last executing test programs: 2.200133966s ago: executing program 2 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:hn', 0xc) 2.188750948s ago: executing program 2 (id=922): r0 = inotify_init1(0x80000) r1 = io_uring_setup(0x198, &(0x7f0000000540)={0x0, 0x2c30, 0x40, 0x4213, 0x136}) close_range(r1, 0xffffffffffffffff, 0x0) read$eventfd(r0, 0x0, 0x0) 1.851523542s ago: executing program 4 (id=937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000540)={0x7fffffffffffffff, 0xe, 0x7, 0xe, 0x1}) 1.77725724s ago: executing program 4 (id=939): ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)={0x2, 0x2, 0x5, 0x9, 0x10, 0x7}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01e723000000ffdbdf251500000024001d81"], 0x38}}, 0x0) 1.77709384s ago: executing program 4 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000f40)='./proc\x00', &(0x7f0000000f80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r0, &(0x7f0000001000)='2', 0x1) 1.777014089s ago: executing program 4 (id=941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.776807649s ago: executing program 4 (id=943): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011"], 0x74}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) 1.703774227s ago: executing program 4 (id=955): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000280)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) 1.267271821s ago: executing program 0 (id=969): r0 = memfd_create(&(0x7f0000000140)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) fcntl$addseals(r0, 0x409, 0xc) 1.267058651s ago: executing program 2 (id=960): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0xeaff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000009c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000a40)={r1, 0x1, r0, 0x3, 0x80000}) 990.621819ms ago: executing program 0 (id=963): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 942.065674ms ago: executing program 0 (id=964): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8c) openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x2200, 0x1b4) 876.190061ms ago: executing program 3 (id=966): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x40) fstat(r0, &(0x7f00000003c0)) 876.044671ms ago: executing program 0 (id=967): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x4, 0x3, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x2b}, 0x2, @in=@multicast2, 0x0, 0x3, 0x3, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000400), 0x2e9, 0x0) 777.107841ms ago: executing program 0 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000104, 0x0, 0x7}]}) 683.70653ms ago: executing program 0 (id=970): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x65d5, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 568.242072ms ago: executing program 3 (id=971): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_hsr\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000480)={0x1, 0x0, 0x1, r1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000004c0)=0x5, 0x4) 559.337393ms ago: executing program 1 (id=972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x10000, 0x7fffffff}) 504.017329ms ago: executing program 1 (id=973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d07, 0x0, 0x8001}]}) 424.238277ms ago: executing program 3 (id=974): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x80) 423.805367ms ago: executing program 1 (id=984): unshare(0x64000600) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x2, 0x0, 0xfffff9e2}, 0x10) write(r0, &(0x7f0000000100)="1800000016005f0214fffffffffffff80700000002000000", 0x18) 372.919472ms ago: executing program 3 (id=975): r0 = memfd_create(&(0x7f0000000140)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) fcntl$addseals(r0, 0x409, 0xc) 339.347955ms ago: executing program 1 (id=976): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000004c0)="$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") mount$9p_fd(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000001080)=@loop={'/dev/loop', 0x0}, &(0x7f00000010c0)='.\x00', &(0x7f0000001100)='vfat\x00', 0x1004840, 0x0) 228.318177ms ago: executing program 2 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x51) 160.235673ms ago: executing program 2 (id=978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000002c40)={0x763bf26aa405d86c, 0x1, 0xfffffffd, 0x1, 0x5}) 149.073335ms ago: executing program 1 (id=979): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2800700, &(0x7f00000000c0)={[], [{@seclabel}]}, 0x2, 0x460, &(0x7f0000000480)="$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") mount$incfs(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x404, 0x0) syz_mount_image$fuse(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x820, &(0x7f0000000a40)=ANY=[], 0x4, 0x0, 0x0) stat(0x0, 0x0) 128.532017ms ago: executing program 3 (id=980): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000700)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000780), &(0x7f00000007c0)=0x4) 72.333972ms ago: executing program 3 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x3a}]}) 212.82µs ago: executing program 2 (id=982): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1004410, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000001540)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 0s ago: executing program 1 (id=983): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 19.522078][ T28] audit: type=1400 audit(1793099017.551:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.523185][ T279] cgroup: Unknown subsys name 'net' [ 19.544759][ T28] audit: type=1400 audit(1793099017.551:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.572041][ T28] audit: type=1400 audit(1793099017.581:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.572209][ T279] cgroup: Unknown subsys name 'devices' [ 19.689742][ T279] cgroup: Unknown subsys name 'hugetlb' [ 19.695354][ T279] cgroup: Unknown subsys name 'rlimit' [ 19.797144][ T28] audit: type=1400 audit(1793099017.821:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.820376][ T28] audit: type=1400 audit(1793099017.821:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.845304][ T28] audit: type=1400 audit(1793099017.821:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.852672][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.877155][ T28] audit: type=1400 audit(1793099017.911:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.893468][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.903231][ T28] audit: type=1400 audit(1793099017.911:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.936821][ T28] audit: type=1400 audit(1793099017.921:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.962352][ T28] audit: type=1400 audit(1793099017.921:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.653837][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.660917][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.668361][ T288] device bridge_slave_0 entered promiscuous mode [ 20.676279][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.683383][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.690695][ T288] device bridge_slave_1 entered promiscuous mode [ 20.711241][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.718606][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.725894][ T287] device bridge_slave_0 entered promiscuous mode [ 20.734455][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.741534][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.748918][ T287] device bridge_slave_1 entered promiscuous mode [ 20.868977][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.876035][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.883509][ T289] device bridge_slave_0 entered promiscuous mode [ 20.890483][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.897514][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.905068][ T289] device bridge_slave_1 entered promiscuous mode [ 20.915161][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.922264][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.929683][ T291] device bridge_slave_0 entered promiscuous mode [ 20.955371][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.962470][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.969915][ T290] device bridge_slave_0 entered promiscuous mode [ 20.976566][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.983623][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.990968][ T291] device bridge_slave_1 entered promiscuous mode [ 21.009272][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.016319][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.023748][ T290] device bridge_slave_1 entered promiscuous mode [ 