last executing test programs: 2.21230379s ago: executing program 3 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.10037342s ago: executing program 3 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28740000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022120000"], 0x0}, 0x0) 568.389159ms ago: executing program 4 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fchmod(r2, 0x0) 546.797421ms ago: executing program 4 (id=754): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x4008000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) dup3(r1, r0, 0x0) 537.608612ms ago: executing program 4 (id=755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000480)='kvm_set_spte_hva\x00', r2}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) 451.275019ms ago: executing program 4 (id=759): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 389.740425ms ago: executing program 1 (id=770): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)="d1f7624a6b0e53c3", 0x8}]) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_destroy(r0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) 332.53654ms ago: executing program 4 (id=761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 332.22595ms ago: executing program 0 (id=762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) 332.05586ms ago: executing program 2 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1805c61, 0x0) 331.60174ms ago: executing program 4 (id=764): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 283.395595ms ago: executing program 0 (id=765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000240)="66b9170101c066b857000000f30f1efe0f300f00935b00f30fc737baf80c66b8da5dc98966efbafc0cb80090eff083a30000d3b878000f00d066b9db09000066b87908000066ba000000000f300f01c5660f382599b8000f23f5", 0x5a}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 242.035248ms ago: executing program 1 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 233.859299ms ago: executing program 1 (id=767): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='ext4_mballoc_alloc\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) 221.25873ms ago: executing program 0 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 196.836532ms ago: executing program 3 (id=769): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r0) 190.589503ms ago: executing program 3 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fchmod(r2, 0x0) 190.136953ms ago: executing program 2 (id=781): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 181.120574ms ago: executing program 3 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='overlay\x00', 0xfffffffffffffffd) 145.522357ms ago: executing program 2 (id=773): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000029c4000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 138.483198ms ago: executing program 2 (id=774): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYRES32=r1, @ANYRES16, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x2, 0x1e8, &(0x7f00000001c0)="$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") 128.257379ms ago: executing program 0 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000bf0000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 126.615129ms ago: executing program 1 (id=776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 124.528059ms ago: executing program 3 (id=777): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)="d1f7624a6b0e53c3", 0x8}]) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_destroy(r0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) 76.901503ms ago: executing program 1 (id=778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) 76.329393ms ago: executing program 0 (id=789): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$eJzs3ctrXGUbAPDnTG5N2u9LPvhA6yogaKB0YmpsFVxUXIhgoaBr2zCZhjaTTMlMShMCbRHBjaDFhaCb7gQvdefWy1b/CxfSUmwajLiQkTOZaSfNTDppbo35/eC07zvnTJ73OZf3vDPnMCeAfWsw/ScTcTgiPkoi+muvJxHRVS11RpxcWW55cSGXTklUKm//nlSXWVpcyEXDe1IHa5WnI+LH9yOOZNbGLc3NT44VCvmZWn24PHVxuDQ3f/T81NhEfiI/fXxkdPTYiZdOHN+6XP/4Zf7Q7Y/feP6bk3+999TND39K4mQcqs1rzGOrDMZgbZ10patwlde3OtguS9aZd2AH28HGpIdmx8pRHoejPzqqpRZ6d7JlAMB2uRIRFQBgn0mc/wFgn6l/D7C0uJCrT+t8XbDOxYG96c5rKxeolmrXNpfv599Zu2Z3oHodtG8pWZV8EhEDWxB/MCI+/+7dr9Iptuk6JEAzV69FxNmBwbX9f7LmnoWNeqGNZQYfqjf0f92bDA88wvfp+OflZuO/zP3xTzQZ//Q0OXYfxzrHf03m1haEaSkd/73acG/bckP+NQMdtdp/qmO+ruTc+UI+7dv+GxFD0dWT1kfWiTF07+97reY1jv/uXr+Q9nm5u9cvfPlgicytzp7V7xkfK49tJudGd65FPNPZLP96/79yD1uz8e/pNmO8+coHn7Wal+af5luf0vir899elRsRzzXd/g/uaEvWvT9xuLo7DNd3iia+/fXTvlbxG7d/OqXx658FdkK6/fvWz38gabxfs7TxGD/f6P+h1bxH5998/+9O3qmW64OEy2Pl8sxIRHfy1trXjz14b71eXz7Nf+jZ7qbHf73/a7b/p58Jz7aZf+fta18/fv7bK81/fEPbf+OFm8uTHa3it7f9R6ulodor7fR/7TZwM+sOAAAAAAAAAAAAAAAAAAAAAAAAANqViYhDkWSy98uZTDa78gzv/0dfplAslY+cK85Oj0f1WdkD0ZWp/9Rlf8PvoY7Ufg+/Xj/2UP3FiPhfRHzS01utZ3PFwvhuJw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANQdbPP8/9VvPbrcOANg2B3a7AQDAjnP+B4D9Z2Pn/95tawcAsHN8/geA/cf5HwD2H+d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAttnpU6fSqfLn4kIurY9fmpudLF46Op4vTWanZnPZXHHmYnaiWJwo5LO54lTLP3R15b9CsXhxNKZnLw+X86XycGlu/sxUcXa6fOb81NhE/ky+a8cyAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2lebmJ8cKhfzMnilUKpUrT0Az/g2FjtpO8KS0Z88VMptYdV/sduMfUWjsJXp3p3MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2AP+CQAA//+qiiUU") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='ext4_mballoc_alloc\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) 14.754009ms ago: executing program 0 (id=779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 11.619569ms ago: executing program 2 (id=791): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 10.937489ms ago: executing program 1 (id=780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000240)="66b9170101c066b857000000f30f1efe0f300f00935b00f30fc737baf80c66b8da5dc98966efbafc0cb80090eff083a30000d3b878000f00d066b9db09000066b87908000066ba000000000f300f01c5660f382599b8000f23f5", 0x5a}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=782): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x20, 0x0) kernel console output (not intermixed with test programs): my_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0009/input/input12 [ 31.096909][ T19] uclogic 0003:256C:006D.0009: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 31.166892][ T24] usb 2-1: USB disconnect, device number 4 [ 31.173787][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 31.183624][ T24] ftdi_sio 2-1:0.0: device disconnected [ 31.247762][ T325] usb 4-1: USB disconnect, device number 4 [ 31.329268][ T445] input: syz0 as /devices/virtual/input/input13 [ 31.334442][ T449] loop0: detected capacity change from 0 to 512 [ 31.348604][ T449] EXT4-fs (loop0): invalid journal inode [ 31.696937][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 31.716918][ T402] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.956884][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 31.976913][ T402] usb 3-1: Using ep0 maxpacket: 16 [ 32.026914][ T19] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.036935][ T325] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.088080][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.099259][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.109434][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.120427][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.133010][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.142553][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.151510][ T402] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 32.160348][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.168149][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.176707][ T24] usb 5-1: config 0 descriptor?? [ 32.181810][ T402] usb 3-1: config 0 descriptor?? [ 32.307025][ T325] usb 1-1: Using ep0 maxpacket: 16 [ 32.386943][ T19] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.397800][ T19] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.407376][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 32.416234][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.526933][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 32.532739][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 32.539525][ T24] usb 5-1: USB disconnect, device number 4 [ 32.607030][ T325] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 32.616047][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.623905][ T325] usb 1-1: Product: syz [ 32.627877][ T325] usb 1-1: Manufacturer: syz [ 32.632278][ T325] usb 1-1: SerialNumber: syz [ 32.637529][ T325] usb 1-1: config 0 descriptor?? [ 32.677704][ T402] savu 0003:1E7D:2D5A.000A: item fetching failed at offset 4/5 [ 32.685184][ T402] savu 0003:1E7D:2D5A.000A: parse failed [ 32.691043][ T325] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 32.698390][ T402] savu: probe of 0003:1E7D:2D5A.000A failed with error -22 [ 32.707130][ T325] usb 1-1: Detected FT232H [ 32.896926][ T325] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 32.899555][ T19] logitech-hidpp-device 0003:046D:C086.000B: item fetching failed at offset 2/5 [ 32.912550][ T19] logitech-hidpp-device 0003:046D:C086.000B: hidpp_probe:parse failed [ 32.920529][ T19] logitech-hidpp-device: probe of 0003:046D:C086.000B failed with error -22 [ 32.930865][ T19] usb 3-1: USB disconnect, device number 4 [ 32.951465][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 32.951476][ T28] audit: type=1400 audit(1730844706.261:154): avc: denied { create } for pid=466 comm="syz.4.54" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.978161][ T28] audit: type=1400 audit(1730844706.271:155): avc: denied { map } for pid=466 comm="syz.4.54" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.002246][ T28] audit: type=1400 audit(1730844706.271:156): avc: denied { read write } for pid=466 comm="syz.4.54" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.127092][ T60] usb 4-1: USB disconnect, device number 5 [ 33.236894][ T402] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.357897][ T325] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 33.449088][ T472] loop4: detected capacity change from 0 to 2048 [ 33.458974][ T472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.470114][ T28] audit: type=1400 audit(1730844706.781:157): avc: denied { map } for pid=471 comm="syz.4.57" path="/4/file2/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.472857][ T472] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.507349][ T402] usb 2-1: Using ep0 maxpacket: 16 [ 33.512559][ T472] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 33.524890][ T472] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.524890][ T472] [ 33.534423][ T472] EXT4-fs (loop4): Total free blocks count 0 [ 33.540222][ T472] EXT4-fs (loop4): Free/Dirty block details [ 33.545928][ T472] EXT4-fs (loop4): free_blocks=2415919104 [ 33.551647][ T472] EXT4-fs (loop4): dirty_blocks=16 [ 33.558007][ T472] EXT4-fs (loop4): Block reservation details [ 33.560543][ T369] usb 1-1: USB disconnect, device number 5 [ 33.563790][ T472] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 33.579146][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 33.591296][ T369] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 33.605108][ T369] ftdi_sio 1-1:0.0: device disconnected [ 33.646954][ T402] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 33.656012][ T402] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 33.668123][ T402] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 33.678565][ T402] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 33.688345][ T402] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 33.698755][ T402] usb 2-1: config 1 interface 0 has no altsetting 0 [ 33.706872][ T325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.714181][ T402] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 33.724901][ T402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.787420][ T402] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 33.823378][ T481] loop3: detected capacity change from 0 to 40427 [ 33.833408][ T481] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.858413][ T481] F2FS-fs (loop3): Start checkpoint disabled! [ 33.865964][ T481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 33.889108][ T28] audit: type=1400 audit(1730844707.201:158): avc: denied { read append } for pid=480 comm="syz.3.58" path="/7/file2/memory.swap.current" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.894956][ T481] syz.3.58: attempt to access beyond end of device [ 33.894956][ T481] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 33.913016][ T28] audit: type=1400 audit(1730844707.201:159): avc: denied { map } for pid=480 comm="syz.3.58" path="/7/file2/memory.swap.current" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.958284][ T403] kworker/u4:4: attempt to access beyond end of device [ 33.958284][ T403] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 33.972946][ T403] kworker/u4:4: attempt to access beyond end of device [ 33.972946][ T403] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 33.997943][ T402] scsi host1: usb-storage 2-1:1.0 [ 34.069698][ T492] loop3: detected capacity change from 0 to 512 [ 34.077237][ T492] EXT4-fs (loop3): invalid journal inode [ 34.102688][ T496] input: syz0 as /devices/virtual/input/input14 [ 34.116909][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.136878][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.151377][ T325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.170623][ T325] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.179784][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.197059][ T325] usb 3-1: config 0 descriptor?? [ 34.207502][ T24] usb 2-1: USB disconnect, device number 5 [ 34.229923][ T508] loop3: detected capacity change from 0 to 2048 [ 34.250327][ T508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.260684][ T508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.275485][ T508] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 34.287704][ T508] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.287704][ T508] [ 34.299674][ T508] EXT4-fs (loop3): Total free blocks count 0 [ 34.305503][ T508] EXT4-fs (loop3): Free/Dirty block details [ 34.319942][ T508] EXT4-fs (loop3): free_blocks=2415919104 [ 34.325874][ T508] EXT4-fs (loop3): dirty_blocks=16 [ 34.330862][ T508] EXT4-fs (loop3): Block reservation details [ 34.336779][ T508] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 34.346700][ T403] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 34.506999][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.596971][ T402] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 34.697756][ T325] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 34.707065][ T325] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 34.746924][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 34.832533][ T522] loop1: detected capacity change from 0 to 40427 [ 34.842513][ T522] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.866509][ T522] F2FS-fs (loop1): Start checkpoint disabled! [ 34.872635][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.873267][ T522] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 34.883492][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.900582][ T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 34.909673][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.918219][ T19] usb 1-1: config 0 descriptor?? [ 34.932143][ T522] syz.1.74: attempt to access beyond end of device [ 34.932143][ T522] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 34.955565][ T403] kworker/u4:4: attempt to access beyond end of device [ 34.955565][ T403] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 34.969248][ T403] kworker/u4:4: attempt to access beyond end of device [ 34.969248][ T403] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 34.983875][ T325] usb 3-1: USB disconnect, device number 5 [ 34.996990][ T402] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.008666][ T402] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.018756][ T402] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 35.027615][ T402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.407796][ T19] savu 0003:1E7D:2D5A.000D: item fetching failed at offset 4/5 [ 35.415348][ T19] savu 0003:1E7D:2D5A.000D: parse failed [ 35.420909][ T19] savu: probe of 0003:1E7D:2D5A.000D failed with error -22 [ 35.497983][ T402] logitech-hidpp-device 0003:046D:C086.000E: item fetching failed at offset 2/5 [ 35.513442][ T402] logitech-hidpp-device 0003:046D:C086.000E: hidpp_probe:parse failed [ 35.523880][ T402] logitech-hidpp-device: probe of 0003:046D:C086.000E failed with error -22 [ 35.533232][ T534] loop3: detected capacity change from 0 to 512 [ 35.543809][ T534] EXT4-fs (loop3): invalid journal inode [ 35.620803][ T536] input: syz0 as /devices/virtual/input/input15 [ 35.628633][ T346] usb 1-1: USB disconnect, device number 6 [ 35.702297][ T369] usb 5-1: USB disconnect, device number 5 [ 35.703201][ T541] loop1: detected capacity change from 0 to 512 [ 35.715975][ T541] EXT4-fs (loop1): invalid journal inode [ 35.756916][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.777448][ T547] loop1: detected capacity change from 0 to 2048 [ 35.788975][ T547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.800103][ T547] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.814818][ T547] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 35.826955][ T547] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.826955][ T547] [ 35.836387][ T547] EXT4-fs (loop1): Total free blocks count 0 [ 35.842289][ T547] EXT4-fs (loop1): Free/Dirty block details [ 35.847951][ T547] EXT4-fs (loop1): free_blocks=2415919104 [ 35.853536][ T547] EXT4-fs (loop1): dirty_blocks=16 [ 35.858475][ T547] EXT4-fs (loop1): Block reservation details [ 35.864293][ T547] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 35.873307][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 35.898272][ T552] incfs: iterate_incfs_dir / -22 [ 35.905350][ T28] audit: type=1400 audit(1730844709.211:160): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.986980][ T313] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.996889][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 36.145522][ T28] audit: type=1400 audit(1730844709.451:161): avc: denied { ioctl } for pid=553 comm="syz.1.87" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16332 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.286961][ T19] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 36.295832][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.303779][ T19] usb 3-1: Product: syz [ 36.307781][ T19] usb 3-1: Manufacturer: syz [ 36.312114][ T19] usb 3-1: SerialNumber: syz [ 36.317029][ T19] usb 3-1: config 0 descriptor?? [ 36.346930][ T313] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 36.360199][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 36.367691][ T19] usb 3-1: Detected FT232H [ 36.446950][ T313] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.455901][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.463717][ T313] usb 4-1: SerialNumber: syz [ 36.468150][ T346] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.566915][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 36.706938][ T346] usb 1-1: Using ep0 maxpacket: 16 [ 36.717217][ T28] audit: type=1400 audit(1730844710.031:162): avc: denied { remove_name } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.739438][ T28] audit: type=1400 audit(1730844710.031:163): avc: denied { rename } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.846925][ T346] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 36.855699][ T346] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 36.865293][ T346] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 36.874818][ T346] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 36.884378][ T346] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 36.893897][ T346] usb 1-1: config 1 interface 0 has no altsetting 0 [ 36.900514][ T346] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 36.909356][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.957289][ T346] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 37.047744][ T19] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 37.167522][ T346] scsi host1: usb-storage 1-1:1.0 [ 37.188030][ T313] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 37.251362][ T346] usb 3-1: USB disconnect, device number 6 [ 37.263481][ T346] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 37.274434][ T346] ftdi_sio 3-1:0.0: device disconnected [ 37.369934][ T19] usb 1-1: USB disconnect, device number 7 [ 37.590876][ T346] usb 4-1: USB disconnect, device number 6 [ 37.610451][ T346] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 37.775466][ T609] input: syz0 as /devices/virtual/input/input16 [ 37.926661][ T626] loop0: detected capacity change from 0 to 2048 [ 37.926777][ T628] incfs: iterate_incfs_dir / -22 [ 37.948526][ T626] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.971352][ T626] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.986607][ T626] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 37.998838][ T626] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.998838][ T626] [ 38.008616][ T626] EXT4-fs (loop0): Total free blocks count 0 [ 38.014402][ T626] EXT4-fs (loop0): Free/Dirty block details [ 38.020251][ T626] EXT4-fs (loop0): free_blocks=2415919104 [ 38.025876][ T626] EXT4-fs (loop0): dirty_blocks=16 [ 38.030978][ T626] EXT4-fs (loop0): Block reservation details [ 38.036714][ T626] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 38.046931][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.051575][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 38.051586][ T28] audit: type=1400 audit(1730844711.361:173): avc: denied { name_bind } for pid=637 comm="syz.4.104" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.083077][ T28] audit: type=1400 audit(1730844711.361:174): avc: denied { node_bind } for pid=637 comm="syz.4.104" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.083229][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.111779][ T28] audit: type=1400 audit(1730844711.421:175): avc: denied { create } for pid=639 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.135805][ T28] audit: type=1400 audit(1730844711.421:176): avc: denied { write } for pid=639 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.181546][ T647] loop0: detected capacity change from 0 to 512 [ 38.196778][ T647] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.203225][ T648] input: syz0 as /devices/virtual/input/input17 [ 38.224864][ T647] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.103: iget: bad i_size value: -6917529027641081756 [ 38.238519][ T647] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.103: couldn't read orphan inode 17 (err -117) [ 38.251526][ T647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.259813][ T313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.269515][ T647] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.103: bg 0: block 65: padding at end of block bitmap is not set [ 38.283801][ T647] Quota error (device loop0): write_blk: dquota write failed [ 38.292416][ T647] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 38.303262][ T647] EXT4-fs error (device loop0): ext4_acquire_dquot:6787: comm syz.0.103: Failed to acquire dquot type 0 [ 38.315571][ T647] syz.0.103 (647) used greatest stack depth: 19528 bytes left [ 38.324753][ T292] EXT4-fs (loop0): unmounting filesystem. [ 38.328706][ T658] incfs: iterate_incfs_dir / -22 [ 38.336672][ T660] input: syz0 as /devices/virtual/input/input18 [ 38.337281][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 38.371377][ T28] audit: type=1400 audit(1730844711.681:177): avc: denied { create } for pid=665 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.395476][ T28] audit: type=1400 audit(1730844711.681:178): avc: denied { ioctl } for pid=665 comm="syz.3.114" path="socket:[17450]" dev="sockfs" ino=17450 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.404721][ T670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 38.422372][ T28] audit: type=1400 audit(1730844711.681:179): avc: denied { bind } for pid=665 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.452783][ T28] audit: type=1400 audit(1730844711.681:180): avc: denied { setopt } for pid=665 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.477451][ T675] loop3: detected capacity change from 0 to 512 [ 38.484491][ T675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.498182][ T675] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.119: corrupted in-inode xattr [ 38.511338][ T675] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.524972][ T675] EXT4-fs (loop3): 1 truncate cleaned up [ 38.530710][ T675] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.553482][ T683] loop0: detected capacity change from 0 to 512 [ 38.563187][ T295] EXT4-fs (loop3): unmounting filesystem. [ 38.575610][ T683] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #3: comm syz.0.122: corrupted inode contents [ 38.578566][ T687] loop3: detected capacity change from 0 to 512 [ 38.588368][ T683] EXT4-fs error (device loop0): ext4_dirty_inode:6088: inode #3: comm syz.0.122: mark_inode_dirty error [ 38.604553][ T687] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.605313][ T683] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #3: comm syz.0.122: corrupted inode contents [ 38.618337][ T687] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.123: iget: bad i_size value: -6917529027641081756 [ 38.625396][ T683] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.122: mark_inode_dirty error [ 38.638307][ T687] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.123: couldn't read orphan inode 17 (err -117) [ 38.649392][ T683] EXT4-fs error (device loop0): ext4_acquire_dquot:6787: comm syz.0.122: Failed to acquire dquot type 0 [ 38.660734][ T687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.681344][ T683] EXT4-fs (loop0): 1 orphan inode deleted [ 38.687533][ T683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.696424][ T683] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 38.698796][ T687] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.123: bg 0: block 65: padding at end of block bitmap is not set [ 38.706481][ T403] EXT4-fs error (device loop0): ext4_release_dquot:6810: comm kworker/u4:4: Failed to release dquot type 1 [ 38.720589][ T687] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.123: Failed to acquire dquot type 0 [ 38.731380][ T313] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.753093][ T19] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 38.761922][ T369] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 38.769896][ T295] EXT4-fs (loop3): unmounting filesystem. [ 38.775725][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.783702][ T19] usb 2-1: Product: syz [ 38.787783][ T19] usb 2-1: Manufacturer: syz [ 38.792289][ T19] usb 2-1: SerialNumber: syz [ 38.797114][ T313] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.805262][ T683] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 38.807652][ T19] usb 2-1: config 0 descriptor?? [ 38.818233][ T313] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 38.827281][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.842976][ T292] EXT4-fs (loop0): unmounting filesystem. [ 38.887310][ T19] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 38.894841][ T19] usb 2-1: Detected FT232H [ 39.106928][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 39.177060][ T369] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 39.286910][ T369] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.296351][ T369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 39.317958][ T313] logitech-hidpp-device 0003:046D:C086.000F: item fetching failed at offset 2/5 [ 39.326864][ T369] usb 5-1: SerialNumber: syz [ 39.336951][ T313] logitech-hidpp-device 0003:046D:C086.000F: