last executing test programs: 15.353349544s ago: executing program 2 (id=268): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @auto="bab2c74f06f262e9"}, 0x40, 0x0, '\x00', @b}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$FUSE_INIT(r1, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x2, 0x3, 0x4, 0x6, 0x8001}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') (async) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x90864, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 15.262018788s ago: executing program 2 (id=269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x0, 0x0, 0x18, 0x0, 0xc, 0x7f, 0x4, 0xb, 0xe, 0x13, 0x0, 0x70, 0x0, 0xd, 0xf, 0x0, 0x3, 0x3, 0xe, '\x00', 0x1, 0x4}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000300), &(0x7f0000000340)=@udp6=r7, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000b40)={@link_local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cee9ff", 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x3, 0xa4, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xe543ba6e7aed585c, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) 15.056789039s ago: executing program 2 (id=272): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000200), 0x12) sendfile(r3, r3, 0x0, 0x9) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f00000000c0)={0x9, 0x4, 0x4b4b}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet(0x2, 0xa, 0x8) r7 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="e904a20000000180c20000000800450000240000"], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r10, 0x0, 0x6, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[], 0xffffffa1) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r12, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r13, 0x4400ae8f, &(0x7f00000001c0)={"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"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r13, 0x4400ae8f, &(0x7f00000001c0)={"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"}) close(r9) write(r0, 0x0, 0x0) 14.486063486s ago: executing program 2 (id=277): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@discard}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x563, &(0x7f0000001240)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x8000014, 0x1c, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1600000000000000b40000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000790057ed0000000018000000190000000000000000000000950020000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x18}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r5, &(0x7f0000000240)=ANY=[], 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtclass={0x58, 0x28, 0x100, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0xfff1, 0xffe0}, {0x1, 0x9}, {0xb, 0xfff1}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0xd}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_multiq={0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x401}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r7, 0x4, 0x9, 0x3, 0x3ef, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0x7, 0x1dc69420}}) symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000380)='./bus\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f00000006c0)}, 0x10) sendmsg$netlink(r8, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000130001002abd7000f8dbdf2504004f8008003300", @ANYRES32, @ANYBLOB="1800258014001c002001000000000000000000000000000108001300", @ANYRES16, @ANYBLOB='o8\b\x00.'], 0x50}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) setns(r1, 0x8000000) 14.354373573s ago: executing program 2 (id=278): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000000101040000000000000000020000fd3c1829b3c4be7f8008000100e000000108000200e000000104000280050001000000000004000f8008000840000000003bab084406e7e24158862c3f209221208d8b32dcc5b381dfcbb2387cfacbea0f2b223cf35c3b5b29eb44a6c55f62a7e90f95962100ced9b0"], 0x44}, 0x1, 0x0, 0x0, 0x20000814}, 0x40c0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_control_io$printer(r3, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x20, 0x4, 0xa3, {0xa3, 0xd, "27c847269b6bda29261d6c3ac429206b7b6b16b87f1fae0fed9c577772082a662819050a910fecb956f90756f17efde1d8efa5b35b1b1919e2b401d16c45398a8b4107c8ad71182b2ac02a7b0ed4cd212f0c4092aa7af1f5022ab5aaf3067eab318ffa715476024d264c3d6415fd5482eb338c3bc5cb5ea8aa93941479ab4450e0472773a08d8fbda1b2eeb0e91b8667557ababe335b70643fee5a848386d1690e"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4074d6bd7f928e9a}}}, &(0x7f0000000980)={0x34, &(0x7f0000000580)={0x0, 0x6, 0xb1, "30d99f19ce94161b9c8b749142a23c205342fa0d20462c1343ea372d6128fe0830c5a784839ba24ee5a369d660f3732109ed9e30cc158d7cdf1c613f3a9ad87b975d7e8187f5f739554c09aada7a65cae420e1f9f862a93c08791006cd6881e14fc276f7f399c4c8d4acd5c1b5a64a8bbe93c26cfd135a0e97539b348a6ebdb8adef05f2b61fb32ec10ba23b5ba538135e6a711b5bb0b094c0ddec675aa3eea3a4b60de5e1b4fd2485b94044e4b506ddd6"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xe8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x0, 0x6b, {0x69, "ecabb683067716106af8734f06062803dcdd2cddb13ae987218a7d9dc2050b72ca287e7f89ca22a6f257be840fda4bdca2ff0ebd9c11b4ca6b63cd9c46438bfbff61a749155e65cf81bacbe56b6bb1765c060e31a1d6e120da5858baadfba0c916d441708a908d14f7"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0x8}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$int_in(r4, 0x5421, &(0x7f0000000540)=0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000720a00ff000000007900380000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000c5cf000000000000009500000800000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa9}, 0x94) 14.261274457s ago: executing program 2 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4, 0x7ffc0000}]}) ioperm(0x8000, 0x2, 0x2) ioperm(0x0, 0x9d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5519, &(0x7f000000b280)="$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") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) r3 = timerfd_create(0x0, 0x80000) r4 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x290) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xffffffffffff891e) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000140)=""/183, 0xb7}], 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x8, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}) 14.180394552s ago: executing program 32 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4, 0x7ffc0000}]}) ioperm(0x8000, 0x2, 0x2) ioperm(0x0, 0x9d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5519, &(0x7f000000b280)="$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") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) r3 = timerfd_create(0x0, 0x80000) r4 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x290) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xffffffffffff891e) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000140)=""/183, 0xb7}], 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x8, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}) 6.669417476s ago: executing program 0 (id=342): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.959941239s ago: executing program 0 (id=349): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='\x00', 0x1, 0x0, 0x0, 0x2}]) 3.7154473s ago: executing program 5 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004a00030025bd7000000000000a008000", @ANYBLOB='\a'], 0x1c}, 0x1, 0x0, 0x0, 0x8100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000180)={[{@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.71346269s ago: executing program 5 (id=358): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) 3.71317699s ago: executing program 5 (id=359): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.789529825s ago: executing program 3 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x19, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x9, 0xfd, 0x10000000100004, 0x8001, 0x455, 0xb, 0x3, 0xffffffff, 0x8, 0x9, 0x1, 0x20000000000fc, 0x2, 0x4], 0x8080000, 0x42003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.725996828s ago: executing program 5 (id=362): r0 = creat(0x0, 0x12e) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.703141789s ago: executing program 5 (id=363): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x94) 2.67136825s ago: executing program 5 (id=364): syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r0 = gettid() timer_create(0x6, &(0x7f0000000800)={0x0, 0x34, 0x4, @tid=r0}, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'sit0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb70b, 0x58f, [{0x0, 0x20008000, 0x4, 0x80000000}]}}, @TCA_U32_LINK={0x8, 0x3, 0x5}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1200000, &(0x7f0000000200)=ANY=[@ANYBLOB="8f8670e14080ae9eff00"], 0x84, 0x14fc, &(0x7f0000001680)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x4221030) keyctl$get_security(0x11, r7, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x44050}, 0x0) setuid(0xee01) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r7) 2.405755524s ago: executing program 3 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x26) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x29) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000002c0)=0x9}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x7, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0xd, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0x9}, {0x7, 0x9, 0xe, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf4, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7c, 0xd, 0xb, '\x00', 0xb}, {0xd5, 0xd, 0x8, '\x00', 0x6}, {0x6, 0x28, 0x80, '\x00', 0x5}, {0xff, 0xb, 0xfe, '\x00', 0xff}, {0xfe, 0xa, 0x26, '\x00', 0x6}, {0xcf, 0xb, 0x1, '\x00', 0x6}, {0xf, 0x4, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x10, 0x6, 0x2, '\x00', 0x7}, {0x2, 0x9, 0x0, '\x00', 0xf}, {0x3, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x84, 0x10, '\x00', 0xff}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noquota}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@auto_da_alloc}, {@journal_checksum}, {@nouser_xattr}, {@noacl}, {@dioread_nolock}, {@resgid}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x5cdd, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0xfe6e4365ec8a4cca, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bfe000/0x400000)=nil) r13 = syz_kvm_add_vcpu$x86(r12, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x295}]}) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000140)={0x7, 0xfff4, 0xc, 0x3, 0x17}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x2, 0xffffffffffffffff, 0x1}) 1.553390705s ago: executing program 0 (id=371): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='./bus\x00', 0x400005b6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0xa, 0x401d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) recvmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000001fc0)}, 0x5}], 0x1, 0x10000, 0x0) socket$inet(0x2, 0x3, 0x401) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) ioprio_get$pid(0x1, r5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) setgroups(0x0, 0x0) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000300), &(0x7f0000000340)=r8}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) 1.505600817s ago: executing program 0 (id=372): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.289212477s ago: executing program 4 (id=377): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) 1.278566528s ago: executing program 4 (id=378): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0xb, 0x155f, 0x10000006, 0x4, 0x3ff, 0x1, 0xb4, 0xfa97, 0x2, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x20000403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x0, 0x100002, 0xc3, 0x5d6, 0x7, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x4, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c68, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x80b, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x9d, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x4], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x9, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x800003, 0x10010, 0x7, 0xdd81, 0x4, 0x7b, 0x9d27, 0x9, 0x1, 0x100, 0x1, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x806, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0xb4, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x4643, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0000000020901010000000000000000010000015400020014001d080002007f0000010c000280050001002f00000006000340000300000c00028005000100010000000c00028005000100000000000600034009660000060003400000000008000540000000083000020c0476c263a823c4f527586a5d31d09e002c000180140003000000000000000000000000000000000114130400fe8000000000000000000000000000070000000000000000007dde979b3e1bdeb27196368f62847e3dec4d1188a44965b0281977cbb8bbb9cf3248e73d"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000100), 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000280)="0f322e3e2e0f01ca9ac1a1bf000f208366b8010000000f01d965d137baf80c66b8284de88466efbafc0ced6766c74424008e0000006766c74424025b0000006766c744240600000000670f011c24b804010f00d06766c7442400cf6100006766c7442402080000006766c744240600000000670f011424", 0x77}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r8, 0x0, 0x4, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.23348876s ago: executing program 3 (id=379): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 703.272766ms ago: executing program 1 (id=380): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000280)=0xb4, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x400}) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x7a97, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) close_range(r4, r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x80045515, 0xffffffffffffffff) 480.987367ms ago: executing program 1 (id=381): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1ad}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x6, 0x3, 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, 0x0) bind$inet(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) 446.535019ms ago: executing program 1 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1, 0x5d2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 438.018539ms ago: executing program 0 (id=383): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000380), 0x10) syz_io_uring_setup(0x2f53, &(0x7f0000000040)={0x0, 0x3077, 0x0, 0x1, 0x339}, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_complete(0x0, r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) close(0x3) connect$can_bcm(r0, &(0x7f0000001cc0), 0x10) close(0x3) 382.857182ms ago: executing program 1 (id=384): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 381.809502ms ago: executing program 1 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x44b, 0x70bd2b, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001, 0x2001e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0xf}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xc45}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) 346.716823ms ago: executing program 4 (id=386): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x94) 342.054393ms ago: executing program 3 (id=387): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1ee) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x44) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 302.548925ms ago: executing program 4 (id=388): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) 290.592736ms ago: executing program 3 (id=389): r0 = syz_open_procfs(0x0, &(0x7f0000000880)='clear_refs\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f00000018c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f00000008c0)="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", 