last executing test programs:

7.071269909s ago: executing program 3 (id=2464):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002bf, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

6.940988187s ago: executing program 3 (id=2466):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x180040c, &(0x7f0000000140)={[{@nogrpid}, {@dioread_nolock}, {@resgid}, {}, {@test_dummy_encryption_v1}]}, 0x1, 0x616, &(0x7f0000000340)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0)

6.836126989s ago: executing program 3 (id=2456):
r0 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
unshare(0x22020600)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)

6.78477758s ago: executing program 3 (id=2457):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{}, {@init_itable}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

6.65009846s ago: executing program 3 (id=2458):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000001"], 0x110)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108)

6.479419507s ago: executing program 3 (id=2459):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.479319357s ago: executing program 32 (id=2459):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.254996511s ago: executing program 2 (id=2549):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b1e800000100109050b36"], 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000)

2.033564669s ago: executing program 1 (id=2546):
r0 = socket$inet6(0x10, 0x3, 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000900000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4004000)
sendto$inet6(r0, &(0x7f0000000000)='z', 0x10a7a, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.951199917s ago: executing program 1 (id=2551):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$pptp(0x18, 0x1, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000}, 0x0, 0x0, 0x0)

1.93673969s ago: executing program 1 (id=2552):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
unshare(0x22020400)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x4)

1.920589383s ago: executing program 5 (id=2553):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)

1.885022121s ago: executing program 5 (id=2554):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0)
clock_gettime(0x0, 0x0)
setitimer(0x2, &(0x7f00000040c0)={{}, {0x0, 0x2710}}, 0x0)

1.876688753s ago: executing program 1 (id=2555):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x10082, &(0x7f0000000000)=ANY=[@ANYBLOB="696e6c696e6563727970742c6e6f696e6c696e655f64656e7472792c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c0068f9e42d819469a61b133518a2fdff195a02ab169551ec8e5d1038e2a296230ac181b672b9c209ba0802faf4390229e2a44361d033a5adc3698e6b1f9c2b84471c360f284e6d3bb4a8982de0a25c2d0fee33d7260cfe3d81617bbb6b21b8108421eede4c63c25a7028efcded0aac8a5d128166077e0012231865289f00f790d6fffe1a6f09fac907916b9c1bdab7792758b5b922106ac372d3ce2b35f8f4000000"], 0x1, 0x1059a, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaf9)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2)

1.855021488s ago: executing program 5 (id=2556):
write(0xffffffffffffffff, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@minixdf}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
rmdir(&(0x7f0000000240)='./file0\x00')

1.650455882s ago: executing program 5 (id=2557):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818858, &(0x7f00000002c0)={[{@numtail}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@uni_xlate}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}, {@numtail}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_mixed}, {@utf8}]}, 0x1, 0x378, &(0x7f0000000600)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.294605889s ago: executing program 5 (id=2560):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESOCT, @ANYRES16], 0x25, 0x55ca, &(0x7f000000b180)="$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")
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa0040, 0x2}, 0x18)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4)

994.578984ms ago: executing program 0 (id=2568):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202003ff0100ffff01000008000300", @ANYRES32=r2, @ANYBLOB="08000100ac141433080002000a010102"], 0x34}}, 0xea5bc50b6199d77e)

962.287851ms ago: executing program 0 (id=2569):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000103, 0x0, 0xb4}]})

851.366625ms ago: executing program 0 (id=2570):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818858, &(0x7f00000002c0)={[{@numtail}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@uni_xlate}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}, {@numtail}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_mixed}, {@utf8}]}, 0x1, 0x378, &(0x7f0000000600)="$eJzs3U1oXNUXAPAzffkstMniD+UvCE93goZ+4EJxkVJSKM5GZai6EAebqmRiIYOD6aLTuBFxJbhUENyIC1246FoERdy5cGsFrYoL7a5g8crMvJl505mmKZrW4O+3GA7n3vPuvW9eMi+TzM3zy7F2ZjrOXr16JebmKjG1fGI5rlViMbLouxjjZibkAIC94VpK8Xvq2WFJZZenBADssu7r/4sHSpnXv9iuf/LqDwB7XvHz//x2febGUz8+1nk8t3vzAgB2z9j7//ePNM+M/qp/qvRXAQDAXvXUM88+frwa8WSez0Wsv9GqtWrx6LD9+Nl4ORqxGodjIa5H9G4UOg+V7uPJU9WVw3met+OnxahFxPutWsR6u1Xr3Skcz7r1s3EkFmKxqC/uNlJK2clPqytH8q6IuNjujh/rlVZtOvYX43+3P1bjaOTxv7H6iFPVlaN5cYDaer++HbE1fN+iM/+lWIhvXohz0Ygz86cjpf5tTXXlwpE8P5GqI/Wt2mycGZyFCe+AAAAAAAAAAAAAAAAAAAAAAADA37CUDywO9r9Jw/17lpYmtHf3x+nVF/sDbfX2B0qzKVL67bWHam9mMbI/0I3787RqU7Hv7i4dAAAAAAAAAAAAAAAAAAAA/jWamzNRbzRWN5qb59fKQfutA5v7IqKTeeWrjz+fj/E+twimijFKTXmROr9WT1m/c8q6faYjolSedQbvH/CjS4MZl4eYHaxi4jRmb97UaBy474d3h5l7s/6R/xz2yWLyArMbplEO1g/2pjTITA+XfNMzdqwIjt7irF5OKd3sOBeeG6+KSsTU7T9x2wepE3x55aX/H2seerib+Sz1PPDgwunL73zwy1q90Rm5o/HhzEbzelqrV6K3ocRtDpqVrp9KcQ4r5StharvyrdFMPfv216fvefvrnY2eyplXJ/TJesv5ZKO5WSm+UrpNM72gMno9d4L5xqls7EqYjn/y2ekEEy+2Q+8t1y9d+P7nnR6n9E3CRh0AAAAAAAAAAAAAAAAAAHBHlD4rXig+7Du9XdUjTxTB3O7ODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADujOH//y8FW2OZnQR/tGO8aXZ1oxlx8G4vEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7i/AgAA//9hnWdV")
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

660.122926ms ago: executing program 2 (id=2571):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xa, 0x2005, 0x7, 0xc1, 0xffffffffffffffff, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r0, &(0x7f00000003c0)}, 0x20)

626.537424ms ago: executing program 0 (id=2572):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x4c00)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x4, 0xfffffffffffffffb, 0x0, 0x84})

607.329588ms ago: executing program 1 (id=2573):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x2, 0x10000000000, 0x800})
fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x36, 0xc1b0})
fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x0, 0x1, 0x1, 0xdbd})

606.744648ms ago: executing program 2 (id=2574):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x100}, 0x1c, 0x0, 0x0, &(0x7f0000000100)}, 0x400c0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)

599.789349ms ago: executing program 4 (id=2575):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000004500)={0xa0, 0x0, 0x0, {{0x9, 0x1, 0x7fff, 0x1, 0x73, 0x7, {0x3, 0x8, 0x8, 0x87b1, 0x1, 0x10000, 0x5, 0x1, 0x80, 0x8000, 0x3ff, 0x0, 0x0, 0x9, 0x2}}, {0x0, 0x4}}}, 0xa0)

491.166973ms ago: executing program 4 (id=2576):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x3, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x40, 0x2000000000000009, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0)

491.022203ms ago: executing program 2 (id=2577):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {r1, r2/1000+60000}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090)

467.468318ms ago: executing program 2 (id=2578):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

370.872029ms ago: executing program 4 (id=2579):
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

319.04096ms ago: executing program 5 (id=2580):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB")
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9)
fallocate(r0, 0x10, 0x1, 0x6000)

232.872539ms ago: executing program 0 (id=2581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

126.958292ms ago: executing program 0 (id=2582):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f00000003c0)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@noblock_validity}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@abort}, {@nombcache}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x42, 0x1b6)
unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200)

102.143527ms ago: executing program 4 (id=2583):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061)
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')

75.460483ms ago: executing program 4 (id=2584):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='[aD', 0x3, r0)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "78203e5e83e0f1771590c6499c8ffd5b1bd2f05ecc827e4923282a78de493b0dfbc0deed7b589a26e42c052823e45daf8033d1e4124b77873dc55ea22bb0e0c3", 0x2c}, 0x48, r0)
keyctl$read(0xb, r0, &(0x7f0000001300)=""/4, 0x4)

62.894186ms ago: executing program 2 (id=2585):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109441, 0x148)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000440)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000001b80)={{}, {0x1, 0x2, 0x8000000}, [], {0x4, 0x4}}, 0x24, 0x3)

1.587309ms ago: executing program 4 (id=2586):
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='0', 0x1)

0s ago: executing program 1 (id=2596):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40810, 0x3}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x16f4c}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

kernel console output (not intermixed with test programs):