hidpp_probe:parse failed [ 39.344919][ T313] logitech-hidpp-device: probe of 0003:046D:C086.000F failed with error -22 [ 39.535282][ T24] usb 3-1: USB disconnect, device number 7 [ 39.597911][ T19] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 39.717405][ T700] syz.0.127 (700): /proc/699/oom_adj is deprecated, please use /proc/699/oom_score_adj instead. [ 39.807686][ T24] usb 2-1: USB disconnect, device number 6 [ 39.814713][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 39.824083][ T24] ftdi_sio 2-1:0.0: device disconnected [ 40.037888][ T369] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 40.062032][ T704] input: syz0 as /devices/virtual/input/input19 [ 40.119836][ T717] loop0: detected capacity change from 0 to 512 [ 40.127314][ T717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.157285][ T717] EXT4-fs (loop0): 1 orphan inode deleted [ 40.166742][ T717] EXT4-fs (loop0): 1 truncate cleaned up [ 40.172349][ T717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.191818][ T731] loop2: detected capacity change from 0 to 512 [ 40.192876][ T717] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 40.198350][ T731] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.225668][ T717] EXT4-fs (loop0): Remounting filesystem read-only [ 40.233250][ T731] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.134: corrupted in-inode xattr [ 40.255295][ T731] EXT4-fs (loop2): 1 truncate cleaned up [ 40.261707][ T731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.287954][ T292] EXT4-fs (loop0): unmounting filesystem. [ 40.359071][ T294] EXT4-fs (loop2): unmounting filesystem. [ 40.406799][ T758] input: syz0 as /devices/virtual/input/input20 [ 40.450152][ T402] usb 5-1: USB disconnect, device number 6 [ 40.524355][ T402] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 40.542280][ T764] loop2: detected capacity change from 0 to 512 [ 40.556112][ T764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.579490][ T764] EXT4-fs (loop2): 1 truncate cleaned up [ 40.584949][ T764] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.625298][ T294] EXT4-fs (loop2): unmounting filesystem. [ 40.636952][ T313] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.651423][ T760] loop0: detected capacity change from 0 to 40427 [ 40.663694][ T760] F2FS-fs (loop0): Unrecognized mount option "r9 żźÔflush_merge" or missing value [ 40.686317][ T783] loop2: detected capacity change from 0 to 512 [ 40.695962][ T783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.707444][ T783] EXT4-fs (loop2): 1 orphan inode deleted [ 40.713019][ T783] EXT4-fs (loop2): 1 truncate cleaned up [ 40.718693][ T783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.731406][ T783] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 40.750088][ T783] EXT4-fs (loop2): Remounting filesystem read-only [ 40.762562][ T294] EXT4-fs (loop2): unmounting filesystem. [ 40.863262][ T804] loop0: detected capacity change from 0 to 2048 [ 40.934577][ T812] input: syz0 as /devices/virtual/input/input21 [ 40.982259][ T820] loop3: detected capacity change from 0 to 512 [ 40.989153][ T820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.023737][ T820] EXT4-fs (loop3): 1 orphan inode deleted [ 41.036970][ T313] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.051236][ T830] input: syz0 as /devices/virtual/input/input22 [ 41.056879][ T820] EXT4-fs (loop3): 1 truncate cleaned up [ 41.062827][ T313] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.073169][ T820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.082295][ T313] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 41.102390][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.117244][ T820] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.172969][ T820] EXT4-fs (loop3): Remounting filesystem read-only [ 41.204190][ T295] EXT4-fs (loop3): unmounting filesystem. [ 41.239732][ T838] netlink: 'syz.3.165': attribute type 15 has an invalid length. [ 41.325113][ T832] loop2: detected capacity change from 0 to 40427 [ 41.343583][ T832] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 41.353992][ T825] loop4: detected capacity change from 0 to 40427 [ 41.360482][ T832] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.369109][ T825] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 41.378126][ T825] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.387820][ T832] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.390783][ T825] F2FS-fs (loop4): invalid crc value [ 41.413401][ T825] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.421411][ T853] tipc: Started in network mode [ 41.428765][ T853] tipc: Node identity 7f000001, cluster identity 4711 [ 41.439914][ T853] tipc: Enabled bearer , priority 10 [ 41.447832][ T832] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 41.454921][ T832] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.461170][ T825] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.470171][ T825] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 41.506125][ T859] loop3: detected capacity change from 0 to 1024 [ 41.516950][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.553356][ T411] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 41.553378][ T411] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 41.561388][ T411] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 41.569478][ T411] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 41.577657][ T411] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 41.586644][ T411] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 41.594060][ T411] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 41.597964][ T313] logitech-hidpp-device 0003:046D:C086.0010: item fetching failed at offset 2/5 [ 41.635045][ T313] logitech-hidpp-device 0003:046D:C086.0010: hidpp_probe:parse failed [ 41.645695][ T313] logitech-hidpp-device: probe of 0003:046D:C086.0010 failed with error -22 [ 41.756865][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 41.776678][ T867] loop4: detected capacity change from 0 to 512 [ 41.787191][ T867] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 41.792341][ T861] loop3: detected capacity change from 0 to 40427 [ 41.796423][ T867] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 41.811037][ T369] usb 2-1: USB disconnect, device number 7 [ 41.811845][ T867] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.174: bg 0: block 18: invalid block bitmap [ 41.829231][ T861] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 41.836111][ T867] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 41.836771][ T861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.847118][ T867] EXT4-fs (loop4): 1 truncate cleaned up [ 41.854240][ T861] F2FS-fs (loop3): invalid crc value [ 41.859367][ T867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.865311][ T861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.873248][ T867] ext2 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 41.886976][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.906870][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.916414][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.929054][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 41.929458][ T861] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.937875][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.952631][ T313] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.960201][ T24] usb 1-1: config 0 descriptor?? [ 41.965136][ T861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.997050][ T295] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 41.997068][ T295] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 42.006248][ T295] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 42.034087][ T411] EXT4-fs (loop4): unmounting filesystem. [ 42.327037][ T313] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 42.353618][ T877] loop1: detected capacity change from 0 to 512 [ 42.360350][ T877] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.381613][ T877] EXT4-fs (loop1): 1 orphan inode deleted [ 42.390374][ T877] EXT4-fs (loop1): 1 truncate cleaned up [ 42.395835][ T877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.427012][ T313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.435868][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 42.437706][ T24] ryos 0003:1E7D:31CE.0011: ignoring exceeding usage max [ 42.458454][ T24] ryos 0003:1E7D:31CE.0011: ignoring exceeding usage max [ 42.465476][ T24] ryos 0003:1E7D:31CE.0011: usage index exceeded [ 42.465557][ T877] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 42.471629][ T24] ryos 0003:1E7D:31CE.0011: item 0 0 2 2 parsing failed [ 42.471802][ T24] ryos 0003:1E7D:31CE.0011: parse failed [ 42.479751][ T877] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.486516][ T24] ryos: probe of 0003:1E7D:31CE.0011 failed with error -22 [ 42.506870][ T313] usb 3-1: SerialNumber: syz [ 42.519297][ T877] EXT4-fs (loop1): Remounting filesystem read-only [ 42.551638][ T296] EXT4-fs (loop1): unmounting filesystem. [ 42.557251][ T24] tipc: Node number set to 2130706433 [ 42.632183][ T893] tipc: Started in network mode [ 42.636955][ T893] tipc: Node identity 7f000001, cluster identity 4711 [ 42.643643][ T893] tipc: Enabled bearer , priority 10 [ 42.699732][ T368] usb 1-1: USB disconnect, device number 8 [ 42.744099][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.752093][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.760218][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.767608][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.775834][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.783881][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.791702][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.799444][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.808196][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.815706][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.823545][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.831102][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.839105][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.848459][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.857250][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.864931][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.878843][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.896927][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.904227][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.914330][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.934852][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.943641][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.951002][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.958333][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.965573][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.973081][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.980440][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 42.990888][ T24] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 43.063116][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 43.063130][ T28] audit: type=1400 audit(1730844716.371:204): avc: denied { ioctl } for pid=904 comm="syz.1.191" path="socket:[17989]" dev="sockfs" ino=17989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.120545][ T879] loop4: detected capacity change from 0 to 131072 [ 43.128163][ T879] F2FS-fs (loop4): invalid crc value [ 43.180671][ T879] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.208428][ T313] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 43.247082][ T879] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 43.306726][ T921] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 43.338536][ T923] tipc: Started in network mode [ 43.353347][ T923] tipc: Node identity 7f000001, cluster identity 4711 [ 43.378657][ T923] tipc: Enabled bearer , priority 10 [ 43.458405][ T938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 43.482272][ T28] audit: type=1400 audit(1730844716.791:205): avc: denied { ioctl } for pid=941 comm="syz.1.201" path="socket:[18021]" dev="sockfs" ino=18021 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.611116][ T368] usb 3-1: USB disconnect, device number 8 [ 43.636870][ T368] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 43.753236][ T966] loop4: detected capacity change from 0 to 512 [ 43.756894][ T24] tipc: Node number set to 2130706433 [ 43.771263][ T966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.798288][ T966] EXT4-fs (loop4): 1 orphan inode deleted [ 43.803844][ T966] EXT4-fs (loop4): 1 truncate cleaned up [ 43.809728][ T966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.834625][ T966] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 43.877615][ T966] EXT4-fs (loop4): Remounting filesystem read-only [ 43.905256][ T411] EXT4-fs (loop4): unmounting filesystem. [ 43.986901][ T369] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.038788][ T900] loop3: detected capacity change from 0 to 131072 [ 44.058004][ T900] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 44.064639][ T900] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 44.077445][ T900] F2FS-fs (loop3): invalid crc value [ 44.107143][ T900] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.153295][ T900] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 44.160205][ T900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 44.236907][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 44.356973][ T369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.376852][ T369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.396529][ T369] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.426888][ T369] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 44.440629][ T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.447982][ T946] loop0: detected capacity change from 0 to 131072 [ 44.457711][ T369] usb 2-1: config 0 descriptor?? [ 44.466323][ T946] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 