last executing test programs:

4m10.12420243s ago: executing program 32 (id=40):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0})
mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc000, 0xe)

3m57.874013762s ago: executing program 33 (id=427):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200008, &(0x7f0000000440)={[{@noload}, {@noinit_itable}, {@inlinecrypt}, {@resgid={'resgid', 0x3d, 0xee00}}, {@norecovery}, {@resuid}, {@noblock_validity}, {@dioread_nolock}]}, 0xfe, 0x575, &(0x7f0000000ec0)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

3m52.443685008s ago: executing program 34 (id=581):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendto(r0, &(0x7f00000004c0)="0a363b4b485ccf10360eacddfc33c446ffd9fa74ebf7423d84e5c9bef5a1686913dc9d7ef572c648a7c15547f8faec7d681bc7a91ce44e66", 0x38, 0x40004, &(0x7f0000000540)=@rc={0x1f, @none, 0x94}, 0x80)

3m51.759390163s ago: executing program 35 (id=593):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000180), 0x4)

3m46.552677103s ago: executing program 36 (id=646):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)={0x28, r1, 0x1, 0x4070bd31, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800)

3m43.697383715s ago: executing program 37 (id=699):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x880)

3m35.624514096s ago: executing program 8 (id=936):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=0x2, 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0)

3m35.575014508s ago: executing program 8 (id=940):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x6, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000b00)={0x0, 0x0}, 0x10)

3m35.545330429s ago: executing program 8 (id=941):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00')
lseek(r0, 0x9, 0x0)

3m35.47731497s ago: executing program 8 (id=943):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2)

3m35.428416961s ago: executing program 8 (id=944):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x82141000)

3m34.406443413s ago: executing program 8 (id=947):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r0, &(0x7f0000001600)=[{&(0x7f0000000240)=""/218, 0xda}], 0x1)
close(r1)

3m17.796246997s ago: executing program 38 (id=947):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r0, &(0x7f0000001600)=[{&(0x7f0000000240)=""/218, 0xda}], 0x1)
close(r1)

2m59.499289058s ago: executing program 1 (id=1711):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = syz_io_uring_setup(0x8f3, &(0x7f0000000b80)={0x0, 0x43b40, 0x8, 0xffffffff, 0x2b4, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000100))
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2m59.491625078s ago: executing program 1 (id=1712):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m59.41993112s ago: executing program 1 (id=1713):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x70, 0x24, 0x902, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x0, 0x1}, {0x1c4ad1b8f6fb5d9e, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xd4, 0x5, 0x4, 0x0, 0x4, 0x80000000}}, {0x4}}, {{0x1c, 0x1, {0xf9, 0x8, 0xf, 0x9, 0x0, 0xdf, 0x8}}, {0x4}}]}]}, 0x70}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe8000"/229], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

2m59.286016102s ago: executing program 1 (id=1714):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c666d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c0092803b831534d131135366249e8a045ee656058ddf6f41400b01a0870e4c656ef6f11325a20c319fd81269acc3b77200feb4294a821f553876d64b4a41390c44492e6f79c4b09bbe8e5cb02585b919505651c34f3e21f9532204a0c936a1da6422edb1108cf73536e8fbe241e030f5b5e1d081994fbe8a093c44b63f3da6a8a46706b47fa3"], 0x1, 0x153e, &(0x7f00000034c0)="$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")
mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0)
mount$9p_virtio(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100020, &(0x7f0000000480)=ANY=[])

2m59.079220457s ago: executing program 1 (id=1715):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x440})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)

2m58.92335464s ago: executing program 1 (id=1716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r1, 0x809, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008180}, 0x4004880)

2m58.894426691s ago: executing program 39 (id=1716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r1, 0x809, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008180}, 0x4004880)

1m15.731637043s ago: executing program 3 (id=4366):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)

1m15.696054504s ago: executing program 3 (id=4367):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup=r1, r0, 0x20, 0x0, r1, @void, @value=r1}, 0x20)

1m15.647940225s ago: executing program 3 (id=4370):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_SRC={0x8, 0x2, @private=0xa010102}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x34}}, 0x4000)

1m15.605685706s ago: executing program 3 (id=4372):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@volatile}]})

1m15.344778171s ago: executing program 3 (id=4377):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x207e, 0x0)
close_range(r0, r0, 0x0)

1m15.098662577s ago: executing program 9 (id=4385):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc)

1m15.039331148s ago: executing program 3 (id=4386):
mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)

1m14.94200837s ago: executing program 40 (id=4386):
mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)

1m14.934819351s ago: executing program 9 (id=4397):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x20, 0xe, 0x2, {0x2, 0x24}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m13.119722969s ago: executing program 9 (id=4450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010027bd7000fbdbdf250a000040000000070600000008000d000900000029000e"], 0x2c}, 0x1, 0x0, 0x0, 0x24048865}, 0x40)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

1m13.020337811s ago: executing program 9 (id=4451):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}, {@volatile}]})

1m12.992110132s ago: executing program 9 (id=4452):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r0})

1m12.867247975s ago: executing program 9 (id=4453):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000004000000", @ANYRES32, @ANYBLOB="0000000000000000003820b178c184c522000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001"], 0x50)

1m12.820756416s ago: executing program 41 (id=4453):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000004000000", @ANYRES32, @ANYBLOB="0000000000000000003820b178c184c522000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001"], 0x50)

38.738353743s ago: executing program 4 (id=5404):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r0, 0x701, 0x10, 0xfffffffe, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)

38.678712355s ago: executing program 4 (id=5406):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x5, 0x558b, &(0x7f00000079c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

37.892412511s ago: executing program 4 (id=5427):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000340)={0x5, {{0x2, 0x800, @multicast2}}, {{0x2, 0x3ff, @local}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

37.747632385s ago: executing program 4 (id=5433):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000040)="ff02040000ffffffffffffff1f2be82db1af0000", 0x14)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)

37.734081565s ago: executing program 4 (id=5434):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

37.719155955s ago: executing program 4 (id=5435):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040)

21.221356887s ago: executing program 42 (id=5435):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040)

15.435586451s ago: executing program 0 (id=5898):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010000104000002000004000000000000", @ANYRES32=0x0, @ANYBLOB="8b90000010e3040008000500", @ANYRES32=r1, @ANYBLOB="3800128009000100766c616e000000002800028006000100040000001c0004"], 0x60}, 0x1, 0x0, 0x0, 0x24040804}, 0x4054)

15.379168742s ago: executing program 0 (id=5900):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

15.329009773s ago: executing program 0 (id=5902):
setresuid(0xee01, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x5, 0x0, 0x0)

15.277459224s ago: executing program 0 (id=5904):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x12, 0x7, 0x9}, {{0x77359400}, 0x0, 0x0, 0x3}], 0x30)

15.254897565s ago: executing program 0 (id=5907):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

15.229071075s ago: executing program 0 (id=5909):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x0, 0x0, 0x37bb}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000000)="cc32", &(0x7f0000000080)=""/35}, 0x20)

1.259928993s ago: executing program 5 (id=6207):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0xbe9a}}, {@sysvgroups}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x34, 0x3)

1.188012955s ago: executing program 7 (id=6209):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001e00431b000000000000000007", @ANYRESDEC=r0], 0x28}}, 0x4048014)

1.006612939s ago: executing program 5 (id=6212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

956.86005ms ago: executing program 7 (id=6213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x5, 0x37, 0x0, &(0x7f0000000940)="66d4492a0a1b30e6f5d85a6d99e5caab518d16931a993deb32f484e618267a5c7e0e3a90d4d29567ada9b6dc97fefd2cbc0122663b2aea", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50)

850.708392ms ago: executing program 5 (id=6215):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x3000000}, 0x27)

828.020483ms ago: executing program 7 (id=6216):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3d2de2d5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d6c3f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40dfc4e1c24ecafb84f531cbc4b2ee41cbda0dbf2"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
setuid(0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3)

769.621514ms ago: executing program 5 (id=6219):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x30, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)

747.298494ms ago: executing program 6 (id=6220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0e000000040000000800000003"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc)

729.846365ms ago: executing program 5 (id=6221):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0)

669.412516ms ago: executing program 6 (id=6223):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88)
close(0x3)

628.157137ms ago: executing program 6 (id=6224):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0x0, 0xffffd000)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r0, 0x0, 0x0)

574.489188ms ago: executing program 2 (id=6226):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000004c0)={0x0, 0x80000000})

563.931048ms ago: executing program 6 (id=6227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000240007800c0003000300000000000000080002"], 0x38}}, 0x0)

533.198859ms ago: executing program 2 (id=6228):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x20000007c, 0x80001)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000002300))

497.51964ms ago: executing program 2 (id=6229):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000008c0)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

477.02391ms ago: executing program 6 (id=6230):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

431.115461ms ago: executing program 6 (id=6231):
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioprio_set$pid(0x2, 0x0, 0x4007)

304.096744ms ago: executing program 2 (id=6232):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f0000000380)=""/148}, 0x94)

174.169837ms ago: executing program 7 (id=6233):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x0, 0x2d4, 0x0, 0xf})

163.142917ms ago: executing program 2 (id=6234):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

116.403708ms ago: executing program 2 (id=6235):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0xb, 0xfb}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x21, 0x28, {0x28, 0x11, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

50.710019ms ago: executing program 7 (id=6236):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x3, 0x9dc8, 0x80, 0x0, 0x11})

5.14326ms ago: executing program 7 (id=6237):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f)

0s ago: executing program 5 (id=6238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd7000fbdbdf251c0000001800018014000200"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006)

kernel console output (not intermixed with test programs):

