last executing test programs: 20.12655668s ago: executing program 3 (id=567): syz_emit_ethernet(0x4e, &(0x7f0000000b40)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0x7, 0x77, [@local]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 19.901120725s ago: executing program 3 (id=569): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 19.794540097s ago: executing program 3 (id=571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x20100, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 19.556871972s ago: executing program 3 (id=579): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) 19.22411544s ago: executing program 3 (id=589): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa4666bbcc6ca80810e4d7cf28a3ef8da37545132057476c8adc3906a07f6082bc4e4771b1f84d1eb323d4f9320e33ea3d4b4c1c259db0e63f82409d07fa54d3ecdfc9cd635c1bcd7a5efead4eb3486842c600b735d0ea4bdfbff59", 0x12f}, {&(0x7f0000000140)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0", 0x19}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e5f41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c", 0x63}], 0x1}}], 0x2, 0xa090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18.532462785s ago: executing program 3 (id=600): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x82a, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2, 0x138) syz_open_procfs(0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x234a0c7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3200009, 0x0, 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)="94", 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 18.386414478s ago: executing program 32 (id=600): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x82a, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2, 0x138) syz_open_procfs(0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x234a0c7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3200009, 0x0, 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)="94", 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 12.36258978s ago: executing program 5 (id=670): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 12.289191162s ago: executing program 5 (id=671): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="61451c3d839aae67c123157d903b2eb22095c3c44cf9bc22aeaa18525789c4957f9d02f4162d9ff7a0255171bd3e4671adbfe94f44fa47ca5eeec418c1eab8c8348dafb2fa3304a7468627b6f5a1831f795937e441b78e3e749e83beb1f91686ee6a07bc014833", 0x67}, {&(0x7f0000000380)="697000f0f0f2c9eb39fd0921defea249598254d14bda4c85fcca3d4d84a2c45e22d06eecb4a7cc2967f5006809dbfd33a3cda9fe9ede30fe0b7d4dfa8ac28f8d9925ed288f8a07b645b6e28c26e51ed817b0d122db4aa28118c46820440f3c6988554560d425ca9802f80da38c68c8d07ad78a4ffada28e71fdcdbaf270c7fcb6c7bcf16f210081fe053b9c66e7c2e46e19fb2affcf7606e6fabfbe53459675783f328063f51abce07a1bfa0b441cebda9624141bc4b26ab29e4734b1ab3f586e016162aa2a241972457d555e4f25afa6259621f42bb0bfb536919d16d509fac1fca8be44d0f6192079d4cef42c0", 0xee}, {&(0x7f0000000500)="00fa57e026f93dd09fd34ac8b952d142e810866117edc5b04b7376ed3fa2de2bafb27e88ff9de06a5a8d847ac0f35413031fe6525ea5cc19c9da3ddfafc2367a8987055982da25d598a1", 0x4a}], 0x3}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000006c0)="7e09ffcebbd1ab1a7c9a78e0de585c9ca837fdcce2167ff89458563444fc79546a976ae4ad3e471995ffde5dc15ead4b111f6007ed2c86884c107af1375bce32c90ab0b08dc9e6baed4c54f5ad496df58a94f93dd96c4ed3cbb5389158bd9eb618bce1449f", 0x65}, {&(0x7f0000000740)="f1ccebefb7b667030362aae14351ffc70b252c771fd466ecef61cddf8e5b4cae557dd08a38fa5603e47c5ee13c280a01bcbd021d99906d77636a249971d41ce1b5f0b9c778126d8d64f350e8eef8ef35bf8630ae54d44ed9afb86dd4eed7ae87ec547f13fcdfe52536e9ec6f2a0a25d3dc1209", 0x73}, {&(0x7f0000000800)="26d56566dbbe3ea9a44f606d5e3406611122549f4ebe034d8a697bed9af662a0ef5ad25d9553d7ec0000000000000000311dff8217d2f1e37560635cd9d8ca9d61a8ddaf8be6c5e8436374cb3f829421796088a09c3f74663dbbf08f70e160d5d7b070550c81bc7b330d12b0329e744f52601e7cdd1e0cbba9ab8f6198dd87bac25d7dc796a8bf84826b4aad", 0x8c}, {&(0x7f0000001100)="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", 0x50a}], 0x4}}], 0x2, 0x42054) 12.205610003s ago: executing program 5 (id=672): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325e671, 0xffffffffffffffff, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.074563716s ago: executing program 5 (id=673): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@barrier}, {@nodioread_nolock}, {@stripe={'stripe', 0x3d, 0x4}}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 11.753468173s ago: executing program 5 (id=675): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) 11.282573593s ago: executing program 5 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x68) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) 11.282414544s ago: executing program 33 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x68) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) 5.063928709s ago: executing program 0 (id=827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000700)=@delpolicy={0x58, 0x14, 0x201, 0x70bd2c, 0x25dfdbfc, {{@in6=@mcast1, @in6=@mcast2, 0x4e21, 0xfe00, 0x4e24, 0x8, 0x2, 0x20, 0xa0, 0x21}, 0x6e6bb1, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) 5.063638369s ago: executing program 0 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x4, 0x0, 0x8, 0xfffffffc}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 4.952155582s ago: executing program 0 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7f, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 4.922167743s ago: executing program 0 (id=830): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) read(r1, &(0x7f0000000240)=""/81, 0x51) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x220) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.921632732s ago: executing program 0 (id=831): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe20}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffff90}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x15, 0x0, 0x0, 0xffffff86}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.68599624s ago: executing program 0 (id=837): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x5, 0x92, &(0x7f0000000180)="05bd0641265a6975617ab8835f722179497c2d845881ded920e4071420be5711bc0571d8af6e0d94a7117a02307f6b875ccfd4202dd109e99da15a096004480634c6b8efd05c0985320cc632bd732ca3723a917f490b40539c4a92fd1920b457cdecb39440da887bbbf24fb8fe2862dc0618d5dbf9d802d85e712d278ad3c896678e13358d03a81b8aebcdaf827d9959905a") syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.64495992s ago: executing program 1 (id=841): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setresuid(0xee01, 0xee00, 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) 2.159379693s ago: executing program 4 (id=865): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x2, 0x0, 0x3, 0x1, 0x2, 0x2}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.686205394s ago: executing program 6 (id=876): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x810, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x7, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048805}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.607751145s ago: executing program 6 (id=877): listen(0xffffffffffffffff, 0x98c3) 1.600383455s ago: executing program 6 (id=878): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) 1.561216886s ago: executing program 6 (id=879): ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x80041285, 0xffffffffffffffff) 1.561044626s ago: executing program 6 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) 1.560819966s ago: executing program 6 (id=881): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008ef17ee60000000000001090224000100009008090400fedf0300020009218100030122280009058103"], 0x0) io_submit(0x0, 0x1, &(0x7f0000001c00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' \b('], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.153974285s ago: executing program 2 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0xb, 0x12) 1.122956086s ago: executing program 2 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 1.122866086s ago: executing program 2 (id=884): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.122756606s ago: executing program 2 (id=885): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x420, 0x3fa, 0xadb6024f165c172a, 0x70bd2d, 0x25dfdbfd, {0x4, 0x0, 0x20, [0x5, 0x668, 0xffff, 0x0, 0x8001, 0x7fff, 0xffff, 0xe785, 0x7, 0x3, 0x7f, 0x0, 0x4, 0x3, 0x2, 0x7, 0x2, 0x5, 0x7fff, 0x8, 0x80000000, 0x600, 0x8d60, 0xfffff800, 0x80, 0x9, 0x8aa7, 0x9, 0x0, 0xfffffffa, 0x6, 0x80000000, 0x9, 0x9, 0xe946, 0x6, 0x2, 0xfffffff7, 0x2, 0x9, 0x0, 0xf2, 0x5, 0x0, 0x9, 0x5, 0x8000000, 0x3ff, 0x5457, 0x3, 0xa21d, 0x8, 0xfff, 0x3, 0x6, 0x800, 0x0, 0x7, 0x8, 0xa, 0x5, 0x100, 0xe, 0x9], [0x67, 0x9484, 0xa, 0x1, 0x9e93, 0x0, 0xdb, 0x1, 0x8001, 0xfff, 0x0, 0x1, 0x5, 0x4, 0x7, 0x9, 0x6, 0x3, 0x5, 0x1000, 0x8, 0xf15a, 0x8, 0x9, 0x5, 0x80, 0xffff, 0x101, 0x67, 0x5, 0x401, 0x7, 0xb0, 0xfffffffc, 0x800, 0x8, 0x7fff, 0x2, 0x0, 0x9, 0xa0, 0xec, 0x0, 0x1, 0x0, 0xc, 0x14000, 0x9, 0x8ab, 0x8, 0x4, 0x3, 0x6d7, 0x3, 0x5, 0x0, 0x10000, 0x7, 0x2, 0xff, 0x0, 0x6, 0x4, 0x6], [0x5, 0x5, 0xf, 0x65a, 0x2, 0x101, 0xffffa9b0, 0x0, 0x6, 0x100, 0x94a, 0x0, 0x0, 0x9, 0x9, 0x0, 0x6ea8c3a6, 0x3, 0x1, 0xa, 0x4, 0xfffffff8, 0x2, 0x1, 0x8, 0x3, 0x100, 0x10001, 0x0, 0x0, 0x2, 0x7ff, 0x5, 0x1, 0x7, 0xb, 0x0, 0x0, 0x75, 0x8, 0x4, 0x10000, 0x6, 0xded, 0x5, 0x2, 0x6, 0x2, 0x7ff, 0x3, 0x7fff, 0x2, 0x1bb4000, 0x8, 0x22, 0x0, 0x2, 0xa36, 0x800, 0x14, 0x4, 0x2, 0x3, 0x6], [0x7, 0x3, 0x0, 0x4, 0x7f, 0x6, 0x4, 0x4, 0xc, 0x0, 0x40000000, 0xd, 0x0, 0x6, 0x8, 0x10, 0x4, 0x130c, 0x40, 0x1ff, 0x7, 0x6, 0x6, 0x2, 0xfffffffc, 0x5c, 0x3, 0xffffffff, 0xfffffffd, 0x6, 0x5, 0xffffffff, 0x4, 0x3, 0x5, 0x9, 0x0, 0x1, 0x8000, 0x100, 0x1, 0x1, 0x13, 0xde, 0x5, 0x4, 0x3, 0x7, 0x9, 0x4, 0x5, 0x4, 0x3, 0x2, 0x9, 0xfffffffb, 0x180000, 0x2e908e86, 0x2, 0x0, 0xfffffffc, 0x80, 0x64, 0x3]}}, 0x420}, 0x1, 0x0, 0x0, 0x10}, 0x10) 1.122685656s ago: executing program 2 (id=886): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@exit_looper], 0x0, 0x0, 0x0}) 1.074506897s ago: executing program 2 (id=887): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 491.811769ms ago: executing program 4 (id=888): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x810, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x7, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048805}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 411.898061ms ago: executing program 4 (id=889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0xf7, 0x1, 0x2, 0x9, 0xff, 0xf6, 0x5, 0x9, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4, 0xff, '\x00', 0xdc, 0xe8}) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0xa, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x5, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x30000, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x1}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1d, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x3, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x100000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) 366.541803ms ago: executing program 4 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 337.568293ms ago: executing program 4 (id=891): ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x80041285, 0xffffffffffffffff) 282.493724ms ago: executing program 4 (id=892): syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x58, &(0x7f0000000240)=@string={0x58, 0x3, "9308ec5bf55349c292900e5307e6f02c7fa5ba1dfd9aaaa716425552f3281ed609ae447671215fd1c2974036707a15195ae4d2cb5b4c839264269ee084bb3a64ad2be9462759008cf609164a922275a72f65c98bf963"}}]}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 276.061784ms ago: executing program 1 (id=893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020722500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 248.047445ms ago: executing program 1 (id=894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="0fc7284625c87dc07148b8b9000000000000000f23d00f21f835100000070f23f848b8bcc585fc2fd3c5080f23d00f21f835000000080f23f8660fc7b374000000450fc7720ec48189c6168bc744240060000000c744240200380000ff2c2466baf80cb808122188ef66bafc0ced66ba610066ed", 0x74}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x9000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 121.787408ms ago: executing program 1 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x80, 0x100000, 0x0, 0x2004c8, 0xfffffffeffffffff, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x4, 0x6, 0x4002, 0x5, 0x1, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x47b07}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0xf5478ee31f1febaa, 0x0, 0x0) 14.51629ms ago: executing program 1 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @local, 0xfff}, 0x1c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0xa, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=897): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) kernel console output (not intermixed with test programs): nit_itable, [ 92.041485][ T20] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.151899][ T24] audit: type=1326 audit(1783052851.220:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1248 comm="syz.4.243" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39fdf19e59 code=0x0 [ 92.281477][ T663] usb 3-1: device descriptor read/64, error -71 [ 92.301466][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 92.431503][ T20] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 92.441822][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.601686][ T20] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.611208][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.619284][ T20] usb 1-1: Product: syz [ 92.627067][ T20] usb 1-1: Manufacturer: syz [ 92.631702][ T20] usb 1-1: SerialNumber: syz [ 92.681463][ T663] usb 3-1: device descriptor read/64, error -71 [ 92.801512][ T663] usb usb3-port1: attempt power cycle [ 93.159613][ T1266] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.245: invalid indirect mapped block 10 (level 1) [ 93.174128][ T1266] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.245: invalid indirect mapped block 8 (level 1) [ 93.205515][ T1266] EXT4-fs (loop4): 1 truncate cleaned up [ 93.211245][ T1266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 94.038190][ T289] usb 4-1: USB disconnect, device number 8 [ 94.214663][ T1279] EXT4-fs (loop2): Unrecognized mount option "smackfsfloor=w8" or missing value [ 95.752767][ T20] usb 1-1: cannot find UAC_HEADER [ 95.757912][ T20] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 95.765491][ T20] usb 1-1: USB disconnect, device number 7 [ 95.777820][ T24] audit: type=1400 audit(1783052854.840:237): avc: denied { nlmsg_read } for pid=1296 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.788884][ T1297] netlink: 216 bytes leftover after parsing attributes in process `syz.3.255'. [ 97.076010][ T1304] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.252: invalid indirect mapped block 10 (level 1) [ 97.090010][ T1304] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.252: invalid indirect mapped block 8 (level 1) [ 97.240814][ T1317] overlayfs: missing 'lowerdir' [ 97.385918][ T1304] EXT4-fs (loop1): 1 truncate cleaned up [ 97.391735][ T1304] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 98.601616][ T663] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 