device [ 63.235173][ T588] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 63.313468][ T28] audit: type=1400 audit(1790309685.317:166): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.389239][ T610] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 34: comm syz.4.77: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 63.434426][ T610] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 63.500531][ T431] usb 5-1: string descriptor 0 read error: -71 [ 63.506836][ T431] usb 5-1: Found UVC 0.00 device (046d:0825) [ 63.520853][ T431] usb 5-1: No valid video chain found. [ 63.537865][ T431] usb 5-1: USB disconnect, device number 4 [ 63.739029][ T625] loop2: detected capacity change from 0 to 128 [ 63.789923][ T625] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 63.837493][ T625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.857510][ T625] ext2 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.988679][ T631] loop1: detected capacity change from 0 to 512 [ 64.004772][ T625] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 34: comm syz.2.82: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 64.039794][ T625] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 64.059452][ T633] loop1: detected capacity change from 0 to 1024 [ 64.059469][ T625] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 34: comm syz.2.82: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 64.089427][ T635] loop0: detected capacity change from 0 to 128 [ 64.089872][ T633] EXT4-fs: Ignoring removed bh option [ 64.108500][ T633] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.121038][ T625] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 64.131129][ T633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.154366][ T562] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.194423][ T629] loop3: detected capacity change from 0 to 40427 [ 64.217387][ T28] audit: type=1400 audit(1790309686.217:167): avc: denied { read write } for pid=632 comm="syz.1.84" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.233663][ T629] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.254931][ T289] EXT4-fs (loop4): unmounting filesystem. [ 64.272052][ T290] EXT4-fs (loop1): unmounting filesystem. [ 64.281558][ T28] audit: type=1400 audit(1790309686.217:168): avc: denied { open } for pid=632 comm="syz.1.84" path="/18/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.288603][ T629] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.313039][ T629] F2FS-fs (loop3): invalid crc value [ 64.319505][ T629] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.331113][ T646] loop0: detected capacity change from 0 to 512 [ 64.339202][ T646] EXT4-fs (loop0): Test dummy encryption mode enabled [ 64.355365][ T646] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.81: corrupted xattr block 95 [ 64.367806][ T646] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.81: bg 0: block 7: invalid block bitmap [ 64.376509][ T629] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.387113][ T646] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 64.389768][ T629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.403350][ T28] audit: type=1400 audit(1790309686.387:169): avc: denied { mount } for pid=644 comm="syz.1.86" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.431213][ T646] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.81: corrupted xattr block 95 [ 64.438915][ T28] audit: type=1400 audit(1790309686.397:170): avc: denied { read write } for pid=644 comm="syz.1.86" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 64.466466][ T646] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 64.475949][ T646] EXT4-fs (loop0): 1 orphan inode deleted [ 64.481695][ T646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.498074][ T28] audit: type=1400 audit(1790309686.397:171): avc: denied { open } for pid=644 comm="syz.1.86" path="/19/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 64.522490][ T28] audit: type=1400 audit(1790309686.417:172): avc: denied { read } for pid=644 comm="syz.1.86" dev="nsfs" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.544254][ T28] audit: type=1400 audit(1790309686.417:173): avc: denied { open } for pid=644 comm="syz.1.86" path="net:[4026532408]" dev="nsfs" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.573809][ T28] audit: type=1400 audit(1790309686.577:174): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.599707][ T571] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 64.678344][ T291] EXT4-fs (loop2): unmounting filesystem. [ 64.703447][ T655] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 64.715564][ T655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.724985][ T655] ext2 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.240898][ T287] EXT4-fs (loop0): unmounting filesystem. [ 65.376294][ T655] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 34: comm syz.2.88: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 65.704953][ T655] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 65.730932][ T571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.748293][ T661] set_capacity_and_notify: 1 callbacks suppressed [ 65.748308][ T661] loop1: detected capacity change from 0 to 128 [ 65.762760][ T571] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.781054][ T571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.793099][ T571] usb 5-1: config 0 descriptor?? [ 65.801288][ T562] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.009422][ T667] loop1: detected capacity change from 0 to 512 [ 66.018710][ T667] EXT4-fs (loop1): Test dummy encryption mode enabled [ 66.030195][ T431] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 66.153214][ T667] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.1.90: corrupted xattr block 95 [ 66.166365][ T667] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.90: bg 0: block 7: invalid block bitmap [ 66.180149][ T667] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 66.189596][ T667] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #11: comm syz.1.90: corrupted xattr block 95 [ 66.201875][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 66.210452][ T667] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 66.219733][ T667] EXT4-fs (loop1): 1 orphan inode deleted [ 66.225520][ T667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 66.235910][ T431] usb 3-1: not running at top speed; connect to a high speed hub [ 66.427448][ T431] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.457135][ T671] loop0: detected capacity change from 0 to 128 [ 66.463819][ T431] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.489068][ T562] udevd[562]: incorrect ext4 checksum on /dev/loop0 [ 66.695988][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 66.707486][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.720114][ T431] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 66.731712][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.740102][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.742054][ T571] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 66.887905][ T674] loop0: detected capacity change from 0 to 512 [ 66.900360][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 66.917873][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.928953][ T674] EXT4-fs (loop0): Test dummy encryption mode enabled [ 66.945717][ T290] EXT4-fs (loop1): unmounting filesystem. [ 67.063968][ T674] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.92: corrupted xattr block 95 [ 67.078009][ T674] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.92: bg 0: block 7: invalid block bitmap [ 67.091227][ T674] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 67.101809][ T674] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.92: corrupted xattr block 95 [ 67.115102][ T674] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 67.124332][ T674] EXT4-fs (loop0): 1 orphan inode deleted [ 67.130105][ T674] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.515679][ T571] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input6 [ 67.529880][ T655] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 34: comm syz.2.88: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 67.564156][ T24] usb 4-1: string descriptor 0 read error: -71 [ 67.570576][ T655] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 67.578690][ T24] usb 4-1: Found UVC 0.00 device (046d:0825) [ 67.590443][ T287] EXT4-fs (loop0): unmounting filesystem. [ 67.596907][ T24] usb 4-1: No valid video chain found. [ 67.604345][ T431] usb 3-1: string descriptor 0 read error: -71 [ 67.610918][ T571] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 67.613500][ T431] usb 3-1: Found UVC 0.00 device (046d:0825) [ 67.646298][ T24] usb 4-1: USB disconnect, device number 3 [ 67.669285][ T431] usb 3-1: No valid video chain found. [ 67.679218][ T431] usb 3-1: USB disconnect, device number 4 [ 67.809406][ T676] usb 5-1: USB disconnect, device number 5 [ 67.909678][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.082218][ T684] Zero length message leads to an empty skb [ 68.090871][ T39] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 68.106831][ T39] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.148617][ T39] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.155467][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 68.164804][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.173558][ T39] usb 1-1: config 0 descriptor?? [ 68.178784][ T682] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 68.186841][ T291] EXT4-fs (loop2): unmounting filesystem. [ 68.303218][ T693] loop3: detected capacity change from 0 to 2048 [ 68.521105][ T693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.530069][ T693] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.580260][ T693] fs-verity: sha512 using implementation "sha512-avx2" [ 68.589091][ T28] audit: type=1400 audit(1790309690.577:175): avc: denied { ioctl } for pid=687 comm="syz.3.97" path="/22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.670475][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 68.693177][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 68.830503][ T39] usb 1-1: USB disconnect, device number 3 [ 68.930846][ T701] loop1: detected capacity change from 0 to 1024 [ 68.942523][ T701] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.241986][ T28] audit: type=1400 audit(1790309693.247:176): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.263033][ T705] netlink: 80 bytes leftover after parsing attributes in process `syz.4.99'. [ 71.263523][ T288] EXT4-fs (loop3): unmounting filesystem. [ 71.276173][ T707] netlink: 80 bytes leftover after parsing attributes in process `syz.2.103'. [ 71.337865][ T28] audit: type=1400 audit(1790309693.337:177): avc: denied { remount } for pid=698 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.346947][ T714] loop2: detected capacity change from 0 to 128 [ 71.390088][ T716] loop0: detected capacity change from 0 to 1024 [ 71.399488][ T716] EXT4-fs: Ignoring removed bh option [ 71.434572][ T328] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.463872][ T716] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.488142][ T722] 9pnet_fd: Insufficient options for proto=fd [ 71.491292][ T28] audit: type=1400 audit(1790309693.487:178): avc: denied { ioctl } for pid=721 comm="syz.3.106" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.605094][ T716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.629569][ T287] EXT4-fs (loop0): unmounting filesystem. [ 71.716982][ T728] loop2: detected capacity change from 0 to 512 [ 71.726152][ T728] EXT4-fs (loop2): Test dummy encryption mode enabled [ 71.885288][ T728] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.2.104: corrupted xattr block 95 [ 71.898574][ T728] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.104: bg 0: block 7: invalid block bitmap [ 71.912101][ T728] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 71.921666][ T728] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #11: comm syz.2.104: corrupted xattr block 95 [ 71.934279][ T728] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 71.943446][ T728] EXT4-fs (loop2): 1 orphan inode deleted [ 71.949228][ T728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.051181][ T733] loop0: detected capacity change from 0 to 256 [ 72.099690][ T676] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.554531][ T291] EXT4-fs (loop2): unmounting filesystem. [ 72.629683][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 72.645070][ T28] audit: type=1400 audit(1790309694.637:179): avc: denied { name_bind } for pid=732 comm="syz.0.110" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.673976][ T676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.685410][ T676] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.698985][ T676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.710505][ T676] usb 4-1: config 0 descriptor?? [ 72.817132][ T742] loop2: detected capacity change from 0 to 2048 [ 72.959353][ T742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.968536][ T742] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.131153][ T676] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 73.192055][ T676] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input7 [ 73.348911][ T676] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 73.573001][ T571] usb 4-1: USB disconnect, device number 4 [ 73.584481][ T750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.115'. [ 73.595812][ T291] EXT4-fs (loop2): unmounting filesystem. [ 73.667264][ T756] loop0: detected capacity change from 0 to 256 [ 73.673692][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 73.680890][ T756] exfat: Deprecated parameter 'utf8' [ 73.686318][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.697458][ T756] exfat: Deprecated parameter 'namecase' [ 73.703368][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.704075][ T756] exfat: Deprecated parameter 'namecase' [ 73.713391][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.720111][ T756] exfat: Deprecated parameter 'namecase' [ 73.732183][ T19] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.741010][ T756] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 73.746427][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.766934][ T290] EXT4-fs (loop1): unmounting filesystem. [ 73.769839][ T19] usb 5-1: config 0 descriptor?? [ 73.793809][ T28] audit: type=1400 audit(1790309695.797:180): avc: denied { write } for pid=754 comm="syz.0.118" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.825057][ T28] audit: type=1400 audit(1790309695.807:181): avc: denied { add_name } for pid=754 comm="syz.0.118" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.836071][ T763] 9pnet_fd: Insufficient options for proto=fd [ 73.847281][ T28] audit: type=1400 audit(1790309695.807:182): avc: denied { associate } for pid=754 comm="syz.0.118" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.874588][ T28] audit: type=1400 audit(1790309695.807:183): avc: denied { read open } for pid=754 comm="syz.0.118" path=2F32362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop0" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.889055][ T766] loop0: detected capacity change from 0 to 128 [ 73.915501][ T28] audit: type=1400 audit(1790309695.807:184): avc: denied { watch watch_reads } for pid=754 comm="syz.0.118" path=2F32362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop0" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.925189][ T562] udevd[562]: incorrect ext4 checksum on /dev/loop0 [ 73.956673][ T28] audit: type=1400 audit(1790309695.827:185): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.005842][ T28] audit: type=1400 audit(1790309695.857:186): avc: denied { create } for pid=761 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.084660][ T28] audit: type=1400 audit(1790309695.867:187): avc: denied { bind } for pid=761 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.104112][ T28] audit: type=1400 audit(1790309695.867:188): avc: denied { listen } for pid=761 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.184838][ T771] loop0: detected capacity change from 0 to 512 [ 74.193516][ T771] EXT4-fs (loop0): Test dummy encryption mode enabled [ 74.233121][ T771] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.122: corrupted xattr block 95 [ 74.246045][ T771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.122: bg 0: block 7: invalid block bitmap [ 74.258608][ T28] audit: type=1400 audit(1790309695.867:189): avc: denied { connect } for pid=761 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.279738][ T771] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 74.289289][ T771] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.122: corrupted xattr block 95 [ 74.302346][ T771] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 74.311540][ T771] EXT4-fs (loop0): 1 orphan inode deleted [ 74.317321][ T771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.049604][ T768] loop1: detected capacity change from 0 to 40427 [ 75.059929][ T768] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 75.061189][ T287] EXT4-fs (loop0): unmounting filesystem. [ 75.067692][ T768] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 75.083185][ T768] F2FS-fs (loop1): invalid crc value [ 75.101700][ T768] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.146121][ T768] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 75.153544][ T768] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 75.176466][ T794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.129'. [ 75.221070][ T799] loop0: detected capacity change from 0 to 2048 [ 75.242367][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 75.248461][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 75.263173][ T19] usb 5-1: USB disconnect, device number 6 [ 75.265112][ T799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.299056][ T802] bio_check_eod: 259 callbacks suppressed [ 75.299069][ T802] syz.1.123: attempt to access beyond end of device [ 75.299069][ T802] loop1: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 75.329149][ T802] syz.1.123: attempt to access beyond end of device [ 75.329149][ T802] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 75.360159][ T802] syz.1.123: attempt to access beyond end of device [ 75.360159][ T802] loop1: rw=2049, sector=57344, nr_sectors = 6960 limit=40427 [ 75.470392][ T767] syz.1.123: attempt to access beyond end of device [ 75.470392][ T767] loop1: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 75.484480][ T767] syz.1.123: attempt to access beyond end of device [ 75.484480][ T767] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 75.497941][ T767] syz.1.123: attempt to access beyond end of device [ 75.497941][ T767] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 75.499668][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 75.511397][ T767] syz.1.123: attempt to access beyond end of device [ 75.511397][ T767] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 75.541318][ T767] syz.1.123: attempt to access beyond end of device [ 75.541318][ T767] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 75.554802][ T767] syz.1.123: attempt to access beyond end of device [ 75.554802][ T767] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 75.568275][ T767] syz.1.123: attempt to access beyond end of device [ 75.568275][ T767] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 75.702141][ T39] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 75.722817][ T39] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 75.762376][ T39] usb 3-1: Product: syz [ 75.786488][ T39] usb 3-1: config 0 descriptor?? [ 75.804707][ T39] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 75.816688][ T39] usb 3-1: Detected FT232H [ 75.908928][ T811] 9pnet_fd: Insufficient options for proto=fd [ 76.106863][ T816] netlink: 80 bytes leftover after parsing attributes in process `syz.3.133'. [ 77.068771][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 77.214088][ T814] loop1: detected capacity change from 0 to 40427 [ 77.240712][ T287] EXT4-fs (loop0): unmounting filesystem. [ 77.256801][ T814] F2FS-fs (loop1): invalid crc value [ 77.268872][ T814] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.302087][ T827] loop4: detected capacity change from 0 to 128 [ 77.312087][ T328] udevd[328]: incorrect ext4 checksum on /dev/loop4 [ 77.364865][ T820] loop3: detected capacity change from 0 to 40427 [ 77.382200][ T820] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 77.390038][ T820] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.402663][ T814] F2FS-fs (loop1): Start checkpoint disabled! [ 77.411479][ T820] F2FS-fs (loop3): invalid crc value [ 77.418032][ T820] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.418103][ T814] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 77.432027][ T814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 77.457072][ T820] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 77.465396][ T820] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.531482][ T834] loop4: detected capacity change from 0 to 512 [ 77.559785][ T818] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.570661][ T834] EXT4-fs (loop4): Test dummy encryption mode enabled [ 77.582233][ T39] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 77.600983][ T39] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.613305][ T39] usb 3-1: USB disconnect, device number 5 [ 77.622748][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.694277][ T834] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.139: corrupted xattr block 95 [ 77.707504][ T834] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.139: bg 0: block 7: invalid block bitmap [ 77.721534][ T834] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 77.731279][ T834] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.139: corrupted xattr block 95 [ 77.744081][ T834] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 77.753278][ T834] EXT4-fs (loop4): 1 orphan inode deleted [ 77.759057][ T834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.966200][ T39] ftdi_sio 3-1:0.0: device disconnected [ 78.321218][ T289] EXT4-fs (loop4): unmounting filesystem. [ 78.321575][ T818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.338216][ T818] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.347442][ T818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.359271][ T818] usb 1-1: config 0 descriptor?? [ 78.389356][ T840] netlink: 60 bytes leftover after parsing attributes in process `syz.4.140'. [ 78.458801][ T842] loop4: detected capacity change from 0 to 2048 [ 78.462029][ T844] loop1: detected capacity change from 0 to 1024 [ 78.510396][ T842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.510451][ T844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.527471][ T842] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.573124][ T842] syz.4.142 (842) used greatest stack depth: 20256 bytes left [ 78.621122][ T289] EXT4-fs (loop4): unmounting filesystem. [ 79.981507][ T818] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 80.000483][ T290] EXT4-fs (loop1): unmounting filesystem. [ 80.006869][ T818] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input8 [ 80.043056][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 80.043070][ T28] audit: type=1400 audit(1790309702.047:191): avc: denied { create } for pid=868 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.061422][ T869] tipc: Started in network mode [ 80.074487][ T869] tipc: Node identity ac1414aa, cluster identity 4711 [ 80.090221][ T869] tipc: Enabling of bearer rejected, failed to enable media [ 80.102400][ T818] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 80.115796][ T28] audit: type=1400 audit(1790309702.127:192): avc: denied { ioctl } for pid=874 comm="syz.4.150" path="socket:[17759]" dev="sockfs" ino=17759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.164274][ T877] loop2: detected capacity change from 0 to 1024 [ 80.200675][ T877] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.202293][ T885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.153'. [ 80.256421][ C1] keytouch 0003:0926:3333.0005: Event data for report 0 was too short (8 vs 2) [ 80.517254][ T39] usb 1-1: USB disconnect, device number 4 [ 80.569908][ T818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.844265][ T818] usb 4-1: Using ep0 maxpacket: 32 [ 80.873279][ T818] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 80.975659][ T818] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.193213][ T898] loop1: detected capacity change from 0 to 1024 [ 81.238888][ T898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.244074][ T818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.255365][ T818] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 81.264596][ T818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.265296][ T291] EXT4-fs (loop2): unmounting filesystem. [ 81.273798][ T818] usb 4-1: config 0 descriptor?? [ 81.297555][ T906] tipc: Enabling of bearer rejected, failed to enable media [ 82.319535][ T920] loop2: detected capacity change from 0 to 2048 [ 82.479819][ T290] EXT4-fs (loop1): unmounting filesystem. [ 82.537735][ T920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.546632][ T920] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.612363][ T818] usbhid 4-1:0.0: can't add hid device: -71 [ 82.632113][ T818] usbhid: probe of 4-1:0.0 failed with error -71 [ 82.728180][ T925] loop4: detected capacity change from 0 to 128 [ 82.737331][ T328] udevd[328]: incorrect ext4 checksum on /dev/loop4 [ 82.744059][ T818] usb 4-1: USB disconnect, device number 5 [ 83.007182][ T929] loop4: detected capacity change from 0 to 512 [ 83.015502][ T929] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.076246][ T291] EXT4-fs (loop2): unmounting filesystem. [ 83.104895][ T929] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.167: corrupted xattr block 95 [ 83.119133][ T929] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.167: bg 0: block 7: invalid block bitmap [ 83.132811][ T929] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 83.142182][ T929] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.167: corrupted xattr block 95 [ 83.155324][ T929] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 83.164526][ T929] EXT4-fs (loop4): 1 orphan inode deleted [ 83.170429][ T929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.715585][ T917] loop0: detected capacity change from 0 to 40427 [ 83.730802][ T917] F2FS-fs (loop0): invalid crc value [ 83.753413][ T917] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.812077][ T917] F2FS-fs (loop0): Start checkpoint disabled! [ 83.818585][ T917] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 83.856378][ T917] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 83.877443][ T289] EXT4-fs (loop4): unmounting filesystem. [ 83.925405][ T933] loop3: detected capacity change from 0 to 40427 [ 83.934722][ T933] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 83.941141][ T933] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 83.959904][ T933] F2FS-fs (loop3): invalid crc value [ 83.974617][ T933] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 83.976163][ T943] loop4: detected capacity change from 0 to 2048 [ 84.015828][ T949] tipc: Started in network mode [ 84.025650][ T949] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.025949][ T943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.033099][ T949] tipc: Enabling of bearer rejected, failed to enable media [ 84.049252][ T933] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 84.056356][ T933] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.114163][ T954] loop1: detected capacity change from 0 to 128 [ 84.134183][ T954] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 84.190495][ T954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.209263][ T954] ext2 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.265181][ T954] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 34: comm syz.1.173: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 84.287076][ T954] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem [ 84.334322][ T954] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 34: comm syz.1.173: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 84.395721][ T954] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem [ 84.500671][ T958] loop0: detected capacity change from 0 to 40427 [ 84.517782][ T958] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 84.536247][ T958] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 84.556533][ T958] F2FS-fs (loop0): invalid crc value [ 84.570949][ T958] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.668169][ T958] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.677852][ T974] loop2: detected capacity change from 0 to 256 [ 84.684211][ T958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.702704][ T974] exfat: Deprecated parameter 'utf8' [ 84.744722][ T974] exfat: Deprecated parameter 'namecase' [ 84.750992][ T974] exfat: Deprecated parameter 'namecase' [ 84.756744][ T974] exfat: Deprecated parameter 'namecase' [ 84.764754][ T974] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 84.875407][ T289] EXT4-fs (loop4): unmounting filesystem. [ 84.921647][ T958] bio_check_eod: 254 callbacks suppressed [ 84.921663][ T958] syz.0.175: attempt to access beyond end of device [ 84.921663][ T958] loop0: rw=2049, sector=77824, nr_sectors = 2120 limit=40427 [ 84.922181][ T984] tipc: Started in network mode [ 84.937183][ T958] syz.0.175: attempt to access beyond end of device [ 84.937183][ T958] loop0: rw=2049, sector=79944, nr_sectors = 1976 limit=40427 [ 84.942815][ T984] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.957084][ T958] syz.0.175: attempt to access beyond end of device [ 84.957084][ T958] loop0: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 84.960843][ T984] tipc: Enabling of bearer rejected, failed to enable media [ 84.997365][ T958] syz.0.175: attempt to access beyond end of device [ 84.997365][ T958] loop0: rw=2049, sector=57344, nr_sectors = 6848 limit=40427 [ 85.015058][ T957] syz.0.175: attempt to access beyond end of device [ 85.015058][ T957] loop0: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 85.017882][ T290] EXT4-fs (loop1): unmounting filesystem. [ 85.037227][ T957] syz.0.175: attempt to access beyond end of device [ 85.037227][ T957] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 85.062991][ T989] loop1: detected capacity change from 0 to 128 [ 85.066647][ T957] syz.0.175: attempt to access beyond end of device [ 85.066647][ T957] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 85.082858][ T957] syz.0.175: attempt to access beyond end of device [ 85.082858][ T957] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 85.097714][ T957] syz.0.175: attempt to access beyond end of device [ 85.097714][ T957] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 85.111512][ T957] syz.0.175: attempt to access beyond end of device [ 85.111512][ T957] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 85.168131][ T562] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.381427][ T1002] EXT4-fs (loop1): Test dummy encryption mode enabled [ 85.424365][ T1002] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.1.184: corrupted xattr block 95 [ 85.438295][ T1002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.184: bg 0: block 7: invalid block bitmap [ 85.451512][ T1002] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 85.460812][ T1002] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #11: comm syz.1.184: corrupted xattr block 95 [ 85.473525][ T1002] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 85.482754][ T1002] EXT4-fs (loop1): 1 orphan inode deleted [ 85.488545][ T1002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.765282][ T290] EXT4-fs (loop1): unmounting filesystem. [ 89.787302][ T1017] tipc: Started in network mode [ 89.797986][ T1017] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.805663][ T1017] tipc: Enabling of bearer rejected, failed to enable media [ 89.815977][ T1017] tipc: Enabling of bearer rejected, failed to enable media [ 89.849435][ T1027] set_capacity_and_notify: 1 callbacks suppressed [ 89.849452][ T1027] loop4: detected capacity change from 0 to 128 [ 89.850583][ T28] audit: type=1400 audit(1790309711.847:193): avc: denied { write } for pid=1024 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.890547][ T562] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.997324][ T28] audit: type=1400 audit(1790309711.997:194): avc: denied { read } for pid=1031 comm="syz.3.203" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 90.172837][ T1040] loop4: detected capacity change from 0 to 512 [ 90.811843][ T1040] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.876478][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.031068][ T1040] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.201: corrupted xattr block 95 [ 91.044183][ T1040] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.201: bg 0: block 7: invalid block bitmap [ 91.057243][ T1040] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 91.066810][ T1040] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.201: corrupted xattr block 95 [ 91.079568][ T1040] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 91.088836][ T1040] EXT4-fs (loop4): 1 orphan inode deleted [ 91.094656][ T1040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.202265][ T28] audit: type=1400 audit(1790309711.997:195): avc: denied { open } for pid=1031 comm="syz.3.203" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.226913][ T28] audit: type=1400 audit(1790309711.997:196): avc: denied { ioctl } for pid=1031 comm="syz.3.203" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.266355][ T1047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.205'. [ 91.280618][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 91.290922][ T1050] loop3: detected capacity change from 0 to 2048 [ 91.304983][ T28] audit: type=1400 audit(1790309713.307:197): avc: denied { bind } for pid=1051 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.332274][ T28] audit: type=1400 audit(1790309713.327:198): avc: denied { map } for pid=1051 comm="syz.1.208" path="socket:[18817]" dev="sockfs" ino=18817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.362952][ T289] EXT4-fs (loop4): unmounting filesystem. [ 91.363015][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.399729][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.409885][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.419001][ T28] audit: type=1400 audit(1790309713.327:199): avc: denied { read } for pid=1051 comm="syz.1.208" path="socket:[18817]" dev="sockfs" ino=18817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.427414][ T1056] tipc: Enabling of bearer rejected, failed to enable media [ 91.447700][ T1050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.454258][ T39] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.479895][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.488543][ T39] usb 3-1: config 0 descriptor?? [ 91.502696][ T1056] tipc: Enabling of bearer rejected, failed to enable media [ 91.514478][ T28] audit: type=1400 audit(1790309713.517:200): avc: denied { mmap_zero } for pid=1060 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 92.612490][ T288] EXT4-fs (loop3): unmounting filesystem. [ 92.641663][ T1079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.218'. [ 92.721509][ T1090] tipc: Enabling of bearer rejected, failed to enable media [ 92.731289][ T1090] tipc: Enabling of bearer rejected, failed to enable media [ 92.790789][ T28] audit: type=1400 audit(1790309714.797:201): avc: denied { read write } for pid=1096 comm="syz.1.225" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.815704][ T28] audit: type=1400 audit(1790309714.817:202): avc: denied { open } for pid=1096 comm="syz.1.225" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.236059][ T1101] loop4: detected capacity change from 0 to 2048 [ 93.291974][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 93.317456][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 93.461570][ T39] usb 3-1: USB disconnect, device number 6 [ 93.584890][ T1101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.593733][ T1101] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.921682][ T289] EXT4-fs (loop4): unmounting filesystem. [ 94.023252][ T1126] loop4: detected capacity change from 0 to 128 [ 94.030400][ T1126] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 94.039385][ T1126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.048201][ T1126] ext2 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.100707][ T1126] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 34: comm syz.4.236: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 94.228585][ T1126] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 95.419657][ T433] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 95.571571][ T433] usb 5-1: device descriptor read/64, error -71 [ 96.953234][ T1199] netlink: 44 bytes leftover after parsing attributes in process `syz.2.263'. [ 97.190121][ T289] EXT4-fs (loop4): unmounting filesystem. [ 97.723926][ T433] usb 5-1: device descriptor read/64, error -71 [ 97.730265][ T319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.733982][ T28] audit: type=1400 audit(1790309720.707:203): avc: denied { remount } for pid=1207 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.941326][ T28] audit: type=1400 audit(1790309720.937:204): avc: denied { create } for pid=1229 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.270466][ T28] audit: type=1400 audit(1790309721.277:205): avc: denied { write } for pid=1239 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.292423][ T28] audit: type=1400 audit(1790309721.277:206): avc: denied { nlmsg_write } for pid=1239 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.439750][ T319] usb 1-1: device not accepting address 5, error -71 [ 100.699663][ T319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.749648][ T298] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.889750][ T319] usb 1-1: Using ep0 maxpacket: 16 [ 100.896238][ T319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.906506][ T319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.941359][ T319] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.950440][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.958461][ T319] usb 1-1: Product: syz [ 100.962657][ T319] usb 1-1: Manufacturer: syz [ 100.967274][ T319] usb 1-1: SerialNumber: syz [ 100.973044][ T298] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.984630][ T298] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.994729][ T298] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.061188][ T1272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.289'. [ 102.511691][ T298] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.513496][ T319] usb 1-1: 0:2 : does not exist [ 102.525067][ T298] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 102.534722][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.554836][ T298] usb 4-1: config 0 descriptor?? [ 102.561019][ T319] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 102.585207][ T319] usb 1-1: USB disconnect, device number 6 [ 103.730526][ T298] usbhid 4-1:0.0: can't add hid device: -71 [ 103.736503][ T298] usbhid: probe of 4-1:0.0 failed with error -71 [ 103.805169][ T298] usb 4-1: USB disconnect, device number 6 [ 104.968822][ T28] audit: type=1400 audit(1790309726.967:207): avc: denied { ioctl } for pid=1322 comm="syz.4.310" path="/dev/input/event2" dev="devtmpfs" ino=277 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.242309][ T1348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.319'. [ 106.471436][ T1370] 9pnet_fd: Insufficient options for proto=fd [ 106.671170][ T1377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.331'. [ 106.688238][ T1377] device ip6gretap1 entered promiscuous mode [ 107.581340][ T476] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 108.819652][ T476] usb 3-1: device descriptor read/64, error -71 [ 109.045771][ T1398] netlink: 80 bytes leftover after parsing attributes in process `syz.3.341'. [ 109.058601][ T1400] 9pnet_fd: Insufficient options for proto=fd [ 109.139676][ T476] usb 3-1: device descriptor read/64, error -71 [ 109.439756][ T476] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 110.332984][ T1435] netlink: 80 bytes leftover after parsing attributes in process `syz.4.354'. [ 110.387397][ T1440] 9pnet_fd: Insufficient options for proto=fd [ 111.467372][ T1456] ./dev/sda1: Can't open blockdev [ 111.605573][ T1465] netlink: 80 bytes leftover after parsing attributes in process `syz.1.366'. [ 111.632786][ T1468] 9pnet_fd: Insufficient options for proto=fd [ 112.800618][ T1493] netlink: 80 bytes leftover after parsing attributes in process `syz.0.377'. [ 115.205536][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 115.276818][ T1507] 9pnet_fd: Insufficient options for proto=fd [ 115.323399][ T1516] ./dev/sda1: Can't open blockdev [ 115.411486][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 115.417225][ T19] usb 5-1: device descriptor read/all, error -71 [ 118.830872][ T1531] netlink: 80 bytes leftover after parsing attributes in process `syz.2.390'. [ 119.128745][ T1544] 9pnet_fd: Insufficient options for proto=fd [ 119.262464][ T1559] netlink: 80 bytes leftover after parsing attributes in process `syz.0.402'. [ 119.392934][ T1567] ./dev/sda1: Can't open blockdev [ 121.432924][ T1581] 9pnet_fd: Insufficient options for proto=fd [ 124.775690][ T1609] ./dev/sda1: Can't open blockdev [ 124.862736][ T28] audit: type=1400 audit(1790309746.867:208): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 124.907440][ T1611] device vlan0 entered promiscuous mode [ 124.936456][ T1611] device eth0 entered promiscuous mode [ 125.722318][ T1625] 9pnet_fd: Insufficient options for proto=fd [ 125.727645][ T1627] netlink: 80 bytes leftover after parsing attributes in process `syz.0.426'. [ 130.100062][ T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.171676][ T1659] 9pnet_fd: Insufficient options for proto=fd [ 130.196714][ T1660] netlink: 80 bytes leftover after parsing attributes in process `syz.1.438'. [ 130.309687][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 130.317160][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.397770][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.482533][ T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.557233][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.872180][ T39] usb 1-1: Product: syz [ 130.879085][ T39] usb 1-1: Manufacturer: syz [ 130.889174][ T39] usb 1-1: SerialNumber: syz [ 131.365760][ T28] audit: type=1400 audit(1790309753.337:209): avc: denied { mount } for pid=1663 comm="syz.3.440" name="/" dev="ramfs" ino=21691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.424208][ T39] usb 1-1: 0:2 : does not exist [ 131.798394][ T39] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 131.820949][ T39] usb 1-1: USB disconnect, device number 7 [ 131.842187][ T1692] 9pnet_fd: Insufficient options for proto=fd [ 132.143862][ T431] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.279680][ T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.380634][ T431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.391577][ T431] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.400692][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.411799][ T431] usb 3-1: config 0 descriptor?? [ 132.565735][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 132.590409][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.601555][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.645380][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.655489][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.665567][ T19] usb 5-1: Product: syz [ 132.670790][ T19] usb 5-1: Manufacturer: syz [ 132.676454][ T19] usb 5-1: SerialNumber: syz [ 133.068659][ T431] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 133.226731][ T431] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input9 [ 133.313039][ T431] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 133.422881][ T1725] 9pnet_fd: Insufficient options for proto=fd [ 133.482294][ T433] usb 3-1: USB disconnect, device number 9 [ 135.561087][ T19] usb 5-1: 0:2 : does not exist [ 135.577347][ T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 135.946492][ T1766] 9pnet_fd: Insufficient options for proto=fd [ 136.519511][ T19] usb 5-1: USB disconnect, device number 10 [ 136.544786][ T28] audit: type=1400 audit(1790309758.547:210): avc: denied { ioctl } for pid=1781 comm="syz.3.483" path="/95/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 137.583357][ T1802] 9pnet_fd: Insufficient options for proto=fd [ 140.476479][ T28] audit: type=1400 audit(1790309762.477:211): avc: denied { create } for pid=1820 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.583589][ T1824] 9pnet_fd: Insufficient options for proto=fd [ 140.587281][ T28] audit: type=1400 audit(1790309762.587:212): avc: denied { mounton } for pid=1820 comm="syz.2.496" path="/90/file0" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.790459][ T1840] 9pnet_fd: Insufficient options for proto=fd [ 142.152459][ T28] audit: type=1400 audit(1790309764.157:213): avc: denied { bind } for pid=1845 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.289666][ T433] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.820760][ T433] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.838960][ T433] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.858920][ T433] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.885819][ T433] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.899773][ T433] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 143.918103][ T433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.965628][ T433] usb 5-1: config 0 descriptor?? [ 144.149494][ T1882] 9pnet_fd: Insufficient options for proto=fd [ 144.593722][ T433] usbhid 5-1:0.0: can't add hid device: -71 [ 144.600025][ T433] usbhid: probe of 5-1:0.0 failed