44.481050][ T946] F2FS-fs (loop0): invalid crc value [ 44.488515][ T946] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 44.496919][ T24] tipc: Node number set to 2130706433 [ 44.520311][ T946] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 44.550072][ T28] audit: type=1400 audit(1730844717.861:206): avc: denied { remount } for pid=944 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.633686][ T1011] loop4: detected capacity change from 0 to 256 [ 44.665956][ T1011] FAT-fs (loop4): Directory bread(block 64) failed [ 44.683621][ T1011] FAT-fs (loop4): Directory bread(block 65) failed [ 44.693710][ T1011] FAT-fs (loop4): Directory bread(block 66) failed [ 44.713857][ T1011] FAT-fs (loop4): Directory bread(block 67) failed [ 44.723957][ T1011] FAT-fs (loop4): Directory bread(block 68) failed [ 44.744098][ T1011] FAT-fs (loop4): Directory bread(block 69) failed [ 44.754229][ T1011] FAT-fs (loop4): Directory bread(block 70) failed [ 44.774365][ T1011] FAT-fs (loop4): Directory bread(block 71) failed [ 44.780928][ T1011] FAT-fs (loop4): Directory bread(block 72) failed [ 44.787589][ T1011] FAT-fs (loop4): Directory bread(block 73) failed [ 44.918281][ T369] ryos 0003:1E7D:31CE.0013: ignoring exceeding usage max [ 44.928806][ T369] ryos 0003:1E7D:31CE.0013: ignoring exceeding usage max [ 44.942303][ T369] ryos 0003:1E7D:31CE.0013: usage index exceeded [ 44.954101][ T369] ryos 0003:1E7D:31CE.0013: item 0 0 2 2 parsing failed [ 44.966544][ T369] ryos 0003:1E7D:31CE.0013: parse failed [ 44.976576][ T369] ryos: probe of 0003:1E7D:31CE.0013 failed with error -22 [ 45.063024][ T1022] tipc: Disabling bearer [ 45.123820][ T19] usb 2-1: USB disconnect, device number 8 [ 45.160762][ T1019] loop4: detected capacity change from 0 to 40427 [ 45.202042][ T1019] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.258546][ T1001] loop3: detected capacity change from 0 to 131072 [ 45.266777][ T1001] F2FS-fs (loop3): invalid crc value [ 45.280687][ T1019] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.304202][ T1001] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.371513][ T1001] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 45.698585][ T1045] loop3: detected capacity change from 0 to 512 [ 45.766332][ T1055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.226'. [ 45.776130][ T1045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.779257][ T1023] loop2: detected capacity change from 0 to 131072 [ 45.785118][ T1045] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff) [ 45.800929][ T1023] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 45.809643][ T1023] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 45.822377][ T1023] F2FS-fs (loop2): invalid crc value [ 45.837663][ T1023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.865222][ T295] EXT4-fs (loop3): unmounting filesystem. [ 45.876081][ T1066] loop0: detected capacity change from 0 to 2048 [ 45.880614][ T1023] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.889168][ T1023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 45.913376][ T1066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.937443][ T1023] loop0: detected capacity change from 2048 to 0 [ 45.947157][ T402] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.967339][ T1066] EXT4-fs error (device loop0): __ext4_new_inode:1071: comm syz.0.230: reserved inode found cleared - inode=1 [ 46.007996][ T292] EXT4-fs (loop0): unmounting filesystem. [ 46.141108][ T1073] loop3: detected capacity change from 0 to 40427 [ 46.154563][ T1073] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 46.162592][ T1073] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 46.177436][ T1073] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.214353][ T1073] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 46.221279][ T1073] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.322478][ T28] audit: type=1400 audit(1730844719.631:207): avc: denied { bind } for pid=1096 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.341548][ T402] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 46.368771][ T28] audit: type=1400 audit(1730844719.651:208): avc: denied { name_bind } for pid=1096 comm="syz.3.236" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.390384][ T28] audit: type=1400 audit(1730844719.651:209): avc: denied { node_bind } for pid=1096 comm="syz.3.236" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.412450][ T28] audit: type=1400 audit(1730844719.681:210): avc: denied { bind } for pid=1101 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.431739][ T402] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.440974][ T402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.449033][ T402] usb 2-1: SerialNumber: syz [ 47.137990][ T402] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 47.540127][ T60] usb 2-1: USB disconnect, device number 9 [ 47.586777][ T60] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 47.787061][ T943] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.788199][ T1059] Bluetooth: hci0: command 0x1003 tx timeout [ 47.860948][ T1149] loop2: detected capacity change from 0 to 512 [ 47.867621][ T1149] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.880767][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.908982][ T1149] EXT4-fs (loop2): 1 orphan inode deleted [ 47.914539][ T1149] EXT4-fs (loop2): 1 truncate cleaned up [ 47.921336][ T1154] loop3: detected capacity change from 0 to 2048 [ 47.927588][ T1149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.969083][ T1149] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.993455][ T1154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.000460][ T1149] EXT4-fs (loop2): Remounting filesystem read-only [ 48.027998][ T1154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.044843][ T294] EXT4-fs (loop2): unmounting filesystem. [ 48.068618][ T1154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 48.088190][ T1154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.088190][ T1154] [ 48.102003][ T28] audit: type=1400 audit(1730844721.411:211): avc: denied { ioctl } for pid=1153 comm="syz.3.246" path="/57/file1/file1" dev="loop3" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.147724][ T1154] EXT4-fs (loop3): Total free blocks count 0 [ 48.170100][ T1154] EXT4-fs (loop3): Free/Dirty block details [ 48.175882][ T1154] EXT4-fs (loop3): free_blocks=2415919104 [ 48.202280][ T1154] EXT4-fs (loop3): dirty_blocks=64 [ 48.207659][ T1154] EXT4-fs (loop3): Block reservation details [ 48.214397][ T28] audit: type=1400 audit(1730844721.521:212): avc: denied { ioctl } for pid=1166 comm="syz.2.249" path="socket:[18843]" dev="sockfs" ino=18843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.214875][ T1154] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 48.280104][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.446735][ T1150] loop4: detected capacity change from 0 to 131072 [ 48.453910][ T1150] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 48.460568][ T1150] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 48.466891][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.469231][ T1150] F2FS-fs (loop4): invalid crc value [ 48.482418][ T1150] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.506529][ T1150] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 48.513434][ T1150] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 48.586964][ T368] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 48.718471][ T28] audit: type=1400 audit(1730844722.031:213): avc: denied { create } for pid=1193 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.738999][ T28] audit: type=1400 audit(1730844722.031:214): avc: denied { bind } for pid=1193 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.759397][ T28] audit: type=1400 audit(1730844722.031:215): avc: denied { node_bind } for pid=1193 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 48.837000][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 48.875836][ T28] audit: type=1400 audit(1730844722.181:216): avc: denied { ioctl } for pid=1208 comm="syz.2.266" path="socket:[18388]" dev="sockfs" ino=18388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.901424][ T1205] loop4: detected capacity change from 0 to 2048 [ 48.918822][ T1205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.931233][ T1205] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.937107][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.947000][ T1205] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 48.956559][ T368] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.968158][ T1205] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.968158][ T1205] [ 48.980781][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.993216][ T1205] EXT4-fs (loop4): Total free blocks count 0 [ 48.999506][ T1215] device batadv_slave_1 entered promiscuous mode [ 49.003815][ T1205] EXT4-fs (loop4): Free/Dirty block details [ 49.015631][ T1205] EXT4-fs (loop4): free_blocks=2415919104 [ 49.021235][ T19] usb 2-1: SerialNumber: syz [ 49.021281][ T1205] EXT4-fs (loop4): dirty_blocks=64 [ 49.030842][ T1205] EXT4-fs (loop4): Block reservation details [ 49.034110][ T1214] device batadv_slave_1 left promiscuous mode [ 49.036660][ T1205] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 49.060800][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.084618][ T1218] syz.4.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.087120][ T368] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.104358][ T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.113949][ T368] usb 4-1: SerialNumber: syz [ 49.200377][ T28] audit: type=1400 audit(1730844722.511:217): avc: denied { mount } for pid=1230 comm="syz.2.274" name="/" dev="ramfs" ino=18405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.232694][ T1235] loop4: detected capacity change from 0 to 128 [ 49.248624][ T1235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.259421][ T1235] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038 (0x7fffffff) [ 49.289012][ T411] EXT4-fs (loop4): unmounting filesystem. [ 49.718099][ T19] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 49.819278][ T368] cdc_ether 4-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 49.947596][ T943] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.947612][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 49.969466][ T1276] device batadv_slave_1 entered promiscuous mode [ 49.976270][ T1275] device batadv_slave_1 left promiscuous mode [ 50.141712][ T325] usb 2-1: USB disconnect, device number 10 [ 50.168196][ T325] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 50.241602][ T369] usb 4-1: USB disconnect, device number 7 [ 50.248801][ T369] cdc_ether 4-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 50.687328][ T1333] loop1: detected capacity change from 0 to 2048 [ 50.697044][ T1339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 50.704262][ T1333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.733001][ T1333] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.749468][ T1333] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 50.770340][ T1333] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.770340][ T1333] [ 50.793716][ T1333] EXT4-fs (loop1): Total free blocks count 0 [ 50.813259][ T1333] EXT4-fs (loop1): Free/Dirty block details [ 50.826442][ T1333] EXT4-fs (loop1): free_blocks=2415919104 [ 50.835772][ T1333] EXT4-fs (loop1): dirty_blocks=64 [ 50.840830][ T1333] EXT4-fs (loop1): Block reservation details [ 50.847941][ T1333] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 50.872685][ T43] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.874600][ T1358] device batadv_slave_1 entered promiscuous mode [ 50.931348][ T28] audit: type=1400 audit(1730844724.241:218): avc: denied { load_policy } for pid=1368 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.932336][ T1357] device batadv_slave_1 left promiscuous mode [ 50.957287][ T1369] SELinux: failed to load policy [ 50.980004][ T1373] loop2: detected capacity change from 0 to 256 [ 50.988886][ T1373] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 51.004887][ T28] audit: type=1400 audit(1730844724.311:219): avc: denied { read } for pid=1372 comm="syz.2.300" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.033805][ T28] audit: type=1400 audit(1730844724.341:220): avc: denied { open } for pid=1372 comm="syz.2.300" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.069010][ T1379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.302'. [ 51.114767][ T1384] loop2: detected capacity change from 0 to 2048 [ 51.130048][ T1384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.143982][ T1384] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.159259][ T1384] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 51.171801][ T1384] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.171801][ T1384] [ 51.181603][ T1384] EXT4-fs (loop2): Total free blocks count 0 [ 51.187578][ T1384] EXT4-fs (loop2): Free/Dirty block details [ 51.193671][ T1384] EXT4-fs (loop2): free_blocks=2415919104 [ 51.199761][ T1384] EXT4-fs (loop2): dirty_blocks=64 [ 51.205051][ T1384] EXT4-fs (loop2): Block reservation details [ 51.212649][ T1384] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 51.227141][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.327142][ T402] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 51.697077][ T402] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.806952][ T402] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.815799][ T402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.823841][ T402] usb 1-1: SerialNumber: syz [ 52.527944][ T402] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 52.930074][ T402] usb 1-1: USB disconnect, device number 9 [ 52.957110][ T402] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 52.987997][ T1059] Bluetooth: hci0: command 0x1003 tx timeout [ 52.996979][ T943] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.053481][ T1441] device batadv_slave_1 entered promiscuous mode [ 53.066326][ T1440] device batadv_slave_1 left promiscuous mode [ 53.119873][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 53.119890][ T28] audit: type=1400 audit(1730844726.421:222): avc: denied { write } for pid=1452 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.157573][ T1462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'. [ 53.192979][ T1468] Driver unsupported XDP return value 0 on prog (id 132) dev N/A, expect packet loss! [ 53.233891][ T1475] loop1: detected capacity change from 0 to 2048 [ 53.240362][ T690] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.258543][ T1475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 53.277652][ T1475] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.292470][ T1475] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 53.304727][ T1475] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.304727][ T1475] [ 53.314245][ T1475] EXT4-fs (loop1): Total free blocks count 0 [ 53.320112][ T1475] EXT4-fs (loop1): Free/Dirty block details [ 53.325782][ T1475] EXT4-fs (loop1): free_blocks=2415919104 [ 53.331403][ T1475] EXT4-fs (loop1): dirty_blocks=32 [ 53.336282][ T1475] EXT4-fs (loop1): Block reservation details [ 53.342210][ T1475] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 53.350179][ T1480] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.306964][ T1059] Bluetooth: hci0: command 0x1003 tx timeout [ 55.306964][ T943] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.341075][ T1505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'. [ 55.345113][ T1509] loop1: detected capacity change from 0 to 2048 [ 55.378432][ T1509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.396971][ T28] audit: type=1400 audit(1730844728.701:223): avc: denied { mounton } for pid=1501 comm="syz.1.348" path="/50/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.446013][ T296] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.449635][ T28] audit: type=1400 audit(1730844728.751:224): avc: denied { rmdir } for pid=296 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.492658][ T1527] loop2: detected capacity change from 0 to 128 [ 55.498698][ T1529] syz.3.351[1529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.499093][ T1529] syz.3.351[1529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.513066][ T296] EXT4-fs (loop1): unmounting filesystem. [ 55.536329][ T28] audit: type=1400 audit(1730844728.801:225): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.592210][ T1533] loop2: detected capacity change from 0 to 1024 [ 55.609398][ T28] audit: type=1400 audit(1730844728.801:226): avc: denied { unlink } for pid=296 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 55.619612][ T1533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.634520][ T28] audit: type=1400 audit(1730844728.811:227): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 55.660727][ T1533] EXT4-fs: Ignoring removed orlov option [ 55.666355][ T1533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.721715][ T1533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.742308][ T28] audit: type=1400 audit(1730844729.051:228): avc: denied { getopt } for pid=1544 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.766036][ T28] audit: type=1400 audit(1730844729.051:229): avc: denied { mount } for pid=1532 comm="syz.2.352" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.797246][ T28] audit: type=1400 audit(1730844729.061:230): avc: denied { watch } for pid=1532 comm="syz.2.352" path="/82/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.801928][ T1554] loop4: detected capacity change from 0 to 2048 [ 55.820352][ T28] audit: type=1400 audit(1730844729.101:231): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.827510][ T294] EXT4-fs (loop2): unmounting filesystem. [ 55.888680][ T1554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.891399][ T1562] loop2: detected capacity change from 0 to 512 [ 55.907852][ T1562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.922625][ T1564] loop3: detected capacity change from 0 to 128 [ 55.923918][ T411] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.944939][ T1562] EXT4-fs (loop2): 1 truncate cleaned up [ 55.950703][ T1562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.964489][ T411] EXT4-fs (loop4): unmounting filesystem. [ 55.972557][ T1562] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #2: comm syz.2.361: Siphash requires key [ 55.984607][ T1562] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.361: Hash code is SIPHASH, but hash not in dirent [ 56.001036][ T1562] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.361: Corrupt directory, running e2fsck is recommended [ 56.014466][ T1562] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.361: Hash code is SIPHASH, but hash not in dirent [ 56.028964][ T1562] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.361: Corrupt directory, running e2fsck is recommended [ 56.049987][ T294] EXT4-fs (loop2): unmounting filesystem. [ 56.116927][ T60] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 56.126138][ T1579] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 56.146905][ T402] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 56.255712][ T1585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.367172][ T369] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.386896][ T402] usb 1-1: Using ep0 maxpacket: 8 [ 56.477007][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.487965][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.498172][ T60] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 56.507122][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.515440][ T60] usb 2-1: config 0 descriptor?? [ 56.667126][ T402] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 56.676192][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.683940][ T402] usb 1-1: Product: syz [ 56.688009][ T402] usb 1-1: Manufacturer: syz [ 56.692401][ T402] usb 1-1: SerialNumber: syz [ 56.697550][ T402] usb 1-1: config 0 descriptor?? [ 56.737399][ T402] usb_ehset_test: probe of 1-1:0.0 failed with error -32 [ 56.756965][ T369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.767767][ T369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.777326][ T369] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 56.786271][ T369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.794485][ T369] usb 5-1: config 0 descriptor?? [ 56.939962][ T402] usb 1-1: USB disconnect, device number 10 [ 56.977573][ T1558] syz.1.362[1558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.977645][ T1558] syz.1.362[1558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.998063][ T60] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 57.016073][ T60] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 57.022776][ T60] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 57.029645][ T60] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 57.036725][ T60] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 57.045432][ T60] wacom 0003:056A:5000.0014: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.1-1/input0 [ 57.201551][ T60] usb 2-1: USB disconnect, device number 11 [ 57.287862][ T369] logitech-djreceiver 0003:046D:C70E.0015: unknown main item tag 0x0 [ 57.295783][ T369] logitech-djreceiver 0003:046D:C70E.0015: unknown main item tag 0x0 [ 57.303774][ T369] logitech-djreceiver 0003:046D:C70E.0015: unknown main item tag 0x0 [ 57.311785][ T369] logitech-djreceiver 0003:046D:C70E.0015: unknown main item tag 0x0 [ 57.319670][ T369] logitech-djreceiver 0003:046D:C70E.0015: unknown main item tag 0x0 [ 57.327539][ T369] logitech-djreceiver 0003:046D:C70E.0015: unknown main item tag 0x0 [ 57.335428][ T369] logitech-djreceiver 0003:046D:C70E.0015: unknown main item tag 0x0 [ 57.457442][ T403] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.458202][ T1600] loop0: detected capacity change from 0 to 128 [ 57.494142][ T60] usb 5-1: USB disconnect, device number 7 [ 57.569233][ T1610] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 57.777192][ T1623] SELinux: failed to load policy [ 57.802284][ T1627] devtmpfs: Unknown parameter 'posixacl' [ 57.947434][ T1642] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 58.091537][ T1658] loop4: detected capacity change from 0 to 256 [ 58.102404][ T1658] FAT-fs (loop4): Directory bread(block 64) failed [ 58.108816][ T1658] FAT-fs (loop4): Directory bread(block 65) failed [ 58.115427][ T1658] FAT-fs (loop4): Directory bread(block 66) failed [ 58.122364][ T1658] FAT-fs (loop4): Directory bread(block 67) failed [ 58.126932][ T369] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 58.130475][ T1658] FAT-fs (loop4): Directory bread(block 68) failed [ 58.144038][ T1658] FAT-fs (loop4): Directory bread(block 69) failed [ 58.150770][ T1658] FAT-fs (loop4): Directory bread(block 70) failed [ 58.157605][ T1658] FAT-fs (loop4): Directory bread(block 71) failed [ 58.163998][ T1658] FAT-fs (loop4): Directory bread(block 72) failed [ 58.170675][ T1658] FAT-fs (loop4): Directory bread(block 73) failed [ 58.226895][ T60] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 58.427320][ T369] usb 3-1: Using ep0 maxpacket: 8 [ 58.446919][ T402] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 58.596955][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.607668][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.617215][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 58.626038][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.635190][ T60] usb 1-1: config 0 descriptor?? [ 58.686928][ T402] usb 5-1: Using ep0 maxpacket: 16 [ 58.716941][ T369] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 58.725808][ T369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.733619][ T369] usb 3-1: Product: syz [ 58.737607][ T369] usb 3-1: Manufacturer: syz [ 58.741995][ T369] usb 3-1: SerialNumber: syz [ 58.746847][ T369] usb 3-1: config 0 descriptor?? [ 58.787378][ T369] usb_ehset_test: probe of 3-1:0.0 failed with error -32 [ 58.816943][ T402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.827760][ T402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.837299][ T402] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.849990][ T402] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.858820][ T402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.867350][ T402] usb 5-1: config 0 descriptor?? [ 58.993145][ T368] usb 3-1: USB disconnect, device number 9 [ 59.097434][ T1645] syz.0.396[1645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.097485][ T1645] syz.0.396[1645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.128452][ T60] wacom 0003:056A:5000.0016: unknown main item tag 0x0 [ 59.147511][ T60] wacom 0003:056A:5000.0016: unknown main item tag 0x0 [ 59.154105][ T60] wacom 0003:056A:5000.0016: unknown main item tag 0x0 [ 59.160808][ T60] wacom 0003:056A:5000.0016: unknown main item tag 0x0 [ 59.167480][ T60] wacom 0003:056A:5000.0016: unknown main item tag 0x0 [ 59.174711][ T60] wacom 0003:056A:5000.0016: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.0-1/input0 [ 59.330753][ T60] usb 1-1: USB disconnect, device number 11 [ 59.347791][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.355130][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.362305][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.369601][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.376641][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.383985][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.391124][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.398353][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.405360][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.412402][ T402] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 59.422199][ T402] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input29 [ 59.433908][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 59.433919][ T28] audit: type=1400 audit(1730844732.741:237): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=796 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.435265][ T402] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 59.442112][ T28] audit: type=1400 audit(1730844732.741:238): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=796 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.473536][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 59.473621][ T1498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.498432][ T28] audit: type=1400 audit(1730844732.811:239): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=796 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.544619][ T403] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.555224][ T19] usb 5-1: USB disconnect, device number 8 [ 59.634355][ T403] Bluetooth: hci1: Frame reassembly failed (-84) [ 60.134808][ T1683] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 60.161872][ T28] audit: type=1400 audit(1730844733.471:240): avc: denied { setopt } for pid=1684 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.204672][ T28] audit: type=1400 audit(1730844733.471:241): avc: denied { bind } for pid=1684 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.285445][ T1696] syz.4.417[1696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.285488][ T1696] syz.4.417[1696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.297173][ T1696] tmpfs: Unknown parameter 'nolazytime˙˙' [ 60.336894][ T402] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 60.726907][ T402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.736892][ T368] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 60.745041][ T402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.754779][ T402] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 60.764216][ T402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.772522][ T402] usb 1-1: config 0 descriptor?? [ 61.096929][ T368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.107741][ T368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.117257][ T368] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 61.126099][ T368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.134730][ T368] usb 5-1: config 0 descriptor?? [ 61.258340][ T402] logitech-djreceiver 0003:046D:C70E.0018: unknown main item tag 0x0 [ 61.266376][ T402] logitech-djreceiver 0003:046D:C70E.0018: unknown main item tag 0x0 [ 61.274342][ T402] logitech-djreceiver 0003:046D:C70E.0018: unknown main item tag 0x0 [ 61.285642][ T402] logitech-djreceiver 0003:046D:C70E.0018: unknown main item tag 0x0 [ 61.301063][ T402] logitech-djreceiver 0003:046D:C70E.0018: unknown main item tag 0x0 [ 61.312864][ T402] logitech-djreceiver 0003:046D:C70E.0018: unknown main item tag 0x0 [ 61.324162][ T402] logitech-djreceiver 0003:046D:C70E.0018: unknown main item tag 0x0 [ 61.460870][ T402] usb 1-1: USB disconnect, device number 12 [ 61.546935][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 61.547085][ T1498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.553121][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.607379][ T1705] syz.4.419[1705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.607429][ T1705] syz.4.419[1705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.629910][ T368] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 61.648111][ T369] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 61.655589][ T368] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 61.663495][ T368] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 61.670714][ T368] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 61.677462][ T368] wacom 0003:056A:5000.0019: unknown main item tag 0x0 [ 61.684714][ T368] wacom 0003:056A:5000.0019: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.4-1/input0 [ 61.707000][ T1498] Bluetooth: hci1: command 0x1003 tx timeout [ 61.707014][ T943] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 61.730204][ T1718] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 61.747489][ T1720] loop2: detected capacity change from 0 to 1024 [ 61.756614][ T1720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.769609][ T28] audit: type=1400 audit(1730844735.081:242): avc: denied { setattr } for pid=1719 comm="syz.2.426" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.792911][ T294] EXT4-fs (loop2): unmounting filesystem. [ 61.806751][ T28] audit: type=1400 audit(1730844735.111:243): avc: denied { read } for pid=1723 comm="syz.2.427" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.826600][ T28] audit: type=1400 audit(1730844735.121:244): avc: denied { connect } for pid=1723 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.854513][ T368] usb 5-1: USB disconnect, device number 9 [ 61.862918][ T28] audit: type=1400 audit(1730844735.121:245): avc: denied { write } for pid=1723 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.004905][ T1731] loop2: detected capacity change from 0 to 40427 [ 62.024442][ T1731] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 62.031935][ T1731] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.040079][ T369] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 62.052326][ T369] usb 4-1: config 0 has no interface number 0 [ 62.058912][ T1731] F2FS-fs (loop2): Image doesn't support compression [ 62.065096][ T1737] loop0: detected capacity change from 0 to 512 [ 62.068547][ T369] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.087041][ T1737] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.087201][ T369] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.098818][ T1731] F2FS-fs (loop2): invalid crc value [ 62.107997][ T369] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 62.113256][ T1737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 62.121809][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.129788][ T1737] System zones: 1-12 [ 62.140732][ T369] usb 4-1: config 0 descriptor?? [ 62.145843][ T1737] EXT4-fs (loop0): 1 truncate cleaned up [ 62.146366][ T1731] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.151420][ T1737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 62.181288][ T292] EXT4-fs (loop0): unmounting filesystem. [ 62.195324][ T1731] F2FS-fs (loop2): Start checkpoint disabled! [ 62.202488][ T1731] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 62.203658][ T1742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.435'. [ 62.209513][ T1731] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 62.257498][ T690] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.414456][ T28] audit: type=1400 audit(1730844735.721:246): avc: denied { read write } for pid=1761 comm="syz.1.443" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.597778][ T369] logitech-djreceiver 0003:046D:C71B.001A: item fetching failed at offset 5/7 [ 62.606871][ T369] logitech-djreceiver 0003:046D:C71B.001A: logi_dj_probe: parse failed [ 62.615045][ T369] logitech-djreceiver: probe of 0003:046D:C71B.001A failed with error -22 [ 62.657262][ T368] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 62.805063][ T369] usb 4-1: USB disconnect, device number 8 [ 62.906873][ T368] usb 5-1: Using ep0 maxpacket: 16 [ 63.037010][ T368] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 63.045894][ T368] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 63.055782][ T368] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 63.065651][ T368] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 63.075524][ T368] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 63.085073][ T368] usb 5-1: config 1 interface 0 has no altsetting 0 [ 63.091567][ T368] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 63.100632][ T368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.157288][ T368] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 63.183968][ T1774] loop2: detected capacity change from 0 to 4096 [ 63.190553][ T1774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.199638][ T1774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 63.217528][ T294] EXT4-fs (loop2): unmounting filesystem. [ 63.244433][ T1778] loop2: detected capacity change from 0 to 2048 [ 63.251877][ T1778] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.277694][ T1782] loop1: detected capacity change from 0 to 1024 [ 63.278487][ T1778] ext4 filesystem being mounted at /110/bus supports timestamps until 2038 (0x7fffffff) [ 63.284317][ T1782] ext4: Bad value for 'sb' [ 63.303647][ T1778] fs-verity: sha512 using implementation "sha512-avx2" [ 63.343328][ T1790] loop1: detected capacity change from 0 to 512 [ 63.352176][ T1790] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.370411][ T368] scsi host1: usb-storage 5-1:1.0 [ 63.370554][ T1790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.400525][ T1790] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.454: invalid indirect mapped block 4294967295 (level 1) [ 63.416561][ T1790] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.454: invalid indirect mapped block 4294967295 (level 1) [ 63.431267][ T1790] EXT4-fs (loop1): 2 truncates cleaned up [ 63.521109][ T296] EXT4-fs unmount: 3 callbacks suppressed [ 63.521124][ T296] EXT4-fs (loop1): unmounting filesystem. [ 63.539770][ T1806] loop1: detected capacity change from 0 to 512 [ 63.546266][ T1806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.556686][ T1806] EXT4-fs (loop1): 1 truncate cleaned up [ 63.562350][ T1806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 63.576785][ T24] usb 5-1: USB disconnect, device number 10 [ 63.586984][ T1809] loop3: detected capacity change from 0 to 128 [ 63.596057][ T1809] syz.3.459: attempt to access beyond end of device [ 63.596057][ T1809] loop3: rw=2051, sector=96, nr_sectors = 287 limit=128 [ 63.596861][ T296] EXT4-fs (loop1): unmounting filesystem. [ 63.627827][ T313] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.681157][ T1823] binder: 1822:1823 ioctl c0306201 20000580 returned -14 [ 63.886942][ T313] usb 3-1: Using ep0 maxpacket: 16 [ 63.987120][ T402] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 64.007069][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.017813][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.027463][ T313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.040076][ T313] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.048924][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.057662][ T313] usb 3-1: config 0 descriptor?? [ 64.226881][ T402] usb 4-1: Using ep0 maxpacket: 32 [ 64.267109][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 64.273031][ T943] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.288012][ T313] usb 3-1: can't set config #0, error -71 [ 66.295435][ T313] usb 3-1: USB disconnect, device number 10 [ 66.366930][ T402] usb 4-1: device descriptor read/all, error -71 [ 66.396090][ T1891] Zero length message leads to an empty skb [ 66.412591][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.511248][ T1889] loop0: detected capacity change from 0 to 40427 [ 66.521352][ T1889] F2FS-fs (loop0): heap/no_heap options were deprecated [ 66.528994][ T1889] F2FS-fs (loop0): invalid crc value [ 66.534923][ T1889] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.557887][ T1889] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.569638][ T1889] syz.0.493: attempt to access beyond end of device [ 66.569638][ T1889] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.570021][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 66.570032][ T28] audit: type=1400 audit(1730844739.859:255): avc: denied { create } for pid=1887 comm="syz.0.493" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.609201][ T28] audit: type=1400 audit(1730844739.879:256): avc: denied { unlink } for pid=1887 comm="syz.0.493" name="file0" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.609359][ T292] syz-executor: attempt to access beyond end of device [ 66.609359][ T292] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 66.799026][ T28] audit: type=1400 audit(1730844740.089:257): avc: denied { write } for pid=1910 comm="syz.2.503" name="/" dev="incremental-fs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.841052][ T28] audit: type=1400 audit(1730844740.089:258): avc: denied { add_name } for pid=1910 comm="syz.2.503" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.862197][ T28] audit: type=1400 audit(1730844740.089:259): avc: denied { associate } for pid=1910 comm="syz.2.503" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.885101][ T28] audit: type=1400 audit(1730844740.089:260): avc: denied { remove_name } for pid=1910 comm="syz.2.503" name="bus" dev="incremental-fs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.908092][ T28] audit: type=1400 audit(1730844740.089:261): avc: denied { rmdir } for pid=1910 comm="syz.2.503" name="bus" dev="incremental-fs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.954009][ T1921] loop2: detected capacity change from 0 to 128 [ 67.114306][ T1925] loop0: detected capacity change from 0 to 40427 [ 67.124104][ T1925] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.151219][ T1925] F2FS-fs (loop0): Start checkpoint disabled! [ 67.158000][ T1925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 67.186593][ T28] audit: type=1326 audit(1730844740.469:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.1.514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe89eb7e719 code=0x0 [ 67.217868][ T1888] kworker/u4:6: attempt to access beyond end of device [ 67.217868][ T1888] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 67.276939][ T368] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 67.355812][ T28] audit: type=1400 audit(1730844740.639:263): avc: denied { mounton } for pid=1946 comm="syz.0.517" path=2F3130302FE91F7189591E9233614B dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 67.356216][ T60] kernel write not supported for file bpf-prog (pid: 60 comm: kworker/1:2) [ 67.476890][ T402] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 67.536887][ T368] usb 3-1: Using ep0 maxpacket: 16 [ 67.716871][ T402] usb 4-1: Using ep0 maxpacket: 32 [ 67.766932][ T313] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 67.826960][ T368] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 67.835906][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.836932][ T402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.843910][ T368] usb 3-1: Product: syz [ 67.854710][ T402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.858602][ T368] usb 3-1: Manufacturer: syz [ 67.868380][ T402] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 67.872701][ T368] usb 3-1: SerialNumber: syz [ 67.881646][ T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.890215][ T368] r8152-cfgselector 3-1: config 0 descriptor?? [ 67.894775][ T402] usb 4-1: config 0 descriptor?? [ 68.041436][ T1958] syz.1.522[1958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.041499][ T1958] syz.1.522[1958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.136968][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.158825][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.168374][ T313] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 68.177204][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.187560][ T313] usb 1-1: config 0 descriptor?? [ 68.377651][ T402] greenasia 0003:0E8F:0012.001B: item fetching failed at offset 0/3 [ 68.385579][ T402] greenasia 0003:0E8F:0012.001B: parse failed [ 68.391429][ T402] greenasia: probe of 0003:0E8F:0012.001B failed with error -22 [ 68.426977][ T943] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.427104][ T1498] Bluetooth: hci0: command 0x1003 tx timeout [ 68.438818][ T368] r8152-cfgselector 3-1: Unknown version 0x0000 [ 68.444922][ T368] r8152-cfgselector 3-1: bad CDC descriptors [ 68.466956][ T368] r8152-cfgselector 3-1: Unknown version 0x0000 [ 68.475389][ T368] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 68.482356][ T369] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 68.504971][ T28] audit: type=1400 audit(1730844741.789:264): avc: denied { mount } for pid=1968 