99.031507][ T410] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 99.060730][ T1331] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 99.070642][ T1331] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 99.080232][ T1331] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 99.080232][ T1331] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 99.080232][ T1331] [ 99.098751][ T1331] EXT4-fs (loop1): Test dummy encryption mode enabled [ 99.106166][ T1331] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 99.171475][ T53] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.201484][ T20] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 99.281486][ T663] usb 5-1: device descriptor read/64, error -71 [ 99.411550][ T53] usb 1-1: Using ep0 maxpacket: 16 [ 99.421490][ T410] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.433982][ T410] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.440039][ T1338] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.263: inode has both inline data and extents flags [ 99.456252][ T1338] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.263: couldn't read orphan inode 15 (err -117) [ 99.468267][ T1338] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 99.522150][ T410] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 99.536760][ T410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.549339][ T410] usb 3-1: SerialNumber: syz [ 99.554317][ T53] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 99.564958][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.581242][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.597635][ T53] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.672086][ T410] usb 3-1: 0:2 : does not exist [ 99.691461][ T663] usb 5-1: device descriptor read/64, error -71 [ 99.721824][ T20] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 99.731463][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.739566][ T20] usb 4-1: SerialNumber: syz [ 99.801785][ T53] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.816882][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.841158][ T53] usb 1-1: Product: syz [ 99.853980][ T53] usb 1-1: Manufacturer: syz [ 99.867938][ T53] usb 1-1: SerialNumber: syz [ 99.893513][ T20] usb 4-1: 0:2 : does not exist [ 99.898631][ T410] usb 3-1: USB disconnect, device number 10 [ 99.971524][ T663] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 100.037896][ T20] usb 4-1: USB disconnect, device number 9 [ 100.451518][ T663] usb usb5-port1: attempt power cycle [ 101.691466][ T663] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 101.701697][ T53] usb 1-1: cannot find UAC_HEADER [ 101.706979][ T53] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 101.738260][ T53] usb 1-1: USB disconnect, device number 8 [ 102.125899][ T1366] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.272: invalid indirect mapped block 10 (level 1) [ 102.139391][ T1366] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.272: invalid indirect mapped block 8 (level 1) [ 102.153136][ T1366] EXT4-fs (loop0): 1 truncate cleaned up [ 102.158806][ T1366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 102.366157][ T1372] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 102.397478][ T1372] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 102.420237][ T1372] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 102.420237][ T1372] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 102.420237][ T1372] [ 102.441580][ T1372] EXT4-fs (loop1): Test dummy encryption mode enabled [ 102.444653][ T1375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.275'. [ 102.449021][ T1372] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 102.466435][ T663] usb 5-1: config index 0 descriptor too short (expected 8251, got 59) [ 102.474861][ T663] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.485226][ T663] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.591696][ T663] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.600877][ T663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.608958][ T663] usb 5-1: SerialNumber: syz [ 102.651865][ T663] usb 5-1: bad CDC descriptors [ 104.227153][ T1382] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.274: inode has both inline data and extents flags [ 104.240794][ T1382] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.274: couldn't read orphan inode 15 (err -117) [ 104.253574][ T1382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 104.321361][ T20] usb 5-1: USB disconnect, device number 12 [ 105.748653][ T1403] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.282: invalid indirect mapped block 10 (level 1) [ 105.762073][ T1403] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.282: invalid indirect mapped block 8 (level 1) [ 105.775600][ T1403] EXT4-fs (loop1): 1 truncate cleaned up [ 105.781245][ T1403] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 105.840527][ T1398] F2FS-fs (loop3): invalid crc value [ 105.862023][ T1398] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 105.908152][ T1398] F2FS-fs (loop3): Start checkpoint disabled! [ 105.919942][ T1398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 106.569415][ T1423] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.286: invalid block [ 106.581213][ T1423] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.286: invalid indirect mapped block 10 (level 1) [ 106.596832][ T1423] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.286: invalid indirect mapped block 8 (level 1) [ 106.610203][ T1423] EXT4-fs (loop0): 1 truncate cleaned up [ 106.615886][ T1423] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 106.962305][ T1436] overlayfs: failed to resolve './file1': -2 [ 107.223530][ T1440] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 107.232981][ T1440] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 107.242383][ T1440] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 107.242383][ T1440] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 107.242383][ T1440] [ 107.260668][ T1440] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.267870][ T1440] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 107.293347][ T1446] erofs: (device loop0): mounted with root inode @ nid 36. [ 107.331586][ T20] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 107.584913][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 107.609891][ T1450] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.293: inode has both inline data and extents flags [ 107.624492][ T1450] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.293: couldn't read orphan inode 15 (err -117) [ 107.637138][ T1450] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 107.801831][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.971728][ T20] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 108.007982][ T20] usb 5-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.061499][ T20] usb 5-1: config 1 interface 0 has no altsetting 0 [ 108.380543][ T20] usb 5-1: string descriptor 0 read error: -22 [ 108.387133][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.396208][ T53] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 108.403787][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.431555][ T1444] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.438576][ T1444] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.454544][ T20] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 108.473481][ T1463] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 108.487048][ T1463] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 108.497692][ T1463] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 108.497692][ T1463] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 108.497692][ T1463] [ 108.516152][ T1463] EXT4-fs (loop2): Test dummy encryption mode enabled [ 108.524659][ T1463] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 108.771507][ T53] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.781825][ T53] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.864770][ T53] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 108.896026][ T1471] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.299: inode has both inline data and extents flags [ 108.909798][ T1471] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.299: couldn't read orphan inode 15 (err -117) [ 108.922775][ T1471] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 108.976672][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.002459][ T53] usb 4-1: SerialNumber: syz [ 109.053840][ T53] usb 4-1: 0:2 : does not exist [ 109.373886][ T53] usb 4-1: USB disconnect, device number 10 [ 109.611961][ T446] udevd[446]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.915064][ T1488] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.304: invalid indirect mapped block 10 (level 1) [ 109.930377][ T1488] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.304: invalid indirect mapped block 8 (level 1) [ 109.944792][ T1488] EXT4-fs (loop2): 1 truncate cleaned up [ 109.950459][ T1488] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 110.412177][ T53] usb 5-1: USB disconnect, device number 13 [ 110.516051][ T1502] capability: warning: `syz.0.309' uses deprecated v2 capabilities in a way that may be insecure [ 110.712825][ T1505] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 110.791632][ T1505] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 110.817763][ T1505] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 110.817763][ T1505] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 110.817763][ T1505] [ 110.836450][ T1505] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.844990][ T1505] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 111.175499][ T1516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.311'. [ 111.240090][ T1514] erofs: (device loop1): mounted with root inode @ nid 36. [ 112.992485][ T1518] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.310: inode has both inline data and extents flags [ 113.005774][ T1518] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.310: couldn't read orphan inode 15 (err -117) [ 113.022777][ T1518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 113.346786][ T24] audit: type=1400 audit(1783052872.410:238): avc: denied { create } for pid=1527 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 113.392526][ T1529] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.314: invalid block [ 113.404624][ T1529] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.314: invalid indirect mapped block 10 (level 1) [ 113.419252][ T1529] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.314: invalid indirect mapped block 8 (level 1) [ 113.433602][ T1529] EXT4-fs (loop4): 1 truncate cleaned up [ 113.439260][ T1529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 113.885510][ T1535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.961485][ T1535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.993190][ T1535] EXT4-fs (loop0): 1 truncate cleaned up [ 114.002323][ T1535] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,discard,noblock_validity,auto_da_alloc,discard,jqfmt=vfsv1,data=journal,,errors=continue [ 114.082997][ T1531] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 114.090756][ T1531] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.111749][ T1531] F2FS-fs (loop3): invalid crc value [ 114.117785][ T1531] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 114.215596][ T24] audit: type=1400 audit(1783052873.280:239): avc: denied { mounton } for pid=1534 comm="syz.0.316" path="/64/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.222219][ T1531] F2FS-fs (loop3): Start checkpoint disabled! [ 114.245387][ T1531] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.252486][ T1531] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 114.361506][ T289] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 114.372407][ T337] attempt to access beyond end of device [ 114.372407][ T337] loop3: rw=2049, want=45104, limit=40427 [ 114.385331][ T1554] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.321: invalid indirect mapped block 10 (level 1) [ 114.402142][ T1554] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.321: invalid indirect mapped block 8 (level 1) [ 114.416063][ T1554] EXT4-fs (loop1): 1 truncate cleaned up [ 114.421748][ T1554] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 114.842510][ T281] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 377: padding at end of block bitmap is not set [ 114.857457][ T281] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 116.029412][ T24] audit: type=1400 audit(1783052875.090:240): avc: denied { unlink } for pid=281 comm="syz-executor" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.056362][ T24] audit: type=1400 audit(1783052875.120:241): avc: denied { unlink } for pid=281 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 116.102644][ T1560] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.322: invalid indirect mapped block 10 (level 1) [ 116.116094][ T1560] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.322: invalid indirect mapped block 8 (level 1) [ 116.129652][ T1560] EXT4-fs (loop3): 1 truncate cleaned up [ 116.135331][ T1560] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 116.242607][ T289] usb 3-1: config index 0 descriptor too short (expected 8251, got 59) [ 116.250904][ T289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.261071][ T289] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.361479][ T410] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 116.371605][ T289] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.380870][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.396090][ T289] usb 3-1: SerialNumber: syz [ 117.039549][ T289] usb 3-1: bad CDC descriptors [ 117.041459][ T410] usb 5-1: Using ep0 maxpacket: 32 [ 117.132221][ T289] usb 3-1: USB disconnect, device number 11 [ 117.316421][ T410] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.475411][ T20] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 117.513298][ T1581] overlayfs: missing 'lowerdir' [ 117.717985][ T1585] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 117.741597][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 117.746998][ T410] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 117.756658][ T410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.764792][ T410] usb 5-1: Product: syz [ 117.769289][ T410] usb 5-1: Manufacturer: syz [ 117.774163][ T410] usb 5-1: SerialNumber: syz [ 117.781613][ T1585] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 117.799681][ T1585] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 117.799681][ T1585] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 117.799681][ T1585] [ 117.821752][ T1585] EXT4-fs (loop1): Test dummy encryption mode enabled [ 117.830223][ T1585] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 117.871703][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.277875][ T1589] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.329: invalid indirect mapped block 10 (level 1) [ 118.291942][ T1589] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.329: invalid indirect mapped block 8 (level 1) [ 118.306233][ T1589] EXT4-fs (loop0): 1 truncate cleaned up [ 118.311961][ T1589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 118.431667][ T410] usb 5-1: unit 0 not found! [ 118.503580][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.761592][ T20] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.770680][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.778707][ T20] usb 4-1: Product: syz [ 118.782889][ T20] usb 4-1: Manufacturer: syz [ 118.787462][ T20] usb 4-1: SerialNumber: syz [ 118.855785][ T1599] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.330: inode has both inline data and extents flags [ 118.869078][ T1599] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.330: couldn't read orphan inode 15 (err -117) [ 118.881085][ T1599] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 119.122269][ T1604] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 119.132176][ T1604] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 119.141652][ T1604] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 119.141652][ T1604] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 119.141652][ T1604] [ 119.160029][ T1604] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.170273][ T1604] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 119.476515][ T1611] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 119.514001][ T1611] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 119.527348][ T1611] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 119.527348][ T1611] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 119.527348][ T1611] [ 119.546467][ T1611] EXT4-fs (loop4): Test dummy encryption mode enabled [ 119.894520][ T1611] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 120.160178][ T1614] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.333: inode has both inline data and extents flags [ 120.174064][ T1614] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.333: couldn't read orphan inode 15 (err -117) [ 120.186977][ T1614] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 120.259009][ T20] usb 4-1: cannot find UAC_HEADER [ 120.296735][ T410] usb 5-1: USB disconnect, device number 14 [ 120.305746][ T20] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 120.316550][ T20] usb 4-1: USB disconnect, device number 11 [ 120.545219][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.998046][ T1628] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.335: inode has both inline data and extents flags [ 121.012041][ T1628] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.335: couldn't read orphan inode 15 (err -117) [ 121.024553][ T1628] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 121.401588][ T20] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 121.423936][ T1634] erofs: (device loop3): mounted with root inode @ nid 36. [ 121.638173][ T410] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.273941][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.387916][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.768476][ T410] usb 2-1: Using ep0 maxpacket: 16 [ 123.791916][ T1653] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.343: invalid indirect mapped block 10 (level 1) [ 123.805540][ T1653] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.343: invalid indirect mapped block 8 (level 1) [ 123.819171][ T1653] EXT4-fs (loop4): 1 truncate cleaned up [ 123.825264][ T1653] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 123.911640][ T20] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 123.920869][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.928928][ T20] usb 1-1: SerialNumber: syz [ 124.561668][ T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.572233][ T20] usb 1-1: can't set config #1, error -71 [ 124.578041][ T410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.592360][ T20] usb 1-1: USB disconnect, device number 9 [ 124.603881][ T1669] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 124.621544][ T410] usb 2-1: string descriptor 0 read error: -71 [ 124.627790][ T410] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.641386][ T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.661505][ T410] usb 2-1: can't set config #1, error -71 [ 124.669957][ T410] usb 2-1: USB disconnect, device number 10 [ 124.711581][ T1673] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 124.747334][ T1673] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 124.757127][ T1673] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 124.757127][ T1673] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 124.757127][ T1673] [ 124.775929][ T1673] EXT4-fs (loop4): Test dummy encryption mode enabled [ 124.783559][ T1673] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 124.806021][ T1678] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.991832][ T20] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 125.931781][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 126.472538][ T1685] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.349: inode has both inline data and extents flags [ 126.486484][ T1685] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.349: couldn't read orphan inode 15 (err -117) [ 126.498916][ T1685] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 126.508115][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.558933][ T1681] overlayfs: missing 'lowerdir' [ 126.661536][ T20] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 126.678821][ T20] usb 1-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.720565][ T20] usb 1-1: config 1 interface 0 has no altsetting 0 [ 126.743115][ T1696] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 126.759476][ T1696] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 126.769191][ T1696] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 126.769191][ T1696] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 126.769191][ T1696] [ 126.787830][ T1696] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.795449][ T1696] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 126.988506][ T20] usb 1-1: string descriptor 0 read error: -71 [ 126.995951][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.005409][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.031859][ T20] usb 1-1: can't set config #1, error -71 [ 127.039997][ T20] usb 1-1: USB disconnect, device number 10 [ 127.231832][ T1704] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 127.295854][ T1707] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.356: inode has both inline data and extents flags [ 127.309873][ T1707] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.356: couldn't read orphan inode 15 (err -117) [ 127.323323][ T1707] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 127.831745][ T1704] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 127.841159][ T1704] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 127.841159][ T1704] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 127.841159][ T1704] [ 127.867560][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.901511][ T1704] EXT4-fs (loop2): Test dummy encryption mode enabled [ 127.908848][ T1704] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 127.952381][ T1713] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 127.961878][ T1713] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 127.961889][ T453] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 127.978946][ T1713] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 127.978946][ T1713] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 127.978946][ T1713] [ 127.997525][ T1713] EXT4-fs (loop3): Test dummy encryption mode enabled [ 128.005176][ T1713] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 128.161466][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 129.141761][ T20] usb 1-1: too many endpoints for config 0 interface 0 altsetting 10: 254, using maximum allowed: 30 [ 129.153156][ T20] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 61, changing to 9 [ 129.167423][ T20] usb 1-1: config 0 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 129.185587][ T20] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.197540][ T1718] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.361: inode has both inline data and extents flags [ 129.211537][ T1718] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.361: couldn't read orphan inode 15 (err -117) [ 129.224360][ T1718] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 129.300877][ T1718] overlayfs: missing 'workdir' [ 129.461320][ T20] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 129.493564][ T1720] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.359: inode has both inline data and extents flags [ 129.507269][ T1720] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.359: couldn't read orphan inode 15 (err -117) [ 129.597546][ T1720] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 129.771949][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.874378][ T20] usb 1-1: config 0 descriptor?? [ 130.071519][ T453] usb 5-1: device descriptor read/all, error -71 [ 130.260180][ T1737] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 130.270099][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 130.497177][ T1733] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 130.634598][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 131.095747][ T1737] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 131.105459][ T1733] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 131.120617][ T1737] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 131.120617][ T1737] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 131.120617][ T1737] [ 131.141253][ T20] usb 1-1: USB disconnect, device number 11 [ 131.175408][ T1737] EXT4-fs (loop2): Test dummy encryption mode enabled [ 131.197355][ T1733] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 131.197355][ T1733] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 131.197355][ T1733] [ 131.318757][ T1737] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 131.421538][ T430] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.489662][ T1748] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.367: invalid indirect mapped block 10 (level 1) [ 131.503998][ T1748] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.367: invalid indirect mapped block 8 (level 1) [ 131.518368][ T1748] EXT4-fs (loop0): 1 truncate cleaned up [ 131.524090][ T1748] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 131.536750][ T1733] EXT4-fs (loop4): Test dummy encryption mode enabled [ 131.699713][ T1750] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 131.982102][ T1750] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 131.988303][ T430] usb 2-1: Using ep0 maxpacket: 32 [ 131.992703][ T1750] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 131.992703][ T1750] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 131.992703][ T1750] [ 132.008450][ T1733] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 132.024117][ T1750] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.031263][ T1750] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 132.111511][ T430] usb 2-1: too many endpoints for config 0 interface 0 altsetting 10: 254, using maximum allowed: 30 [ 132.129611][ T430] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 61, changing to 9 [ 132.140754][ T430] usb 2-1: config 0 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 132.153931][ T430] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.160519][ T430] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 132.169583][ T430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.178351][ T430] usb 2-1: config 0 descriptor?? [ 132.341317][ T1750] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.369: inode has both inline data and extents flags [ 132.354656][ T1750] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.369: couldn't read orphan inode 15 (err -117) [ 132.366712][ T1750] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 133.367044][ T1761] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.366: inode has both inline data and extents flags [ 133.380989][ T1761] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.366: couldn't read orphan inode 15 (err -117) [ 133.393570][ T1761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 133.524096][ T1759] overlayfs: missing 'lowerdir' [ 133.806185][ T24] audit: type=1400 audit(1783052892.870:242): avc: denied { sys_admin } for pid=1772 comm="syz.1.374" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 133.861562][ T430] usbhid 2-1:0.0: can't add hid device: -71 [ 133.867845][ T430] usbhid: probe of 2-1:0.0 failed with error -71 [ 133.887333][ T430] usb 2-1: USB disconnect, device number 11 [ 134.121526][ T410] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 134.571515][ T410] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.581809][ T410] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.661527][ T410] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 134.670626][ T410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.678673][ T410] usb 4-1: SerialNumber: syz [ 134.722078][ T410] usb 4-1: 0:2 : does not exist [ 134.742412][ T1794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 135.101802][ T1802] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 135.122986][ T410] usb 4-1: USB disconnect, device number 12 [ 135.144345][ T1802] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 135.154094][ T1802] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 135.154094][ T1802] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 135.154094][ T1802] [ 135.173053][ T1802] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.180465][ T1802] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 135.366571][ T1802] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.381: inode has both inline data and extents flags [ 135.379837][ T1802] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.381: couldn't read orphan inode 15 (err -117) [ 135.391817][ T1802] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 135.412348][ T446] udevd[446]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.630730][ T24] audit: type=1400 audit(1783052894.690:243): avc: denied { write } for pid=1813 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 135.644872][ T1818] binder: 1817:1818 ioctl 9361 3 returned -22 [ 135.649723][ T24] audit: type=1400 audit(1783052894.710:244): avc: denied { write } for pid=1817 comm="syz.3.387" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.656083][ T1819] binder: 1817:1819 ioctl 9361 3 returned -22 [ 135.691489][ T453] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.739527][ T1818] binder: 1817:1818 ioctl c0306201 200000000040 returned -14 [ 135.754603][ T1822] overlayfs: failed to resolve './file0': -2 [ 136.061533][ T453] usb 2-1: config index 0 descriptor too short (expected 8251, got 59) [ 136.069992][ T453] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.080433][ T453] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.191551][ T453] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.200606][ T453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.343229][ T1827] overlayfs: missing 'lowerdir' [ 136.457604][ T453] usb 2-1: SerialNumber: syz [ 136.531772][ T453] usb 2-1: bad CDC descriptors [ 137.073961][ T1836] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 137.084789][ T1836] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.093199][ T1836] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 137.433800][ T1841] F2FS-fs (loop4): invalid crc value [ 137.440374][ T1841] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.479170][ T1841] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.514201][ T53] usb 2-1: USB disconnect, device number 12 [ 137.533948][ T1841] syz.4.393 (pid 1841) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 137.544871][ T1841] FAULT_INJECTION: forcing a failure. [ 137.544871][ T1841] name failslab, interval 1, probability 0, space 0, times 0 [ 137.558134][ T1841] CPU: 1 PID: 1841 Comm: syz.4.393 Not tainted syzkaller #0 [ 137.565427][ T1841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.565432][ T1841] Call Trace: [ 137.565471][ T1841] __dump_stack+0x21/0x24 [ 137.565481][ T1841] dump_stack_lvl+0x1a7/0x208 [ 137.565490][ T1841] ? thaw_kernel_threads+0x220/0x220 [ 137.565499][ T1841] ? show_regs_print_info+0x18/0x18 [ 137.565510][ T1841] dump_stack+0x15/0x1c [ 137.565519][ T1841] should_fail+0x3ab/0x500 [ 137.565531][ T1841] ? security_file_alloc+0x33/0x120 [ 137.565542][ T1841] __should_failslab+0xa4/0xe0 [ 137.565553][ T1841] should_failslab+0x9/0x20 [ 137.565563][ T1841] kmem_cache_alloc+0x3d/0x2d0 [ 137.565573][ T1841] ? __alloc_file+0x28/0x320 [ 137.565582][ T1841] security_file_alloc+0x33/0x120 [ 137.565592][ T1841] __alloc_file+0xb5/0x320 [ 137.565601][ T1841] alloc_empty_file+0x97/0x180 [ 137.565609][ T1841] path_openat+0xf4/0x3040 [ 137.565619][ T1841] ? __kasan_slab_alloc+0xc9/0xe0 [ 137.565626][ T1841] ? __kasan_slab_alloc+0xb7/0xe0 [ 137.565634][ T1841] ? kmem_cache_alloc+0x15a/0x2d0 [ 137.565642][ T1841] ? getname_flags+0xba/0x510 [ 137.565648][ T1841] ? getname+0x19/0x20 [ 137.565656][ T1841] ? do_sys_openat2+0xde/0x750 [ 137.565663][ T1841] ? __x64_sys_openat+0x136/0x160 [ 137.565671][ T1841] ? do_syscall_64+0x31/0x40 [ 137.565681][ T1841] ? do_filp_open+0x400/0x400 [ 137.565691][ T1841] do_filp_open+0x1df/0x400 [ 137.565701][ T1841] ? vfs_tmpfile+0x2c0/0x2c0 [ 137.565714][ T1841] ? get_unused_fd_flags+0x92/0xa0 [ 137.565722][ T1841] do_sys_openat2+0x19f/0x750 [ 137.565731][ T1841] ? __kasan_check_write+0x14/0x20 [ 137.565740][ T1841] ? fput_many+0x15a/0x1a0 [ 137.565747][ T1841] ? do_sys_open+0xe0/0xe0 [ 137.565754][ T1841] ? fput+0x1a/0x20 [ 137.565761][ T1841] ? ksys_write+0x1fa/0x260 [ 137.565769][ T1841] ? __ia32_sys_read+0x90/0x90 [ 137.565777][ T1841] __x64_sys_openat+0x136/0x160 [ 137.565784][ T1841] do_syscall_64+0x31/0x40 [ 137.565792][ T1841] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 137.565800][ T1841] RIP: 0033:0x7f39fdf19e59 [ 137.565810][ T1841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.565816][ T1841] RSP: 002b:00007f39fc973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.565828][ T1841] RAX: ffffffffffffffda RBX: 00007f39fe1a1fa0 RCX: 00007f39fdf19e59 [ 137.565835][ T1841] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 137.565840][ T1841] RBP: 00007f39fc973090 R08: 0000000000000000 R09: 0000000000000000 [ 137.565846][ T1841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.565852][ T1841] R13: 00007f39fe1a2038 R14: 00007f39fe1a1fa0 R15: 00007ffebafd9688 [ 137.801510][ T453] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 137.953760][ T1861] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 137.963436][ T1861] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 137.972909][ T1861] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 137.972909][ T1861] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 137.972909][ T1861] [ 137.991650][ T1861] EXT4-fs (loop3): Test dummy encryption mode enabled [ 138.002404][ T1861] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 138.411504][ T453] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.422911][ T1867] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.400: inode has both inline data and extents flags [ 138.429766][ T453] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.440736][ T1867] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.400: couldn't read orphan inode 15 (err -117) [ 138.461002][ T1867] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 138.505557][ T1875] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 138.515106][ T1875] EXT4-fs (loop1): Test dummy encryption mode enabled [ 138.523732][ T1875] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 138.545988][ T453] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 138.555096][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.568455][ T453] usb 1-1: SerialNumber: syz [ 138.619134][ T1881] overlayfs: missing 'lowerdir' [ 138.924924][ T453] usb 1-1: 0:2 : does not exist [ 138.952722][ T24] audit: type=1400 audit(1783052898.020:245): avc: denied { write } for pid=1884 comm="syz.1.405" name="event1" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.976416][ T24] audit: type=1400 audit(1783052898.020:246): avc: denied { open } for pid=1884 comm="syz.1.405" path="/dev/input/event1" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.064134][ T1889] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 139.074121][ T1889] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 139.085107][ T1889] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 139.085107][ T1889] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 139.085107][ T1889] [ 139.106289][ T1889] EXT4-fs (loop3): Test dummy encryption mode enabled [ 139.115159][ T1889] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 139.195332][ T453] usb 1-1: USB disconnect, device number 12 [ 139.337135][ T1901] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.407: inode has both inline data and extents flags [ 139.350482][ T1901] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.407: couldn't read orphan inode 15 (err -117) [ 139.362496][ T1901] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 139.381395][ T1904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 139.390602][ T1904] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.455951][ T1917] FAULT_INJECTION: forcing a failure. [ 139.455951][ T1917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.469061][ T1917] CPU: 1 PID: 1917 Comm: syz.2.414 Not tainted syzkaller #0 [ 139.476330][ T1917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.486375][ T1917] Call Trace: [ 139.489648][ T1917] __dump_stack+0x21/0x24 [ 139.493962][ T1917] dump_stack_lvl+0x1a7/0x208 [ 139.498622][ T1917] ? show_regs_print_info+0x18/0x18 [ 139.503810][ T1917] dump_stack+0x15/0x1c [ 139.507973][ T1917] should_fail+0x3ab/0x500 [ 139.512391][ T1917] should_fail_usercopy+0x1a/0x20 [ 139.517395][ T1917] _copy_from_user+0x20/0xd0 [ 139.521966][ T1917] __copy_msghdr_from_user+0xc9/0x630 [ 139.527331][ T1917] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 139.532609][ T1917] ? __fsnotify_parent+0x6d2/0x7c0 [ 139.537699][ T1917] ___sys_sendmsg+0x19a/0x2e0 [ 139.542352][ T1917] ? __sys_sendmsg+0x280/0x280 [ 139.547104][ T1917] ? rw_verify_area+0x1c0/0x360 [ 139.551949][ T1917] ? __fdget+0x1a1/0x230 [ 139.556172][ T1917] __x64_sys_sendmsg+0x201/0x2d0 [ 139.561100][ T1917] ? fput+0x1a/0x20 [ 139.564887][ T1917] ? ___sys_sendmsg+0x2e0/0x2e0 [ 139.569721][ T1917] ? debug_smp_processor_id+0x17/0x20 [ 139.575070][ T1917] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 139.581117][ T1917] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 139.586758][ T1917] do_syscall_64+0x31/0x40 [ 139.591153][ T1917] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 139.597022][ T1917] RIP: 0033:0x7facde4fce59 [ 139.601459][ T1917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.621056][ T1917] RSP: 002b:00007facdcf56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.629559][ T1917] RAX: ffffffffffffffda RBX: 00007facde784fa0 RCX: 00007facde4fce59 [ 139.637520][ T1917] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 139.645474][ T1917] RBP: 00007facdcf56090 R08: 0000000000000000 R09: 0000000000000000 [ 139.653435][ T1917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.661399][ T1917] R13: 00007facde785038 R14: 00007facde784fa0 R15: 00007ffe1f204e28 [ 139.742858][ T1926] erofs: (device loop2): mounted with root inode @ nid 36. [ 139.892782][ T1924] F2FS-fs (loop4): invalid crc value [ 139.899349][ T1924] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 139.918972][ T1924] F2FS-fs (loop4): Start checkpoint disabled! [ 139.925636][ T1924] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 139.933559][ T1924] FAULT_INJECTION: forcing a failure. [ 139.933559][ T1924] name failslab, interval 1, probability 0, space 0, times 0 [ 139.946456][ T1924] CPU: 0 PID: 1924 Comm: syz.4.417 Not tainted syzkaller #0 [ 139.953742][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.963782][ T1924] Call Trace: [ 139.967058][ T1924] __dump_stack+0x21/0x24 [ 139.971366][ T1924] dump_stack_lvl+0x1a7/0x208 [ 139.976022][ T1924] ? thaw_kernel_threads+0x220/0x220 [ 139.981285][ T1924] ? show_regs_print_info+0x18/0x18 [ 139.986463][ T1924] ? proc_fail_nth_read+0x220/0x220 [ 139.991639][ T1924] dump_stack+0x15/0x1c [ 139.995771][ T1924] should_fail+0x3ab/0x500 [ 140.000166][ T1924] ? getname_flags+0xba/0x510 [ 140.004819][ T1924] __should_failslab+0xa4/0xe0 [ 140.009560][ T1924] should_failslab+0x9/0x20 [ 140.014041][ T1924] kmem_cache_alloc+0x3d/0x2d0 [ 140.018781][ T1924] getname_flags+0xba/0x510 [ 140.023266][ T1924] ? mutex_trylock+0xb0/0xb0 [ 140.027842][ T1924] user_path_at_empty+0x2f/0x50 [ 140.032675][ T1924] __se_sys_quotactl+0x127/0xaf0 [ 140.037588][ T1924] ? ksys_write+0x1fa/0x260 [ 140.042065][ T1924] ? __x64_sys_quotactl+0xb0/0xb0 [ 140.047067][ T1924] ? debug_smp_processor_id+0x17/0x20 [ 140.052419][ T1924] __x64_sys_quotactl+0x9b/0xb0 [ 140.057245][ T1924] do_syscall_64+0x31/0x40 [ 140.061637][ T1924] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 140.067508][ T1924] RIP: 0033:0x7f39fdf19e59 [ 140.071903][ T1924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.091490][ T1924] RSP: 002b:00007f39fc973028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 140.099878][ T1924] RAX: ffffffffffffffda RBX: 00007f39fe1a1fa0 RCX: 00007f39fdf19e59 [ 140.107827][ T1924] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffff80000201 [ 140.115779][ T1924] RBP: 00007f39fc973090 R08: 0000000000000000 R09: 0000000000000000 [ 140.123728][ T1924] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.131677][ T1924] R13: 00007f39fe1a2038 R14: 00007f39fe1a1fa0 R15: 00007ffebafd9688 [ 147.014647][ T1953] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.420: invalid indirect mapped block 10 (level 1) [ 147.030599][ T1953] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.420: invalid indirect mapped block 8 (level 1) [ 147.048513][ T1953] EXT4-fs (loop0): 1 truncate cleaned up [ 147.054238][ T1953] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 147.756053][ T1938] overlayfs: missing 'lowerdir' [ 147.792581][ T1959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 147.902034][ T1963] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 148.082524][ T1968] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 148.133063][ T1968] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 148.317305][ T1969] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.428: invalid block [ 148.371565][ T1968] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 148.371565][ T1968] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 148.371565][ T1968] [ 148.404464][ T1968] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.414253][ T1968] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 148.425701][ T1969] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.428: invalid indirect mapped block 10 (level 1) [ 148.498283][ T1969] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.428: invalid indirect mapped block 8 (level 1) [ 148.572195][ T1969] EXT4-fs (loop4): 1 truncate cleaned up [ 148.602989][ T1969] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 149.562109][ T1986] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 149.572014][ T1986] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 149.582343][ T1986] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 149.582343][ T1986] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 149.582343][ T1986] [ 149.617988][ T1986] EXT4-fs (loop3): Test dummy encryption mode enabled [ 149.632260][ T1986] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 149.667833][ T1993] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 149.677288][ T1993] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.697767][ T1993] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 149.964307][ T1997] FAT-fs (loop4): Directory bread(block 64) failed [ 149.970912][ T1997] FAT-fs (loop4): Directory bread(block 65) failed [ 149.977559][ T1997] FAT-fs (loop4): Directory bread(block 66) failed [ 149.984073][ T1997] FAT-fs (loop4): Directory bread(block 67) failed [ 149.990577][ T1997] FAT-fs (loop4): Directory bread(block 68) failed [ 149.997101][ T1997] FAT-fs (loop4): Directory bread(block 69) failed [ 150.003632][ T1997] FAT-fs (loop4): Directory bread(block 70) failed [ 150.010115][ T1997] FAT-fs (loop4): Directory bread(block 71) failed [ 150.016653][ T1997] FAT-fs (loop4): Directory bread(block 72) failed [ 150.023165][ T1997] FAT-fs (loop4): Directory bread(block 73) failed [ 150.052760][ T1998] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.433: inode has both inline data and extents flags [ 150.066139][ T1998] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.433: couldn't read orphan inode 15 (err -117) [ 150.078237][ T1998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 150.084382][ T24] audit: type=1400 audit(1783052909.110:247): avc: denied { ioctl } for pid=1992 comm="syz.2.436" path=2F39362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6533 dev="loop2" ino=16 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.722622][ T24] audit: type=1400 audit(1783052909.790:248): avc: denied { setcurrent } for pid=2009 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 152.170763][ T2027] overlayfs: missing 'lowerdir' [ 152.363014][ T2030] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 152.381578][ T2030] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 152.464743][ T2030] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 152.464743][ T2030] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 152.464743][ T2030] [ 152.630900][ T2039] overlayfs: missing 'lowerdir' [ 152.669193][ T2030] EXT4-fs (loop1): Test dummy encryption mode enabled [ 152.687587][ T2030] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 152.766098][ T2047] tipc: Started in network mode [ 152.771121][ T2047] tipc: Own node identity ac141432, cluster identity 4711 [ 152.778643][ T2047] tipc: Enabled bearer , priority 10 [ 153.569252][ T2053] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.445: inode has both inline data and extents flags [ 153.733211][ T2053] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.445: couldn't read orphan inode 15 (err -117) [ 153.746228][ T2053] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 153.787469][ T410] tipc: 32-bit node address hash set to 321414ac [ 156.466041][ T2061] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 156.544407][ T2061] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 156.586530][ T2061] F2FS-fs (loop0): invalid crc value [ 156.592653][ T2061] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 156.612425][ T2061] F2FS-fs (loop0): Start checkpoint disabled! [ 156.619210][ T2061] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 