cket permissive=1
[  220.335976][   T28] audit: type=1400 audit(1784724542.254:13604): avc:  denied  { nlmsg_read } for  pid=11497 comm="syz.7.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  220.358283][   T28] audit: type=1400 audit(1784724542.318:13605): avc:  denied  { append } for  pid=11501 comm="syz.7.4900" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  220.394908][  T443] udevd[443]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  220.394931][ T2013] udevd[2013]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  220.412035][ T2012] udevd[2012]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  220.465195][T11511] erofs: (device loop7): mounted with root inode @ nid 36.
[  220.648516][T11507] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  220.666241][T11507] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  220.674643][T11507] F2FS-fs (loop2): Image doesn't support compression
[  220.683289][T11507] F2FS-fs (loop2): Image doesn't support compression
[  220.693005][T11507] F2FS-fs (loop2): invalid crc value
[  220.699414][T11507] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  220.748457][T11507] F2FS-fs (loop2): Start checkpoint disabled!
[  220.757632][T11507] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  220.777179][T11507] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  220.800135][T11507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  220.872605][T11543] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  220.884583][T11526] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  220.890968][T11526] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  220.899931][T11543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  220.916785][   T28] audit: type=1400 audit(1784724542.881:13606): avc:  denied  { execmem } for  pid=11546 comm="syz.4.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  220.924694][T11526] F2FS-fs (loop5): invalid crc value
[  220.939546][T11507] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0
[  220.958961][T11507] CPU: 0 PID: 11507 Comm: syz.2.4902 Tainted: G        W          syzkaller #0
[  220.967968][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  220.978087][T11507] Call Trace:
[  220.981399][T11507]  <TASK>
[  220.984360][T11507]  __dump_stack+0x21/0x24
[  220.988739][T11507]  dump_stack_lvl+0x110/0x170
[  220.993465][T11507]  ? __cfi_dump_stack_lvl+0x8/0x8
[  220.998548][T11507]  dump_stack+0x15/0x24
[  221.002785][T11507]  __f2fs_is_valid_blkaddr+0xcd2/0x1400
[  221.008388][T11507]  f2fs_is_valid_blkaddr+0x23/0x30
[  221.013566][T11507]  f2fs_map_blocks+0xc37/0x3c20
[  221.018482][T11507]  ? propagate_protected_usage+0xd8/0x230
[  221.024263][T11507]  ? __cfi_f2fs_map_blocks+0x10/0x10
[  221.024284][T11551] set_capacity_and_notify: 13 callbacks suppressed
[  221.024299][T11551] loop4: detected capacity change from 0 to 256
[  221.029963][T11551] exfat: Deprecated parameter 'namecase'
[  221.036108][T11507]  ? drain_stock+0xf7/0x260
[  221.036155][T11507]  ? xas_start+0x324/0x3e0
[  221.036187][T11507]  ? xas_load+0x394/0x3c0
[  221.045043][T11551] exfat: Deprecated parameter 'namecase'
[  221.048103][T11507]  ? xa_load+0xad/0xd0
[  221.048134][T11507]  ? max_file_blocks+0xb2/0x1d0
[  221.048167][T11507]  f2fs_mpage_readpages+0xa46/0x1b20
[  221.054033][T11551] exfat: Deprecated parameter 'namecase'
[  221.057123][T11507]  ? __mem_cgroup_uncharge_list+0x39/0xc0
[  221.057168][T11507]  ? dquot_release_reservation_block+0xa0/0xa0
[  221.098942][T11507]  ? folio_batch_move_lru+0x37a/0x470
[  221.104365][T11507]  f2fs_readahead+0xfc/0x240
[  221.109008][T11507]  ? __cfi_f2fs_readahead+0x10/0x10
[  221.114241][T11507]  read_pages+0x1bf/0xe10
[  221.118603][T11507]  ? page_cache_ra_unbounded+0x850/0x850
[  221.124275][T11507]  ? filemap_add_folio+0x113/0x260
[  221.129411][T11507]  page_cache_ra_unbounded+0x6ff/0x850
[  221.134902][T11507]  ? __cfi_page_cache_ra_unbounded+0x10/0x10
[  221.140910][T11507]  ? do_futex+0x2e2/0x430
[  221.145269][T11507]  force_page_cache_ra+0x2cb/0x330
[  221.150415][T11507]  generic_fadvise+0x437/0x720
[  221.155195][T11507]  ? __cfi_generic_fadvise+0x10/0x10
[  221.160505][T11507]  ? __fdget+0x19c/0x220
[  221.164798][T11507]  __x64_sys_fadvise64+0x14a/0x190
[  221.169943][T11507]  x64_sys_call+0x863/0x9a0
[  221.174473][T11507]  do_syscall_64+0x4c/0xa0
[  221.178928][T11507]  ? clear_bhb_loop+0x30/0x80
[  221.183622][T11507]  ? clear_bhb_loop+0x30/0x80
[  221.188314][T11507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  221.194246][T11507] RIP: 0033:0x7fdc1a59de99
[  221.198682][T11507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.218313][T11507] RSP: 002b:00007fdc1b4ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  221.226755][T11507] RAX: ffffffffffffffda RBX: 00007fdc1a825fa0 RCX: 00007fdc1a59de99
[  221.234749][T11507] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  221.242742][T11507] RBP: 00007fdc1a633eaf R08: 0000000000000000 R09: 0000000000000000
[  221.250731][T11507] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  221.258726][T11507] R13: 00007fdc1a826038 R14: 00007fdc1a825fa0 R15: 00007ffe6b950a88
[  221.266728][T11507]  </TASK>
[  221.272873][T11526] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  221.285927][T11551] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  221.293974][T11543] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  221.309535][T11543] ext4 filesystem being mounted at /908/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.364976][T11526] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  221.373536][ T1696] EXT4-fs (loop7): unmounting filesystem.
[  221.388051][T11526] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  221.486158][T10317] syz-executor: attempt to access beyond end of device
[  221.486158][T10317] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  221.566984][   T28] audit: type=1400 audit(1784724543.481:13607): avc:  denied  { mounton } for  pid=11570 comm="syz.2.4923" path="/667/file0" dev="tmpfs" ino=3460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  221.851346][   T28] audit: type=1326 audit(1784724543.742:13608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.2.4950" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1a59de99 code=0x7ffc0000
[  221.911841][T11619] __nla_validate_parse: 2 callbacks suppressed
[  221.911861][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4954'.
[  221.941529][   T28] audit: type=1326 audit(1784724543.742:13609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.2.4950" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1a59de99 code=0x7ffc0000
[  221.971334][   T28] audit: type=1326 audit(1784724543.779:13610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11610 comm="syz.2.4950" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1a59de99 code=0x7ffc0000
[  222.042466][T11613] loop7: detected capacity change from 0 to 8192
[  222.079221][T11613] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  222.097215][T11613] FAT-fs (loop7): Filesystem has been set read-only
[  222.265415][T11670] loop7: detected capacity change from 0 to 256
[  222.330150][T11676] device bridge1 entered promiscuous mode
[  222.337170][T11678] loop4: detected capacity change from 0 to 1024
[  222.350846][T11678] EXT4-fs: Ignoring removed orlov option
[  222.403348][T11678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  222.434282][T10453] EXT4-fs (loop4): unmounting filesystem.
[  222.508784][T11696] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4990'.
[  222.528048][T11696] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4990'.
[  222.538149][T11696] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4990'.
[  222.548352][T11696] tipc: MTU too low for tipc bearer
[  222.593372][T11704] loop5: detected capacity change from 0 to 256
[  222.624126][T11685] loop7: detected capacity change from 0 to 40427
[  222.648808][T11706] loop2: detected capacity change from 0 to 4096
[  222.681867][T11685] F2FS-fs (loop7): Found nat_bits in checkpoint
[  222.711718][T11706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  222.753012][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  222.779573][T11685] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  222.840802][T11729] loop4: detected capacity change from 0 to 256
[  222.857039][T11729] exfat: Deprecated parameter 'namecase'
[  222.879550][T11733] loop2: detected capacity change from 0 to 256
[  222.892829][T11733] exfat: Deprecated parameter 'namecase'
[  222.900990][T11729] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x62ca6c44, utbl_chksum : 0xe619d30d)
[  222.913618][ T1696] syz-executor: attempt to access beyond end of device
[  222.913618][ T1696] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  222.933922][T11733] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[  223.053850][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  223.111147][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  223.139837][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  223.147128][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): 
30ªî{X¹¦: link becomes ready
[  223.175490][T11747] loop0: detected capacity change from 0 to 512
[  223.198513][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  223.222956][T11747] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  223.230693][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  223.237384][T11747] ext4 filesystem being mounted at /925/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.249996][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  223.266597][T11741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  223.276026][T11741] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  223.320861][T11739] F2FS-fs (loop4): invalid crc value
[  223.339056][T11739] F2FS-fs (loop4): Found nat_bits in checkpoint
[  223.351975][  T288] EXT4-fs (loop0): unmounting filesystem.
[  223.406023][T11739] F2FS-fs (loop4): Start checkpoint disabled!
[  223.436651][T11739] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  223.459395][T11769] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5022'.
[  223.471289][T11739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  223.511990][T11769] device ip6gre2 entered promiscuous mode
[  223.564115][T11781] exfat: Deprecated parameter 'utf8'
[  223.584618][T11739] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=81000000, run fsck to fix.
[  223.597260][T11781] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  223.633821][T11785] device bridge1 entered promiscuous mode
[  223.669689][T11787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5031'.
[  223.697227][T11787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5031'.
[  223.886868][T11807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5039'.
[  224.017758][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5044'.
[  224.069775][T11822] device bridge0 entered promiscuous mode
[  224.087685][T11822] device macsec1 entered promiscuous mode
[  224.159280][T11830] exfat: Deprecated parameter 'namecase'
[  224.165806][T11830] exfat: Deprecated parameter 'namecase'
[  224.188268][T11830] exfat: Deprecated parameter 'utf8'
[  224.202768][T11830] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  224.300378][T11836] exfat: Deprecated parameter 'namecase'
[  224.334808][T11836] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[  224.444452][T11847] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5058'.
[  224.574131][T11779] F2FS-fs (loop5): invalid crc value
[  224.606799][T11779] F2FS-fs (loop5): Found nat_bits in checkpoint
[  224.656170][T11779] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  224.664469][T11861] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[  224.792151][T11779] F2FS-fs (loop5): Unrecognized mount option "noload" or missing value
[  224.858380][T11885] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  224.943119][T11893] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  224.969336][T11897] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  224.992155][   T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  225.010993][   T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  225.048846][   T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  225.134411][T11909] xt_hashlimit: size too large, truncated to 1048576
[  225.387597][T11922] exfat: Deprecated parameter 'utf8'
[  225.395045][T11905] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  225.424313][T11905] F2FS-fs (loop7): invalid crc value
[  225.453116][T11922] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  225.473859][T11905] F2FS-fs (loop7): Found nat_bits in checkpoint
[  225.556359][T11905] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  225.717518][T11935] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.5099: dx entry: limit 1024 != root limit 124
[  225.737867][T11935] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.5099: Corrupt directory, running e2fsck is recommended
[  225.751514][T11935] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  225.759999][T11935] EXT4-fs error (device loop2): ext4_iget_extra_inode:4765: inode #15: comm syz.2.5099: corrupted in-inode xattr
[  225.771164][T11937] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  225.781412][T11935] EXT4-fs (loop2): Remounting filesystem read-only
[  225.792160][   T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  225.800271][T11937] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.802667][T11935] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5099: couldn't read orphan inode 15 (err -117)
[  225.848783][T11935] EXT4-fs (loop2): Remounting filesystem read-only
[  225.855442][T11935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  225.858217][T11937] __quota_error: 46 callbacks suppressed
[  225.858269][T11937] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-6
[  225.905901][T11937] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  225.916256][T11937] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.5100: Failed to acquire dquot type 0
[  225.957534][T11935] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.5099: dx entry: limit 1024 != root limit 124
[  225.970618][T10317] EXT4-fs (loop5): unmounting filesystem.
[  225.987224][T11935] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.5099: Corrupt directory, running e2fsck is recommended
[  226.024380][T11935] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.5099: path /707/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  226.069797][T11935] EXT4-fs (loop2): Remounting filesystem read-only
[  226.113581][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  226.145586][T11961] netlink: 'syz.5.5111': attribute type 5 has an invalid length.
[  226.192236][   T28] audit: type=1326 audit(1784724547.737:13657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.5.5112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8023d9de99 code=0x7ffc0000
[  226.225837][   T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  226.255543][   T28] audit: type=1326 audit(1784724547.747:13658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.5.5112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8023d9de99 code=0x7ffc0000
[  226.303061][   T28] audit: type=1326 audit(1784724547.747:13659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.5.5112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8023d9de99 code=0x7ffc0000
[  226.340649][T11956] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  226.356303][T11956] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  226.364926][   T28] audit: type=1326 audit(1784724547.747:13660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.5.5112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8023d9de99 code=0x7ffc0000