comm="syz.4.526" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.553392][ T1975] loop4: detected capacity change from 0 to 512 [ 68.559945][ T1975] EXT4-fs: Ignoring removed i_version option [ 68.566620][ T1975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 68.574432][ T1975] System zones: 1-12 [ 68.579451][ T1975] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.529: bg 0: block 131: padding at end of block bitmap is not set [ 68.590622][ T60] usb 4-1: USB disconnect, device number 10 [ 68.595190][ T1975] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 68.608221][ T1975] EXT4-fs (loop4): 1 truncate cleaned up [ 68.613677][ T1975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.631196][ T411] EXT4-fs (loop4): unmounting filesystem. [ 68.667997][ T313] lg-g15 0003:046D:C222.001C: unknown main item tag 0x0 [ 68.674861][ T313] lg-g15 0003:046D:C222.001C: unknown main item tag 0x0 [ 68.681999][ T313] lg-g15 0003:046D:C222.001C: unknown main item tag 0x0 [ 68.689166][ T313] lg-g15 0003:046D:C222.001C: unknown main item tag 0x0 [ 68.696734][ T313] lg-g15 0003:046D:C222.001C: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 68.707535][ T1983] loop4: detected capacity change from 0 to 256 [ 68.822675][ T1987] loop4: detected capacity change from 0 to 40427 [ 68.831784][ T1987] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.854622][ T1987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.868756][ T60] usb 1-1: USB disconnect, device number 13 [ 68.877963][ T411] syz-executor: attempt to access beyond end of device [ 68.877963][ T411] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 68.898660][ T369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.911227][ T369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.921335][ T369] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 68.942092][ T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.963896][ T369] usb 2-1: config 0 descriptor?? [ 68.989744][ T1997] loop2: detected capacity change from 0 to 16 [ 68.996197][ T1997] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 69.006665][ T1997] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 69.017710][ T1997] erofs: (device loop2): mounted with root inode @ nid 36. [ 69.032627][ T1997] syz.2.538: attempt to access beyond end of device [ 69.032627][ T1997] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 69.046532][ T1997] syz.2.538: attempt to access beyond end of device [ 69.046532][ T1997] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 69.319158][ T2023] loop2: detected capacity change from 0 to 512 [ 69.326082][ T2023] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.337432][ T2023] EXT4-fs (loop2): 1 truncate cleaned up [ 69.342983][ T2023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.360030][ T294] EXT4-fs (loop2): unmounting filesystem. [ 69.367016][ T313] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 69.396474][ T2029] loop2: detected capacity change from 0 to 2048 [ 69.418880][ T2029] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.437818][ T369] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 69.445789][ T368] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 69.458712][ T294] EXT4-fs (loop2): unmounting filesystem. [ 69.479391][ T2046] xt_hashlimit: size too large, truncated to 1048576 [ 69.480311][ T369] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 69.505986][ T369] hid-thrustmaster 0003:044F:B65D.001D: Wrong number of endpoints? [ 69.696960][ T368] usb 4-1: Using ep0 maxpacket: 32 [ 69.709766][ T60] usb 2-1: USB disconnect, device number 12 [ 69.726863][ C0] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -2 [ 69.736948][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.747767][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.757699][ T313] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 69.767184][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.775644][ T313] usb 5-1: config 0 descriptor?? [ 70.037133][ T368] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 70.050924][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.059039][ T368] usb 4-1: Product: syz [ 70.064723][ T368] usb 4-1: Manufacturer: syz [ 70.069446][ T368] usb 4-1: SerialNumber: syz [ 70.074302][ T368] usb 4-1: config 0 descriptor?? [ 70.116910][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 70.160061][ T2075] loop0: detected capacity change from 0 to 1024 [ 70.177836][ T2075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.194091][ T292] EXT4-fs (loop0): unmounting filesystem. [ 70.265868][ T2091] syz.0.578[2091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.265947][ T2091] syz.0.578[2091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.278877][ T313] holtek 0003:1241:5015.001E: item fetching failed at offset 1/5 [ 70.301775][ T313] holtek 0003:1241:5015.001E: parse failed [ 70.308029][ T313] holtek: probe of 0003:1241:5015.001E failed with error -22 [ 70.356893][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 70.476962][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.488025][ T313] usb 5-1: USB disconnect, device number 11 [ 70.488131][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.503474][ T24] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 70.512410][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.520966][ T24] usb 3-1: config 0 descriptor?? [ 70.758640][ T368] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 70.957936][ T60] usb 4-1: USB disconnect, device number 11 [ 71.017415][ T2146] syz.4.592[2146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.017486][ T2146] syz.4.592[2146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.077540][ T368] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 71.206345][ T2169] process 'syz.4.601' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 71.256973][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 71.262928][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 71.280037][ T24] usb 3-1: USB disconnect, device number 12 [ 71.407009][ T19] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 71.477038][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.488069][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.497698][ T368] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 71.506639][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.515192][ T368] usb 2-1: config 0 descriptor?? [ 71.557055][ T313] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 71.777112][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.787950][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.798555][ T19] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 71.807660][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.816492][ T19] usb 1-1: config 0 descriptor?? [ 71.946922][ T313] usb 5-1: config 1 interface 0 has no altsetting 0 [ 71.997558][ T368] holtek 0003:1241:5015.001F: collection stack underflow [ 72.005056][ T368] holtek 0003:1241:5015.001F: item 0 1 0 12 parsing failed [ 72.012304][ T368] holtek 0003:1241:5015.001F: parse failed [ 72.018090][ T368] holtek: probe of 0003:1241:5015.001F failed with error -22 [ 72.117053][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 72.126211][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.133991][ T313] usb 5-1: Product: syz [ 72.138071][ T313] usb 5-1: Manufacturer: syz [ 72.142476][ T313] usb 5-1: SerialNumber: syz [ 72.198027][ T368] usb 2-1: USB disconnect, device number 13 [ 72.308418][ T19] magicmouse 0003:05AC:0269.0020: item fetching failed at offset 6/7 [ 72.317779][ T19] magicmouse 0003:05AC:0269.0020: magicmouse hid parse failed [ 72.325079][ T19] magicmouse: probe of 0003:05AC:0269.0020 failed with error -22 [ 72.508774][ T368] usb 1-1: USB disconnect, device number 14 [ 72.587113][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 72.708085][ T2197] loop2: detected capacity change from 0 to 40427 [ 72.715118][ T2197] F2FS-fs (loop2): fault_injection options not supported [ 72.722744][ T2197] F2FS-fs (loop2): invalid crc value [ 72.728855][ T2197] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.753091][ T2197] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.768418][ T294] syz-executor: attempt to access beyond end of device [ 72.768418][ T294] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 72.842626][ T313] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 72.946962][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.957813][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.968960][ T24] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 72.977984][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.997125][ T24] usb 4-1: config 0 descriptor?? [ 73.042884][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 73.042900][ T28] audit: type=1400 audit(1730844746.329:283): avc: denied { read write } for pid=2178 comm="syz.4.606" name="lp0" dev="devtmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 73.043664][ T313] usb 5-1: USB disconnect, device number 12 [ 73.050420][ T28] audit: type=1400 audit(1730844746.329:284): avc: denied { open } for pid=2178 comm="syz.4.606" path="/dev/usb/lp0" dev="devtmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 73.073698][ T313] usblp0: removed [ 73.102367][ T28] audit: type=1400 audit(1730844746.329:285): avc: denied { ioctl } for pid=2178 comm="syz.4.606" path="/dev/usb/lp0" dev="devtmpfs" ino=859 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 73.151163][ T2213] loop0: detected capacity change from 0 to 16 [ 73.157888][ T2213] erofs: (device loop0): mounted with root inode @ nid 36. [ 73.176869][ T2215] syz.0.619[2215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.176937][ T2215] syz.0.619[2215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.196792][ T2217] loop0: detected capacity change from 0 to 256 [ 73.216134][ T2217] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 73.228449][ T2217] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 73.276970][ T325] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 73.298782][ T28] audit: type=1400 audit(1730844746.589:286): avc: denied { read append open } for pid=2216 comm="syz.0.620" path="/128/file2/net_prio.prioidx" dev="loop0" ino=1048632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.330873][ T28] audit: type=1400 audit(1730844746.619:287): avc: denied { map } for pid=2216 comm="syz.0.620" path="/128/file2/net_prio.prioidx" dev="loop0" ino=1048632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.392022][ T2229] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 73.416466][ T2233] xt_hashlimit: size too large, truncated to 1048576 [ 73.462912][ T24] hid-led 0003:1D34:000A.0021: unknown main item tag 0x0 [ 73.516877][ T325] usb 3-1: Using ep0 maxpacket: 16 [ 73.550886][ T2246] loop0: detected capacity change from 0 to 512 [ 73.559379][ T2246] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 73.572899][ T2246] block device autoloading is deprecated and will be removed. [ 73.591567][ T2246] EXT4-fs (loop0): external journal has bad superblock [ 73.599596][ T2248] loop4: detected capacity change from 0 to 128 [ 73.613978][ T2248] EXT4-fs: Ignoring removed nobh option [ 73.621949][ T2248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.630767][ T2248] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038 (0x7fffffff) [ 73.640807][ T325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.653298][ T325] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 73.663030][ T325] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 73.676003][ T325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.681402][ T28] audit: type=1400 audit(1730844746.969:288): avc: denied { execute } for pid=2247 comm="syz.4.634" path="/113/mnt/cpuset.memory_pressure_enabled" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.685110][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.719779][ T411] EXT4-fs (loop4): unmounting filesystem. [ 73.726924][ T24] hid-led: probe of 0003:1D34:000A.0021 failed with error -71 [ 73.738766][ T24] usb 4-1: USB disconnect, device number 12 [ 73.748057][ T28] audit: type=1400 audit(1730844747.039:289): avc: denied { write } for pid=2254 comm="syz.0.637" name="tcp" dev="proc" ino=4026532313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.763123][ T2259] input: syz1 as /devices/virtual/input/input34 [ 73.781874][ T28] audit: type=1400 audit(1730844747.069:290): avc: denied { write } for pid=2256 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.801951][ T2208] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 73.813109][ T28] audit: type=1400 audit(1730844747.069:291): avc: denied { nlmsg_write } for pid=2256 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.842562][ T2263] capability: warning: `syz.4.639' uses deprecated v2 capabilities in a way that may be insecure [ 73.866266][ T325] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 73.887398][ T2269] loop4: detected capacity change from 0 to 512 [ 73.903242][ T2272] netem: change failed [ 73.921014][ T28] audit: type=1400 audit(1730844747.209:292): avc: denied { relabelfrom } for pid=2275 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.941680][ T2269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.952246][ T2269] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038 (0x7fffffff) [ 74.004629][ T411] EXT4-fs (loop4): unmounting filesystem. [ 74.065618][ T2287] loop4: detected capacity change from 0 to 512 [ 74.078613][ T325] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 74.095884][ T325] usb 3-1: USB disconnect, device number 13 [ 74.116077][ T2287] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.650: casefold flag without casefold feature [ 74.155072][ T2287] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.650: couldn't read orphan inode 16 (err -117) [ 74.187352][ T2287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.207292][ T2287] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038 (0x7fffffff) [ 74.227840][ T2295] loop1: detected capacity change