last executing test programs:

10.434856827s ago: executing program 0 (id=580):
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000005f000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x20000, &(0x7f0000007480)=""/131072, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
recvmmsg(r3, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)
r4 = dup(r2)
syz_ublk_setup_queues(r4, r1, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1080, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

9.427224491s ago: executing program 0 (id=583):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, &(0x7f00000006c0)={{}, {0x0, 0x2710}}, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, 0x0, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000140)={'sit0\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x40000000)

8.256590091s ago: executing program 0 (id=588):
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="090000000000000007feb5b300"/28], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000900)={0x2, &(0x7f0000000940)=[{0x30, 0x2, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x16}]}, 0x10)
connect$inet6(r0, &(0x7f0000000980)={0xa, 0x9005, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c)
timerfd_create(0x9, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$uac2(r2, &(0x7f0000000580)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="2027602598b63b8410a80405ba4bec25fa6debaffb0e9274fe5273e511537cce1026e4680cbd014753b277b52a63a2441896c3e8c3f22e28386ac2d78c751a582b49d78f1180d995bcebbbdddb8d161ac38c9168b3cf70e4b389eb76147c386b5601fc1a04609898ca336fc10cbdc5a32a0c77b598f8672b5ce01f5be7400f42dc17b416c73525"], 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
syz_clone3(&(0x7f00000002c0)={0x23800000, &(0x7f0000000340)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x1007, &(0x7f0000000380)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7fff, r3, &(0x7f0000000440)="bf", 0x1, 0x0, 0x0, 0x2}])
bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0)={0x0, r1}, 0x8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f0000000b40)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, 0x0, 0x50)
sendmsg$can_bcm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x1, 0x219, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c00000000009500000000000000a1a516ecc94ea4989a0e9b54fd12203b899c598353a1d1295b472d70dd9e54627e3c7988addaf9a27030b047d2b52dbdd4dfba120838916ecff19ffd32791b4b3e649f2be303d2ccbe5bc9159f47e4fc884fe60735f97a285fa487f4c00a9f2fbd740b8f77bbe079c48388853039"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x24}, 0x94)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000680)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000800)={0x8400001e, 0x0, 0x2, 0x9}, 0xfffffffffffffeb6)

5.217869574s ago: executing program 1 (id=604):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, &(0x7f00000006c0)={{}, {0x0, 0x2710}}, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x802)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x40000000)

3.373326973s ago: executing program 0 (id=608):
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000005f000000b70000"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x20000, &(0x7f0000007480)=""/131072, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4)
sendto(r4, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)
r5 = dup(r3)
syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1080, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

3.346603406s ago: executing program 1 (id=609):
syz_mount_image$ext4(&(0x7f0000002f40)='ext4\x00', &(0x7f0000002f80)='./file1\x00', 0x3000010, &(0x7f0000002fc0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@minixdf}]}, 0x1, 0x51a, &(0x7f0000003000)="$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")

3.285871952s ago: executing program 1 (id=611):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000bc0), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000c40), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3820c50, 0x0, 0xf7, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
chdir(&(0x7f0000000300)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x200808, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x3a0, &(0x7f0000000580)="$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")

2.778430725s ago: executing program 3 (id=613):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, &(0x7f00000006c0)={{}, {0x0, 0x2710}}, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, 0x0, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000140)={'sit0\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x40000000)

2.510037562s ago: executing program 0 (id=614):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000bc0), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000c40), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3820c50, 0x0, 0xf7, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
chdir(&(0x7f0000000300)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x200808, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64], 0x1, 0x3a0, &(0x7f0000000580)="$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")

2.320548072s ago: executing program 2 (id=619):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
socket$netlink(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8c41a, &(0x7f0000000080)={[], [{@subj_role={'subj_role', 0x3d, 'asymmetric\x00'}}, {@pcr={'pcr', 0x3d, 0x5}}], 0x2c}, 0x1, 0x486, &(0x7f00000000c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000600)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000700), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000740), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r4, &(0x7f0000000e40)={0x900, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020}, 0x2020)

2.273049686s ago: executing program 4 (id=621):
syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x0, &(0x7f0000000c80), 0x1, 0xbf6, &(0x7f0000000cc0)="$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")

2.145821799s ago: executing program 4 (id=622):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x20)
write$binfmt_script(r0, &(0x7f00000000c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x10000, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000140)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f00000001c0), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000200)=0x7f, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

1.919631173s ago: executing program 3 (id=623):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x200000000780, 0x2000000007b0], 0x0, 0x0, &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x62, 0x8, 'ip6gre0\x00', 'syzkaller1\x00', 'veth1_to_team\x00', 'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}]}, 0x1a8)

1.861212889s ago: executing program 3 (id=624):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0xb0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x84, 0x2, [@TCA_BPF_ACT={0x80, 0x1, [@m_mirred={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x4c, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x1e, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d0984472"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.860964179s ago: executing program 3 (id=625):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})

1.841243171s ago: executing program 4 (id=626):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x32}, @empty}}}}}}, 0x0)

1.783605797s ago: executing program 3 (id=627):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000a80)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x8)
r0 = getpid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800700, &(0x7f0000000140)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@minixdf}, {@dax}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f00000003c0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1")
lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1)
sched_setscheduler(r0, 0x1, &(0x7f0000000b40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000bc0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000c40), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000c80), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = inotify_init1(0x80000)
inotify_add_watch(r3, 0x0, 0x1000401)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x85)
lseek(r4, 0x104, 0x1)
getdents64(r4, 0x0, 0x4f)
getitimer(0x0, 0x0)

1.645225431s ago: executing program 4 (id=628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080)

1.644885351s ago: executing program 4 (id=629):
syz_mount_image$f2fs(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0xa04080, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0xfe, 0x5524, &(0x7f0000000d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000b80)=0x2)

1.422388744s ago: executing program 2 (id=630):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)

1.136878283s ago: executing program 1 (id=631):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

917.606476ms ago: executing program 2 (id=632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0)

845.347533ms ago: executing program 2 (id=633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$tmpfs(0x0, &(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700), 0x0, 0x0)
umount2(&(0x7f0000000740)='./file0/../file0\x00', 0x0)

842.297954ms ago: executing program 2 (id=634):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x16d)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f00000005c0)='7', 0x1)
socket$key(0xf, 0x3, 0x2)

811.318607ms ago: executing program 1 (id=635):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000009c0)=[{0x0}], 0x1)

741.170734ms ago: executing program 1 (id=636):
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r0, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/4096, 0x20001b80}, {&(0x7f0000001800)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0x100000}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r1, r0, 0x0, 0x578410eb)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{}, 0x0, 0x0}, 0x20)
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)

718.108827ms ago: executing program 2 (id=637):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x3a, 0x10, &(0x7f00000009c0), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c)
syz_emit_ethernet(0xeff, &(0x7f0000000a40)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x6}}, {@ipv6={0x86dd, @generic={0x1, 0x6, "c26a30", 0xec1, 0x87, 0xff, @remote, @private0, {[], "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"}}}}}, 0x0)

543.559815ms ago: executing program 32 (id=637):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x3a, 0x10, &(0x7f00000009c0), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c)
syz_emit_ethernet(0xeff, &(0x7f0000000a40)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x6}}, {@ipv6={0x86dd, @generic={0x1, 0x6, "c26a30", 0xec1, 0x87, 0xff, @remote, @private0, {[], "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"}}}}}, 0x0)

485.43744ms ago: executing program 3 (id=639):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f00000004c0), &(0x7f0000000500)=@tcp=r4}, 0x20)
sendto(r5, &(0x7f0000000540)="01", 0x1, 0x0, 0x0, 0x0)

357.256203ms ago: executing program 4 (id=640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x2, 0x0, 0x40, 0x8}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x7}, {0xd, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff}, {0x7, 0xab5d, 0x47b, 0x7e000000}}}]}]}]}}]}, 0x74}}, 0x0)
write$tun(r0, &(0x7f0000000400)=ANY=[], 0x46)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 0 (id=641):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='27', 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50)

kernel console output (not intermixed with test programs):