[  226.390376][T11956] F2FS-fs (loop7): invalid crc value
[  226.396192][   T28] audit: type=1326 audit(1784724547.747:13661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.5.5112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8023d9de99 code=0x7ffc0000
[  226.439263][T11956] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  226.454854][T11903] set_capacity_and_notify: 11 callbacks suppressed
[  226.454875][T11903] loop0: detected capacity change from 0 to 131072
[  226.472686][   T28] audit: type=1326 audit(1784724547.747:13662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.5.5112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8023d9de99 code=0x7ffc0000
[  226.498664][T11903] F2FS-fs (loop0): Test dummy encryption mode enabled
[  226.521123][T11903] F2FS-fs (loop0): invalid crc value
[  226.553399][T11956] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  226.561081][   T28] audit: type=1326 audit(1784724547.747:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.5.5112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8023d9de99 code=0x7ffc0000
[  226.574348][T11903] F2FS-fs (loop0): Found nat_bits in checkpoint
[  226.594180][T11956] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  226.612377][T11986] loop2: detected capacity change from 0 to 256
[  226.631464][   T28] audit: type=1326 audit(1784724547.747:13664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.5.5112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8023d9de99 code=0x7ffc0000
[  226.682523][T11990] loop2: detected capacity change from 0 to 256
[  226.691635][ T1696] syz-executor: attempt to access beyond end of device
[  226.691635][ T1696] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  226.756274][T11994] loop5: detected capacity change from 0 to 128
[  226.776631][T11903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  226.807448][T11994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  226.827026][T11994] System zones: 1-3, 19-19, 35-36
[  226.839687][T11998] loop2: detected capacity change from 0 to 512
[  226.847056][T11994] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  226.905445][T11994] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  226.938253][T11998] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  226.949615][T12004] netlink: 'syz.7.5126': attribute type 3 has an invalid length.
[  226.961047][T11998] EXT4-fs (loop2): 1 truncate cleaned up
[  226.982999][T11998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  227.007892][T10317] EXT4-fs (loop5): unmounting filesystem.
[  227.020128][T11998] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.5124: bg 0: block 4: invalid block bitmap
[  227.066947][T12013] loop4: detected capacity change from 0 to 256
[  227.075275][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  227.082679][T12013] exfat: Deprecated parameter 'namecase'
[  227.125403][T12020] loop5: detected capacity change from 0 to 16
[  227.144175][T12016] loop7: detected capacity change from 0 to 256
[  227.159909][T12013] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[  227.173608][T12020] erofs: (device loop5): mounted with root inode @ nid 36.
[  227.215912][T12020] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89
[  227.228241][T12016] FAT-fs (loop7): Directory bread(block 64) failed
[  227.238168][T12016] FAT-fs (loop7): Directory bread(block 65) failed
[  227.245263][T12016] FAT-fs (loop7): Directory bread(block 66) failed
[  227.251901][T12020] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89
[  227.261383][T12016] FAT-fs (loop7): Directory bread(block 67) failed
[  227.268218][T12020] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89
[  227.277435][T12016] FAT-fs (loop7): Directory bread(block 68) failed
[  227.284055][T12016] FAT-fs (loop7): Directory bread(block 69) failed
[  227.298415][T12020] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89
[  227.314899][T12016] FAT-fs (loop7): Directory bread(block 70) failed
[  227.321758][T12020] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89
[  227.337518][T12016] FAT-fs (loop7): Directory bread(block 71) failed
[  227.347870][T12016] FAT-fs (loop7): Directory bread(block 72) failed
[  227.354694][T12020] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  227.371933][T12016] FAT-fs (loop7): Directory bread(block 73) failed
[  227.426439][T12034] loop5: detected capacity change from 0 to 512
[  227.457269][T12034] EXT4-fs: Ignoring removed oldalloc option
[  227.476670][T12034] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  227.539371][T12034] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  227.560162][T12034] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.628171][T12057] loop4: detected capacity change from 0 to 1024
[  227.634990][T12057] EXT4-fs: Ignoring removed i_version option
[  227.641045][T12057] EXT4-fs: Ignoring removed mblk_io_submit option
[  227.683871][T10317] EXT4-fs (loop5): unmounting filesystem.
[  227.711574][T12057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  227.727495][T12057] EXT4-fs (loop4): unmounting filesystem.
[  227.830944][T12077] exfat: Deprecated parameter 'namecase'
[  227.839339][T12077] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  227.872324][T12079] __nla_validate_parse: 4 callbacks suppressed
[  227.872344][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5158'.
[  227.919292][T12083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  228.197101][T12097] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.5167: corrupted in-inode xattr
[  228.219595][T12097] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.5167: couldn't read orphan inode 15 (err -117)
[  228.231977][T12097] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  228.252393][T10453] EXT4-fs (loop4): unmounting filesystem.
[  228.277122][T12091] F2FS-fs (loop5): invalid crc value
[  228.293688][T12091] F2FS-fs (loop5): Found nat_bits in checkpoint
[  228.367512][T12091] F2FS-fs (loop5): Start checkpoint disabled!
[  228.385874][T12091] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  228.414464][T12091] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  228.495538][T12072] F2FS-fs (loop0): invalid crc value
[  228.506644][T12072] F2FS-fs (loop0): Found nat_bits in checkpoint
[  228.560384][T12072] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  228.701188][T12123] EXT4-fs: Ignoring removed bh option
[  228.716050][T12125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  228.731476][T12123] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.745220][T12123] EXT4-fs: Ignoring removed bh option
[  228.745619][T12123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  228.758802][T12125] EXT4-fs (loop5): 1 truncate cleaned up
[  228.769319][T12125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  228.781791][T12123] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  228.781869][T12123] ext4 filesystem being mounted at /948/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.811824][T12125] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.5178: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  228.833244][T12125] EXT4-fs (loop5): Remounting filesystem read-only
[  228.859985][T12125] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem
[  228.860325][T12125] EXT4-fs (loop5): Remounting filesystem read-only
[  228.889454][T12125] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.5178: Deleting old file: nlink 4, error=-117
[  228.907996][T12133] ext4 filesystem being mounted at /949/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.083583][T12145] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.5185: Invalid inode bitmap blk 4 in block_group 0
[  229.087398][T12145] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  229.155365][T12145] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.5185: Invalid inode bitmap blk 4 in block_group 0
[  229.162278][T12145] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  229.481538][T12173] exfat: Deprecated parameter 'namecase'
[  229.481571][T12173] exfat: Deprecated parameter 'namecase'
[  229.481590][T12173] exfat: Deprecated parameter 'utf8'
[  229.481609][T12173] exfat: Bad value for 'errors'
[  229.517776][T12173] virtiofs: Bad value for 'dax'
[  229.518225][ T2013] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  229.606540][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  229.731452][T12193] EXT4-fs: Ignoring removed mblk_io_submit option
[  229.751864][T12193] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  229.775198][T12193] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.5206: attempt to clear invalid blocks 2 len 1
[  229.801121][T12193] EXT4-fs (loop7): Remounting filesystem read-only
[  229.818521][T12193] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  229.916782][T12193] EXT4-fs (loop7): Remounting filesystem read-only
[  229.962034][T12193] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.5206: invalid indirect mapped block 1819239214 (level 0)
[  230.000440][T12193] EXT4-fs (loop7): Remounting filesystem read-only
[  230.015424][T12193] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.5206: invalid indirect mapped block 1819239214 (level 1)
[  230.061220][T12193] EXT4-fs (loop7): Remounting filesystem read-only
[  230.076242][T12193] EXT4-fs (loop7): 1 truncate cleaned up
[  230.103390][T12193] EXT4-fs (loop7): Quota file not on filesystem root. Journaled quota will not work
[  230.142858][T12220] erofs: (device loop0): mounted with root inode @ nid 36.
[  230.228242][T12162] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0)
[  230.238096][T12162] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  230.256596][ T8423] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  230.272874][T12162] F2FS-fs (loop5): invalid crc value
[  230.302535][T12162] F2FS-fs (loop5): Found nat_bits in checkpoint
[  230.338287][T12162] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  230.345508][T12162] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  230.375835][T12162] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903
[  230.473318][ T8423] usb 5-1: Using ep0 maxpacket: 32
[  230.479801][ T8423] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.493180][ T8423] usb 5-1: config 0 interface 0 has no altsetting 0
[  230.500039][ T8423] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[  230.509440][ T8423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.527881][ T8423] usb 5-1: config 0 descriptor??
[  230.603980][  T308] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  230.821511][  T308] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  230.830913][  T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.856586][  T308] usb 3-1: config 0 descriptor??
[  231.026205][T12248] F2FS-fs (loop5): invalid crc value
[  231.033683][T12248] F2FS-fs (loop5): Found nat_bits in checkpoint
[  231.068277][T12248] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  231.082196][T12248] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  231.189421][ T8423] usb 5-1: string descriptor 0 read error: -71
[  231.203644][ T8423] uclogic 0003:5543:0081.003B: failed retrieving string descriptor #200: -71
[  231.219988][ T8423] uclogic 0003:5543:0081.003B: failed retrieving pen parameters: -71
[  231.232923][ T8423] uclogic 0003:5543:0081.003B: failed probing pen v2 parameters: -71
[  231.241404][ T8423] uclogic 0003:5543:0081.003B: failed probing parameters: -71
[  231.253640][ T8423] uclogic: probe of 0003:5543:0081.003B failed with error -71
[  231.267500][ T8423] usb 5-1: USB disconnect, device number 4
[  231.308134][  T308] samsung 0003:0419:0001.003C: unknown global tag 0xe
[  231.314968][  T308] samsung 0003:0419:0001.003C: item 0 4 1 14 parsing failed
[  231.326962][  T308] samsung 0003:0419:0001.003C: parse failed
[  231.333913][  T308] samsung: probe of 0003:0419:0001.003C failed with error -22
[  231.528932][ T1120] usb 3-1: USB disconnect, device number 22
[  232.000311][T12297] set_capacity_and_notify: 18 callbacks suppressed
[  232.000350][T12297] loop4: detected capacity change from 0 to 40427
[  232.014866][T12297] F2FS-fs (loop4): invalid crc value
[  232.021811][T12297] F2FS-fs (loop4): Found nat_bits in checkpoint
[  232.057015][T12297] F2FS-fs (loop4): Start checkpoint disabled!
[  232.063767][T12297] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  232.071437][T12297] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  232.125195][T12301] loop2: detected capacity change from 0 to 4096
[  232.137686][T12297] syz.4.5249: attempt to access beyond end of device
[  232.137686][T12297] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  232.170789][T12301] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.5250: corrupted inode contents
[  232.182972][T12301] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #15: comm syz.2.5250: mark_inode_dirty error
[  232.237219][T12301] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.5250: corrupted inode contents
[  232.249832][T12301] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.5250: mark_inode_dirty error
[  232.261731][T12301] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.5250: corrupted inode contents
[  232.280846][T12301] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.5250: mark_inode_dirty error
[  232.298312][  T317] kworker/u4:4: attempt to access beyond end of device
[  232.298312][  T317] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  232.315353][T12301] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.5250: corrupted inode contents
[  232.337598][T12301] EXT4-fs error (device loop2): ext4_truncate:4327: inode #15: comm syz.2.5250: mark_inode_dirty error
[  232.349128][T12301] EXT4-fs error (device loop2) in ext4_setattr:5697: Corrupt filesystem
[  232.357898][T12311] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #15: comm syz.2.5250: corrupted inode contents
[  232.416348][T12323] device vlan4 entered promiscuous mode
[  232.447028][T12328] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5264'.
[  232.527346][T12338] loop2: detected capacity change from 0 to 512
[  232.556824][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5269'.
[  232.597331][T12338] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  232.629962][T12338] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  232.668567][T12352] loop0: detected capacity change from 0 to 2048
[  232.689571][T12338] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  232.714951][T12338] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  232.763539][T12338] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000]
[  232.771976][T12338] EXT4-fs (loop2): orphan cleanup on readonly fs
[  232.792698][T12338] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5267: bg 0: block 34: padding at end of block bitmap is not set
[  232.864361][T12336] loop7: detected capacity change from 0 to 40427
[  232.892816][T12336] F2FS-fs (loop7): invalid crc value
[  232.908558][T12338] __quota_error: 25 callbacks suppressed
[  232.908577][T12338] Quota error (device loop2): write_blk: dquota write failed
[  232.922005][T12338] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  232.932499][T12338] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.5267: Failed to acquire dquot type 1
[  232.950652][T12338] EXT4-fs (loop2): 1 truncate cleaned up
[  232.964197][T12336] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  233.051343][T12336] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  233.112216][T12336] F2FS-fs (loop7): Can't flush 6 in 0 for segs_per_sec 1 != 1
[  233.144023][ T1696] syz-executor: attempt to access beyond end of device
