last executing test programs: 2m13.540561286s ago: executing program 3 (id=188): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x10001) 2m13.40624197s ago: executing program 3 (id=190): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c696f636861727365743d63703836302c757365667265652c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c757466383d302c636865636b3d6e6f726d616c2c636f6465706167653d3837342c636865636b3d7374726963742c696f636861727365743d63703836332c757466383d312c696f636861727365743d6370313235302c757466383d302c696f636861727365743d63703933362c0047ed74dd04d7d7fa100bf325df27f1c4bd03233a3623f59fd37a9048790704f0fd2efbfaf7476187249a2c3746bcb0b80ddb9381546ea2036c8b17c5033b1444fd9d00800f5daf243c63bb05a932a64e493d541e0316b5cd3c457731cdf9b99c5938886f7da09cd1fd3a1d78e8e3ce556f198d8ee739a85a56c1529e6f548789ffb25bfdc59efb6b9f80ee0774644748500e6e9b626ef9f30de5f38aaa6fb5f04c38de06f863ff0c4e6211fbbb468bee3b6d06d90d92824f3be0bcb5bd5df952bfc2afa1141f1ff73d"], 0x3, 0x27b, &(0x7f0000000640)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000a40)=ANY=[], 0x841, 0x2) 2m13.287957281s ago: executing program 3 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='0fc5:1227:b,', 0xc) 2m13.200182067s ago: executing program 3 (id=193): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) 2m12.858128179s ago: executing program 3 (id=199): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0) umount2(&(0x7f0000000140)='./file0/file0/..\x00', 0x4) umount2(&(0x7f0000000000)='./file0/file0/..\x00', 0x1) 2m12.735175742s ago: executing program 3 (id=201): open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) 2m12.601138636s ago: executing program 32 (id=201): open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) 2m7.12292923s ago: executing program 5 (id=286): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m7.027386597s ago: executing program 5 (id=288): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffc80, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) 2m6.906027709s ago: executing program 5 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x800, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"}) 2m6.864340237s ago: executing program 5 (id=293): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$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") syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1) fchown(r0, 0xee00, 0xee01) 2m6.659316994s ago: executing program 5 (id=297): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5385, &(0x7f0000002280)=0x3) 2m6.455115331s ago: executing program 5 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x400000b6}]}) 2m6.398370061s ago: executing program 33 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x400000b6}]}) 1m52.379440084s ago: executing program 1 (id=525): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x1, 0x4, 0xfffffda8, 0x0, [0x0]}}, 0x29) 1m52.322041435s ago: executing program 1 (id=527): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1m52.280370632s ago: executing program 1 (id=528): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0xc44, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7f}}], [{@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_role={'subj_role', 0x3d, 'name'}}, {@smackfshat={'smackfshat', 0x3d, 'keyring\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, '$\\'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.,'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f0000000500)="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") mount$cgroup(0x0, &(0x7f0000002800)='./file0\x00', 0x0, 0x20040ac, &(0x7f0000002880)={[{@name={'name', 0x3d, '.,'}}]}) 1m52.137833838s ago: executing program 1 (id=531): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0xa1080a, &(0x7f00000002c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESOCT=0x0], 0x21, 0x1508, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 1m51.811358588s ago: executing program 1 (id=538): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1411c2, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m51.672669482s ago: executing program 1 (id=543): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) 1m51.536119257s ago: executing program 34 (id=543): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) 56.279074591s ago: executing program 2 (id=1465): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f00000003c0), 0x1, 0xbac, &(0x7f00000017c0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.12061712s ago: executing program 2 (id=1468): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) pread64(r0, &(0x7f0000019040)=""/102364, 0x18fdc, 0x0) 55.950712321s ago: executing program 2 (id=1478): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 55.821897174s ago: executing program 2 (id=1482): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x50, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030303030303033323736372c6d656d6f72793d6c6f772c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c646973636172642c6e6f657874656e745f63616368652c6e6f71756f74612c636865636b706f696e743d64697361626c652c00363101be2f2414c1ff59cf0ff87782bcde43f7989389b5df0c89a39b9879753e01c3936df8f39b60655e3609ad58e855a62cde73be8487d7f660b8da7993b53c4bea49f4e3f2d6b81984f7eeaafb913ce47a483219b0f7b60a2b1f30eb272e8137a471ec62a32d98bb77dfeb8bb0c56400"/344], 0x4, 0x5525, &(0x7f00000014c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) mount$bind(&(0x7f0000002cc0)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x81001, 0x0) stat(&(0x7f0000003480)='./file0\x00', &(0x7f0000000140)) 55.230560521s ago: executing program 2 (id=1489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000900000000000000010000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000009b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e0b933e2ccc4dea1a5a49b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x13d) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 54.220527584s ago: executing program 2 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x3a, 0x0, 0x9}]}) 54.154844627s ago: executing program 35 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x3a, 0x0, 0x9}]}) 23.81152575s ago: executing program 6 (id=2040): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_gettime(0x0, &(0x7f0000000000)) 23.130979164s ago: executing program 6 (id=2053): openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x75}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 23.064049436s ago: executing program 6 (id=2054): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r0, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004940)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 22.996693359s ago: executing program 6 (id=2055): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 22.677055046s ago: executing program 6 (id=2059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 21.757955573s ago: executing program 6 (id=2084): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x200058, &(0x7f00000006c0)={{'fd', 0x3d, r1}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 21.527990565s ago: executing program 36 (id=2084): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x200058, &(0x7f00000006c0)={{'fd', 0x3d, r1}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 4.318444437s ago: executing program 0 (id=2391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x2, @remote, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='P', 0x1}], 0x1}, 0x400c814) 4.251316448s ago: executing program 0 (id=2383): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000500)=""/100, 0x64, 0x0) 4.185006491s ago: executing program 0 (id=2384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x561, 0x0, 0x1001}]}) 4.111833994s ago: executing program 0 (id=2387): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d03686269b3, 0x8031, 0xffffffffffffffff, 0x1000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec118b233cce7e4a1e49738d9679d33610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6762c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8508002e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928ff0100000000000095adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b6ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c303cf786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0xea60}}) 4.052037045s ago: executing program 0 (id=2389): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x850, 0x800, {0x0, 0xea60}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3.996022955s ago: executing program 0 (id=2393): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x1, ' '}}, 0x7) 2.297380743s ago: executing program 4 (id=2421): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) 2.2074733s ago: executing program 9 (id=2422): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x159, 0x17}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) 1.979201601s ago: executing program 9 (id=2428): openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/failslab/interval\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) 1.898380626s ago: executing program 9 (id=2432): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 1.803110133s ago: executing program 9 (id=2434): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x74, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x40005}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xb06f}]}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.740432134s ago: executing program 9 (id=2436): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000661109a000000000004"], 0x0, 0x5}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.719108488s ago: executing program 4 (id=2437): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 1.581067273s ago: executing program 4 (id=2439): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @remote, @void, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x6, 0x6, "7d1acf", 0x8, 0x3a, 0x0, @private0, @private2, {[], @ndisc_rs}}}}}}, 0x0) 1.580588823s ago: executing program 8 (id=2449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000040)) 1.481608161s ago: executing program 8 (id=2440): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x7) wait4(r0, 0x0, 0x8, 0x0) 1.43174433s ago: executing program 4 (id=2441): r0 = syz_ublk_setup_io_uring(0x757b, &(0x7f00000016c0)={0x0, 0xed61, 0x40, 0x0, 0xe6}, &(0x7f0000001740)=0x0, &(0x7f0000001780)=0x0, &(0x7f00000017c0)=0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001800), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000001bc0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001b80)=@any_dev={0x2, 0x954, 0x0, 0x0, 0x1000, 0x10001, 0x0, 0x0, 0x160}}}, 0xfffffffffffffffe) 1.127359735s ago: executing program 4 (id=2443): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) 1.031167903s ago: executing program 4 (id=2445): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003000600103d100001400001020301090285000301d8100c080b010201013002099f821426010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c800109b602000001023000090402010101023000172401060080000007000212000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 887.502189ms ago: executing program 7 (id=2448): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 719.067229ms ago: executing program 7 (id=2450): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgid(0xffffffffffffffff) 616.506358ms ago: executing program 8 (id=2451): syz_usb_connect(0x5, 0x73, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001680)={0x18, {"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", 0x1000}}, 0x1006) 553.05115ms ago: executing program 7 (id=2452): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) 517.345276ms ago: executing program 7 (id=2453): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f0000000080), 0x4) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20040000}, 0x24004800) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 479.181993ms ago: executing program 7 (id=2454): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 393.181959ms ago: executing program 9 (id=2455): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7a, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0x8, "9a345e88"}, @local=@item_012={0x2, 0x2, 0x4, "0f6e"}, @main=@item_4={0x3, 0x0, 0x8, "eb9a0906"}, @local=@item_012={0x0, 0x2, 