[   32.898923][  T590] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[   32.906840][  T590] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   32.930814][  T590] F2FS-fs (loop2): invalid crc value
[   32.938757][  T590] F2FS-fs (loop2): Found nat_bits in checkpoint
[   32.976928][  T590] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   32.984252][  T590] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   33.056823][  T609] loop2: detected capacity change from 0 to 256
[   33.063528][  T609] exfat: Deprecated parameter 'utf8'
[   33.071128][  T609] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[   33.191976][  T545] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.433194][  T545] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   33.442483][  T545] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.453630][  T545] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   33.463376][  T545] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   33.473705][  T545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.493276][  T620] syz.1.85 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   33.592428][  T545] uvcvideo 1-1:1.0: Found multiple Units with ID 1
[   33.599308][  T545] usb 1-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   33.607817][  T545] usb 1-1: No streaming interface found for terminal 2.
[   33.767182][  T313] usb 1-1: USB disconnect, device number 2
[   34.222016][    T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   34.413037][    T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   34.425931][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   34.471850][    T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   34.480980][    T6] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   34.490268][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.504680][    T6] uvcvideo 3-1:1.0: Found multiple Units with ID 1
[   34.511258][    T6] usb 3-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   34.835822][  T645] netlink: 260 bytes leftover after parsing attributes in process `syz.0.92'.
[   35.470384][    T6] usb 3-1: No streaming interface found for terminal 2.
[   35.481988][  T645] syz.0.92 (645) used greatest stack depth: 19432 bytes left
[   35.523913][    T6] usb 3-1: USB disconnect, device number 4
[   35.635948][  T653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'.
[   36.031666][  T660] netlink: 260 bytes leftover after parsing attributes in process `syz.4.95'.
[   36.827593][  T666] fuse: Unknown parameter '0x0000000000000008'
[   36.835927][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   36.835939][   T28] audit: type=1326 audit(1793821955.096:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=661 comm="syz.4.98" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   36.899196][   T28] audit: type=1326 audit(1793821955.096:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=661 comm="syz.4.98" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   36.938229][  T653] loop0: detected capacity change from 0 to 40427
[   36.945605][  T653] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   36.953246][  T653] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   36.970319][  T653] F2FS-fs (loop0): invalid crc value
[   36.982958][  T653] F2FS-fs (loop0): Found nat_bits in checkpoint
[   37.010079][   T28] audit: type=1326 audit(1793821955.096:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=661 comm="syz.4.98" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   37.035044][  T653] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   37.042167][  T653] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   37.048340][   T28] audit: type=1326 audit(1793821955.096:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=661 comm="syz.4.98" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   37.075219][   T28] audit: type=1326 audit(1793821955.096:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=661 comm="syz.4.98" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   37.108190][   T28] audit: type=1326 audit(1793821955.096:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=661 comm="syz.4.98" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   37.133428][   T28] audit: type=1326 audit(1793821955.096:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=661 comm="syz.4.98" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   37.168012][   T28] audit: type=1326 audit(1793821955.096:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=661 comm="syz.4.98" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   37.739321][  T695] loop0: detected capacity change from 0 to 2048
[   37.756354][  T695] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   37.766455][  T695] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   37.777727][  T695] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   37.789596][  T695] EXT4-fs (loop0): group descriptors corrupted!
[   37.959939][  T701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'.
[   38.045608][  T701] loop0: detected capacity change from 0 to 40427
[   38.055235][  T701] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   38.063122][  T701] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   38.081584][  T701] F2FS-fs (loop0): invalid crc value
[   38.100087][  T701] F2FS-fs (loop0): Found nat_bits in checkpoint
[   38.165704][  T701] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   38.172832][  T701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   39.282988][  T733] netlink: 260 bytes leftover after parsing attributes in process `syz.1.114'.
[   39.363463][  T545] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   39.664837][  T545] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   39.712480][  T545] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   39.830047][  T545] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   39.933569][  T545] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   39.964503][  T545] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   40.036704][  T545] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   40.056053][  T545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.073967][  T545] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   40.092632][  T545] usb 4-1: No streaming interface found for terminal 2.
[   40.108779][  T745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'.
[   40.162884][  T751] loop2: detected capacity change from 0 to 2048
[   40.186598][  T751] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   40.202529][  T751] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   40.238356][  T751] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   40.286552][  T545] usb 4-1: USB disconnect, device number 2
[   40.393697][  T751] EXT4-fs (loop2): group descriptors corrupted!
[   40.457616][  T745] loop4: detected capacity change from 0 to 40427
[   40.473526][  T745] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[   40.481674][  T745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   40.492449][  T745] F2FS-fs (loop4): invalid crc value
[   40.499409][  T745] F2FS-fs (loop4): Found nat_bits in checkpoint
[   40.546901][  T745] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   40.557181][  T745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   40.630915][  T764] loop2: detected capacity change from 0 to 2048
[   40.652307][  T764] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   40.663323][  T764] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   40.674424][  T764] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   40.685234][  T764] EXT4-fs (loop2): group descriptors corrupted!
[   40.866145][  T769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'.
[   41.387609][  T773] netlink: 260 bytes leftover after parsing attributes in process `syz.2.127'.
[   41.883462][  T769] loop3: detected capacity change from 0 to 40427
[   41.912010][  T769] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[   42.002028][  T769] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   42.048622][  T769] F2FS-fs (loop3): invalid crc value
[   42.095753][  T769] F2FS-fs (loop3): Found nat_bits in checkpoint
[   42.172694][  T769] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   42.179827][  T769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   42.432076][  T409] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   42.623245][  T409] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   42.632131][  T409] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   42.642347][  T409] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   42.651246][  T409] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   42.661737][  T409] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   42.678993][  T409] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   42.688545][  T409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.703030][  T409] usb 3-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   42.710113][  T409] usb 3-1: No streaming interface found for terminal 2.
[   42.808586][  T810] loop1: detected capacity change from 0 to 2048
[   42.825697][  T810] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   42.835862][  T810] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   42.847240][  T810] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   42.857409][  T810] EXT4-fs (loop1): group descriptors corrupted!
[   42.904254][  T774] usb 3-1: USB disconnect, device number 5
[   43.781033][  T834] loop2: detected capacity change from 0 to 2048
[   43.823397][  T834] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   43.839792][  T834] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   43.871995][  T834] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   43.890282][  T834] EXT4-fs (loop2): group descriptors corrupted!
[   44.561978][  T774] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   44.754536][  T774] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   44.826997][  T774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.919190][  T774] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   44.928576][  T774] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   44.937832][  T774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.957346][  T774] uvcvideo 3-1:1.0: Found multiple Units with ID 1
[   44.966365][  T774] usb 3-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   44.979809][  T774] usb 3-1: No streaming interface found for terminal 2.
[   45.062017][   T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   45.153289][  T844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.161882][  T844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.253130][   T19] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   45.261889][   T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.272346][   T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   45.281261][   T19] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   45.291727][   T19] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   45.304562][   T19] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   45.313693][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.323520][   T19] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   45.330557][   T19] usb 4-1: No streaming interface found for terminal 2.
[   45.342027][  T313] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   45.525866][   T19] usb 4-1: USB disconnect, device number 3
[   45.532906][  T313] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   45.551716][  T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.564333][  T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   45.573407][  T313] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   45.582726][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.594142][  T313] uvcvideo 2-1:1.0: Found multiple Units with ID 1
[   45.600680][  T313] usb 2-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   45.607921][  T313] usb 2-1: No streaming interface found for terminal 2.
[   45.799804][  T864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.808427][  T864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.507904][  T888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'.
[   46.606228][  T888] loop0: detected capacity change from 0 to 40427
[   46.613874][  T888] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   46.621399][  T888] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   46.630289][  T888] F2FS-fs (loop0): invalid crc value
[   46.636811][  T888] F2FS-fs (loop0): Found nat_bits in checkpoint
[   46.660062][  T888] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   46.667239][  T888] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   47.311686][    T6] usb 3-1: USB disconnect, device number 6
[   47.690393][  T912] loop2: detected capacity change from 0 to 2048
[   47.844470][  T912] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   47.933924][  T912] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   47.945260][  T912] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   47.955744][  T912] EXT4-fs (loop2): group descriptors corrupted!
[   48.072337][  T774] usb 2-1: USB disconnect, device number 4
[   48.144144][  T925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'.
[   48.292004][   T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   48.366301][  T925] loop1: detected capacity change from 0 to 40427
[   48.382513][  T925] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[   48.408649][  T925] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   48.455515][  T925] F2FS-fs (loop1): invalid crc value
[   48.468820][  T925] F2FS-fs (loop1): Found nat_bits in checkpoint
[   48.483037][   T60] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   48.491740][   T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.522686][   T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   48.531724][   T60] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   48.540891][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.763076][   T60] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   48.770688][  T925] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   48.777851][  T925] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   48.785532][   T60] usb 4-1: No streaming interface found for terminal 2.
[   48.796779][   T60] usb 4-1: USB disconnect, device number 4
[   49.922893][  T968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'.
[   50.018418][  T968] loop0: detected capacity change from 0 to 40427
[   50.028066][  T968] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   50.036084][  T968] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   50.044827][  T968] F2FS-fs (loop0): invalid crc value
[   50.051192][  T968] F2FS-fs (loop0): Found nat_bits in checkpoint
[   50.074496][  T968] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   50.081627][  T968] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   50.222138][   T60] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   50.403179][   T60] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   50.411995][   T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.422139][   T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   50.431030][   T60] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   50.440124][   T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.449472][   T60] uvcvideo 2-1:1.0: Found multiple Units with ID 1
[   50.456083][   T60] usb 2-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   50.463096][   T60] usb 2-1: No streaming interface found for terminal 2.
[   50.657454][  T970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.666384][  T970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.312003][  T988] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   51.503092][  T988] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   51.511909][  T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   51.522252][  T988] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   51.531179][  T988] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   51.540423][  T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.589627][  T988] usb 1-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   51.596754][  T988] usb 1-1: No streaming interface found for terminal 2.
[   51.639026][  T999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'.