[  233.144023][ T1696] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  233.268758][   T28] audit: type=1400 audit(1784724554.271:13690): avc:  denied  { audit_write } for  pid=12424 comm="syz.0.5306" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  233.467073][ T1120] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  233.471350][T12444] loop2: detected capacity change from 0 to 128
[  233.534090][T12451] loop7: detected capacity change from 0 to 2048
[  233.585398][T12451]  loop7: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 
[  233.619322][T12459] loop2: detected capacity change from 0 to 512
[  233.716752][T12459] EXT4-fs: Ignoring removed orlov option
[  233.723147][T12459] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  233.734372][T12459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  233.744228][T12459] EXT4-fs error (device loop2): ext4_iget_extra_inode:4765: inode #15: comm syz.2.5321: corrupted in-inode xattr
[  233.758587][T12459] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5321: couldn't read orphan inode 15 (err -117)
[  233.759291][ T1120] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.790088][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5321'.
[  233.833381][ T1120] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  233.899588][ T1120] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  233.966739][ T1120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  234.006169][ T1120] usb 6-1: SerialNumber: syz
[  234.034497][T12473] loop2: detected capacity change from 0 to 256
[  234.069635][T12475] loop4: detected capacity change from 0 to 128
[  234.088803][T12475] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.102688][T12475] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.5325: No space for directory leaf checksum. Please run e2fsck -D.
[  234.119121][T12475] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.5325: Directory block failed checksum
[  234.160756][   T28] audit: type=1326 audit(1784724555.102:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.2.5328" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc1a59de99 code=0x0
[  234.238560][ T1120] usb 6-1: 0:2 : does not exist
[  234.248688][ T1120] usb 6-1: USB disconnect, device number 6
[  234.403172][ T2012] udevd[2012]: inotify_add_watch(7, /dev/loop7p22, 10) failed: No such file or directory
[  234.415937][  T311] udevd[311]: inotify_add_watch(7, /dev/loop7p23, 10) failed: No such file or directory
[  234.427487][T12463] udevd[12463]: inotify_add_watch(7, /dev/loop7p24, 10) failed: No such file or directory
[  234.439364][T12467] udevd[12467]: inotify_add_watch(7, /dev/loop7p25, 10) failed: No such file or directory
[  234.450931][T12464] udevd[12464]: inotify_add_watch(7, /dev/loop7p26, 10) failed: No such file or directory
[  234.462609][ T2013] udevd[2013]: inotify_add_watch(7, /dev/loop7p27, 10) failed: No such file or directory
[  234.473975][T12465] udevd[12465]: inotify_add_watch(7, /dev/loop7p29, 10) failed: No such file or directory
[  234.474684][  T443] udevd[443]: inotify_add_watch(7, /dev/loop7p28, 10) failed: No such file or directory
[  234.494799][  T759] udevd[759]: inotify_add_watch(7, /dev/loop7p30, 10) failed: No such file or directory
[  234.506849][  T315] udevd[315]: inotify_add_watch(7, /dev/loop7p31, 10) failed: No such file or directory
[  236.124522][   T28] audit: type=1400 audit(1784724556.910:13692): avc:  denied  { execheap } for  pid=12529 comm="syz.5.5350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  237.332126][T12553] can0: slcan on ttyS3.
[  237.362333][T12555] usb usb8: usbfs: process 12555 (syz.5.5362) did not claim interface 0 before use
[  237.463360][T12552] can0 (unregistered): slcan off ttyS3.
[  237.513411][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5366'.
[  237.727786][T12595] set_capacity_and_notify: 2 callbacks suppressed
[  237.727809][T12595] loop4: detected capacity change from 0 to 512
[  237.755371][T12595] EXT4-fs (loop4): Test dummy encryption mode enabled
[  237.762214][T12595] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  237.787834][T12599] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  237.834281][T12595] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.5383: bad orphan inode 131072
[  237.875162][T12595] EXT4-fs mount: 22 callbacks suppressed
[  237.875180][T12595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  237.950027][T10453] EXT4-fs (loop4): unmounting filesystem.
[  237.957904][ T8423] kernel write not supported for file /input/event2 (pid: 8423 comm: kworker/1:5)
[  238.394762][T12628] loop0: detected capacity change from 0 to 40427
[  238.415662][T12628] F2FS-fs (loop0): heap/no_heap options were deprecated
[  238.441579][T12628] F2FS-fs (loop0): Found nat_bits in checkpoint
[  238.498212][T12628] F2FS-fs (loop0): Start checkpoint disabled!
[  238.504930][T12628] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  238.524717][T12628] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  238.624675][T12638] loop2: detected capacity change from 0 to 512
[  238.661950][   T43] kworker/u4:2: attempt to access beyond end of device
[  238.661950][   T43] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  238.693274][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5402'.
[  238.749231][   T28] audit: type=1400 audit(1784724559.328:13693): avc:  denied  { mounton } for  pid=12637 comm="syz.2.5400" path="/761/file0/bus" dev="loop2" ino=1049039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  238.774249][T12638] incfs: Can't find or create .incomplete dir in .
[  238.813662][T12638] incfs: mount failed -22
[  239.036974][T12620] loop5: detected capacity change from 0 to 131072
[  239.050627][T12620] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0)
[  239.071192][T12620] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  239.085823][T12620] F2FS-fs (loop5): invalid crc value
[  239.125565][T12670] loop0: detected capacity change from 0 to 512
[  239.132817][T12620] F2FS-fs (loop5): Found nat_bits in checkpoint
[  239.175514][T12670] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  239.213388][T12670] FAT-fs (loop0): Filesystem has been set read-only
[  239.224660][T12648] loop4: detected capacity change from 0 to 40427
[  239.233342][T12674] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  239.243736][T12620] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  239.251401][T12648] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  239.259218][T12620] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  239.277947][T12648] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  239.315768][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  239.405482][T12648] F2FS-fs (loop4): invalid crc value
[  239.415775][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5417'.
[  239.433634][T12620] F2FS-fs (loop5): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4
[  239.447015][T12648] F2FS-fs (loop4): Found nat_bits in checkpoint
[  239.459948][T12620] F2FS-fs (loop5): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4
[  239.506247][T12648] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  239.513526][T12648] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  239.558474][   T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  239.575374][   T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  239.637094][   T28] audit: type=1400 audit(1784724560.149:13694): avc:  denied  { ioctl } for  pid=12697 comm="syz.2.5426" path="socket:[59969]" dev="sockfs" ino=59969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  240.103665][T12727] loop5: detected capacity change from 0 to 512
[  240.119562][T12727] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  240.133826][T12727] EXT4-fs (loop5): 1 truncate cleaned up
[  240.139741][T12727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  240.175622][T10317] EXT4-fs (loop5): unmounting filesystem.
[  240.271542][   T28] audit: type=1400 audit(1784724560.740:13695): avc:  denied  { append } for  pid=12735 comm="syz.0.5444" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  240.339356][   T28] audit: type=1400 audit(1784724560.795:13696): avc:  denied  { bind } for  pid=12739 comm="syz.5.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  240.431475][T12749] loop0: detected capacity change from 0 to 512
[  240.465578][T12749] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.5450: Unrecognised inode hash code 255
[  240.484348][T12749] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.5450: Corrupt directory, running e2fsck is recommended
[  240.493423][T12752] loop5: detected capacity change from 0 to 16
[  240.508169][T12752] erofs: (device loop5): mounted with root inode @ nid 36.
[  240.515897][T12749] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  240.548908][T12749] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.5450: corrupted in-inode xattr
[  240.609239][T12749] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.5450: couldn't read orphan inode 15 (err -117)
[  240.625534][T12756] xt_hashlimit: size too large, truncated to 1048576
[  240.639435][T12749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  240.694069][T12749] EXT4-fs error (device loop0): __ext4_remount:6637: comm syz.0.5450: Abort forced by user
[  240.714384][T12749] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  240.754417][  T288] EXT4-fs (loop0): unmounting filesystem.
[  240.810954][T12761] netlink: 'syz.0.5455': attribute type 6 has an invalid length.
[  240.853086][T12764] loop0: detected capacity change from 0 to 512
[  240.870771][T12764] EXT4-fs: Ignoring removed orlov option
[  240.876833][T12764] EXT4-fs: Ignoring removed bh option
[  240.917014][T12764] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  240.949843][T12764] ext4 filesystem being mounted at /1017/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  240.970278][T12764] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  241.024699][  T288] EXT4-fs (loop0): unmounting filesystem.
[  241.423625][   T19] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  241.558924][  T308] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  241.600878][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5477'.
[  241.646697][   T19] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  241.655070][   T19] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  241.664470][   T19] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  241.674797][   T19] usb 6-1: config 8 has no interface number 0
[  241.681114][   T19] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  241.692472][   T19] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  241.709281][   T19] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  241.718587][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.726859][   T19] usb 6-1: Product: syz
[  241.731188][   T19] usb 6-1: Manufacturer: syz
[  241.736071][   T19] usb 6-1: SerialNumber: syz
[  241.764760][  T308] usb 3-1: Using ep0 maxpacket: 8
[  241.771524][  T308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  241.785541][  T308] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  241.794908][  T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.819217][  T308] usb 3-1: config 0 descriptor??
[  241.965581][   T19] usb 6-1: USB disconnect, device number 7
[  242.160376][T12814]  loop0: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 
[  242.266921][  T308] nintendo 0003:057E:2009.003D: unknown main item tag 0x0
[  242.460309][  T308] nintendo 0003:057E:2009.003D: unknown main item tag 0x0
[  242.467642][  T308] nintendo 0003:057E:2009.003D: unknown main item tag 0x0
[  242.474890][  T308] nintendo 0003:057E:2009.003D: unknown main item tag 0x0
[  242.482194][  T308] nintendo 0003:057E:2009.003D: unknown main item tag 0x0
[  242.489370][  T308] nintendo 0003:057E:2009.003D: unknown main item tag 0x0
[  242.496856][  T308] nintendo 0003:057E:2009.003D: unknown main item tag 0x0
[  242.504231][  T308] nintendo 0003:057E:2009.003D: unbalanced collection at end of report description
[  242.522078][  T308] nintendo 0003:057E:2009.003D: HID parse failed
[  242.528812][  T308] nintendo 0003:057E:2009.003D: probe - fail = -22
[  242.542382][  T308] nintendo: probe of 0003:057E:2009.003D failed with error -22
[  242.551747][  T308] usb 3-1: USB disconnect, device number 23
[  242.622338][T12826] EXT4-fs (loop5): orphan cleanup on readonly fs
[  242.628750][T12826] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  242.642880][T12826] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  242.686172][T12826] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.5484: attempt to clear invalid blocks 2 len 1
[  242.712663][T12826] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5484: invalid indirect mapped block 1819239214 (level 0)
[  242.761703][T12826] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5484: invalid indirect mapped block 1819239214 (level 1)
[  242.813465][T12826] EXT4-fs (loop5): 1 truncate cleaned up
[  242.843630][T12826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  242.905903][T12826] EXT4-fs: Ignoring removed bh option
[  242.911407][T12826] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  242.945943][T12826] EXT4-fs error (device loop5): __ext4_remount:6637: comm syz.5.5484: Abort forced by user
[  242.967273][T12826] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  242.986540][T10317] EXT4-fs (loop5): unmounting filesystem.
[  243.062006][T12463] udevd[12463]: inotify_add_watch(7, /dev/loop0p15, 10) failed: No such file or directory
[  243.062017][  T311] udevd[311]: inotify_add_watch(7, /dev/loop0p14, 10) failed: No such file or directory
[  243.085233][T12467] udevd[12467]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory
[  243.096517][T12464] udevd[12464]: inotify_add_watch(7, /dev/loop0p17, 10) failed: No such file or directory
[  243.107755][ T2013] udevd[2013]: inotify_add_watch(7, /dev/loop0p18, 10) failed: No such file or directory
[  243.118876][  T443] udevd[443]: inotify_add_watch(7, /dev/loop0p19, 10) failed: No such file or directory
[  243.122634][T12466] udevd[12466]: inotify_add_watch(7, /dev/loop0p24, 10) failed: No such file or directory
[  243.139822][  T436] udevd[436]: inotify_add_watch(7, /dev/loop0p23, 10) failed: No such file or directory
[  243.151619][  T315] udevd[315]: inotify_add_watch(7, /dev/loop0p22, 10) failed: No such file or directory
[  243.162719][  T759] udevd[759]: inotify_add_watch(7, /dev/loop0p21, 10) failed: No such file or directory
[  243.191810][T12839] set_capacity_and_notify: 5 callbacks suppressed
[  243.191829][T12839] loop2: detected capacity change from 0 to 512
[  243.229609][T12839] EXT4-fs: Ignoring removed oldalloc option
[  243.317646][   T28] audit: type=1326 audit(1784724563.545:13697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.5495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daf59de99 code=0x7ffc0000
[  243.385407][T12839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  243.444082][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  243.597590][   T28] audit: type=1326 audit(1784724563.545:13698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.5495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daf59de99 code=0x7ffc0000
[  243.664253][T12860] usb usb8: usbfs: process 12860 (syz.2.5499) did not claim interface 0 before use
[  243.742678][   T28] audit: type=1326 audit(1784724563.545:13699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.5495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daf59de99 code=0x7ffc0000
[  243.781963][T12868] loop0: detected capacity change from 0 to 16
[  243.815328][T12868] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[  243.859608][   T28] audit: type=1326 audit(1784724563.545:13700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.5495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f6daf59de99 code=0x7ffc0000