 0x82 has invalid maxpacket 64
[   48.260220][  T302] usb 3-1: config 1 interface 105 has no altsetting 0
[   48.326129][ T2914] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   48.328376][ T2921] syz.0.1129[2921] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.337283][ T2914] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   48.337434][ T2921] syz.0.1129[2921] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.349797][ T2914] jbd2_journal_init_inode: Cannot locate journal superblock
[   48.377052][ T2914] EXT4-fs (loop4): Could not load journal inode
[   48.389758][ T2914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'.
[   48.429847][  T302] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   48.439082][  T302] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   48.449619][  T302] usb 3-1: Product: syz
[   48.455183][  T302] usb 3-1: Manufacturer: syz
[   48.460798][  T302] usb 3-1: SerialNumber: syz
[   48.489755][ T2787] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   48.497053][ T2787] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   48.550697][ T2940] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   48.559754][ T2940] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   48.717356][ T2982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'.
[   48.726363][ T2982] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1157'.
[   48.735754][ T2982] tipc: Invalid UDP bearer configuration
[   48.735774][ T2982] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   48.750430][  T302] aqc111: probe of 3-1:1.105 failed with error -71
[   48.761433][ T2984] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   48.784998][  T302] usb 3-1: USB disconnect, device number 5
[   48.808767][ T2984] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,acl,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,sb=0x0000000000000400,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[   48.859912][ T2995] EXT4-fs (loop1): Test dummy encryption mode enabled
[   48.870865][ T2995] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   48.877067][ T2984] incfs: Error accessing: ./file1.
[   48.887755][ T2995] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1163: bad orphan inode 131083
[   48.897180][ T2984] incfs: mount failed -20
[   48.899188][ T2995] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue
[   49.022138][ T3023] netlink: 'syz.4.1172': attribute type 16 has an invalid length.
[   49.030050][ T3023] netlink: 'syz.4.1172': attribute type 17 has an invalid length.
[   49.076466][ T3023] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.083755][ T3023] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.239822][  T299] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   49.304377][ T3034] FAT-fs (loop2): Directory bread(block 64) failed
[   49.311242][ T3034] FAT-fs (loop2): Directory bread(block 65) failed
[   49.317961][ T3034] FAT-fs (loop2): Directory bread(block 66) failed
[   49.325856][ T3034] FAT-fs (loop2): Directory bread(block 67) failed
[   49.332815][ T3034] FAT-fs (loop2): Directory bread(block 68) failed
[   49.339550][ T3034] FAT-fs (loop2): Directory bread(block 69) failed
[   49.347836][ T3034] FAT-fs (loop2): Directory bread(block 70) failed
[   49.354708][ T3034] FAT-fs (loop2): Directory bread(block 71) failed
[   49.365063][ T3034] FAT-fs (loop2): Directory bread(block 72) failed
[   49.371881][ T3034] FAT-fs (loop2): Directory bread(block 73) failed
[   49.463539][ T3044] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   49.491665][ T3045] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue
[   49.496015][ T3044] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,acl,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,sb=0x0000000000000400,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[   49.503070][ T3045] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.527939][ T3048] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   49.552792][ T3048] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   49.562453][ T3048] F2FS-fs (loop4): invalid crc value
[   49.569346][ T3048] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   49.596426][ T3044] incfs: Error accessing: ./file1.
[   49.608930][ T3044] incfs: mount failed -20
[   49.613995][ T3048] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   49.621112][ T3048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   49.679715][  T299] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.690170][  T299] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   49.729901][   T24] kauditd_printk_skb: 65 callbacks suppressed
[   49.729913][   T24] audit: type=1326 audit(2000000010.269:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   49.768750][   T24] audit: type=1326 audit(2000000010.299:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   49.808699][   T24] audit: type=1326 audit(2000000010.309:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   49.834738][   T24] audit: type=1326 audit(2000000010.329:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   49.849853][  T299] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[   49.860149][   T24] audit: type=1326 audit(2000000010.349:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   49.869452][  T299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.894648][   T24] audit: type=1326 audit(2000000010.369:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   49.912168][  T299] usb 2-1: Product: syz
[   49.926651][   T24] audit: type=1326 audit(2000000010.389:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   49.932495][  T299] usb 2-1: Manufacturer: syz
[   49.963968][  T299] usb 2-1: SerialNumber: syz
[   49.978343][ T3085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1197'.
[   49.987342][   T24] audit: type=1400 audit(2000000010.519:576): avc:  denied  { write } for  pid=3086 comm="syz.4.1198" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   50.011338][   T24] audit: type=1326 audit(2000000010.529:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   50.036435][   T24] audit: type=1326 audit(2000000010.529:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2994 comm="syz.1.1163" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55940fadeb code=0x7ffc0000
[   50.099712][  T301] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   50.154780][ T3108] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   50.176923][    T7] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   50.233632][ T3118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1213'.
[   50.329922][  T299] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   50.352482][  T299] usb 2-1: USB disconnect, device number 5
[   50.427950][ T3160] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   50.459765][  T301] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.476122][  T301] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.493053][  T301] usb 1-1: config 0 interface 0 has no altsetting 0
[   50.505211][  T301] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00
[   50.514932][  T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.526567][  T301] usb 1-1: config 0 descriptor??
[   50.590748][ T3180] exfat: Deprecated parameter 'namecase'
[   50.596709][ T3180] exfat: Deprecated parameter 'namecase'
[   50.673131][ T3180] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[   50.761524][ T3195] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,nogrpid,quota,,errors=continue
[   50.772402][ T3195] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.859742][  T350] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   50.935106][ T3210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   50.944205][ T3210] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.950852][ T3222] device vlan0 entered promiscuous mode
[   51.030399][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.037370][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.044640][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.051683][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.058533][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.065426][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.072383][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.079233][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.086306][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.095867][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.102867][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.109790][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.116681][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.123682][  T301] xinmo 0003:16C0:05E1.000A: unknown main item tag 0x0
[   51.130639][  T301] xinmo 0003:16C0:05E1.000A: unbalanced collection at end of report description
[   51.140065][  T301] xinmo: probe of 0003:16C0:05E1.000A failed with error -22
[   51.254365][  T299] usb 1-1: USB disconnect, device number 6
[   51.259804][  T350] usb 5-1: unable to get BOS descriptor or descriptor too short
[   51.509921][  T350] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[   51.519499][  T350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.527839][  T350] usb 5-1: Product: syz
[   51.532221][  T350] usb 5-1: Manufacturer: syz
[   51.536909][  T350] usb 5-1: SerialNumber: syz
[   51.651506][ T3243] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(0)
[   51.659931][ T3243] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   51.669052][ T3243] F2FS-fs (loop3): invalid crc value
[   51.675633][ T3243] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   51.696918][ T3243] F2FS-fs (loop3): Start checkpoint disabled!
[   51.703846][ T3243] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   51.711212][ T3243] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   51.736631][ T1032] attempt to access beyond end of device
[   51.736631][ T1032] loop3: rw=2049, want=40976, limit=40427
[   51.809048][ T3248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1270'.
[   51.818675][ T3248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'.
[   51.827687][ T3248] netlink: 'syz.1.1270': attribute type 1 has an invalid length.
[   51.909785][  T350] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   51.929739][  T350] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   51.982556][  T350] usb 5-1: USB disconnect, device number 2
[   52.030410][ T3282] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   52.056510][ T3282] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.212887][ T3310] exfat: Deprecated parameter 'utf8'
[   52.219572][ T3310] exfat: Deprecated parameter 'namecase'
[   52.225394][ T3310] exfat: Deprecated parameter 'namecase'
[   52.231147][ T3310] exfat: Deprecated parameter 'namecase'
[   52.273826][ T3310] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeab4ecca, utbl_chksum : 0xe619d30d)
[   52.398745][ T3337] __nla_validate_parse: 1 callbacks suppressed
[   52.398755][ T3337] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1311'.
[   52.439366][ T3337] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1311'.
[   52.506063][ T3360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1323'.
[   52.560489][ T3369] syz.4.1328[3369] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.560575][ T3369] syz.4.1328[3369] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.653245][ T3377] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   52.675858][ T3377] ext4 filesystem being mounted at /269/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   52.699756][ T3381] EXT4-fs (loop2): Unrecognized mount option "smackfshat=ext4" or missing value
[   52.729688][  T400] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   53.009709][  T400] usb 1-1: Using ep0 maxpacket: 32
[   53.040346][ T3392] exfat: Deprecated parameter 'utf8'
[   53.045676][ T3392] exfat: Deprecated parameter 'utf8'
[   53.058505][ T3392] exfat: Deprecated parameter 'utf8'
[   53.159815][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   53.162467][ T3406] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1344'.
[   53.185627][ T3392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   53.345930][ T3426] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   53.358158][ T3426] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   53.382118][ T3431] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d)
[   53.396941][ T3440] xt_hashlimit: size too large, truncated to 1048576
[   53.429813][  T400] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[   53.448960][  T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.467569][  T400] usb 1-1: Product: syz
[   53.471986][  T400] usb 1-1: Manufacturer: syz
[   53.476602][  T400] usb 1-1: SerialNumber: syz
[   53.641197][ T3454] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,norecovery,prjquota,noquota,,errors=continue
[   53.695240][  T300] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   53.717759][  T300] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   53.747727][ T3471] netlink: 'syz.4.1371': attribute type 4 has an invalid length.
[   53.757527][  T300] EXT4-fs (loop3): This should not happen!! Data will be lost
[   53.757527][  T300] 
[   53.768222][  T300] EXT4-fs (loop3): Total free blocks count 0
[   53.768458][ T3471] netlink: 'syz.4.1371': attribute type 5 has an invalid length.
[   53.774783][  T300] EXT4-fs (loop3): Free/Dirty block details
[   53.783695][ T3471] netlink: 'syz.4.1371': attribute type 5 has an invalid length.
[   53.788435][  T300] EXT4-fs (loop3): free_blocks=66060288
[   53.796452][ T3471] netlink: 3269 bytes leftover after parsing attributes in process `syz.4.1371'.
[   53.801863][  T300] EXT4-fs (loop3): dirty_blocks=32
[   53.817169][ T3468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   53.819957][  T300] EXT4-fs (loop3): Block reservation details
[   53.833861][  T300] EXT4-fs (loop3): i_reserved_data_blocks=2
[   53.840505][  T300] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   53.853376][  T300] EXT4-fs (loop3): This should not happen!! Data will be lost
[   53.853376][  T300] 
[   53.899798][  T400] usb 1-1: MIDIStreaming interface descriptor not found
[   53.909195][  T400] usb 1-1: USB disconnect, device number 7
[   54.130618][ T1572] udevd[1572]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   54.522953][ T3498] F2FS-fs (loop2): invalid crc value
[   54.549938][ T3498] F2FS-fs (loop2): Found nat_bits in checkpoint
[   54.583205][ T3498] F2FS-fs (loop2): Start checkpoint disabled!
[   54.590015][ T3498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   54.708724][  T300] attempt to access beyond end of device
[   54.708724][  T300] loop2: rw=2049, want=40976, limit=40427
[   54.764460][ T3487] F2FS-fs (loop1): invalid crc value
[   54.782733][ T3512] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   54.789174][ T3512] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   54.798430][ T3512] F2FS-fs (loop0): invalid crc value
[   54.818420][ T3487] F2FS-fs (loop1): Found nat_bits in checkpoint
[   54.889226][ T3526] EXT4-fs (loop3): Ignoring removed bh option
[   54.910837][ T3512] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   54.940763][ T3526] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1392: invalid indirect mapped block 234881024 (level 0)
[   54.955620][ T3526] EXT4-fs (loop3): Remounting filesystem read-only
[   54.962370][ T3487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   54.980631][ T3526] EXT4-fs (loop3): 1 truncate cleaned up
[   54.980702][ T3512] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   54.999681][ T3512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   55.007557][ T3526] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,auto_da_alloc,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,
[   55.042981][ T3487] F2FS-fs (loop1): Corrupted max_depth of 3: 16842753
[   55.071595][  T281] attempt to access beyond end of device
[   55.071595][  T281] loop0: rw=2049, want=45104, limit=40427
[   55.238239][   T24] kauditd_printk_skb: 55 callbacks suppressed
[   55.238254][   T24] audit: type=1326 audit(2000000015.769:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3547 comm="syz.3.1401" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c06b1f159 code=0x0
[   55.410696][   T24] audit: type=1400 audit(2000000015.949:635): avc:  denied  { mount } for  pid=3579 comm="syz.1.1414" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   55.440828][   T24] audit: type=1400 audit(2000000015.979:636): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   55.517133][   T24] audit: type=1400 audit(2000000015.999:637): avc:  denied  { append } for  pid=3583 comm="syz.0.1416" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   55.655872][ T3600] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1423'.
[   55.684160][ T3603] device vlan2 entered promiscuous mode
[   55.699765][ T3603] device bridge0 entered promiscuous mode
[   55.839458][ T3616] exfat: Deprecated parameter 'utf8'
[   55.846297][ T3616] exfat: Deprecated parameter 'namecase'
[   55.852088][ T3616] exfat: Deprecated parameter 'utf8'