[   51.736884][  T999] loop3: detected capacity change from 0 to 40427
[   51.752559][  T999] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[   51.770286][  T999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   51.783262][  T999] F2FS-fs (loop3): invalid crc value
[   51.790497][  T988] usb 1-1: USB disconnect, device number 3
[   51.800487][  T999] F2FS-fs (loop3): Found nat_bits in checkpoint
[   51.840480][  T999] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   51.847772][  T999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   53.238167][ T1026] netlink: 260 bytes leftover after parsing attributes in process `syz.2.196'.
[   53.610307][  T545] usb 2-1: USB disconnect, device number 5
[   53.927565][   T28] audit: type=1400 audit(1793821972.186:203): avc:  denied  { read append } for  pid=1032 comm="syz.0.199" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   53.986088][ T1035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'.
[   53.990762][   T28] audit: type=1400 audit(1793821972.216:204): avc:  denied  { open } for  pid=1032 comm="syz.0.199" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   54.022133][   T28] audit: type=1400 audit(1793821972.216:205): avc:  denied  { ioctl } for  pid=1032 comm="syz.0.199" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   54.033585][ T1043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'.
[   54.051664][   T28] audit: type=1400 audit(1793821972.246:206): avc:  denied  { write } for  pid=1032 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.076058][   T28] audit: type=1400 audit(1793821972.246:207): avc:  denied  { read } for  pid=1032 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.098440][   T28] audit: type=1400 audit(1793821972.276:208): avc:  denied  { setopt } for  pid=1032 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   54.291224][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'.
[   54.342060][  T916] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   54.463930][ T1038] loop2: detected capacity change from 0 to 40427
[   54.473511][ T1038] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[   54.481324][ T1038] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   54.492374][ T1038] F2FS-fs (loop2): invalid crc value
[   54.501244][ T1038] F2FS-fs (loop2): Found nat_bits in checkpoint
[   54.544428][  T916] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   54.557575][  T916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   54.573713][  T916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   54.589865][  T916] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   54.603247][  T916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.608725][ T1052] loop0: detected capacity change from 0 to 40427
[   54.618689][ T1038] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   54.626275][ T1038] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   54.627540][ T1052] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   54.654815][  T916] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   54.656618][ T1052] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   54.677588][  T916] usb 4-1: No streaming interface found for terminal 2.
[   54.685508][ T1052] F2FS-fs (loop0): invalid crc value
[   54.694297][ T1052] F2FS-fs (loop0): Found nat_bits in checkpoint
[   54.782974][ T1052] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   54.790107][ T1052] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   54.982798][  T545] usb 4-1: USB disconnect, device number 5
[   55.260007][ T1072] fuse: Bad value for 'rootmode'
[   55.302295][   T28] audit: type=1326 audit(1793821973.526:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.210" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8599fb19 code=0x7ffc0000
[   55.328978][   T28] audit: type=1326 audit(1793821973.526:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.210" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f7e8599fb19 code=0x7ffc0000
[   55.354592][   T28] audit: type=1326 audit(1793821973.526:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.210" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8599fb19 code=0x7ffc0000
[   55.379454][   T28] audit: type=1326 audit(1793821973.526:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.0.210" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7e8599fb19 code=0x7ffc0000
[   55.922632][ T1085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'.
[   57.291424][ T1119] fuse: Unknown parameter 'u0000000000000000000000000000000000000000'
[   57.460011][ T1129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'.
[   57.615639][ T1129] loop3: detected capacity change from 0 to 40427
[   57.627040][ T1129] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[   57.635404][ T1129] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   57.643965][  T895] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   57.660746][ T1129] F2FS-fs (loop3): invalid crc value
[   57.667089][ T1129] F2FS-fs (loop3): Found nat_bits in checkpoint
[   57.698586][ T1129] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   57.705677][ T1129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   57.833092][  T895] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   57.841899][  T895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.852095][  T895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   57.861034][  T895] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   57.870760][  T895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.880759][  T895] uvcvideo 1-1:1.0: Found multiple Units with ID 1
[   57.887991][  T895] usb 1-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   57.895035][  T895] usb 1-1: No streaming interface found for terminal 2.
[   58.089096][ T1120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.098585][ T1120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.258830][  T895] usb 1-1: USB disconnect, device number 4
[   60.316088][ T1188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'.
[   60.417087][ T1196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'.
[   60.426196][  T988] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   60.568966][ T1188] loop4: detected capacity change from 0 to 40427
[   60.582220][ T1188] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[   60.597745][ T1188] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   60.613432][ T1188] F2FS-fs (loop4): invalid crc value
[   60.624159][  T988] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   60.633990][ T1188] F2FS-fs (loop4): Found nat_bits in checkpoint
[   60.643166][  T988] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.672032][  T988] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   60.696361][  T988] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   60.710850][ T1188] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   60.721970][  T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.726473][ T1188] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   60.744539][  T988] uvcvideo 4-1:1.0: Found multiple Units with ID 1
[   60.751090][  T988] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   60.788024][ T1193] loop0: detected capacity change from 0 to 40427
[   60.794624][  T988] usb 4-1: No streaming interface found for terminal 2.
[   60.810746][ T1193] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   60.825064][ T1193] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   60.834002][ T1193] F2FS-fs (loop0): invalid crc value
[   60.840225][ T1193] F2FS-fs (loop0): Found nat_bits in checkpoint
[   60.876036][ T1193] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   60.883241][ T1193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   60.953021][ T1176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.971445][ T1176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.546326][ T1226] loop1: detected capacity change from 0 to 40427
[   61.591561][ T1226] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[   61.599141][ T1226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   61.607959][ T1226] F2FS-fs (loop1): invalid crc value
[   61.614270][ T1226] F2FS-fs (loop1): Found nat_bits in checkpoint
[   61.637550][ T1226] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   61.644772][ T1226] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   61.652387][  T916] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   61.843449][  T916] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   61.852316][  T916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.862586][  T916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   61.871480][  T916] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   61.880726][  T916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.896685][  T916] uvcvideo 3-1:1.0: Found multiple Units with ID 1
[   61.903325][  T916] usb 3-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   61.910333][  T916] usb 3-1: No streaming interface found for terminal 2.
[   62.123657][ T1225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.165046][ T1225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.361310][ T1247] fuse: Unknown parameter 'us0000000000000000000000000000000000000000'
[   62.432159][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   62.432172][   T28] audit: type=1326 audit(1793821980.626:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1244 comm="syz.1.253" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   62.473530][   T28] audit: type=1326 audit(1793821980.626:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1244 comm="syz.1.253" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   62.499634][   T28] audit: type=1326 audit(1793821980.626:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1244 comm="syz.1.253" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   62.524509][   T28] audit: type=1326 audit(1793821980.626:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1244 comm="syz.1.253" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   62.549883][   T28] audit: type=1326 audit(1793821980.626:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1244 comm="syz.1.253" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   62.574756][   T28] audit: type=1326 audit(1793821980.626:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1244 comm="syz.1.253" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   62.599591][   T28] audit: type=1326 audit(1793821980.626:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1244 comm="syz.1.253" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   62.624542][   T28] audit: type=1326 audit(1793821980.636:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1244 comm="syz.1.253" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   62.941916][ T1259] loop0: detected capacity change from 0 to 2048
[   62.951638][ T1259] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   62.961541][ T1259] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   62.972522][ T1259] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   62.982759][ T1259] EXT4-fs (loop0): group descriptors corrupted!
[   63.187489][  T298] usb 4-1: USB disconnect, device number 6
[   63.283973][ T1264] loop1: detected capacity change from 0 to 40427
[   63.297512][ T1264] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[   63.322075][ T1264] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   63.344369][ T1264] F2FS-fs (loop1): invalid crc value
[   63.366447][ T1264] F2FS-fs (loop1): Found nat_bits in checkpoint
[   63.450460][ T1264] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   63.457608][ T1264] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   64.271989][  T313] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   64.293112][  T298] usb 3-1: USB disconnect, device number 7
[   64.473010][  T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.490447][  T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   64.531335][  T313] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   64.551983][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.576522][  T313] usb 1-1: Found UVC 1.00 device <unnamed> (0000:0000)
[   64.594068][  T313] usb 1-1: No streaming interface found for terminal 2.
[   64.820260][  T313] usb 1-1: USB disconnect, device number 5
[   64.852005][  T774] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   65.016632][ T1312] loop1: detected capacity change from 0 to 2048
[   65.039520][ T1312] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   65.049903][ T1312] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   65.063312][  T774] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   65.072614][ T1312] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   65.096223][  T774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.108191][ T1312] EXT4-fs (loop1): group descriptors corrupted!
[   65.115253][  T774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   65.125395][  T774] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   65.135510][  T774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.226924][  T774] uvcvideo 4-1:1.0: Found multiple Units with ID 1
[   65.313092][  T774] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   65.418904][  T774] usb 4-1: No streaming interface found for terminal 2.
[   65.433211][ T1302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.490071][ T1302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.852646][ T1318] fuse: Bad value for 'fd'
[   65.859380][   T28] audit: type=1326 audit(1793821984.116:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.0.272" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8599fb19 code=0x7ffc0000
[   65.903642][   T28] audit: type=1326 audit(1793821984.116:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.0.272" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f7e8599fb19 code=0x7ffc0000
[   66.019980][ T1328] loop2: detected capacity change from 0 to 2048
[   66.052940][ T1328] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   66.077102][ T1328] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   66.099909][ T1328] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   66.110663][ T1328] EXT4-fs (loop2): group descriptors corrupted!
[   66.628293][ T1336] loop0: detected capacity change from 0 to 40427
[   66.636616][ T1336] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   66.644219][ T1336] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   66.653077][ T1336] F2FS-fs (loop0): invalid crc value
[   66.670873][ T1336] F2FS-fs (loop0): Found nat_bits in checkpoint
[   66.757194][ T1336] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   66.766584][ T1336] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   67.604986][  T313] usb 4-1: USB disconnect, device number 7
[   68.182540][  T313] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   68.373387][  T313] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   68.388882][  T313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.399335][  T313] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   68.408421][  T313] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   68.417854][  T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.467279][  T313] uvcvideo 4-1:1.0: Found multiple Units with ID 1
[   68.482160][  T313] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   68.502859][  T313] usb 4-1: No streaming interface found for terminal 2.
[   68.722453][ T1363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.732879][ T1363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.854936][ T1378] loop0: detected capacity change from 0 to 40427
[   68.943583][ T1378] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   68.965499][  T313] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   68.974117][ T1378] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   68.987056][ T1378] F2FS-fs (loop0): invalid crc value
[   69.019587][ T1378] F2FS-fs (loop0): Found nat_bits in checkpoint
[   69.107177][ T1378] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   69.117040][ T1378] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   69.130454][ T1387] loop1: detected capacity change from 0 to 40427