21.046859][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.053916][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.061244][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.068270][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.131603][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.138667][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.145929][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.152966][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.230089][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.237143][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.244413][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.251446][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.262495][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.269993][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.277120][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.284778][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.292195][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.300089][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.307290][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.324105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.332319][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.339346][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.360996][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.368661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.376021][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.384283][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.391315][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.398861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.406971][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.414025][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.421634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.429837][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.436876][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.466147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.481220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.488985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.497642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.520314][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.529439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.537352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.545714][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.552781][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.560265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.568732][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.575763][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.583143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.591094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.599275][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.606278][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.613742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.622046][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.629932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.639289][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.646788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.664330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.672804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.681073][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.688111][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.698666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.707026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.715506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.723884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.740721][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.748815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.756702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.764909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.773456][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.781912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.790140][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.797180][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.805300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.813730][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.821951][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.828984][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.838805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.847199][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.858597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.866547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.876510][ T290] device veth0_vlan entered promiscuous mode [ 21.889029][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.896484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.904137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.912227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.920387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.927843][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.936998][ T287] device veth0_vlan entered promiscuous mode [ 21.943645][ T288] device veth0_vlan entered promiscuous mode [ 21.956462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.964532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.972766][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.981423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.989856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.997265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.009205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.017383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.032866][ T289] device veth0_vlan entered promiscuous mode [ 22.040109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.049036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.056916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.065173][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.073292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.081672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.089653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.097568][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.105170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.113059][ T290] device veth1_macvtap entered promiscuous mode [ 22.120557][ T288] device veth1_macvtap entered promiscuous mode [ 22.131848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.139568][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.147730][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.166566][ T287] device veth1_macvtap entered promiscuous mode [ 22.174989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.183475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.192104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.200585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.209027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.217412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.225835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.234127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.242412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.250051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.258316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.282930][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 22.284366][ T289] device veth1_macvtap entered promiscuous mode [ 22.299223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.315436][ T291] device veth0_vlan entered promiscuous mode [ 22.332361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.340989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.353576][ T313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.354494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.379483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.388621][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.401419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.409827][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.418414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.426820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.440577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.449155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.456611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.476767][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.485086][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.494413][ T291] device veth1_macvtap entered promiscuous mode [ 22.519559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.529215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.538125][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.566691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.584296][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.590571][ T334] loop4: detected capacity change from 0 to 512 [ 22.597627][ T336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 22.632283][ T345] netem: incorrect ge model size [ 22.639860][ T345] netem: change failed [ 22.655436][ T347] netem: unknown loss type 0 [ 22.664074][ T347] netem: change failed [ 22.670583][ T334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 22.670728][ T350] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 22.679861][ T334] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.715306][ T354] loop0: detected capacity change from 0 to 128 [ 22.771338][ T290] EXT4-fs (loop4): unmounting filesystem. [ 22.779002][ T354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 22.809187][ T354] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.876189][ T289] EXT4-fs (loop0): unmounting filesystem. [ 23.127805][ T400] loop4: detected capacity change from 0 to 256 [ 23.179377][ T400] netlink: 112 bytes leftover after parsing attributes in process `syz.4.40'. [ 23.521248][ T444] loop4: detected capacity change from 0 to 2048 [ 23.564628][ T444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 23.579740][ T444] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.615426][ T290] EXT4-fs (loop4): unmounting filesystem. [ 23.738696][ T468] loop4: detected capacity change from 0 to 256 [ 23.760913][ T468] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 23.805606][ T468] exFAT-fs (loop4): hint_cluster is invalid (17) [ 23.817494][ T468] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 23.825748][ T468] exFAT-fs (loop4): Filesystem has been set read-only [ 23.894637][ T494] device erspan0 entered promiscuous mode [ 24.138794][ T519] loop3: detected capacity change from 0 to 40427 [ 24.165395][ T519] F2FS-fs (loop3): invalid crc value [ 24.176068][ T519] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.184888][ T518] loop4: detected capacity change from 0 to 40427 [ 24.197774][ T518] F2FS-fs (loop4): invalid crc value [ 24.207715][ T518] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.224297][ T519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 24.247417][ T518] F2FS-fs (loop4): Start checkpoint disabled! [ 24.258543][ T518] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 24.288450][ T536] capability: warning: `syz.1.100' uses 32-bit capabilities (legacy support in use) [ 24.298950][ T518] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 