156.626408][ T2061] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 156.662061][ T2075] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 156.676593][ T2075] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 156.686172][ T2075] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 156.686172][ T2075] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 156.686172][ T2075] [ 156.704579][ T2075] EXT4-fs (loop4): Test dummy encryption mode enabled [ 156.711896][ T2075] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 156.731804][ T59] attempt to access beyond end of device [ 156.731804][ T59] loop0: rw=2049, want=45104, limit=40427 [ 156.765410][ T24] audit: type=1400 audit(1783052915.830:249): avc: denied { ioctl } for pid=2086 comm="syz.3.464" path="socket:[19441]" dev="sockfs" ino=19441 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.007360][ T53] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 158.287754][ T2092] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.459: inode has both inline data and extents flags [ 158.301319][ T2092] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.459: couldn't read orphan inode 15 (err -117) [ 158.313272][ T2092] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 158.444341][ T2092] overlayfs: failed to resolve './file0': -2 [ 158.909393][ T2105] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 158.945371][ T2105] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 158.955102][ T2105] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 158.955102][ T2105] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 158.955102][ T2105] [ 158.961546][ T53] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.973566][ T2105] EXT4-fs (loop3): Test dummy encryption mode enabled [ 158.987726][ T2111] FAT-fs (loop0): Directory bread(block 64) failed [ 158.996846][ T2111] FAT-fs (loop0): Directory bread(block 65) failed [ 159.003429][ T2111] FAT-fs (loop0): Directory bread(block 66) failed [ 159.009950][ T2111] FAT-fs (loop0): Directory bread(block 67) failed [ 159.016532][ T2111] FAT-fs (loop0): Directory bread(block 68) failed [ 159.023927][ T2105] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 159.049242][ T2111] FAT-fs (loop0): Directory bread(block 69) failed [ 159.055846][ T2111] FAT-fs (loop0): Directory bread(block 70) failed [ 159.062513][ T2111] FAT-fs (loop0): Directory bread(block 71) failed [ 159.069235][ T2111] FAT-fs (loop0): Directory bread(block 72) failed [ 159.076107][ T2111] FAT-fs (loop0): Directory bread(block 73) failed [ 159.084399][ T53] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.218098][ T2118] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.281741][ T53] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 159.292575][ T2118] kvm [2117]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 159.301869][ T2118] kvm [2117]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 159.319601][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.327687][ T53] usb 2-1: SerialNumber: syz [ 159.331707][ T24] audit: type=1400 audit(1783052918.390:250): avc: denied { mount } for pid=2117 comm="syz.2.471" name="/" dev="ramfs" ino=21586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 160.201689][ T53] usb 2-1: 0:2 : does not exist [ 160.461030][ T2121] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.468: inode has both inline data and extents flags [ 160.474996][ T2121] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.468: couldn't read orphan inode 15 (err -117) [ 160.489359][ T2121] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 160.521993][ T2121] overlayfs: failed to resolve './file0': -2 [ 160.554357][ T53] usb 2-1: USB disconnect, device number 13 [ 160.571105][ T24] audit: type=1400 audit(1783052919.630:251): avc: denied { setopt } for pid=2129 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.598421][ T24] audit: type=1400 audit(1783052919.660:252): avc: denied { getopt } for pid=2129 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.762024][ T1974] udevd[1974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.793830][ T2137] netlink: 48 bytes leftover after parsing attributes in process `syz.4.476'. [ 160.806292][ T24] audit: type=1326 audit(1783052919.870:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2136 comm="syz.4.476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39fdf19e59 code=0x7ffc0000 [ 160.846716][ T24] audit: type=1326 audit(1783052919.900:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2136 comm="syz.4.476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f39fdf19e59 code=0x7ffc0000 [ 160.871696][ T24] audit: type=1326 audit(1783052919.900:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2136 comm="syz.4.476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39fdf19e59 code=0x7ffc0000 [ 160.896522][ T24] audit: type=1326 audit(1783052919.910:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2136 comm="syz.4.476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39fdf19e59 code=0x7ffc0000 [ 160.921914][ T24] audit: type=1326 audit(1783052919.910:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2136 comm="syz.4.476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39fdf19e59 code=0x7ffc0000 [ 161.034478][ T24] audit: type=1326 audit(1783052919.910:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2136 comm="syz.4.476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39fdf19e59 code=0x7ffc0000 [ 161.143642][ T2132] F2FS-fs (loop0): invalid crc value [ 161.149863][ T2132] F2FS-fs (loop0): invalid crc value [ 161.156355][ T2132] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 161.163615][ T2144] FAULT_INJECTION: forcing a failure. [ 161.163615][ T2144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.177236][ T2144] CPU: 0 PID: 2144 Comm: syz.4.477 Not tainted syzkaller #0 [ 161.184529][ T2144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.185992][ T2148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 161.194576][ T2144] Call Trace: [ 161.194597][ T2144] __dump_stack+0x21/0x24 [ 161.194606][ T2144] dump_stack_lvl+0x1a7/0x208 [ 161.194615][ T2144] ? show_regs_print_info+0x18/0x18 [ 161.194625][ T2144] dump_stack+0x15/0x1c [ 161.194632][ T2144] should_fail+0x3ab/0x500 [ 161.194650][ T2144] should_fail_usercopy+0x1a/0x20 [ 161.234298][ T2144] _copy_from_user+0x20/0xd0 [ 161.238867][ T2144] __copy_msghdr_from_user+0xc9/0x630 [ 161.244217][ T2144] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 161.249477][ T2144] ? __fsnotify_parent+0x6d2/0x7c0 [ 161.254561][ T2144] ___sys_sendmsg+0x19a/0x2e0 [ 161.259213][ T2144] ? __sys_sendmsg+0x280/0x280 [ 161.263950][ T2144] ? rw_verify_area+0x1c0/0x360 [ 161.268779][ T2144] ? __fdget+0x1a1/0x230 [ 161.272997][ T2144] __x64_sys_sendmsg+0x201/0x2d0 [ 161.277909][ T2144] ? fput+0x1a/0x20 [ 161.281692][ T2144] ? ___sys_sendmsg+0x2e0/0x2e0 [ 161.286517][ T2144] ? debug_smp_processor_id+0x17/0x20 [ 161.291863][ T2144] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 161.297906][ T2144] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 161.303511][ T2144] do_syscall_64+0x31/0x40 [ 161.307904][ T2144] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 161.313772][ T2144] RIP: 0033:0x7f39fdf19e59 [ 161.318166][ T2144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.337747][ T2144] RSP: 002b:00007f39fc973028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.346136][ T2144] RAX: ffffffffffffffda RBX: 00007f39fe1a1fa0 RCX: 00007f39fdf19e59 [ 161.354086][ T2144] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 161.362034][ T2144] RBP: 00007f39fc973090 R08: 0000000000000000 R09: 0000000000000000 [ 161.369979][ T2144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.377928][ T2144] R13: 00007f39fe1a2038 R14: 00007f39fe1a1fa0 R15: 00007ffebafd9688 [ 161.765876][ T2154] FAT-fs (loop1): Directory bread(block 64) failed [ 161.772579][ T2154] FAT-fs (loop1): Directory bread(block 65) failed [ 161.779113][ T2154] FAT-fs (loop1): Directory bread(block 66) failed [ 161.785662][ T2154] FAT-fs (loop1): Directory bread(block 67) failed [ 161.792226][ T2154] FAT-fs (loop1): Directory bread(block 68) failed [ 161.798752][ T2154] FAT-fs (loop1): Directory bread(block 69) failed [ 161.805422][ T2154] FAT-fs (loop1): Directory bread(block 70) failed [ 161.812218][ T2154] FAT-fs (loop1): Directory bread(block 71) failed [ 161.818747][ T2154] FAT-fs (loop1): Directory bread(block 72) failed [ 161.825455][ T2154] FAT-fs (loop1): Directory bread(block 73) failed [ 161.859862][ T24] kauditd_printk_skb: 23 callbacks suppressed [ 161.859872][ T24] audit: type=1400 audit(1783052920.920:282): avc: denied { connect } for pid=2166 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.886044][ T24] audit: type=1400 audit(1783052920.920:283): avc: denied { write } for pid=2166 comm="syz.3.486" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.021481][ T453] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 162.064760][ T2176] APIC base relocation is unsupported by KVM [ 162.217864][ T24] audit: type=1400 audit(1783052921.280:284): avc: denied { name_bind } for pid=2191 comm="syz.1.496" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 162.263216][ T24] audit: type=1400 audit(1783052921.320:285): avc: denied { map } for pid=2195 comm="syz.1.498" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 162.297756][ T2194] kvm [2193]: vcpu0, guest rIP: 0x540a3 Hyper-V unhandled rdmsr: 0x40000075 [ 162.355981][ T24] audit: type=1400 audit(1783052921.420:286): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.401522][ T453] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.410141][ T453] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 162.423600][ T453] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.434779][ T453] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 162.446208][ T453] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 162.538674][ T24] audit: type=1400 audit(1783052921.600:287): avc: denied { write } for pid=2221 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.572038][ T453] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.583344][ T24] audit: type=1400 audit(1783052921.650:288): avc: denied { map } for pid=2223 comm="syz.1.509" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.583446][ T2224] binder: BINDER_SET_CONTEXT_MGR already set [ 162.613025][ T453] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.621025][ T453] usb 5-1: Product: syz [ 162.625666][ T453] usb 5-1: Manufacturer: syz [ 162.630674][ T2224] binder: 2223:2224 ioctl 4018620d 2000000002c0 returned -16 [ 162.671998][ T453] cdc_wdm 5-1:1.0: skipping garbage [ 162.677438][ T453] cdc_wdm 5-1:1.0: skipping garbage [ 162.684158][ T453] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 162.876235][ T53] usb 5-1: USB disconnect, device number 17 [ 162.921556][ T453] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 163.073842][ T24] audit: type=1400 audit(1783052922.140:289): avc: denied { read } for pid=2158 comm="syz.4.482" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.171467][ T453] usb 1-1: Using ep0 maxpacket: 8 [ 163.291527][ T453] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 163.300060][ T453] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.309834][ T453] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.319600][ T453] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 163.329426][ T453] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 163.339249][ T453] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.352236][ T453] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.361258][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.517117][ T2255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 163.561488][ T53] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 163.573476][ T2261] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 163.583782][ T2261] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.524: deleted inode referenced: 12 [ 163.748801][ T2269] overlayfs: statfs failed on './file0' [ 163.778013][ T2273] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 163.787151][ T2273] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.873721][ T2278] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 163.892723][ T2273] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 163.904906][ T2278] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue [ 163.917181][ T2278] ext4 filesystem being mounted at /105/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.023635][ T24] audit: type=1400 audit(1783052923.090:290): avc: denied { append } for pid=2296 comm="syz.3.535" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.071516][ T53] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.080263][ T53] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.090504][ T53] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.099770][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 164.110860][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 164.115968][ T2303] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 164.137662][ T2297] EXT4-fs (loop1): 1 truncate cleaned up [ 164.139435][ T24] audit: type=1400 audit(1783053179.196:291): avc: denied { remount } for pid=2302 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 164.143694][ T2297] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue [ 164.220569][ T2313] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 164.234704][ T2313] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 164.271548][ T53] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.277127][ T2319] binder_alloc: 2318: binder_alloc_buf size 12520 failed, no address space [ 164.280647][ T53] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.289254][ T2319] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 164.307879][ T53] usb 5-1: Product: syz [ 164.321659][ T53] usb 5-1: Manufacturer: syz [ 164.362485][ T2327] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 164.371616][ T2327] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.403439][ T53] cdc_wdm 5-1:1.0: skipping garbage [ 164.408670][ T53] cdc_wdm 5-1:1.0: skipping garbage [ 164.414746][ T53] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 164.416275][ T2327] fs-verity: sha512 using implementation "sha512-avx2" [ 165.460332][ T2358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 165.532836][ T2364] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 165.541801][ T2364] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.599676][ T53] kernel write not supported for file /345/projid_map (pid: 53 comm: kworker/1:2) [ 165.662648][ T663] usb 1-1: USB disconnect, device number 13 [ 166.336017][ T53] usb 5-1: USB disconnect, device number 18 [ 166.509293][ T2377] EXT4-fs (loop1): Test dummy encryption mode enabled [ 166.523446][ T2382] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.568017][ T2377] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.566: inode has both inline data and extents flags [ 166.593103][ T2382] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.610462][ T2377] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.566: couldn't read orphan inode 15 (err -117) [ 166.625978][ T2377] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 166.695588][ T59] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.759290][ T2377] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 166.767195][ T2393] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 166.876188][ T2401] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 166.892215][ T2401] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 166.892569][ T2413] sch_tbf: burst 0 is lower than device veth0_to_hsr mtu (1514) ! [ 166.900471][ T2401] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.576: corrupted in-inode xattr [ 166.920120][ T2401] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.576: couldn't read orphan inode 15 (err -117) [ 166.932263][ T2401] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x0000000000000402,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,noquota,,errors=continue [ 166.940564][ T2406] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.094473][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 167.094485][ T24] audit: type=1400 audit(1783053182.201:307): avc: denied { ioctl } for pid=2422 comm="syz.0.582" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.136927][ T2418] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue [ 167.149459][ T2418] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.163017][ T1592] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.188007][ T24] audit: type=1400 audit(1783053182.293:308): avc: denied { rename } for pid=2417 comm="syz.3.579" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.232235][ T24] audit: type=1400 audit(1783053182.333:309): avc: denied { name_bind } for pid=2436 comm="syz.0.587" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 167.264094][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.295044][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.316842][ T24] audit: type=1326 audit(1783053182.394:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2420 comm="syz.1.581" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ce0602e59 code=0x0 [ 167.328369][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.355608][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.365973][ T2440] EXT4-fs (loop2): Test dummy encryption mode enabled [ 167.367817][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.385580][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.397211][ T2445] device veth0_vlan left promiscuous mode [ 167.401965][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.403599][ T2445] device veth0_vlan entered promiscuous mode [ 167.414643][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.422100][ T2445] device veth1_macvtap left promiscuous mode [ 167.432147][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.439687][ T2440] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue [ 167.454133][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.488302][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.505929][ T279] EXT4-fs warning (device loop3): ext4_empty_dir:3085: inode #12: comm syz-executor: directory missing '.' [ 167.519543][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.527852][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.534930][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.542609][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.551297][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.559674][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.566722][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.574241][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.582866][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 167.592058][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.600462][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 167.608820][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.617054][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.625414][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.633946][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.642120][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.650404][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.658747][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.667360][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.680466][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.713365][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.721965][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.730102][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.738335][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.746534][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.754951][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.763621][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.771836][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.779746][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.787118][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.794606][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.802722][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.821239][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.869509][ T2463] device syzkaller0 entered promiscuous mode [ 168.252639][ T2473] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue [ 168.265936][ T2473] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.278817][ T24] audit: type=1400 audit(1783053183.402:311): avc: denied { mounton } for pid=2478 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 168.497027][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.504208][ T2478] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.512725][ T2478] device bridge_slave_0 entered promiscuous mode [ 168.520581][ T2489] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.525841][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.567819][ T2478] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.575279][ T2478] device bridge_slave_1 entered promiscuous mode [ 168.598770][ T59] device bridge_slave_1 left promiscuous mode [ 168.606137][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.613732][ T59] device bridge_slave_0 left promiscuous mode [ 168.620137][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.812614][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.819709][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.827017][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.834079][ T2478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.901588][ T2496] EXT4-fs (loop4): 1 orphan inode deleted [ 168.907451][ T2496] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,,errors=continue [ 168.951367][ T2496] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.963016][ T24] audit: type=1400 audit(1783053184.076:312): avc: denied { create } for pid=2504 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.101810][ T2506] EXT4-fs (loop1): 1 orphan inode deleted [ 169.107622][ T2506] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue [ 169.117288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.125049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.133766][ T2506] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.145019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.217608][ T24] audit: type=1400 audit(1783053184.311:313): avc: denied { read } for pid=2495 comm="syz.4.610" path="socket:[22781]" dev="sockfs" ino=22781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.261039][ T2511] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 169.360668][ T2478] device veth0_vlan entered promiscuous mode [ 169.371564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.379994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.389271][ T2511] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue [ 169.403833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.411391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.418903][ T2511] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.430265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.439041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.465096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.474243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.483641][ T2478] device veth1_macvtap entered promiscuous mode [ 169.493775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.502010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.510655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.526481][ T24] audit: type=1400 audit(1783053184.623:314): avc: denied { bind } for pid=2518 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.587621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.605283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.622605][ T24] audit: type=1400 audit(1783053184.720:315): avc: denied { mounton } for pid=2478 comm="syz-executor" path="/root/syzkaller.KruKvV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 169.678948][ T2524] capability: warning: `syz.5.602' uses 32-bit capabilities (legacy support in use) [ 169.745294][ T24] audit: type=1400 audit(1783053184.838:316): avc: denied { setopt } for pid=2526 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.779317][ T2522] EXT4-fs error (device loop4): dx_probe:796: inode #2: comm syz.4.616: Directory hole found for htree index block 0 [ 169.806354][ T2522] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 169.851175][ T2522] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000000000,grpid,,,errors=continue [ 169.892518][ T2530] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 169.901853][ T2530] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.081849][ T2538] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 170.090819][ T2538] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.168905][ T2575] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 171.822365][ T2589] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue [ 171.836290][ T2589] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.954347][ T2600] binder: 2598:2600 ioctl c0306201 200000000040 returned -14 [ 172.838909][ T2605] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 172.847839][ T2605] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.044830][ T2623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 173.091479][ T2618] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 173.383810][ T453] kernel write not supported for file /375/projid_map (pid: 453 comm: kworker/0:4) [ 173.465015][ T2642] FAT-fs (loop1): bogus sectors per cluster 255 [ 173.471503][ T2642] FAT-fs (loop1): Can't find a valid FAT filesystem [ 173.603696][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 173.603707][ T24] audit: type=1400 audit(1783053188.515:325): avc: denied { setopt } for pid=2650 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.629318][ T24] audit: type=1400 audit(1783053188.515:326): avc: denied { read } for pid=2650 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.634802][ T289] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 173.661643][ T24] audit: type=1400 audit(1783053188.572:327): avc: denied { write } for pid=2650 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.732304][ T2655] device syzkaller0 entered promiscuous mode [ 173.909112][ T2668] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.922132][ T289] usb 3-1: Using ep0 maxpacket: 8 [ 173.956113][ T2668] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.976323][ T2668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e09d, mo2=0002] [ 173.984540][ T2668] System zones: 1-12 [ 173.990313][ T2668] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug,minixdf,jqfmt=vfsv1,prjquota,nombcache,min_batch_time=0x0000000000000005,jqfmt=vfsold,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,,errors=continue [ 174.071108][ T289] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.102890][ T289] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.112730][ T289] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.123484][ T289] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.137395][ T289] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.147257][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.508965][ T2685] EXT4-fs (loop5): Ignoring removed bh option [ 174.568725][ T2685] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,stripe=0x0000000000000004,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue [ 174.586543][ T2685] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.686923][ T2478] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /17/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 174.724060][ T2478] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 174.745642][ T2478] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 174.765148][ T2478] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 174.786014][ T2478] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 174.805079][ T2478] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 174.828399][ T2478] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 174.848155][ T2478] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 174.869035][ T2478] EXT4-fs error (device loop5): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 174.888049][ T2478] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /17/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 174.919092][ T2693] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.247880][ T2709] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.256149][ T2709] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.264213][ T2709] device bridge_slave_0 entered promiscuous mode [ 175.273174][ T2709] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.275744][ T2715] EXT4-fs (loop4): orphan cleanup on readonly fs [ 175.280505][ T2709] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.287486][ T2715] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.685: bad orphan inode 15 [ 175.294309][ T2709] device bridge_slave_1 entered promiscuous mode [ 175.304013][ T2715] ext4_test_bit(bit=14, block=18) = 1 [ 175.315564][ T2715] is_bad_inode(inode)=0 [ 175.319995][ T2715] NEXT_ORPHAN(inode)=1023 [ 175.324396][ T2715] max_ino=32 [ 175.327685][ T2715] i_nlink=0 [ 175.330970][ T2715] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2914: inode #15: comm syz.4.685: corrupted xattr block 19 [ 175.343406][ T2715] EXT4-fs warning (device loop4): ext4_evict_inode:305: xattr delete (err -117) [ 175.352493][ T2715] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 175.377573][ T2709] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.384680][ T2709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.392033][ T2709] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.399097][ T2709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.418555][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.426034][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.434518][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.455737][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.464118][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.465816][ T2721] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.686: bad orphan inode 15 [ 175.471175][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.481315][ T2721] ext4_test_bit(bit=14, block=18) = 1 [ 175.493854][ T2721] is_bad_inode(inode)=0 [ 175.498024][ T2721] NEXT_ORPHAN(inode)=1023 [ 175.502362][ T2721] max_ino=32 [ 175.505687][ T2721] i_nlink=0 [ 175.508965][ T2721] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2914: inode #15: comm syz.4.686: corrupted xattr block 19 [ 175.509099][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.521495][ T2721] EXT4-fs