[   55.872431][ T3616] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   55.949984][ T3593] F2FS-fs (loop0): invalid crc value
[   55.957456][ T3593] F2FS-fs (loop0): Found nat_bits in checkpoint
[   55.983572][ T3566] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24)
[   55.986621][ T3593] F2FS-fs (loop0): Start checkpoint disabled!
[   55.998712][ T3566] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   56.008057][ T3566] F2FS-fs (loop4): Test dummy encryption mode enabled
[   56.015912][ T3566] F2FS-fs (loop4): invalid crc value
[   56.021776][ T3593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   56.037707][ T3566] F2FS-fs (loop4): Found nat_bits in checkpoint
[   56.054866][   T24] audit: type=1400 audit(2000000016.589:638): avc:  denied  { ioctl } for  pid=3637 comm="syz.1.1439" path="socket:[26143]" dev="sockfs" ino=26143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   56.136540][ T3566] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   56.151924][ T3566] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[   56.162045][ T3566] F2FS-fs (loop4): Start checkpoint disabled!
[   56.164953][  T300] attempt to access beyond end of device
[   56.164953][  T300] loop0: rw=2049, want=40968, limit=40427
[   56.184987][ T3566] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   56.195386][   T24] audit: type=1326 audit(2000000016.729:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.1447" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c06b1f159 code=0x7ffc0000
[   56.203956][  T300] attempt to access beyond end of device
[   56.203956][  T300] loop0: rw=2049, want=40984, limit=40427
[   56.231615][ T3566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   56.231991][   T24] audit: type=1326 audit(2000000016.729:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.1447" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7c06b1f159 code=0x7ffc0000
[   56.329492][   T24] audit: type=1326 audit(2000000016.729:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.1447" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c06b1f159 code=0x7ffc0000
[   56.355571][   T24] audit: type=1326 audit(2000000016.729:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.1447" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c06b1f159 code=0x7ffc0000
[   56.381020][   T24] audit: type=1326 audit(2000000016.729:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.1447" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f7c06b1f159 code=0x7ffc0000
[   56.409351][ T3679] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[   56.610837][ T3707] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x00000000000000dd,nojournal_checksum,acl,errors=remount-ro,
[   56.625122][ T3707] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.669984][ T3715] exfat: Deprecated parameter 'utf8'
[   56.689481][ T3715] exfat: Deprecated parameter 'utf8'
[   56.695003][ T3715] exfat: Deprecated parameter 'namecase'
[   56.782633][ T3715] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   56.853941][ T3741] netem: change failed
[   57.004855][ T3776] EXT4-fs (loop4): Test dummy encryption mode enabled
[   57.026544][ T3776] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.1501: missing EA_INODE flag
[   57.039319][ T3776] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1501: error while reading EA inode 2 err=-117
[   57.051932][ T3776] EXT4-fs (loop4): 1 orphan inode deleted
[   57.057684][ T3776] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue
[   57.071379][ T3792] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   57.080424][ T3792] ext4 filesystem being mounted at /325/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   57.299714][ T1059] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   57.641678][ T3856] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   57.649777][ T3856] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   57.657876][ T3856] System zones: 0-1, 15-15, 18-18, 34-34
[   57.659765][ T1059] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.664332][ T3856] EXT4-fs (loop3): orphan cleanup on readonly fs
[   57.674593][ T1059] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   57.681167][ T3856] EXT4-fs warning (device loop3): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   57.694020][ T1059] usb 3-1: config 0 interface 0 has no altsetting 0
[   57.708444][ T3856] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   57.714879][ T1059] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   57.730573][ T1059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.730793][ T3856] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1535: bg 0: block 40: padding at end of block bitmap is not set
[   57.742144][ T1059] usb 3-1: config 0 descriptor??
[   57.753156][ T3856] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   57.766692][ T3856] EXT4-fs (loop3): 1 truncate cleaned up
[   57.772363][ T3856] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   57.852407][ T3862] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1537'.
[   57.950264][ T3866] erofs: (device loop3): mounted with root inode @ nid 36.
[   58.004672][ T3869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'.
[   58.013921][ T3869] netlink: 'syz.3.1540': attribute type 21 has an invalid length.
[   58.021772][ T3869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1540'.
[   58.119318][ T3887] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.126588][ T3887] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.231097][ T1059] hid-multitouch 0003:0EEF:72C4.000B: unbalanced collection at end of report description
[   58.241555][ T1059] hid-multitouch: probe of 0003:0EEF:72C4.000B failed with error -22
[   58.357179][ T3911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002e01c, mo2=0002]
[   58.380877][ T3911] System zones: 1-12
[   58.390136][ T3911] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1561: missing EA_INODE flag
[   58.408328][ T3911] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1561: error while reading EA inode 12 err=-117
[   58.423542][ T3911] EXT4-fs (loop3): 1 orphan inode deleted
[   58.429318][ T3911] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,barrier=0xffffffffffffac7a,,errors=continue
[   58.497380][   T25] usb 3-1: USB disconnect, device number 6
[   58.678921][ T3929] EXT4-fs (loop3): Test dummy encryption mode enabled
[   58.683492][ T3889] F2FS-fs (loop0): invalid crc value
[   58.693215][ T3889] F2FS-fs (loop0): Found nat_bits in checkpoint
[   58.712179][ T3929] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,
[   58.721839][ T3889] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   58.769042][ T3889] fscrypt (loop0, inode 3): Unsupported encryption flags (0x08)
[   58.966426][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'.
[   59.059707][  T350] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   59.252849][ T3989] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   59.319701][  T350] usb 5-1: Using ep0 maxpacket: 16
[   59.341778][ T4011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1600'.
[   59.440037][  T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.451052][  T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.461063][  T350] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   59.474049][  T350] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   59.485650][  T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.494745][  T350] usb 5-1: config 0 descriptor??
[   59.548474][ T4051] mmap: syz.2.1619 (4051): VmData 40828928 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   59.899713][  T299] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   59.914053][ T4073] futex_wake_op: syz.3.1630 tries to shift op by 144; fix this program
[   59.922647][ T4073] futex_wake_op: syz.3.1630 tries to shift op by 144; fix this program
[   59.965201][ T4079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1633'.
[   59.980743][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[   59.988010][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[   59.995866][ T4079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1633'.
[   60.019938][  T350] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max
[   60.030665][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[   60.038009][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[   60.045321][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x4
[   60.050953][ T4087] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   60.076527][ T4087] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1637: bg 0: block 393: padding at end of block bitmap is not set
[   60.091256][ T4087] EXT4-fs (loop1): Remounting filesystem read-only
[   60.091264][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x5
[   60.091291][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[   60.097878][ T4087] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   60.105319][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[   60.118518][ T4059] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   60.129194][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[   60.137763][ T4059] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   60.147634][ T4087] EXT4-fs (loop1): 2 truncates cleaned up
[   60.153785][ T4059] F2FS-fs (loop0): invalid crc value
[   60.164890][ T4087] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,
[   60.169782][  T350] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[   60.196870][ T4059] F2FS-fs (loop0): Found nat_bits in checkpoint
[   60.225082][  T350] microsoft 0003:045E:07DA.000C: No inputs registered, leaving
[   60.233606][  T350] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   60.236270][ T4059] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   60.252783][ T4059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   60.255475][  T350] microsoft 0003:045E:07DA.000C: no inputs found
[   60.268419][  T350] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway
[   60.269807][  T299] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[   60.287138][  T350] usb 5-1: USB disconnect, device number 3
[   60.299709][  T299] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   60.319692][  T299] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.339705][  T299] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   60.362985][  T299] usb 3-1: config 0 interface 0 has no altsetting 0
[   60.373082][  T299] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[   60.389721][  T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.413729][  T299] usb 3-1: config 0 descriptor??
[   60.513567][ T4109] ip_tables: iptables: counters copy to user failed while replacing table
[   60.631443][ T4111] exfat: Deprecated parameter 'utf8'
[   60.639748][ T4111] exfat: Deprecated parameter 'namecase'
[   60.645439][ T4111] exfat: Deprecated parameter 'namecase'
[   60.678653][ T4111] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   60.849008][ T4104] F2FS-fs (loop3): Test dummy encryption mode enabled
[   60.872239][ T4104] F2FS-fs (loop3): invalid crc value
[   60.896467][ T4104] F2FS-fs (loop3): Found nat_bits in checkpoint
[   60.908902][ T4114] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[   60.918193][  T299] ryos 0003:1E7D:3138.000D: unknown main item tag 0x4
[   60.925106][ T4114] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   60.925304][ T4114] F2FS-fs (loop0): fault_type options not supported
[   60.937054][ T4104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   60.940728][ T4114] F2FS-fs (loop0): invalid crc value
[   60.947895][  T299] ryos 0003:1E7D:3138.000D: bogus close delimiter
[   60.953960][ T4114] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   60.979775][  T299] ryos 0003:1E7D:3138.000D: item 0 0 2 10 parsing failed
[   60.995424][ T4114] F2FS-fs (loop0): Start checkpoint disabled!
[   61.000795][  T299] ryos 0003:1E7D:3138.000D: parse failed
[   61.002137][ T4114] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   61.014345][ T4114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   61.017834][  T299] ryos: probe of 0003:1E7D:3138.000D failed with error -22
[   61.048846][   T24] kauditd_printk_skb: 179 callbacks suppressed
[   61.048858][   T24] audit: type=1400 audit(2000000021.579:822): avc:  denied  { listen } for  pid=4142 comm="syz.1.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.079160][   T24] audit: type=1400 audit(2000000021.599:823): avc:  denied  { getopt } for  pid=4144 comm="syz.1.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.126033][  T299] usb 3-1: USB disconnect, device number 7
[   61.215341][ T4157] kernel profiling enabled (shift: 23)
[   61.221666][   T24] audit: type=1400 audit(2000000021.759:824): avc:  denied  { ioctl } for  pid=4154 comm="syz.1.1664" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   61.352479][   T24] audit: type=1400 audit(2000000021.889:825): avc:  denied  { append } for  pid=4177 comm="syz.1.1674" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   61.420102][ T4183] FAT-fs (loop1): Unrecognized mount option "tots" or missing value
[   61.436505][ T4189] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1677'.
[   61.446617][ T4189] device vlan0 entered promiscuous mode
[   61.452512][ T4189] device bridge0 entered promiscuous mode
[   61.542105][ T4196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'.
[   61.660282][ T4192] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,barrier=0x0000000000000005,barrier,block_validity,nodioread_nolock,noauto_da_alloc,resuid=0x0000000000000000,i_version,,errors=continue
[   61.682411][ T4192] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.737902][   T24] audit: type=1400 audit(2000000022.269:826): avc:  denied  { append } for  pid=4191 comm="syz.4.1679" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   61.738323][ T4192] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: block 3: comm syz.4.1679: lblock 3 mapped to illegal pblock 3 (length 2)
[   61.818580][ T4209] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   61.868906][   T24] audit: type=1400 audit(2000000022.399:827): avc:  denied  { append } for  pid=4208 comm="syz.3.1686" path="/386/file0/cpuset.memory_pressure_enabled" dev="loop3" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   61.983461][ T4239] EXT4-fs (loop1): Test dummy encryption mode enabled
[   62.005166][ T4239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.019101][ T4239] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1700: bad orphan inode 131083
[   62.030486][ T4239] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue
[   62.156796][ T4259] netlink: 'syz.1.1708': attribute type 30 has an invalid length.
[   62.165687][ T4238] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   62.172875][ T4238] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   62.196518][ T4238] F2FS-fs (loop2): invalid crc value
[   62.222061][ T4238] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   62.254278][ T4238] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   62.262365][ T4274] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   62.285436][ T4238] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   62.336176][ T4238] attempt to access beyond end of device
[   62.336176][ T4238] loop2: rw=34817, want=79872, limit=40427
[   62.395645][  T283] attempt to access beyond end of device
[   62.395645][  T283] loop2: rw=2049, want=45104, limit=40427
[   62.501768][ T4317] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue
[   62.512106][ T4317] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.611498][ T4324] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   62.644351][ T4319] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   62.655525][ T4319] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   62.665003][ T4319] F2FS-fs (loop4): invalid crc value
[   62.671609][ T4319] F2FS-fs (loop4): Found nat_bits in checkpoint
[   62.705747][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'.
[   62.710469][ T4319] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   62.721958][ T4319] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   62.750874][ T4334] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,,errors=continue
[   62.761318][ T4334] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.783078][ T4345] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue
[   62.794185][ T4345] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.796153][ T4319] F2FS-fs (loop4): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[   62.955177][   T24] audit: type=1326 audit(2000000023.489:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.1.1748" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55940fb159 code=0x7ffc0000
[   63.029767][   T24] audit: type=1326 audit(2000000023.519:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.1.1748" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55940fb159 code=0x7ffc0000
[   63.101910][   T24] audit: type=1326 audit(2000000023.519:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.1.1748" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55940fb159 code=0x7ffc0000