24.306976][ T287] syz-executor: attempt to access beyond end of device [ 24.306976][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.324789][ T536] loop1: detected capacity change from 0 to 512 [ 24.338814][ T536] EXT4-fs: Ignoring removed bh option [ 24.372193][ T536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 24.391314][ T536] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.412708][ T365] kworker/u4:4: attempt to access beyond end of device [ 24.412708][ T365] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 24.450343][ T288] EXT4-fs (loop1): unmounting filesystem. [ 24.529193][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 24.529208][ T28] audit: type=1400 audit(1793099022.561:180): avc: denied { mount } for pid=546 comm="syz.4.102" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 24.574241][ T28] audit: type=1400 audit(1793099022.591:181): avc: denied { search } for pid=546 comm="syz.4.102" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 24.604043][ T28] audit: type=1400 audit(1793099022.591:182): avc: denied { read write } for pid=546 comm="syz.4.102" name="trigger" dev="tracefs" ino=2564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 24.637217][ T28] audit: type=1400 audit(1793099022.591:183): avc: denied { open } for pid=546 comm="syz.4.102" path="/38/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=2564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 24.663059][ T28] audit: type=1400 audit(1793099022.601:184): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 24.667579][ T542] loop3: detected capacity change from 0 to 40427 [ 24.693593][ T542] ======================================================= [ 24.693593][ T542] WARNING: The mand mount option has been deprecated and [ 24.693593][ T542] and is ignored by this kernel. Remove the mand [ 24.693593][ T542] option from the mount to silence this warning. [ 24.693593][ T542] ======================================================= [ 24.734552][ T542] F2FS-fs (loop3): invalid crc value [ 24.736277][ T565] loop7: detected capacity change from 0 to 8 [ 24.741541][ T542] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.807387][ T573] netlink: 8964 bytes leftover after parsing attributes in process `syz.1.113'. [ 24.816640][ T573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 24.828794][ T542] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 24.884519][ T287] syz-executor: attempt to access beyond end of device [ 24.884519][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.984303][ T584] process 'syz.4.118' launched '/dev/fd/4' with NULL argv: empty string added [ 24.995424][ T28] audit: type=1400 audit(1793099023.021:185): avc: denied { execute } for pid=583 comm="syz.4.118" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 25.038171][ T580] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 25.049806][ T580] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 25.064655][ T28] audit: type=1400 audit(1793099023.021:186): avc: denied { execute_no_trans } for pid=583 comm="syz.4.118" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 25.075037][ T589] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.093766][ T580] F2FS-fs (loop2): invalid crc value [ 25.110777][ T589] EXT4-fs (loop4): 1 orphan inode deleted [ 25.112713][ T580] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 25.117020][ T589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.140071][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 25.144500][ T589] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.157998][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 1 [ 25.180077][ T580] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 25.181390][ T589] EXT4-fs (loop4): shut down requested (2) [ 25.187235][ T580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.200787][ T28] audit: type=1400 audit(1793099023.231:187): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 25.222738][ T28] audit: type=1400 audit(1793099023.231:188): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.248947][ T290] EXT4-fs (loop4): unmounting filesystem. [ 25.400731][ T610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.522920][ T287] EXT4-fs (loop3): unmounting filesystem. [ 25.768850][ T668] EXT4-fs (loop2): Test dummy encryption mode enabled [ 25.778906][ T668] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #11: comm syz.2.152: casefold flag without casefold feature [ 25.793429][ T668] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.152: couldn't read orphan inode 11 (err -117) [ 25.810165][ T668] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 25.825092][ T668] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.152: bg 0: block 7: invalid block bitmap [ 25.838832][ T668] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.872104][ T681] Zero length message leads to an empty skb [ 25.889261][ T683] netem: invalid attributes len -16 [ 25.894499][ T683] netem: change failed [ 25.913825][ T291] EXT4-fs (loop2): unmounting filesystem. [ 25.958118][ T664] F2FS-fs (loop0): invalid crc value [ 25.987700][ T664] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.024617][ T706] EXT4-fs: Ignoring removed bh option [ 26.030266][ T706] ext2: Unknown parameter 'mask' [ 26.048505][ T664] F2FS-fs (loop0): Start checkpoint disabled! [ 26.056366][ T664] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 26.071972][ T664] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 26.119074][ T664] syz.0.150: attempt to access beyond end of device [ 26.119074][ T664] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.134138][ T664] syz.0.150: attempt to access beyond end of device [ 26.134138][ T664] loop0: rw=2049, sector=45104, nr_sectors = 40 limit=40427 [ 26.148137][ T664] syz.0.150: attempt to access beyond end of device [ 26.148137][ T664] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.174786][ T8] kworker/u4:0: attempt to access beyond end of device [ 26.174786][ T8] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 26.257947][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.323317][ T737] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 27.627894][ C0] sched: RT throttling activated [ 28.678534][ T24] usb 4-1: too many configurations: 181, using maximum allowed: 8 [ 28.702613][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 28.718122][ T24] usb 4-1: can't read configurations, error -71 [ 28.751402][ T764] tipc: Started in network mode [ 28.756391][ T764] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 28.773883][ T764] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 28.790086][ T764] tipc: Enabled bearer , priority 10 [ 28.799718][ T772] set_capacity_and_notify: 7 callbacks suppressed [ 28.799731][ T772] loop4: detected capacity change from 0 to 512 [ 28.814240][ T769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 28.824794][ T772] EXT4-fs (loop4): Test dummy encryption mode enabled [ 28.850230][ T772] EXT4-fs (loop4): 1 truncate cleaned up [ 28.856090][ T772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.878798][ T772] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 28.890252][ T772] EXT4-fs (loop4): Online defrag not supported for encrypted files [ 28.939090][ T290] EXT4-fs (loop4): unmounting filesystem. [ 28.963053][ T790] loop4: detected capacity change from 0 to 512 [ 28.982324][ T790] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.011888][ T790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 29.033671][ T790] System zones: 1-12 [ 29.036910][ T801] loop1: detected capacity change from 0 to 512 [ 29.049174][ T790] EXT4-fs (loop4): 1 truncate cleaned up [ 29.058062][ T790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.080341][ T790] netlink: 964 bytes leftover after parsing attributes in process `syz.4.204'. [ 29.100845][ T801] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.209: bg 0: block 5: invalid block bitmap [ 29.121484][ T801] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 29.138861][ T290] EXT4-fs (loop4): unmounting filesystem. [ 29.144795][ T801] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.209: invalid indirect mapped block 3 (level 2) [ 29.222844][ T801] EXT4-fs (loop1): 1 orphan inode deleted [ 29.249241][ T801] EXT4-fs (loop1): 1 truncate cleaned up [ 29.281818][ T801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.385327][ T288] EXT4-fs (loop1): unmounting filesystem. [ 29.589830][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 29.589843][ T28] audit: type=1400 audit(1793099027.621:238): avc: denied { ioctl } for pid=850 comm="syz.0.230" path="socket:[18300]" dev="sockfs" ino=18300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.625154][ T847] netlink: 'syz.3.229': attribute type 12 has an invalid length. [ 29.662058][ T847] netlink: 'syz.3.229': attribute type 29 has an invalid length. [ 29.678379][ T847] netlink: 'syz.3.229': attribute type 7 has an invalid length. [ 29.685366][ T28] audit: type=1400 audit(1793099027.711:239): avc: denied { read write } for pid=859 comm="syz.1.235" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 29.697939][ T847] netlink: 'syz.3.229': attribute type 37 has an invalid length. [ 29.717814][ T860] base or size exceeds the MTRR width [ 29.727008][ T847] netlink: 80 bytes leftover after parsing attributes in process `syz.3.229'. [ 29.747944][ T28] audit: type=1400 audit(1793099027.741:240): avc: denied { open } for pid=859 comm="syz.1.235" path="/34/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 29.807930][ T28] audit: type=1400 audit(1793099027.741:241): avc: denied { ioctl } for pid=859 comm="syz.1.235" path="/34/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 29.917608][ T781] loop2: detected capacity change from 0 to 131072 [ 29.927982][ T39] tipc: Node number set to 1 [ 29.940055][ T28] audit: type=1400 audit(1793099027.971:242): avc: denied { read } for pid=883 comm="syz.4.248" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 29.941830][ T885] device-mapper: ioctl: unable to find target [ 