warning (device loop4): ext4_evict_inode:305: xattr delete (err -117) [ 175.531121][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.545324][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.546776][ T2721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 175.553568][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.561488][ T2721] ext4 filesystem being mounted at /124/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 175.569694][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.598849][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.611501][ T2709] device veth0_vlan entered promiscuous mode [ 175.618377][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.626516][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.634440][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.652656][ T24] audit: type=1400 audit(1783053190.425:328): avc: denied { ioctl } for pid=2726 comm="syz.4.688" path="socket:[23369]" dev="sockfs" ino=23369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.678009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.687609][ T2709] device veth1_macvtap entered promiscuous mode [ 175.714255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.722784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.749303][ T2733] netlink: 68 bytes leftover after parsing attributes in process `syz.4.691'. [ 175.758699][ T1592] device bridge_slave_1 left promiscuous mode [ 175.765170][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.773150][ T1592] device bridge_slave_0 left promiscuous mode [ 175.779309][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.787216][ T1592] device veth1_macvtap left promiscuous mode [ 175.793249][ T1592] device veth0_vlan left promiscuous mode [ 176.213603][ T2753] EXT4-fs (loop6): Test dummy encryption mode enabled [ 176.225893][ T2753] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue [ 176.239300][ T2753] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.281485][ T2753] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 176.456821][ T2761] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,inlinecrypt,,errors=continue [ 176.490970][ T2761] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.571242][ T663] usb 3-1: USB disconnect, device number 12 [ 176.623335][ T24] audit: type=1400 audit(1783053191.338:329): avc: denied { ioctl } for pid=2773 comm="syz.6.699" path="socket:[23461]" dev="sockfs" ino=23461 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.632797][ T2776] device syzkaller0 entered promiscuous mode [ 176.681804][ T24] audit: type=1400 audit(1783053191.375:330): avc: denied { map } for pid=2778 comm="syz.6.701" path="pipe:[23940]" dev="pipefs" ino=23940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 176.848050][ T24] audit: type=1400 audit(1783053191.552:331): avc: denied { read } for pid=2795 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.923535][ T24] audit: type=1400 audit(1783053191.617:332): avc: denied { setopt } for pid=2802 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.943197][ T24] audit: type=1326 audit(1783053191.636:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2799 comm="syz.4.710" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39fdf19e59 code=0x0 [ 176.980586][ T2807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.713'. [ 176.984369][ T24] audit: type=1400 audit(1783053191.664:334): avc: denied { create } for pid=2806 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 177.038332][ T2810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.714'. [ 177.120388][ T2821] device syzkaller0 entered promiscuous mode [ 177.216556][ T2827] EXT4-fs (loop2): 1 orphan inode deleted [ 177.222594][ T2827] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,,errors=continue [ 177.232114][ T2827] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.800560][ T2865] EXT4-fs (loop4): Test dummy encryption mode enabled [ 177.807553][ T2865] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 177.818227][ T2865] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 177.826388][ T2865] System zones: 0-5 [ 177.831055][ T2865] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue [ 178.019459][ T2882] netlink: 120 bytes leftover after parsing attributes in process `syz.0.747'. [ 178.031490][ T2882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 178.041086][ T2882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 179.722152][ T2965] Illegal XDP return value 4294967294, expect packet loss! [ 179.782668][ T2961] device syzkaller0 entered promiscuous mode [ 179.791051][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 179.791064][ T24] audit: type=1400 audit(1783053194.457:340): avc: denied { ioctl } for pid=2960 comm="syz.6.782" path="socket:[24867]" dev="sockfs" ino=24867 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.847308][ T2969] device syzkaller0 entered promiscuous mode [ 179.946446][ T2984] device bridge_slave_0 left promiscuous mode [ 179.953044][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.961747][ T2984] device bridge_slave_1 left promiscuous mode [ 179.970562][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.974181][ T2988] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 180.162670][ T2991] device ipip0 entered promiscuous mode [ 180.168370][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 180.207198][ T24] audit: type=1400 audit(1783053194.924:341): avc: denied { connect } for pid=2998 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.262997][ T3007] ------------[ cut here ]------------ [ 180.274193][ T3007] trace type BPF program uses run-time allocation [ 180.289943][ T24] audit: type=1400 audit(1783053195.004:342): avc: denied { write } for pid=3010 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.315732][ T3007] WARNING: CPU: 0 PID: 3007 at kernel/bpf/verifier.c:10518 check_map_prog_compatibility+0x5d8/0x740 [ 180.327064][ T3007] Modules linked in: [ 180.330977][ T3007] CPU: 0 PID: 3007 Comm: syz.2.801 Not tainted syzkaller #0 [ 180.338485][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.348761][ T3007] RIP: 0010:check_map_prog_compatibility+0x5d8/0x740 [ 180.355490][ T3007] Code: 85 e9 14 fe ff ff e8 27 db ef ff 31 c0 e9 15 fe ff ff e8 1b db ef ff c6 05 75 c7 4b 05 01 48 c7 c7 e0 d6 25 85 e8 28 ec 03 03 <0f> 0b e9 7d fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9b fa ff [ 180.379702][ T3007] RSP: 0018:ffffc90000e47430 EFLAGS: 00010246 [ 180.385918][ T3007] RAX: 51fb1d8d3335bc00 RBX: 0000000000000001 RCX: 0000000000080000 [ 180.394411][ T3007] RDX: ffffc90003112000 RSI: 0000000000002c2d RDI: 0000000000002c2e [ 180.402413][ T3007] RBP: ffffc90000e47470 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 180.410395][ T3007] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: ffff88811d4e4000 [ 180.418375][ T3007] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888114758000 [ 180.426343][ T3007] FS: 00007facdcf566c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 180.435528][ T3007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.442215][ T3007] CR2: 00007facdcf34ff8 CR3: 0000000130cbe000 CR4: 00000000003506a0 [ 180.450256][ T3007] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.458254][ T3007] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.467890][ T3007] Call Trace: [ 180.471889][ T3007] ? __fdget+0x1a1/0x230 [ 180.476212][ T3007] resolve_pseudo_ldimm64+0x557/0x10b0 [ 180.482658][ T3007] ? bpf_check+0xdce0/0xdce0 [ 180.549801][ T3007] ? kvmalloc_node+0x88/0x130 [ 180.610977][ T3007] bpf_check+0x91f9/0xdce0 [ 180.615586][ T3007] ? get_page_from_freelist+0x225f/0x23f0 [ 180.624367][ T3015] EXT4-fs (loop6): 1 orphan inode deleted [ 180.630198][ T3015] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,,errors=continue [ 180.640238][ T3015] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.651167][ T3007] ? __alloc_pages_nodemask+0x29a/0x640 [ 180.657102][ T3007] ? bpf_get_btf_vmlinux+0x60/0x60 [ 180.670776][ T3007] ? 0xffffffffa0028000 [ 180.713409][ T3007] ? is_bpf_text_address+0x177/0x190 [ 180.721447][ T3007] ? selinux_bpf_prog_alloc+0x51/0x140 [ 180.727347][ T3007] ? __kernel_text_address+0xa0/0x100 [ 180.733808][ T3007] ? unwind_get_return_address+0x4d/0x90 [ 180.739718][ T3007] ? stack_trace_save+0xf0/0xf0 [ 180.744625][ T3007] ? arch_stack_walk+0xee/0x140 [ 180.746307][ T24] audit: type=1400 audit(1783053195.452:343): avc: denied { read } for pid=3036 comm="syz.1.812" path="socket:[24420]" dev="sockfs" ino=24420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.749752][ T3007] ? stack_trace_save+0xa6/0xf0 [ 180.777708][ T3007] ? stack_trace_snprint+0xe0/0xe0 [ 180.783790][ T3007] ? selinux_bpf_prog_alloc+0x51/0x140 [ 180.789356][ T3007] ? selinux_bpf_prog_alloc+0x51/0x140 [ 180.794867][ T3007] ? __kasan_kmalloc+0xe6/0x100 [ 180.800360][ T3007] ? __kasan_kmalloc+0xd4/0x100 [ 180.805257][ T3007] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 180.810874][ T3007] ? selinux_bpf_prog_alloc+0x51/0x140 [ 180.816367][ T3007] ? security_bpf_prog_alloc+0x62/0x90 [ 180.821869][ T3007] ? bpf_prog_load+0x9fa/0x14e0 [ 180.826748][ T3007] ? __se_sys_bpf+0x49a/0x740 [ 180.832377][ T3007] ? __x64_sys_bpf+0x7b/0x90 [ 180.837028][ T3007] ? do_syscall_64+0x31/0x40 [ 180.841674][ T3007] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 180.848267][ T3007] ? memset+0x35/0x40 [ 180.852333][ T3007] ? bpf_obj_name_cpy+0x193/0x1e0 [ 180.857420][ T3007] bpf_prog_load+0x1004/0x14e0 [ 180.862338][ T3007] ? map_freeze+0x330/0x330 [ 180.866912][ T3007] ? selinux_bpf+0xc7/0xf0 [ 180.871435][ T3007] ? security_bpf+0x82/0xa0 [ 180.876078][ T3007] __se_sys_bpf+0x49a/0x740 [ 180.885538][ T3007] ? __x64_sys_bpf+0x90/0x90 [ 180.891737][ T3007] ? __kasan_check_read+0x11/0x20 [ 180.897112][ T3007] __x64_sys_bpf+0x7b/0x90 [ 180.901756][ T3007] do_syscall_64+0x31/0x40 [ 180.906261][ T3007] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 180.912438][ T3007] RIP: 0033:0x7facde4fce59 [ 180.916866][ T3007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.936559][ T3007] RSP: 002b:00007facdcf56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.945040][ T3007] RAX: ffffffffffffffda RBX: 00007facde784fa0 RCX: 00007facde4fce59 [ 180.953072][ T3007] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 180.961069][ T3007] RBP: 00007facde592e6f R08: 0000000000000000 R09: 0000000000000000 [ 180.969028][ T3007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.977022][ T3007] R13: 00007facde785038 R14: 00007facde784fa0 R15: 00007ffe1f204e28 [ 180.985005][ T3007] ---[ end trace bf78c6ebb12ace23 ]--- [ 181.010518][ T3043] netlink: 'syz.2.814': attribute type 3 has an invalid length. [ 181.312035][ T3065] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 181.329589][ T3065] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 181.339163][ T3065] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 181.339163][ T3065] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 181.339163][ T3065] [ 181.357530][ T3065] EXT4-fs (loop6): Test dummy encryption mode enabled [ 181.364888][ T3065] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 181.567647][ T24] audit: type=1400 audit(1783053196.250:344): avc: denied { connect } for pid=3083 comm="syz.4.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.761854][ T1592] tipc: Subscription rejected, illegal request [ 182.796203][ T3098] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.815452][ T3109] cgroup: syz.4.842 (3109) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 182.831858][ T3109] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 182.864264][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.871774][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.879198][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.886650][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.894061][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.901457][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.908894][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.916283][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.923649][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.931077][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.938470][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.945876][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.953250][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.960677][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.968065][ T453] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 182.977043][ T453] hid-generic 00A0:0006:0003.0001: hidraw0: HID v0.05 Device [syz0] on syz0 [ 183.019750][ T3118] fido_id[3118]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.040354][ T410] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.061364][ T20] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 183.112992][ T3126] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 183.313281][ T20] usb 7-1: Using ep0 maxpacket: 16 [ 183.418466][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.429437][ T410] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.438473][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.446573][ T20] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.453441][ T20] usb 7-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 183.462986][ T410] usb 1-1: config 0 descriptor?? [ 183.467976][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.477081][ T20] usb 7-1: config 0 descriptor?? [ 183.786354][ T24] audit: type=1400 audit(1783053198.370:345): avc: denied { write } for pid=3139 comm="syz.4.853" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.809982][ T24] audit: type=1400 audit(1783053198.370:346): avc: denied { open } for pid=3139 comm="syz.4.853" path="/164/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.830957][ T410] usbhid 1-1:0.0: can't add hid device: -71 [ 183.834732][ T24] audit: type=1400 audit(1783053198.379:347): avc: denied { ioctl } for pid=3139 comm="syz.4.853" path="/164/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.840391][ T410] usbhid: probe of 1-1:0.0 failed with error -71 [ 183.875457][ T410] usb 1-1: USB disconnect, device number 14 [ 183.909579][ T24] audit: type=1400 audit(1783053198.483:348): avc: denied { create } for pid=3149 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.934753][ T24] audit: type=1400 audit(1783053198.512:349): avc: denied { listen } for pid=3149 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.991257][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 