[   69.138278][ T1387] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[   69.151262][ T1387] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   69.153007][  T313] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   69.168489][  T313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   69.172963][ T1387] F2FS-fs (loop1): invalid crc value
[   69.178740][  T313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   69.192990][  T313] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   69.202154][  T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.204560][ T1387] F2FS-fs (loop1): Found nat_bits in checkpoint
[   69.212745][  T313] usb 5-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   69.223479][  T313] usb 5-1: No streaming interface found for terminal 2.
[   69.244066][ T1387] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   69.251228][ T1387] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   69.391998][  T774] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   69.444926][   T40] usb 5-1: USB disconnect, device number 2
[   69.593178][  T774] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   69.602035][  T774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   69.612173][  T774] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   69.621258][  T774] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   69.630554][  T774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.697258][  T774] usb 3-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   69.704899][  T774] usb 3-1: No streaming interface found for terminal 2.
[   69.800542][  T313] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   69.893116][    T6] usb 3-1: USB disconnect, device number 8
[   69.993127][  T313] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   70.001915][  T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.012128][  T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   70.021010][  T313] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   70.030169][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.039437][  T313] usb 1-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   70.046526][  T313] usb 1-1: No streaming interface found for terminal 2.
[   70.244133][ T1231] usb 1-1: USB disconnect, device number 6
[   70.262038][  T774] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   70.379376][ T1407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'.
[   70.390635][   T28] kauditd_printk_skb: 6 callbacks suppressed
[   70.390649][   T28] audit: type=1400 audit(1793821988.646:242): avc:  denied  { create } for  pid=1406 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   70.443073][  T774] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   70.452528][  T774] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.462953][  T774] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   70.472651][  T774] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   70.482919][  T774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.499704][  T774] usb 5-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   70.507372][  T774] usb 5-1: No streaming interface found for terminal 2.
[   70.711222][  T774] usb 5-1: USB disconnect, device number 3
[   70.786265][ T1231] usb 4-1: USB disconnect, device number 8
[   71.609382][ T1432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'.
[   72.021849][ T1437] fuse: Bad value for 'fd'
[   72.029625][   T28] audit: type=1326 audit(1793821990.286:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.4.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   72.054754][   T28] audit: type=1326 audit(1793821990.286:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.4.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   72.170808][   T28] audit: type=1326 audit(1793821990.286:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.4.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   72.219297][   T28] audit: type=1326 audit(1793821990.286:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.4.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   72.246721][   T28] audit: type=1326 audit(1793821990.286:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.4.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   72.330813][   T28] audit: type=1326 audit(1793821990.286:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.4.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   72.370762][   T28] audit: type=1326 audit(1793821990.286:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.4.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   72.395598][   T28] audit: type=1326 audit(1793821990.286:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.4.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[   72.745877][ T1448] netlink: 260 bytes leftover after parsing attributes in process `syz.2.308'.
[   72.987658][ T1431] loop1: detected capacity change from 0 to 40427
[   73.004070][ T1445] loop3: detected capacity change from 0 to 2048
[   73.067681][ T1431] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[   73.363519][ T1445] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   73.392014][ T1445] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   73.415072][ T1431] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   73.437175][ T1445] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   73.448433][ T1431] F2FS-fs (loop1): invalid crc value
[   73.450608][ T1445] EXT4-fs (loop3): group descriptors corrupted!
[   73.482642][ T1431] F2FS-fs (loop1): Found nat_bits in checkpoint
[   73.540608][ T1431] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   73.549428][ T1431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   74.750381][ T1498] fuse: Unknown parameter 'use00000000000000000000'
[   74.821987][  T313] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   75.023130][  T313] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   75.034744][  T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.045638][  T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   75.054770][  T313] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   75.064112][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.073640][  T313] uvcvideo 1-1:1.0: Found multiple Units with ID 1
[   75.080259][  T313] usb 1-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   75.087323][  T313] usb 1-1: No streaming interface found for terminal 2.
[   75.177855][ T1509] loop4: detected capacity change from 0 to 2048
[   75.186614][ T1509] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   75.196591][ T1509] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   75.207753][ T1509] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[   75.218053][ T1509] EXT4-fs (loop4): group descriptors corrupted!
[   75.284159][ T1490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.292771][ T1490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.306473][ T1513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'.
[   75.454814][ T1511] loop2: detected capacity change from 0 to 40427
[   75.465965][ T1511] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[   75.481452][ T1511] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   75.492648][ T1511] F2FS-fs (loop2): invalid crc value
[   75.508993][ T1511] F2FS-fs (loop2): Found nat_bits in checkpoint
[   75.738658][ T1511] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   75.753960][ T1511] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   75.794586][ T1526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'.
[   77.502960][   T60] usb 1-1: USB disconnect, device number 7
[   77.571560][ T1567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'.
[   77.776916][ T1565] loop0: detected capacity change from 0 to 40427
[   77.784354][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'.
[   77.798284][ T1565] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[   77.809588][ T1565] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   77.820606][ T1565] F2FS-fs (loop0): invalid crc value
[   77.830709][ T1565] F2FS-fs (loop0): Found nat_bits in checkpoint
[   77.880892][ T1565] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   77.888461][ T1565] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   78.884478][ T1579] netlink: 260 bytes leftover after parsing attributes in process `syz.1.342'.
[   79.404257][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   79.518390][ T1602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   79.711984][  T313] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   79.903121][  T313] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   79.916317][  T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.927881][  T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   79.937000][  T313] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   79.957357][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.998658][  T313] usb 1-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   80.011429][  T313] usb 1-1: No streaming interface found for terminal 2.
[   80.318807][ T1620] netlink: 260 bytes leftover after parsing attributes in process `syz.4.355'.
[   80.420740][   T40] usb 1-1: USB disconnect, device number 8
[   81.290271][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'.
[   81.366424][ T1632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   81.470222][ T1642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'.
[   82.328625][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'.
[   83.269016][ T1668] netlink: 260 bytes leftover after parsing attributes in process `syz.3.367'.
[   83.411940][    C0] sched: RT throttling activated
[   83.414390][ T1671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'.
[   83.708726][ T1675] fuse: Unknown parameter 'use00000000000000000000'
[   83.718501][   T28] audit: type=1326 audit(1793822001.976:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.2.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5b9fb19 code=0x7ffc0000
[   83.776086][   T28] audit: type=1326 audit(1793822001.976:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.2.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff4a5b9fb19 code=0x7ffc0000
[   83.829384][   T28] audit: type=1326 audit(1793822001.976:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.2.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5b9fb19 code=0x7ffc0000
[   83.901839][ T1665] loop1: detected capacity change from 0 to 40427
[   83.902372][   T28] audit: type=1326 audit(1793822001.976:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.2.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff4a5b9fb19 code=0x7ffc0000
[   83.919674][ T1665] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[   83.939450][   T28] audit: type=1326 audit(1793822001.976:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.2.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5b9fb19 code=0x7ffc0000
[   83.940926][ T1665] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   83.966766][ T1682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'.
[   83.974220][ T1665] F2FS-fs (loop1): invalid crc value
[   84.036397][ T1687] Zero length message leads to an empty skb
[   84.046963][   T28] audit: type=1326 audit(1793822001.976:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.2.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff4a5b9fb19 code=0x7ffc0000
[   84.092386][  T774] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   84.162280][ T1665] F2FS-fs (loop1): Found nat_bits in checkpoint
[   84.188777][   T28] audit: type=1326 audit(1793822001.976:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.2.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5b9fb19 code=0x7ffc0000
[   84.224695][   T28] audit: type=1326 audit(1793822001.976:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1673 comm="syz.2.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a5b9fb19 code=0x7ffc0000
[   84.249313][ T1665] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   84.257898][ T1665] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   84.298377][  T774] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   84.310311][  T774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.331908][  T774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   84.350766][  T774] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   84.369925][  T774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.392702][  T774] uvcvideo 4-1:1.0: Found multiple Units with ID 1
[   84.399263][  T774] usb 4-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   84.423573][  T774] usb 4-1: No streaming interface found for terminal 2.
[   84.447776][ T1692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'.
[   84.526615][ T1696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'.
[   84.599902][ T1679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.604722][ T1700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'.
[   84.609746][ T1679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.889760][ T1726] fuse: Unknown parameter 'use00000000000000000000'
[   86.076133][   T28] audit: type=1326 audit(1793822004.156:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.1.388" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   86.107963][   T28] audit: type=1326 audit(1793822004.156:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.1.388" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[   86.241972][    T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   86.423072][    T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   86.433379][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.443795][    T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   86.453488][    T6] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   86.462910][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.472676][    T6] uvcvideo 3-1:1.0: Found multiple Units with ID 1
[   86.479343][    T6] usb 3-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   86.486566][    T6] usb 3-1: No streaming interface found for terminal 2.
[   86.537617][  T774] usb 4-1: USB disconnect, device number 9
[   86.593451][ T1738] __nla_validate_parse: 1 callbacks suppressed
[   86.593493][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'.
[   86.665257][ T1742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'.
[   86.682446][ T1723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.802277][ T1723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.236913][ T1758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'.
[   87.323817][ T1757] loop1: detected capacity change from 0 to 40427
[   87.333432][ T1757] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[   87.340990][ T1757] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   87.349742][ T1757] F2FS-fs (loop1): invalid crc value
[   87.359736][ T1757] F2FS-fs (loop1): Found nat_bits in checkpoint
[   87.383831][ T1757] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   87.390914][ T1757] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   87.547417][ T1767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'.
[   87.658182][ T1773] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.003407][ T1783] fuse: Unknown parameter 'use00000000000000000000'
[   88.128117][ T1772] loop4: detected capacity change from 0 to 131072
[   88.147328][ T1772] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[   88.156886][ T1772] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   88.170024][ T1772] F2FS-fs (loop4): Unrecognized mount option "" or missing value
[   88.192105][ T1772] loop4: detected capacity change from 0 to 512
[   88.211658][ T1772] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   88.224746][ T1772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   88.253222][ T1772] EXT4-fs (loop4): 1 truncate cleaned up
[   88.258892][ T1772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   88.431036][  T291] EXT4-fs (loop4): unmounting filesystem.
[   88.509312][ T1792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'.
[   88.749415][ T1790] loop4: detected capacity change from 0 to 40427
[   88.764498][ T1790] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[   88.778658][ T1790] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   88.787975][ T1790] F2FS-fs (loop4): invalid crc value
[   88.844803][    T6] usb 3-1: USB disconnect, device number 9
[   88.865839][ T1790] F2FS-fs (loop4): Found nat_bits in checkpoint
[   89.072523][ T1790] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   89.086184][ T1790] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   89.126332][   T28] kauditd_printk_skb: 22 callbacks suppressed