29.971352][ T781] F2FS-fs (loop2): Test dummy encryption mode enabled [ 29.990752][ T28] audit: type=1400 audit(1793099027.971:243): avc: denied { open } for pid=883 comm="syz.4.248" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 30.014963][ T28] audit: type=1400 audit(1793099027.971:244): avc: denied { write } for pid=883 comm="syz.4.248" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 30.028829][ T781] F2FS-fs (loop2): invalid crc value [ 30.037983][ T28] audit: type=1400 audit(1793099027.971:245): avc: denied { ioctl } for pid=883 comm="syz.4.248" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 30.068816][ T28] audit: type=1400 audit(1793099027.971:246): avc: denied { create } for pid=884 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.090117][ T28] audit: type=1400 audit(1793099028.001:247): avc: denied { setopt } for pid=884 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.136766][ T781] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.221781][ T781] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.249158][ T878] loop3: detected capacity change from 0 to 40427 [ 30.263996][ T878] F2FS-fs (loop3): invalid crc value [ 30.280199][ T878] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.337275][ T878] F2FS-fs (loop3): Start checkpoint disabled! [ 30.340911][ T917] binder: 916:917 ioctl 541b 0 returned -22 [ 30.344072][ T878] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 30.371208][ T878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 30.410037][ T924] loop4: detected capacity change from 0 to 1024 [ 30.429239][ T924] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 30.458704][ T924] EXT4-fs (loop4): orphan cleanup on readonly fs [ 30.471769][ T924] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 30.471886][ T8] kworker/u4:0: attempt to access beyond end of device [ 30.471886][ T8] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 30.506600][ T924] EXT4-fs (loop4): Cannot turn on quotas: error -13 [ 30.518366][ T924] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.263: couldn't read orphan inode 12 (err -116) [ 30.540604][ T924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.616067][ T290] EXT4-fs (loop4): unmounting filesystem. [ 30.818223][ T968] loop2: detected capacity change from 0 to 512 [ 30.864788][ T968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.885620][ T968] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 30.910495][ T968] EXT4-fs (loop2): shut down requested (0) [ 30.949030][ T968] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 30.963188][ T291] EXT4-fs (loop2): unmounting filesystem. [ 31.055962][ T979] ip_tables: iptables: counters copy to user failed while replacing table [ 31.130165][ T1008] loop3: detected capacity change from 0 to 256 [ 31.146086][ T1008] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 31.270329][ T1030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 31.368132][ T1051] [ 31.395278][ T1059] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 31.414898][ T1059] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.459601][ T1065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'. [ 31.479006][ T1065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'. [ 31.490895][ T1067] loop3: detected capacity change from 0 to 256 [ 31.504210][ T1061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.320'. [ 31.510589][ T1067] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 31.638829][ T1097] loop2: detected capacity change from 0 to 128 [ 31.657610][ T1097] FAT-fs (loop2): Directory bread(block 32) failed [ 31.669097][ T1097] FAT-fs (loop2): Directory bread(block 33) failed [ 31.681218][ T1097] FAT-fs (loop2): Directory bread(block 34) failed [ 31.692618][ T1097] FAT-fs (loop2): Directory bread(block 35) failed [ 31.700419][ T1097] FAT-fs (loop2): Directory bread(block 36) failed [ 31.706998][ T1097] FAT-fs (loop2): Directory bread(block 37) failed [ 31.714776][ T1097] FAT-fs (loop2): Directory bread(block 38) failed [ 31.721481][ T1097] FAT-fs (loop2): Directory bread(block 39) failed [ 31.728622][ T1097] FAT-fs (loop2): Directory bread(block 40) failed [ 31.735180][ T1097] FAT-fs (loop2): Directory bread(block 41) failed [ 31.774843][ T1097] syz.2.335: attempt to access beyond end of device [ 31.774843][ T1097] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 31.788177][ T1097] FAT-fs (loop2): Filesystem has been set read-only [ 31.794836][ T1097] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 31.805413][ T1097] syz.2.335: attempt to access beyond end of device [ 31.805413][ T1097] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 31.825253][ T1097] Buffer I/O error on dev loop2, logical block 1027, async page read [ 31.828042][ T39] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 31.852145][ T1115] device-mapper: ioctl: unable to find target [ 31.921525][ T1118] ip_tables: iptables: counters copy to user failed while replacing table [ 31.973284][ T1131] netlink: 'syz.3.351': attribute type 9 has an invalid length. [ 32.028705][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 32.037215][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 32.048696][ T39] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1279, setting to 1023 [ 32.074940][ T39] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 32.089214][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.101657][ T39] usb 5-1: Product: syz [ 32.106141][ T39] usb 5-1: Manufacturer: syz [ 32.107954][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.114746][ T39] usb 5-1: SerialNumber: syz [ 32.171254][ T1158] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.184009][ T1158] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.202970][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.207957][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.298037][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 32.304249][ T6] usb 1-1: config 0 has no interfaces? [ 32.310107][ T6] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 32.319495][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.328569][ T6] usb 1-1: config 0 descriptor?? [ 32.344218][ T39] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 32.351446][ T39] usb 5-1: 2:1 : format type 78 is not supported yet [ 32.366913][ T39] usb 5-1: USB disconnect, device number 2 [ 32.386623][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.409081][ T19] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.415869][ T19] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 32.425858][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.434694][ T19] usb 2-1: config 0 descriptor?? [ 32.519445][ T1186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.528439][ T1186] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.543147][ T6] usb 1-1: USB disconnect, device number 2 [ 32.551018][ T287] EXT4-fs (loop3): unmounting filesystem. [ 32.580406][ T1194] capability: warning: `syz.3.379' uses deprecated v2 capabilities in a way that may be insecure [ 32.845369][ T19] hid (null): unknown global tag 0xfd [ 32.852120][ T19] hid (null): unknown global tag 0xc [ 32.857490][ T19] hid (null): unknown global tag 0xc [ 32.862999][ T19] hid (null): unknown global tag 0xd [ 32.873682][ T19] waltop 0003:172F:0034.0001: unexpected long global item [ 32.881054][ T19] waltop: probe of 0003:172F:0034.0001 failed with error -22 [ 32.927986][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.059609][ T39] usb 2-1: USB disconnect, device number 2 [ 33.107975][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 33.114359][ T6] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 33.145905][ T6] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.172257][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 33.179337][ T6] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 33.190821][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.210626][ T6] usb 4-1: config 0 descriptor?? [ 33.317392][ T1248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.405'. [ 33.342319][ T1253] FAT-fs (loop4): Directory bread(block 32) failed [ 33.348969][ T1253] FAT-fs (loop4): Directory bread(block 33) failed [ 33.355524][ T1253] FAT-fs (loop4): Directory bread(block 34) failed [ 33.362184][ T1253] FAT-fs (loop4): Directory bread(block 35) failed [ 33.369040][ T1253] FAT-fs (loop4): Directory bread(block 36) failed [ 33.375579][ T1253] FAT-fs (loop4): Directory bread(block 37) failed [ 33.382208][ T1253] FAT-fs (loop4): Directory bread(block 38) failed [ 33.388746][ T1253] FAT-fs (loop4): Directory bread(block 39) failed [ 33.395262][ T1253] FAT-fs (loop4): Directory bread(block 40) failed [ 33.401834][ T1253] FAT-fs (loop4): Directory bread(block 41) failed [ 33.434939][ T1253] syz.4.407: attempt to access beyond end of device [ 33.434939][ T1253] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 33.448203][ T1253] FAT-fs (loop4): Filesystem has been set read-only [ 33.454828][ T1253] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 33.465024][ T1253] syz.4.407: attempt to access beyond end of device [ 33.465024][ T1253] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 33.478208][ T1253] Buffer I/O error on dev loop4, logical block 1027, async page read [ 33.496881][ T1255] device ip6_vti0 entered promiscuous mode [ 33.503417][ T1254] device ip6_vti0 left promiscuous mode [ 33.527948][ T19] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 33.568307][ T1269] EXT4-fs: Ignoring removed bh option [ 33.573803][ T1269] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.580969][ T1269] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 33.591415][ T1269] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 33.601259][ T1269] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.608353][ T1269] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.623100][ T1269] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 33.629202][ T6] pantherlord 0003:0810:0001.0002: unknown main item tag 0x1 [ 33.634423][ T1269] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.414: Invalid block bitmap block 0 in block_group 0 [ 33.640126][ T6] pantherlord 0003:0810:0001.0002: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.3-1/input0 [ 33.651328][ T1269] EXT4-fs (loop0): Remounting filesystem read-only [ 33.667614][ T6] pantherlord 0003:0810:0001.0002: no output reports found [ 33.670292][ T1269] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.686619][ T1269] EXT4-fs (loop0): Remounting filesystem read-only [ 33.693345][ T1269] EXT4-fs (loop0): 1 orphan inode deleted [ 33.699415][ T1269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.728641][ T19] usb 3-1: not running at top speed; connect to a high speed hub [ 33.738472][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 33.752107][ T19] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1279, setting to 1023 [ 33.757517][ T1269] ip_tables: iptables: counters copy to user failed while replacing table [ 33.778020][ T298] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.789870][ T289] EXT4-fs (loop0): unmounting filesystem. [ 33.796436][ T19] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 33.805851][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.813920][ T19] usb 3-1: Product: syz [ 33.818106][ T19] usb 3-1: Manufacturer: syz [ 33.819190][ T1285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.822694][ T19] usb 3-1: SerialNumber: syz [ 33.858286][ T288] EXT4-fs (loop1): unmounting filesystem. [ 33.869320][ T1136] usb 4-1: USB disconnect, device number 4 [ 33.968404][ T298] usb 5-1: Using ep0 maxpacket: 16 [ 33.976021][ T298] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 33.984150][ T298] usb 5-1: config 0 has no interface number 0 [ 33.990658][ T298] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.002274][ T298] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.012420][ T298] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 34.021979][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.030177][ T1324] device sit0 entered promiscuous mode [ 34.031028][ T298] usb 5-1: config 0 descriptor?? [ 34.042516][ T1324] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 34.051774][ T1324] netlink: 1 bytes leftover after parsing attributes in process `syz.0.438'. [ 34.068091][ T19] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.075603][ T19] usb 3-1: 2:1 : format type 78 is not supported yet [ 34.115436][ T19] usb 3-1: USB disconnect, device number 2 [ 34.131901][ T1342] netlink: 76 bytes leftover after parsing attributes in process `syz.0.447'. [ 34.224916][ T1366] set_capacity_and_notify: 5 callbacks suppressed [ 34.224932][ T1366] loop1: detected capacity change from 0 to 512 [ 34.238677][ T1366] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.252181][ T1366] EXT4-fs (loop1): 1 truncate cleaned up [ 34.258945][ T1366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.278998][ T288] EXT4-fs (loop1): unmounting filesystem. [ 34.403463][ T1372] loop1: detected capacity change from 0 to 40427 [ 34.419240][ T1372] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 34.435073][ T1372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.444083][ T1372] F2FS-fs (loop1): invalid crc value [ 34.472682][ T1372] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.525909][ T1372] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 34.538689][ T1372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 34.606446][ T1384] loop0: detected capacity change from 0 to 40427 [ 34.607118][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 34.607129][ T28] audit: type=1400 audit(1793099032.631:289): avc: denied { append } for pid=1390 comm="syz.2.467" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.628229][ T1384] F2FS-fs (loop0): invalid crc value [ 34.655526][ T298] uclogic 0003:28BD:0071.0003: pen parameters not found [ 34.670206][ T298] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 34.690418][ T1384] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.722170][ T1402] loop2: detected capacity change from 0 to 512 [ 34.768076][ T1384] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.811282][ T1408] xt_hashlimit: size too large, truncated to 1048576 [ 34.831475][ T28] audit: type=1400 audit(1793099032.861:290): avc: denied { append } for pid=1383 comm="syz.0.465" path="/94/file1/memory.events" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.865438][ T289] syz-executor: attempt to access beyond end of device [ 34.865438][ T289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.884083][ T1413] xt_hashlimit: size too large, truncated to 1048576 [ 34.908583][ T24] usb 5-1: USB disconnect, device number 3 [ 34.969461][ T1401] loop3: detected capacity change from 0 to 40427 [ 35.058707][ T28] audit: type=1400 audit(1793099033.091:291): avc: denied { create } for pid=1421 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.092399][ T28] audit: type=1400 audit(1793099033.091:292): avc: denied { write } for pid=1421 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.253331][ T1448] loop3: detected capacity change from 0 to 256 [ 35.276029][ T1448] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.298753][ T1448] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.365823][ T1456] loop0: detected capacity change from 0 to 256 [ 35.418252][ T1456] exFAT-fs (loop0): failed to load upcase table (idx : 0x000120ea, chksum : 0xcff16ea1, utbl_chksum : 0xe619d30d) [ 35.447805][ T1456] exFAT-fs (loop0): failed to load alloc-bitmap [ 35.454999][ T1456] exFAT-fs (loop0): failed to recognize exfat type [ 35.514430][ T1456] netlink: 220 bytes leftover after parsing attributes in process `syz.0.495'. [ 35.534278][ T1456] netlink: 120 bytes leftover after parsing attributes in process `syz.0.495'. [ 35.546326][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 35.630054][ T1481] device macsec0 entered promiscuous mode [ 35.712833][ T1481] syz.0.505 (1481) used greatest stack depth: 21792 bytes left [ 35.754394][ T1502] loop0: detected capacity change from 0 to 512 [ 35.794118][ T1514] ip_tables: iptables: counters copy to user failed while replacing table [ 35.803571][ T1502] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.515: missing EA_INODE flag [ 35.838032][ T1502] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.515: error while reading EA inode 2 err=-117 [ 35.939699][ T1502] EXT4-fs (loop0): 1 orphan inode deleted [ 35.962239][ T1502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.011428][ T28] audit: type=1400 audit(1793099034.041:293): avc: denied { create } for pid=1501 comm="syz.0.515" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.051719][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.126083][ T1534] serio: Serial port ttyS3 [ 36.135749][ T1536] loop2: detected capacity change from 0 to 1024 [ 36.179000][ T1536] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.196657][ T28] audit: type=1400 audit(1793099034.221:294): avc: denied { setopt } for pid=1540 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.220997][ T1536] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 36.237986][ T1536] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 36.250914][ T28] audit: type=1400 audit(1793099034.281:295): avc: denied { ioctl } for pid=1543 comm="syz.0.531" path="/dev/input/event2" dev="devtmpfs" ino=277 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.281317][ T291] EXT4-fs (loop2): unmounting filesystem. [ 36.331003][ T28] audit: type=1400 audit(1793099034.361:296): avc: denied { connect } for pid=1551 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.358724][ T1554] loop0: detected capacity change from 0 to 256 [ 36.373482][ T1554] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 36.467467][ T1560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 36.526712][ T1578] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 36.627529][ T1600] netlink: 'syz.0.557': attribute type 2 has an invalid length. [ 36.660217][ T1605] xt_hashlimit: size too large, truncated to 1048576 [ 36.676611][ T28] audit: type=1400 audit(1793099034.701:297): avc: denied { map } for pid=1602 comm="syz.2.558" path="socket:[22083]" dev="sockfs" ino=22083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.868727][ T1622] tipc: Enabling of bearer rejected, already enabled [ 36.887597][ T28] audit: type=1400 audit(1793099034.911:298): avc: denied { read } for pid=1625 comm="syz.4.568" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.915013][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 36.928962][ T1620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.933971][ T1630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 36.975032][ T1620] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 37.004639][ T1638] tipc: Enabling of bearer rejected, already enabled [ 37.060878][ T1620] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 37.073895][ T1631] F2FS-fs (loop3): invalid crc value [ 37.102063][ T1631] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.142101][ T1620] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.142101][ T1620] [ 37.188182][ T1620] EXT4-fs (loop2): Total free blocks count 0 [ 37.200899][ T1620] EXT4-fs (loop2): Free/Dirty block details [ 37.207864][ T1631] F2FS-fs (loop3): Start checkpoint disabled! [ 37.221366][ T1620] EXT4-fs (loop2): free_blocks=4096 [ 37.226661][ T1620] EXT4-fs (loop2): dirty_blocks=48 [ 37.231772][ T1631] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 37.239721][ T1620] EXT4-fs (loop2): Block reservation details [ 37.244989][ T1631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 37.245832][ T1620] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 37.294522][ T291] EXT4-fs (loop2): unmounting filesystem. [ 37.331977][ T43] kworker/u4:2: attempt to access beyond end of device [ 37.331977][ T43] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 37.533055][ T1685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.562887][ T1691] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 37.685089][ T1707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.603'. [ 37.748371][ T1719] netlink: 'syz.1.610': attribute type 12 has an invalid length. [ 37.757940][ T1719] netlink: 'syz.1.610': attribute type 29 has an invalid length. [ 37.768939][ T1716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.777871][ T1716] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.793319][ T1719] netlink: 148 bytes leftover after parsing attributes in process `syz.1.610'. [ 37.845759][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.998512][ T1742] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.051604][ T1742] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.091910][ T43] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.201665][ T1767] netlink: 'syz.3.630': attribute type 12 has an invalid length. [ 38.218153][ T1767] netlink: 'syz.3.630': attribute type 29 has an invalid length. [ 38.225912][ T1767] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 38.244043][ T1767] netlink: 'syz.3.630': attribute type 2 has an invalid length. [ 38.299443][ T1772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.330268][ T1772] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.354396][ T287] EXT4-fs (loop3): unmounting filesystem. [ 38.393368][ T1792] EXT4-fs: Ignoring removed bh option [ 38.411029][ T1792] EXT4-fs: Ignoring removed bh option [ 38.419170][ T1798] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.426872][ T1795] EXT4-fs: Ignoring removed oldalloc option [ 38.439617][ T1802] netlink: 'syz.2.646': attribute type 2 has an invalid length. [ 38.448695][ T1792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.458102][ T1795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.484314][ T288] EXT4-fs (loop1): unmounting filesystem. [ 38.546872][ T1795] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 38.562325][ T1795] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 690 with error 28 [ 38.575245][ T1795] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.575245][ T1795] [ 38.584952][ T1795] EXT4-fs (loop3): Total free blocks count 0 [ 38.591206][ T1795] EXT4-fs (loop3): Free/Dirty block details [ 38.598157][ T1795] EXT4-fs (loop3): free_blocks=4096 [ 38.608091][ T1795] EXT4-fs (loop3): dirty_blocks=704 [ 38.624883][ T1795] EXT4-fs (loop3): Block reservation details [ 38.637974][ T1795] EXT4-fs (loop3): i_reserved_data_blocks=44 [ 38.711337][ T287] EXT4-fs (loop3): unmounting filesystem. [ 38.718327][ T1838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.778055][ T288] EXT4-fs (loop1): unmounting filesystem. [ 38.834836][ T1849] FAT-fs (loop1): Directory bread(block 32) failed [ 38.850230][ T1849] FAT-fs (loop1): Directory bread(block 33) failed [ 38.856793][ T1849] FAT-fs (loop1): Directory bread(block 34) failed [ 38.864694][ T1849] FAT-fs (loop1): Directory bread(block 35) failed [ 38.871485][ T1849] FAT-fs (loop1): Directory bread(block 36) failed [ 38.892350][ T1849] FAT-fs (loop1): Directory bread(block 37) failed [ 38.909602][ T1849] FAT-fs (loop1): Directory bread(block 38) failed [ 38.922152][ T1849] FAT-fs (loop1): Directory bread(block 39) failed [ 38.930789][ T1849] FAT-fs (loop1): Directory bread(block 40) failed [ 38.937481][ T1849] FAT-fs (loop1): Directory bread(block 41) failed [ 39.020014][ T1849] syz.1.666: attempt to access beyond end of device [ 39.020014][ T1849] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 39.048805][ T1849] FAT-fs (loop1): Filesystem has been set read-only [ 39.055460][ T1849] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 39.067314][ T1849] syz.1.666: attempt to access beyond end of device [ 39.067314][ T1849] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 39.080611][ T1865] tun0: tun_chr_ioctl cmd 1074025681 [ 39.087749][ T1849] Buffer I/O error on dev loop1, logical block 1027, async page read [ 39.190076][ T1870] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.674: bg 0: block 5: invalid block bitmap [ 39.216106][ T1870] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 39.237865][ T1870] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.674: invalid indirect mapped block 3 (level 2) [ 39.267675][ T1870] EXT4-fs (loop3): 1 orphan inode deleted [ 39.279034][ T1870] EXT4-fs (loop3): 1 truncate cleaned up [ 39.289153][ T1870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.334706][ T287] EXT4-fs (loop3): unmounting filesystem. [ 39.361508][ T1877] set_capacity_and_notify: 18 callbacks suppressed [ 39.361525][ T1877] loop3: detected capacity change from 0 to 512 [ 39.393581][ T1877] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.428392][ T1877] EXT4-fs (loop3): 1 truncate cleaned up [ 39.434155][ T1877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.448942][ T1877] EXT4-fs (loop3): Online defrag not supported for encrypted files [ 39.463891][ T287] EXT4-fs (loop3): unmounting filesystem. [ 39.506490][ T1887] netlink: 'syz.0.680': attribute type 12 has an invalid length. [ 39.527365][ T1887] netlink: 'syz.0.680': attribute type 29 has an invalid length. [ 39.553008][ T1887] __nla_validate_parse: 2 callbacks suppressed [ 39.553023][ T1887] netlink: 80 bytes leftover after parsing attributes in process `syz.0.680'. [ 39.663303][ T1897] xt_hashlimit: size too large, truncated to 1048576 [ 39.792528][ T1912] loop2: detected capacity change from 0 to 1024 [ 39.834616][ T1920] loop0: detected capacity change from 0 to 16 [ 39.835996][ T1912] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.850481][ T1920] erofs: (device loop0): mounted with root inode @ nid 36. [ 39.865491][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 39.865502][ T28] audit: type=1400 audit(1793099037.891:325): avc: denied { mounton } for pid=1919 comm="syz.0.695" path="/141/file0" dev="loop0" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.879328][ T1920] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 39.906153][ T291] EXT4-fs (loop2): unmounting filesystem. [ 39.912129][ T1920] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 39.934516][ T1920] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 39.943676][ T1920] overlayfs: failed to get redirect (-117) [ 40.005263][ T1932] input: syz0 as /devices/virtual/input/input4 [ 40.017312][ T28] audit: type=1400 audit(1793099038.041:326): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=710 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.044485][ T28] audit: type=1400 audit(1793099038.041:327): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=710 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.050408][ T1295] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.069209][ T28] audit: type=1400 audit(1793099038.041:328): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=710 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.078880][ T1939] loop0: detected capacity change from 0 to 2048 [ 40.158469][ T1939] loop0: p1 < > p4 [ 40.164806][ T1939] loop0: p4 size 8388608 extends beyond EOD, truncated [ 40.172440][ T1950] input: syz1 as /devices/virtual/input/input5 [ 40.203708][ T28] audit: type=1400 audit(1793099038.231:329): avc: denied { read write } for pid=1938 comm="syz.0.704" name="loop0p4" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.243825][ T28] audit: type=1400 audit(1793099038.231:330): avc: denied { write } for pid=1960 comm="syz.4.715" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.269602][ T28] audit: type=1400 audit(1793099038.261:331): avc: denied { open } for pid=1938 comm="syz.0.704" path="/dev/loop0p4" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.329025][ T1295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.351473][ T1295] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.375620][ T1295] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.375665][ T1981] netlink: 104 bytes leftover after parsing attributes in process `syz.4.725'. [ 40.384779][ T1295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.395017][ T289] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 40.409234][ T1293] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.414717][ T1295] usb 4-1: Product: syz [ 40.419365][ T1293] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.432487][ T1293] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 40.435637][ T1295] usb 4-1: Manufacturer: syz [ 40.453753][ T1295] usb 4-1: SerialNumber: syz [ 40.469917][ T1295] usb 4-1: selecting invalid altsetting 1 [ 40.553724][ T28] audit: type=1400 audit(1793099038.581:332): avc: denied { watch watch_reads } for pid=2008 comm="syz.0.737" path="/148/file0" dev="tmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.570582][ T2007] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 40.709350][ T2026] loop0: detected capacity change from 0 to 256 [ 40.801005][ T2031] loop0: detected capacity change from 0 to 8192 [ 40.842707][ T2041] loop2: detected capacity change from 0 to 256 [ 40.863582][ T2041] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff2) [ 40.872849][ T2041] FAT-fs (loop2): Filesystem has been set read-only [ 40.891856][ T2045] device hsr0 entered promiscuous mode [ 41.077065][ T1295] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 41.087023][ T1295] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 41.113164][ T1295] usb 4-1: selecting invalid altsetting 1 [ 41.119002][ T1295] cdc_ncm 4-1:1.0: bind() failure [ 41.127520][ T1295] usb 4-1: USB disconnect, device number 5 [ 41.247216][ T28] audit: type=1400 audit(1793099039.271:333): avc: denied { shutdown } for pid=2081 comm="syz.2.769" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.575454][ T2110] loop2: detected capacity change from 0 to 1024 [ 41.623072][ T2110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.642393][ T291] EXT4-fs (loop2): unmounting filesystem. [ 41.660420][ T2118] loop2: detected capacity change from 0 to 128 [ 41.718812][ T2118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.728246][ T2118] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.798491][ T291] EXT4-fs (loop2): unmounting filesystem. [ 41.823174][ T2126] loop1: detected