[  243.885872][T12868] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[  243.911447][   T28] audit: type=1326 audit(1784724563.545:13701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.5495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daf59de99 code=0x7ffc0000
[  243.946576][T12868] erofs: (device loop0): mounted with root inode @ nid 36.
[  243.984594][   T28] audit: type=1326 audit(1784724563.545:13702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.5495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daf59de99 code=0x7ffc0000
[  244.170442][ T1120] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  244.228158][T12886] loop0: detected capacity change from 0 to 512
[  244.257763][T12886] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.5511: invalid block
[  244.279172][T12886] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5511: invalid indirect mapped block 10 (level 1)
[  244.290916][T12882] loop2: detected capacity change from 0 to 8192
[  244.303620][T12886] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5511: invalid indirect mapped block 8 (level 1)
[  244.323538][T12886] EXT4-fs (loop0): 1 truncate cleaned up
[  244.334093][T12886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  244.387174][ T1120] usb 6-1: Using ep0 maxpacket: 16
[  244.395259][ T1120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.417189][ T1120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.440785][ T1120] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  244.483751][ T1120] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  244.510805][ T1120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.534344][ T1120] usb 6-1: config 0 descriptor??
[  244.560835][  T288] EXT4-fs (loop0): unmounting filesystem.
[  244.567215][T12891] loop2: detected capacity change from 0 to 512
[  244.622837][T12891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  244.656115][T12891] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  244.685027][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  244.758021][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5516'.
[  244.854579][T12913] kernel profiling enabled (shift: 0)
[  244.991846][ T1120] microsoft 0003:045E:07DA.003E: ignoring exceeding usage max
[  245.007620][ T1120] HID 045e:07da: Invalid code 65791 type 1
[  245.024398][ T1120] HID 045e:07da: Invalid code 768 type 1
[  245.036193][ T1120] HID 045e:07da: Invalid code 769 type 1
[  245.047935][ T1120] HID 045e:07da: Invalid code 770 type 1
[  245.059603][ T1120] HID 045e:07da: Invalid code 771 type 1
[  245.069963][ T1120] HID 045e:07da: Invalid code 772 type 1
[  245.079291][ T1120] HID 045e:07da: Invalid code 773 type 1
[  245.091018][ T1120] HID 045e:07da: Invalid code 774 type 1
[  245.102331][ T1120] HID 045e:07da: Invalid code 775 type 1
[  245.113272][ T1120] HID 045e:07da: Invalid code 776 type 1
[  245.149724][ T1120] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003E/input/input63
[  245.244243][ T1120] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  245.269762][ T1120] usb 6-1: USB disconnect, device number 8
[  245.334509][T12923] xt_hashlimit: size too large, truncated to 1048576
[  245.345114][T12921] fido_id[12921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  245.643013][T12934] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5532'.
[  245.884099][T12945] loop5: detected capacity change from 0 to 256
[  245.933898][T12945] FAT-fs (loop5): "posix" option is obsolete, not supported now
[  246.053048][T12953] loop2: detected capacity change from 0 to 512
[  246.098114][T12955] loop7: detected capacity change from 0 to 512
[  246.111073][T12953] EXT4-fs (loop2): orphan cleanup on readonly fs
[  246.122772][T12953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.5540: ea_inode with extended attributes
[  246.178127][T12955] EXT4-fs: Ignoring removed bh option
[  246.203109][T12953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.5540: error while reading EA inode 11 err=-117
[  246.233465][T12953] EXT4-fs (loop2): 1 orphan inode deleted
[  246.237418][T12963] loop5: detected capacity change from 0 to 256
[  246.239266][T12953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  246.264112][T12955] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  246.281073][T12955] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  246.291265][T12955] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5543: Corrupt directory, running e2fsck is recommended
[  246.305531][T12955] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  246.313915][T12955] EXT4-fs error (device loop7): ext4_iget_extra_inode:4765: inode #15: comm syz.7.5543: corrupted in-inode xattr
[  246.326465][T12955] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.5543: couldn't read orphan inode 15 (err -117)
[  246.339020][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  246.356066][T12955] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  246.392283][T12955] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  246.435376][T12955] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  246.445580][T12955] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5543: Corrupt directory, running e2fsck is recommended
[  246.468639][T12955] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.5543: path /1009/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  246.500669][T12955] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 22: comm syz.7.5543: path /1009/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  246.539688][T12955] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 8: comm syz.7.5543: path /1009/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  246.590427][T12978] loop5: detected capacity change from 0 to 256
[  246.631433][ T1696] EXT4-fs (loop7): unmounting filesystem.
[  246.786249][T12990] EXT4-fs: Ignoring removed oldalloc option
[  246.795443][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5559'.
[  246.805185][T12990] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  246.836068][T12990] EXT4-fs (loop5): 1 truncate cleaned up
[  246.842106][T12990] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  246.866434][T10317] EXT4-fs (loop5): unmounting filesystem.
[  246.976567][T12980] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  246.990324][T12980] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  247.008867][T12980] F2FS-fs (loop2): invalid crc value
[  247.043184][T12980] F2FS-fs (loop2): Found nat_bits in checkpoint
[  247.129025][T12980] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  247.129056][T12980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  247.327059][T12997] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  247.341737][T12997] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  247.360480][T12997] F2FS-fs (loop5): invalid crc value
[  247.395014][T12997] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  247.462308][T12997] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  247.476933][T12997] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  248.147233][T13039] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[  248.156057][T13039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  248.165698][T13039] F2FS-fs (loop2): invalid crc value
[  248.189993][T13039] F2FS-fs (loop2): Found nat_bits in checkpoint
[  248.231552][T13039] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  248.238711][T13039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  248.255737][ T8423] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  248.289751][T13039] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  248.462716][ T8423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  248.483261][ T8423] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  248.504043][ T8423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  248.526432][ T8423] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  248.550024][ T8423] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  248.569948][ T8423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.580801][ T8423] usb 6-1: Product: syz
[  248.585020][ T8423] usb 6-1: Manufacturer: syz
[  248.600637][ T8423] usb 6-1: SerialNumber: syz
[  248.612202][ T8423] usb 6-1: config 0 descriptor??
[  248.632412][ T8423] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  248.865108][ T8423] ums-isd200: probe of 6-1:0.0 failed with error -22
[  249.099199][ T1120] usb 6-1: USB disconnect, device number 9
[  249.426064][   T19] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  249.621106][   T19] usb 3-1: Using ep0 maxpacket: 16
[  249.627663][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.640310][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.650666][   T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  249.675272][   T19] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  249.685078][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.694579][   T19] usb 3-1: config 0 descriptor??
[  249.858238][T13097] set_capacity_and_notify: 5 callbacks suppressed
[  249.858260][T13097] loop5: detected capacity change from 0 to 512
[  249.894046][T13097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  249.905747][T13097] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  249.939134][T13097] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.5603: corrupted inode contents
[  249.951393][T13097] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.5603: mark_inode_dirty error
[  249.964348][T13097] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.5603: corrupted inode contents
[  249.988250][T10317] EXT4-fs (loop5): unmounting filesystem.
[  250.144109][   T19] microsoft 0003:045E:07DA.003F: ignoring exceeding usage max
[  250.184686][   T19] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003F/input/input64
[  250.266610][T13121] loop7: detected capacity change from 0 to 512
[  250.274469][   T19] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  250.326816][T13121] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  250.342559][T13121] ext4 filesystem being mounted at /1019/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.379625][  T291] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  250.394926][ T1696] EXT4-fs (loop7): unmounting filesystem.
[  250.450342][   T19] usb 3-1: USB disconnect, device number 24
[  250.598064][  T291] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  250.618929][  T291] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  250.658600][  T291] usb 6-1: config 0 interface 0 has no altsetting 0
[  250.672272][  T291] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  250.691961][  T291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.714851][  T291] usb 6-1: config 0 descriptor??
[  251.118037][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  251.118055][   T28] audit: type=1326 audit(1784724570.753:13705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.2.5632" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1a59de99 code=0x7ffc0000
[  251.167663][  T291] pyra 0003:1E7D:2C24.0040: ignoring exceeding usage max
[  251.188176][  T291] pyra 0003:1E7D:2C24.0040: hidraw0: USB HID v0.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0
[  251.197695][   T28] audit: type=1326 audit(1784724570.780:13706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.2.5632" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdc1a59de99 code=0x7ffc0000
[  251.300768][   T28] audit: type=1326 audit(1784724570.780:13707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.2.5632" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1a59de99 code=0x7ffc0000
[  251.365737][   T28] audit: type=1326 audit(1784724570.780:13708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.2.5632" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fdc1a59de99 code=0x7ffc0000
[  251.403062][ T8484] usb 6-1: USB disconnect, device number 10
[  251.430731][   T28] audit: type=1326 audit(1784724570.780:13709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.2.5632" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1a59de99 code=0x7ffc0000
[  251.585436][T13144] loop0: detected capacity change from 0 to 131072
[  251.611593][T13144] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[  251.630381][T13144] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  251.666783][T13144] F2FS-fs (loop0): invalid crc value
[  251.705469][T13144] F2FS-fs (loop0): Found nat_bits in checkpoint
[  251.721653][T13188] loop7: detected capacity change from 0 to 512
[  251.737568][T13188] EXT4-fs: Ignoring removed orlov option
[  251.756708][T13188] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  251.778714][T13144] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  251.785888][T13144] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  251.795525][T13188] EXT4-fs (loop7): 1 truncate cleaned up
[  251.801844][T13188] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  251.863051][ T1696] EXT4-fs (loop7): unmounting filesystem.
[  251.909547][T13144] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  252.259433][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5650'.
[  252.374628][T13219] netlink: 'syz.5.5655': attribute type 3 has an invalid length.
[  252.742019][ T8423] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  252.828073][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5667'.
[  252.837937][T13245] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5668'.
[  252.847367][T13245] tipc: Enabling of bearer <eth:xf> rejected, failed to enable media
[  252.950464][ T8423] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  252.963135][ T8423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.990093][ T8423] usb 6-1: Product: syz
[  253.000283][ T8423] usb 6-1: Manufacturer: syz
[  253.010901][ T8423] usb 6-1: SerialNumber: syz
[  253.017624][T13254] loop2: detected capacity change from 0 to 1024
[  253.055970][T13254] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.5672: lblock 2 mapped to illegal pblock 2 (length 1)
[  253.088843][T13254] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  253.096998][T13254] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.5672: lblock 0 mapped to illegal pblock 48 (length 1)
[  253.149516][T13249] loop7: detected capacity change from 0 to 40427
[  253.156105][T13254] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  253.164934][T13254] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.5672: Failed to acquire dquot type 0
[  253.184281][T13249] F2FS-fs (loop7): fault_injection options not supported
[  253.201054][T13254] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem
[  253.210881][T13249] F2FS-fs (loop7): fault_type options not supported
[  253.218174][T13254] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.5672: mark_inode_dirty error
[  253.230102][T13249] F2FS-fs (loop7): invalid crc value
[  253.235814][T13254] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  253.248131][T13254] EXT4-fs (loop2): 1 orphan inode deleted
[  253.255756][T13249] F2FS-fs (loop7): Found nat_bits in checkpoint
[  253.262296][  T317] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  253.278976][T13254] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  253.293704][  T317] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  253.320802][  T317] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 0
[  253.367762][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  253.377405][  T317] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  253.393644][  T317] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  253.402151][  T317] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 0
[  253.413843][T13249] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  253.452498][ T4316] EXT4-fs error (device loop2): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0