0x874}], 0x2) 272.173597ms ago: executing program 1 (id=390): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='checkpoint=enable') (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x32874000) clock_adjtime(0x0, &(0x7f0000000300)={0xffff, 0x2000000000000000, 0x5, 0x1, 0x407, 0x8, 0x7, 0x0, 0x7ff, 0x7fffffffffffffff, 0x0, 0x378, 0x5, 0x2, 0x0, 0x40, 0x4, 0xfffffffffffffffb, 0x5, 0x3, 0x8, 0x2, 0x7c9, 0x9, 0x8, 0xfffffffffffffff7}) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x21404d, &(0x7f0000000340)={[{@test_dummy_encryption}, {@discard}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x48, &(0x7f0000000280)={[{@inline_dentry}, {@checkpoint_enable}, {@discard}, {@io_bits={'io_bits', 0x3d, 0xff}}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x2}}, {@memory_normal}, {@adaptive_mode}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@flush_merge}, {@usrjquota={'usrjquota', 0x3d, '\x00\x7f\r\xce;<\xa0\x8c\x8b\xf3_^n\xb1E\xd8-\xfb\xab\xa9\t\x9c\xd5\xdd\xb2\xa2\x98\xe9OK\xa3VI\xaf3\x01\x1a\xc0#\xe9@r\xd8T\xc0*\x1bO\x120j\xf3\\\xb1c\x97\x89\xef\xd5-\xbfl\x00\x06\xda\x873r\xc2\xf8\xe6\x80\xd0\xae\xf2\xd1\xbd\xc2\xccl\xe6^9\xe9<\xe9\xde\xdak\a\x9c\xf1$\xa7\xec'}}]}, 0x1, 0x5526, &(0x7f0000005b40)="$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") 270.907927ms ago: executing program 4 (id=391): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000280)=0xb4, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x400}) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x0, 0x0, 0x0) io_uring_setup(0x7a97, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x80045515, 0xffffffffffffffff) 201.400351ms ago: executing program 3 (id=392): pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) ioctl$int_in(r0, 0x5452, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioperm(0x4, 0x6, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e1e, @loopback}, 0x10) listen(r3, 0x8) connect$inet(r4, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) accept$inet(r3, 0x0, 0x0) syz_read_part_table(0x1055, &(0x7f0000000000)="$eJzszzGxwkAYBOC9eXmQVMEByAAFFNToCWCFDhP4wEyYkCtQABTf19zNzm7xh6/qSpK/ZluyW85JfZqc33t9knJK1hkyjq9Om+Sa3A//bca+aZOSx767dHWySLKav8O0rvGmzNPJ8faJGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1z0DAAD//xNHCpo=") 147.023183ms ago: executing program 4 (id=393): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 0s ago: executing program 0 (id=394): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1ad}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x6, 0x3, 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, 0x0) bind$inet(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) kernel console output (not intermixed with test programs): [ T641] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.460159][ T641] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 388.558116][ T291] EXT4-fs (loop4): unmounting filesystem. [ 388.612653][ T644] loop4: detected capacity change from 0 to 512 [ 388.650312][ T644] EXT4-fs (loop4): Test dummy encryption mode enabled [ 388.667403][ T644] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 388.701322][ T644] EXT4-fs (loop4): 1 truncate cleaned up [ 388.780824][ T637] loop3: detected capacity change from 0 to 40427 [ 388.801028][ T644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 388.810700][ T637] F2FS-fs (loop3): Invalid log blocks per segment (1) [ 388.823157][ T647] loop2: detected capacity change from 0 to 40427 [ 388.828644][ T637] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 388.831385][ T647] F2FS-fs (loop2): invalid crc value [ 388.845344][ T650] loop1: detected capacity change from 0 to 512 [ 388.868030][ T637] F2FS-fs (loop3): fault_type options not supported [ 388.883340][ T647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 388.884290][ T637] F2FS-fs (loop3): fault_injection options not supported [ 388.897715][ T637] F2FS-fs (loop3): Image doesn't support compression [ 388.906040][ T637] F2FS-fs (loop3): invalid crc value [ 388.912545][ T650] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.80: inode has both inline data and extents flags [ 388.935735][ T650] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.80: couldn't read orphan inode 15 (err -117) [ 388.944300][ T637] F2FS-fs (loop3): Found nat_bits in checkpoint [ 388.947515][ T647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 388.988085][ T637] F2FS-fs (loop3): Start checkpoint disabled! [ 388.994723][ T637] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 389.002470][ T637] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 389.009611][ T637] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 389.017318][ T650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 389.641190][ T291] EXT4-fs (loop4): unmounting filesystem. [ 389.828988][ T288] EXT4-fs (loop1): unmounting filesystem. [ 389.869901][ T670] xt_hashlimit: size too large, truncated to 1048576 [ 389.974090][ T674] loop2: detected capacity change from 0 to 512 [ 389.985799][ T674] EXT4-fs (loop2): Test dummy encryption mode enabled [ 390.040273][ T674] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.86: inode has both inline data and extents flags [ 390.057529][ T674] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.86: couldn't read orphan inode 15 (err -117) [ 390.079762][ T674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 390.104293][ T510] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 390.129515][ T686] loop1: detected capacity change from 0 to 512 [ 390.166794][ T686] EXT4-fs: Ignoring removed i_version option [ 390.192751][ T686] EXT4-fs: Ignoring removed oldalloc option [ 390.196166][ T688] loop4: detected capacity change from 0 to 16 [ 390.210316][ T686] EXT4-fs: Ignoring removed orlov option [ 390.210691][ T688] erofs: (device loop4): mounted with root inode @ nid 36. [ 390.223610][ T686] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 390.317941][ T692] loop1: detected capacity change from 0 to 512 [ 390.331919][ T510] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.346432][ T692] EXT4-fs (loop1): Test dummy encryption mode enabled [ 390.351902][ T510] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.353726][ T692] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 390.370636][ T510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.381360][ T510] usb 4-1: Product: syz [ 390.387784][ T510] usb 4-1: Manufacturer: syz [ 390.393834][ T510] usb 4-1: SerialNumber: syz [ 390.398078][ T684] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 390.404815][ T692] EXT4-fs (loop1): 1 truncate cleaned up [ 390.411994][ T684] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 390.414401][ T692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 390.420498][ T684] F2FS-fs (loop0): fault_type options not supported [ 390.442941][ T684] F2FS-fs (loop0): fault_injection options not supported [ 390.450258][ T684] F2FS-fs (loop0): Image doesn't support compression [ 390.458749][ T684] F2FS-fs (loop0): invalid crc value [ 390.466498][ T684] F2FS-fs (loop0): Found nat_bits in checkpoint [ 390.490342][ T684] F2FS-fs (loop0): Start checkpoint disabled! [ 390.497817][ T684] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 390.505710][ T684] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 390.512911][ T684] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 390.576402][ T700] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.95: inode has both inline data and extents flags [ 390.590287][ T700] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.95: couldn't read orphan inode 15 (err -117) [ 390.609120][ T700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 390.639753][ T664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 390.649236][ T664] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.704765][ T664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.723972][ T664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.769236][ T705] F2FS-fs (loop4): invalid crc value [ 390.780805][ T705] F2FS-fs (loop4): Found nat_bits in checkpoint [ 390.803138][ T290] EXT4-fs (loop0): unmounting filesystem. [ 390.844749][ T705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 390.862279][ T289] EXT4-fs (loop2): unmounting filesystem. [ 391.420850][ T721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'. [ 391.741391][ T28] kauditd_printk_skb: 748 callbacks suppressed [ 391.741521][ T28] audit: type=1326 audit(1789195795.308:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 391.865229][ T725] erofs: (device loop2): mounted with root inode @ nid 36. [ 391.903261][ T725] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 391.912343][ T725] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 391.921813][ T725] syz.2.98: attempt to access beyond end of device [ 391.921813][ T725] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 391.936119][ T725] syz.2.98: attempt to access beyond end of device [ 391.936119][ T725] loop2: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 391.950044][ T725] syz.2.98: attempt to access beyond end of device [ 391.950044][ T725] loop2: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 393.411726][ T28] audit: type=1326 audit(1789195795.308:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 393.436837][ T28] audit: type=1326 audit(1789195795.308:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3c1f75a5ac code=0x7ffc0000 [ 393.493741][ T288] EXT4-fs (loop1): unmounting filesystem. [ 393.526520][ T28] audit: type=1326 audit(1789195795.308:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3c1f75a60e code=0x7ffc0000 [ 393.551337][ T28] audit: type=1326 audit(1789195795.308:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c1f79ddeb code=0x7ffc0000 [ 393.703017][ T28] audit: type=1326 audit(1789195795.308:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 393.735715][ T28] audit: type=1326 audit(1789195795.308:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 393.763499][ T28] audit: type=1326 audit(1789195795.308:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 393.832059][ T736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.103'. [ 393.837350][ T28] audit: type=1326 audit(1789195795.308:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 393.895412][ T746] set_capacity_and_notify: 6 callbacks suppressed [ 393.895432][ T746] loop2: detected capacity change from 0 to 2048 [ 393.920339][ T28] audit: type=1326 audit(1789195795.308:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.4.96" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 393.966145][ T510] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 393.980794][ T510] cdc_ncm 4-1:1.0: bind() failure [ 393.997706][ T510] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 394.007927][ T510] cdc_ncm 4-1:1.1: bind() failure [ 394.033945][ T287] EXT4-fs (loop3): unmounting filesystem. [ 394.046751][ T746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 394.065369][ T750] loop1: detected capacity change from 0 to 16 [ 394.074583][ T750] erofs: (device loop1): mounted with root inode @ nid 36. [ 394.092303][ T750] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 394.101366][ T750] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 394.110780][ T750] syz.1.103: attempt to access beyond end of device [ 394.110780][ T750] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 394.125162][ T750] syz.1.103: attempt to access beyond end of device [ 394.125162][ T750] loop1: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 394.139148][ T750] syz.1.103: attempt to access beyond end of device [ 394.139148][ T750] loop1: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 395.392682][ T510] usb 4-1: USB disconnect, device number 4 [ 395.510833][ T744] loop0: detected capacity change from 0 to 40427 [ 395.531427][ T744] F2FS-fs (loop0): invalid crc value [ 395.539460][ T755] loop4: detected capacity change from 0 to 512 [ 395.562639][ T755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 395.637470][ T753] loop3: detected capacity change from 0 to 40427 [ 395.654265][ T753] F2FS-fs (loop3): Invalid log blocks per segment (1) [ 395.662324][ T744] F2FS-fs (loop0): Found nat_bits in checkpoint [ 395.690342][ T755] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.105: inode has both inline data and extents flags [ 395.691350][ T758] loop1: detected capacity change from 0 to 40427 [ 395.711383][ T758] F2FS-fs (loop1): invalid crc value [ 395.719281][ T753] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 395.727649][ T753] F2FS-fs (loop3): fault_type options not supported [ 395.733957][ T755] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.105: couldn't read orphan inode 15 (err -117) [ 395.734487][ T753] F2FS-fs (loop3): fault_injection options not supported [ 395.746666][ T755] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 395.777121][ T753] F2FS-fs (loop3): Image doesn't support compression [ 395.784620][ T758] F2FS-fs (loop1): Found nat_bits in checkpoint [ 395.802283][ T753] F2FS-fs (loop3): invalid crc value [ 395.810276][ T744] F2FS-fs (loop0): Start checkpoint disabled! [ 395.814376][ T410] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 395.822175][ T744] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 395.827657][ T758] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 395.832353][ T744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 395.856942][ T753] F2FS-fs (loop3): Found nat_bits in checkpoint [ 395.891801][ T753] F2FS-fs (loop3): Start checkpoint disabled! [ 395.898548][ T753] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 395.913700][ T753] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 395.920863][ T753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 396.994687][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 396.994708][ T28] audit: type=1326 audit(1789195800.188:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 397.051842][ T289] EXT4-fs (loop2): unmounting filesystem. [ 397.136280][ T772] loop2: detected capacity change from 0 to 512 [ 397.150981][ T314] kworker/u4:3: attempt to access beyond end of device [ 397.150981][ T314] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 397.183388][ T28] audit: type=1326 audit(1789195800.188:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 397.211143][ T772] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.108: inode has both inline data and extents flags [ 397.252894][ T28] audit: type=1326 audit(1789195800.188:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f546cb9dec2 code=0x7ffc0000 [ 397.260805][ T772] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.108: couldn't read orphan inode 15 (err -117) [ 397.320001][ T772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 397.364631][ T28] audit: type=1326 audit(1789195800.188:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f546cb9df57 code=0x7ffc0000 [ 397.396486][ T28] audit: type=1326 audit(1789195800.188:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f546cb5ae51 code=0x7ffc0000 [ 397.421441][ T28] audit: type=1326 audit(1789195800.188:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f546cb9ef49 code=0x7ffc0000 [ 397.429154][ T777] loop3: detected capacity change from 0 to 8192 [ 397.447555][ T28] audit: type=1326 audit(1789195800.188:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f546cb5aebb code=0x7ffc0000 [ 397.477125][ T28] audit: type=1326 audit(1789195800.188:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f546cb5a5ac code=0x7ffc0000 [ 397.478123][ T291] EXT4-fs (loop4): unmounting filesystem. [ 397.502002][ T28] audit: type=1326 audit(1789195800.188:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 