[   89.126350][   T28] audit: type=1400 audit(1793822007.386:283): avc:  denied  { ioctl } for  pid=1796 comm="syz.3.410" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=87347 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   89.226047][   T28] audit: type=1400 audit(1793822007.486:284): avc:  denied  { setopt } for  pid=1796 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   89.274083][ T1798] loop3: detected capacity change from 0 to 512
[   89.321652][ T1798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   89.350412][ T1798] EXT4-fs (loop3): 1 truncate cleaned up
[   89.358155][ T1798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   89.752929][ T1818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1818 comm=syz.1.415
[   89.765951][ T1818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1818 comm=syz.1.415
[   89.807321][   T28] audit: type=1400 audit(1793822008.066:285): avc:  denied  { setattr } for  pid=1796 comm="syz.3.410" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.916530][ T1825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'.
[   89.928856][  T288] EXT4-fs (loop3): unmounting filesystem.
[   89.946224][   T28] audit: type=1400 audit(1793822008.206:286): avc:  denied  { read write } for  pid=1826 comm="syz.3.418" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   89.952106][ T1828] input: syz1 as /devices/virtual/input/input4
[   89.976807][   T28] audit: type=1400 audit(1793822008.206:287): avc:  denied  { open } for  pid=1826 comm="syz.3.418" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   90.000917][   T28] audit: type=1400 audit(1793822008.206:288): avc:  denied  { ioctl } for  pid=1826 comm="syz.3.418" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   90.027392][   T28] audit: type=1400 audit(1793822008.286:289): avc:  denied  { read } for  pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=796 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   90.057894][   T28] audit: type=1400 audit(1793822008.286:290): avc:  denied  { open } for  pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=796 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   90.081704][   T28] audit: type=1400 audit(1793822008.286:291): avc:  denied  { ioctl } for  pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=796 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   90.087355][ T1824] loop2: detected capacity change from 0 to 40427
[   90.116270][ T1824] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[   90.124148][ T1824] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   90.137865][ T1824] F2FS-fs (loop2): invalid crc value
[   90.163094][ T1824] F2FS-fs (loop2): Found nat_bits in checkpoint
[   90.200491][ T1831] netem: change failed
[   90.218500][ T1824] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   90.229412][ T1824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   90.237999][   T28] audit: type=1400 audit(1793822008.496:292): avc:  denied  { mount } for  pid=1823 comm="syz.2.417" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   90.316266][ T1843] fuse: Unknown parameter '0x0000000000000008'
[   90.630457][ T1850] fuse: Unknown parameter 'use00000000000000000000'
[   90.650587][ T1852] netlink: 260 bytes leftover after parsing attributes in process `syz.1.424'.
[   90.697860][ T1855] FAULT_INJECTION: forcing a failure.
[   90.697860][ T1855] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   90.711468][ T1855] CPU: 1 PID: 1855 Comm: syz.0.425 Not tainted syzkaller #0
[   90.718768][ T1855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   90.728839][ T1855] Call Trace:
[   90.732119][ T1855]  <TASK>
[   90.735046][ T1855]  __dump_stack+0x21/0x24
[   90.739396][ T1855]  dump_stack_lvl+0x110/0x170
[   90.744077][ T1855]  ? __cfi_dump_stack_lvl+0x8/0x8
[   90.749096][ T1855]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   90.754723][ T1855]  dump_stack+0x15/0x24
[   90.758877][ T1855]  should_fail_ex+0x3bf/0x510
[   90.763555][ T1855]  should_fail+0xb/0x10
[   90.767710][ T1855]  should_fail_usercopy+0x1a/0x20
[   90.772729][ T1855]  _copy_from_user+0x1e/0xc0
[   90.777312][ T1855]  kvm_arch_dev_ioctl+0x32f/0x890
[   90.782333][ T1855]  ? __cfi_kvm_arch_dev_ioctl+0x10/0x10
[   90.787879][ T1855]  ? __schedule+0xcbb/0x1700
[   90.792470][ T1855]  ? selinux_file_ioctl+0x3ad/0x4c0
[   90.797667][ T1855]  ? switch_mm_irqs_off+0x724/0x960
[   90.802860][ T1855]  kvm_dev_ioctl+0xd6/0x1200
[   90.807441][ T1855]  ? __kasan_check_read+0x11/0x20
[   90.812458][ T1855]  ? __fget_files+0x2d1/0x330
[   90.817131][ T1855]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[   90.822244][ T1855]  ? security_file_ioctl+0x95/0xc0
[   90.827348][ T1855]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[   90.832468][ T1855]  __se_sys_ioctl+0x12f/0x1b0
[   90.837147][ T1855]  __x64_sys_ioctl+0x7b/0x90
[   90.841740][ T1855]  x64_sys_call+0x58b/0x9a0
[   90.846239][ T1855]  do_syscall_64+0x4c/0xa0
[   90.850652][ T1855]  ? clear_bhb_loop+0x30/0x80
[   90.855326][ T1855]  ? clear_bhb_loop+0x30/0x80
[   90.860000][ T1855]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.865908][ T1855] RIP: 0033:0x7f7e8599fb19
[   90.870332][ T1855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.889941][ T1855] RSP: 002b:00007f7e867f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.898399][ T1855] RAX: ffffffffffffffda RBX: 00007f7e85c25fa0 RCX: 00007f7e8599fb19
[   90.906371][ T1855] RDX: 0000000000000000 RSI: 00000000c008ae05 RDI: 0000000000000003
[   90.914336][ T1855] RBP: 00007f7e867f0090 R08: 0000000000000000 R09: 0000000000000000
[   90.922303][ T1855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.930273][ T1855] R13: 00007f7e85c26038 R14: 00007f7e85c25fa0 R15: 00007ffee90ffd28
[   90.938255][ T1855]  </TASK>
[   91.582173][ T1231] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   91.638831][ T1863] loop2: detected capacity change from 0 to 40427
[   91.647726][ T1862] netlink: 'syz.1.428': attribute type 1 has an invalid length.
[   91.655725][    T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   91.664700][ T1863] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   91.671056][ T1863] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   91.682626][ T1863] F2FS-fs (loop2): invalid crc value
[   91.685924][ T1871] loop1: detected capacity change from 0 to 512
[   91.715168][ T1863] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   91.727442][ T1871] =======================================================
[   91.727442][ T1871] WARNING: The mand mount option has been deprecated and
[   91.727442][ T1871]          and is ignored by this kernel. Remove the mand
[   91.727442][ T1871]          option from the mount to silence this warning.
[   91.727442][ T1871] =======================================================
[   91.765374][ T1871] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   91.787684][ T1863] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   91.795087][ T1863] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   91.814953][ T1871] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.431: Failed to acquire dquot type 1
[   91.834397][ T1871] EXT4-fs (loop1): 1 truncate cleaned up
[   91.840347][ T1871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   91.840377][ T1863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'.
[   91.863012][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.863083][ T1231] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   91.878754][    T6] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   91.890561][ T1231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.905108][ T1231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   91.908011][    T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[   91.914186][ T1231] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   91.932277][ T1231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.936655][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.951053][ T1231] usb 5-1: Found UVC 71.01 device <unnamed> (0000:0000)
[   91.958328][ T1231] usb 5-1: No streaming interface found for terminal 2.
[   91.961331][    T6] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[   91.979440][    T6] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[   91.986909][    T6] cdc_acm: probe of 4-1:1.0 failed with error -22
[   91.987667][  T290] syz-executor: attempt to access beyond end of device
[   91.987667][  T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   92.304640][   T40] usb 4-1: USB disconnect, device number 10
[   92.413766][ T1893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.433'.
[   92.425318][ T1893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'.
[   92.434500][ T1893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'.
[   92.437722][    T6] usb 5-1: USB disconnect, device number 4
[   93.249230][ T1911] netlink: 260 bytes leftover after parsing attributes in process `syz.4.438'.
[   94.103829][ T1917] fuse: Unknown parameter 'use00000000000000000000'
[   94.137419][   T28] kauditd_printk_skb: 37 callbacks suppressed
[   94.137433][   T28] audit: type=1400 audit(1793822012.396:328): avc:  denied  { mounton } for  pid=1920 comm="syz.2.440" path="/84/file0" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   94.183867][ T1922] loop4: detected capacity change from 0 to 256
[   94.222409][ T1922] exfat: Bad value for 'uid'
[   94.259982][   T28] audit: type=1400 audit(1793822012.436:329): avc:  denied  { read } for  pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   94.287127][ T1922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.441'.
[   94.328205][   T28] audit: type=1400 audit(1793822012.436:330): avc:  denied  { read } for  pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=2229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   94.764010][   T28] audit: type=1400 audit(1793822012.436:331): avc:  denied  { open } for  pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   94.879011][   T28] audit: type=1400 audit(1793822012.436:332): avc:  denied  { getattr } for  pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   94.902427][   T28] audit: type=1400 audit(1793822012.846:333): avc:  denied  { ioctl } for  pid=1932 comm="syz.1.444" path="socket:[88333]" dev="sockfs" ino=88333 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.285481][ T1948] loop2: detected capacity change from 0 to 512
[   95.444433][ T1948] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[   95.458964][ T1948] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.449: corrupted inode contents
[   95.471078][ T1948] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #16: comm syz.2.449: mark_inode_dirty error
[   95.482825][ T1948] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.449: corrupted inode contents
[   95.494934][ T1948] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.449: mark_inode_dirty error
[   95.507288][ T1948] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.449: corrupted inode contents
[   95.519310][ T1948] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.449: mark_inode_dirty error
[   95.530737][ T1948] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.449: corrupted inode contents
[   95.542947][ T1948] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   95.560846][ T1948] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.449: corrupted inode contents
[   95.574315][ T1948] EXT4-fs error (device loop2): ext4_truncate:4327: inode #16: comm syz.2.449: mark_inode_dirty error
[   95.586912][ T1948] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   95.606585][ T1948] EXT4-fs (loop2): 1 truncate cleaned up
[   96.586300][  T483] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   96.596421][ T1948] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   96.605610][  T483] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1
[   96.617451][ T1948] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.629280][ T1948] EXT4-fs (loop2): unmounting filesystem.
[   96.652833][ T1959] netlink: 260 bytes leftover after parsing attributes in process `syz.4.451'.
[   96.762872][ T1964] fuseblk: Unknown parameter 'Kroupd'
[   96.783353][ T1887] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[   96.937731][   T28] audit: type=1400 audit(1793822015.176:334): avc:  denied  { unlink } for  pid=1965 comm="syz.4.453" name="#1" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   96.944859][ T1970] loop4: detected capacity change from 0 to 512
[   96.974207][ T1970] overlayfs: failed to get inode (-116)
[   96.980132][ T1970] overlayfs: failed to get inode (-116)
[   96.985951][ T1970] overlayfs: failed to get inode (-116)
[   97.230068][ T1970] loop4: detected capacity change from 0 to 256
[   97.238703][ T1970] exfat: Deprecated parameter 'utf8'
[   97.244477][ T1970] exfat: Deprecated parameter 'namecase'
[   97.250132][ T1970] exfat: Deprecated parameter 'utf8'
[   97.255533][ T1970] exfat: Bad value for 'uid'
[   97.573096][ T1973] program syz.0.455 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.626329][   T28] audit: type=1400 audit(1793822015.886:335): avc:  denied  { ioctl } for  pid=1975 comm="syz.1.456" path="socket:[92475]" dev="sockfs" ino=92475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.990546][   T28] audit: type=1400 audit(1793822016.236:336): avc:  denied  { bind } for  pid=1975 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   98.146937][ T1994] fuse: Unknown parameter '0x0000000000000008'
[   98.911522][ T2009] loop4: detected capacity change from 0 to 512
[   98.955059][ T2009] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   98.972477][ T2009] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.054489][ T2019] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.464: corrupted inode contents
[   99.067527][ T2019] EXT4-fs (loop4): Remounting filesystem read-only
[   99.074347][ T2019] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.464: mark_inode_dirty error
[   99.085867][ T2019] EXT4-fs (loop4): Remounting filesystem read-only
[   99.092839][ T2019] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.464: corrupted inode contents
[   99.105944][ T2019] EXT4-fs (loop4): Remounting filesystem read-only
[   99.113697][ T2020] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.464: corrupted inode contents
[   99.125774][ T2020] EXT4-fs (loop4): Remounting filesystem read-only
[   99.132510][ T2020] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.464: mark_inode_dirty error
[   99.144023][ T2020] EXT4-fs (loop4): Remounting filesystem read-only
[   99.150654][ T2020] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.464: corrupted inode contents
[   99.162902][ T2020] EXT4-fs (loop4): Remounting filesystem read-only
[   99.169481][ T2020] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.464: mark_inode_dirty error
[   99.180954][ T2020] EXT4-fs (loop4): Remounting filesystem read-only
[   99.187924][ T2020] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.464: corrupted inode contents
[   99.200025][ T2020] EXT4-fs (loop4): Remounting filesystem read-only
[   99.206725][ T2020] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #2: comm syz.4.464: mark_inode_dirty error
[   99.218242][ T2020] EXT4-fs (loop4): Remounting filesystem read-only
[   99.278604][ T2019] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #2: comm syz.4.464: corrupted inode contents
[   99.295893][   T28] kauditd_printk_skb: 16 callbacks suppressed
[   99.295909][   T28] audit: type=1400 audit(1793822017.556:353): avc:  denied  { getopt } for  pid=2008 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   99.321528][  T916] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   99.521992][  T916] usb 1-1: Using ep0 maxpacket: 32
[   99.528270][  T916] usb 1-1: config 0 has an invalid interface number: 189 but max is 0
[   99.536538][  T916] usb 1-1: config 0 has no interface number 0
[   99.542900][  T916] usb 1-1: config 0 interface 189 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[   99.554147][  T916] usb 1-1: config 0 interface 189 altsetting 128 has an invalid endpoint descriptor of length 2, skipping
[   99.565547][  T916] usb 1-1: config 0 interface 189 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   99.578857][  T916] usb 1-1: config 0 interface 189 has no altsetting 0