[   63.178055][   T24] audit: type=1326 audit(2000000023.519:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.1.1748" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f55940fb159 code=0x7ffc0000
[   63.212993][ T4400] device sit0 entered promiscuous mode
[   63.239681][ T4400] netlink: 'syz.2.1765': attribute type 1 has an invalid length.
[   63.259751][ T4400] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1765'.
[   63.423840][ T4436] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) !
[   63.441797][ T4424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   63.454256][ T4425] netlink: 'syz.2.1776': attribute type 1 has an invalid length.
[   63.539293][ T4453] erofs: (device loop4): mounted with root inode @ nid 36.
[   63.548553][ T4453] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[   63.553110][ T4457] xt_hashlimit: max too large, truncated to 1048576
[   63.714554][ T4474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1798'.
[   63.831234][ T4451] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   63.839277][ T4451] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   63.843652][ T4492] netlink: 'syz.4.1806': attribute type 1 has an invalid length.
[   63.865813][ T4451] F2FS-fs (loop1): Found nat_bits in checkpoint
[   63.883462][ T4458] F2FS-fs (loop2): invalid crc value
[   63.911654][ T4458] F2FS-fs (loop2): Found nat_bits in checkpoint
[   63.918363][ T4451] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   63.929872][ T4451] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   63.973558][ T4458] F2FS-fs (loop2): Start checkpoint disabled!
[   64.012321][ T4494] attempt to access beyond end of device
[   64.012321][ T4494] loop1: rw=2049, want=45104, limit=40427
[   64.024976][ T4458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   64.050939][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'.
[   64.381724][ T4571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1842'.
[   64.409203][ T4574] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1843'.
[   64.530192][ T4600] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   64.537802][ T4600] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   64.543935][ T4606] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1857'.
[   64.546549][ T4600] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   64.562407][ T4600] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   64.572170][ T4600] EXT4-fs (loop2): 1 truncate cleaned up
[   64.579548][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,
[   64.598264][  T299] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   64.639801][ T3028] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   64.824140][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1883'.
[   64.879702][ T3028] usb 4-1: Using ep0 maxpacket: 8
[   64.921158][ T4677] ip_tables: iptables: counters copy to user failed while replacing table
[   64.969808][  T299] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.999780][ T3028] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.013158][ T3028] usb 4-1: config 0 interface 0 has no altsetting 0
[   65.020680][ T3028] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[   65.029841][ T3028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.038579][ T3028] usb 4-1: config 0 descriptor??
[   65.048401][ T4690] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   65.057264][ T4690] EXT4-fs (loop2): Test dummy encryption mode enabled
[   65.075209][ T4690] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue
[   65.139819][  T299] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   65.149162][  T299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.160488][  T299] usb 1-1: Product: syz
[   65.164732][  T299] usb 1-1: Manufacturer: syz
[   65.169599][  T299] usb 1-1: SerialNumber: syz
[   65.210561][  T299] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[   65.255646][ T4683] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12
[   65.263690][ T4683] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   65.283982][ T4683] F2FS-fs (loop4): invalid crc value
[   65.290768][ T4683] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   65.321952][ T4683] F2FS-fs (loop4): recover fsync data on readonly fs
[   65.328977][ T4683] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[   65.335906][ T4683] F2FS-fs (loop4): checkpoint=disable on readonly fs
[   65.521163][ T3028] logitech-djreceiver 0003:046D:C534.000E: unknown main item tag 0x2
[   65.529288][ T3028] logitech-djreceiver 0003:046D:C534.000E: unknown main item tag 0x7
[   65.542622][ T4719] EXT4-fs (loop4): Ignoring removed oldalloc option
[   65.550490][ T4719] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   65.562885][ T4719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   65.575821][ T4719] EXT4-fs (loop4): 1 orphan inode deleted
[   65.581783][ T4719] EXT4-fs (loop4): 1 truncate cleaned up
[   65.587410][ T4719] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,dioread_nolock,bsddf,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,grpid,oldalloc,
[   65.608282][ T4719] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #12: block 7: comm syz.4.1908: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[   65.627133][ T4719] EXT4-fs (loop4): Remounting filesystem read-only
[   65.689804][ T3028] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   65.727783][   T15] usb 4-1: USB disconnect, device number 5
[   65.939747][ T3028] usb 3-1: Using ep0 maxpacket: 16
[   66.049718][  T572] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   66.099773][ T3028] usb 3-1: unable to get BOS descriptor or descriptor too short
[   66.179774][ T3028] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   66.289729][  T572] usb 2-1: Using ep0 maxpacket: 32
[   66.350146][ T3028] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   66.359316][ T3028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.370422][ T3028] usb 3-1: Product: syz
[   66.374584][ T3028] usb 3-1: Manufacturer: syz
[   66.379160][ T3028] usb 3-1: SerialNumber: syz
[   66.409756][  T572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   66.421939][  T572] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   66.431713][  T572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   66.441551][  T572] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   66.451392][  T572] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   66.464731][  T572] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   66.467500][ T4766] netlink: 'syz.3.1930': attribute type 1 has an invalid length.
[   66.474017][  T572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.482027][ T4766] netlink: 'syz.3.1930': attribute type 2 has an invalid length.
[   66.493166][  T572] usb 2-1: config 0 descriptor??
[   66.502645][ T4766] netlink: 'syz.3.1930': attribute type 1 has an invalid length.
[   66.510439][ T4766] netlink: 'syz.3.1930': attribute type 2 has an invalid length.
[   66.526427][ T4768] tap0: tun_chr_ioctl cmd 1074025680
[   66.576761][   T24] kauditd_printk_skb: 150 callbacks suppressed
[   66.576774][   T24] audit: type=1400 audit(2000000027.109:982): avc:  denied  { mount } for  pid=4769 comm="syz.3.1932" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   66.577209][ T4770] Line length is too long: Should be less than 4094
[   66.583259][   T24] audit: type=1400 audit(2000000027.109:983): avc:  denied  { search } for  pid=4769 comm="syz.3.1932" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   66.635793][ T3028] usb 3-1: Audio class v2/v3 interfaces need an interface association
[   66.640272][   T24] audit: type=1400 audit(2000000027.149:984): avc:  denied  { unmount } for  pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   66.644899][ T3028] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[   66.676846][ T4774] program syz.3.1934 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.680139][   T24] audit: type=1400 audit(2000000027.219:985): avc:  denied  { read } for  pid=4775 comm="syz.4.1935" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   66.710309][   T24] audit: type=1400 audit(2000000027.219:986): avc:  denied  { open } for  pid=4775 comm="syz.4.1935" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   66.741444][ T4778] FAT-fs (loop3): error, clusters badly computed (1 != 163841)
[   66.750066][ T4778] FAT-fs (loop3): Filesystem has been set read-only
[   66.756769][ T4778] FAT-fs (loop3): error, clusters badly computed (2 != 163842)
[   66.764580][ T4778] FAT-fs (loop3): error, clusters badly computed (3 != 163843)
[   66.772931][  T572] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   66.784325][ T4778] FAT-fs (loop3): error, clusters badly computed (4 != 163844)
[   66.793975][ T4778] FAT-fs (loop3): error, clusters badly computed (5 != 163845)
[   66.801889][ T4778] FAT-fs (loop3): error, clusters badly computed (6 != 163846)
[   66.809515][ T4778] FAT-fs (loop3): error, clusters badly computed (7 != 163847)
[   66.817300][ T4778] FAT-fs (loop3): error, clusters badly computed (8 != 163848)
[   66.825009][ T4778] FAT-fs (loop3): error, clusters badly computed (9 != 163849)
[   66.832833][ T4778] FAT-fs (loop3): error, clusters badly computed (10 != 163850)
[   66.840795][ T4778] FAT-fs (loop3): error, clusters badly computed (11 != 163851)
[   66.848579][ T4778] FAT-fs (loop3): error, clusters badly computed (12 != 163852)
[   66.856476][ T3028] usb 3-1: 2:1 : can't get High Capability descriptor
[   66.866225][ T4778] FAT-fs (loop3): error, clusters badly computed (13 != 163853)
[   66.874210][ T4778] FAT-fs (loop3): error, clusters badly computed (14 != 163854)
[   66.882070][ T4778] FAT-fs (loop3): error, clusters badly computed (15 != 163855)
[   66.890019][ T4778] FAT-fs (loop3): error, clusters badly computed (16 != 163856)
[   66.897696][ T4778] FAT-fs (loop3): error, clusters badly computed (17 != 163857)
[   66.905586][ T4778] FAT-fs (loop3): error, clusters badly computed (18 != 163858)
[   66.913354][ T4778] FAT-fs (loop3): error, clusters badly computed (19 != 163859)
[   66.921293][ T4778] FAT-fs (loop3): error, clusters badly computed (20 != 163860)
[   66.928960][ T4778] FAT-fs (loop3): error, clusters badly computed (21 != 163861)
[   66.936856][ T4778] FAT-fs (loop3): error, clusters badly computed (22 != 163862)
[   66.944629][ T4778] FAT-fs (loop3): error, clusters badly computed (23 != 163863)
[   66.952482][ T4778] FAT-fs (loop3): error, clusters badly computed (24 != 163864)
[   66.960237][ T4778] FAT-fs (loop3): error, clusters badly computed (25 != 163865)
[   66.968040][ T4778] FAT-fs (loop3): error, clusters badly computed (26 != 163866)
[   66.975875][ T4778] FAT-fs (loop3): error, clusters badly computed (27 != 163867)
[   66.983895][ T4778] FAT-fs (loop3): error, clusters badly computed (28 != 163868)
[   66.991664][ T4778] FAT-fs (loop3): error, clusters badly computed (29 != 163869)
[   66.999438][ T4778] FAT-fs (loop3): error, clusters badly computed (30 != 163870)
[   67.007260][ T4778] FAT-fs (loop3): error, clusters badly computed (31 != 163871)
[   67.015116][ T4778] FAT-fs (loop3): error, clusters badly computed (32 != 163872)
[   67.022891][ T4778] FAT-fs (loop3): error, clusters badly computed (33 != 163873)
[   67.030879][ T4778] FAT-fs (loop3): error, clusters badly computed (34 != 163874)
[   67.038572][ T4778] FAT-fs (loop3): error, clusters badly computed (35 != 163875)
[   67.046479][ T4778] FAT-fs (loop3): error, clusters badly computed (36 != 163876)
[   67.054359][ T4778] FAT-fs (loop3): error, clusters badly computed (37 != 163877)
[   67.062400][ T4778] FAT-fs (loop3): error, clusters badly computed (38 != 163878)
[   67.070254][ T4778] FAT-fs (loop3): error, clusters badly computed (39 != 163879)
[   67.078106][ T4778] FAT-fs (loop3): error, clusters badly computed (40 != 163880)
[   67.086072][ T4778] FAT-fs (loop3): error, clusters badly computed (41 != 163881)
[   67.094073][ T4778] FAT-fs (loop3): error, clusters badly computed (42 != 163882)
[   67.101938][ T4778] FAT-fs (loop3): error, clusters badly computed (43 != 163883)
[   67.109908][ T4778] FAT-fs (loop3): error, clusters badly computed (44 != 163884)
[   67.111622][  T350] usb 3-1: USB disconnect, device number 8
[   67.117654][ T4778] FAT-fs (loop3): error, clusters badly computed (45 != 163885)
[   67.131365][ T4778] FAT-fs (loop3): error, clusters badly computed (46 != 163886)
[   67.139168][ T4778] FAT-fs (loop3): error, clusters badly computed (47 != 163887)
[   67.147192][ T4778] FAT-fs (loop3): error, clusters badly computed (48 != 163888)
[   67.155125][ T4778] FAT-fs (loop3): error, clusters badly computed (49 != 163889)
[   67.162919][ T4778] FAT-fs (loop3): error, clusters badly computed (50 != 163890)
[   67.170668][ T4778] FAT-fs (loop3): error, clusters badly computed (51 != 163891)
[   67.178395][ T4778] FAT-fs (loop3): error, clusters badly computed (52 != 163892)
[   67.186133][ T4778] FAT-fs (loop3): error, clusters badly computed (53 != 163893)
[   67.193859][ T4778] FAT-fs (loop3): error, clusters badly computed (54 != 163894)
[   67.201599][ T4778] FAT-fs (loop3): error, clusters badly computed (55 != 163895)
[   67.209302][ T4778] FAT-fs (loop3): error, clusters badly computed (56 != 163896)
[   67.217259][ T4778] FAT-fs (loop3): error, clusters badly computed (57 != 163897)
[   67.225178][ T4778] FAT-fs (loop3): error, clusters badly computed (58 != 163898)
[   67.233316][ T4778] FAT-fs (loop3): error, clusters badly computed (59 != 163899)
[   67.241684][ T4778] FAT-fs (loop3): error, clusters badly computed (60 != 163900)
[   67.249622][ T4778] FAT-fs (loop3): error, clusters badly computed (61 != 163901)
[   67.257751][ T4778] FAT-fs (loop3): error, clusters badly computed (62 != 163902)
[   67.265765][ T4778] FAT-fs (loop3): error, clusters badly computed (63 != 163903)
[   67.273714][ T4778] FAT-fs (loop3): error, clusters badly computed (64 != 163904)
[   67.281549][ T4778] FAT-fs (loop3): error, clusters badly computed (65 != 163905)
[   67.289494][ T4778] FAT-fs (loop3): error, clusters badly computed (66 != 163906)
[   67.297259][ T4778] FAT-fs (loop3): error, clusters badly computed (67 != 163907)
[   67.305119][ T4778] FAT-fs (loop3): error, clusters badly computed (68 != 163908)
[   67.312889][ T4778] FAT-fs (loop3): error, clusters badly computed (69 != 163909)
[   67.320682][ T4778] FAT-fs (loop3): error, clusters badly computed (70 != 163910)
[   67.328332][ T4778] FAT-fs (loop3): error, clusters badly computed (71 != 163911)
[   67.336027][ T4778] FAT-fs (loop3): error, clusters badly computed (72 != 163912)
[   67.343741][ T4778] FAT-fs (loop3): error, clusters badly computed (73 != 163913)
[   67.351451][ T4778] FAT-fs (loop3): error, clusters badly computed (74 != 163914)
[   67.352258][  T350] usb 1-1: USB disconnect, device number 8
[   67.359224][ T4778] FAT-fs (loop3): error, clusters badly computed (75 != 163915)
[   67.373110][ T4778] FAT-fs (loop3): error, clusters badly computed (76 != 163916)
[   67.381542][ T4778] FAT-fs (loop3): error, clusters badly computed (77 != 163917)
[   67.389484][ T4778] FAT-fs (loop3): error, clusters badly computed (78 != 163918)
[   67.401215][ T4781] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[   67.408960][ T4778] FAT-fs (loop3): error, clusters badly computed (79 != 163919)
[   67.415923][ T4781] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   67.424741][ T4778] FAT-fs (loop3): error, clusters badly computed (80 != 163920)
[   67.432664][ T4778] FAT-fs (loop3): error, clusters badly computed (81 != 163921)
[   67.440414][ T4778] FAT-fs (loop3): error, clusters badly computed (82 != 163922)
[   67.448320][ T4778] FAT-fs (loop3): error, clusters badly computed (83 != 163923)
[   67.456445][ T4778] FAT-fs (loop3): error, clusters badly computed (84 != 163924)
[   67.457938][ T4781] F2FS-fs (loop4): invalid crc value
[   67.464198][ T4778] FAT-fs (loop3): error, clusters badly computed (85 != 163925)
[   67.477546][ T4778] FAT-fs (loop3): error, clusters badly computed (86 != 163926)
[   67.485376][ T4778] FAT-fs (loop3): error, clusters badly computed (87 != 163927)
[   67.493571][ T4778] FAT-fs (loop3): error, clusters badly computed (88 != 163928)
[   67.501518][ T4778] FAT-fs (loop3): error, clusters badly computed (89 != 163929)
[   67.509438][ T4778] FAT-fs (loop3): error, clusters badly computed (90 != 163930)
[   67.517407][ T4778] FAT-fs (loop3): error, clusters badly computed (91 != 163931)
[   67.525227][ T4778] FAT-fs (loop3): error, clusters badly computed (92 != 163932)
[   67.533080][ T4778] FAT-fs (loop3): error, clusters badly computed (93 != 163933)
[   67.540909][ T4778] FAT-fs (loop3): error, clusters badly computed (94 != 163934)
[   67.548817][ T4781] F2FS-fs (loop4): Found nat_bits in checkpoint
[   67.548878][ T4778] FAT-fs (loop3): error, clusters badly computed (95 != 163935)
[   67.564263][ T4778] FAT-fs (loop3): error, clusters badly computed (96 != 163936)
[   67.572022][ T4778] FAT-fs (loop3): error, clusters badly computed (97 != 163937)