[  253.476781][ T4316] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem
[  253.497459][ T4316] EXT4-fs error (device loop2): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error
[  253.560093][T13266] loop2: detected capacity change from 0 to 512
[  253.597425][T13266] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  253.629217][T13266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  253.650922][T13266] System zones: 1-12
[  253.655564][T13266] EXT4-fs (loop2): orphan cleanup on readonly fs
[  253.683852][T13266] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.5674: attempt to clear invalid blocks 1024 len 1
[  253.714555][T13266] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5674: bg 0: block 361: padding at end of block bitmap is not set
[  253.734271][T13271] netlink: 'syz.7.5677': attribute type 5 has an invalid length.
[  253.751839][T13266] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  253.753084][ T8423] rtl8150 6-1:1.0: couldn't reset the device
[  253.778215][T13266] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5674: invalid indirect mapped block 1811939328 (level 0)
[  253.812871][ T8423] rtl8150: probe of 6-1:1.0 failed with error -5
[  253.838321][ T8423] usb 6-1: USB disconnect, device number 11
[  253.858255][T13266] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5674: invalid indirect mapped block 2 (level 2)
[  253.880102][T13266] EXT4-fs (loop2): 1 truncate cleaned up
[  253.885814][T13266] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  253.931332][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  254.239414][T13290] loop2: detected capacity change from 0 to 40427
[  254.262066][T13290] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  254.283305][T13290] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  254.292385][T13290] F2FS-fs (loop2): invalid crc value
[  254.300373][T13290] F2FS-fs (loop2): Found nat_bits in checkpoint
[  254.344521][T13290] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  254.352049][T13290] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  254.434956][ T4316] syz-executor: attempt to access beyond end of device
[  254.434956][ T4316] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  254.519692][T13319] loop5: detected capacity change from 0 to 128
[  254.560902][T13319] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  254.841967][   T28] audit: type=1400 audit(1784724574.176:13710): avc:  denied  { append } for  pid=13337 comm="syz.2.5709" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  254.932539][T13327] loop5: detected capacity change from 0 to 40427
[  254.952576][T13327] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  254.960457][T13327] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  254.994570][T13327] F2FS-fs (loop5): invalid crc value
[  255.003003][T13327] F2FS-fs (loop5): Found nat_bits in checkpoint
[  255.060541][T13327] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  255.067704][T13327] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  255.287053][T13347] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(263168)
[  255.310174][T13347] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  255.332008][T13347] F2FS-fs (loop2): invalid crc value
[  255.338507][T13347] F2FS-fs (loop2): Found nat_bits in checkpoint
[  255.342279][T13352] set_capacity_and_notify: 1 callbacks suppressed
[  255.342324][T13352] loop5: detected capacity change from 0 to 512
[  255.390279][T13347] F2FS-fs (loop2): Start checkpoint disabled!
[  255.397206][T13347] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  255.405036][T13352] FAT-fs (loop5): Unrecognized mount option "åü—±·ë¤íâýA" or missing value
[  255.436069][T13347] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  255.446979][T13347] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  255.556905][   T43] kworker/u4:2: attempt to access beyond end of device
[  255.556905][   T43] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  255.971213][  T291] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  256.166244][  T291] usb 3-1: Using ep0 maxpacket: 16
[  256.174323][  T291] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  256.184732][  T291] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  256.193057][  T291] usb 3-1: Product: syz
[  256.197427][  T291] usb 3-1: Manufacturer: syz
[  256.202270][  T291] usb 3-1: SerialNumber: syz
[  256.224341][  T291] usb 3-1: config 0 descriptor??
[  256.231988][  T291] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[  256.452520][  T291] usb 3-1: USB disconnect, device number 25
[  256.462870][T13368] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.470747][T13368] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.478391][T13368] device bridge_slave_0 entered promiscuous mode
[  256.486135][T13368] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.493411][T13368] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.500992][T13368] device bridge_slave_1 entered promiscuous mode
[  256.528297][T13373] loop5: detected capacity change from 0 to 2048
[  256.547101][T13373] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  256.555679][T13373] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.578640][T13373] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5720: bg 0: block 345: padding at end of block bitmap is not set
[  256.602297][T10317] EXT4-fs (loop5): unmounting filesystem.
[  256.627910][T13368] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.635146][T13368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.642481][T13368] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.649584][T13368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.681984][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  256.692312][  T471] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.700072][  T471] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.719005][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  256.727353][  T471] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.734458][  T471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.742253][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  256.750521][  T471] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.757640][  T471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.777248][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  256.786879][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  256.806215][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  256.817602][T13368] device veth0_vlan entered promiscuous mode
[  256.828004][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  256.838613][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  256.846720][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  256.860071][T13368] device veth1_macvtap entered promiscuous mode
[  256.867772][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  256.882670][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.891573][  T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  256.963583][T13391] netlink: 'syz.5.5725': attribute type 2 has an invalid length.
[  257.032609][T13397] loop5: detected capacity change from 0 to 1024
[  257.088487][   T43] device bridge_slave_1 left promiscuous mode
[  257.095066][T13397] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  257.102931][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.130060][   T28] audit: type=1400 audit(1784724576.290:13711): avc:  denied  { unlink } for  pid=13396 comm="syz.5.5729" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  257.153343][T13397] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.5.5729: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  257.173613][   T43] device bridge_slave_0 left promiscuous mode
[  257.182450][T13397] EXT4-fs (loop5): Remounting filesystem read-only
[  257.187223][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.189940][T13397] EXT4-fs error (device loop5) in ext4_delete_inline_entry:1822: Corrupt filesystem
[  257.210790][   T43] device bridge0 left promiscuous mode
[  257.216329][   T43] device veth1_macvtap left promiscuous mode
[  257.241816][T13397] EXT4-fs (loop5): Remounting filesystem read-only
[  257.250409][   T43] device veth0_vlan left promiscuous mode
[  257.292341][T10317] EXT4-fs (loop5): unmounting filesystem.
[  257.439666][T13425] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5741'.
[  257.557812][T13435] loop2: detected capacity change from 0 to 128
[  257.594355][T13435] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[  257.602790][  T291] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  257.610561][T13435] FAT-fs (loop2): Filesystem has been set read-only
[  257.629529][T13435] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[  257.814488][  T291] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  257.822761][  T291] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  257.865779][  T291] usb 6-1: config 0 has no interface number 0
[  257.880971][  T291] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  257.899212][T13421] loop6: detected capacity change from 0 to 131072
[  257.900429][  T291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.917504][T13421] F2FS-fs (loop6): Test dummy encryption mode enabled
[  257.924704][  T291] usb 6-1: Product: syz
[  257.925415][T13421] F2FS-fs (loop6): invalid crc value
[  257.930217][  T291] usb 6-1: Manufacturer: syz
[  257.948546][T13449] loop7: detected capacity change from 0 to 40427
[  257.952750][  T291] usb 6-1: SerialNumber: syz
[  257.965332][T13449] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[  257.972692][  T291] usb 6-1: config 0 descriptor??
[  257.980073][T13421] F2FS-fs (loop6): Found nat_bits in checkpoint
[  257.986770][   T19] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  258.009077][T13449] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  258.028412][T13449] F2FS-fs (loop7): Image doesn't support compression
[  258.040981][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  258.040997][T13449] F2FS-fs (loop7): Image doesn't support compression
[  258.067907][T13421] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  258.075680][T13449] F2FS-fs (loop7): invalid crc value
[  258.085873][T13449] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  258.148378][T13449] F2FS-fs (loop7): Start checkpoint disabled!
[  258.171354][T13449] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  258.192629][   T19] usb 3-1: Using ep0 maxpacket: 16
[  258.198220][T13449] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  258.206371][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.225437][T13449] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  258.235298][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.273772][   T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  258.297773][   T19] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  258.319606][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.342388][   T19] usb 3-1: config 0 descriptor??
[  258.436413][  T291] usb 6-1: Found UVC 0.00 device syz (046d:0823)
[  258.452836][  T291] usb 6-1: No valid video chain found.
[  258.464550][  T291] usb 6-1: USB disconnect, device number 12
[  258.785675][   T19] microsoft 0003:045E:07DA.0041: No inputs registered, leaving
[  258.800442][   T19] microsoft 0003:045E:07DA.0041: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  258.825599][   T19] microsoft 0003:045E:07DA.0041: no inputs found
[  258.836537][T13451] loop0: detected capacity change from 0 to 131072
[  258.843166][   T19] microsoft 0003:045E:07DA.0041: could not initialize ff, continuing anyway
[  258.855568][T13451] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[  258.866099][T13451] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  258.882511][T13451] F2FS-fs (loop0): invalid crc value
[  258.919567][T13451] F2FS-fs (loop0): Found nat_bits in checkpoint
[  258.982477][T13451] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  258.989717][T13451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  258.990073][T13502] loop7: detected capacity change from 0 to 256
[  259.020749][T13502] exfat: Deprecated parameter 'utf8'
[  259.031253][   T19] usb 3-1: USB disconnect, device number 26
[  259.058294][T13502] exfat: Deprecated parameter 'namecase'
[  259.072263][T13502] exfat: Deprecated parameter 'utf8'
[  259.099677][T13502] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  259.112569][T13451] F2FS-fs (loop0): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix
[  259.173975][T13512] can0: slcan on ttyS3.
[  259.255562][T13511] can0 (unregistered): slcan off ttyS3.
[  259.525659][T13560] loop7: detected capacity change from 0 to 256
[  259.752028][T13589] loop7: detected capacity change from 0 to 256
[  259.780200][T13589] exfat: Deprecated parameter 'utf8'
[  259.791613][T13589] exfat: Deprecated parameter 'namecase'
[  259.808624][T13589] exfat: Deprecated parameter 'utf8'
[  259.823056][T13589] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  260.072890][T13615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  260.110773][T13615] ext4 filesystem being mounted at /875/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  260.138706][   T28] audit: type=1400 audit(1784724579.067:13712): avc:  denied  { getopt } for  pid=13627 comm="syz.7.5820" laddr=fe80::a8aa:aaff:feaa:aaaa lport=21 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  260.175496][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  260.229133][T13638] exfat: Deprecated parameter 'utf8'
[  260.239623][T13638] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  260.297272][T13642] xt_hashlimit: size too large, truncated to 1048576
[  260.652129][T13658] EXT4-fs (loop2): Test dummy encryption mode enabled
[  260.689005][T13658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  260.763612][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  260.872030][T13640] set_capacity_and_notify: 3 callbacks suppressed
[  260.872052][T13640] loop5: detected capacity change from 0 to 131072
[  260.900313][T13640] F2FS-fs (loop5): QUOTA feature is enabled, so ignore qf_name
[  260.909978][T13640] F2FS-fs (loop5): QUOTA feature is enabled, so ignore qf_name
[  260.980717][T13691] loop0: detected capacity change from 0 to 16
[  260.999323][ T1120] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  261.017889][   T28] audit: type=1400 audit(1784724579.879:13713): avc:  denied  { create } for  pid=13694 comm="syz.5.5852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  261.046458][T13691] erofs: (device loop0): mounted with root inode @ nid 36.
[  261.100634][   T28] audit: type=1400 audit(1784724579.889:13714): avc:  denied  { write } for  pid=13694 comm="syz.5.5852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  261.137255][T13704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5856'.
[  261.151109][T13701] loop0: detected capacity change from 0 to 2048
[  261.169829][   T28] audit: type=1400 audit(1784724580.018:13715): avc:  denied  { mounton } for  pid=13700 comm="syz.0.5855" path="/syzcgroup/unified/syz0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  261.206123][T13701] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  261.308118][T13701] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.5855: reserved inode found cleared - inode=1
[  261.325823][ T1120] usb 7-1: unable to get BOS descriptor or descriptor too short
[  261.341676][ T1120] usb 7-1: config index 0 descriptor too short (expected 198, got 134)
[  261.344126][T13714] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  261.356900][ T1120] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.378493][ T1120] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  261.404112][ T1120] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  261.419589][T13720] loop2: detected capacity change from 0 to 1024