with error -71 [ 144.607577][ T433] usb 5-1: USB disconnect, device number 11 [ 145.726182][ T28] audit: type=1400 audit(1790309767.727:214): avc: denied { setopt } for pid=1908 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.758572][ T28] audit: type=1400 audit(1790309767.727:215): avc: denied { write } for pid=1908 comm="syz.0.529" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.781671][ T28] audit: type=1400 audit(1790309767.757:216): avc: denied { getopt } for pid=1908 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.357264][ T28] audit: type=1400 audit(1790309768.357:217): avc: denied { setopt } for pid=1931 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.519658][ T24] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 146.763854][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 146.780915][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.833876][ T24] usb 5-1: config 0 has no interfaces? [ 146.863725][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 146.876313][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.938193][ T24] usb 5-1: config 0 descriptor?? [ 147.315410][ T818] usb 5-1: USB disconnect, device number 12 [ 148.615981][ T28] audit: type=1400 audit(1790309770.617:218): avc: denied { setopt } for pid=1959 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.642939][ T1966] incfs: Backing dir is not set, filesystem can't be mounted. [ 148.661624][ T1966] incfs: mount failed -2 [ 152.829648][ T818] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 153.021204][ T818] usb 4-1: config 0 has no interfaces? [ 153.030872][ T818] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 153.044998][ T818] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 153.057712][ T818] usb 4-1: Product: syz [ 153.069663][ T818] usb 4-1: Manufacturer: syz [ 153.088643][ T818] usb 4-1: config 0 descriptor?? [ 153.299865][ T818] usb 4-1: USB disconnect, device number 7 [ 153.979890][ T447] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 155.364355][ T447] usb 3-1: config 0 has no interfaces? [ 155.393979][ T447] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 156.031611][ T447] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 156.040528][ T447] usb 3-1: Product: syz [ 156.044800][ T447] usb 3-1: Manufacturer: syz [ 156.053758][ T447] usb 3-1: config 0 descriptor?? [ 156.318663][ T1813] usb 3-1: USB disconnect, device number 10 [ 156.450044][ T447] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 156.640381][ T447] usb 4-1: not running at top speed; connect to a high speed hub [ 156.648233][ T447] usb 4-1: no configurations [ 156.653113][ T447] usb 4-1: can't read configurations, error -22 [ 156.799637][ T447] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 157.387106][ T1813] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.397108][ T447] usb 4-1: not running at top speed; connect to a high speed hub [ 157.456827][ T447] usb 4-1: no configurations [ 157.461778][ T447] usb 4-1: can't read configurations, error -22 [ 157.468145][ T447] usb usb4-port1: attempt power cycle [ 157.617486][ T2093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.593'. [ 157.634524][ T2093] device ip6gretap1 entered promiscuous mode [ 157.679875][ T1813] usb 2-1: device descriptor read/64, error -71 [ 158.087912][ T447] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 158.131336][ T447] usb 4-1: not running at top speed; connect to a high speed hub [ 158.180709][ T447] usb 4-1: no configurations [ 158.218984][ T447] usb 4-1: can't read configurations, error -22 [ 158.467124][ T1813] usb 2-1: device descriptor read/64, error -71 [ 158.659640][ T447] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 158.691764][ T447] usb 4-1: not running at top speed; connect to a high speed hub [ 158.699833][ T447] usb 4-1: no configurations [ 158.704453][ T447] usb 4-1: can't read configurations, error -22 [ 158.733111][ T447] usb usb4-port1: unable to enumerate USB device [ 158.799697][ T1813] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.959770][ T1813] usb 2-1: device descriptor read/64, error -71 [ 159.725954][ T1813] usb 2-1: device descriptor read/64, error -71 [ 159.850074][ T1813] usb usb2-port1: attempt power cycle [ 162.939019][ T19] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 163.003241][ T2151] 9pnet_fd: Insufficient options for proto=fd [ 164.959379][ T28] audit: type=1400 audit(1790309785.977:219): avc: denied { mount } for pid=2148 comm="syz.0.613" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 165.013608][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 165.026625][ T19] usb 3-1: device descriptor read/all, error -71 [ 165.050338][ T28] audit: type=1400 audit(1790309787.057:220): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 169.727887][ T2191] 9pnet_fd: Insufficient options for proto=fd [ 170.824557][ T2137] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.059661][ T2137] usb 5-1: Using ep0 maxpacket: 16 [ 171.066806][ T2137] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.595641][ T2228] 9pnet_fd: Insufficient options for proto=fd [ 173.623637][ T2137] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 173.651535][ T28] audit: type=1400 audit(1790309795.657:221): avc: denied { setopt } for pid=2230 comm="syz.4.640" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.672514][ T2231] xt_hashlimit: size too large, truncated to 1048576 [ 173.698088][ T2137] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.712197][ T2137] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 173.723965][ T2137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.747413][ T2137] usb 5-1: config 0 descriptor?? [ 173.828815][ T2137] usb 5-1: can't set config #0, error -71 [ 173.841756][ T2137] usb 5-1: USB disconnect, device number 13 [ 175.984971][ T2269] 9pnet_fd: Insufficient options for proto=fd [ 177.048892][ T28] audit: type=1326 audit(1790309799.047:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2285 comm="syz.0.661" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 179.505809][ T2328] 9pnet_fd: Insufficient options for proto=fd [ 181.716670][ T28] audit: type=1400 audit(1790309803.717:223): avc: denied { connect } for pid=2344 comm="syz.1.676" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.326119][ T2367] 9pnet_fd: Insufficient options for proto=fd [ 182.469688][ T28] audit: type=1400 audit(1790309804.477:224): avc: denied { read } for pid=2352 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.690188][ T28] audit: type=1326 audit(1790309805.687:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.1.686" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965699e159 code=0x7fc00000 [ 183.718590][ T28] audit: type=1326 audit(1790309805.687:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.1.686" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f965699e159 code=0x7fc00000 [ 183.745826][ T28] audit: type=1326 audit(1790309805.687:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.1.686" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965699e159 code=0x7fc00000 [ 183.775801][ T28] audit: type=1326 audit(1790309805.687:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.1.686" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965699e159 code=0x7fc00000 [ 183.796479][ T2398] 9pnet_fd: Insufficient options for proto=fd [ 183.812110][ T28] audit: type=1326 audit(1790309805.687:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.1.686" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965699e159 code=0x7fc00000 [ 183.840238][ T28] audit: type=1326 audit(1790309805.687:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.1.686" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965699e159 code=0x7fc00000 [ 183.866215][ T28] audit: type=1326 audit(1790309805.697:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.1.686" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965699e159 code=0x7fc00000 [ 183.892640][ T28] audit: type=1326 audit(1790309805.697:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2374 comm="syz.1.686" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965699e159 code=0x7fc00000 [ 185.213290][ T2431] 9pnet_fd: Insufficient options for proto=fd [ 185.219623][ T433] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 186.320742][ T433] usb 3-1: config 0 has no interfaces? [ 186.327324][ T433] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.366561][ T433] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 186.381204][ T433] usb 3-1: Product: syz [ 186.389834][ T433] usb 3-1: Manufacturer: syz [ 186.398424][ T433] usb 3-1: config 0 descriptor?? [ 188.807140][ T19] usb 3-1: USB disconnect, device number 13 [ 191.066786][ T447] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 191.089688][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 191.089710][ T28] audit: type=1326 audit(1790309813.087:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.156219][ T28] audit: type=1326 audit(1790309813.087:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.186096][ T28] audit: type=1326 audit(1790309813.087:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.211952][ T28] audit: type=1326 audit(1790309813.087:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.238788][ T28] audit: type=1326 audit(1790309813.087:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.266141][ T28] audit: type=1326 audit(1790309813.087:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.290852][ T28] audit: type=1326 audit(1790309813.087:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.315617][ T28] audit: type=1326 audit(1790309813.087:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.340796][ T28] audit: type=1326 audit(1790309813.087:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.365575][ T28] audit: type=1326 audit(1790309813.087:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.3.723" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc693d9e159 code=0x7fc00000 [ 191.390307][ T447] usb 2-1: not running at top speed; connect to a high speed hub [ 191.398472][ T447] usb 2-1: no configurations [ 191.403257][ T447] usb 2-1: can't read configurations, error -22 [ 191.419619][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 191.559722][ T447] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 191.599645][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 191.606512][ T60] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.637419][ T60] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 191.715906][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.722788][ T60] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 191.732130][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.742323][ T60] usb 5-1: config 0 descriptor?? [ 191.748140][ T60] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 191.760333][ T447] usb 2-1: not running at top speed; connect to a high speed hub [ 191.768182][ T447] usb 2-1: no configurations [ 191.772839][ T447] usb 2-1: can't read configurations, error -22 [ 191.779235][ T447] usb usb2-port1: attempt power cycle [ 195.066569][ T60] usb 5-1: USB disconnect, device number 14 [ 199.631969][ T2627] xt_hashlimit: size too large, truncated to 1048576 [ 212.529602][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.729589][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 212.735759][ T19] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.769667][ T19] usb 1-1: config 0 has no interface number 0 [ 212.775792][ T19] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.809581][ T19] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.819332][ T19] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 212.869581][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.896164][ T19] usb 1-1: config 0 descriptor?? [ 213.697425][ T19] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 213.706292][ T19] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 213.714569][ T19] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 213.721571][ T19] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 213.729067][ T19] uclogic: probe of 0003:28BD:0071.0007 failed with error -71 [ 213.743293][ T19] usb 1-1: USB disconnect, device number 8 [ 218.099727][ T2791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 218.162395][ T1813] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 220.698234][ T2819] netlink: 44 bytes leftover after parsing attributes in process `syz.3.832'. [ 220.730902][ T2819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 225.126512][ T2855] capability: warning: `syz.4.843' uses 32-bit capabilities (legacy support in use) [ 229.193653][ T2899] netlink: 44 bytes leftover after parsing attributes in process `syz.3.856'. [ 229.203886][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 233.359589][ T447] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 233.580280][ T447] usb 5-1: not running at top speed; connect to a high speed hub [ 233.589068][ T447] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.599216][ T447] usb 5-1: config 0 has no interfaces? [ 233.604698][ T447] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 233.613810][ T447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.636236][ T447] usb 5-1: config 0 descriptor?? [ 233.850875][ T447] usb 5-1: USB disconnect, device number 15 [ 234.809589][ T433] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 235.009594][ T433] usb 5-1: Using ep0 maxpacket: 16 [ 235.020418][ T433] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.038534][ T433] usb 5-1: config 0 has no interface number 0 [ 235.044809][ T433] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.065790][ T433] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.085963][ T433] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 235.106132][ T433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.127360][ T433] usb 5-1: config 0 descriptor?? [ 235.279599][ T571] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.640182][ T433] usbhid 5-1:0.1: can't add hid device: -71 [ 235.646164][ T433] usbhid: probe of 5-1:0.1 failed with error -71 [ 235.653403][ T433] usb 5-1: USB disconnect, device number 16 [ 235.669583][ T571] usb 3-1: Using ep0 maxpacket: 16 [ 235.678470][ T571] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.688808][ T571] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.710382][ T571] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.729646][ T571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.737668][ T571] usb 3-1: Product: syz [ 235.742122][ T571] usb 3-1: Manufacturer: syz [ 235.746742][ T571] usb 3-1: SerialNumber: syz [ 236.090584][ T571] usb 3-1: 0:2 : does not exist [ 236.348417][ T571] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 236.370821][ T571] usb 3-1: USB disconnect, device number 14 [ 236.835823][ T3001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.885'. [ 236.845008][ T3001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.885'. [ 237.416354][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 237.416369][ T28] audit: type=1400 audit(1790309859.417:305): avc: denied { sys_module } for pid=3009 comm="syz.0.888" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 237.465970][ T28] audit: type=1400 audit(1790309859.447:306): avc: denied { module_load } for pid=3009 comm="syz.0.888" path="/sys/kernel/btf/vmlinux" dev="sysfs" ino=4901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 237.478923][ T3010] Invalid ELF header magic: != ELF [ 237.659622][ T1392] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 237.886098][ T1392] usb 5-1: Using ep0 maxpacket: 16 [ 238.066956][ T1392] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.075320][ T1392] usb 5-1: config 0 has no interface number 0 [ 238.081691][ T1392] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.092907][ T1392] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.097002][ T447] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 238.103053][ T1392] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 238.119242][ T1392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.128277][ T1392] usb 5-1: config 0 descriptor?? [ 238.289580][ T447] usb 1-1: Using ep0 maxpacket: 16 [ 238.295929][ T447] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.303981][ T447] usb 1-1: config 0 has no interface number 0 [ 238.310133][ T447] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.321037][ T447] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.330810][ T447] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 238.339900][ T447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.348587][ T447] usb 1-1: config 0 descriptor?? [ 238.536382][ T1392] usbhid 5-1:0.1: can't add hid device: -71 [ 238.542417][ T1392] usbhid: probe of 5-1:0.1 failed with error -71 [ 238.550426][ T1392] usb 5-1: USB disconnect, device number 17 [ 238.632456][ T3043] 9pnet_fd: Insufficient options for proto=fd [ 238.760095][ T447] usbhid 1-1:0.1: can't add hid device: -71 [ 238.766073][ T447] usbhid: probe of 1-1:0.1 failed with error -71 [ 238.780909][ T447] usb 1-1: USB disconnect, device number 9 [ 240.055463][ T3071] 9pnet_fd: Insufficient options for proto=fd [ 242.093870][ T28] audit: type=1326 audit(1790309864.097:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.399808][ T28] audit: type=1326 audit(1790309864.117:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.491786][ T28] audit: type=1326 audit(1790309864.117:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.516540][ T28] audit: type=1326 audit(1790309864.127:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.553502][ T28] audit: type=1326 audit(1790309864.127:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.605923][ T28] audit: type=1326 audit(1790309864.127:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.649107][ T28] audit: type=1326 audit(1790309864.127:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.674169][ T28] audit: type=1326 audit(1790309864.127:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.700692][ T28] audit: type=1326 audit(1790309864.127:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.725659][ T28] audit: type=1326 audit(1790309864.127:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.778220][ T28] audit: type=1326 audit(1790309864.127:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 242.809577][ T476] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 242.819598][ T28] audit: type=1326 audit(1790309864.127:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.0.919" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 243.029609][ T476] usb 2-1: Using ep0 maxpacket: 32 [ 243.158049][ T476] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 243.322722][ T476] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.306799][ T476] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.319849][ T476] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 244.347543][ T476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.538504][ T476] usb 2-1: config 0 descriptor?? [ 245.005857][ T309] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 247.061517][ T476] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 247.741685][ T476] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 247.750237][ T476] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 248.155303][ T476] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 248.173891][ T476] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 248.190081][ T476] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 248.203546][ T476] lenovo 0003:17EF:6047.0008: unbalanced collection at end of report description [ 248.766551][ T476] lenovo 0003:17EF:6047.0008: hid_parse failed [ 249.590228][ T476] lenovo: probe of 0003:17EF:6047.0008 failed with error -22 [ 249.638692][ T476] usb 2-1: USB disconnect, device number 9 [ 252.359597][ T433] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 253.919999][ T433] usb 3-1: Using ep0 maxpacket: 16 [ 253.929344][ T433] usb 3-1: device descriptor read/all, error -71 [ 259.530236][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 259.530258][ T28] audit: type=1326 audit(1790309881.537:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3269 comm="syz.0.971" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d1d9e159 code=0x7fc00000 [ 264.019572][ T447] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 264.069588][ T476] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 264.209581][ T447] usb 2-1: Using ep0 maxpacket: 16 [ 264.215818][ T447] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.232238][ T447] usb 2-1: config 0 has no interface number 0 [ 264.238527][ T447] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.287778][ T476] usb 5-1: Using ep0 maxpacket: 32 [ 264.303911][ T447] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.313739][ T447] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 264.323035][ T447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.332069][ T476] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.347201][ T447] usb 2-1: config 0 descriptor?? [ 264.352206][ T476] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.362714][ T476] usb 5-1: config 0 has no interface number 0 [ 264.375794][ T476] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.388949][ T476] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 264.398322][ T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.426779][ T476] usb 5-1: config 0 descriptor?? [ 264.653969][ T476] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 264.854373][ T447] usbhid 2-1:0.1: can't add hid device: -71 [ 264.870480][ T447] usbhid: probe of 2-1:0.1 failed with error -71 [ 264.917912][ T447] usb 2-1: USB disconnect, device number 10 [ 264.938378][ T3254] usb 5-1: USB disconnect, device number 18 [ 267.809604][ T39] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 267.991152][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 268.001000][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.012105][ T39] usb 5-1: config 0 has no interfaces? [ 268.017717][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 268.028275][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.042698][ T39] usb 5-1: config 0 descriptor?? [ 268.251119][ T39] usb 5-1: USB disconnect, device number 19 [ 273.039309][ T3407] syz.2.1012 (3407) used greatest stack depth: 19912 bytes left [ 274.421282][ T3438] 9pnet_fd: Insufficient options for proto=fd [ 276.809638][ T39] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 277.059637][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 277.066734][ T39] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 277.175372][ T39] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.320330][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.408326][ T39] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 277.593767][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.626125][ T39] usb 2-1: config 0 descriptor?? [ 277.644685][ T39] usb 2-1: can't set config #0, error -71 [ 277.667056][ T39] usb 2-1: USB disconnect, device number 11 [ 277.800621][ T3473] 9pnet_fd: Insufficient options for proto=fd [ 281.689562][ T60] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 282.480466][ T60] usb 3-1: config 0 has no interfaces? [ 282.487041][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.497463][ T60] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 282.510832][ T60] usb 3-1: Product: syz [ 282.520165][ T60] usb 3-1: Manufacturer: syz [ 282.536202][ T60] usb 3-1: config 0 descriptor?? [ 282.562559][ T3536] device syzkaller0 entered promiscuous mode [ 282.746575][ T3254] usb 3-1: USB disconnect, device number 17 [ 284.016035][ T3563] tmpfs: Unknown parameter '00000000000000000000' [ 284.370236][ T3569] tmpfs: Bad value for 'nr_blocks' [ 286.599616][ T3254] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 287.586858][ T28] audit: type=1400 audit(1790309909.587:369): avc: denied { read } for pid=3597 comm="syz.3.1074" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 287.630636][ T28] audit: type=1400 audit(1790309909.617:370): avc: denied { open } for pid=3597 comm="syz.3.1074" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 289.949646][ T60] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 290.249616][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 290.321283][ T60] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 290.373062][ T60] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.429565][ T60] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.457030][ T60] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 290.549608][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.571282][ T60] usb 2-1: config 0 descriptor?? [ 291.604242][ T3660] tmpfs: Unknown parameter '00000000000000000000' [ 291.733167][ T60] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 291.740584][ T60] lenovo 0003:17EF:6047.0009: unbalanced collection at end of report description [ 291.749883][ T60] lenovo 0003:17EF:6047.0009: hid_parse failed [ 291.756085][ T60] lenovo: probe of 0003:17EF:6047.0009 failed with error -22 [ 292.191989][ T60] usb 2-1: USB disconnect, device number 12 [ 295.660808][ T447] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 295.769571][ T39] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 295.935337][ T39] usb 5-1: device descriptor read/64, error -71 [ 296.021169][ T447] usb 4-1: config 0 has no interfaces? [ 296.028740][ T447] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 296.039284][ T447] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 296.048609][ T447] usb 4-1: Product: syz [ 296.053382][ T447] usb 4-1: Manufacturer: syz [ 296.108848][ T447] usb 4-1: config 0 descriptor?? [ 296.679572][ T39] usb 5-1: device descriptor read/64, error -71 [ 296.832097][ T447] usb 4-1: USB disconnect, device number 13 [ 297.869670][ T39] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 299.370055][ T28] audit: type=1400 audit(1790309921.377:371): avc: denied { relabelfrom } for pid=3731 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 299.443835][ T28] audit: type=1400 audit(1790309921.417:372): avc: denied { relabelto } for pid=3731 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 299.509592][ T39] usb 5-1: device descriptor read/64, error -71 [ 299.779797][ T39] usb 5-1: device descriptor read/64, error -71 [ 299.899630][ T39] usb usb5-port1: attempt power cycle [ 300.309573][ T39] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 300.364300][ T39] usb 5-1: device descriptor read/8, error -71 [ 300.381112][ T3750] tmpfs: Unknown parameter '00000000000000000000' [ 300.540069][ T39] usb 5-1: device descriptor read/8, error -71 [ 300.597054][ T3734] syz.1.1116 (3734) used greatest stack depth: 19560 bytes left [ 300.609649][ T309] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 300.859570][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 300.870638][ T309] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 300.882356][ T309] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.896477][ T309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 300.903292][ T309] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 300.912512][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.937120][ T309] usb 3-1: config 0 descriptor?? [ 301.059593][ T3763] 9pnet_fd: Insufficient options for proto=fd [ 301.356160][ T309] lenovo 0003:17EF:6047.000A: unknown main item tag 0x0 [ 301.363643][ T309] lenovo 0003:17EF:6047.000A: unbalanced collection at end of report description [ 301.376421][ T309] lenovo 0003:17EF:6047.000A: hid_parse failed [ 301.383355][ T309] lenovo: probe of 0003:17EF:6047.000A failed with error -22 [ 301.794315][ T3254] usb 3-1: USB disconnect, device number 19 [ 302.836479][ T3797] 9pnet_fd: Insufficient options for proto=fd [ 303.352816][ T3806] FAULT_INJECTION: forcing a failure. [ 303.352816][ T3806] name failslab, interval 1, probability 0, space 0, times 1 [ 303.373891][ T3806] CPU: 1 PID: 3806 Comm: syz.0.1139 Not tainted syzkaller #0 [ 303.381387][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.391469][ T3806] Call Trace: [ 303.394760][ T3806] [ 303.397693][ T3806] __dump_stack+0x21/0x24 [ 303.402065][ T3806] dump_stack_lvl+0x110/0x170 [ 303.406753][ T3806] ? __cfi_dump_stack_lvl+0x8/0x8 [ 303.411826][ T3806] dump_stack+0x15/0x24 [ 303.416004][ T3806] should_fail_ex+0x3bf/0x510 [ 303.420710][ T3806] __should_failslab+0xac/0xf0 [ 303.425492][ T3806] should_failslab+0x9/0x20 [ 303.430007][ T3806] __kmem_cache_alloc_node+0x3d/0x2d0 [ 303.435389][ T3806] ? get_mountpoint+0x20b/0x440 [ 303.440261][ T3806] ? get_mountpoint+0x20b/0x440 [ 303.445118][ T3806] kmalloc_trace+0x29/0xb0 [ 303.449533][ T3806] get_mountpoint+0x20b/0x440 [ 303.454219][ T3806] lock_mount+0xbc/0x2b0 [ 303.458466][ T3806] do_new_mount+0x37d/0xb40 [ 303.462978][ T3806] ? security_capable+0x99/0xc0 [ 303.467836][ T3806] path_mount+0x640/0xfd0 [ 303.472177][ T3806] __se_sys_mount+0x320/0x390 [ 303.476857][ T3806] ? __this_cpu_preempt_check+0x13/0x20 [ 303.482409][ T3806] ? __x64_sys_mount+0xd0/0xd0 [ 303.487179][ T3806] ? __kasan_check_write+0x14/0x20 [ 303.492294][ T3806] ? fpregs_restore_userregs+0x128/0x260 [ 303.497932][ T3806] __x64_sys_mount+0xbf/0xd0 [ 303.502524][ T3806] x64_sys_call+0x65d/0x9a0 [ 303.507032][ T3806] do_syscall_64+0x4c/0xa0 [ 303.511453][ T3806] ? clear_bhb_loop+0x30/0x80 [ 303.516133][ T3806] ? clear_bhb_loop+0x30/0x80 [ 303.520811][ T3806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.526720][ T3806] RIP: 0033:0x7f42d1d9e159 [ 303.531143][ T3806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.550758][ T3806] RSP: 002b:00007f42d2c19028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.559175][ T3806] RAX: ffffffffffffffda RBX: 00007f42d2025fa0 RCX: 00007f42d1d9e159 [ 303.567148][ T3806] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 303.575120][ T3806] RBP: 00007f42d1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 303.583089][ T3806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.591059][ T3806] R13: 00007f42d2026038 R14: 00007f42d2025fa0 R15: 00007fff6c5c07a8 [ 303.599037][ T3806] [ 303.657158][ T28] audit: type=1400 audit(1790309925.657:373): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 307.393878][ T3846] device syzkaller0 entered promiscuous mode [ 307.819545][ T431] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 307.989593][ T431] usb 4-1: device descriptor read/64, error -71 [ 308.467294][ T431] usb 4-1: device descriptor read/64, error -71 [ 308.765676][ T431] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 308.969577][ T431] usb 4-1: device descriptor read/64, error -71 [ 309.452707][ T3897] tmpfs: Unknown parameter '00000000000000000000' [ 309.549617][ T431] usb 4-1: device descriptor read/64, error -71 [ 309.556242][ T1813] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 309.669622][ T431] usb usb4-port1: attempt power cycle [ 309.760270][ T1813] usb 5-1: not running at top speed; connect to a high speed hub [ 309.769140][ T1813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.780300][ T1813] usb 5-1: config 0 has no interfaces? [ 309.785847][ T1813] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 309.795868][ T1813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.807353][ T1813] usb 5-1: config 0 descriptor?? [ 310.023954][ T1813] usb 5-1: USB disconnect, device number 24 [ 310.099601][ T431] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 310.141013][ T431] usb 4-1: device descriptor read/8, error -71 [ 310.301384][ T431] usb 4-1: device descriptor read/8, error -71 [ 310.349595][ T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 310.549551][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 310.560045][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.579558][ T431] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 310.587594][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.599438][ T3931] tmpfs: Unknown parameter '00000000000000000000' [ 310.607112][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.616437][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.624644][ T39] usb 2-1: Product: syz [ 310.629069][ T39] usb 2-1: Manufacturer: syz [ 310.635143][ T39] usb 2-1: SerialNumber: syz [ 310.973436][ T1813] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 311.006094][ T39] usb 2-1: 0:2 : does not exist [ 311.131013][ T39] usb 2-1: USB disconnect, device number 13 [ 311.199563][ T431] usb 4-1: device not accepting address 17, error -71 [ 311.207701][ T431] usb usb4-port1: unable to enumerate USB device [ 311.349599][ T1813] usb 5-1: Using ep0 maxpacket: 16 [ 311.437545][ T1813] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 311.466182][ T1813] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 311.492599][ T3777] udevd[3777]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 311.516375][ T1813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.609912][ T1813] usb 5-1: config 0 descriptor?? [ 311.617031][ T1813] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 311.737901][ T3936] syz.0.1186 (3936) used greatest stack depth: 18504 bytes left [ 312.039589][ T3254] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 312.220276][ T3254] usb 1-1: not running at top speed; connect to a high speed hub [ 312.228854][ T3254] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.239016][ T3254] usb 1-1: config 0 has no interfaces? [ 312.244524][ T3254] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 312.253672][ T3254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.262599][ T3254] usb 1-1: config 0 descriptor?? [ 312.409554][ T19] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 312.470251][ T1813] usb 1-1: USB disconnect, device number 11 [ 312.559684][ T19] usb 3-1: device descriptor read/64, error -71 [ 312.969552][ T19] usb 3-1: device descriptor read/64, error -71 [ 313.239555][ T19] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 313.399564][ T19] usb 3-1: device descriptor read/64, error -71 [ 313.904591][ T39] usb 5-1: USB disconnect, device number 25 [ 317.468484][ T4038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1217'. [ 317.829634][ T1813] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 318.211391][ T1813] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 318.220674][ T1813] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 318.228940][ T1813] usb 4-1: Product: syz [ 318.244738][ T1813] usb 4-1: config 0 descriptor?? [ 318.288229][ T1813] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 318.311018][ T1813] usb 4-1: Detected FT232H [ 318.454375][ T1813] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 318.948614][ T1813] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 