from 0 to 8192 [ 74.260170][ T2287] EXT4-fs (loop4): shut down requested (2) [ 74.290119][ T411] EXT4-fs (loop4): unmounting filesystem. [ 74.343504][ T2295] loop1: detected capacity change from 0 to 512 [ 74.360600][ T2295] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 74.376798][ T2295] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.385999][ T2295] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.393363][ T2295] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.653: Invalid block bitmap block 0 in block_group 0 [ 74.406922][ T2295] EXT4-fs (loop1): Remounting filesystem read-only [ 74.413310][ T2295] EXT4-fs error (device loop1): ext4_acquire_dquot:6787: comm syz.1.653: Failed to acquire dquot type 1 [ 74.424457][ T2295] EXT4-fs (loop1): 1 orphan inode deleted [ 74.430622][ T2295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.453391][ T296] EXT4-fs (loop1): unmounting filesystem. [ 74.467285][ T2308] IPv6: sit1: Disabled Multicast RS [ 74.537040][ T60] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 74.599395][ T2321] loop2: detected capacity change from 0 to 256 [ 74.656919][ T313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 74.826877][ T19] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 74.869879][ T2341] loop2: detected capacity change from 0 to 2048 [ 74.896927][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.898219][ T2341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.907845][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.916110][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 74.929248][ T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.944077][ T2341] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.944907][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.969727][ T294] EXT4-fs (loop2): unmounting filesystem. [ 74.972074][ T60] usb 4-1: config 0 descriptor?? [ 75.076926][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.086594][ T313] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 75.095618][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 75.100531][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.108802][ T313] usb 5-1: config 0 descriptor?? [ 75.247113][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 75.258270][ T19] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 75.268435][ T2306] 9pnet_fd: p9_fd_create_tcp (2306): problem connecting socket to 127.0.0.1 [ 75.268640][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.376964][ T19] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 75.396035][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.404085][ T19] usb 2-1: SerialNumber: syz [ 75.426953][ T2319] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 75.447238][ T19] hub 2-1:1.0: bad descriptor, ignoring hub [ 75.452954][ T19] hub: probe of 2-1:1.0 failed with error -5 [ 75.457864][ T60] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 75.468462][ T60] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 75.487749][ T60] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 75.514677][ T2377] SELinux: failed to load policy [ 75.577915][ T313] hid-multitouch 0003:1FD2:6007.0023: unknown main item tag 0x2 [ 75.585384][ T313] hid-multitouch 0003:1FD2:6007.0023: unknown main item tag 0x0 [ 75.594561][ T313] hid-multitouch 0003:1FD2:6007.0023: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 75.647921][ T2319] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 75.670037][ T60] usb 4-1: USB disconnect, device number 13 [ 75.782506][ T313] usb 5-1: USB disconnect, device number 13 [ 75.826909][ T346] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 76.167160][ T19] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 76.197593][ T19] usb 2-1: USB disconnect, device number 14 [ 76.206969][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.226144][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.243698][ T346] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 76.252819][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.263633][ T346] usb 1-1: config 0 descriptor?? [ 76.425976][ T2403] SELinux: failed to load policy [ 76.738717][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.747697][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.758067][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.767711][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.774665][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.781499][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.788225][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.794975][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.801889][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.808664][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.815417][ T346] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 76.822847][ T2385] 9pnet_fd: p9_fd_create_tcp (2385): problem connecting socket to 127.0.0.1 [ 76.826494][ T346] lg-g15 0003:046D:C222.0024: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 76.896902][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 76.949984][ T346] usb 1-1: USB disconnect, device number 15 [ 77.157343][ T60] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 77.257203][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.275214][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.296868][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.297664][ T2431] SELinux: failed to load policy [ 77.305750][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.331040][ T24] usb 2-1: config 0 descriptor?? [ 77.359331][ T2434] loop4: detected capacity change from 0 to 2048 [ 77.399321][ T2434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.406927][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 77.424632][ T411] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.452750][ T411] EXT4-fs (loop4): unmounting filesystem. [ 77.527371][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.549512][ T60] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 77.559620][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.571628][ T60] usb 3-1: config 0 descriptor?? [ 77.708668][ T2459] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 77.716933][ T325] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 77.808859][ T24] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 77.817603][ T24] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 77.837790][ T24] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 78.014067][ T24] usb 2-1: USB disconnect, device number 15 [ 78.037705][ T60] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x2 [ 78.045257][ T60] hid-multitouch 0003:1FD2:6007.0026: unknown main item tag 0x0 [ 78.053568][ T60] hid-multitouch 0003:1FD2:6007.0026: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 78.086922][ T325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.097620][ T325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.107166][ T325] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 78.116001][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.124594][ T325] usb 4-1: config 0 descriptor?? [ 78.240407][ T346] usb 3-1: USB disconnect, device number 14 [ 78.565479][ T2484] loop1: detected capacity change from 0 to 16 [ 78.572881][ T2484] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.609503][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 78.609517][ T28] audit: type=1400 audit(1730844751.899:452): avc: denied { unmount } for pid=411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 78.610368][ T325] uclogic 0003:28BD:0074.0027: interface is invalid, ignoring [ 78.618490][ T28] audit: type=1400 audit(1730844751.899:453): avc: denied { create } for pid=2487 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.662393][ T28] audit: type=1400 audit(1730844751.929:454): avc: denied { ioctl } for pid=2487 comm="syz.1.734" path="socket:[24078]" dev="sockfs" ino=24078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.717597][ T28] audit: type=1400 audit(1730844751.999:455): avc: denied { mounton } for pid=2493 comm="syz.1.738" path="/proc/316/task" dev="proc" ino=24617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 78.740382][ T28] audit: type=1400 audit(1730844751.999:456): avc: denied { mount } for pid=2493 comm="syz.1.738" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.780119][ T28] audit: type=1400 audit(1730844752.069:457): avc: denied { create } for pid=2499 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.812741][ T325] usb 4-1: USB disconnect, device number 14 [ 78.818840][ T28] audit: type=1400 audit(1730844752.069:458): avc: denied { setopt } for pid=2499 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.859583][ T28] audit: type=1400 audit(1730844752.149:459): avc: denied { name_bind } for pid=2513 comm="syz.4.745" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.891162][ T28] audit: type=1400 audit(1730844752.159:460): avc: denied { unmount } for pid=411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.925104][ T28] audit: type=1400 audit(1730844752.209:461): avc: denied { unlink } for pid=2521 comm="syz.1.749" name="#f" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.061321][ T2538] bridge0: port 4(vlan2) entered blocking state [ 79.069416][ T2538] bridge0: port 4(vlan2) entered disabled state [ 79.343267][ T2568] loop1: detected capacity change from 0 to 2048 [ 79.363382][ T2568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.391404][ T2568] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.444528][ T296] EXT4-fs (loop1): unmounting filesystem. [ 79.467988][ T2587] loop2: detected capacity change from 0 to 16 [ 79.475208][ T2587] erofs: (device loop2): mounted with root inode @ nid 36. [ 79.504186][ T2595] loop0: detected capacity change from 0 to 2048 [ 79.518188][ T2595] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.530323][ T2595] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.549276][ T292] EXT4-fs (loop0): unmounting filesystem. [ 79.560632][ T2598] ------------[ cut here ]------------ [ 79.566086][ T2598] kernel BUG at fs/buffer.c:2714! [ 79.573067][ T2598] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 79.578954][ T2598] CPU: 1 PID: 2598 Comm: kmmpd-loop0 Not tainted 6.1.112-syzkaller-00110-g976b055754d7 #0 [ 79.588687][ T2598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.598568][ T2598] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 79.603774][ T2598] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 d0 e6 ff e9 b0 fe ff ff e8 6a 66 9f ff 0f 0b e8 63 66 9f ff <0f> 0b e8 5c 66 9f ff 0f 0b e8 55 66 9f ff 0f 0b e8 4e 66 9f ff 0f [ 79.623746][ T2598] RSP: 0018:ffffc90006d3fc20 EFLAGS: 00010293 [ 79.629641][ T2598] RAX: ffffffff81d63dad RBX: 0000000000000000 RCX: ffff88811ca9bcc0 [ 79.637455][ T2598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.645348][ T2598] RBP: ffffc90006d3fc70 R08: ffffffff81d63980 R09: ffffed102610a055 [ 79.653320][ T2598] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 79.661415][ T2598] R13: 1ffff1102610a054 R14: ffff8881308502a0 R15: 0000000000003801 [ 79.669366][ T2598] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 79.678409][ T2598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.684829][ T2598] CR2: 0000001b2e21fffc CR3: 00000001348c8000 CR4: 00000000003526a0 [ 79.692638][ T2598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.700536][ T2598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.708345][ T2598] Call Trace: [ 79.711478][ T2598] [ 79.714253][ T2598] ? __die_body+0x62/0xb0 [ 79.718415][ T2598] ? die+0x88/0xb0 [ 79.721973][ T2598] ? do_trap+0x103/0x330 [ 79.726053][ T2598] ? submit_bh_wbc+0x4cd/0x4f0 [ 79.730650][ T2598] ? handle_invalid_op+0x95/0xc0 [ 79.735424][ T2598] ? submit_bh_wbc+0x4cd/0x4f0 [ 79.740025][ T2598] ? exc_invalid_op+0x32/0x50 [ 79.744537][ T2598] ? asm_exc_invalid_op+0x1b/0x20 [ 79.749399][ T2598] ? submit_bh_wbc+0xa0/0x4f0 [ 79.753914][ T2598] ? submit_bh_wbc+0x4cd/0x4f0 [ 79.758513][ T2598] ? submit_bh_wbc+0x4cd/0x4f0 [ 79.763112][ T2598] ? __kasan_check_read+0x11/0x20 [ 79.767977][ T2598] submit_bh+0x1d/0x30 [ 79.771878][ T2598] write_mmp_block_thawed+0x3a0/0x570 [ 79.777086][ T2598] ? read_mmp_block+0x7d0/0x7d0 [ 79.781773][ T2598] ? update_process_times+0x1b0/0x1b0 [ 79.786983][ T2598] write_mmp_block+0x12b/0x2a0 [ 79.791582][ T2598] kmmpd+0x263/0xa10 [ 79.795316][ T2598] ? write_mmp_block_thawed+0x570/0x570 [ 79.800694][ T2598] ? __kthread_parkme+0x12d/0x180 [ 79.805554][ T2598] kthread+0x26d/0x300 [ 79.809458][ T2598] ? write_mmp_block_thawed+0x570/0x570 [ 79.814842][ T2598] ? kthread_blkcg+0xd0/0xd0 [ 79.819268][ T2598] ret_from_fork+0x1f/0x30 [ 79.823522][ T2598] [ 79.826383][ T2598] Modules linked in: [ 79.831786][ T2598] ---[ end trace 0000000000000000 ]--- [ 79.837142][ T2598] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 79.842317][ T2598] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 d0 e6 ff e9 b0 fe ff ff e8 6a 66 9f ff 0f 0b e8 63 66 9f ff <0f> 0b e8 5c 66 9f ff 0f 0b e8 55 66 9f ff 0f 0b e8 4e 66 9f ff 0f [ 79.867988][ T2598] RSP: 0018:ffffc90006d3fc20 EFLAGS: 00010293 [ 79.879666][ T2598] RAX: ffffffff81d63dad RBX: 0000000000000000 RCX: ffff88811ca9bcc0 [ 79.887533][ T2598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.895446][ T2598] RBP: ffffc90006d3fc70 R08: ffffffff81d63980 R09: ffffed102610a055 [ 79.903291][ T2598] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 79.911274][ T2598] R13: 1ffff1102610a054 R14: ffff8881308502a0 R15: 0000000000003801 [ 79.919246][ T2598] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 79.928204][ T2598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.934636][ T2598] CR2: 00007f118f109178 CR3: 0000000110652000 CR4: 00000000003526a0 [ 79.942475][ T2598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.950372][ T2598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.958222][ T2598] Kernel panic - not syncing: Fatal exception [ 79.964269][ T2598] Kernel Offset: disabled [ 79.968383][ T2598] Rebooting in 86400 seconds..