[   99.587099][  T916] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0134, bcdDevice=aa.35
[   99.596346][  T916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.604570][  T916] usb 1-1: Product: syz
[   99.608762][  T916] usb 1-1: Manufacturer: syz
[   99.613410][  T916] usb 1-1: SerialNumber: syz
[   99.618575][  T916] usb 1-1: config 0 descriptor??
[   99.755036][   T28] audit: type=1400 audit(1793822018.016:354): avc:  denied  { create } for  pid=2026 comm="syz.4.468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   99.776577][   T28] audit: type=1400 audit(1793822018.016:355): avc:  denied  { mounton } for  pid=2026 comm="syz.4.468" path="/93/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   99.833308][   T28] audit: type=1400 audit(1793822018.096:356): avc:  denied  { setopt } for  pid=2017 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   99.862209][   T40] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   99.870126][   T28] audit: type=1400 audit(1793822018.116:357): avc:  denied  { write } for  pid=2017 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   99.870151][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   99.889566][   T28] audit: type=1400 audit(1793822018.116:358): avc:  denied  { read } for  pid=2017 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   99.909389][  T916] ftdi_sio 1-1:0.189: FTDI USB Serial Device converter detected
[   99.915076][   T28] audit: type=1400 audit(1793822018.156:359): avc:  denied  { ioctl } for  pid=2017 comm="syz.0.465" path="socket:[95954]" dev="sockfs" ino=95954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   99.933596][  T916] ftdi_sio ttyUSB0: unknown device type: 0xaa35
[  100.065480][   T40] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  100.085643][   T40] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.138112][   T40] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  100.169732][  T916] usb 1-1: USB disconnect, device number 9
[  100.176344][  T916] ftdi_sio 1-1:0.189: device disconnected
[  100.203837][   T40] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  100.221050][   T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.232932][   T40] usb 2-1: Found UVC 71.01 device <unnamed> (0000:0000)
[  100.240021][   T40] usb 2-1: No streaming interface found for terminal 2.
[  100.247971][   T28] audit: type=1400 audit(1793822018.506:360): avc:  denied  { ioctl } for  pid=2036 comm="syz.3.470" path="socket:[95177]" dev="sockfs" ino=95177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  100.435036][   T40] usb 2-1: USB disconnect, device number 6
[  100.554744][ T2040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'.
[  100.630482][ T2043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'.
[  102.412582][ T2028] Bluetooth: hci0: command 0x1003 tx timeout
[  102.413388][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  102.467553][ T2043] loop0: detected capacity change from 0 to 40427
[  102.481823][ T2043] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[  102.513253][ T2043] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  102.524812][ T2043] F2FS-fs (loop0): invalid crc value
[  102.531101][ T2043] F2FS-fs (loop0): Found nat_bits in checkpoint
[  102.568934][ T2043] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  102.612148][ T2043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  102.633176][ T2051] fuse: Unknown parameter '0x0000000000000008'
[  102.642114][   T28] audit: type=1326 audit(1793822020.896:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.3.474" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  102.700820][   T28] audit: type=1326 audit(1793822020.896:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.3.474" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  102.749147][ T2055] loop2: detected capacity change from 0 to 1024
[  102.773882][ T2055] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.839133][ T2055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  102.869028][ T2063] loop0: detected capacity change from 0 to 512
[  102.914536][ T2063] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.478: bg 0: block 473: padding at end of block bitmap is not set
[  102.931461][ T2063] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  102.941285][ T2063] EXT4-fs (loop0): 1 orphan inode deleted
[  102.947169][ T2063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  102.956937][   T10] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1
[  102.968942][ T2063] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.009001][  T289] EXT4-fs (loop0): unmounting filesystem.
[  103.106293][ T2078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'.
[  103.418299][ T2085] loop3: detected capacity change from 0 to 512
[  103.428244][ T2085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.443816][ T2085] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  103.452902][ T2085] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.543527][  T288] EXT4-fs (loop3): unmounting filesystem.
[  103.583282][  T290] EXT4-fs (loop2): unmounting filesystem.
[  103.596987][ T2092] TCP: TCP_TX_DELAY enabled
[  103.611647][ T2094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'.
[  103.621127][ T2094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'.
[  103.670829][ T2096] fuse: Unknown parameter '0x0000000000000008'
[  103.900446][ T2108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'.
[  103.962040][    T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  104.112823][ T2108] loop2: detected capacity change from 0 to 40427
[  104.122020][    T6] usb 2-1: device descriptor read/64, error -71
[  104.137503][ T2108] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[  104.145460][ T2108] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  104.154283][ T2108] F2FS-fs (loop2): invalid crc value
[  104.160935][ T2108] F2FS-fs (loop2): Found nat_bits in checkpoint
[  104.198028][ T2108] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  104.205180][ T2108] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  104.392025][    T6] usb 2-1: device descriptor read/64, error -71
[  104.406101][   T28] kauditd_printk_skb: 21 callbacks suppressed
[  104.406116][   T28] audit: type=1400 audit(1793822022.666:383): avc:  denied  { search } for  pid=2119 comm="syz.3.492" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  104.407367][ T2120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'.
[  104.412396][   T28] audit: type=1400 audit(1793822022.666:384): avc:  denied  { read write } for  pid=2119 comm="syz.3.492" name="dynamic_events" dev="tracefs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  104.436664][ T2120] IPv6: sit1: Disabled Multicast RS
[  104.443038][   T28] audit: type=1400 audit(1793822022.666:385): avc:  denied  { open } for  pid=2119 comm="syz.3.492" path="/89/tracefs/dynamic_events" dev="tracefs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  104.616435][ T2125] fuse: Unknown parameter '0x0000000000000008'
[  104.624885][   T28] audit: type=1326 audit(1793822022.886:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2122 comm="syz.3.493" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  104.650028][   T28] audit: type=1326 audit(1793822022.886:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2122 comm="syz.3.493" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  104.674774][   T28] audit: type=1326 audit(1793822022.886:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2122 comm="syz.3.493" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  104.692008][    T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  104.699918][   T28] audit: type=1326 audit(1793822022.886:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2122 comm="syz.3.493" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  104.731519][   T28] audit: type=1326 audit(1793822022.886:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2122 comm="syz.3.493" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  104.757265][   T28] audit: type=1326 audit(1793822022.886:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2122 comm="syz.3.493" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  104.782360][   T28] audit: type=1326 audit(1793822022.886:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2122 comm="syz.3.493" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  104.840823][ T2130] loop2: detected capacity change from 0 to 7
[  104.852100][    T6] usb 2-1: device descriptor read/64, error -71
[  105.058880][ T2135] loop0: detected capacity change from 0 to 256
[  105.068509][ T2135] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  105.121986][    T6] usb 2-1: device descriptor read/64, error -71
[  105.242076][    T6] usb usb2-port1: attempt power cycle
[  105.460368][ T2143] fuse: Unknown parameter 'use00000000000000000000'
[  105.661993][    T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  105.693152][    T6] usb 2-1: device descriptor read/8, error -71
[  105.853066][    T6] usb 2-1: device descriptor read/8, error -71
[  105.983294][ T2153] loop0: detected capacity change from 0 to 512
[  106.005977][ T2153] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  106.022219][ T2153] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.502: corrupted inode contents
[  106.034374][ T2153] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #16: comm syz.0.502: mark_inode_dirty error
[  106.045893][ T2153] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.502: corrupted inode contents
[  106.058178][ T2153] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.502: mark_inode_dirty error
[  106.069877][ T2153] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.502: corrupted inode contents
[  106.081916][ T2153] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.502: mark_inode_dirty error
[  106.094188][ T2153] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.502: corrupted inode contents
[  106.107324][ T2153] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  106.116304][ T2153] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #16: comm syz.0.502: corrupted inode contents
[  106.122493][    T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  106.129272][ T2153] EXT4-fs error (device loop0): ext4_truncate:4327: inode #16: comm syz.0.502: mark_inode_dirty error
[  106.147076][ T2153] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  106.156380][ T2153] EXT4-fs (loop0): 1 truncate cleaned up
[  106.162100][ T2153] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  106.171118][ T2153] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.172559][   T10] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1
[  106.194052][    T6] usb 2-1: device descriptor read/8, error -71
[  106.200454][ T2153] EXT4-fs (loop0): unmounting filesystem.
[  106.210651][ T2161] loop3: detected capacity change from 0 to 256
[  106.219450][ T2161] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  106.351521][ T2167] fuseblk: Unknown parameter 'Kroupd'
[  106.353019][    T6] usb 2-1: device descriptor read/8, error -71
[  106.380107][ T2165] loop3: detected capacity change from 0 to 40427
[  106.396266][ T2165] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  106.403682][ T2165] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  106.412200][ T2165] F2FS-fs (loop3): Image doesn't support compression
[  106.419263][ T2165] F2FS-fs (loop3): Image doesn't support compression
[  106.426440][ T2165] F2FS-fs (loop3): invalid crc value
[  106.432766][ T2165] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  106.463841][ T2165] F2FS-fs (loop3): Start checkpoint disabled!
[  106.470441][ T2165] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  106.478098][ T2165] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  106.512479][    T6] usb usb2-port1: unable to enumerate USB device
[  106.520490][ T2165] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  106.734296][ T2175] fuse: Unknown parameter '0x0000000000000008'
[  106.853752][ T2178] Driver unsupported XDP return value 0 on prog  (id 200) dev N/A, expect packet loss!
[  106.993013][   T10] kworker/u4:1: attempt to access beyond end of device
[  106.993013][   T10] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  107.632570][ T2201] fuse: Unknown parameter 'use00000000000000000000'
[  108.419782][ T2208] loop0: detected capacity change from 0 to 512
[  108.426275][ T2208] overlayfs: failed to get inode (-116)
[  108.431963][ T2208] overlayfs: failed to get inode (-116)
[  108.437562][ T2208] overlayfs: failed to get inode (-116)
[  108.537598][  T392] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  109.339085][ T2221] loop0: detected capacity change from 0 to 512
[  109.402036][   T60] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  109.415051][ T2223] loop2: detected capacity change from 0 to 512
[  109.439072][ T2221] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  109.448047][ T2225] loop4: detected capacity change from 0 to 512
[  109.454484][ T2221] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c0a8, mo2=0002]
[  109.467992][ T2221] EXT4-fs (loop0): orphan cleanup on readonly fs
[  109.478293][ T2221] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.520: Allocating blocks 42-43 which overlap fs metadata
[  109.557776][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  109.564469][ T2221] __quota_error: 89 callbacks suppressed
[  109.564484][ T2221] Quota error (device loop0): write_blk: dquota write failed
[  109.577615][ T2221] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  109.587573][ T2221] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.520: Failed to acquire dquot type 0
[  109.610144][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  109.622079][   T60] usb 4-1: device descriptor read/64, error -71
[  109.636776][ T2225] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  109.652123][ T2221] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  109.667103][ T2225] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.522: corrupted inode contents
[  109.679775][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  109.686858][ T2225] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #16: comm syz.4.522: mark_inode_dirty error
[  109.698421][ T2221] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.520: corrupted inode contents
[  109.712578][ T2223] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  109.727688][ T2225] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.522: corrupted inode contents
[  109.739995][ T2223] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.521: corrupted inode contents
[  109.752228][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  109.758917][ T2221] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #12: comm syz.0.520: mark_inode_dirty error
[  109.770879][ T2225] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.522: mark_inode_dirty error
[  109.782458][ T2223] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #16: comm syz.2.521: mark_inode_dirty error
[  109.790266][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  109.794512][ T2223] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.521: corrupted inode contents
[  109.800744][ T2225] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.522: corrupted inode contents
[  109.812667][ T2223] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.521: mark_inode_dirty error
[  109.824114][ T2221] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.520: corrupted inode contents
[  109.824705][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  109.835907][ T2225] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.522: mark_inode_dirty error
[  109.852327][ T2223] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.521: corrupted inode contents
[  109.854572][ T2221] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.520: mark_inode_dirty error
[  109.869530][ T2223] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.521: mark_inode_dirty error
[  109.877124][ T2225] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.522: corrupted inode contents
[  109.888706][ T2223] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.521: corrupted inode contents
[  109.900353][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  109.911550][ T2223] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  109.923095][   T60] usb 4-1: device descriptor read/64, error -71