capacity change from 0 to 256 [ 41.868117][ T2126] exfat: Deprecated parameter 'namecase' [ 41.886025][ T2126] exfat: Deprecated parameter 'utf8' [ 41.899620][ T28] audit: type=1400 audit(1793099039.931:334): avc: denied { bind } for pid=2136 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.919100][ T2126] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 41.996878][ T2149] xt_hashlimit: size too large, truncated to 1048576 [ 42.101908][ T2162] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.121820][ T2176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 42.148480][ T289] EXT4-fs (loop0): unmounting filesystem. [ 42.162855][ T2173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.193835][ T2173] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 42.223858][ T2173] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 42.236507][ T2173] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.236507][ T2173] [ 42.247710][ T2173] EXT4-fs (loop4): Total free blocks count 0 [ 42.253879][ T2173] EXT4-fs (loop4): Free/Dirty block details [ 42.260023][ T2173] EXT4-fs (loop4): free_blocks=4096 [ 42.265241][ T2173] EXT4-fs (loop4): dirty_blocks=48 [ 42.270543][ T2173] EXT4-fs (loop4): Block reservation details [ 42.276521][ T2173] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 42.288027][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.313972][ T290] EXT4-fs (loop4): unmounting filesystem. [ 42.385485][ T2194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.407964][ T2194] EXT4-fs (loop4): 1 truncate cleaned up [ 42.416513][ T2194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.449072][ T2204] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 42.468349][ T290] EXT4-fs (loop4): unmounting filesystem. [ 42.474339][ T365] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.489985][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.502575][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.518744][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 42.545989][ T2210] EXT4-fs: Ignoring removed oldalloc option [ 42.548999][ T24] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 42.552211][ T2212] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000ff2) [ 42.569439][ T2212] FAT-fs (loop0): Filesystem has been set read-only [ 42.578142][ T24] usb 4-1: Manufacturer: syz [ 42.588630][ T24] usb 4-1: config 0 descriptor?? [ 42.588741][ T2210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.644212][ T2210] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 42.658792][ T2210] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 42.671682][ T2210] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.671682][ T2210] [ 42.679307][ T2208] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 42.681514][ T2210] EXT4-fs (loop4): Total free blocks count 0 [ 42.689161][ T2208] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.703802][ T2210] EXT4-fs (loop4): Free/Dirty block details [ 42.709927][ T2210] EXT4-fs (loop4): free_blocks=4096 [ 42.715271][ T2210] EXT4-fs (loop4): dirty_blocks=512 [ 42.719087][ T2208] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.720803][ T2210] EXT4-fs (loop4): Block reservation details [ 42.733043][ T2210] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 42.756756][ T2208] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.764007][ T2208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.778204][ T290] EXT4-fs (loop4): unmounting filesystem. [ 42.780364][ T2208] syz.2.819: attempt to access beyond end of device [ 42.780364][ T2208] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 42.802112][ T2208] syz.2.819: attempt to access beyond end of device [ 42.802112][ T2208] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 43.082137][ T2241] EXT4-fs: Ignoring removed oldalloc option [ 43.117047][ T2241] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.135220][ T2243] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.831: Unrecognised inode hash code 255 [ 43.148705][ T2243] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.831: Corrupt directory, running e2fsck is recommended [ 43.161782][ T2241] EXT4-fs (loop2): 1 truncate cleaned up [ 43.161904][ T2243] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 43.167476][ T2241] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.176322][ T2243] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.831: corrupted in-inode xattr [ 43.204315][ T24] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 43.219817][ T2243] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.831: couldn't read orphan inode 15 (err -117) [ 43.221747][ T24] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 43.233031][ T291] EXT4-fs (loop2): unmounting filesystem. [ 43.245305][ T2243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.254949][ T24] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 43.282266][ T24] usb 4-1: USB disconnect, device number 6 [ 43.282780][ T2243] EXT4-fs error (device loop4): __ext4_remount:6637: comm syz.4.831: Abort forced by user [ 43.316781][ T2243] EXT4-fs (loop4): Remounting filesystem read-only [ 43.326122][ T2266] tipc: Started in network mode [ 43.329546][ T2268] EXT4-fs: Ignoring removed bh option [ 43.332024][ T2266] tipc: Node identity ac1414aa, cluster identity 4711 [ 43.340191][ T2243] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 43.343817][ T2266] tipc: New replicast peer: 172.20.20.187 [ 43.356069][ T2266] tipc: Enabled bearer , priority 10 [ 43.356239][ T2268] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 43.380955][ T290] EXT4-fs (loop4): unmounting filesystem. [ 43.388880][ T2268] EXT4-fs (loop0): 1 truncate cleaned up [ 43.394546][ T2268] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.421582][ T2268] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 43.439188][ T289] EXT4-fs (loop0): unmounting filesystem. [ 43.458474][ T2278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 43.469077][ T2278] device erspan0 entered promiscuous mode [ 43.566521][ T2305] tap0: tun_chr_ioctl cmd 2148553947 [ 43.645684][ T2311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.687020][ T290] EXT4-fs (loop4): unmounting filesystem. [ 43.817837][ T2335] exfat: Deprecated parameter 'namecase' [ 43.833568][ T2335] exfat: Deprecated parameter 'utf8' [ 43.852112][ T2335] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 44.036796][ T2361] validate_nla: 2 callbacks suppressed [ 44.036811][ T2361] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 44.044995][ T2322] F2FS-fs (loop0): Test dummy encryption mode enabled [ 44.050595][ T2361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 44.070656][ T2322] F2FS-fs (loop0): invalid crc value [ 44.077166][ T2322] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.111542][ T2322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.126672][ T2322] fscrypt: AES-256-XTS using blk-crypto-fallback [ 44.463730][ T2406] netlink: 272 bytes leftover after parsing attributes in process `syz.0.903'. [ 44.467938][ T298] tipc: Node number set to 2886997162 [ 44.528105][ T2205] Bluetooth: hci0: command 0x1003 tx timeout [ 44.534181][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.705433][ T2410] set_capacity_and_notify: 13 callbacks suppressed [ 44.705452][ T2410] loop1: detected capacity change from 0 to 40427 [ 44.730824][ T2422] loop4: detected capacity change from 0 to 512 [ 44.731537][ T2410] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 44.745491][ T2410] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.774367][ T2410] F2FS-fs (loop1): invalid crc value [ 44.809533][ T2422] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.818315][ T2422] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.911: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 44.838244][ T2410] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.852395][ T2422] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.911: Bad quota inode: 4, type: 1 [ 44.874456][ T2422] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.909548][ T2422] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 44.925124][ T2410] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.932528][ T2410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.932583][ T2422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.958910][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 44.958923][ T28] audit: type=1400 audit(1793099042.991:360): avc: denied { sqpoll } for pid=2436 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.993801][ T28] audit: type=1400 audit(1793099043.011:361): avc: denied { map } for pid=2409 comm="syz.1.906" path="/162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.031192][ T2422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.911'. [ 45.064959][ T290] EXT4-fs (loop4): unmounting filesystem. [ 45.092136][ T2456] xt_hashlimit: size too large, truncated to 1048576 [ 45.445386][ T2502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.943'. [ 45.522994][ T2509] loop0: detected capacity change from 0 to 2048 [ 45.529727][ T2509] EXT4-fs: Ignoring removed oldalloc option [ 45.539733][ T2509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.581223][ T2509] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 45.596204][ T2509] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 786 with error 28 [ 45.608730][ T2509] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.608730][ T2509] [ 45.618670][ T2509] EXT4-fs (loop0): Total free blocks count 0 [ 45.624716][ T2509] EXT4-fs (loop0): Free/Dirty block details [ 45.630848][ T2509] EXT4-fs (loop0): free_blocks=4096 [ 45.636165][ T2509] EXT4-fs (loop0): dirty_blocks=800 [ 45.641825][ T2509] EXT4-fs (loop0): Block reservation details [ 45.648050][ T2509] EXT4-fs (loop0): i_reserved_data_blocks=50 [ 45.675008][ T289] EXT4-fs (loop0): unmounting filesystem. [ 45.787946][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.977952][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 45.984216][ T24] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 