397.508704][ T289] EXT4-fs (loop2): unmounting filesystem. [ 397.532369][ T28] audit: type=1326 audit(1789195800.188:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.1.107" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f546cb5a60e code=0x7ffc0000 [ 397.563475][ T777] loop3: p1 p2 p3 [ 397.573410][ T777] loop3: p1 start 68157184 is beyond EOD, truncated [ 397.670623][ T410] usb 3-1: device not accepting address 3, error -71 [ 397.736737][ T573] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 397.816335][ T789] loop4: detected capacity change from 0 to 256 [ 397.845136][ T777] loop3: detected capacity change from 0 to 4096 [ 397.907695][ T789] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 398.178827][ T777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 398.312269][ T777] EXT4-fs (loop3): unmounting filesystem. [ 398.790646][ T573] usb 1-1: Using ep0 maxpacket: 8 [ 398.796964][ T573] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 398.813962][ T573] usb 1-1: config 179 has no interface number 0 [ 398.820314][ T573] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 398.831477][ T573] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 398.842806][ T573] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 398.863045][ T573] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 398.896997][ T802] EXT4-fs (loop4): Test dummy encryption mode enabled [ 398.923189][ T573] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 398.924491][ T797] set_capacity_and_notify: 1 callbacks suppressed [ 398.924503][ T797] loop1: detected capacity change from 0 to 40427 [ 398.942429][ T804] loop3: detected capacity change from 0 to 512 [ 398.960502][ T797] F2FS-fs (loop1): invalid crc value [ 398.967611][ T802] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.117: inode has both inline data and extents flags [ 399.000629][ T573] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 399.010431][ T797] F2FS-fs (loop1): Found nat_bits in checkpoint [ 399.020169][ T802] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.117: couldn't read orphan inode 15 (err -117) [ 399.050626][ T797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 399.058135][ T573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.077071][ T802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 399.101537][ T778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.014260][ T293] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 400.057968][ T291] EXT4-fs (loop4): unmounting filesystem. [ 400.282821][ T830] loop1: detected capacity change from 0 to 2048 [ 400.350745][ T830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 400.361524][ T806] loop2: detected capacity change from 0 to 40427 [ 400.388839][ T830] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 400.441342][ T828] loop4: detected capacity change from 0 to 40427 [ 400.457141][ T828] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 400.464137][ T828] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 400.469024][ T834] loop3: detected capacity change from 0 to 512 [ 400.472406][ T828] F2FS-fs (loop4): fault_type options not supported [ 400.485531][ T828] F2FS-fs (loop4): fault_injection options not supported [ 400.492542][ T806] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 400.492664][ T806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 400.493132][ T806] F2FS-fs (loop2): invalid crc value [ 400.504465][ T828] F2FS-fs (loop4): Image doesn't support compression [ 400.525060][ T834] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.122: inode has both inline data and extents flags [ 400.528070][ T830] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 60 with error 28 [ 400.550901][ T834] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.122: couldn't read orphan inode 15 (err -117) [ 400.564030][ T828] F2FS-fs (loop4): invalid crc value [ 400.580778][ T834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 400.589564][ T830] EXT4-fs (loop1): This should not happen!! Data will be lost [ 400.589564][ T830] [ 400.590395][ T828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 400.620164][ T806] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 400.631703][ T830] EXT4-fs (loop1): Total free blocks count 0 [ 400.637809][ T830] EXT4-fs (loop1): Free/Dirty block details [ 400.653970][ T830] EXT4-fs (loop1): free_blocks=4096 [ 400.668922][ T830] EXT4-fs (loop1): dirty_blocks=64 [ 400.681430][ T830] EXT4-fs (loop1): Block reservation details [ 400.696145][ T830] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 400.697478][ T828] F2FS-fs (loop4): Start checkpoint disabled! [ 400.716772][ T836] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 400.717341][ T828] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 400.763322][ T828] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 400.779345][ T828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 400.790329][ T806] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 400.820402][ T806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 400.937833][ T287] EXT4-fs (loop3): unmounting filesystem. [ 400.985089][ T846] overlayfs: missing 'workdir' [ 401.003001][ T289] syz-executor: attempt to access beyond end of device [ 401.003001][ T289] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 401.044531][ T851] 9pnet_fd: Insufficient options for proto=fd [ 401.081182][ T846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 401.145253][ T850] loop4: detected capacity change from 0 to 40427 [ 401.157145][ T850] F2FS-fs (loop4): invalid crc value [ 401.181952][ T850] F2FS-fs (loop4): Found nat_bits in checkpoint [ 401.197638][ T855] loop3: detected capacity change from 0 to 512 [ 401.218066][ T850] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 401.285715][ T855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 401.315658][ T855] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.349330][ T855] EXT4-fs (loop3): unmounting filesystem. [ 401.704606][ T510] usb 1-1: USB disconnect, device number 2 [ 401.704733][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 401.720399][ T510] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 401.720608][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 402.243566][ T28] kauditd_printk_skb: 1009 callbacks suppressed [ 402.243611][ T28] audit: type=1326 audit(1789195830.446:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=849 comm="syz.4.123" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 402.322660][ T868] device veth0 entered promiscuous mode [ 402.330173][ T867] device veth0 left promiscuous mode [ 402.336371][ T28] audit: type=1326 audit(1789195830.506:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=849 comm="syz.4.123" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3c1f79e159 code=0x7ffc0000 [ 402.490353][ T28] audit: type=1400 audit(1789195830.536:2121): avc: denied { mount } for pid=867 comm="syz.1.129" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 402.494685][ T870] loop1: detected capacity change from 0 to 40427 [ 402.512882][ T28] audit: type=1400 audit(1789195830.536:2122): avc: denied { search } for pid=867 comm="syz.1.129" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 402.512911][ T28] audit: type=1400 audit(1789195830.536:2123): avc: denied { read write } for pid=867 comm="syz.1.129" name="synthetic_events" dev="tracefs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 402.512931][ T28] audit: type=1400 audit(1789195830.536:2124): avc: denied { open } for pid=867 comm="syz.1.129" path="/29/tracing/synthetic_events" dev="tracefs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 402.512950][ T28] audit: type=1400 audit(1789195830.546:2125): avc: denied { ioctl } for pid=867 comm="syz.1.129" path="socket:[17658]" dev="sockfs" ino=17658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 402.512973][ T28] audit: type=1400 audit(1789195830.586:2126): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 402.532511][ T870] F2FS-fs (loop1): invalid crc value [ 402.541380][ T28] audit: type=1326 audit(1789195830.596:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.1.130" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 402.578117][ T872] loop0: detected capacity change from 0 to 512 [ 402.588891][ T28] audit: type=1326 audit(1789195830.596:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.1.130" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 402.651317][ T870] F2FS-fs (loop1): Found nat_bits in checkpoint [ 402.695422][ T872] EXT4-fs (loop0): Test dummy encryption mode enabled [ 402.742669][ T870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 402.794105][ T872] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.131: inode has both inline data and extents flags [ 402.851797][ T885] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.135: inode has both inline data and extents flags [ 402.900736][ T872] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.131: couldn't read orphan inode 15 (err -117) [ 402.913008][ T885] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.135: couldn't read orphan inode 15 (err -117) [ 402.925707][ T872] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 403.107466][ T885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 403.462671][ T880] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 403.508946][ T880] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 403.525704][ T893] EXT4-fs (loop3): Test dummy encryption mode enabled [ 403.550695][ T880] F2FS-fs (loop4): fault_type options not supported [ 403.558649][ T880] F2FS-fs (loop4): fault_injection options not supported [ 403.566054][ T880] F2FS-fs (loop4): Image doesn't support compression [ 403.574146][ T893] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.136: inode has both inline data and extents flags [ 403.588579][ T880] F2FS-fs (loop4): invalid crc value [ 403.599283][ T880] F2FS-fs (loop4): Found nat_bits in checkpoint [ 403.637744][ T289] EXT4-fs (loop2): unmounting filesystem. [ 403.650665][ T893] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.136: couldn't read orphan inode 15 (err -117) [ 403.666438][ T880] F2FS-fs (loop4): Start checkpoint disabled! [ 403.680982][ T880] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 403.697888][ T893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 403.701355][ T880] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 403.721135][ T880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 403.725153][ T902] EXT4-fs (loop2): Test dummy encryption mode enabled [ 403.741847][ T902] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 403.814553][ T902] EXT4-fs (loop2): 1 truncate cleaned up [ 403.825233][ T902] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 403.931070][ T290] EXT4-fs (loop0): unmounting filesystem. [ 403.951959][ T912] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 403.995092][ T912] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.286523][ T919] set_capacity_and_notify: 5 callbacks suppressed [ 404.286539][ T919] loop0: detected capacity change from 0 to 40427 [ 404.302619][ T919] F2FS-fs (loop0): invalid crc value [ 404.707080][ T291] EXT4-fs (loop4): unmounting filesystem. [ 404.713482][ T923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 404.724263][ T287] EXT4-fs (loop3): unmounting filesystem. [ 404.726653][ T919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 404.738108][ T289] EXT4-fs (loop2): unmounting filesystem. [ 404.776444][ T919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 404.880067][ T939] loop4: detected capacity change from 0 to 512 [ 404.951101][ T934] loop2: detected capacity change from 0 to 8192 [ 404.958569][ T939] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.148: inode has both inline data and extents flags [ 404.965132][ T930] loop3: detected capacity change from 0 to 40427 [ 405.027845][ T939] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.148: couldn't read orphan inode 15 (err -117) [ 405.027931][ T939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 405.203110][ T948] xt_hashlimit: overflow, try lower: 3/0 [ 405.313961][ T291] EXT4-fs (loop4): unmounting filesystem. [ 405.360608][ T930] F2FS-fs (loop3): invalid crc value [ 405.409712][ T930] F2FS-fs (loop3): Found nat_bits in checkpoint [ 405.460652][ T930] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 405.560036][ T969] loop0: detected capacity change from 0 to 2048 [ 405.570633][ T573] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 405.593823][ T969] Alternate GPT is invalid, using primary GPT. [ 405.741322][ T969] loop0: p2 p3 p7 [ 406.237794][ T979] loop1: detected capacity change from 0 to 512 [ 406.277288][ T979] EXT4-fs (loop1): Test dummy encryption mode enabled [ 406.316975][ T979] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.159: inode has both inline data and extents flags [ 406.350888][ T979] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.159: couldn't read orphan inode 15 (err -117) [ 406.371184][ T984] loop0: detected capacity change from 0 to 16 [ 406.381989][ T979] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.406646][ T984] erofs: (device loop0): mounted with root inode @ nid 36. [ 406.473239][ T573] usb 3-1: unable to get BOS descriptor or descriptor too short [ 406.521495][ T573] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 406.551129][ T573] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 407.376350][ T957] loop4: detected capacity change from 0 to 131072 [ 407.401386][ T957] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 407.431086][ T957] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 407.454368][ T957] F2FS-fs (loop4): invalid crc value [ 407.471903][ T957] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 407.494545][ T288] EXT4-fs (loop1): unmounting filesystem. [ 407.510992][ T573] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 407.520096][ T573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.532762][ T573] usb 3-1: Product: syz [ 407.535944][ T1001] loop1: detected capacity change from 0 to 512 [ 407.536953][ T573] usb 3-1: Manufacturer: syz [ 407.548793][ T957] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=90000000, run fsck to fix. [ 407.558416][ T573] usb 3-1: SerialNumber: syz [ 407.575722][ T1004] loop0: detected capacity change from 0 to 128 [ 407.584557][ T957] F2FS-fs (loop4): Bad quota inode 1:2415919104 [ 407.591453][ T957] F2FS-fs (loop4): Failed to enable quota tracking (type=1, err=-22). Please run fsck to fix. [ 407.598120][ T28] kauditd_printk_skb: 808 callbacks suppressed [ 407.598134][ T28] audit: type=1326 audit(1789195859.821:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.601987][ T957] F2FS-fs (loop4): Cannot turn on quotas: error -22 [ 407.610045][ T1001] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.164: inode has both inline data and extents flags [ 407.647973][ T28] audit: type=1326 audit(1789195859.821:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.654416][ T476] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 407.693986][ T28] audit: type=1326 audit(1789195859.821:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.734312][ T1001] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.164: couldn't read orphan inode 15 (err -117) [ 407.746845][ T28] audit: type=1326 audit(1789195859.821:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.773442][ T1001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 407.785715][ T957] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 407.792881][ T957] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 407.794290][ T28] audit: type=1326 audit(1789195859.821:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.827441][ T1006] F2FS-fs (loop3): invalid crc value [ 407.834191][ T573] usb 3-1: unit 4: unexpected type 0x03 [ 407.834856][ T28] audit: type=1326 audit(1789195859.821:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.847804][ T573] usb 3-1: unit 8 not found! [ 407.879423][ T28] audit: type=1326 audit(1789195859.821:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.890177][ T1006] F2FS-fs (loop3): Found nat_bits in checkpoint [ 407.905701][ T28] audit: type=1326 audit(1789195859.821:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.939275][ T28] audit: type=1326 audit(1789195859.821:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 407.952302][ T573] usb 3-1: USB disconnect, device number 5 [ 407.974423][ T1006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 407.997110][ T28] audit: type=1326 audit(1789195859.821:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.3.166" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f49bcf9e159 code=0x7ffc0000 [ 408.118005][ T288] EXT4-fs (loop1): unmounting filesystem. [ 408.692959][ T1023] F2FS-fs (loop0): invalid crc value [ 408.775664][ T1023] F2FS-fs (loop0): Found nat_bits in checkpoint [ 408.817366][ T1023] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 408.907123][ T1031] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 409.135859][ T1034] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 409.165335][ T1036] FAULT_INJECTION: forcing a failure. [ 409.165335][ T1036] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 409.490883][ T1036] CPU: 1 PID: 1036 Comm: syz.2.173 Not tainted syzkaller #0 [ 409.498208][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.508265][ T1036] Call Trace: [ 409.511582][ T1036] [ 409.514510][ T1036] __dump_stack+0x21/0x24 [ 409.518856][ T1036] dump_stack_lvl+0x110/0x170 [ 409.523547][ T1036] ? __cfi_dump_stack_lvl+0x8/0x8 [ 409.528575][ T1036] ? __schedule+0xcbb/0x1700 [ 409.533173][ T1036] dump_stack+0x15/0x24 [ 409.537333][ T1036] should_fail_ex+0x3bf/0x510 [ 409.542017][ T1036] should_fail+0xb/0x10 [ 409.546171][ T1036] should_fail_usercopy+0x1a/0x20 [ 409.551196][ T1036] _copy_from_user+0x1e/0xc0 [ 409.555795][ T1036] __sys_connect+0x16d/0x460 [ 409.560386][ T1036] ? __cfi___sys_connect+0x10/0x10 [ 409.565500][ T1036] ? __kasan_check_write+0x14/0x20 [ 409.570767][ T1036] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 409.576407][ T1036] __x64_sys_connect+0x7a/0x90 [ 409.581183][ T1036] x64_sys_call+0x88d/0x9a0 [ 409.585686][ T1036] do_syscall_64+0x4c/0xa0 [ 409.590110][ T1036] ? clear_bhb_loop+0x30/0x80 [ 409.595483][ T1036] ? clear_bhb_loop+0x30/0x80 [ 409.600171][ T1036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.606068][ T1036] RIP: 0033:0x7ff98cb9e159 [ 409.610483][ T1036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.630151][ T1036] RSP: 002b:00007ff98da3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 409.638572][ T1036] RAX: ffffffffffffffda RBX: 00007ff98ce26090 RCX: 00007ff98cb9e159 [ 409.646561][ T1036] RDX: 000000000000006e RSI: 00002000000002c0 RDI: 0000000000000004 [ 409.654538][ T1036] RBP: 00007ff98da3b090 R08: 0000000000000000 R09: 0000000000000000 [ 409.662513][ T1036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.670491][ T1036] R13: 00007ff98ce26128 R14: 00007ff98ce26090 R15: 00007fffb326b1b8 [ 409.678482][ T1036] [ 409.750786][ T510] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 409.842704][ T1041] set_capacity_and_notify: 4 callbacks suppressed [ 409.842723][ T1041] loop0: detected capacity change from 0 to 16 [ 409.919332][ T1041] erofs: (device loop0): mounted with root inode @ nid 36. [ 409.940654][ T510] usb 4-1: Using ep0 maxpacket: 32 [ 409.947062][ T1051] Zero length message leads to an empty skb [ 409.962233][ T510] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.973895][ T510] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.983984][ T510] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 409.984893][ T1018] loop1: detected capacity change from 0 to 131072 [ 409.993207][ T510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.033463][ T1018] F2FS-fs (loop1): invalid crc value [ 410.092674][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.099901][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.378048][ T510] usb 4-1: config 0 descriptor?? [ 410.386264][ T510] hub 4-1:0.0: USB hub found [ 410.392729][ T1018] F2FS-fs (loop1): Found nat_bits in checkpoint [ 410.444168][ T1018] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 410.457445][ T1018] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 410.587015][ T510] hub 4-1:0.0: 1 port detected [ 410.648888][ T1065] loop1: detected capacity change from 0 to 512 [ 410.659439][ T1065] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.179: inode has both inline data and extents flags [ 410.672774][ T1065] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.179: couldn't read orphan inode 15 (err -117) [ 410.684757][ T1065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 410.752266][ T288] EXT4-fs (loop1): unmounting filesystem. [ 410.800631][ T410] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 410.905235][ T1073] loop4: detected capacity change from 0 to 40427 [ 410.914925][ T1073] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 410.921944][ T1073] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 410.930181][ T1073] F2FS-fs (loop4): fault_type options not supported [ 410.937025][ T1073] F2FS-fs (loop4): fault_injection options not supported [ 410.944211][ T1073] F2FS-fs (loop4): Image doesn't support compression [ 410.951387][ T1073] F2FS-fs (loop4): invalid crc value [ 410.957753][ T1073] F2FS-fs (loop4): Found nat_bits in checkpoint [ 410.970637][ T410] usb 1-1: device descriptor read/64, error -71 [ 410.986356][ T1073] F2FS-fs (loop4): Start checkpoint disabled! [ 410.992986][ T1073] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 411.000985][ T1073] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 411.008017][ T1073] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 411.133619][ T1078] loop4: detected capacity change from 0 to 40427 [ 411.142907][ T1078] F2FS-fs (loop4): invalid crc value [ 411.149833][ T1078] F2FS-fs (loop4): Found nat_bits in checkpoint [ 411.176900][ T1078] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 411.324051][ T1084] loop2: detected capacity change from 0 to 40427 [ 411.333444][ T510] hub 4-1:0.0: activate --> -90 [ 411.339190][ T1084] F2FS-fs (loop2): invalid crc value [ 411.345908][ T1084] F2FS-fs (loop2): Found nat_bits in checkpoint [ 411.372382][ T1084] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 411.437239][ T410] usb 1-1: device descriptor read/64, error -71 [ 411.780860][ T410] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 411.876579][ T510] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 412.187786][ T39] usb 4-1: USB disconnect, device number 5 [ 412.193927][ T510] usb 4-1-port1: cannot reset (err = -71) [ 412.199876][ T510] usb 4-1-port1: attempt power cycle [ 412.348898][ T1099] loop1: detected capacity change from 0 to 16 [ 412.360799][ T410] usb 1-1: device descriptor read/64, error -71 [ 412.370661][ T1101] loop4: detected capacity change from 0 to 512 [ 412.380146][ T1099] erofs: (device loop1): mounted with root inode @ nid 36. [ 412.380648][ T1101] EXT4-fs (loop4): Test dummy encryption mode enabled [ 412.418705][ T1105] loop2: detected capacity change from 0 to 512 [ 412.428853][ T1101] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.187: inode has both inline data and extents flags [ 412.430095][ T1105] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.191: inode has both inline data and extents flags [ 412.447323][ T1101] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.187: couldn't read orphan inode 15 (err -117) [ 412.468414][ T1105] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.191: couldn't read orphan inode 15 (err -117) [ 412.470854][ T1101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 412.483949][ T1105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 412.624935][ T1111] overlayfs: unrecognized mount option "./file0" or missing value [ 412.647738][ T289] EXT4-fs (loop2): unmounting filesystem. [ 412.653632][ T410] usb 1-1: device descriptor read/64, error -71 [ 412.712997][ T1120] loop1: detected capacity change from 0 to 256 [ 412.732325][ T1120] exfat: Deprecated parameter 'namecase' [ 412.738022][ T1120] exfat: Deprecated parameter 'utf8' [ 412.773261][ T1120] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 412.780646][ T410] usb usb1-port1: attempt power cycle [ 412.804234][ T28] kauditd_printk_skb: 1468 callbacks suppressed [ 412.804248][ T28] audit: type=1400 audit(1789195897.032:4415): avc: denied { remount } for pid=1119 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 412.845242][ T28] audit: type=1400 audit(1789195897.072:4416): avc: denied { write } for pid=1117 comm="syz.3.193" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 412.865402][ T1123] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 412.875657][ T1123] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 412.876112][ T1118] input: syz1 as /devices/virtual/input/input5 [ 412.890646][ T1123] F2FS-fs (loop2): fault_type options not supported [ 412.898480][ T1123] F2FS-fs (loop2): fault_injection options not supported [ 412.913215][ T1123] F2FS-fs (loop2): Image doesn't support compression [ 412.936051][ T1118] mmap: syz.3.193 (1118): VmData 45846528 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 412.936246][ T1123] F2FS-fs (loop2): invalid crc value [ 412.965080][ T1123] F2FS-fs (loop2): Found nat_bits in checkpoint [ 413.009132][ T1123] F2FS-fs (loop2): Start checkpoint disabled! [ 413.015792][ T1123] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 413.021215][ T1130] EXT4-fs (loop3): Test dummy encryption mode enabled [ 413.027154][ T1123] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 413.032313][ T1130] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.197: inode has both inline data and extents flags [ 413.037221][ T1123] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 413.050124][ T1130] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.197: couldn't read orphan inode 15 (err -117) [ 413.069974][ T1130] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 413.143276][ T28] audit: type=1326 audit(1789195897.362:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.2.198" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 413.168608][ T28] audit: type=1326 audit(1789195897.362:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.2.198" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 413.193652][ T28] audit: type=1326 audit(1789195897.362:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.2.198" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 413.218863][ T28] audit: type=1326 audit(1789195897.362:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.2.198" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 413.244348][ T28] audit: type=1326 audit(1789195897.362:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.2.198" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 413.273594][ T1134] F2FS-fs (loop2): invalid crc value [ 413.288429][ T28] audit: type=1326 audit(1789195897.362:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.2.198" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 413.316373][ T28] audit: type=1326 audit(1789195897.362:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.2.198" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 413.342813][ T28] audit: type=1326 audit(1789195897.362:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.2.198" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 413.350769][ T1134] F2FS-fs (loop2): Found nat_bits in checkpoint [ 413.374723][ T291] EXT4-fs (loop4): unmounting filesystem. [ 413.401241][ T410] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 413.409394][ T1134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 413.484125][ T410] usb 1-1: device descriptor read/8, error -71 [ 413.666208][ T410] usb 1-1: device descriptor read/8, error -71 [ 414.215703][ T287] EXT4-fs (loop3): unmounting filesystem. [ 414.360102][ T1147] F2FS-fs (loop0): invalid crc value [ 414.373784][ T313] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 414.436373][ T1154] erofs: (device loop1): mounted with root inode @ nid 36. [ 414.467409][ T1147] F2FS-fs (loop0): Found nat_bits in checkpoint [ 414.475902][ T1152] exfat: Unknown parameter '„}Îò±’C•Nÿá æ£Xñ²ž' [ 414.508767][ T1147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 414.561371][ T1160] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.204: inode has both inline data and extents flags [ 414.588870][ T1143] input: syz1 as /devices/virtual/input/input6 [ 414.623727][ T1160] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.204: couldn't read orphan inode 15 (err -117) [ 414.641970][ T1160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 415.201038][ T1166] set_capacity_and_notify: 9 callbacks suppressed [ 415.201056][ T1166] loop3: detected capacity change from 0 to 256 [ 415.225286][ T289] EXT4-fs (loop2): unmounting filesystem. [ 415.289116][ T1166] exfat: Deprecated parameter 'namecase' [ 415.324737][ T1170] FAULT_INJECTION: forcing a failure. [ 415.324737][ T1170] name failslab, interval 1, probability 0, space 0, times 0 [ 415.337988][ T1170] CPU: 1 PID: 1170 Comm: syz.4.206 Not tainted syzkaller #0 [ 415.345289][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.355353][ T1170] Call Trace: [ 415.358637][ T1170] [ 415.361565][ T1170] __dump_stack+0x21/0x24 [ 415.365907][ T1170] dump_stack_lvl+0x110/0x170 [ 415.370628][ T1170] ? __cfi_dump_stack_lvl+0x8/0x8 [ 415.375658][ T1170] ? __cfi_do_futex+0x10/0x10 [ 415.380336][ T1170] dump_stack+0x15/0x24 [ 415.384497][ T1170] should_fail_ex+0x3bf/0x510 [ 415.389181][ T1170] ? getname_flags+0xba/0x510 [ 415.393853][ T1170] __should_failslab+0xac/0xf0 [ 415.398699][ T1170] should_failslab+0x9/0x20 [ 415.403206][ T1170] kmem_cache_alloc+0x3b/0x320 [ 415.407980][ T1170] getname_flags+0xba/0x510 [ 415.412492][ T1170] __x64_sys_mkdirat+0x7c/0xa0 [ 415.417258][ T1170] x64_sys_call+0x73d/0x9a0 [ 415.421760][ T1170] do_syscall_64+0x4c/0xa0 [ 415.426191][ T1170] ? clear_bhb_loop+0x30/0x80 [ 415.430878][ T1170] ? clear_bhb_loop+0x30/0x80 [ 415.435570][ T1170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.441481][ T1170] RIP: 0033:0x7f3c1f79e159 [ 415.445902][ T1170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.465522][ T1170] RSP: 002b:00007f3c205b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 415.473948][ T1170] RAX: ffffffffffffffda RBX: 00007f3c1fa25fa0 RCX: 00007f3c1f79e159 [ 415.481932][ T1170] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 415.489918][ T1170] RBP: 00007f3c1f83503b R08: 0000000000000000 R09: 0000000000000000 [ 415.497903][ T1170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.505884][ T1170] R13: 00007f3c1fa26038 R14: 00007f3c1fa25fa0 R15: 00007fff6fe06c78 [ 415.513880][ T1170] [ 415.519696][ T1166] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 415.552271][ T1170] netlink: 160 bytes leftover after parsing attributes in process `syz.4.206'. [ 415.994534][ T1186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 416.050612][ T1176] loop1: detected capacity change from 0 to 40427 [ 416.075519][ T1188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.213'. [ 416.080959][ T1176] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 416.100507][ T1176] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 416.118978][ T1176] F2FS-fs (loop1): fault_type options not supported [ 416.134120][ T1176] F2FS-fs (loop1): fault_injection options not supported [ 