[  109.929672][ T2221] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.520: corrupted inode contents
[  109.939219][ T2225] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  109.944588][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  109.956332][ T2223] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.521: corrupted inode contents
[  109.972229][ T2225] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.522: corrupted inode contents
[  109.983272][ T2223] EXT4-fs error (device loop2): ext4_truncate:4327: inode #16: comm syz.2.521: mark_inode_dirty error
[  110.002032][ T2221] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  110.006004][ T2223] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  110.024384][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  110.031034][ T2225] EXT4-fs error (device loop4): ext4_truncate:4327: inode #16: comm syz.4.522: mark_inode_dirty error
[  110.031111][ T2221] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.520: corrupted inode contents
[  110.053966][ T2225] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  110.054118][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  110.063161][ T2223] EXT4-fs (loop2): 1 truncate cleaned up
[  110.069604][ T2221] EXT4-fs error (device loop0): ext4_truncate:4327: inode #12: comm syz.0.520: mark_inode_dirty error
[  110.086302][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  110.088245][ T2223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  110.092836][ T2221] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  110.093019][  T483] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  110.106153][ T2225] EXT4-fs (loop4): 1 truncate cleaned up
[  110.125995][  T483] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1
[  110.137674][ T2223] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.148217][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  110.152432][ T2225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  110.164153][ T2221] EXT4-fs (loop0): 1 truncate cleaned up
[  110.164522][ T2225] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.172114][  T483] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  110.189973][  T483] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1
[  110.204173][ T2223] EXT4-fs (loop2): unmounting filesystem.
[  110.214584][ T2225] EXT4-fs (loop4): unmounting filesystem.
[  110.222103][ T2221] EXT4-fs (loop0): pa ffff888115d7d5e8: logic 1, phys. 41, len 23
[  110.229978][ T2221] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 21, pa_free 22
[  110.240424][ T2221] EXT4-fs (loop0): Remounting filesystem read-only
[  110.247361][   T60] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  110.262256][ T2221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  110.411412][   T28] audit: type=1400 audit(1793822028.666:481): avc:  denied  { create } for  pid=2216 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  110.431455][   T60] usb 4-1: device descriptor read/64, error -71
[  110.448143][   T28] audit: type=1400 audit(1793822028.706:482): avc:  denied  { write } for  pid=2216 comm="syz.0.520" path="socket:[114121]" dev="sockfs" ino=114121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  110.684725][  T289] EXT4-fs (loop0): unmounting filesystem.
[  110.712014][   T60] usb 4-1: device descriptor read/64, error -71
[  110.843367][   T60] usb usb4-port1: attempt power cycle
[  111.112079][  T774] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  111.177073][ T2252] fuse: Unknown parameter 'use00000000000000000000'
[  111.185345][   T28] audit: type=1326 audit(1793822029.446:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.4.528" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[  111.216888][   T28] audit: type=1326 audit(1793822029.446:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.4.528" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[  111.248794][   T28] audit: type=1326 audit(1793822029.446:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.4.528" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[  111.273649][   T28] audit: type=1326 audit(1793822029.446:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.4.528" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f4bb9fb19 code=0x7ffc0000
[  111.282119][   T60] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  111.333006][  T774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.347151][  T774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.357480][  T774] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  111.366818][  T774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.375831][   T60] usb 4-1: device descriptor read/8, error -71
[  111.384760][  T774] usb 2-1: config 0 descriptor??
[  111.532984][   T60] usb 4-1: device descriptor read/8, error -71
[  111.779302][ T2270] fuse: Unknown parameter '0x0000000000000008'
[  111.881990][   T60] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  111.913699][   T60] usb 4-1: device descriptor read/8, error -71
[  112.291792][   T60] usb 4-1: device descriptor read/8, error -71
[  112.442250][   T60] usb usb4-port1: unable to enumerate USB device
[  113.927310][  T774] usbhid 2-1:0.0: can't add hid device: -71
[  113.933477][  T774] usbhid: probe of 2-1:0.0 failed with error -71
[  114.002522][  T774] usb 2-1: USB disconnect, device number 11
[  115.761986][ T2280] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  115.988558][ T2280] usb 3-1: device descriptor read/64, error -71
[  117.272025][ T2280] usb 3-1: device descriptor read/64, error -71
[  117.336840][ T2351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'.
[  117.452038][ T2354] fuse: Unknown parameter '0x0000000000000008'
[  117.562241][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  117.592110][   T28] audit: type=1326 audit(1793822035.716:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.1.557" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[  117.737030][   T28] audit: type=1326 audit(1793822035.716:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.1.557" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[  117.848095][   T28] audit: type=1326 audit(1793822035.716:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.1.557" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[  117.908145][   T28] audit: type=1326 audit(1793822035.716:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.1.557" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[  117.942058][   T28] audit: type=1326 audit(1793822035.716:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.1.557" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[  117.976614][ T2280] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  118.035550][   T28] audit: type=1326 audit(1793822035.716:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.1.557" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[  118.055879][ T2342] loop4: detected capacity change from 0 to 40427
[  118.067672][   T28] audit: type=1326 audit(1793822035.716:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.1.557" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[  118.100174][ T2342] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[  118.119712][  T313] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  118.128303][   T28] audit: type=1326 audit(1793822035.716:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.1.557" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54b99fb19 code=0x7ffc0000
[  118.435818][ T2342] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  118.452028][ T2342] F2FS-fs (loop4): invalid crc value
[  118.475445][ T2342] F2FS-fs (loop4): Found nat_bits in checkpoint
[  118.536052][ T2342] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  119.446135][ T2342] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  119.573379][   T28] audit: type=1400 audit(1793822037.836:507): avc:  denied  { write } for  pid=2373 comm="syz.3.562" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  119.596493][   T28] audit: type=1400 audit(1793822037.836:508): avc:  denied  { ioctl } for  pid=2373 comm="syz.3.562" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  119.653058][  T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.672358][  T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.717451][  T313] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  119.741990][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.758657][ T2389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'.
[  119.787339][  T313] usb 1-1: config 0 descriptor??
[  120.274426][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[  120.405057][ T2412] fuse: Unknown parameter '0x0000000000000008'
[  120.616865][ T2422] fuse: Unknown parameter 'use00000000000000000000'
[  120.704478][ T2421] loop3: detected capacity change from 0 to 512
[  121.739961][ T2438] netlink: 260 bytes leftover after parsing attributes in process `syz.1.575'.
[  122.409221][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'.
[  122.516648][  T313] usbhid 1-1:0.0: can't add hid device: -71
[  122.522680][  T313] usbhid: probe of 1-1:0.0 failed with error -71
[  122.542781][  T313] usb 1-1: USB disconnect, device number 10
[  122.551508][ T2447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'.
[  122.759277][ T2456] loop4: detected capacity change from 0 to 512
[  122.766403][ T2456] overlayfs: failed to get inode (-116)
[  122.772451][ T2456] overlayfs: failed to get inode (-116)
[  122.778272][ T2456] overlayfs: failed to get inode (-116)
[  124.232042][  T392] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  124.425532][ T2467] fuse: Unknown parameter 'use00000000000000000000'
[  124.648252][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  124.648271][   T28] audit: type=1326 audit(1793822042.696:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.3.585" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  124.726466][   T28] audit: type=1326 audit(1793822042.696:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.3.585" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  125.029930][   T28] audit: type=1326 audit(1793822042.696:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.3.585" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  125.063878][   T28] audit: type=1326 audit(1793822042.696:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.3.585" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  125.089690][   T28] audit: type=1326 audit(1793822042.696:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.3.585" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  125.115619][   T28] audit: type=1326 audit(1793822042.696:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.3.585" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  125.162915][   T28] audit: type=1326 audit(1793822042.696:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.3.585" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  125.215463][   T28] audit: type=1326 audit(1793822042.696:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2464 comm="syz.3.585" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  125.332025][   T60] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  125.533025][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.541467][ T2491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'.
[  125.554144][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.575754][ T2493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'.
[  125.584683][   T60] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  125.596958][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.617538][   T60] usb 1-1: config 0 descriptor??
[  126.970753][ T2519] fuse: Unknown parameter 'use00000000000000000000'
[  127.100413][   T28] audit: type=1326 audit(1793822045.236:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2515 comm="syz.3.599" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  127.148649][   T28] audit: type=1326 audit(1793822045.236:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2515 comm="syz.3.599" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f9be839fb19 code=0x7ffc0000
[  127.847636][ T2537] loop4: detected capacity change from 0 to 512
[  127.855314][ T2537] overlayfs: failed to get inode (-116)
[  128.013368][ T2537] overlayfs: failed to get inode (-116)
[  128.019530][ T2537] overlayfs: failed to get inode (-116)
[  129.359969][ T2538] netlink: 260 bytes leftover after parsing attributes in process `syz.3.603'.
[  129.532275][   T60] usbhid 1-1:0.0: can't add hid device: -71
[  129.594422][   T60] usbhid: probe of 1-1:0.0 failed with error -71
[  129.605343][   T60] usb 1-1: USB disconnect, device number 11
[  129.615485][ T2554] loop4: detected capacity change from 0 to 512
[  129.681686][ T2554] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  129.701912][ T2545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[  129.734522][ T2554] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.610: corrupted inode contents
[  129.766145][ T2554] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #16: comm syz.4.610: mark_inode_dirty error
[  129.785457][ T2563] loop2: detected capacity change from 0 to 512
[  129.813695][ T2554] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.610: corrupted inode contents
[  129.853307][ T2554] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.610: mark_inode_dirty error
[  129.871816][ T2563] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  129.906322][ T2554] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.610: corrupted inode contents
[  129.933874][ T2563] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.612: corrupted inode contents
[  129.955556][ T2554] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.610: mark_inode_dirty error
[  129.985056][ T2563] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #16: comm syz.2.612: mark_inode_dirty error
[  130.001791][ T2554] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.610: corrupted inode contents
[  130.036227][ T2554] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  130.052174][ T2563] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.612: corrupted inode contents
[  130.076816][ T2554] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.610: corrupted inode contents
[  130.092203][ T2563] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.612: mark_inode_dirty error
[  130.110516][ T2563] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.612: corrupted inode contents
[  130.113857][ T2554] EXT4-fs error (device loop4): ext4_truncate:4327: inode #16: comm syz.4.610: mark_inode_dirty error
[  130.134660][ T2563] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.612: mark_inode_dirty error
[  130.157961][ T2554] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  130.168704][ T2563] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.612: corrupted inode contents
[  130.177483][ T2554] EXT4-fs (loop4): 1 truncate cleaned up
[  130.190244][ T2554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  130.194783][ T2563] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  130.202711][   T10] __quota_error: 14 callbacks suppressed
[  130.202725][   T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  130.221617][ T2563] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.612: corrupted inode contents
[  130.261599][ T2563] EXT4-fs error (device loop2): ext4_truncate:4327: inode #16: comm syz.2.612: mark_inode_dirty error
[  130.295647][ T2554] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.317799][ T2563] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  130.342442][   T10] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1
[  130.368172][ T2563] EXT4-fs (loop2): 1 truncate cleaned up
[  130.392336][ T2563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  130.439934][ T2563] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.472163][   T10] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  130.482108][   T10] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1
[  130.502862][  T291] EXT4-fs (loop4): unmounting filesystem.
[  130.512254][ T2563] EXT4-fs (loop2): unmounting filesystem.
[  130.596067][ T2577] loop0: detected capacity change from 0 to 512
[  130.644935][ T2583] loop2: detected capacity change from 0 to 512
[  130.702367][ T2587] loop4: detected capacity change from 0 to 4096