[   67.587491][ T4781] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   67.594737][ T4781] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   67.658611][ T4794] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   67.666629][ T4794] FAT-fs (loop0): Filesystem has been set read-only
[   67.673906][ T4794] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   67.682354][ T4794] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   67.698962][ T4805] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[   67.708679][ T4781] SELinux:  Context : is not valid (left unmapped).
[   67.716922][   T24] audit: type=1400 audit(2000000028.249:987): avc:  denied  { relabelto } for  pid=4780 comm="syz.4.1937" name="rdma.current" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[   67.907956][ T4808] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   67.915930][ T4808] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   67.925087][ T4808] F2FS-fs (loop3): invalid crc value
[   67.958647][ T4808] F2FS-fs (loop3): Found nat_bits in checkpoint
[   68.000039][ T4808] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   68.015948][ T4808] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   68.053405][ T4837] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1950'.
[   68.095303][   T24] audit: type=1400 audit(2000000028.629:988): avc:  denied  { read } for  pid=4840 comm="syz.4.1960" name="trigger" dev="tracefs" ino=2446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   68.146142][  T300] attempt to access beyond end of device
[   68.146142][  T300] loop3: rw=1, want=45104, limit=40427
[   68.277965][ T4863] xt_hashlimit: size too large, truncated to 1048576
[   68.311560][ T4872] input: syz1 as /devices/virtual/input/input19
[   68.353875][   T24] audit: type=1400 audit(2000000028.889:989): avc:  denied  { load_policy } for  pid=4876 comm="syz.3.1975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   68.353903][ T4877] SELinux: failed to load policy
[   68.766044][ T4900] EXT4-fs (loop0): Ignoring removed nobh option
[   68.781727][ T4900] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27
[   68.790469][ T4900] EXT4-fs (loop0): Remounting filesystem read-only
[   68.794717][  T350] usb 2-1: USB disconnect, device number 6
[   68.797062][ T4900] EXT4-fs error (device loop0): ext4_dirty_inode:6181: inode #3: comm syz.0.1985: mark_inode_dirty error
[   68.797472][ T4900] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27
[   68.805724][  T350] usblp0: removed
[   68.823484][ T4903] EXT4-fs (loop2): Ignoring removed nobh option
[   68.832892][ T4903] EXT4-fs (loop2): Ignoring removed orlov option
[   68.832932][ T4900] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #3: comm syz.0.1985: mark_inode_dirty error
[   68.839340][ T4903] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   68.855839][ T4900] Quota error (device loop0): write_blk: dquota write failed
[   68.871454][ T4903] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,dioread_nolock,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue
[   68.893720][ T4900] Quota error (device loop0): qtree_write_dquot: Error -27 occurred while creating quota
[   68.904411][ T4900] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.1985: Failed to acquire dquot type 0
[   68.920084][ T4900] EXT4-fs (loop0): 1 truncate cleaned up
[   68.926014][ T4900] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,
[   68.935824][ T4900] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.061381][ T4926] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   69.211377][ T4933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   69.229703][  T350] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   69.599903][  T350] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.615159][  T350] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   69.628485][  T350] usb 2-1: config 0 interface 0 has no altsetting 0
[   69.636109][  T350] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   69.647109][  T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.663318][  T350] usb 2-1: config 0 descriptor??
[   69.684991][ T4960] EXT4-fs (loop4): Test dummy encryption mode enabled
[   69.704067][ T4965] caif0: tun_chr_ioctl cmd 1074025672
[   69.709585][ T4965] caif0: ignored: set checksum enabled
[   69.717779][ T4960] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,min_batch_time=0x0000000000000006,errors=remount-ro,debug_want_extra_isize=0x0000000000000200,
[   69.743018][ T4960] EXT4-fs error (device loop4): ext4_readdir:223: inode #12: comm syz.4.2008: path (unknown): directory fails checksum at offset 0
[   69.756797][ T4960] EXT4-fs (loop4): Remounting filesystem read-only
[   70.157376][ T5012] tipc: Started in network mode
[   70.163119][ T5012] tipc: Own node identity aaaaaaaaaaaa, cluster identity 4711
[   70.171141][  T350] hid (null): nested delimiters
[   70.171800][ T5012] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   70.181201][  T350] hid-multitouch 0003:0EEF:72C4.000F: nested delimiters
[   70.195885][  T350] hid-multitouch 0003:0EEF:72C4.000F: item 0 4 2 10 parsing failed
[   70.205968][  T350] hid-multitouch: probe of 0003:0EEF:72C4.000F failed with error -22
[   70.222424][ T5022] cgroup: syz.4.2036 (5022) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   70.244422][ T5022] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   70.395972][ T5029] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   70.424065][ T1032] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   70.438345][  T302] usb 2-1: USB disconnect, device number 7
[   70.455362][ T5036] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   70.554644][ T5054] caif0: tun_chr_ioctl cmd 2148553947
[   70.582413][ T5064] device syz_tun entered promiscuous mode
[   70.588300][ T5064] device macsec1 entered promiscuous mode
[   70.594830][ T5064] device syz_tun left promiscuous mode
[   70.688775][ T5078] netlink: 'syz.0.2060': attribute type 12 has an invalid length.
[   70.704759][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2062'.
[   70.715365][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'.
[   70.725217][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'.
[   70.735721][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'.
[   70.748309][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'.
[   70.779137][ T5096] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   70.791452][ T5096] EXT4-fs (loop2): Ignoring removed oldalloc option
[   70.803511][ T5096] EXT4-fs (loop2): orphan cleanup on readonly fs
[   70.812249][ T5096] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #4: comm syz.2.2069: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048)
[   70.845623][ T5096] EXT4-fs error (device loop2): ext4_quota_enable:6454: comm syz.2.2069: Bad quota inode: 4, type: 1
[   70.875747][ T5096] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   70.890791][ T5096] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   70.898463][ T5096] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noblock_validity,jqfmt=vfsold,oldalloc,,errors=continue
[   70.973160][ T5120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2080'.
[   71.227497][ T5170] syz.2.2102[5170] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   71.227559][ T5170] syz.2.2102[5170] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   71.282434][ T5176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.318158][ T5130] F2FS-fs (loop1): invalid crc value
[   71.359848][ T3028] tipc: 32-bit node address hash set to aaaa0000
[   71.377791][ T5130] F2FS-fs (loop1): Found nat_bits in checkpoint
[   71.403216][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'.
[   71.489717][ T5130] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   71.589805][ T5203] input: syz0 as /devices/virtual/input/input20
[   71.652652][  T279] attempt to access beyond end of device
[   71.652652][  T279] loop1: rw=2049, want=45104, limit=40427
[   71.887241][ T5175] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   71.911812][ T5175] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   71.949996][ T5175] F2FS-fs (loop2): invalid crc value
[   71.975056][ T5175] F2FS-fs (loop2): Found nat_bits in checkpoint
[   71.979718][   T24] kauditd_printk_skb: 24 callbacks suppressed
[   71.979730][   T24] audit: type=1400 audit(2000000288.510:1014): avc:  denied  { write } for  pid=5221 comm="syz.0.2125" name="mcfilter" dev="proc" ino=4026532478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   71.992425][ T5224] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   72.053579][ T5175] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   72.070736][ T5175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   72.118529][ T5175] attempt to access beyond end of device
[   72.118529][ T5175] loop2: rw=2049, want=45104, limit=40427
[   72.261286][ T5244] FAT-fs (loop1): Directory bread(block 199916) failed
[   72.270474][ T5244] FAT-fs (loop1): Directory bread(block 199917) failed
[   72.277605][ T5244] FAT-fs (loop1): Directory bread(block 199918) failed
[   72.284840][ T5244] FAT-fs (loop1): Directory bread(block 199919) failed
[   72.292163][ T5244] FAT-fs (loop1): Directory bread(block 199920) failed
[   72.299091][ T5244] FAT-fs (loop1): Directory bread(block 199921) failed
[   72.311263][ T5247] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   72.318716][ T5247] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   72.319717][ T5244] FAT-fs (loop1): Directory bread(block 199922) failed
[   72.337657][ T5244] FAT-fs (loop1): Directory bread(block 199923) failed
[   72.345036][ T5247] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   72.345465][   T24] audit: type=1400 audit(2000000544.882:1015): avc:  denied  { mount } for  pid=5243 comm="syz.1.2134" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   72.371743][ T5244] FAT-fs (loop1): Directory bread(block 199916) failed
[   72.380571][ T5247] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock,
[   72.400707][ T5244] FAT-fs (loop1): Directory bread(block 199917) failed
[   72.407253][ T5247] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.448196][ T5247] EXT4-fs error (device loop3): ext4_free_blocks:5690: comm syz.3.2135: Freeing blocks not in datazone - block = 0, count = 16
[   72.461758][ T5247] EXT4-fs (loop3): Remounting filesystem read-only
[   72.641252][ T5271] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,minixdf,quota,errors=remount-ro,data_err=ignore,i_version,grpid,
[   72.655726][ T5271] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.699698][ T1059] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   72.817537][ T5289] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   72.827977][ T5289] device gretap0 entered promiscuous mode
[   72.939708][ T1059] usb 3-1: Using ep0 maxpacket: 32
[   73.038487][ T5300] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,
[   73.049822][ T5300] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.067314][   T24] audit: type=1400 audit(2000000545.602:1016): avc:  denied  { unlink } for  pid=5299 comm="syz.4.2155" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   73.067394][ T5300] EXT4-fs error (device loop4): ext4_get_first_dir_block:3708: inode #12: comm syz.4.2155: Directory hole found for htree leaf block 0
[   73.094673][   T24] audit: type=1400 audit(2000000545.602:1017): avc:  denied  { rename } for  pid=5299 comm="syz.4.2155" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   73.124778][ T1059] usb 3-1: unable to get BOS descriptor or descriptor too short
[   73.129419][ T5314] device syz_tun entered promiscuous mode
[   73.140061][ T5300] EXT4-fs (loop4): Remounting filesystem read-only
[   73.146751][ T5313] device syz_tun left promiscuous mode
[   73.146932][   T24] audit: type=1400 audit(2000000545.672:1018): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   73.293180][   T24] audit: type=1400 audit(2000000545.832:1019): avc:  denied  { bind } for  pid=5327 comm="syz.0.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.316507][ T5329] xt_hashlimit: size too large, truncated to 1048576
[   73.389763][ T1059] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   73.405715][ T1059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.413772][ T5339] loop: Write error at byte offset 4, length 3584.
[   73.413818][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   73.431470][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[   73.439738][ T1059] usb 3-1: Product: syz
[   73.445511][ T1059] usb 3-1: Manufacturer: syz
[   73.456004][ T1059] usb 3-1: SerialNumber: syz
[   73.867850][ T5367] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   73.876390][ T5367] EXT4-fs (loop1): orphan cleanup on readonly fs
[   73.883221][ T5367] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.2184: Freeing blocks not in datazone - block = 0, count = 4096
[   73.897461][ T5367] EXT4-fs (loop1): 1 orphan inode deleted
[   73.903464][ T5367] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   73.917138][ T5367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.2184: path /402/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   73.937237][ T1059] usb 3-1: unit 0 not found!
[   73.942133][   T24] audit: type=1400 audit(2000000547.477:1020): avc:  denied  { mounton } for  pid=5373 comm="syz.0.2186" path="/483/file0" dev="incremental-fs" ino=2501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   73.942463][ T5367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.2184: path /402/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   73.988654][ T5367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 18: comm syz.1.2184: path /402/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   73.995262][   T24] audit: type=1400 audit(2000000547.507:1021): avc:  denied  { getattr } for  pid=5373 comm="syz.0.2186" name="/" dev="incremental-fs" ino=2501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   74.022957][ T5375] EXT4-fs error (device loop1): ext4_lookup:1830: inode #15: comm syz.1.2184: iget: bad i_size value: 1970324836974602
[   74.047344][ T5367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 19: comm syz.1.2184: path /402/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.069584][ T5367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 20: comm syz.1.2184: path /402/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.099828][ T5367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 21: comm syz.1.2184: path /402/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.127775][ T5367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 22: comm syz.1.2184: path /402/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.153204][ T5367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 23: comm syz.1.2184: path /402/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.217833][ T1059] usb 3-1: USB disconnect, device number 9
[   74.264268][ T5392] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   74.280209][ T5392] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   74.325103][ T5383] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   74.329209][ T5392] EXT4-fs error (device loop4): ext4_lookup:1830: inode #16: comm syz.4.2195: iget: bad i_size value: -6780169239006272728
[   74.331632][   T24] audit: type=1400 audit(2000000547.857:1022): avc:  denied  { read } for  pid=5391 comm="syz.4.2195" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   74.367508][ T5383] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   74.377538][ T5383] F2FS-fs (loop0): invalid crc value
[   74.387175][ T5383] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   74.423306][ T5383] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   74.430976][ T5383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   74.458914][ T5383] attempt to access beyond end of device
[   74.458914][ T5383] loop0: rw=34817, want=77952, limit=40427
[   74.477585][  T281] attempt to access beyond end of device
[   74.477585][  T281] loop0: rw=2049, want=45104, limit=40427
[   74.497258][   T24] audit: type=1326 audit(2000000548.027:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.4.2206" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa50b2159 code=0x7ffc0000
[   74.583866][ T5427] exfat: Deprecated parameter 'utf8'
[   74.594403][ T5427] exfat: Deprecated parameter 'namecase'
[   74.600342][ T5427] exfat: Deprecated parameter 'utf8'
[   74.612833][ T5427] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   74.710787][ T5435] EXT4-fs (loop0): Ignoring removed orlov option
[   74.717411][ T5435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   74.730009][ T5438] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55 sclass=netlink_audit_socket pid=5438 comm=syz.2.2212
[   74.733705][ T5435] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #16: comm syz.0.2210: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[   74.742827][ T5438] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=5438 comm=syz.2.2212
[   74.766369][ T5435] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2210: couldn't read orphan inode 16 (err -117)