319.057068][ T1813] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 320.553164][ T1813] usb 4-1: USB disconnect, device number 18 [ 320.567188][ T1813] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 321.720317][ T1813] ftdi_sio 4-1:0.0: device disconnected [ 328.433326][ T4213] device syzkaller0 entered promiscuous mode [ 332.872096][ T4269] tmpfs: Unknown parameter 'nr_blocks00000000000000000000' [ 332.892556][ T4266] device syzkaller0 entered promiscuous mode [ 339.453528][ T4339] tmpfs: Unknown parameter 'nr_blocks00000000000000000000' [ 340.561031][ T4361] overlayfs: failed to resolve './bus': -2 [ 343.406664][ T28] audit: type=1400 audit(1790309965.407:374): avc: denied { create } for pid=4385 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 343.437977][ T28] audit: type=1400 audit(1790309965.437:375): avc: denied { bind } for pid=4385 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 343.488112][ T28] audit: type=1400 audit(1790309965.467:376): avc: denied { connect } for pid=4385 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 343.578238][ T28] audit: type=1400 audit(1790309965.527:377): avc: denied { connect } for pid=4376 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 343.708128][ T28] audit: type=1400 audit(1790309965.707:378): avc: denied { connect } for pid=4385 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.760393][ T60] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 351.440833][ T4439] pimreg: tun_chr_ioctl cmd 1074025677 [ 351.446366][ T4439] pimreg: linktype set to 512 [ 351.652622][ T291] ------------[ cut here ]------------ [ 351.658140][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 351.666138][ T291] Modules linked in: [ 351.670075][ T291] CPU: 1 PID: 291 Comm: syz-executor Not tainted syzkaller #0 [ 351.677537][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.687637][ T291] RIP: 0010:drop_nlink+0xc5/0x110 [ 351.692761][ T291] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1b 1c ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 351.712438][ T291] RSP: 0018:ffffc9000db4fc60 EFLAGS: 00010293 [ 351.718518][ T291] RAX: ffffffff81c64e05 RBX: ffff888116026650 RCX: ffff88811f812880 [ 351.726579][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.734632][ T291] RBP: ffffc9000db4fc88 R08: 0000000000000003 R09: 0000000000000004 [ 351.742678][ T291] R10: dffffc0000000000 R11: fffff52001b69f7c R12: dffffc0000000000 [ 351.750851][ T291] R13: 1ffff11022c04cd3 R14: ffff888116026698 R15: 0000000000000000 [ 351.759002][ T291] FS: 00005555808b1500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 351.768042][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.774698][ T291] CR2: 00005555808d4948 CR3: 0000000130af6000 CR4: 00000000003506a0 [ 351.782760][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.790789][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.798789][ T291] Call Trace: [ 351.802191][ T291] [ 351.805147][ T291] shmem_rmdir+0x5b/0x90 [ 351.809405][ T291] vfs_rmdir+0x381/0x4f0 [ 351.813707][ T291] incfs_kill_sb+0xfe/0x210 [ 351.818222][ T291] deactivate_locked_super+0xb5/0x120 [ 351.823657][ T291] deactivate_super+0xaf/0xe0 [ 351.828351][ T291] cleanup_mnt+0x45e/0x4e0 [ 351.832816][ T291] __cleanup_mnt+0x19/0x20 [ 351.837238][ T291] task_work_run+0x1e1/0x250 [ 351.841872][ T291] ? __cfi_task_work_run+0x10/0x10 [ 351.846999][ T291] ? __x64_sys_umount+0x12d/0x170 [ 351.852089][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 351.857470][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 351.862722][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 351.868188][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 351.873696][ T291] do_syscall_64+0x58/0xa0 [ 351.878187][ T291] ? clear_bhb_loop+0x30/0x80 [ 351.882922][ T291] ? clear_bhb_loop+0x30/0x80 [ 351.887605][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.893538][ T291] RIP: 0033:0x7f207b19f397 [ 351.898066][ T291] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 351.917869][ T291] RSP: 002b:00007ffff41d09e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 351.926400][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f207b19f397 [ 351.934395][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff41d0aa0 [ 351.942467][ T291] RBP: 00007ffff41d0aa0 R08: 00007ffff41d1aa0 R09: 00000000ffffffff [ 351.950460][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff41d1b30 [ 351.958445][ T291] R13: 00007f207b2344bb R14: 0000000000055cee R15: 00007ffff41d1b70 [ 351.966466][ T291] [ 351.969508][ T291] ---[ end trace 0000000000000000 ]--- [ 351.982495][ T291] ================================================================== [ 351.990588][ T291] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 351.996834][ T291] Write of size 4 at addr 0000000000000170 by task syz-executor/291 [ 352.004809][ T291] [ 352.007132][ T291] CPU: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 [ 352.016145][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.026197][ T291] Call Trace: [ 352.029475][ T291] [ 352.032400][ T291] __dump_stack+0x21/0x24 [ 352.036733][ T291] dump_stack_lvl+0x110/0x170 [ 352.041407][ T291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 352.046431][ T291] ? __cfi_call_rcu+0x10/0x10 [ 352.051106][ T291] ? ihold+0x20/0x60 [ 352.055000][ T291] ? ihold+0x20/0x60 [ 352.058888][ T291] print_report+0x3d/0x60 [ 352.063216][ T291] kasan_report+0x122/0x150 [ 352.067716][ T291] ? ihold+0x20/0x60 [ 352.071609][ T291] kasan_check_range+0x249/0x2a0 [ 352.076553][ T291] __kasan_check_write+0x14/0x20 [ 352.081486][ T291] ihold+0x20/0x60 [ 352.085201][ T291] vfs_rmdir+0x24c/0x4f0 [ 352.089440][ T291] incfs_kill_sb+0xfe/0x210 [ 352.093942][ T291] deactivate_locked_super+0xb5/0x120 [ 352.099323][ T291] deactivate_super+0xaf/0xe0 [ 352.104009][ T291] cleanup_mnt+0x45e/0x4e0 [ 352.108430][ T291] __cleanup_mnt+0x19/0x20 [ 352.112843][ T291] task_work_run+0x1e1/0x250 [ 352.117433][ T291] ? __cfi_task_work_run+0x10/0x10 [ 352.122545][ T291] ? __x64_sys_umount+0x12d/0x170 [ 352.127570][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 352.132951][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 352.138159][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 352.143623][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 352.149093][ T291] do_syscall_64+0x58/0xa0 [ 352.153520][ T291] ? clear_bhb_loop+0x30/0x80 [ 352.158199][ T291] ? clear_bhb_loop+0x30/0x80 [ 352.162885][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.168789][ T291] RIP: 0033:0x7f207b19f397 [ 352.173218][ T291] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 352.192826][ T291] RSP: 002b:00007ffff41d09e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 352.201247][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f207b19f397 [ 352.209229][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff41d0aa0 [ 352.217207][ T291] RBP: 00007ffff41d0aa0 R08: 00007ffff41d1aa0 R09: 00000000ffffffff [ 352.225182][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff41d1b30 [ 352.233138][ T291] R13: 00007f207b2344bb R14: 0000000000055cee R15: 00007ffff41d1b70 [ 352.241093][ T291] [ 352.244093][ T291] ================================================================== [ 352.254082][ T291] Disabling lock debugging due to kernel taint [ 352.260396][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 352.268188][ T291] #PF: supervisor write access in kernel mode [ 352.274227][ T291] #PF: error_code(0x0002) - not-present page [ 352.280198][ T291] PGD 132f50067 P4D 132f50067 PUD 0 [ 352.285470][ T291] Oops: 0002 [#1] PREEMPT SMP KASAN [ 352.290648][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 [ 352.299558][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.309594][ T291] RIP: 0010:ihold+0x26/0x60 [ 352.314089][ T291] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 81 13 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 71 [ 352.333692][ T291] RSP: 0018:ffffc9000db4fca0 EFLAGS: 00010246 [ 352.339750][ T291] RAX: ffff88811f812800 RBX: 0000000000000000 RCX: ffff88811f812880 [ 352.347704][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.355657][ T291] RBP: ffffc9000db4fcb0 R08: ffffffff87b767e7 R09: 1ffffffff0f6ecfc [ 352.363612][ T291] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: ffff88811602665c [ 352.371566][ T291] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 352.379518][ T291] FS: 00005555808b1500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 352.388446][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.395029][ T291] CR2: 0000000000000170 CR3: 0000000130af6000 CR4: 00000000003506a0 [ 352.403001][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.410970][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.418936][ T291] Call Trace: [ 352.422203][ T291] [ 352.425121][ T291] vfs_rmdir+0x24c/0x4f0 [ 352.429370][ T291] incfs_kill_sb+0xfe/0x210 [ 352.433862][ T291] deactivate_locked_super+0xb5/0x120 [ 352.439225][ T291] deactivate_super+0xaf/0xe0 [ 352.443890][ T291] cleanup_mnt+0x45e/0x4e0 [ 352.448289][ T291] __cleanup_mnt+0x19/0x20 [ 352.452687][ T291] task_work_run+0x1e1/0x250 [ 352.457263][ T291] ? __cfi_task_work_run+0x10/0x10 [ 352.462377][ T291] ? __x64_sys_umount+0x12d/0x170 [ 352.467389][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 352.472744][ T291] exit_to_user_mode_loop+0x9b/0xb0 [ 352.477924][ T291] exit_to_user_mode_prepare+0x87/0xd0 [ 352.483365][ T291] syscall_exit_to_user_mode+0x1a/0x30 [ 352.488806][ T291] do_syscall_64+0x58/0xa0 [ 352.493208][ T291] ? clear_bhb_loop+0x30/0x80 [ 352.497870][ T291] ? clear_bhb_loop+0x30/0x80 [ 352.502528][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.508402][ T291] RIP: 0033:0x7f207b19f397 [ 352.512820][ T291] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 352.532410][ T291] RSP: 002b:00007ffff41d09e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 352.540806][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f207b19f397 [ 352.548759][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff41d0aa0 [ 352.556712][ T291] RBP: 00007ffff41d0aa0 R08: 00007ffff41d1aa0 R09: 00000000ffffffff [ 352.564668][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff41d1b30 [ 352.572620][ T291] R13: 00007f207b2344bb R14: 0000000000055cee R15: 00007ffff41d1b70 [ 352.580578][ T291] [ 352.583578][ T291] Modules linked in: [ 352.587469][ T291] CR2: 0000000000000170 [ 352.591602][ T291] ---[ end trace 0000000000000000 ]--- [ 352.597074][ T291] RIP: 0010:ihold+0x26/0x60 [ 352.601568][ T291] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 81 13 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 71 [ 352.621152][ T291] RSP: 0018:ffffc9000db4fca0 EFLAGS: 00010246 [ 352.627201][ T291] RAX: ffff88811f812800 RBX: 0000000000000000 RCX: ffff88811f812880 [ 352.635153][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.643104][ T291] RBP: ffffc9000db4fcb0 R08: ffffffff87b767e7 R09: 1ffffffff0f6ecfc [ 352.651066][ T291] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: ffff88811602665c [ 352.659020][ T291] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 352.666975][ T291] FS: 00005555808b1500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 352.675888][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.682454][ T291] CR2: 0000000000000170 CR3: 0000000130af6000 CR4: 00000000003506a0 [ 352.690409][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.698448][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.706402][ T291] Kernel panic - not syncing: Fatal exception [ 352.712557][ T291] Kernel Offset: disabled [ 352.716859][ T291] Rebooting in 86400 seconds..