[  130.703377][  T392] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  130.760279][ T2587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  130.797379][  T291] EXT4-fs (loop4): unmounting filesystem.
[  130.880325][   T28] audit: type=1400 audit(1793822049.136:550): avc:  denied  { create } for  pid=2582 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  130.943222][   T28] audit: type=1400 audit(1793822049.136:551): avc:  denied  { write } for  pid=2582 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  131.104119][ T2601] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  131.168181][ T2603] loop3: detected capacity change from 0 to 512
[  131.174915][ T2603] EXT4-fs: dax option not supported
[  131.192672][  T392] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  131.566001][ T2613] FAULT_INJECTION: forcing a failure.
[  131.566001][ T2613] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  131.602004][ T2613] CPU: 1 PID: 2613 Comm: syz.2.630 Not tainted syzkaller #0
[  131.609335][ T2613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  131.619403][ T2613] Call Trace:
[  131.622690][ T2613]  <TASK>
[  131.625626][ T2613]  __dump_stack+0x21/0x24
[  131.629968][ T2613]  dump_stack_lvl+0x110/0x170
[  131.634661][ T2613]  ? __cfi_dump_stack_lvl+0x8/0x8
[  131.639695][ T2613]  ? preempt_schedule_irq+0xca/0x120
[  131.644992][ T2613]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  131.650726][ T2613]  ? __alloc_pages+0x1fa/0x610
[  131.655514][ T2613]  dump_stack+0x15/0x24
[  131.659679][ T2613]  should_fail_ex+0x3bf/0x510
[  131.664403][ T2613]  should_fail_alloc_page+0x61/0x90
[  131.669626][ T2613]  prepare_alloc_pages+0x131/0x570
[  131.674763][ T2613]  ? __alloc_pages_bulk+0x9d0/0x9d0
[  131.679992][ T2613]  ? __vmalloc_node_range+0x1398/0x1440
[  131.685559][ T2613]  __alloc_pages+0x15b/0x610
[  131.690191][ T2613]  ? __cfi___alloc_pages+0x10/0x10
[  131.695318][ T2613]  ? __cfi___wake_up+0x10/0x10
[  131.700102][ T2613]  ? rwsem_write_trylock+0x136/0x300
[  131.705404][ T2613]  ? serial8250_do_pm+0x3d0/0x4d0
[  131.710446][ T2613]  get_zeroed_page+0x19/0x40
[  131.715054][ T2613]  uart_startup+0x1e0/0xb90
[  131.719579][ T2613]  ? mutex_lock+0x93/0x1b0
[  131.724009][ T2613]  uart_port_activate+0x8c/0xf0
[  131.728876][ T2613]  tty_port_open+0x1e6/0x2a0
[  131.733477][ T2613]  uart_open+0x47/0x60
[  131.737558][ T2613]  tty_open+0x5ce/0x1040
[  131.741807][ T2613]  ? __cfi_tty_open+0x10/0x10
[  131.746488][ T2613]  chrdev_open+0x593/0x600
[  131.750915][ T2613]  ? __cfi_chrdev_open+0x10/0x10
[  131.755855][ T2613]  ? fsnotify_perm+0x3e9/0x5b0
[  131.760647][ T2613]  do_dentry_open+0x885/0x11f0
[  131.765436][ T2613]  ? __cfi_chrdev_open+0x10/0x10
[  131.770386][ T2613]  vfs_open+0x73/0x80
[  131.774378][ T2613]  path_openat+0x2699/0x2f30
[  131.778987][ T2613]  ? switch_mm_irqs_off+0x724/0x960
[  131.784191][ T2613]  ? __schedule+0xcbb/0x1700
[  131.788794][ T2613]  ? do_filp_open+0x420/0x420
[  131.793482][ T2613]  do_filp_open+0x1ee/0x420
[  131.798003][ T2613]  ? __cfi_do_filp_open+0x10/0x10
[  131.803044][ T2613]  ? alloc_fd+0x4c1/0x570
[  131.804566][ T2609] loop4: detected capacity change from 0 to 40427
[  131.807380][ T2613]  do_sys_openat2+0x15e/0x820
[  131.818452][ T2613]  ? __se_sys_futex+0x136/0x310
[  131.823314][ T2613]  ? do_sys_open+0xe0/0xe0
[  131.827739][ T2613]  ? __this_cpu_preempt_check+0x13/0x20
[  131.833303][ T2613]  ? xfd_validate_state+0x70/0x150
[  131.838422][ T2613]  __x64_sys_openat+0x136/0x160
[  131.843282][ T2613]  x64_sys_call+0x783/0x9a0
[  131.847786][ T2613]  do_syscall_64+0x4c/0xa0
[  131.852201][ T2613]  ? clear_bhb_loop+0x30/0x80
[  131.856879][ T2613]  ? clear_bhb_loop+0x30/0x80
[  131.861648][ T2613]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.864190][ T2609] F2FS-fs (loop4): invalid crc value
[  131.867543][ T2613] RIP: 0033:0x7ff4a5b9fb19
[  131.867565][ T2613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.896822][ T2613] RSP: 002b:00007ff4a6b2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  131.905243][ T2613] RAX: ffffffffffffffda RBX: 00007ff4a5e25fa0 RCX: 00007ff4a5b9fb19
[  131.913222][ T2613] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  131.921216][ T2613] RBP: 00007ff4a5c37b70 R08: 0000000000000000 R09: 0000000000000000
[  131.929195][ T2613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.937166][ T2613] R13: 00007ff4a5e26038 R14: 00007ff4a5e25fa0 R15: 00007ffd2e25c558
[  131.945148][ T2613]  </TASK>
[  131.975371][ T2609] F2FS-fs (loop4): Found nat_bits in checkpoint
[  132.062045][   T28] audit: type=1400 audit(1793822050.316:552): avc:  denied  { unmount } for  pid=2619 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  132.160826][ T2609] F2FS-fs (loop4): Start checkpoint disabled!
[  132.181695][ T2609] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  132.209518][ T2609] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  132.375885][    T8] kworker/u4:0: attempt to access beyond end of device
[  132.375885][    T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  132.440720][ T2609] VFS:Filesystem freeze failed
[  132.510058][   T28] audit: type=1400 audit(1793822050.766:553): avc:  denied  { mounton } for  pid=2631 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  132.535653][   T28] audit: type=1400 audit(1793822050.776:554): avc:  denied  { create } for  pid=2631 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  132.802404][ T2631] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.824631][ T2631] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.847352][ T2631] device bridge_slave_0 entered promiscuous mode
[  132.874496][ T2631] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.887253][   T28] audit: type=1400 audit(1793822051.146:555): avc:  denied  { read } for  pid=2629 comm="syz.3.639" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  132.887982][ T2631] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.918614][ T2631] device bridge_slave_1 entered promiscuous mode
[  132.925652][   T28] audit: type=1400 audit(1793822051.146:556): avc:  denied  { open } for  pid=2629 comm="syz.3.639" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  132.953526][ T2638] ==================================================================
[  132.961612][ T2638] BUG: KASAN: use-after-free in sk_skb_adjust_room+0x34e/0x610
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  132.969236][ T2638] Read of size 8 at addr ffff88812117ca48 by task syz.3.639/2638
[  132.976960][ T2638] 
[  132.979294][ T2638] CPU: 0 PID: 2638 Comm: syz.3.639 Not tainted syzkaller #0
[  132.986766][ T2638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  132.996834][ T2638] Call Trace:
[  133.000123][ T2638]  <TASK>
[  133.003061][ T2638]  __dump_stack+0x21/0x24
[  133.007402][ T2638]  dump_stack_lvl+0x110/0x170
[  133.012090][ T2638]  ? __cfi_dump_stack_lvl+0x8/0x8
[  133.017142][ T2638]  ? sk_skb_adjust_room+0x34e/0x610
[  133.022548][ T2638]  ? sk_skb_adjust_room+0x34e/0x610
[  133.027775][ T2638]  print_address_description+0x71/0x200
[  133.033351][ T2638]  print_report+0x4a/0x60
[  133.037704][ T2638]  kasan_report+0x122/0x150
[  133.042229][ T2638]  ? sk_skb_adjust_room+0x34e/0x610
[  133.047448][ T2638]  __asan_report_load8_noabort+0x14/0x20
[  133.053090][ T2638]  sk_skb_adjust_room+0x34e/0x610
[  133.056126][   T28] audit: type=1400 audit(1793822051.216:557): avc:  denied  { write } for  pid=279 comm="syz-executor" path="pipe:[9126]" dev="pipefs" ino=9126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  133.058143][ T2638]  bpf_prog_e15ab8bd9cea3c06+0x19/0x20
[  133.086610][ T2638]  sk_psock_verdict_recv+0x1c8/0x7b0
[  133.091907][ T2638]  ? skb_recv_datagram+0x140/0x180
[  133.097020][ T2638]  unix_stream_read_skb+0x13d/0x300
[  133.102206][ T2638]  ? sysvec_call_function_single+0x61/0xc0
[  133.108000][ T2638]  ? __cfi_sk_psock_verdict_recv+0x10/0x10
[  133.113801][ T2638]  ? __cfi_unix_stream_read_skb+0x10/0x10
[  133.119512][ T2638]  ? __cfi_unix_stream_read_skb+0x10/0x10
[  133.125222][ T2638]  sk_psock_verdict_data_ready+0xaf/0x1d0
[  133.130976][ T2638]  unix_stream_sendmsg+0x631/0xa80
[  133.136080][ T2638]  ? __cfi_unix_stream_sendmsg+0x10/0x10
[  133.141700][ T2638]  ? security_socket_sendmsg+0x93/0xb0
[  133.147150][ T2638]  __sys_sendto+0x4ac/0x660
[  133.151652][ T2638]  ? __cfi___sys_sendto+0x10/0x10
[  133.156663][ T2638]  ? task_woken_rt+0x6d/0x1e0
[  133.161332][ T2638]  ? ttwu_do_activate+0x179/0x2a0
[  133.166352][ T2638]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  133.172146][ T2638]  __x64_sys_sendto+0xe5/0x100
[  133.176902][ T2638]  x64_sys_call+0x83/0x9a0
[  133.181306][ T2638]  do_syscall_64+0x4c/0xa0
[  133.185709][ T2638]  ? clear_bhb_loop+0x30/0x80
[  133.190467][ T2638]  ? clear_bhb_loop+0x30/0x80
[  133.195134][ T2638]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.201012][ T2638] RIP: 0033:0x7f9be839fb19
[  133.205416][ T2638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.225011][ T2638] RSP: 002b:00007f9be91fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  133.233413][ T2638] RAX: ffffffffffffffda RBX: 00007f9be8626090 RCX: 00007f9be839fb19
[  133.241369][ T2638] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000005
[  133.249327][ T2638] RBP: 00007f9be8437b70 R08: 0000000000000000 R09: 0000000000000000
[  133.257305][ T2638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.265267][ T2638] R13: 00007f9be8626128 R14: 00007f9be8626090 R15: 00007ffc76a8afd8
[  133.273233][ T2638]  </TASK>
[  133.276238][ T2638] 
[  133.278542][ T2638] Allocated by task 2529:
[  133.282845][ T2638]  kasan_set_track+0x4b/0x70
[  133.287427][ T2638]  kasan_save_alloc_info+0x1f/0x30
[  133.292527][ T2638]  __kasan_slab_alloc+0x72/0x80
[  133.297382][ T2638]  slab_post_alloc_hook+0x4f/0x2d0
[  133.302494][ T2638]  kmem_cache_alloc+0x166/0x320
[  133.307336][ T2638]  sk_prot_alloc+0x5f/0x320
[  133.311836][ T2638]  sk_alloc+0x3b/0x460
[  133.315894][ T2638]  unix_create1+0xb8/0x710
[  133.320296][ T2638]  unix_create+0x149/0x200
[  133.324700][ T2638]  __sock_create+0x39e/0x7c0
[  133.329320][ T2638]  __sys_socketpair+0x1a1/0x5b0
[  133.334183][ T2638]  __x64_sys_socketpair+0x9b/0xb0
[  133.339200][ T2638]  x64_sys_call+0x6e/0x9a0
[  133.343604][ T2638]  do_syscall_64+0x4c/0xa0
[  133.348013][ T2638]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.353912][ T2638] 
[  133.356225][ T2638] Freed by task 2528:
[  133.360190][ T2638]  kasan_set_track+0x4b/0x70
[  133.364770][ T2638]  kasan_save_free_info+0x2b/0x40
[  133.369809][ T2638]  ____kasan_slab_free+0x132/0x180
[  133.374903][ T2638]  __kasan_slab_free+0x11/0x20
[  133.379669][ T2638]  slab_free_freelist_hook+0xc2/0x190
[  133.385031][ T2638]  kmem_cache_free+0x12d/0x300
[  133.389783][ T2638]  __sk_destruct+0x4b4/0x5e0
[  133.394534][ T2638]  __sk_free+0x30a/0x400
[  133.398765][ T2638]  sk_free+0x54/0x90
[  133.402642][ T2638]  unix_release_sock+0xb6d/0xe60
[  133.407564][ T2638]  unix_release+0x9d/0xd0
[  133.411880][ T2638]  sock_close+0xc9/0x220
[  133.416113][ T2638]  __fput+0x1fd/0x8f0
[  133.420084][ T2638]  ____fput+0x15/0x20
[  133.424144][ T2638]  task_work_run+0x1e1/0x250
[  133.428743][ T2638]  exit_to_user_mode_loop+0x9b/0xb0
[  133.433932][ T2638]  exit_to_user_mode_prepare+0x87/0xd0
[  133.439375][ T2638]  syscall_exit_to_user_mode+0x1a/0x30
[  133.444829][ T2638]  do_syscall_64+0x58/0xa0
[  133.449244][ T2638]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.455239][ T2638] 
[  133.457556][ T2638] The buggy address belongs to the object at ffff88812117ca00
[  133.457556][ T2638]  which belongs to the cache UNIX-STREAM of size 1152
[  133.471697][ T2638] The buggy address is located 72 bytes inside of
[  133.471697][ T2638]  1152-byte region [ffff88812117ca00, ffff88812117ce80)
[  133.484972][ T2638] 
[  133.487296][ T2638] The buggy address belongs to the physical page:
[  133.493691][ T2638] page:ffffea0004845f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812117de00 pfn:0x12117c
[  133.505215][ T2638] head:ffffea0004845f00 order:2 compound_mapcount:0 compound_pincount:0
[  133.513552][ T2638] flags: 0x4000000000010200(slab|head|zone=1)
[  133.519639][ T2638] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888108870780
[  133.528230][ T2638] raw: ffff88812117de00 00000000800c000a 00000001ffffffff 0000000000000000
[  133.536796][ T2638] page dumped because: kasan: bad access detected
[  133.543200][ T2638] page_owner tracks the page as allocated
[  133.548894][ T2638] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 278, tgid 278 (sshd-session), ts 18080995075, free_ts 0
[  133.569194][ T2638]  post_alloc_hook+0x1f5/0x210
[  133.573954][ T2638]  prep_new_page+0x1c/0x110
[  133.578443][ T2638]  get_page_from_freelist+0x2ca9/0x2d20
[  133.583978][ T2638]  __alloc_pages+0x1fa/0x610
[  133.588554][ T2638]  alloc_slab_page+0x6e/0xf0
[  133.593131][ T2638]  new_slab+0x98/0x3e0
[  133.597181][ T2638]  ___slab_alloc+0x70f/0xb70
[  133.601758][ T2638]  __slab_alloc+0x5e/0xa0
[  133.606075][ T2638]  kmem_cache_alloc+0x1a8/0x320
[  133.610925][ T2638]  sk_prot_alloc+0x5f/0x320
[  133.615434][ T2638]  sk_alloc+0x3b/0x460
[  133.619504][ T2638]  unix_create1+0xb8/0x710
[  133.623910][ T2638]  unix_stream_connect+0x1cd/0xda0
[  133.629012][ T2638]  __sys_connect+0x3da/0x460
[  133.633592][ T2638]  __x64_sys_connect+0x7a/0x90
[  133.638355][ T2638]  x64_sys_call+0x88d/0x9a0
[  133.642845][ T2638] page_owner free stack trace missing
[  133.648195][ T2638] 
[  133.650500][ T2638] Memory state around the buggy address:
[  133.656109][ T2638]  ffff88812117c900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  133.664153][ T2638]  ffff88812117c980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  133.672202][ T2638] >ffff88812117ca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.680245][ T2638]                                               ^
[  133.686725][ T2638]  ffff88812117ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.694768][ T2638]  ffff88812117cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.702809][ T2638] ==================================================================
[  133.711076][ T2638] Disabling lock debugging due to kernel taint
[  133.754002][ T2623] EXT4-fs (loop1): unmounting filesystem.
[  133.761802][  T352] device bridge_slave_1 left promiscuous mode
[  133.792033][  T352] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.852168][  T352] device bridge_slave_0 left promiscuous mode
[  133.858446][  T352] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.480050][  T352] device veth1_macvtap left promiscuous mode
[  134.486306][  T352] device veth0_vlan left promiscuous mode
[  135.553556][  T352] device bridge_slave_1 left promiscuous mode
[  135.559688][  T352] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.567319][  T352] device bridge_slave_0 left promiscuous mode
[  135.573526][  T352] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.581174][  T352] device bridge_slave_1 left promiscuous mode
[  135.587573][  T352] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.595334][  T352] device bridge_slave_0 left promiscuous mode
[  135.601432][  T352] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.609483][  T352] device bridge_slave_1 left promiscuous mode
[  135.615748][  T352] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.623239][  T352] device bridge_slave_0 left promiscuous mode
[  135.629365][  T352] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.637817][  T352] device bridge_slave_1 left promiscuous mode
[  135.644116][  T352] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.651623][  T352] device bridge_slave_0 left promiscuous mode
[  135.657888][  T352] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.666242][  T352] device bridge_slave_1 left promiscuous mode
[  135.672463][  T352] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.679898][  T352] device bridge_slave_0 left promiscuous mode
[  135.686264][  T352] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.694725][  T352] device veth1_macvtap left promiscuous mode
[  135.700922][  T352] device veth0_vlan left promiscuous mode
[  135.707041][  T352] device veth1_macvtap left promiscuous mode
[  135.713195][  T352] device veth0_vlan left promiscuous mode
[  135.719362][  T352] device veth1_macvtap left promiscuous mode
[  135.725471][  T352] device veth0_vlan left promiscuous mode
[  135.731531][  T352] device veth1_macvtap left promiscuous mode
[  135.737763][  T352] device veth0_vlan left promiscuous mode