[   74.786920][ T5435] EXT4-fs (loop0): 1 orphan inode deleted
[   74.793433][ T5435] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,resgid=0x000000000000ee00,,errors=continue
[   74.839074][ T5435] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.2210: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0
[   74.885067][ T5453] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[   74.893052][ T5453] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[   74.972068][ T5455] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   75.107414][ T5469] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[   75.138248][ T5467] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   75.147689][ T5467] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   75.157565][ T5467] F2FS-fs (loop0): invalid crc value
[   75.161213][ T5469] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930443)
[   75.161213][ T5469] 
[   75.174159][ T5481] ip_tables: iptables: counters copy to user failed while replacing table
[   75.184009][ T5469] exFAT-fs (loop1): Filesystem has been set read-only
[   75.191126][ T5469] exFAT-fs (loop1): error, failed to bmap (inode : ffff888135333670 iblock : 24, err : -5)
[   75.202295][ T5467] F2FS-fs (loop0): Found nat_bits in checkpoint
[   75.249461][ T5467] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   75.256694][ T5467] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   75.317927][ T5486] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue
[   75.335668][ T5486] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.381586][ T5486] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   75.416823][ T5486] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[   75.429981][ T5486] EXT4-fs (loop3): This should not happen!! Data will be lost
[   75.429981][ T5486] 
[   75.459673][ T5486] EXT4-fs (loop3): Total free blocks count 0
[   75.465968][ T5486] EXT4-fs (loop3): Free/Dirty block details
[   75.472263][ T5486] EXT4-fs (loop3): free_blocks=65280
[   75.477688][ T5486] EXT4-fs (loop3): dirty_blocks=33
[   75.483134][ T5486] EXT4-fs (loop3): Block reservation details
[   75.489136][ T5486] EXT4-fs (loop3): i_reserved_data_blocks=33
[   75.663429][ T5525] EXT4-fs (loop2): Test dummy encryption mode enabled
[   75.673968][ T5525] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   75.698399][ T5525] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   75.720856][ T5525] System zones: 0-5
[   75.725476][ T5525] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,
[   75.840623][ T5559] pimreg: tun_chr_ioctl cmd 2147767521
[   75.912567][   T25] wiimote 0005:057E:0306.0010: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[   75.922734][   T25] wiimote 0005:057E:0306.0010: New device registered
[   76.020363][ T5582] erofs: (device loop2): mounted with root inode @ nid 36.
[   76.030180][   T41] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[   76.047229][ T5582] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[   76.201316][  T350] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   76.499948][ T5569] wiimote 0005:057E:0306.0010: Unhandled report 0 size 103
[   76.507816][ T5568] wiimote 0005:057E:0306.0010: Device removed
[   76.519427][ T5594] F2FS-fs (loop2): invalid crc value
[   76.553724][ T5594] F2FS-fs (loop2): Found nat_bits in checkpoint
[   76.560217][  T350] usb 5-1: unable to get BOS descriptor or descriptor too short
[   76.634171][ T5594] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   76.684279][ T5594] ------------[ cut here ]------------
[   76.689858][ T5594] WARNING: CPU: 0 PID: 5594 at fs/inode.c:361 inc_nlink+0x123/0x130
[   76.698233][ T5594] Modules linked in:
[   76.702608][  T350] usb 5-1: unable to read config index 0 descriptor/start: -71
[   76.711804][  T350] usb 5-1: can't read configurations, error -71
[   76.718965][ T5594] CPU: 0 PID: 5594 Comm: syz.2.2275 Tainted: G        W         syzkaller #0
[   76.718980][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   76.738682][ T5594] RIP: 0010:inc_nlink+0x123/0x130
[   76.743949][ T5594] Code: f0 f1 ff e9 37 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 27 f0 f1 ff e9 3f ff ff ff e8 ed 6d b7 ff <0f> 0b eb 82 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53
[   76.763864][ T5594] RSP: 0018:ffffc90000e27928 EFLAGS: 00010283
[   76.778653][ T5594] RAX: ffffffff81ad4763 RBX: ffff888132dd9a08 RCX: 0000000000080000
[   76.788752][ T5594] RDX: ffffc9000257f000 RSI: 000000000000064e RDI: 000000000000064f
[   76.797235][ T5594] RBP: ffffc90000e27950 R08: ffff888132dda987 R09: 1ffff110265bb530
[   76.805717][ T5594] R10: dffffc0000000000 R11: ffffed10265bb531 R12: dffffc0000000000
[   76.814692][ T5594] R13: 1ffff110265bb341 R14: ffff888132dd99c0 R15: 0000000000000000
[   76.827139][ T5594] FS:  00007faa3c62b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   76.836752][ T5594] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   76.844214][ T5594] CR2: 00007f5594eb5060 CR3: 000000011b015000 CR4: 00000000003506b0
[   76.852649][ T5594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   76.870214][ T5594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   76.878482][ T5594] Call Trace:
[   76.882262][ T5594]  f2fs_update_parent_metadata+0xcb/0x2d0
[   76.888047][ T5594]  f2fs_add_inline_entry+0x4ee/0x630
[   76.894500][ T5594]  ? do_convert_inline_dir+0x1710/0x1710
[   76.900543][ T5594]  ? __init_rwsem+0x1c0/0x1c0
[   76.905355][ T5594]  ? memset+0x35/0x40
[   76.909410][ T5594]  ? f2fs_init_casefolded_name+0x79/0x470
[   76.915830][ T5594]  f2fs_add_dentry+0x1f8/0x350
[   76.920925][ T5594]  ? f2fs_add_regular_entry+0x9b0/0x9b0
[   76.926619][ T5594]  ? trace_f2fs_new_inode+0x1f/0x120
[   76.932192][ T5594]  f2fs_do_add_link+0x260/0x370
[   76.937549][ T5594]  ? f2fs_add_dentry+0x350/0x350
[   76.942883][ T5594]  ? __init_rwsem+0x1c0/0x1c0
[   76.948114][ T5594]  ? may_create+0x5c3/0x7c0
[   76.957943][ T5594]  f2fs_mkdir+0x42b/0x6b0
[   76.963258][ T5594]  ? f2fs_symlink+0x9a0/0x9a0
[   76.985860][   T24] kauditd_printk_skb: 17 callbacks suppressed
[   76.985873][   T24] audit: type=1400 audit(2000000550.517:1041): avc:  denied  { ioctl } for  pid=5634 comm="syz.1.2292" path="socket:[32831]" dev="sockfs" ino=32831 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.986015][ T5594]  ? selinux_inode_mkdir+0x22/0x30
[   76.993630][ T5635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2291'.
[   77.021359][ T5594]  ? security_inode_mkdir+0xbd/0x110
[   77.022347][   T25] wiimote 0005:057E:0306.0010: detected device: Nintendo Wii Remote (Gen 1)
[   77.031071][ T5594]  vfs_mkdir+0x42c/0x600
[   77.031085][ T5594]  do_mkdirat+0x14c/0x340
[   77.031097][ T5594]  __x64_sys_mkdir+0x60/0x70
[   77.031109][ T5594]  do_syscall_64+0x31/0x40
[   77.031120][ T5594]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   77.031130][ T5594] RIP: 0033:0x7faa3dbd2159
[   77.031150][ T5594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.053775][   T25] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input22
[   77.074388][ T5594] RSP: 002b:00007faa3c62b028 EFLAGS: 00000246
[   77.108310][   T25] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input23
[   77.131118][   T25] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input21
[   77.150975][ T5594]  ORIG_RAX: 0000000000000053
[   77.161334][ T5594] RAX: ffffffffffffffda RBX: 00007faa3de59fa0 RCX: 00007faa3dbd2159
[   77.169482][ T5594] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000000
[   77.199562][   T24] audit: type=1400 audit(2000000550.727:1042): avc:  denied  { remount } for  pid=5646 comm="syz.0.2297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   77.204993][ T5594] RBP: 00007faa3dc6906b R08: 0000000000000000 R09: 0000000000000000
[   77.233347][ T5594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.241532][ T5594] R13: 00007faa3de5a038 R14: 00007faa3de59fa0 R15: 00007ffcc5064688
[   77.249607][ T5594] ---[ end trace cd52047858f981cf ]---
[   77.273778][ T5596] F2FS-fs (loop3): invalid crc value
[   77.296873][ T5652] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   77.305229][ T5652] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement.
[   77.312234][ T5596] F2FS-fs (loop3): Found nat_bits in checkpoint
[   77.344399][ T5596] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   77.449880][ T5652] exfat: Deprecated parameter 'utf8'
[   77.455343][ T5652] exfat: Deprecated parameter 'namecase'
[   77.461283][ T5652] exfat: Deprecated parameter 'namecase'
[   77.467036][ T5652] exfat: Deprecated parameter 'utf8'
[   77.492822][ T5652] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   78.061920][ T5685] F2FS-fs (loop2): invalid crc value
[   78.103101][ T5687]  loop1: p1 < > p4
[   78.114955][ T5687] loop1: p4 size 722688 extends beyond EOD, truncated
[   78.124646][ T5685] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   78.176326][ T5685] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   78.203016][  T363] udevd[363]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   78.210749][ T1574] udevd[1574]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   78.240182][   T24] audit: type=1400 audit(2000000551.777:1043): avc:  denied  { create } for  pid=5684 comm="syz.2.2312" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[   78.275492][  T283] attempt to access beyond end of device
[   78.275492][  T283] loop2: rw=2049, want=45104, limit=40427
[   78.290481][ T5701] nr0: tun_chr_ioctl cmd 1074025677
[   78.295811][ T5701] nr0: linktype set to 768
[   78.498254][ T5681] F2FS-fs (loop0): Test dummy encryption mode enabled
[   78.516756][ T5681] F2FS-fs (loop0): invalid crc value
[   78.539152][ T5681] F2FS-fs (loop0): Found nat_bits in checkpoint
[   78.576549][ T5681] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   78.633130][ T5723] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #3: block 1: comm syz.2.2325: lblock 1 mapped to illegal pblock 1 (length 1)
[   78.653526][ T5723] Quota error (device loop2): write_blk: dquota write failed
[   78.661799][ T5723] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   78.673243][ T5723] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.2325: Failed to acquire dquot type 0
[   78.692448][ T5723] EXT4-fs error (device loop2): ext4_free_blocks:5690: comm syz.2.2325: Freeing blocks not in datazone - block = 0, count = 4096
[   78.706418][ T5723] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2325: Invalid inode bitmap blk 0 in block_group 0
[   78.719202][    T7] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   78.733713][ T5723] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem
[   78.734994][    T7] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   78.742431][ T5723] EXT4-fs (loop2): 1 orphan inode deleted
[   78.751050][    T7] EXT4-fs error (device loop2): ext4_release_dquot:6266: comm kworker/u4:0: Failed to release dquot type 0
[   78.756672][ T5723] EXT4-fs (loop2): mounted filesystem without journal. Opts: ��; abort,delalloc,auto_da_alloc,barrier,init_itable,inlinecrypt,usrquota,nombcache,,errors=continue
[   78.903223][ T5739] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   79.066999][   T24] audit: type=1400 audit(2000000552.597:1044): avc:  denied  { read } for  pid=5753 comm="syz.0.2336" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[   79.090248][   T24] audit: type=1400 audit(2000000552.597:1045): avc:  denied  { open } for  pid=5753 comm="syz.0.2336" path="/525/proc/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[   79.137464][   T24] audit: type=1400 audit(2000000552.667:1046): avc:  denied  { read write } for  pid=5757 comm="syz.0.2339" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   79.161223][ T5758] zero sized request
[   79.167290][   T24] audit: type=1400 audit(2000000552.667:1047): avc:  denied  { open } for  pid=5757 comm="syz.0.2339" path="/527/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   79.281662][ T5778] xt_hashlimit: size too large, truncated to 1048576
[   79.296391][ T5772] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,resuid=0x0000000000000000,nombcache,inode_readahead_blks=0x0000000000000002,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,block_validity,min_batch_time=0x0000000000008001,init_itable=0x0000000000000006,errors=continue
[   79.332326][ T5781] xt_hashlimit: size too large, truncated to 1048576
[   79.340072][ T5772] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   79.358345][ T5772] EXT4-fs error (device loop0): __ext4_new_inode:1288: comm syz.0.2345: failed to insert inode 12: doubly allocated?
[   79.763285][ T5813] EXT4-fs (loop2): Ignoring removed nobh option
[   79.770397][ T5813] EXT4-fs (loop2): Unrecognized mount option "grpquota.." or missing value
[   79.781884][ T5821] tipc: Started in network mode
[   79.786779][ T5821] tipc: Own node identity ac14142f, cluster identity 4711
[   79.794340][ T5821] tipc: Enabled bearer <udp:syz2>, priority 22
[   79.801506][ T5821] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2365'.
[   80.102930][ T5867] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   80.110202][ T5867] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement.
[   80.169739][  T400] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   80.228581][ T5867] exfat: Deprecated parameter 'utf8'
[   80.239973][ T5867] exfat: Deprecated parameter 'namecase'
[   80.245741][ T5867] exfat: Deprecated parameter 'namecase'
[   80.251692][ T5867] exfat: Deprecated parameter 'utf8'
[   80.272185][ T5867] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   80.278404][ T5875] pim6reg0: tun_chr_ioctl cmd 1074025677
[   80.290005][ T5875] pim6reg0: linktype set to 804
[   80.324574][ T5872] EXT4-fs (loop3): Test dummy encryption mode enabled
[   80.357510][ T5872] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   80.369591][ T5872] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   80.378391][ T5872] System zones: 0-5
[   80.383241][ T5872] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,
[   80.409747][  T400] usb 1-1: Using ep0 maxpacket: 32
[   80.503511][ T5892] netlink: 'syz.2.2398': attribute type 1 has an invalid length.
[   80.529806][  T400] usb 1-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30
[   80.547449][ T5896] netlink: 'syz.3.2396': attribute type 2 has an invalid length.
[   80.555288][  T400] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[   80.569682][  T400] usb 1-1: config 0 interface 0 has no altsetting 0
[   80.576298][  T400] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[   80.590055][  T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.601000][  T400] usb 1-1: config 0 descriptor??
[   80.772550][ T5880] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[   80.781347][ T5880] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   80.790282][ T5880] F2FS-fs (loop1): invalid crc value
[   80.797316][ T5880] F2FS-fs (loop1): Found nat_bits in checkpoint
[   80.818874][ T5880] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   80.826110][ T5880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   80.879723][ T1059] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   80.909722][  T572] tipc: 32-bit node address hash set to 2f1414ac
[   81.080493][  T400] zydacron 0003:13EC:0006.0011: item fetching failed at offset 0/40
[   81.088731][  T400] zydacron 0003:13EC:0006.0011: parse failed
[   81.094984][  T400] zydacron: probe of 0003:13EC:0006.0011 failed with error -22
[   81.119723][ T1059] usb 4-1: Using ep0 maxpacket: 32
[   81.285280][  T350] usb 1-1: USB disconnect, device number 9
[   81.299918][ T1059] usb 4-1: unable to get BOS descriptor or descriptor too short
[   81.524883][ T5923] FAT-fs (loop2): Directory bread(block 64) failed
[   81.531487][ T5923] FAT-fs (loop2): Directory bread(block 65) failed
[   81.538089][ T5923] FAT-fs (loop2): Directory bread(block 66) failed
[   81.539791][ T1059] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   81.544646][ T5923] FAT-fs (loop2): Directory bread(block 67) failed
[   81.553988][ T1059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.560489][ T5923] FAT-fs (loop2): Directory bread(block 68) failed
[   81.568575][ T1059] usb 4-1: Product: syz
[   81.574918][ T5923] FAT-fs (loop2): Directory bread(block 69) failed
[   81.579153][ T1059] usb 4-1: Manufacturer: syz
[   81.585762][ T5923] FAT-fs (loop2): Directory bread(block 70) failed
[   81.590289][ T1059] usb 4-1: SerialNumber: syz
[   81.598691][ T5923] FAT-fs (loop2): Directory bread(block 71) failed
[   81.607869][ T5923] FAT-fs (loop2): Directory bread(block 72) failed
[   81.614428][ T5923] FAT-fs (loop2): Directory bread(block 73) failed
[   81.638536][ T5923] overlayfs: filesystem on './file0' not supported
[   81.797088][ T5944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   81.805197][ T5944] System zones: 1-12
[   81.812077][ T5944] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.2419: missing EA_INODE flag
[   81.823972][ T5944] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2419: error while reading EA inode 12 err=-117