[  261.436040][ T1120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.462103][ T1120] usb 7-1: Product: syz
[  261.470560][T13720] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  261.478638][ T1120] usb 7-1: Manufacturer: syz
[  261.483279][ T1120] usb 7-1: SerialNumber: syz
[  261.488772][T13720] EXT4-fs (loop2): orphan cleanup on readonly fs
[  261.506638][T13720] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[  261.517954][T13720] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  261.528251][T13720] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.5862: Failed to acquire dquot type 0
[  261.541218][T13720] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[  261.563408][T13720] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  261.576925][T13720] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.5862: Failed to acquire dquot type 0
[  261.592890][T13720] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.5862: Freeing blocks not in datazone - block = 0, count = 4096
[  261.606843][T13720] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[  261.616787][T13720] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.5862: Failed to acquire dquot type 0
[  261.629915][T13720] EXT4-fs (loop2): 1 orphan inode deleted
[  261.639139][T13720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  261.697095][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  261.715941][ T1120] usb 7-1: 0:1 : does not exist
[  261.721525][ T1120] usb 7-1: unit 255 not found!
[  261.752574][ T1120] usb 7-1: USB disconnect, device number 4
[  261.991698][  T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  262.115436][   T19] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  262.144677][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5898'.
[  262.333468][   T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.345197][   T19] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  262.373687][   T19] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  262.393001][T13819] xt_hashlimit: size too large, truncated to 1048576
[  262.411923][   T19] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  262.429797][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.448870][   T19] usb 6-1: Product: syz
[  262.459768][   T19] usb 6-1: Manufacturer: syz
[  262.469122][   T19] usb 6-1: SerialNumber: syz
[  262.610741][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  262.610758][   T28] audit: type=1400 audit(1784724581.347:13728): avc:  denied  { setopt } for  pid=13825 comm="syz.2.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  262.678677][T13828] binder: 13827:13828 ioctl 8008f511 0 returned -22
[  262.707330][T13828] binder: 13827:13828 ioctl c00c6211 0 returned -14
[  262.743892][   T19] usb 6-1: Can't get UAC3 power state for id 10
[  262.754496][   T19] usb 6-1: 0:2 : does not exist
[  262.766258][   T19] usb 6-1: BAAD SPEAKERPHONE c_chmask mismatch
[  262.788415][   T19] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  262.821980][   T19] usb 6-1: USB disconnect, device number 13
[  262.901492][T13834] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  262.951811][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5919'.
[  263.050682][  T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  263.183254][T13847] loop2: detected capacity change from 0 to 512
[  263.193874][T13847] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  263.237940][T13847] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00)
[  263.251866][T13847] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00)
[  263.280686][T13847] syz.2.5924: attempt to access beyond end of device
[  263.280686][T13847] loop2: rw=2049, sector=17179852706, nr_sectors = 64 limit=512
[  263.350387][T13857] netlink: 'syz.6.5929': attribute type 1 has an invalid length.
[  263.444802][T13865] loop2: detected capacity change from 0 to 512
[  263.474324][T13865] EXT4-fs (loop2): orphan cleanup on readonly fs
[  263.485590][T13865] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  263.499807][T13865] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  263.520087][T13865] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.5932: attempt to clear invalid blocks 2 len 1
[  263.533712][T13865] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5932: invalid indirect mapped block 1819239214 (level 0)
[  263.548165][T13865] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5932: invalid indirect mapped block 1819239214 (level 1)
[  263.563061][T13865] EXT4-fs (loop2): 1 truncate cleaned up
[  263.576112][T13865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  263.622293][T13865] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring
[  263.648378][T13865] EXT4-fs (loop2): can't enable nombcache during remount
[  263.683124][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  263.744391][T13880] loop6: detected capacity change from 0 to 16
[  263.772581][T13880] erofs: (device loop6): mounted with root inode @ nid 36.
[  264.123601][   T19] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  264.327161][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.346787][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.367867][   T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  264.413589][   T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  264.433637][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.464161][T13927] loop6: detected capacity change from 0 to 40427
[  264.481398][   T19] usb 3-1: config 0 descriptor??
[  264.488680][T13927] F2FS-fs (loop6): invalid crc value
[  264.511731][T13927] F2FS-fs (loop6): Found nat_bits in checkpoint
[  264.608971][T13927] F2FS-fs (loop6): Start checkpoint disabled!
[  264.628168][T13927] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  264.649492][T13927] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  264.776377][  T317] kworker/u4:4: attempt to access beyond end of device
[  264.776377][  T317] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  264.930953][   T19] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving
[  264.950118][   T19] plantronics 0003:047F:FFFF.0042: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  265.062537][T13965] loop6: detected capacity change from 0 to 4096
[  265.105213][T13965] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  265.135953][T13965] EXT4-fs (loop6): Test dummy encryption mode enabled
[  265.154584][   T19] usb 3-1: USB disconnect, device number 27
[  265.165981][T13965] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[  265.182184][T13965] System zones: 0-5
[  265.193287][T13965] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  265.270539][T13368] EXT4-fs (loop6): unmounting filesystem.
[  265.477199][   T28] audit: type=1326 audit(1784724583.995:13729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.7.5983" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  265.507248][T13376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  265.558401][   T28] audit: type=1326 audit(1784724583.995:13730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.7.5983" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  265.610628][T13959] loop5: detected capacity change from 0 to 131072
[  265.618207][T13959] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(512)
[  265.627221][   T28] audit: type=1326 audit(1784724584.032:13731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.7.5983" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  265.665051][T13959] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  265.673409][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  265.691691][T13959] F2FS-fs (loop5): invalid crc value
[  265.747006][T13959] F2FS-fs (loop5): Found nat_bits in checkpoint
[  265.783930][   T28] audit: type=1326 audit(1784724584.032:13732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.7.5983" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  265.879666][   T28] audit: type=1326 audit(1784724584.032:13733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.7.5983" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  265.907455][T13959] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  265.926746][T13959] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  266.209145][T14020] EXT4-fs (loop7): 1 truncate cleaned up
[  266.219238][T14020] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  266.269081][T14005] F2FS-fs (loop6): invalid crc value
[  266.321357][T14005] F2FS-fs (loop6): Found nat_bits in checkpoint
[  266.336851][ T1696] EXT4-fs (loop7): unmounting filesystem.
[  266.462717][T14005] F2FS-fs (loop6): Start checkpoint disabled!
[  266.483253][T14005] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  266.504121][T14005] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  266.570530][T14044] xt_CT: You must specify a L4 protocol and not use inversions on it
[  266.652172][   T43] kworker/u4:2: attempt to access beyond end of device
[  266.652172][   T43] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  266.749558][T14057] set_capacity_and_notify: 2 callbacks suppressed
[  266.749579][T14057] loop5: detected capacity change from 0 to 256
[  266.800005][T14057] exfat: Deprecated parameter 'utf8'
[  266.825320][T14057] exfat: Deprecated parameter 'utf8'
[  266.830834][ T1120] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  266.854185][T14057] exfat: Deprecated parameter 'namecase'
[  266.860133][T14057] exfat: Deprecated parameter 'namecase'
[  266.868878][T14057] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  266.920956][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6024'.
[  266.983654][T14071] loop5: detected capacity change from 0 to 2048
[  267.045970][ T1120] usb 3-1: Using ep0 maxpacket: 16
[  267.051997][T14071] EXT4-fs error (device loop5): __ext4_iget:5104: inode #2: block 127754: comm syz.5.6026: invalid block
[  267.066579][ T1120] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  267.087102][ T1120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.098210][T14071] EXT4-fs (loop5): get root inode failed
[  267.117167][T14071] EXT4-fs (loop5): mount failed
[  267.128207][ T1120] usb 3-1: config 0 descriptor??
[  267.151481][ T1120] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  267.152774][T14089] loop6: detected capacity change from 0 to 256
[  267.178610][T14089] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  267.371488][ T1120] usb 3-1: Detected FT232B
[  267.428574][   T28] audit: type=1400 audit(1784724585.804:13734): avc:  denied  { listen } for  pid=14107 comm="syz.5.6043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  267.508584][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6047'.
[  267.518588][T14115] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6047'.
[  267.533852][   T28] audit: type=1400 audit(1784724585.896:13735): avc:  denied  { lock } for  pid=14116 comm="syz.5.6048" path="socket:[64475]" dev="sockfs" ino=64475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  267.736547][T14131] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6054'.
[  267.810387][ T1120] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  267.827238][ T1120] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  267.848877][ T1120] usb 3-1: USB disconnect, device number 28
[  267.856107][ T1120] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  267.901053][ T1120] ftdi_sio 3-1:0.0: device disconnected
[  268.048101][T14148] loop5: detected capacity change from 0 to 4096
[  268.060724][   T28] audit: type=1326 audit(1784724586.376:13736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.106937][T14148] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  268.137201][   T28] audit: type=1326 audit(1784724586.413:13737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.185328][T14155] netlink: 'syz.7.6065': attribute type 2 has an invalid length.
[  268.207263][T10317] EXT4-fs (loop5): unmounting filesystem.
[  268.222696][   T28] audit: type=1326 audit(1784724586.413:13738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.267767][T14158] loop7: detected capacity change from 0 to 512
[  268.283290][   T28] audit: type=1326 audit(1784724586.413:13739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.308912][   T28] audit: type=1326 audit(1784724586.413:13740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.341597][   T28] audit: type=1326 audit(1784724586.413:13741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.379019][   T28] audit: type=1326 audit(1784724586.413:13742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.405056][T14158] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  268.414492][T14158] ext4 filesystem being mounted at /1149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.440883][   T28] audit: type=1326 audit(1784724586.413:13743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.466142][   T28] audit: type=1326 audit(1784724586.413:13744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.492222][   T28] audit: type=1326 audit(1784724586.413:13745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14151 comm="syz.7.6064" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654579de99 code=0x7ffc0000
[  268.542087][ T1696] EXT4-fs (loop7): unmounting filesystem.
[  268.651706][T14177] loop7: detected capacity change from 0 to 1024
[  268.700465][T14177] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  268.726257][T14177] ext4 filesystem being mounted at /1151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.804748][T14177] EXT4-fs (loop7): re-mounted. Quota mode: none.
[  268.858553][ T1696] EXT4-fs (loop7): unmounting filesystem.
[  269.008225][T14214] loop5: detected capacity change from 0 to 512
[  269.064483][T14214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  269.101875][T14220] device dummy0 entered promiscuous mode
[  269.136674][T14214] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.6091: couldn't read orphan inode 16 (err -116)
[  269.210198][T14214] EXT4-fs (loop5): Remounting filesystem read-only
[  269.242904][T14214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  269.292371][T14214] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.361103][T14214] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.6091: Failed to acquire dquot type 0
[  269.398807][T14214] EXT4-fs (loop5): Remounting filesystem read-only
[  269.438269][T10317] EXT4-fs (loop5): unmounting filesystem.
[  269.737591][T14241] loop7: detected capacity change from 0 to 40427
[  269.773550][T14241] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[  269.788569][T14241] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  269.819784][T14241] F2FS-fs (loop7): Image doesn't support compression
[  269.827615][T14241] F2FS-fs (loop7): Image doesn't support compression
[  269.852809][T14241] F2FS-fs (loop7): invalid crc value
[  269.874890][T14241] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  269.895884][  T301] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  269.931199][T14277] loop5: detected capacity change from 0 to 1024
[  269.946847][T14241] F2FS-fs (loop7): Start checkpoint disabled!
[  269.973503][T14277] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  269.984800][T14241] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  269.996898][T14277] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.5.6122: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  270.017032][T14241] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  270.024122][T14241] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  270.036115][T14272] loop6: detected capacity change from 0 to 40427
[  270.049149][T14277] EXT4-fs error (device loop5) in ext4_delete_inline_entry:1822: Corrupt filesystem
[  270.049290][T14272] F2FS-fs (loop6): fault_injection options not supported