416.142993][ T1176] F2FS-fs (loop1): Image doesn't support compression [ 416.150288][ T1176] F2FS-fs (loop1): invalid crc value [ 416.314728][ T1190] loop2: detected capacity change from 0 to 16 [ 416.325816][ T1190] erofs: (device loop2): mounted with root inode @ nid 36. [ 416.376318][ T1190] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 416.385472][ T1190] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 416.395218][ T1190] syz.2.213: attempt to access beyond end of device [ 416.395218][ T1190] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 416.409621][ T1190] syz.2.213: attempt to access beyond end of device [ 416.409621][ T1190] loop2: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 416.423430][ T1190] syz.2.213: attempt to access beyond end of device [ 416.423430][ T1190] loop2: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 416.584363][ T1193] loop4: detected capacity change from 0 to 512 [ 416.607995][ T1176] F2FS-fs (loop1): Found nat_bits in checkpoint [ 416.877909][ T1193] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.215: inode has both inline data and extents flags [ 417.160708][ T1193] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.215: couldn't read orphan inode 15 (err -117) [ 417.176437][ T1176] F2FS-fs (loop1): Start checkpoint disabled! [ 417.183088][ T1176] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 417.190902][ T1176] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 417.198040][ T1176] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 417.253116][ T1193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 417.422101][ T1201] loop0: detected capacity change from 0 to 40427 [ 417.429806][ T1201] F2FS-fs (loop0): invalid crc value [ 417.476642][ T1201] F2FS-fs (loop0): Found nat_bits in checkpoint [ 417.538112][ T1201] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 417.600705][ T291] EXT4-fs (loop4): unmounting filesystem. [ 417.625114][ T1215] loop1: detected capacity change from 0 to 16 [ 417.661851][ T1215] erofs: (device loop1): mounted with root inode @ nid 36. [ 417.762509][ T1214] loop3: detected capacity change from 0 to 40427 [ 417.880759][ T28] kauditd_printk_skb: 752 callbacks suppressed [ 417.880775][ T28] audit: type=1326 audit(1789195917.907:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c91f9e159 code=0x7ffc0000 [ 417.913906][ T1214] F2FS-fs (loop3): invalid crc value [ 418.071576][ T1214] F2FS-fs (loop3): Found nat_bits in checkpoint [ 418.138325][ T1214] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 418.385632][ T28] audit: type=1326 audit(1789195917.907:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c91f9e159 code=0x7ffc0000 [ 418.481209][ T28] audit: type=1326 audit(1789195917.907:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c91f9dec2 code=0x7ffc0000 [ 418.505856][ T28] audit: type=1326 audit(1789195917.907:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3c91f9df57 code=0x7ffc0000 [ 418.531209][ T28] audit: type=1326 audit(1789195917.907:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3c91f5ae51 code=0x7ffc0000 [ 418.556127][ T28] audit: type=1326 audit(1789195917.907:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3c91f9ef49 code=0x7ffc0000 [ 418.581251][ T28] audit: type=1326 audit(1789195917.907:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3c91f5aebb code=0x7ffc0000 [ 418.606022][ T28] audit: type=1326 audit(1789195917.907:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c91f9e159 code=0x7ffc0000 [ 418.631211][ T28] audit: type=1326 audit(1789195917.907:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c91f9e159 code=0x7ffc0000 [ 418.658656][ T1228] loop4: detected capacity change from 0 to 16 [ 418.665479][ T28] audit: type=1326 audit(1789195917.907:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1200 comm="syz.0.217" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3c91f5a5ac code=0x7ffc0000 [ 418.690971][ T1228] erofs: (device loop4): mounted with root inode @ nid 36. [ 419.768412][ T1236] loop1: detected capacity change from 0 to 512 [ 419.850236][ T1236] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.223: Invalid block bitmap block 0 in block_group 0 [ 419.910654][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 419.930620][ T1236] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 419.949049][ T1245] loop0: detected capacity change from 0 to 2048 [ 419.960152][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 419.968035][ T1236] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.223: attempt to clear invalid blocks 983261 len 1 [ 419.982125][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 419.988726][ T1236] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.223: invalid indirect mapped block 2683928664 (level 0) [ 420.010628][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 420.022282][ T1236] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.223: Invalid inode table block 0 in block_group 0 [ 420.043925][ T1245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 420.050869][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 420.069113][ T1236] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 420.131066][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 420.134940][ T1245] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 420.144619][ T1236] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 420.161925][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 420.168562][ T1236] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.223: Invalid inode table block 0 in block_group 0 [ 420.182293][ T1248] loop2: p1 p2 p3 [ 420.187077][ T1245] EXT4-fs (loop0): unmounting filesystem. [ 420.192914][ T1248] loop2: p1 start 68157184 is beyond EOD, truncated [ 420.207140][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 420.314506][ T1236] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 420.500343][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 420.616435][ T1236] EXT4-fs error (device loop1): ext4_truncate:4327: inode #13: comm syz.1.223: mark_inode_dirty error [ 420.973732][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 421.096235][ T1236] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 421.140944][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 421.196614][ T476] udevd[476]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 421.196655][ T313] udevd[313]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 421.219163][ T1236] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.223: Invalid inode table block 0 in block_group 0 [ 421.219300][ T1262] set_capacity_and_notify: 1 callbacks suppressed [ 421.219312][ T1262] loop3: detected capacity change from 0 to 512 [ 421.244803][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 421.260736][ T1236] EXT4-fs (loop1): 1 truncate cleaned up [ 421.266770][ T1236] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 421.303204][ T1236] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.223: Invalid inode bitmap blk 0 in block_group 0 [ 421.326253][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 421.341655][ T1236] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.223: Invalid inode table block 0 in block_group 0 [ 421.369705][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 421.387069][ T1236] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.223: Invalid inode table block 0 in block_group 0 [ 421.410882][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 421.423251][ T1262] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.230: inode has both inline data and extents flags [ 421.430681][ T1236] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.223: Invalid inode table block 0 in block_group 0 [ 421.468680][ T1262] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.230: couldn't read orphan inode 15 (err -117) [ 421.479498][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 421.488221][ T1257] loop0: detected capacity change from 0 to 40427 [ 421.511844][ T1262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 421.518197][ T1257] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 421.527831][ T1257] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 421.538272][ T1257] F2FS-fs (loop0): fault_type options not supported [ 421.545063][ T1257] F2FS-fs (loop0): fault_injection options not supported [ 421.552565][ T1257] F2FS-fs (loop0): Image doesn't support compression [ 421.564052][ T1257] F2FS-fs (loop0): invalid crc value [ 421.579573][ T288] EXT4-fs (loop1): unmounting filesystem. [ 421.620258][ T1257] F2FS-fs (loop0): Found nat_bits in checkpoint [ 421.679517][ T1275] syz.3.230 (1275) used greatest stack depth: 20904 bytes left [ 421.716877][ T1257] F2FS-fs (loop0): Start checkpoint disabled! [ 421.723905][ T1257] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 421.732295][ T1277] loop1: detected capacity change from 0 to 16 [ 421.739209][ T1277] erofs: (device loop1): mounted with root inode @ nid 36. [ 421.750117][ T1276] random: crng reseeded on system resumption [ 421.775370][ T1257] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 421.782580][ T1257] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 421.783379][ T1274] loop2: detected capacity change from 0 to 40427 [ 421.802836][ T1274] F2FS-fs (loop2): invalid crc value [ 421.852006][ T287] EXT4-fs (loop3): unmounting filesystem. [ 421.881469][ T1274] F2FS-fs (loop2): Found nat_bits in checkpoint [ 421.920614][ T1274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 421.927471][ T1285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 423.251263][ T28] kauditd_printk_skb: 747 callbacks suppressed [ 423.251279][ T28] audit: type=1400 audit(1789195947.475:5934): avc: denied { watch watch_reads } for pid=1296 comm="syz.4.239" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 423.281232][ T1297] Illegal XDP return value 4294967262 on prog (id 55) dev syz_tun, expect packet loss! [ 423.342549][ T28] audit: type=1400 audit(1789195947.565:5935): avc: denied { mount } for pid=1292 comm="syz.3.238" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 423.370053][ T28] audit: type=1400 audit(1789195947.585:5936): avc: denied { read } for pid=1292 comm="syz.3.238" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 423.398447][ T28] audit: type=1400 audit(1789195947.585:5937): avc: denied { open } for pid=1292 comm="syz.3.238" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 423.425480][ T28] audit: type=1400 audit(1789195947.585:5938): avc: denied { ioctl } for pid=1292 comm="syz.3.238" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 423.445896][ T1299] loop4: detected capacity change from 0 to 128 [ 423.611247][ T1299] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 423.767204][ T1299] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 423.789156][ T1299] FAT-fs (loop4): Filesystem has been set read-only [ 423.804686][ T1299] netem: change failed [ 423.848664][ T291] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 423.893888][ T1320] loop4: detected capacity change from 0 to 512 [ 424.019603][ T1320] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.245: inode has both inline data and extents flags [ 424.032831][ T410] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 424.042044][ T1320] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.245: couldn't read orphan inode 15 (err -117) [ 424.072920][ T1320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 424.078840][ T28] audit: type=1400 audit(1789195948.295:5939): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 424.104834][ T291] EXT4-fs (loop4): unmounting filesystem. [ 424.121172][ T28] audit: type=1326 audit(1789195948.335:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1324 comm="syz.2.248" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 424.132403][ T1327] loop3: detected capacity change from 0 to 256 [ 424.170690][ T28] audit: type=1326 audit(1789195948.335:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1324 comm="syz.2.248" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 424.220600][ T28] audit: type=1326 audit(1789195948.335:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1324 comm="syz.2.248" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 424.267976][ T1325] loop2: detected capacity change from 0 to 40427 [ 424.274506][ T28] audit: type=1326 audit(1789195948.335:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1324 comm="syz.2.248" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98cb9e159 code=0x7ffc0000 [ 424.302525][ T1325] F2FS-fs (loop2): invalid crc value [ 424.323438][ T410] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 424.333768][ T410] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 424.339869][ T1334] loop3: detected capacity change from 0 to 1024 [ 424.349966][ T410] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.362168][ T1325] F2FS-fs (loop2): Found nat_bits in checkpoint [ 424.399015][ T410] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 424.409092][ T1325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 424.419696][ T410] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 424.428820][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.441923][ T1334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 424.461024][ T1334] ext4 filesystem being mounted at /38/ supports timestamps until 2038-01-19 (0x7fffffff) [ 424.490668][ T1318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 424.498395][ T1318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 424.506774][ T410] pl2303 1-1:1.0: pl2303 converter detected [ 424.513933][ T410] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 424.931758][ T1318] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 425.049763][ T1318] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 425.065689][ T1318] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 425.082352][ T1318] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 425.098733][ T410] usb 1-1: USB disconnect, device number 7 [ 425.111301][ T410] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 425.129566][ T410] pl2303 1-1:1.0: device disconnected [ 425.268548][ T1329] loop4: detected capacity change from 0 to 131072 [ 425.285238][ T1329] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 425.286795][ T6] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 425.296031][ T1329] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 425.328582][ T1329] F2FS-fs (loop4): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿ0xffffffffffffffff01777777777777777777777ÿÿ" or missing value [ 425.395649][ T1350] erofs: (device loop2): mounted with root inode @ nid 36. [ 425.491852][ T6] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 425.500065][ T6] usb 4-1: config 0 has no interface number 0 [ 425.506905][ T6] usb 4-1: config 0 interface 41 has no altsetting 0 [ 425.516756][ T6] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 425.526056][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.534164][ T6] usb 4-1: Product: syz [ 425.538340][ T6] usb 4-1: Manufacturer: syz [ 425.543030][ T6] usb 4-1: SerialNumber: syz [ 425.549147][ T6] usb 4-1: config 0 descriptor?? [ 425.710647][ T1361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 425.724435][ T1361] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 425.738253][ T1358] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 425.751162][ T1358] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 425.759829][ T1335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.769369][ T1335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.772564][ T1358] F2FS-fs (loop0): invalid crc value [ 425.782072][ T6] CoreChips: probe of 4-1:0.41 failed with error -71 [ 425.786145][ T1358] F2FS-fs (loop0): Found nat_bits in checkpoint [ 425.796540][ T6] usb 4-1: USB disconnect, device number 10 [ 425.817345][ T1358] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 425.824457][ T1358] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 425.882666][ T1367] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 425.935823][ T1374] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.259: inode has both inline data and extents flags [ 425.949172][ T1374] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.259: couldn't read orphan inode 15 (err -117) [ 425.961411][ T1374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 425.979490][ T290] EXT4-fs (loop0): unmounting filesystem. [ 426.040651][ T308] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 426.230611][ T308] usb 5-1: Using ep0 maxpacket: 16 [ 426.236821][ T308] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 426.246668][ T308] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 426.255825][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.264004][ T308] usb 5-1: Product: syz [ 426.268166][ T308] usb 5-1: Manufacturer: syz [ 426.272793][ T308] usb 5-1: SerialNumber: syz [ 426.278149][ T308] r8152-cfgselector 5-1: config 0 descriptor?? [ 426.284454][ T1343] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 426.300220][ T287] EXT4-fs (loop3): unmounting filesystem. [ 426.390666][ T1380] set_capacity_and_notify: 5 callbacks suppressed [ 426.390676][ T1380] loop3: detected capacity change from 0 to 40427 [ 426.405207][ T1380] F2FS-fs (loop3): invalid crc value [ 426.447337][ T1380] F2FS-fs (loop3): Found nat_bits in checkpoint [ 426.470226][ T1380] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 426.536085][ T1389] tipc: Enabling of bearer rejected, failed to enable media [ 426.547076][ T1389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'. [ 426.606435][ T1393] loop1: detected capacity change from 0 to 16 [ 426.613387][ T1393] erofs: (device loop1): mounted with root inode @ nid 36. [ 426.621686][ T1387] loop2: detected capacity change from 0 to 16 [ 426.812041][ T1387] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 426.823610][ T1387] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 426.851495][ T1387] erofs: (device loop2): mounted with root inode @ nid 36. [ 426.942691][ T308] r8152-cfgselector 5-1: Unknown version 0x0000 [ 427.094928][ T308] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 427.296020][ T1408] overlayfs: './file1' not a directory [ 427.357447][ T1411] loop0: detected capacity change from 0 to 512 [ 427.390362][ T1411] EXT4-fs: Ignoring removed nobh option [ 427.399276][ T1411] EXT4-fs (loop0): orphan cleanup on readonly fs [ 427.410164][ T1411] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.267: EA inode hash validation failed [ 427.435500][ T1411] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 427.458356][ T1411] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.267: corrupted inode contents [ 427.473433][ T1411] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #15: comm syz.0.267: mark_inode_dirty error [ 427.485137][ T1417] loop3: detected capacity change from 0 to 512 [ 427.486661][ T1411] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.267: corrupted inode contents [ 427.509883][ T1411] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2947: inode #15: comm syz.0.267: mark_inode_dirty error [ 427.520328][ T1417] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.270: inode has both inline data and extents flags [ 427.522192][ T1411] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2950: inode #15: comm syz.0.267: mark inode dirty (error -117) [ 427.548244][ T1411] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 427.555452][ T1417] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.270: couldn't read orphan inode 15 (err -117) [ 427.562420][ T1411] EXT4-fs (loop0): 1 orphan inode deleted [ 427.574338][ T1423] loop1: detected capacity change from 0 to 128 [ 427.579132][ T1411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 427.581243][ T1417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 427.602756][ T1424] syz.2.272 uses obsolete (PF_INET,SOCK_PACKET) [ 427.636921][ T290] EXT4-fs (loop0): unmounting filesystem. [ 427.658254][ T1423] syz.1.271: attempt to access beyond end of device [ 427.658254][ T1423] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 427.665541][ T287] EXT4-fs (loop3): unmounting filesystem. [ 427.690504][ T1426] loop4: detected capacity change from 0 to 512 [ 427.697918][ T1426] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 427.840963][ T1429] loop0: detected capacity change from 0 to 40427 [ 427.862492][ T1429] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 427.874424][ T1429] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 427.884057][ T1429] F2FS-fs (loop0): fault_type options not supported [ 427.891348][ T1429] F2FS-fs (loop0): fault_injection options not supported [ 427.917826][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.925452][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 428.025794][ T1429] F2FS-fs (loop0): Image doesn't support compression [ 428.032168][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 428.048828][ T1429] F2FS-fs (loop0): invalid crc value [ 428.060046][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.077725][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 428.095543][ T1429] F2FS-fs (loop0): Found nat_bits in checkpoint [ 428.105859][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.110193][ T1445] loop2: detected capacity change from 0 to 1024 [ 428.122402][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.134242][ T1445] EXT4-fs: Ignoring removed bh option [ 428.148221][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.161176][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.169510][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.177715][ T1429] F2FS-fs (loop0): Start checkpoint disabled! [ 428.185262][ T1445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 428.194583][ T1429] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 428.213464][ T1429] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 428.220981][ T1429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 428.225555][ T1441] loop4: detected capacity change from 0 to 40427 [ 428.247576][ T1441] F2FS-fs (loop4): Unrecognized mount option "00000001000000000000000" or missing value [ 428.301022][ T289] EXT4-fs (loop2): unmounting filesystem. [ 428.397983][ T1440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 428.428191][ T1455] x_tables: duplicate underflow at hook 1 [ 428.452502][ T28] kauditd_printk_skb: 728 callbacks suppressed [ 428.452517][ T28] audit: type=1326 audit(1789195968.677:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 428.580028][ T28] audit: type=1326 audit(1789195968.677:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 428.618368][ T1458] F2FS-fs (loop1): invalid crc value [ 428.634866][ T28] audit: type=1326 audit(1789195968.717:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 428.685638][ T1458] F2FS-fs (loop1): Found nat_bits in checkpoint [ 428.731165][ T1458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 428.743754][ T28] audit: type=1326 audit(1789195968.717:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 428.784505][ T28] audit: type=1326 audit(1789195968.717:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 428.791732][ T1470] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.285: inode has both inline data and extents flags [ 428.837369][ T28] audit: type=1326 audit(1789195968.717:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 428.906786][ T291] EXT4-fs (loop4): unmounting filesystem. [ 428.926058][ T28] audit: type=1326 audit(1789195968.717:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 428.951255][ T28] audit: type=1326 audit(1789195968.717:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 428.977311][ T28] audit: type=1326 audit(1789195968.717:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 429.002430][ T28] audit: type=1326 audit(1789195968.717:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz.1.282" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f546cb9e159 code=0x7ffc0000 [ 429.009626][ T1470] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.285: couldn't read orphan inode 15 (err -117) [ 429.043057][ T1476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 429.060448][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.068945][ T1476] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 429.079465][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.088016][ T1460] device bridge_slave_0 entered promiscuous mode [ 429.094598][ T1470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 429.096688][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.110818][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.128658][ T1460] device bridge_slave_1 entered promiscuous mode [ 430.000326][ T291] EXT4-fs (loop4): unmounting filesystem. [ 430.017645][ T287] EXT4-fs (loop3): unmounting filesystem. [ 430.136909][ T1482] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131071)! [ 430.163638][ T738] device bridge_slave_1 left promiscuous mode [ 430.177828][ T738] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.190666][ T1482] EXT4-fs (loop4): group descriptors corrupted! [ 430.203088][ T1497] EXT4-fs: dax option not supported [ 430.234761][ T738] device bridge_slave_0 left promiscuous mode [ 430.278649][ T1492] ------------[ cut here ]------------ [ 430.284229][ T1492] WARNING: CPU: 1 PID: 1492 at mm/shmem.c:1198 shmem_evict_inode+0x971/0x9c0 [ 430.293143][ T1492] Modules linked in: [ 430.297056][ T1492] CPU: 1 PID: 1492 Comm: syz.3.292 Not tainted syzkaller #0 [ 430.304366][ T1492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.314449][ T1492] RIP: 0010:shmem_evict_inode+0x971/0x9c0 [ 430.320202][ T1492] Code: 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 e0 00 00 00 75 1b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bf 1c cc ff <0f> 0b e9 0d ff ff ff e8 63 ca 55 03 48 c7 c1 a0 1d 25 87 80 e1 07 [ 430.339847][ T1492] RSP: 0018:ffffc9001261f9a0 EFLAGS: 00010293 [ 430.345938][ T1492] RAX: ffffffff81a54ce1 RBX: 0000000000000008 RCX: ffff888120ae8000 [ 430.353920][ T1492] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 430.361948][ T1492] RBP: ffffc9001261fad0 R08: ffffc9001261f927 R09: 1ffff920024c3f24 [ 430.369928][ T1492] R10: dffffc0000000000 R11: fffff520024c3f25 R12: dffffc0000000000 [ 430.377911][ T1492] R13: ffff88811f991af8 R14: ffff88811f991b20 R15: 1ffff11023f3235b [ 430.385928][ T1492] FS: 00007f49bdf2f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 430.394872][ T1492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.401471][ T1492] CR2: 000020000000e000 CR3: 0000000140980000 CR4: 00000000003526a0 [ 430.409450][ T1492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.417433][ T1492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.425417][ T1492] Call Trace: [ 430.428702][ T1492] [ 430.431643][ T1492] ? __cfi_shmem_evict_inode+0x10/0x10 [ 430.437132][ T1492] ? __cfi_wake_bit_function+0x10/0x10 [ 430.442650][ T1492] ? __cfi_shmem_evict_inode+0x10/0x10 [ 430.448180][ T1492] evict+0x4c4/0x8c0 [ 430.452105][ T1492] ? proc_nr_inodes+0x2f0/0x2f0 [ 430.456958][ T1492] ? _raw_spin_lock+0x94/0xf0 [ 430.461744][ T1492] ? __cfi__raw_spin_lock+0x10/0x10 [ 430.466947][ T1492] ? wake_up_q+0x101/0x1a0 [ 430.471377][ T1492] ? __cfi_locks_remove_file+0x10/0x10 [ 430.476836][ T1492] ? __kasan_check_write+0x14/0x20 [ 430.481963][ T1492] iput+0x633/0x690 [ 430.485814][ T1492] dentry_unlink_inode+0x346/0x3f0 [ 430.490998][ T1492] __dentry_kill+0x46c/0x680 [ 430.495597][ T1492] dentry_kill+0xc0/0x2a0 [ 430.499929][ T1492] dput+0x42/0x80 [ 430.503605][ T1492] __fput+0x5c0/0x8f0 [ 430.507598][ T1492] ____fput+0x15/0x20 [ 430.511614][ T1492] task_work_run+0x1e1/0x250 [ 430.516222][ T1492] ? __cfi_task_work_run+0x10/0x10 [ 430.521364][ T1492] ? ksys_mmap_pgoff+0x16c/0x1d0 [ 430.526315][ T1492] exit_to_user_mode_loop+0x9b/0xb0 [ 430.531530][ T1492] exit_to_user_mode_prepare+0x87/0xd0 [ 430.536987][ T1492] syscall_exit_to_user_mode+0x1a/0x30 [ 430.542469][ T1492] do_syscall_64+0x58/0xa0 [ 430.546901][ T1492] ? clear_bhb_loop+0x30/0x80 [ 430.551601][ T1492] ? clear_bhb_loop+0x30/0x80 [ 430.556369][ T1492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.562337][ T1492] RIP: 0033:0x7f49bcf9e159 [ 430.567123][ T1492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.586768][ T1492] RSP: 002b:00007f49bdf2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 430.595235][ T1492] RAX: 0000200000000000 RBX: 00007f49bd226090 RCX: 00007f49bcf9e159 [ 430.603221][ T1492] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 430.611275][ T1492] RBP: 00007f49bd03503b R08: 0000000000000008 R09: 0000000000000000 [ 430.619427][ T1492] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 430.627509][ T1492] R13: 00007f49bd226128 R14: 00007f49bd226090 R15: 00007ffe1d62d338 [ 430.635624][ T1492] [ 430.638686][ T1492] ---[ end trace 0000000000000000 ]--- [ 430.649583][ T738] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.716992][ T738] device veth1_macvtap left promiscuous mode [ 430.752509][ T738] device veth0_vlan left promiscuous mode [ 430.910483][ T1500] syz.3.292 (1500) used greatest stack depth: 19080 bytes left [ 430.940748][ T1497] device ip6gre1 entered promiscuous mode [ 430.965875][ T1511] fuse: Bad value for 'fd' [ 430.976774][ T1511] device hsr0 entered promiscuous mode [ 430.986524][ T1513] EXT4-fs (loop3): Test dummy encryption mode enabled [ 430.996617][ T1513] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.298: inode has both inline data and extents flags [ 431.012351][ T1513] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.298: couldn't read orphan inode 15 (err -117) [ 431.024316][ T293] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 431.027378][ T1516] EXT4-fs: Ignoring removed bh option [ 431.032348][ T1513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 431.048306][ T1516] EXT4-fs (loop4): unable to read superblock [ 431.064917][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.073099][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.091149][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.099883][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.108469][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.115534][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.135325][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.143779][ T1516] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 431.154314][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.162934][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.170010][ T737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.178043][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.186353][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.194511][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.198589][ T1516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 431.202726][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.211069][ T308] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 431.228578][ T1516] ext2 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.232432][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.253658][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.262131][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.270790][ T293] usb 2-1: Using ep0 maxpacket: 8 [ 431.272624][ T1460] device veth0_vlan entered promiscuous mode [ 432.141921][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.155729][ T308] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 