46.003346][ T24] usb 5-1: config 0 has no interface number 0 [ 46.010642][ T24] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 46.021929][ T2515] loop1: detected capacity change from 0 to 131072 [ 46.038322][ T2515] F2FS-fs (loop1): invalid crc value [ 46.041311][ T24] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 46.068512][ T2515] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.069365][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 46.094099][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.104189][ T24] usb 5-1: Product: syz [ 46.114289][ T24] usb 5-1: Manufacturer: syz [ 46.119067][ T24] usb 5-1: SerialNumber: syz [ 46.128465][ T2515] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 46.128714][ T24] usb 5-1: config 0 descriptor?? [ 46.148213][ T2510] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 46.154239][ T2515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 46.158235][ T2510] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 46.185047][ T28] audit: type=1400 audit(1793099044.211:362): avc: denied { ioctl } for pid=2514 comm="syz.1.947" path="/169/bus/proc" dev="loop1" ino=4 ioctlcmd=0x582a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.208931][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.218165][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.225977][ T2553] loop0: detected capacity change from 0 to 128 [ 46.227355][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.242620][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.252144][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 46.261715][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.276285][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.285497][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.294577][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.303708][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.317025][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.326184][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.335356][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.367927][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.387972][ T288] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 46.392626][ T2510] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 46.430814][ T2510] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 46.460227][ T2559] loop3: detected capacity change from 0 to 40427 [ 46.478105][ T2559] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 46.484520][ T2559] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 46.493476][ T2559] F2FS-fs (loop3): invalid crc value [ 46.513170][ T2559] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 46.558154][ T2559] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 46.565292][ T2559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.597058][ T2571] binder: 2568:2571 ioctl c018620c 0 returned -22 [ 46.604464][ T287] syz-executor: attempt to access beyond end of device [ 46.604464][ T287] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 46.648128][ T24] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 46.755205][ T2583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 46.787940][ T28] audit: type=1326 audit(1793099044.811:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.2.960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dc39f559 code=0x7fc00000 [ 46.819639][ T28] audit: type=1326 audit(1793099044.811:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.2.960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f81dc39f559 code=0x7fc00000 [ 46.848589][ T28] audit: type=1326 audit(1793099044.811:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.2.960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dc39f559 code=0x7fc00000 [ 46.875689][ T28] audit: type=1326 audit(1793099044.811:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.2.960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dc39f559 code=0x7fc00000 [ 46.902414][ T28] audit: type=1326 audit(1793099044.811:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.2.960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dc39f559 code=0x7fc00000 [ 46.927589][ T28] audit: type=1326 audit(1793099044.811:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.2.960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dc39f559 code=0x7fc00000 [ 46.958473][ T28] audit: type=1326 audit(1793099044.811:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2536 comm="syz.2.960" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dc39f559 code=0x7fc00000 [ 46.968331][ T2589] loop1: detected capacity change from 0 to 512 [ 47.026640][ T2589] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 47.046831][ T2589] FAT-fs (loop1): Filesystem has been set read-only [ 47.090946][ T2597] loop1: detected capacity change from 0 to 512 [ 47.100935][ T24] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 47.118401][ T24] asix: probe of 5-1:0.34 failed with error -71 [ 47.140846][ T2597] EXT4-fs error (device loop1): ext4_xattr_inode_iget:397: comm syz.1.979: Parent and EA inode have the same ino 15 [ 47.154814][ T24] usb 5-1: USB disconnect, device number 4 [ 47.181663][ T2605] loop2: detected capacity change from 0 to 512 [ 47.190791][ T2597] EXT4-fs (loop1): 1 orphan inode deleted [ 47.196542][ T2597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.217606][ T288] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 47.265037][ T2605] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.275193][ T288] ------------[ cut here ]------------ [ 47.280734][ T288] kernel BUG at fs/namei.c:2962! [ 47.288110][ T2605] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.301074][ T288] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 47.307173][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 47.314722][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.324790][ T288] RIP: 0010:may_delete+0x727/0x730 [ 47.329951][ T288] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 4a dd f3 ff e9 75 fe ff ff e8 00 42 ae ff 0f 0b e8 f9 41 ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 e1 41 [ 47.349575][ T288] RSP: 0018:ffffc9000d2bfc58 EFLAGS: 00010293 [ 47.355650][ T288] RAX: ffffffff81c33127 RBX: ffff888135c47bb0 RCX: ffff88810d4bbcc0 [ 47.363635][ T288] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 47.371617][ T288] RBP: ffffc9000d2bfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 47.379590][ T288] R10: dffffc0000000000 R11: fffff52001a57f68 R12: 1ffff11026b88f76 [ 47.387565][ T288] R13: 0000000000000001 R14: ffff8881331e8140 R15: dffffc0000000000 [ 47.395539][ T288] FS: 0000555585824500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 47.404480][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.411068][ T288] CR2: 00007f177e7f62f8 CR3: 000000012f7f7000 CR4: 00000000003506b0 [ 47.419044][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.427020][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 47.434999][ T288] Call Trace: [ 47.438284][ T288] [ 47.441222][ T288] vfs_rmdir+0x2f/0x4f0 [ 47.445384][ T288] ? incfs_kill_sb+0xec/0x210 [ 47.450079][ T288] incfs_kill_sb+0xfe/0x210 [ 47.454601][ T288] deactivate_locked_super+0xb5/0x120 [ 47.459986][ T288] deactivate_super+0xaf/0xe0 [ 47.464670][ T288] cleanup_mnt+0x45e/0x4e0 [ 47.469090][ T288] __cleanup_mnt+0x19/0x20 [ 47.473512][ T288] task_work_run+0x1e1/0x250 [ 47.478107][ T288] ? __cfi_task_work_run+0x10/0x10 [ 47.483229][ T288] ? __x64_sys_umount+0x12d/0x170 [ 47.488259][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 47.493649][ T288] exit_to_user_mode_loop+0x9b/0xb0 [ 47.498853][ T288] exit_to_user_mode_prepare+0x87/0xd0 [ 47.504310][ T288] syscall_exit_to_user_mode+0x1a/0x30 [ 47.509432][ T2605] EXT4-fs: Cannot change journaled quota options when quota turned on [ 47.509765][ T288] do_syscall_64+0x58/0xa0 [ 47.522308][ T288] ? clear_bhb_loop+0x30/0x80 [ 47.526995][ T288] ? clear_bhb_loop+0x30/0x80 [ 47.531674][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 47.537570][ T288] RIP: 0033:0x7f4e48da0797 [ 47.541984][ T288] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 47.561590][ T288] RSP: 002b:00007ffcc92ccb38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 47.570010][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4e48da0797 [ 47.577976][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc92ccbf0 [ 47.585940][ T288] RBP: 00007ffcc92ccbf0 R08: 00007ffcc92cdbf0 R09: 00000000ffffffff [ 47.593907][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc92cdce0 [ 47.601874][ T288] R13: 00007f4e48e35f63 R14: 000000000000b860 R15: 00007ffcc92cedb0 [ 47.609844][ T288] [ 47.612854][ T288] Modules linked in: [ 47.618057][ T291] EXT4-fs (loop2): unmounting filesystem. [ 47.623744][ T288] ---[ end trace 0000000000000000 ]--- [ 47.629766][ T288] RIP: 0010:may_delete+0x727/0x730 [ 47.634949][ T288] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 4a dd f3 ff e9 75 fe ff ff e8 00 42 ae ff 0f 0b e8 f9 41 ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 e1 41 [ 47.662977][ T288] RSP: 0018:ffffc9000d2bfc58 EFLAGS: 00010293 [ 47.675930][ T288] RAX: ffffffff81c33127 RBX: ffff888135c47bb0 RCX: ffff88810d4bbcc0 [ 47.683982][ T288] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 47.693992][ T288] RBP: ffffc9000d2bfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 47.702126][ T288] R10: dffffc0000000000 R11: fffff52001a57f68 R12: 1ffff11026b88f76 [ 47.710221][ T288] R13: 0000000000000001 R14: ffff8881331e8140 R15: dffffc0000000000 [ 47.718303][ T288] FS: 0000555585824500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 47.727300][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.734081][ T288] CR2: 00007f56011f62f8 CR3: 000000012f7f7000 CR4: 00000000003506b0 [ 47.742191][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.750300][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 47.767937][ T288] Kernel panic - not syncing: Fatal exception [ 47.774226][ T288] Kernel Offset: disabled [ 47.778538][ T288] Rebooting in 86400 seconds..