[  270.089464][T14272] F2FS-fs (loop6): fault_type options not supported
[  270.100150][T10317] EXT4-fs (loop5): unmounting filesystem.
[  270.106030][T14241] F2FS-fs (loop7): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0
[  270.125556][T14272] F2FS-fs (loop6): invalid crc value
[  270.131189][  T301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.143377][  T301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.153818][  T301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  270.155988][T14241] F2FS-fs (loop7): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3
[  270.167621][  T301] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  270.185903][  T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.194590][T14241] F2FS-fs (loop7): f2fs_enable_checkpoint() finishes, writeback:58, sync:6
[  270.196275][  T301] usb 3-1: config 0 descriptor??
[  270.220008][T14272] F2FS-fs (loop6): Found nat_bits in checkpoint
[  270.318410][T14289] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d)
[  270.335225][T14289] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 2199023255554)
[  270.345126][T14272] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  270.400600][T13368] syz-executor: attempt to access beyond end of device
[  270.400600][T13368] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  270.828082][  T291] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  270.910946][  T301] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x1
[  270.918438][  T301] plantronics 0003:047F:FFFF.0043: invalid report_count 40994
[  270.926011][  T301] plantronics 0003:047F:FFFF.0043: item 0 2 1 9 parsing failed
[  270.933797][  T301] plantronics 0003:047F:FFFF.0043: parse failed
[  270.940147][  T301] plantronics: probe of 0003:047F:FFFF.0043 failed with error -22
[  271.034812][  T291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  271.053226][  T291] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  271.068910][  T291] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  271.078178][  T291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.098938][  T291] usb 6-1: config 0 descriptor??
[  271.104587][T14300] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  271.148565][T14311] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  271.156444][   T24] usb 3-1: USB disconnect, device number 29
[  271.477961][  T308] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  271.560281][  T291] zeroplus 0003:0C12:0030.0044: unknown main item tag 0x3
[  271.567881][  T291] zeroplus 0003:0C12:0030.0044: item fetching failed at offset 20/40
[  271.576547][  T291] zeroplus 0003:0C12:0030.0044: parse failed
[  271.582726][  T291] zeroplus: probe of 0003:0C12:0030.0044 failed with error -22
[  271.683877][  T308] usb 7-1: Using ep0 maxpacket: 16
[  271.692982][  T308] usb 7-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  271.704221][  T308] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  271.724298][  T308] usb 7-1: config 0 interface 0 has no altsetting 0
[  271.742729][  T308] usb 7-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  271.775335][  T308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.801663][  T291] usb 6-1: USB disconnect, device number 14
[  271.816606][  T308] usb 7-1: config 0 descriptor??
[  271.993264][T14329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  272.002740][T14329] ext4 filesystem being mounted at /954/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  272.025443][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  272.263356][  T308] uclogic 0003:2179:0077.0045: interface is invalid, ignoring
[  272.371915][T14338] set_capacity_and_notify: 3 callbacks suppressed
[  272.371940][T14338] loop5: detected capacity change from 0 to 512
[  272.441182][T14338] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  272.460082][T14338] EXT4-fs (loop5): 1 truncate cleaned up
[  272.465938][T14338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  272.502503][  T308] usb 7-1: USB disconnect, device number 5
[  272.535051][T10317] EXT4-fs (loop5): unmounting filesystem.
[  272.712883][T14349] loop5: detected capacity change from 0 to 256
[  272.733261][T14349] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  272.773463][T14349] exFAT-fs (loop5): error, invalid size(size(0) > aligned(9223372036854777344)
[  272.773463][T14349] 
[  272.795887][T14349] exFAT-fs (loop5): Filesystem has been set read-only
[  272.921710][T14355] loop5: detected capacity change from 0 to 256
[  272.964575][T14355] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  273.078469][T14357] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6156'.
[  273.304853][T14374] loop5: detected capacity change from 0 to 1024
[  273.390595][T14374] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  273.445139][T10317] EXT4-fs (loop5): unmounting filesystem.
[  273.660755][T14392] loop5: detected capacity change from 0 to 256
[  273.705470][T14392] FAT-fs (loop5): Directory bread(block 64) failed
[  273.721079][T14392] FAT-fs (loop5): Directory bread(block 65) failed
[  273.738929][T14392] FAT-fs (loop5): Directory bread(block 66) failed
[  273.749735][T14392] FAT-fs (loop5): Directory bread(block 67) failed
[  273.771681][T14392] FAT-fs (loop5): Directory bread(block 68) failed
[  273.782495][T14392] FAT-fs (loop5): Directory bread(block 69) failed
[  273.800248][T14392] FAT-fs (loop5): Directory bread(block 70) failed
[  273.811138][T14392] FAT-fs (loop5): Directory bread(block 71) failed
[  273.828759][T14392] FAT-fs (loop5): Directory bread(block 72) failed
[  273.839685][T14392] FAT-fs (loop5): Directory bread(block 73) failed
[  273.943549][T14394] loop5: detected capacity change from 0 to 512
[  273.960093][T14394] EXT4-fs: Ignoring removed nomblk_io_submit option
[  273.984982][T14394] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  274.016818][T14394] EXT4-fs (loop5): 1 truncate cleaned up
[  274.022528][T14394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  274.063157][T10317] EXT4-fs (loop5): unmounting filesystem.
[  274.580326][T14388] loop6: detected capacity change from 0 to 131072
[  274.609258][T14388] F2FS-fs (loop6): invalid crc value
[  274.653309][T14388] F2FS-fs (loop6): Found nat_bits in checkpoint
[  274.728913][T14388] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  275.006887][T14407] loop7: detected capacity change from 0 to 1024
[  275.053488][T14407] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  275.063231][T14407] ext4 filesystem being mounted at /1168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.124638][   T43] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1)
[  275.183567][   T43] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  275.228251][   T43] EXT4-fs (loop7): This should not happen!! Data will be lost
[  275.228251][   T43] 
[  275.241703][ T1696] EXT4-fs (loop7): unmounting filesystem.
[  275.385929][T14425] loop5: detected capacity change from 0 to 256
[  275.469412][T14429] loop2: detected capacity change from 0 to 512
[  275.509760][T14429] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  275.518284][T14429] EXT4-fs (loop2): orphan cleanup on readonly fs
[  275.532014][T14429] __quota_error: 18 callbacks suppressed
[  275.532034][T14429] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  275.575626][T14429] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  275.622300][T14429] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.6188: Failed to acquire dquot type 1
[  275.669914][T14429] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6188: bg 0: block 40: padding at end of block bitmap is not set
[  275.750612][T14429] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  275.769931][T14429] EXT4-fs (loop2): 1 truncate cleaned up
[  275.780610][T14429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  275.832252][T14429] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #16: comm syz.2.6188: corrupted xattr block 31
[  275.855308][T14429] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=16
[  275.866775][T14429] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #16: comm syz.2.6188: corrupted xattr block 31
[  275.891044][T14453] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #16: comm syz.2.6188: corrupted xattr block 31
[  275.903221][T14429] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=16
[  275.925206][T14453] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=16
[  275.947046][   T28] audit: type=1400 audit(1784724593.657:13762): avc:  denied  { read } for  pid=14428 comm="syz.2.6188" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  275.947093][T14453] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.6188: bad symlink.
[  275.975883][T14429] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.6188: bad symlink.
[  276.031051][T14434] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  276.053734][T14434] F2FS-fs (loop7): invalid crc value
[  276.063765][T14434] F2FS-fs (loop7): Found nat_bits in checkpoint
[  276.092797][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  276.134604][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6201'.
[  276.198346][T14434] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  276.282503][T14467] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  276.316380][T14467] FAT-fs (loop2): Filesystem has been set read-only
[  276.323149][T14434] F2FS-fs (loop7): Try to recover all the superblocks, ret: 0
[  276.356402][T14478] exfat: Deprecated parameter 'namecase'
[  276.363001][T14475] EXT4-fs: Ignoring removed nobh option
[  276.371890][T14478] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9eb8f943, utbl_chksum : 0xe619d30d)
[  276.402324][T14475] EXT4-fs: Ignoring removed bh option
[  276.422663][T14467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6203'.
[  276.436704][T14475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  276.437428][T14467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6203'.
[  276.463351][T14475] System zones: 0-1, 3-12
[  276.468339][T14475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  276.554305][T10317] EXT4-fs (loop5): unmounting filesystem.
[  276.578862][T14483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  276.624204][T14483] EXT4-fs (loop2): Test dummy encryption mode enabled
[  276.637691][T14490] device bridge0 entered promiscuous mode
[  276.654712][T14483] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003]
[  276.662938][T14490] device macsec2 entered promiscuous mode
[  276.669721][T14483] System zones: 0-5
[  276.674456][T14483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  276.768245][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  277.007360][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6227'.
[  277.138789][T14525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  277.151499][T14498] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  277.161495][T14498] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  277.173724][T14525] ext4 filesystem being mounted at /966/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.194131][T14498] F2FS-fs (loop7): invalid crc value
[  277.233767][T14498] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  277.245223][   T43] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1)
[  277.261320][T14507] F2FS-fs (loop5): invalid crc value
[  277.279041][   T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  277.293530][   T43] EXT4-fs (loop2): This should not happen!! Data will be lost
[  277.293530][   T43] 
[  277.302212][T14507] F2FS-fs (loop5): Found nat_bits in checkpoint
[  277.320541][ T4316] EXT4-fs (loop2): unmounting filesystem.
[  277.345476][T14498] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  277.352794][T14498] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  277.446492][T14507] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  277.546461][T13706] ------------[ cut here ]------------
[  277.552482][T13706] kernel BUG at fs/buffer.c:2714!
[  277.565285][T10317] syz-executor: attempt to access beyond end of device
[  277.565285][T10317] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  277.568831][T13706] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  277.585346][T13706] CPU: 1 PID: 13706 Comm: kmmpd-loop0 Tainted: G        W          syzkaller #0
[  277.594408][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  277.604500][T13706] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0
[  277.610044][T13706] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 c8 de e7 ff e9 b0 fe ff ff e8 3e 54 a2 ff 0f 0b e8 37 54 a2 ff <0f> 0b e8 30 54 a2 ff 0f 0b e8 29 54 a2 ff 0f 0b e8 22 54 a2 ff 0f
[  277.629864][T13706] RSP: 0018:ffffc90000757ca0 EFLAGS: 00010293
[  277.635996][T13706] RAX: ffffffff81cf1209 RBX: 0000000000000000 RCX: ffff888148ca3cc0
[  277.644002][T13706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  277.652001][T13706] RBP: ffffc90000757cf0 R08: ffff888138fccd27 R09: 1ffff110271f99a4
[  277.660010][T13706] R10: dffffc0000000000 R11: ffffed10271f99a5 R12: 0000000000000000
[  277.668022][T13706] R13: 1ffff110271f99a4 R14: ffff888138fccd20 R15: 0000000000003801
[  277.676034][T13706] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  277.685002][T13706] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.691630][T13706] CR2: 00007f65465556b8 CR3: 00000001306d4000 CR4: 00000000003506a0
[  277.699644][T13706] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  277.707653][T13706] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  277.715705][T13706] Call Trace:
[  277.719015][T13706]  <TASK>
[  277.721968][T13706]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  277.727832][T13706]  submit_bh+0x1f/0x30
[  277.732031][T13706]  write_mmp_block_thawed+0x397/0x510
[  277.737440][T13706]  ? __cfi_schedule_timeout+0x10/0x10
[  277.742853][T13706]  ? read_mmp_block+0x700/0x700
[  277.747738][T13706]  ? __cfi_process_timeout+0x10/0x10
[  277.753078][T13706]  ? switch_mm_irqs_off+0x730/0x960
[  277.758324][T13706]  write_mmp_block+0x138/0x2b0
[  277.763219][T13706]  kmmpd+0x382/0x940
[  277.767152][T13706]  kthread+0x281/0x320
[  277.771286][T13706]  ? __cfi_kmmpd+0x10/0x10
[  277.775739][T13706]  ? __cfi_kthread+0x10/0x10
[  277.780368][T13706]  ret_from_fork+0x1f/0x30
[  277.784831][T13706]  </TASK>
[  277.787885][T13706] Modules linked in:
[  277.794686][T13706] ---[ end trace 0000000000000000 ]---
[  277.800239][T13706] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0
[  277.805892][T13706] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 c8 de e7 ff e9 b0 fe ff ff e8 3e 54 a2 ff 0f 0b e8 37 54 a2 ff <0f> 0b e8 30 54 a2 ff 0f 0b e8 29 54 a2 ff 0f 0b e8 22 54 a2 ff 0f
[  277.825952][T13706] RSP: 0018:ffffc90000757ca0 EFLAGS: 00010293
[  277.832549][T13706] RAX: ffffffff81cf1209 RBX: 0000000000000000 RCX: ffff888148ca3cc0
[  277.849491][T13706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  277.864037][T13706] RBP: ffffc90000757cf0 R08: ffff888138fccd27 R09: 1ffff110271f99a4
[  277.872599][T13706] R10: dffffc0000000000 R11: ffffed10271f99a5 R12: 0000000000000000
[  277.880629][T13706] R13: 1ffff110271f99a4 R14: ffff888138fccd20 R15: 0000000000003801
[  277.904335][T13706] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  277.913365][T13706] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.925701][T13706] CR2: 0000555594fd4908 CR3: 000000010f133000 CR4: 00000000003506a0
[  277.933742][T13706] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  277.947313][  T308] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  277.971180][T13706] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  277.988459][T13706] Kernel panic - not syncing: Fatal exception
[  277.995181][T13706] Kernel Offset: disabled
[  277.999522][T13706] Rebooting in 86400 seconds..