183.998537][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.005499][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.012444][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.019311][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.026316][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.033222][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.040223][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.047245][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.054525][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.061700][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.068826][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.075765][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.082650][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.089576][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.096544][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.103715][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.110660][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.118401][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.126315][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.133302][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.140237][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.147157][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.154249][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.161203][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.168159][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.175133][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.182097][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.189047][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.196025][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.205666][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.212648][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.219553][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.226488][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.233410][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.240302][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.247362][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.254288][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.261259][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.268485][ T20] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 184.280082][ T20] wacom 0003:056A:002A.0002: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 184.290278][ T20] wacom 0003:056A:002A.0002: hidraw0: USB HID v0.03 Device [HID 056a:002a] on usb-dummy_hcd.6-1/input0 [ 184.301899][ T20] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:002A.0002/input/input6 [ 184.324876][ T20] usb 7-1: USB disconnect, device number 2 [ 184.350407][ T3167] fido_id[3167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 184.365113][ T410] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 184.545060][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.556038][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 184.564108][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.575017][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 184.582917][ T5] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 184.582972][ T3178] loop4: unable to read partition table [ 184.596502][ T3178] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 184.602425][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.617391][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 184.625755][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.636644][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 184.645295][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.656200][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 184.664189][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.675070][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 184.683043][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.693929][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 184.730604][ T3189] SELinux: policydb version 1697621877 does not match my version range 15-33 [ 184.739717][ T3189] SELinux: failed to load policy [ 184.753510][ T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.764562][ T410] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 184.773608][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.782495][ T410] usb 1-1: config 0 descriptor?? [ 185.029533][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.039691][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.125345][ T5] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.134459][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.142462][ T5] usb 5-1: SerialNumber: syz [ 185.167915][ T663] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 185.445031][ T5] usb 5-1: 0:2 : does not exist [ 185.488370][ T5] usb 5-1: USB disconnect, device number 19 [ 185.561742][ T663] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 185.572755][ T663] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.583891][ T663] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.593804][ T663] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 185.607350][ T663] usb 7-1: config 0 interface 0 has no altsetting 0 [ 185.613963][ T663] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 185.623144][ T663] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.636685][ T663] usb 7-1: config 0 descriptor?? [ 185.712019][ T1974] udevd[1974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.775510][ T410] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 185.783785][ T410] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 186.123141][ T3226] SELinux: policydb version 1697621877 does not match my version range 15-33 [ 186.132192][ T3226] SELinux: failed to load policy [ 186.139708][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.147223][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.154954][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.162820][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.176810][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.189024][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.200399][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.208200][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.216064][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.223450][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.231017][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.238561][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.246106][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.253499][ T663] hid-generic 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 186.261062][ T663] hid-generic 0003:17EF:60EE.0003: item fetching failed at offset 14/40 [ 186.269791][ T663] hid-generic: probe of 0003:17EF:60EE.0003 failed with error -22 [ 186.355693][ T25] usb 7-1: USB disconnect, device number 3 [ 186.448718][ C1] ================================================================================ [ 186.458035][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 186.466611][ C1] index 54551 is out of range for type 'const int[34]' [ 186.473451][ C1] CPU: 1 PID: 3214 Comm: syz.2.887 Tainted: G W syzkaller #0 [ 186.482112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.492151][ C1] Call Trace: [ 186.495420][ C1] [ 186.498262][ C1] __dump_stack+0x21/0x24 [ 186.502574][ C1] dump_stack_lvl+0x1a7/0x208 [ 186.507233][ C1] ? show_regs_print_info+0x18/0x18 [ 186.512411][ C1] dump_stack+0x15/0x1c [ 186.516547][ C1] ubsan_epilogue+0xe/0x40 [ 186.520946][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 186.526760][ C1] aiptek_irq+0x1fa2/0x2860 [ 186.531261][ C1] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 186.536619][ C1] usb_hcd_giveback_urb+0x11d/0x3f0 [ 186.541806][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 186.546643][ C1] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 186.552518][ C1] dummy_timer+0xa34/0x31d0 [ 186.557009][ C1] ? dummy_free_streams+0x5c0/0x5c0 [ 186.562186][ C1] ? dummy_free_streams+0x5c0/0x5c0 [ 186.567368][ C1] call_timer_fn+0x38/0x290 [ 186.571937][ C1] ? dummy_free_streams+0x5c0/0x5c0 [ 186.577119][ C1] __run_timers+0x637/0x9a0 [ 186.581598][ C1] ? calc_index+0x200/0x200 [ 186.586080][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 186.590909][ C1] run_timer_softirq+0x6a/0xf0 [ 186.595647][ C1] __do_softirq+0x255/0x563 [ 186.600127][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 186.605650][ C1] asm_call_irq_on_stack+0xf/0x20 [ 186.610649][ C1] [ 186.613578][ C1] do_softirq_own_stack+0x60/0x80 [ 186.618578][ C1] __irq_exit_rcu+0x128/0x150 [ 186.623232][ C1] irq_exit_rcu+0x9/0x10 [ 186.627452][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 186.633059][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 186.639014][ C1] RIP: 0010:kasan_check_range+0x11/0x2a0 [ 186.644623][ C1] Code: 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02 00 00 49 89 f8 [ 186.664204][ C1] RSP: 0018:ffffc90000d376d8 EFLAGS: 00000202 [ 186.670255][ C1] RAX: ffffffff83980601 RBX: ffff888119a59c80 RCX: ffffffff839806bc [ 186.678205][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888119a59d6c [ 186.686170][ C1] RBP: ffffc90000d376e0 R08: ffff888119a59d6f R09: 1ffff1102334b3ad [ 186.694119][ C1] R10: dffffc0000000000 R11: ffffed102334b3ae R12: dffffc0000000000 [ 186.702074][ C1] R13: dffffc0000000000 R14: ffff888119a59d6c R15: 0000000000000002 [ 186.710032][ C1] ? sock_zerocopy_put+0x241/0x2e0 [ 186.715117][ C1] ? refcount_dec_and_test+0x1c/0x80 [ 186.720386][ C1] __kasan_check_write+0x14/0x20 [ 186.725300][ C1] refcount_dec_and_test+0x1c/0x80 [ 186.730456][ C1] consume_skb+0xcb/0x1f0 [ 186.734782][ C1] skb_free_datagram+0x28/0xe0 [ 186.739538][ C1] netlink_recvmsg+0x5dd/0xe60 [ 186.744281][ C1] ? netlink_sendmsg+0xb70/0xb70 [ 186.749201][ C1] ? exc_page_fault+0x67/0xc0 [ 186.753856][ C1] ? netlink_sendmsg+0xb70/0xb70 [ 186.758768][ C1] ____sys_recvmsg+0x2ca/0x5b0 [ 186.763512][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 186.768516][ C1] ? import_iovec+0x7c/0xb0 [ 186.773000][ C1] ___sys_recvmsg+0x213/0x5c0 [ 186.777653][ C1] ? __sys_recvmsg+0x280/0x280 [ 186.782393][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 186.787238][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 186.793372][ C1] ? do_recvmmsg+0x523/0x7a0 [ 186.797939][ C1] do_recvmmsg+0x358/0x7a0 [ 186.802334][ C1] ? __sys_recvmmsg+0x290/0x290 [ 186.807162][ C1] ? __fget_files+0x2e1/0x340 [ 186.811816][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 186.816818][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 186.821386][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 186.827429][ C1] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 186.833049][ C1] do_syscall_64+0x31/0x40 [ 186.837446][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 186.843315][ C1] RIP: 0033:0x7facde4fce59 [ 186.847716][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.867298][ C1] RSP: 002b:00007facdcf35028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 186.875692][ C1] RAX: ffffffffffffffda RBX: 00007facde785090 RCX: 00007facde4fce59 [ 186.883640][ C1] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 186.891588][ C1] RBP: 00007facde592e6f R08: 0000000000000000 R09: 0000000000000000 [ 186.899538][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 186.907487][ C1] R13: 00007facde785128 R14: 00007facde785090 R15: 00007ffe1f204e28 [ 186.915525][ C1] ================================================================================ [ 186.924779][ C1] ================================================================================ [ 186.934045][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 186.942602][ C1] index 54552 is out of range for type 'const int[34]' [ 186.949428][ C1] CPU: 1 PID: 3214 Comm: syz.2.887 Tainted: G W syzkaller #0 [ 186.958070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.968099][ C1] Call Trace: [ 186.971359][ C1] [ 186.974196][ C1] __dump_stack+0x21/0x24 [ 186.978503][ C1] dump_stack_lvl+0x1a7/0x208 [ 186.983157][ C1] ? show_regs_print_info+0x18/0x18 [ 186.988337][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 186.993770][ C1] dump_stack+0x15/0x1c [ 186.997905][ C1] ubsan_epilogue+0xe/0x40 [ 187.002298][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 187.008001][ C1] aiptek_irq+0x1e71/0x2860 [ 187.012484][ C1] __usb_hcd_giveback_urb+0x32f/0x4f0 [ 187.017833][ C1] usb_hcd_giveback_urb+0x11d/0x3f0 [ 187.023009][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 187.027837][ C1] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 187.033708][ C1] dummy_timer+0xa34/0x31d0 [ 187.038195][ C1] ? dummy_free_streams+0x5c0/0x5c0 [ 187.043369][ C1] ? dummy_free_streams+0x5c0/0x5c0 [ 187.048542][ C1] call_timer_fn+0x38/0x290 [ 187.053021][ C1] ? dummy_free_streams+0x5c0/0x5c0 [ 187.058195][ C1] __run_timers+0x637/0x9a0 [ 187.062676][ C1] ? calc_index+0x200/0x200 [ 187.067163][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 187.071992][ C1] run_timer_softirq+0x6a/0xf0 [ 187.076736][ C1] __do_softirq+0x255/0x563 [ 187.081218][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 187.086740][ C1] asm_call_irq_on_stack+0xf/0x20 [ 187.091736][ C1] [ 187.094652][ C1] do_softirq_own_stack+0x60/0x80 [ 187.099651][ C1] __irq_exit_rcu+0x128/0x150 [ 187.104310][ C1] irq_exit_rcu+0x9/0x10 [ 187.108546][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 187.114167][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 187.120129][ C1] RIP: 0010:kasan_check_range+0x11/0x2a0 [ 187.125744][ C1] Code: 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02 00 00 49 89 f8 [ 187.145331][ C1] RSP: 0018:ffffc90000d376d8 EFLAGS: 00000202 [ 187.151378][ C1] RAX: ffffffff83980601 RBX: ffff888119a59c80 RCX: ffffffff839806bc [ 187.159327][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888119a59d6c [ 187.167278][ C1] RBP: ffffc90000d376e0 R08: ffff888119a59d6f R09: 1ffff1102334b3ad [ 187.175226][ C1] R10: dffffc0000000000 R11: ffffed102334b3ae R12: dffffc0000000000 [ 187.183175][ C1] R13: dffffc0000000000 R14: ffff888119a59d6c R15: 0000000000000002 [ 187.191134][ C1] ? sock_zerocopy_put+0x241/0x2e0 [ 187.196222][ C1] ? refcount_dec_and_test+0x1c/0x80 [ 187.201486][ C1] __kasan_check_write+0x14/0x20 [ 187.206399][ C1] refcount_dec_and_test+0x1c/0x80 [ 187.211485][ C1] consume_skb+0xcb/0x1f0 [ 187.215792][ C1] skb_free_datagram+0x28/0xe0 [ 187.220543][ C1] netlink_recvmsg+0x5dd/0xe60 [ 187.225285][ C1] ? netlink_sendmsg+0xb70/0xb70 [ 187.230198][ C1] ? exc_page_fault+0x67/0xc0 [ 187.234849][ C1] ? netlink_sendmsg+0xb70/0xb70 [ 187.239761][ C1] ____sys_recvmsg+0x2ca/0x5b0 [ 187.244500][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 187.249503][ C1] ? import_iovec+0x7c/0xb0 [ 187.253980][ C1] ___sys_recvmsg+0x213/0x5c0 [ 187.258633][ C1] ? __sys_recvmsg+0x280/0x280 [ 187.263374][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 187.268203][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 187.274332][ C1] ? do_recvmmsg+0x523/0x7a0 [ 187.278897][ C1] do_recvmmsg+0x358/0x7a0 [ 187.283291][ C1] ? __sys_recvmmsg+0x290/0x290 [ 187.288119][ C1] ? __fget_files+0x2e1/0x340 [ 187.292773][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 187.297779][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 187.302351][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 187.308393][ C1] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 187.314000][ C1] do_syscall_64+0x31/0x40 [ 187.318394][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 187.324261][ C1] RIP: 0033:0x7facde4fce59 [ 187.328654][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.348232][ C1] RSP: 002b:00007facdcf35028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 187.356621][ C1] RAX: ffffffffffffffda RBX: 00007facde785090 RCX: 00007facde4fce59 [ 187.364571][ C1] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 187.372518][ C1] RBP: 00007facde592e6f R08: 0000000000000000 R09: 0000000000000000 [ 187.380478][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 187.388427][ C1] R13: 00007facde785128 R14: 00007facde785090 R15: 00007ffe1f204e28 [ 187.396378][ C1] ================================================================================ [ 187.417598][ T20] usb 1-1: USB disconnect, device number 15