[   81.836555][ T5944] EXT4-fs (loop2): 1 orphan inode deleted
[   81.842660][ T5944] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue
[   81.865760][ T5944] syz.2.2419 (pid 5944) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   81.886053][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   82.079840][ T1059] usb 4-1: unit 0 not found!
[   82.396381][ T1059] usb 4-1: USB disconnect, device number 6
[   82.460376][ T5973] erofs: (device loop2): mounted with root inode @ nid 36.
[   82.470827][ T5973] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=46
[   82.724872][ T5981] F2FS-fs (loop0): invalid crc value
[   82.746145][ T5981] F2FS-fs (loop0): Found nat_bits in checkpoint
[   82.785815][ T5981] F2FS-fs (loop0): Start checkpoint disabled!
[   82.793931][ T5981] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   82.833271][ T5981] F2FS-fs (loop0): switch discard_unit option is not allowed
[   82.939761][  T301] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   82.978242][   T24] kauditd_printk_skb: 5 callbacks suppressed
[   82.978256][   T24] audit: type=1326 audit(2000000556.507:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.011856][   T24] audit: type=1326 audit(2000000556.507:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.041247][   T24] audit: type=1326 audit(2000000556.507:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.080046][   T24] audit: type=1326 audit(2000000556.517:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.105767][   T24] audit: type=1326 audit(2000000556.517:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.131440][   T24] audit: type=1326 audit(2000000556.517:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.157758][   T24] audit: type=1326 audit(2000000556.517:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.179736][  T301] usb 2-1: Using ep0 maxpacket: 16
[   83.188405][   T24] audit: type=1326 audit(2000000556.517:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.214573][   T24] audit: type=1326 audit(2000000556.517:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.240058][  T400] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   83.248227][   T24] audit: type=1326 audit(2000000556.517:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.2.2448" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3dbd2159 code=0x7ffc0000
[   83.329912][  T301] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[   83.338230][  T301] usb 2-1: config 1 has no interface number 0
[   83.344521][  T301] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   83.354802][  T301] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   83.364919][  T301] usb 2-1: config 1 interface 105 has no altsetting 0
[   83.464622][ T6037] EXT4-fs (loop3): Test dummy encryption mode enabled
[   83.471880][ T6037] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   83.486601][ T6037] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.2466: bad orphan inode 134217728
[   83.497606][ T6037] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,dioread_nolock,resgid=0x0000000000000000,bsddf,test_dummy_encryption=v1,,errors=continue
[   83.529879][  T301] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   83.539078][  T301] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   83.547366][  T301] usb 2-1: Product: syz
[   83.551657][  T301] usb 2-1: Manufacturer: syz
[   83.556252][  T301] usb 2-1: SerialNumber: syz
[   83.579841][ T5990] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   83.586869][ T5990] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   83.664070][ T6043] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.675769][ T6043] EXT4-fs (loop3): 1 truncate cleaned up
[   83.681664][ T6043] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,init_itable,nolazytime,noblock_validity,,errors=continue
[   83.709749][   T15] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   83.712690][  T280] EXT4-fs error (device loop3): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   83.737542][  T400] usb 1-1: unable to get BOS descriptor or descriptor too short
[   83.781964][    T9] tipc: Left network mode
[   83.830072][  T400] usb 1-1: config 5 has an invalid interface number: 165 but max is 0
[   83.838337][  T400] usb 1-1: config 5 has no interface number 0
[   83.844669][  T400] usb 1-1: config 5 interface 165 has no altsetting 0
[   83.949845][   T15] usb 5-1: Using ep0 maxpacket: 32
[   83.957107][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.964640][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.972372][ T6047] device bridge_slave_0 entered promiscuous mode
[   83.981216][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.988385][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.996383][ T6047] device bridge_slave_1 entered promiscuous mode
[   84.019830][  T400] usb 1-1: New USB device found, idVendor=0a46, idProduct=6688, bcdDevice=4f.e5
[   84.029197][  T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.029483][ T5990] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   84.037349][  T400] usb 1-1: Product: syz
[   84.048824][  T400] usb 1-1: Manufacturer: syz
[   84.053743][ T5990] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   84.066868][  T400] usb 1-1: SerialNumber: syz
[   84.076970][ T6052] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2461'.
[   84.104376][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.111543][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.119038][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.119893][   T15] usb 5-1: unable to get BOS descriptor or descriptor too short
[   84.126152][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.147988][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.156893][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.164436][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.175746][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.184097][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.191196][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.200947][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.209304][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.216411][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.232831][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.245018][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.261078][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.272974][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.281794][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.289433][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.298888][    T9] device bridge_slave_1 left promiscuous mode
[   84.305291][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.312960][    T9] device bridge_slave_0 left promiscuous mode
[   84.319093][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.327575][    T9] device veth1_macvtap left promiscuous mode
[   84.333727][    T9] device veth0_vlan left promiscuous mode
[   84.369810][    T5] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   84.382114][   T15] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   84.392537][   T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.401155][   T15] usb 5-1: Product: syz
[   84.405326][   T15] usb 5-1: Manufacturer: syz
[   84.410483][   T15] usb 5-1: SerialNumber: syz
[   84.420289][  T400] dm9601: probe of 1-1:5.165 failed with error -22
[   84.427874][ T6047] device veth0_vlan entered promiscuous mode
[   84.432661][  T400] usb 1-1: USB disconnect, device number 10
[   84.448728][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.459946][ T6047] device veth1_macvtap entered promiscuous mode
[   84.474135][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.484803][ T1032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.521078][  T301] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   84.549884][  T301] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   84.579926][  T301] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   84.593466][  T301] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 80:17:71:44:19:86
[   84.608147][  T301] usb 2-1: USB disconnect, device number 8
[   84.615254][  T301] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   84.660576][  T301] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   84.671583][  T301] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   84.681099][  T301] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   84.729911][    T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.740532][    T5] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   84.780994][ T6061] erofs: (device loop5): mounted with root inode @ nid 36.
[   84.799922][    T5] usb 3-1: string descriptor 0 read error: -71
[   84.806125][    T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   84.815376][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   84.840050][    T5] usb 3-1: can't set config #1, error -71
[   84.847056][    T5] usb 3-1: USB disconnect, device number 10
[   84.889861][   T15] usb 5-1: unit 0 not found!
[   85.040387][ T6068] F2FS-fs (loop0): invalid crc value
[   85.048936][ T6068] F2FS-fs (loop0): Found nat_bits in checkpoint
[   85.078374][ T6068] F2FS-fs (loop0): Start checkpoint disabled!
[   85.085582][ T6072] FAT-fs (loop1): Unrecognized mount option "��֛�6GJ
R�������.�zQ\wFMx�7D7U �d~���zGcx�E��b4��'���IG�(��;�e�7+ʞ:�!Y
/Q����:|ֿ�'�W��Mf��_��Z���8{��V�@�	Ay��v7�۾���?3�/R��5�?�: !l��\z�{0�o���-���a18446744073709551615" or missing value
[   85.116046][ T6068] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   85.195702][   T15] usb 5-1: USB disconnect, device number 6
[   85.220878][  T300] attempt to access beyond end of device
[   85.220878][  T300] loop0: rw=2049, want=40976, limit=40427
[   85.265401][ T6076] FAT-fs (loop1): Directory bread(block 64) failed
[   85.272467][ T6076] FAT-fs (loop1): Directory bread(block 65) failed
[   85.279386][ T6076] FAT-fs (loop1): Directory bread(block 66) failed
[   85.286348][ T6076] FAT-fs (loop1): Directory bread(block 67) failed
[   85.293296][ T6076] FAT-fs (loop1): Directory bread(block 68) failed
[   85.300779][ T6076] FAT-fs (loop1): Directory bread(block 69) failed
[   85.307486][ T6076] FAT-fs (loop1): Directory bread(block 70) failed
[   85.314374][ T6076] FAT-fs (loop1): Directory bread(block 71) failed
[   85.321651][ T6076] FAT-fs (loop1): Directory bread(block 72) failed
[   85.328197][ T6076] FAT-fs (loop1): Directory bread(block 73) failed
[   85.359609][ T6076] overlayfs: filesystem on './file0' not supported
[   85.400612][  T786] udevd[786]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   85.588938][ T6090] EXT4-fs (loop0): Test dummy encryption mode enabled
[   85.614738][ T6090] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,noinit_itable,noblock_validity,,errors=continue
[   86.275834][ T6126] EXT4-fs (loop4): Test dummy encryption mode enabled
[   86.315507][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,
[   86.442971][ T6131] tipc: Started in network mode
[   86.447909][ T6131] tipc: Own node identity ac1414aa, cluster identity 4711
[   86.455279][ T6131] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   86.495802][ T6135] tipc: New replicast peer: 127.0.0.1
[   86.501996][ T6135] tipc: Enabled bearer <udp:syz0>, priority 22
[   86.518992][  T300] tipc: Left network mode
[   86.520737][ T6135] tipc: Disabling bearer <udp:syz0>
[   86.547222][ T6116] F2FS-fs (loop2): Test dummy encryption mode enabled
[   86.568077][ T6116] F2FS-fs (loop2): invalid crc value
[   86.601192][ T6116] F2FS-fs (loop2): Found nat_bits in checkpoint
[   86.643627][ T6116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   86.653017][ T6147] exfat: Deprecated parameter 'utf8'
[   86.658659][ T6147] exfat: Deprecated parameter 'namecase'
[   86.664610][ T6147] exfat: Deprecated parameter 'namecase'
[   86.672655][ T6147] exfat: Deprecated parameter 'namecase'
[   86.701573][ T6147] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   86.836566][ T6154] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2500'.
[   87.051976][ T6165] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,quota,,errors=continue
[   87.069850][ T6168] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   87.083447][ T6165] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.129895][ T6168] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,debug_want_extra_isize=0x0000000000000004,abort,nombcache,init_itable,,errors=continue
[   87.159422][ T6179] tipc: New replicast peer: 127.0.0.1
[   87.165929][ T6179] tipc: Enabled bearer <udp:syz0>, priority 22
[   87.177526][ T6179] tipc: Disabling bearer <udp:syz0>
[   87.240004][ T6181] input: syz0 as /devices/virtual/input/input24
[   87.374583][ T6202] MTRR 1 not used
[   87.387599][ T6195] FAT-fs (loop2): Directory bread(block 64) failed
[   87.408277][ T6195] FAT-fs (loop2): Directory bread(block 65) failed
[   87.415084][ T6195] FAT-fs (loop2): Directory bread(block 66) failed
[   87.417334][ T6207] tipc: Started in network mode
[   87.427484][ T6195] FAT-fs (loop2): Directory bread(block 67) failed
[   87.434219][ T6195] FAT-fs (loop2): Directory bread(block 68) failed
[   87.441448][ T6195] FAT-fs (loop2): Directory bread(block 69) failed
[   87.445096][ T6207] tipc: Own node identity 7f000001, cluster identity 4711
[   87.448153][ T6195] FAT-fs (loop2): Directory bread(block 70) failed
[   87.462198][ T6195] FAT-fs (loop2): Directory bread(block 71) failed
[   87.468982][ T6195] FAT-fs (loop2): Directory bread(block 72) failed
[   87.469563][ T6207] tipc: New replicast peer: 127.0.0.1
[   87.481631][ T6195] FAT-fs (loop2): Directory bread(block 73) failed
[   87.518214][ T6207] tipc: Enabled bearer <udp:syz0>, priority 22
[   87.527850][ T6213] tipc: Disabling bearer <udp:syz0>
[   87.766514][ T6215] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue
[   87.782057][ T6225] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   87.786469][ T6222] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   87.803494][ T6222] ext4 filesystem being mounted at /458/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   87.812387][ T6225] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,debug_want_extra_isize=0x0000000000000004,abort,nombcache,init_itable,,errors=continue
[   87.863582][ T6215] EXT4-fs (loop0): Online defrag not supported with bigalloc
[   88.053067][   T24] kauditd_printk_skb: 8 callbacks suppressed
[   88.053080][   T24] audit: type=1400 audit(2000000561.587:1071): avc:  denied  { setopt } for  pid=6251 comm="syz.0.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   88.080781][ T6249] tipc: Started in network mode
[   88.082276][   T24] audit: type=1400 audit(2000000561.587:1072): avc:  denied  { read } for  pid=6251 comm="syz.0.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   88.085772][ T6249] tipc: Own node identity 7f000001, cluster identity 4711
[   88.085878][ T6249] tipc: New replicast peer: 127.0.0.1
[   88.114807][   T24] audit: type=1400 audit(2000000561.647:1073): avc:  denied  { write } for  pid=6251 comm="syz.0.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   88.124532][ T6244] exfat: Deprecated parameter 'namecase'
[   88.141037][ T6249] tipc: Enabled bearer <udp:syz0>, priority 22
[   88.150181][ T6244] exfat: Deprecated parameter 'namecase'
[   88.156053][ T6257] tipc: Disabling bearer <udp:syz0>
[   88.174686][ T6244] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   88.216386][ T6260] exfat: Deprecated parameter 'utf8'
[   88.230219][ T6260] exfat: Deprecated parameter 'utf8'
[   88.237223][ T6260] exfat: Deprecated parameter 'namecase'
[   88.243432][ T6260] exfat: Deprecated parameter 'namecase'
[   88.284674][ T6260] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   88.365089][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2547'.
[   88.375518][ T6273] netlink: 102 bytes leftover after parsing attributes in process `syz.1.2546'.
[   88.429721][    T5] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   88.452518][ T6283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.591618][ T6291] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,minixdf,,errors=continue
[   88.609867][ T6291] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.634274][ T6291] EXT4-fs error (device loop5): ext4_empty_dir:3074: inode #12: comm syz.5.2556: invalid size
[   88.648990][ T6277] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   88.669855][ T6277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   88.681414][ T6277] F2FS-fs (loop4): invalid crc value
[   88.689148][ T6277] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   88.734130][ T6277] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   88.741539][ T6277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   88.801778][ T6300] FAT-fs (loop5): Directory bread(block 64) failed
[   88.817621][ T6300] FAT-fs (loop5): Directory bread(block 65) failed
[   88.825226][ T6300] FAT-fs (loop5): Directory bread(block 66) failed
[   88.829870][    T5] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 128
[   88.832303][ T6300] FAT-fs (loop5): Directory bread(block 67) failed