432.179280][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.205394][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.607080][ T308] usb 1-1: Product: syz [ 432.611494][ T308] usb 1-1: Manufacturer: syz [ 432.616101][ T308] usb 1-1: SerialNumber: syz [ 432.623565][ T291] EXT4-fs (loop4): unmounting filesystem. [ 432.646110][ T1460] device veth1_macvtap entered promiscuous mode [ 432.655306][ T293] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 432.655473][ T287] EXT4-fs (loop3): unmounting filesystem. [ 432.664411][ T293] usb 2-1: config 179 has no interface number 0 [ 432.677519][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.684962][ T293] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 432.693055][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.696861][ T293] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 432.721592][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.733906][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.739785][ T293] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.751176][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.770727][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.774262][ T293] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 432.789635][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.790994][ T293] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 432.814140][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.829984][ T737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.830293][ T293] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 432.847973][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.861236][ T308] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 432.872114][ T308] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 432.876111][ T573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.881314][ T308] usb 1-1: unable to issue vendor read request (ret = -71) [ 432.896464][ T1506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 432.898263][ T573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.914159][ T308] usb 1-1: unable to issue vendor read request (ret = -71) [ 432.929921][ T308] usb 1-1: unable to issue vendor read request (ret = -71) [ 432.942843][ T573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.944295][ T308] usb 1-1: unable to issue vendor read request (ret = -71) [ 432.973291][ T1525] set_capacity_and_notify: 10 callbacks suppressed [ 432.973308][ T1525] loop4: detected capacity change from 0 to 40427 [ 432.974421][ T308] usb 1-1: unable to issue vendor read request (ret = -71) [ 432.985107][ T1535] loop5: detected capacity change from 0 to 512 [ 432.999935][ T1525] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 433.003663][ T308] usb 1-1: unable to issue vendor read request (ret = -71) [ 433.007782][ T1535] EXT4-fs: Ignoring removed bh option [ 433.020453][ T1525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 433.028950][ T1525] F2FS-fs (loop4): Image doesn't support compression [ 433.036597][ T1525] F2FS-fs (loop4): Image doesn't support compression [ 433.036696][ T1535] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 433.043245][ T308] usb 1-1: unable to issue vendor read request (ret = -71) [ 433.056945][ T308] usb 1-1: unable to issue vendor read request (ret = -71) [ 433.060409][ T1525] F2FS-fs (loop4): invalid crc value [ 433.074613][ T1525] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 433.086226][ T308] usb 1-1: USB disconnect, device number 8 [ 433.102180][ T1535] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 433.110625][ T1525] F2FS-fs (loop4): Start checkpoint disabled! [ 433.125949][ T1535] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.305: bg 0: block 248: padding at end of block bitmap is not set [ 433.138846][ T1525] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 433.147903][ T1535] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.305: Failed to acquire dquot type 1 [ 433.148703][ T293] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 433.170009][ T1535] EXT4-fs (loop5): 1 truncate cleaned up [ 433.176279][ T1535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 433.181079][ T573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.186751][ T1525] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 433.200125][ T60] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 433.208182][ T1525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 433.228474][ T1460] EXT4-fs (loop5): unmounting filesystem. [ 433.255908][ T1525] syz.4.302: attempt to access beyond end of device [ 433.255908][ T1525] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.276741][ T1540] bridge0: port 3(veth1_macvtap) entered blocking state [ 433.284202][ T1540] bridge0: port 3(veth1_macvtap) entered disabled state [ 433.284496][ T738] kworker/u4:9: attempt to access beyond end of device [ 433.284496][ T738] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 433.292030][ T1540] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 433.421700][ T60] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.433153][ T60] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.446089][ T60] usb 4-1: config 0 interface 0 has no altsetting 0 [ 433.460646][ T60] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 433.476706][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.490419][ T1545] loop0: detected capacity change from 0 to 16 [ 433.491979][ T60] usb 4-1: config 0 descriptor?? [ 433.517941][ T1545] erofs: (device loop0): mounted with root inode @ nid 36. [ 433.534943][ T28] kauditd_printk_skb: 288 callbacks suppressed [ 433.534956][ T28] audit: type=1400 audit(1789195981.762:6968): avc: denied { ioctl } for pid=1544 comm="syz.0.308" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 433.584736][ T28] audit: type=1400 audit(1789195981.812:6969): avc: denied { write } for pid=1544 comm="syz.0.308" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 433.632780][ T1551] xt_hashlimit: size too large, truncated to 1048576 [ 433.806237][ T1554] loop0: detected capacity change from 0 to 8192 [ 433.851014][ T1554] loop0: p1 p2 p3 [ 433.855214][ T1554] loop0: p1 start 68157184 is beyond EOD, truncated [ 433.891271][ T1556] FAULT_INJECTION: forcing a failure. [ 433.891271][ T1556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.910707][ T28] audit: type=1400 audit(1789195982.132:6970): avc: denied { create } for pid=1559 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 433.920622][ T1556] CPU: 0 PID: 1556 Comm: syz.4.310 Tainted: G W syzkaller #0 [ 433.939199][ T1556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.949258][ T1556] Call Trace: [ 433.952532][ T1556] [ 433.955453][ T1556] __dump_stack+0x21/0x24 [ 433.959792][ T1556] dump_stack_lvl+0x110/0x170 [ 433.964463][ T1556] ? __cfi_dump_stack_lvl+0x8/0x8 [ 433.969518][ T1556] ? _parse_integer+0x2a/0x40 [ 433.974185][ T1556] dump_stack+0x15/0x24 [ 433.978333][ T1556] should_fail_ex+0x3bf/0x510 [ 433.983021][ T1556] should_fail+0xb/0x10 [ 433.987191][ T1556] should_fail_usercopy+0x1a/0x20 [ 433.992209][ T1556] _copy_from_user+0x1e/0xc0 [ 433.996792][ T1556] ___sys_sendmsg+0x1c3/0x360 [ 434.001470][ T1556] ? __sys_sendmsg+0x290/0x290 [ 434.006225][ T1556] ? __kasan_check_write+0x14/0x20 [ 434.011322][ T1556] ? proc_fail_nth_write+0x180/0x200 [ 434.016617][ T1556] ? vfs_write+0xa51/0xd00 [ 434.021047][ T1556] ? __fdget+0x19c/0x220 [ 434.025287][ T1556] __x64_sys_sendmsg+0x20d/0x2e0 [ 434.030295][ T1556] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 434.035843][ T1556] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 434.041917][ T1556] x64_sys_call+0x171/0x9a0 [ 434.046499][ T1556] do_syscall_64+0x4c/0xa0 [ 434.050913][ T1556] ? clear_bhb_loop+0x30/0x80 [ 434.055588][ T1556] ? clear_bhb_loop+0x30/0x80 [ 434.060327][ T1556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.066229][ T1556] RIP: 0033:0x7f3c1f79e159 [ 434.070651][ T1556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.090279][ T1556] RSP: 002b:00007f3c205b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.098697][ T1556] RAX: ffffffffffffffda RBX: 00007f3c1fa25fa0 RCX: 00007f3c1f79e159 [ 434.106665][ T1556] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 434.114643][ T1556] RBP: 00007f3c205b7090 R08: 0000000000000000 R09: 0000000000000000 [ 434.122688][ T1556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.130667][ T1556] R13: 00007f3c1fa26038 R14: 00007f3c1fa25fa0 R15: 00007fff6fe06c78 [ 434.138635][ T1556] [ 434.142300][ T60] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found [ 434.143393][ T293] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.150369][ T60] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found [ 434.170442][ T28] audit: type=1326 audit(1789195982.372:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1539 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8b9e159 code=0x7fc00000 [ 434.208325][ T28] audit: type=1326 audit(1789195982.372:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1539 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fced8b9e159 code=0x7fc00000 [ 434.235643][ T28] audit: type=1326 audit(1789195982.392:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1539 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8b9e159 code=0x7fc00000 [ 434.248076][ T313] udevd[313]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 434.272107][ T315] udevd[315]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 434.289780][ T28] audit: type=1326 audit(1789195982.392:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1539 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8b9e159 code=0x7fc00000 [ 434.312359][ T1570] loop4: detected capacity change from 0 to 512 [ 434.326894][ T28] audit: type=1326 audit(1789195982.392:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1539 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8b9e159 code=0x7fc00000 [ 434.356842][ T28] audit: type=1326 audit(1789195982.392:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1539 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8b9e159 code=0x7fc00000 [ 434.359085][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 434.382054][ T28] audit: type=1326 audit(1789195982.392:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1539 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced8b9e159 code=0x7fc00000 [ 434.390542][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 434.424279][ T1570] EXT4-fs (loop4): Test dummy encryption mode enabled [ 434.434828][ T293] usb 2-1: USB disconnect, device number 4 [ 434.441368][ T293] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 434.463792][ T1570] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.316: inode has both inline data and extents flags [ 434.486607][ T1570] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.316: couldn't read orphan inode 15 (err -117) [ 434.493506][ T1584] loop5: detected capacity change from 0 to 512 [ 434.506917][ T1582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 434.517768][ T6] usb 4-1: USB disconnect, device number 11 [ 434.527135][ T1570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 434.548180][ T1584] EXT4-fs (loop5): Test dummy encryption mode enabled [ 434.555999][ T1584] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 434.569701][ T1586] loop1: detected capacity change from 0 to 2048 [ 434.588224][ T1584] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.321: bad orphan inode 131083 [ 434.599127][ T1584] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 434.624617][ T1586] netlink: 204 bytes leftover after parsing attributes in process `syz.1.322'. [ 434.642045][ T1583] fscrypt: AES-256-XTS using blk-crypto-fallback [ 434.905256][ T1603] loop0: detected capacity change from 0 to 256 [ 435.065064][ T1603] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 435.212697][ T510] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 435.251633][ T1460] EXT4-fs (loop5): unmounting filesystem. [ 435.259384][ T1610] FAULT_INJECTION: forcing a failure. [ 435.259384][ T1610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.272684][ T1603] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 435.283558][ T1603] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 435.296138][ T1610] CPU: 1 PID: 1610 Comm: syz.3.329 Tainted: G W syzkaller #0 [ 435.304916][ T1610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.314973][ T1610] Call Trace: [ 435.318704][ T1610] [ 435.322080][ T1610] __dump_stack+0x21/0x24 [ 435.326426][ T1610] dump_stack_lvl+0x110/0x170 [ 435.331106][ T1610] ? __cfi_dump_stack_lvl+0x8/0x8 [ 435.336224][ T1610] ? _parse_integer+0x2a/0x40 [ 435.340905][ T1610] dump_stack+0x15/0x24 [ 435.345076][ T1610] should_fail_ex+0x3bf/0x510 [ 435.349764][ T1610] should_fail+0xb/0x10 [ 435.353941][ T1610] should_fail_usercopy+0x1a/0x20 [ 435.358993][ T1610] _copy_from_user+0x1e/0xc0 [ 435.363874][ T1610] ___sys_sendmsg+0x1c3/0x360 [ 435.368647][ T1610] ? __sys_sendmsg+0x290/0x290 [ 435.373421][ T1610] ? __kasan_check_write+0x14/0x20 [ 435.378707][ T1610] ? proc_fail_nth_write+0x180/0x200 [ 435.384002][ T1610] ? vfs_write+0xa51/0xd00 [ 435.388451][ T1610] ? __fdget+0x19c/0x220 [ 435.392811][ T1610] __x64_sys_sendmsg+0x20d/0x2e0 [ 435.397941][ T1610] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 435.403417][ T1610] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 435.409494][ T1610] x64_sys_call+0x171/0x9a0 [ 435.414014][ T1610] do_syscall_64+0x4c/0xa0 [ 435.418441][ T1610] ? clear_bhb_loop+0x30/0x80 [ 435.423125][ T1610] ? clear_bhb_loop+0x30/0x80 [ 435.427809][ T1610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.433715][ T1610] RIP: 0033:0x7f49bcf9e159 [ 435.438126][ T1610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.457717][ T1610] RSP: 002b:00007f49bdf50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.466121][ T1610] RAX: ffffffffffffffda RBX: 00007f49bd225fa0 RCX: 00007f49bcf9e159 [ 435.474080][ T1610] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 435.482045][ T1610] RBP: 00007f49bdf50090 R08: 0000000000000000 R09: 0000000000000000 [ 435.489999][ T1610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.497967][ T1610] R13: 00007f49bd226038 R14: 00007f49bd225fa0 R15: 00007ffe1d62d338 [ 435.506109][ T1610] [ 435.517485][ T291] EXT4-fs (loop4): unmounting filesystem. [ 435.571364][ T1618] 9pnet: Could not find request transport: fûGÈ#²CñÑ-g½µË®Œô©Gžçõ¢ER‹”�w -Ù¸E"Êö{"�©*æt [ 435.594387][ T1620] loop4: detected capacity change from 0 to 512 [ 435.610614][ T510] usb 2-1: Using ep0 maxpacket: 16 [ 435.626960][ T510] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.639056][ T510] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 435.652451][ T510] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.659387][ T510] usb 2-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 435.669674][ T510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.678509][ T510] usb 2-1: config 0 descriptor?? [ 435.683488][ T1620] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 435.691723][ T1620] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 435.698911][ T1630] loop5: detected capacity change from 0 to 512 [ 435.700023][ T1620] System zones: 0-1, 15-15, 18-18, 34-34 [ 435.721758][ T1620] EXT4-fs (loop4): orphan cleanup on readonly fs [ 435.737913][ T1620] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 435.755740][ T1620] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 435.763617][ T1620] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.331: bad orphan inode 16 [ 435.774183][ T1620] ext4_test_bit(bit=15, block=18) = 1 [ 435.780829][ T1620] is_bad_inode(inode)=0 [ 435.785029][ T1620] NEXT_ORPHAN(inode)=0 [ 435.789118][ T1620] max_ino=32 [ 435.792442][ T1620] i_nlink=2 [ 435.795675][ T1620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 435.820616][ T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 435.866870][ T291] EXT4-fs (loop4): unmounting filesystem. [ 435.868112][ T1638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'. [ 435.885142][ T1638] netlink: 67 bytes leftover after parsing attributes in process `syz.0.339'. [ 435.892756][ T510] usbhid 2-1:0.0: can't add hid device: -71 [ 435.949032][ T510] usbhid: probe of 2-1:0.0 failed with error -71 [ 435.950347][ T1641] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.956914][ T510] usb 2-1: USB disconnect, device number 5 [ 435.981839][ T1641] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.991203][ T1643] EXT4-fs (loop0): Test dummy encryption mode enabled [ 436.021847][ T1643] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.342: inode has both inline data and extents flags [ 436.114190][ T1643] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.342: couldn't read orphan inode 15 (err -117) [ 436.127644][ T1643] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 436.600697][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.099666][ T510] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 437.237529][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.248885][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.258716][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 214, changing to 11 [ 437.332055][ T510] usb 5-1: unable to get BOS descriptor or descriptor too short [ 437.346373][ T1654] ext4: Unknown parameter 'appraise_type' [ 437.363831][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25092, setting to 1024 [ 437.376095][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 437.385224][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.415514][ T6] usb 4-1: config 0 descriptor?? [ 437.443320][ T6] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 437.476330][ T6] usbhid 4-1:0.0: can't add hid device: -22 [ 437.487207][ T510] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.497651][ T510] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.515083][ T6] usbhid: probe of 4-1:0.0 failed with error -22 [ 437.526748][ T1663] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 437.540765][ T1665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.348'. [ 437.639240][ T510] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 437.650917][ T510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.659843][ T510] usb 5-1: Product: syz [ 437.664999][ T290] EXT4-fs (loop0): unmounting filesystem. [ 437.669054][ T510] usb 5-1: Manufacturer: syz [ 437.682361][ T510] usb 5-1: SerialNumber: syz [ 437.774417][ T1673] erofs: (device loop1): mounted with root inode @ nid 36. [ 437.832297][ T1673] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 437.841379][ T1673] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 437.850969][ T1673] syz.1.348: attempt to access beyond end of device [ 437.850969][ T1673] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 437.866226][ T1673] syz.1.348: attempt to access beyond end of device [ 437.866226][ T1673] loop1: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 437.880195][ T1673] syz.1.348: attempt to access beyond end of device [ 437.880195][ T1673] loop1: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 438.615011][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 438.615027][ T28] audit: type=1400 audit(1789195986.832:7076): avc: denied { name_bind } for pid=1615 comm="syz.3.332" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 438.643570][ T28] audit: type=1400 audit(1789195986.832:7077): avc: denied { node_bind } for pid=1615 comm="syz.3.332" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 438.674624][ T1460] EXT4-fs (loop5): unmounting filesystem. [ 438.794566][ T510] usb 5-1: config 0 descriptor?? [ 438.824283][ T28] audit: type=1400 audit(1789195987.052:7078): avc: denied { connect } for pid=1682 comm="syz.5.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.833762][ T1685] 9pnet_fd: Insufficient options for proto=fd [ 438.855432][ T28] audit: type=1400 audit(1789195987.082:7079): avc: denied { mmap_zero } for pid=1682 comm="syz.5.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 438.892027][ T1692] overlayfs: missing 'lowerdir' [ 438.916247][ T1696] set_capacity_and_notify: 5 callbacks suppressed [ 438.916259][ T1696] loop5: detected capacity change from 0 to 512 [ 438.935436][ T1696] EXT4-fs (loop5): Test dummy encryption mode enabled [ 438.948155][ T1696] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.359: inode has both inline data and extents flags [ 438.957921][ T28] audit: type=1400 audit(1789195987.172:7080): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 438.962798][ T410] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 438.981489][ T6] usb 5-1: USB disconnect, device number 4 [ 438.999573][ T1699] loop4: detected capacity change from 0 to 512 [ 439.001330][ T1696] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.359: couldn't read orphan inode 15 (err -117) [ 439.017972][ T1696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 439.036779][ T1699] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 439.045913][ T1699] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.091993][ T28] audit: type=1400 audit(1789195987.322:7081): avc: denied { append } for pid=1698 comm="syz.4.360" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.160694][ T293] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 439.190678][ T410] usb 1-1: Using ep0 maxpacket: 32 [ 439.198311][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.209961][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.220738][ T410] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 439.236314][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.314031][ T410] usb 1-1: config 0 descriptor?? [ 439.328188][ T410] hub 1-1:0.0: USB hub found [ 439.533005][ T410] hub 1-1:0.0: 1 port detected [ 439.856696][ T60] usb 4-1: USB disconnect, device number 12 [ 439.899655][ T1460] EXT4-fs (loop5): unmounting filesystem. [ 439.956830][ T291] EXT4-fs (loop4): unmounting filesystem. [ 439.976093][ T1716] 9pnet_fd: Insufficient options for proto=fd [ 439.982285][ T1707] kvm [1706]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x78ce [ 439.996037][ T1707] kvm [1706]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x442d [ 440.002879][ T1718] loop4: detected capacity change from 0 to 512 [ 440.015557][ T293] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.025628][ T1718] EXT4-fs (loop4): orphan cleanup on readonly fs [ 440.025665][ T1718] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.366: Directory hole found for htree index block 0 [ 440.040894][ T293] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.054356][ T1718] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 440.054421][ T293] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 440.072537][ T293] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.074264][ T1718] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 440.087167][ T293] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 440.103620][ T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.111719][ T293] usb 2-1: Product: syz [ 440.116094][ T293] usb 2-1: Manufacturer: syz [ 440.125026][ T293] usb 2-1: SerialNumber: syz [ 440.125207][ T1718] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 440.152469][ T410] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 440.220590][ T510] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 440.250737][ T1718] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.366: Directory hole found for htree index block 0 [ 440.271415][ T1718] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.366: Directory hole found for htree index block 0 [ 440.305823][ T291] EXT4-fs (loop4): unmounting filesystem. [ 440.347377][ T28] audit: type=1400 audit(1789195988.572:7082): avc: denied { block_suspend } for pid=1687 comm="syz.1.355" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 440.351524][ T19] usb 2-1: USB disconnect, device number 6 [ 440.372176][ T510] usb 6-1: device descriptor read/64, error -71 [ 440.393619][ T1721] loop3: detected capacity change from 0 to 1024 [ 440.415344][ T1721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 440.670602][ T510] usb 6-1: device descriptor read/64, error -71 [ 440.677081][ T19] usb 1-1: USB disconnect, device number 9 [ 440.915525][ T1735] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.939484][ T28] audit: type=1400 audit(1789195989.162:7083): avc: denied { read } for pid=1736 comm="syz.1.370" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 440.940593][ T510] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 440.972522][ T28] audit: type=1400 audit(1789195989.202:7084): avc: denied { mount } for pid=1736 comm="syz.1.370" name="/" dev="ramfs" ino=22273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 441.041278][ T28] audit: type=1400 audit(1789195989.272:7085): avc: denied { mount } for pid=1739 comm="syz.0.371" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 441.056662][ T1738] loop1: detected capacity change from 0 to 8192 [ 441.124792][ T1738] loop1: p1 p2 p3 [ 441.129494][ T1738] loop1: p1 start 68157184 is beyond EOD, truncated [ 441.147658][ T1744] loop0: detected capacity change from 0 to 512 [ 441.161723][ T510] usb 6-1: device descriptor read/64, error -71 [ 441.181871][ T1744] EXT4-fs (loop0): Test dummy encryption mode enabled [ 441.196338][ T1744] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.372: inode has both inline data and extents flags [ 441.216647][ T1744] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.372: couldn't read orphan inode 15 (err -117) [ 441.229504][ T1744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 441.323282][ T1753] 9pnet_fd: Insufficient options for proto=fd [ 441.354455][ T287] EXT4-fs (loop3): unmounting filesystem. [ 441.471008][ T510] usb 6-1: device descriptor read/64, error -71 [ 441.506334][ T1761] loop3: detected capacity change from 0 to 512 [ 441.586241][ T1761] EXT4-fs (loop3): Test dummy encryption mode enabled [ 441.641797][ T510] usb usb6-port1: attempt power cycle [ 441.704726][ T1761] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.379: inode has both inline data and extents flags [ 441.859762][ T1761] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.379: couldn't read orphan inode 15 (err -117) [ 441.929822][ T1761] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 442.120613][ T510] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 442.161652][ T510] usb 6-1: device descriptor read/8, error -71 [ 442.186757][ T290] EXT4-fs (loop0): unmounting filesystem. [ 442.282920][ T287] EXT4-fs (loop3): unmounting filesystem. [ 442.312832][ T510] usb 6-1: device descriptor read/8, error -71 [ 442.371225][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 442.387274][ T1793] loop1: detected capacity change from 0 to 512 [ 442.404985][ T1779] loop0: detected capacity change from 0 to 40427 [ 442.420595][ T1779] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 442.428458][ T1779] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 442.441039][ T1779] F2FS-fs (loop0): invalid crc value [ 442.457529][ T1779] F2FS-fs (loop0): Found nat_bits in checkpoint [ 442.503663][ T1779] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 442.510983][ T1779] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 442.512776][ T1805] loop4: detected capacity change from 0 to 512 [ 442.566430][ T1805] EXT4-fs (loop4): Test dummy encryption mode enabled [ 442.577975][ T1805] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.393: inode has both inline data and extents flags [ 442.591361][ T510] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 442.602779][ T1805] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.393: couldn't read orphan inode 15 (err -117) [ 442.605936][ T1794] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 442.615523][ T1806] loop3: p1 p2 p3 [ 442.626937][ T1806] loop3: p1 start 68157184 is beyond EOD, truncated [ 442.631630][ T510] usb 6-1: device descriptor read/8, error -71 [ 442.634195][ T1794] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 442.648290][ T1805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 442.648698][ T1794] ================================================================================ [ 442.670958][ T1794] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:942:5 [ 442.677960][ T1794] shift exponent 173 is too large for 64-bit type 'unsigned long' [ 442.686284][ T1794] CPU: 0 PID: 1794 Comm: syz.1.390 Tainted: G W syzkaller #0 [ 442.695060][ T1794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.705128][ T1794] Call Trace: [ 442.708408][ T1794] [ 442.711413][ T1794] __dump_stack+0x21/0x24 [ 442.715737][ T1794] dump_stack_lvl+0x110/0x170 [ 442.720407][ T1794] ? __cfi_dump_stack_lvl+0x8/0x8 [ 442.725430][ T1794] ? __kasan_slab_free+0x11/0x20 [ 442.730362][ T1794] dump_stack+0x15/0x24 [ 442.734523][ T1794] ubsan_epilogue+0xe/0x40 [ 442.738923][ T1794] __ubsan_handle_shift_out_of_bounds+0x364/0x3f0 [ 442.745340][ T1794] ? match_int+0x142/0x1a0 [ 442.749762][ T1794] parse_options+0x4a47/0x4a50 [ 442.754599][ T1794] ? default_options+0xca0/0xca0 [ 442.759617][ T1794] ? kstrdup+0x56/0x80 [ 442.763687][ T1794] ? memcpy+0x56/0x70 [ 442.767658][ T1794] f2fs_fill_super+0x2660/0x73f0 [ 442.772590][ T1794] ? __cfi_f2fs_fill_super+0x10/0x10 [ 442.777874][ T1794] ? mutex_unlock+0x8f/0x230 [ 442.782476][ T1794] ? set_blocksize+0x1cc/0x470 [ 442.787247][ T1794] ? sb_set_blocksize+0xaa/0xf0 [ 442.792094][ T1794] ? __cfi_f2fs_fill_super+0x10/0x10 [ 442.797370][ T1794] mount_bdev+0x29b/0x3d0 [ 442.801702][ T1794] ? __cfi_f2fs_fill_super+0x10/0x10 [ 442.806974][ T1794] f2fs_mount+0x34/0x40 [ 442.811121][ T1794] legacy_get_tree+0xfe/0x1a0 [ 442.815812][ T1794] ? __cfi_f2fs_mount+0x10/0x10 [ 442.820663][ T1794] vfs_get_tree+0x9a/0x270 [ 442.825082][ T1794] do_new_mount+0x251/0xb40 [ 442.829592][ T1794] ? security_capable+0x99/0xc0 [ 442.834521][ T1794] path_mount+0x640/0xfd0 [ 442.839057][ T1794] __se_sys_mount+0x320/0x390 [ 442.843735][ T1794] ? do_mkdirat+0x460/0x4d0 [ 442.848238][ T1794] ? __x64_sys_mount+0xd0/0xd0 [ 442.852995][ T1794] __x64_sys_mount+0xbf/0xd0 [ 442.857572][ T1794] x64_sys_call+0x65d/0x9a0 [ 442.862065][ T1794] do_syscall_64+0x4c/0xa0 [ 442.866486][ T1794] ? clear_bhb_loop+0x30/0x80 [ 442.871171][ T1794] ? clear_bhb_loop+0x30/0x80 [ 442.875838][ T1794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.881718][ T1794] RIP: 0033:0x7f546cb9f3ca [ 442.886130][ T1794] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.905935][ T1794] RSP: 002b:00007f546da8ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 442.914342][ T1794] RAX: ffffffffffffffda RBX: 00007f546da8eee0 RCX: 00007f546cb9f3ca [ 442.922305][ T1794] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f546da8eea0 [ 442.930263][ T1794] RBP: 0000200000000240 R08: 00007f546da8eee0 R09: 0000000000000048 [ 442.938223][ T1794] R10: 0000000000000048 R11: 0000000000000246 R12: 0000200000000000 [ 442.946210][ T1794] R13: 00007f546da8eea0 R14: 0000000000005526 R15: 0000200000000280 [ 442.954181][ T1794] [ 442.957506][ T1794] ================================================================================ [ 442.969814][ T1794] F2FS-fs (loop1): Not support 35184372088832, larger than 256 [ 443.028518][ T510] usb 6-1: device descriptor read/8, error -71 [ 443.170971][ T510] usb usb6-port1: unable to enumerate USB device [ 443.628725][ T291] EXT4-fs (loop4): unmounting filesystem. [ 444.120654][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!