[   88.848652][    T5] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   88.848668][    T5] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[   88.848694][    T5] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   88.848707][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.869788][ T6255] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   88.878777][ T6300] FAT-fs (loop5): Directory bread(block 68) failed
[   88.900082][ T6300] FAT-fs (loop5): Directory bread(block 69) failed
[   88.906867][ T6300] FAT-fs (loop5): Directory bread(block 70) failed
[   88.911092][    T5] snd-usb-audio: probe of 3-1:27.0 failed with error -12
[   88.913785][ T6300] FAT-fs (loop5): Directory bread(block 71) failed
[   88.927430][ T6300] FAT-fs (loop5): Directory bread(block 72) failed
[   88.934645][ T6300] FAT-fs (loop5): Directory bread(block 73) failed
[   88.975556][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'.
[   89.025042][ T6300] overlayfs: filesystem on './file0' not supported
[   89.050709][ T6306] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   89.170429][    T5] usb 3-1: USB disconnect, device number 11
[   89.440086][ T6289] F2FS-fs (loop1): Test dummy encryption mode enabled
[   89.493311][ T6289] F2FS-fs (loop1): invalid crc value
[   89.530392][ T6289] F2FS-fs (loop1): Found nat_bits in checkpoint
[   89.555542][ T6331] FAT-fs (loop0): Directory bread(block 64) failed
[   89.562383][ T6331] FAT-fs (loop0): Directory bread(block 65) failed
[   89.568949][ T6331] FAT-fs (loop0): Directory bread(block 66) failed
[   89.575904][ T6331] FAT-fs (loop0): Directory bread(block 67) failed
[   89.582872][ T6331] FAT-fs (loop0): Directory bread(block 68) failed
[   89.589551][ T6331] FAT-fs (loop0): Directory bread(block 69) failed
[   89.596623][ T6331] FAT-fs (loop0): Directory bread(block 70) failed
[   89.603898][ T6331] FAT-fs (loop0): Directory bread(block 71) failed
[   89.610969][ T6331] FAT-fs (loop0): Directory bread(block 72) failed
[   89.611445][ T6310] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   89.617773][ T6331] FAT-fs (loop0): Directory bread(block 73) failed
[   89.636469][ T6289] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   89.675563][ T6310] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   89.681993][ T6331] overlayfs: filesystem on './file0' not supported
[   89.694742][ T6310] F2FS-fs (loop5): invalid crc value
[   89.751403][ T6310] F2FS-fs (loop5): Found nat_bits in checkpoint
[   89.836334][ T6310] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   89.843477][ T6310] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   89.971201][ T6345] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[   89.983509][ T6345] System zones: 0-2, 18-18, 34-34
[   89.995688][ T6345] EXT4-fs (loop0): 1 orphan inode deleted
[   90.016912][ T6345] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue
[   90.070096][ T6345] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.307678][ T6366] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.361495][ T6375] EXT4-fs (loop5): Ignoring removed oldalloc option
[   90.377964][ T6375] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   90.378968][ T6366] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,debug_want_extra_isize=0x0000000000000004,abort,nombcache,init_itable,,errors=continue
[   90.389481][ T6383] ==================================================================
[   90.413827][ T6375] EXT4-fs (loop5): 1 truncate cleaned up
[   90.418941][ T6383] BUG: KASAN: use-after-free in trace_event_raw_event_mm_filemap_op_page_cache+0x38a/0x3b0
[   90.425517][ T6375] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue
[   90.434698][ T6383] Read of size 4 at addr ffff888112d01010 by task syz.4.2586/6383
[   90.434702][ T6383] 
[   90.434715][ T6383] CPU: 1 PID: 6383 Comm: syz.4.2586 Tainted: G        W         syzkaller #0
[   90.434722][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   90.434726][ T6383] Call Trace:
[   90.434744][ T6383]  __dump_stack+0x21/0x24
[   90.434755][ T6383]  dump_stack_lvl+0x1a7/0x208
[   90.434765][ T6383]  ? show_regs_print_info+0x18/0x18
[   90.434787][ T6383]  ? thaw_kernel_threads+0x220/0x220
[   90.504983][ T6383]  print_address_description+0x7f/0x2c0
[   90.510557][ T6383]  ? trace_event_raw_event_mm_filemap_op_page_cache+0x38a/0x3b0
[   90.518190][ T6383]  kasan_report+0x100/0x140
[   90.522709][ T6383]  ? trace_event_raw_event_mm_filemap_op_page_cache+0x38a/0x3b0
[   90.530348][ T6383]  __asan_report_load4_noabort+0x14/0x20
[   90.536003][ T6383]  trace_event_raw_event_mm_filemap_op_page_cache+0x38a/0x3b0
[   90.543473][ T6383]  ? workingset_update_node+0x117/0x160
[   90.549014][ T6383]  ? workingset_activation+0x250/0x250
[   90.554466][ T6383]  ? __traceiter_file_check_and_advance_wb_err+0xc0/0xc0
[   90.561486][ T6383]  ? __kasan_check_write+0x14/0x20
[   90.566647][ T6383]  ? xas_init_marks+0x493/0x4b0
[   90.571494][ T6383]  __delete_from_page_cache+0x429/0x470
[   90.577066][ T6383]  ? memset+0x35/0x40
[   90.581049][ T6383]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[   90.588070][ T6383]  ? _raw_spin_lock_irqsave+0xc2/0x130
[   90.593533][ T6383]  ? __kasan_check_read+0x11/0x20
[   90.598576][ T6383]  ? workingset_eviction+0x3dc/0x940
[   90.604031][ T6383]  __remove_mapping+0x581/0x6b0
[   90.608906][ T6383]  shrink_page_list+0x21ee/0x4160
[   90.614546][ T6383]  ? shrink_page_list+0x1f41/0x4160
[   90.619764][ T6383]  ? reclaim_clean_pages_from_list+0x740/0x740
[   90.625919][ T6383]  ? shrink_inactive_list+0xef0/0xef0
[   90.631387][ T6383]  ? _raw_spin_lock_irq+0x95/0xf0
[   90.636420][ T6383]  ? __count_memcg_events+0x89/0x210
[   90.641727][ T6383]  shrink_inactive_list+0x90c/0xef0
[   90.646929][ T6383]  ? __this_cpu_preempt_check+0x13/0x20
[   90.652555][ T6383]  ? shrink_active_list+0xe00/0xe00
[   90.657755][ T6383]  ? inactive_is_low+0x2f0/0x2f0
[   90.662682][ T6383]  ? __kasan_check_read+0x11/0x20
[   90.667720][ T6383]  ? __kasan_check_read+0x11/0x20
[   90.672757][ T6383]  ? lruvec_lru_size+0x230/0x250
[   90.677722][ T6383]  ? blk_start_plug+0x5a/0x170
[   90.682498][ T6383]  shrink_lruvec+0x281a/0x2ef0
[   90.687271][ T6383]  ? __kasan_check_read+0x11/0x20
[   90.692305][ T6383]  ? ring_buffer_unlock_commit+0x439/0x570
[   90.698120][ T6383]  ? __kasan_check_write+0x14/0x20
[   90.703248][ T6383]  ? down_read_trylock+0x106/0x160
[   90.708383][ T6383]  ? __init_rwsem+0x1c0/0x1c0
[   90.713077][ T6383]  ? check_preempt_wakeup+0x4e2/0xb10
[   90.718454][ T6383]  ? mem_cgroup_shrink_node+0x4c0/0x4c0
[   90.724003][ T6383]  ? __kasan_check_write+0x14/0x20
[   90.729115][ T6383]  ? up_read+0x12/0x50
[   90.733272][ T6383]  ? shrink_slab+0x671/0x830
[   90.737864][ T6383]  ? __kasan_check_write+0x14/0x20
[   90.742970][ T6383]  ? __kasan_check_read+0x11/0x20
[   90.747995][ T6383]  ? inactive_is_low+0x17a/0x2f0
[   90.752933][ T6383]  ? __kasan_check_write+0x14/0x20
[   90.758045][ T6383]  shrink_node+0xee0/0x2690
[   90.762554][ T6383]  do_try_to_free_pages+0x602/0x1590
[   90.767840][ T6383]  ? try_to_free_pages+0xc20/0xc20
[   90.772948][ T6383]  try_to_free_mem_cgroup_pages+0x261/0x610
[   90.778837][ T6383]  ? shrink_lruvec+0x2ef0/0x2ef0
[   90.783789][ T6383]  ? drain_all_stock+0x701/0x740
[   90.788756][ T6383]  mem_cgroup_force_empty_write+0x130/0x170
[   90.794659][ T6383]  ? memcg_stat_show+0x12d0/0x12d0
[   90.799778][ T6383]  cgroup_file_write+0x294/0x560
[   90.804711][ T6383]  ? cgroup_seqfile_stop+0xc0/0xc0
[   90.809820][ T6383]  ? mutex_lock+0x92/0xf0
[   90.814150][ T6383]  ? mutex_trylock+0xb0/0xb0
[   90.818741][ T6383]  ? __kasan_check_write+0x14/0x20
[   90.823850][ T6383]  ? cgroup_seqfile_stop+0xc0/0xc0
[   90.828965][ T6383]  kernfs_fop_write_iter+0x2bd/0x400
[   90.834256][ T6383]  vfs_write+0x770/0xd70
[   90.838500][ T6383]  ? __kasan_check_read+0x11/0x20
[   90.843523][ T6383]  ? kernel_write+0x3c0/0x3c0
[   90.848214][ T6383]  ? mutex_trylock+0xb0/0xb0
[   90.852818][ T6383]  ? __fget_files+0x2e1/0x340
[   90.857509][ T6383]  ? __fdget_pos+0x2d2/0x380
[   90.862106][ T6383]  ? ksys_write+0x70/0x260
[   90.866534][ T6383]  ksys_write+0x14a/0x260
[   90.871017][ T6383]  ? __ia32_sys_read+0x90/0x90
[   90.875799][ T6383]  ? trace_event_raw_event_sys_enter+0x12d/0x140
[   90.882140][ T6383]  __x64_sys_write+0x7b/0x90
[   90.886746][ T6383]  do_syscall_64+0x31/0x40
[   90.891173][ T6383]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   90.897066][ T6383] RIP: 0033:0x7f1aa50b2159
[   90.901486][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.921094][ T6383] RSP: 002b:00007f1aa3b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   90.929546][ T6383] RAX: ffffffffffffffda RBX: 00007f1aa5339fa0 RCX: 00007f1aa50b2159
[   90.937526][ T6383] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003
[   90.945502][ T6383] RBP: 00007f1aa514906b R08: 0000000000000000 R09: 0000000000000000
[   90.953479][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.961451][ T6383] R13: 00007f1aa533a038 R14: 00007f1aa5339fa0 R15: 00007ffd6bee10c8
[   90.969441][ T6383] 
[   90.971783][ T6383] Allocated by task 4683:
[   90.976121][ T6383]  __kasan_kmalloc+0xd4/0x100
[   90.980806][ T6383]  kmem_cache_alloc_trace+0x179/0x2e0
[   90.986183][ T6383]  alloc_super+0x5a/0x7d0
[   90.990511][ T6383]  sget+0x1e2/0x4c0
[   90.994318][ T6383]  mount_bdev+0xec/0x380
[   90.998646][ T6383]  f2fs_mount+0x34/0x40
[   91.002798][ T6383]  legacy_get_tree+0xed/0x190
[   91.007469][ T6383]  vfs_get_tree+0x89/0x260
[   91.011881][ T6383]  do_new_mount+0x25a/0xa30
[   91.016384][ T6383]  path_mount+0x581/0xca0
[   91.020709][ T6383]  __se_sys_mount+0x320/0x390
[   91.025385][ T6383]  __x64_sys_mount+0xbf/0xd0
[   91.029976][ T6383]  do_syscall_64+0x31/0x40
[   91.034390][ T6383]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   91.040286][ T6383] 
[   91.042610][ T6383] Freed by task 572:
[   91.046503][ T6383]  kasan_set_track+0x4a/0x70
[   91.051091][ T6383]  kasan_set_free_info+0x23/0x40
[   91.056022][ T6383]  ____kasan_slab_free+0x125/0x160
[   91.061217][ T6383]  __kasan_slab_free+0x11/0x20
[   91.065986][ T6383]  slab_free_freelist_hook+0xc5/0x190
[   91.071355][ T6383]  kfree+0xc0/0x270
[   91.075167][ T6383]  skb_release_data+0x53b/0x690
[   91.080015][ T6383]  kfree_skb+0xb9/0x2f0
[   91.084175][ T6383]  ip6_mc_input+0x22b/0x290
[   91.088683][ T6383]  ip6_rcv_finish+0x18c/0x360
[   91.093356][ T6383]  ipv6_rcv+0xf0/0x230
[   91.097424][ T6383]  __netif_receive_skb+0xc8/0x280
[   91.102535][ T6383]  process_backlog+0x351/0x600
[   91.107298][ T6383]  net_rx_action+0x48d/0xed0
[   91.111888][ T6383]  __do_softirq+0x255/0x563
[   91.116379][ T6383] 
[   91.118703][ T6383] Last potentially related work creation:
[   91.124422][ T6383]  kasan_save_stack+0x3a/0x60
[   91.129117][ T6383]  __kasan_record_aux_stack+0xd2/0x100
[   91.134598][ T6383]  kasan_record_aux_stack_noalloc+0xb/0x10
[   91.140404][ T6383]  insert_work+0x51/0x320
[   91.144730][ T6383]  __queue_work+0x91f/0xca0
[   91.149234][ T6383]  queue_work_on+0xe6/0x140
[   91.153733][ T6383]  destroy_super_rcu+0xd1/0xe0
[   91.158622][ T6383]  rcu_do_batch+0x488/0xaf0
[   91.163132][ T6383]  rcu_core+0x50a/0xca0
[   91.167289][ T6383]  rcu_core_si+0x9/0x10
[   91.171461][ T6383]  __do_softirq+0x255/0x563
[   91.175961][ T6383] 
[   91.178294][ T6383] Second to last potentially related work creation:
[   91.184880][ T6383]  kasan_save_stack+0x3a/0x60
[   91.189559][ T6383]  __kasan_record_aux_stack+0xd2/0x100
[   91.195015][ T6383]  kasan_record_aux_stack_noalloc+0xb/0x10
[   91.200820][ T6383]  call_rcu+0x11a/0x1090
[   91.205058][ T6383]  __put_super+0x254/0x2b0
[   91.209480][ T6383]  deactivate_locked_super+0xd4/0x100
[   91.214849][ T6383]  mount_bdev+0x288/0x380
[   91.219191][ T6383]  f2fs_mount+0x34/0x40
[   91.223368][ T6383]  legacy_get_tree+0xed/0x190
[   91.228060][ T6383]  vfs_get_tree+0x89/0x260
[   91.232475][ T6383]  do_new_mount+0x25a/0xa30
[   91.236977][ T6383]  path_mount+0x581/0xca0
[   91.241301][ T6383]  __se_sys_mount+0x320/0x390
[   91.245972][ T6383]  __x64_sys_mount+0xbf/0xd0
[   91.250562][ T6383]  do_syscall_64+0x31/0x40
[   91.254980][ T6383]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   91.260870][ T6383] 
[   91.263202][ T6383] The buggy address belongs to the object at ffff888112d01000
[   91.263202][ T6383]  which belongs to the cache kmalloc-2k of size 2048
[   91.277273][ T6383] The buggy address is located 16 bytes inside of
[   91.277273][ T6383]  2048-byte region [ffff888112d01000, ffff888112d01800)
[   91.290544][ T6383] The buggy address belongs to the page:
[   91.296188][ T6383] page:ffffea00044b4000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112d00
[   91.306459][ T6383] head:ffffea00044b4000 order:3 compound_mapcount:0 compound_pincount:0
[   91.314787][ T6383] flags: 0x4000000000010200(slab|head)
[   91.320248][ T6383] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80
[   91.328861][ T6383] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[   91.337447][ T6383] page dumped because: kasan: bad access detected
[   91.343858][ T6383] page_owner tracks the page as allocated
[   91.349584][ T6383] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3167, ts 50481940545, free_ts 49169915575
[   91.369463][ T6383]  prep_new_page+0x176/0x190
[   91.374057][ T6383]  get_page_from_freelist+0x225f/0x23f0
[   91.379597][ T6383]  __alloc_pages_nodemask+0x29a/0x640
[   91.385233][ T6383]  new_slab+0x84/0x3f0
[   91.389319][ T6383]  ___slab_alloc+0x2f8/0x4c0
[   91.393904][ T6383]  __slab_alloc+0x63/0xa0
[   91.398227][ T6383]  __kmalloc_track_caller+0x1e4/0x310
[   91.403593][ T6383]  __alloc_skb+0xdc/0x520
[   91.407920][ T6383]  ip_frag_next+0xd7/0xad0
[   91.412498][ T6383]  ip_do_fragment+0xb18/0x1a30
[   91.417269][ T6383]  ip_fragment+0x125/0x210
[   91.421686][ T6383]  __ip_finish_output+0x4ce/0x720
[   91.426744][ T6383]  ip_finish_output+0x33/0x1e0
[   91.431507][ T6383]  ip_mc_output+0x427/0x8e0
[   91.436092][ T6383]  ip_local_out+0x96/0xb0
[   91.440414][ T6383]  iptunnel_xmit+0x4aa/0x960
[   91.445004][ T6383] page last free stack trace:
[   91.449707][ T6383]  __free_pages_ok+0x80b/0x830
[   91.454466][ T6383]  __free_pages+0xd8/0x390
[   91.458876][ T6383]  __free_slab+0xcf/0x190
[   91.463202][ T6383]  unfreeze_partials+0x150/0x180
[   91.468232][ T6383]  put_cpu_partial+0xc1/0x180
[   91.472901][ T6383]  __slab_free+0x2c9/0x3a0
[   91.477311][ T6383]  ___cache_free+0x10e/0x130
[   91.481896][ T6383]  qlink_free+0x50/0x90
[   91.486050][ T6383]  qlist_free_all+0x5f/0xb0
[   91.490588][ T6383]  kasan_quarantine_reduce+0x14a/0x160
[   91.496045][ T6383]  __kasan_slab_alloc+0x2f/0xe0
[   91.500910][ T6383]  slab_post_alloc_hook+0x5d/0x2f0
[   91.506023][ T6383]  kmem_cache_alloc_trace+0x155/0x2e0
[   91.511392][ T6383]  usb_control_msg+0x74/0x3f0
[   91.516064][ T6383]  hub_ext_port_status+0xf2/0x6a0
[   91.521085][ T6383]  hub_port_reset+0x498/0x1720
[   91.525839][ T6383] 
[   91.528471][ T6383] Memory state around the buggy address:
[   91.534106][ T6383]  ffff888112d00f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   91.542171][ T6383]  ffff888112d00f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   91.550235][ T6383] >ffff888112d01000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   91.558299][ T6383]                          ^
[   91.562885][ T6383]  ffff888112d01080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   91.570941][ T6383]  ffff888112d01100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   91.578999][ T6383] ==================================================================
[   91.587053][ T6383] Disabling lock debugging due to kernel taint
[   91.615110][ T6379] EXT4-fs (loop2): Test dummy encryption mode enabled
[   91.643564][ T6379] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2585: inode has both inline data and extents flags
[   91.657092][   T24] audit: type=1400 audit(2000000565.177:1074): avc:  denied  { read } for  pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   91.680372][   T24] audit: type=1400 audit(2000000565.177:1075): avc:  denied  { search } for  pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.680620][ T6379] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2585: couldn't read orphan inode 15 (err -117)
[   91.702693][   T24] audit: type=1400 audit(2000000565.177:1076): avc:  denied  { write } for  pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.739455][   T24] audit: type=1400 audit(2000000565.177:1077): avc:  denied  { add_name } for  pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.741158][ T6379] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[   91.760672][   T24] audit: type=1400 audit(2000000565.177:1078): avc:  denied  { create } for  pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   91.792407][   T24] audit: type=1400 audit(2000000565.177:1079): avc:  denied  { append open } for  pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   91.815740][   T24] audit: type=1400 audit(2000000565.177:1080): avc:  denied  { getattr } for  pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1