0xe}, @main=@item_4={0x3, 0x0, 0x8, "9766743a"}, @global=@item_4={0x3, 0x1, 0x0, "42ee9050"}]}}, 0x0}, 0x0) 298.611656ms ago: executing program 7 (id=2457): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 60.834339ms ago: executing program 8 (id=2458): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r1}, 0x0, 0x0, 0x0) 30.650924ms ago: executing program 8 (id=2459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="11"], 0xa) 0s ago: executing program 8 (id=2460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) kernel console output (not intermixed with test programs): F2FS-fs (loop4): invalid crc value [ 89.555157][ T2495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.652436][ T2495] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 89.667605][ T2495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.750906][ T2529] loop6: detected capacity change from 0 to 256 [ 89.776564][ T2529] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 89.878332][ T28] audit: type=1400 audit(1790266853.084:334): avc: denied { append } for pid=2538 comm="syz.0.921" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 89.942118][ T28] audit: type=1400 audit(1790266853.104:335): avc: denied { write } for pid=2538 comm="syz.0.921" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 89.965936][ T2544] loop6: detected capacity change from 0 to 256 [ 90.067576][ T2550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.926'. [ 90.122158][ T2552] loop7: detected capacity change from 0 to 256 [ 90.149388][ T2552] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 90.234610][ T2557] sd 0:0:1:0: PR command failed: 1026 [ 90.241988][ T2557] sd 0:0:1:0: Sense Key : 0x5 [current] [ 90.253312][ T2557] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 90.349773][ T2567] netlink: 'syz.2.933': attribute type 15 has an invalid length. [ 90.358962][ T28] audit: type=1400 audit(1790266853.564:336): avc: denied { setopt } for pid=2568 comm="syz.4.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.446673][ T28] audit: type=1400 audit(1790266853.654:337): avc: denied { write } for pid=2577 comm="syz.6.937" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.470381][ T2578] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 90.513369][ T28] audit: type=1400 audit(1790266853.714:338): avc: denied { bind } for pid=2582 comm="syz.7.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.843634][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 91.002750][ T28] audit: type=1400 audit(1790266854.204:339): avc: denied { write } for pid=2631 comm="syz.2.963" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.027388][ T2633] usb usb9: usbfs: process 2633 (syz.2.963) did not claim interface 47 before use [ 91.033897][ T40] usb 5-1: Using ep0 maxpacket: 8 [ 91.057432][ T40] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.075426][ T40] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.082493][ T40] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 91.092186][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.112258][ T40] usb 5-1: config 0 descriptor?? [ 91.118390][ T28] audit: type=1326 audit(1790266854.324:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.0.967" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdb9e159 code=0x7ffc0000 [ 91.166135][ T28] audit: type=1326 audit(1790266854.354:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.0.967" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdb9e159 code=0x7ffc0000 [ 91.191551][ T28] audit: type=1326 audit(1790266854.354:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.0.967" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdb9e159 code=0x7ffc0000 [ 91.233256][ T2645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 91.242281][ T2645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'. [ 91.268647][ T2647] xt_hashlimit: size too large, truncated to 1048576 [ 91.408537][ T2604] loop6: detected capacity change from 0 to 131072 [ 91.432403][ T2604] F2FS-fs (loop6): Test dummy encryption mode enabled [ 91.440275][ T2604] F2FS-fs (loop6): invalid crc value [ 91.465927][ T2604] F2FS-fs (loop6): Found nat_bits in checkpoint [ 91.527312][ T40] lenovo 0003:17EF:6067.0008: unknown main item tag 0x0 [ 91.536581][ T40] lenovo 0003:17EF:6067.0008: unknown main item tag 0x0 [ 91.545494][ T2604] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 91.554333][ T40] lenovo 0003:17EF:6067.0008: item fetching failed at offset 2/41 [ 91.575698][ T2604] F2FS-fs (loop6): Start checkpoint disabled! [ 91.585600][ T2604] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 91.597871][ T40] lenovo 0003:17EF:6067.0008: hid_parse failed [ 91.600985][ T2604] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 91.628139][ T40] lenovo: probe of 0003:17EF:6067.0008 failed with error -22 [ 91.728912][ T40] usb 5-1: USB disconnect, device number 6 [ 91.854981][ T2665] overlayfs: empty lowerdir [ 91.906952][ T2667] ªªªªªª: renamed from vlan0 [ 92.011442][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 92.033604][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 92.298341][ T2684] usb usb9: usbfs: process 2684 (syz.0.995) did not claim interface 47 before use [ 92.612178][ T2707] netlink: 104 bytes leftover after parsing attributes in process `syz.7.994'. [ 92.759941][ T2715] loop2: detected capacity change from 0 to 256 [ 92.782209][ T2715] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 93.502361][ T2758] loop4: detected capacity change from 0 to 256 [ 94.298875][ T2787] loop6: detected capacity change from 0 to 256 [ 94.324980][ T2787] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 94.486412][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 94.486433][ T28] audit: type=1400 audit(1790266857.694:361): avc: denied { write } for pid=2797 comm="syz.6.1037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 94.610240][ T2808] overlayfs: empty lowerdir [ 95.489189][ T2823] loop2: detected capacity change from 0 to 40427 [ 95.504530][ T2823] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 95.536502][ T2823] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.547079][ T2823] F2FS-fs (loop2): invalid crc value [ 95.588399][ T2823] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.639887][ T2823] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.647173][ T2823] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.732063][ T2843] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.811467][ T2850] sd 0:0:1:0: PR command failed: 1026 [ 95.821697][ T2850] sd 0:0:1:0: Sense Key : 0x5 [current] [ 95.829588][ T2850] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 96.003738][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.203778][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 96.211230][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.222858][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.233266][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.242866][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.276312][ T24] usb 5-1: config 0 descriptor?? [ 96.280096][ T24] hub 5-1:0.0: USB hub found [ 96.324708][ T2880] loop2: detected capacity change from 0 to 512 [ 96.360641][ T2882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1071'. [ 96.389554][ T2880] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.399735][ T2880] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.459443][ T2880] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 96.475695][ T2880] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 96.503216][ T24] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 96.511846][ T2880] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.511846][ T2880] [ 96.552112][ T2880] EXT4-fs (loop2): Total free blocks count 0 [ 96.561456][ T2880] EXT4-fs (loop2): Free/Dirty block details [ 96.568006][ T2880] EXT4-fs (loop2): free_blocks=65280 [ 96.574482][ T2880] EXT4-fs (loop2): dirty_blocks=32 [ 96.592104][ T2880] EXT4-fs (loop2): Block reservation details [ 96.609019][ T2880] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 96.672228][ T1872] EXT4-fs (loop2): unmounting filesystem. [ 96.716095][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 96.723413][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 96.801222][ T24] usb 5-1: USB disconnect, device number 7 [ 96.894516][ T2905] loop2: detected capacity change from 0 to 2048 [ 96.914100][ T584] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.922594][ T2905] EXT4-fs: Ignoring removed bh option [ 96.952896][ T2905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.972539][ T2905] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.037092][ T1872] EXT4-fs (loop2): unmounting filesystem. [ 97.501111][ T2937] loop2: detected capacity change from 0 to 4096 [ 97.535003][ T2937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.574901][ T2943] loop4: detected capacity change from 0 to 1024 [ 97.637550][ T28] audit: type=1400 audit(1790266860.844:362): avc: denied { rename } for pid=2936 comm="syz.2.1093" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.664950][ T2943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.685272][ T2937] EXT4-fs error (device loop2): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.2.1093: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 97.709134][ T2943] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.760273][ T28] audit: type=1400 audit(1790266860.894:363): avc: denied { rmdir } for pid=2936 comm="syz.2.1093" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.790858][ T2943] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.795014][ T2937] EXT4-fs (loop2): Remounting filesystem read-only [ 97.812359][ T2943] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 97.825319][ T2943] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.825319][ T2943] [ 97.837178][ T2937] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: comm syz.2.1093: directory missing '..' [ 97.851838][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.867067][ T2937] EXT4-fs (loop2): Remounting filesystem read-only [ 97.874299][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.912929][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.930060][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.945470][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.946821][ T1872] EXT4-fs (loop2): unmounting filesystem. [ 97.961943][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.981525][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 97.996739][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 98.019560][ T2946] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.1095: lblock 3 mapped to illegal pblock 3 (length 1) [ 98.411308][ T2966] loop6: detected capacity change from 0 to 256 [ 98.437073][ T2966] FAT-fs (loop6): "posix" option is obsolete, not supported now [ 98.526133][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 98.539688][ T2969] loop2: detected capacity change from 0 to 512 [ 98.725697][ T28] audit: type=1400 audit(1790266861.934:364): avc: denied { name_bind } for pid=2984 comm="syz.0.1112" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 98.983787][ T1545] Bluetooth: hci0: command 0x1003 tx timeout [ 98.989915][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.160333][ T3006] loop6: detected capacity change from 0 to 1024 [ 99.201081][ T3000] loop4: detected capacity change from 0 to 4096 [ 99.262837][ T3006] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 99.281881][ T3006] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.307897][ T3000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.329512][ T3006] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.387128][ T3006] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 99.411776][ T3000] EXT4-fs error (device loop4): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.4.1118: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 99.443024][ T3006] EXT4-fs (loop6): This should not happen!! Data will be lost [ 99.443024][ T3006] [ 99.464149][ T3000] EXT4-fs (loop4): Remounting filesystem read-only [ 99.473712][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.481342][ T3000] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: comm syz.4.1118: directory missing '..' [ 99.515239][ T3000] EXT4-fs (loop4): Remounting filesystem read-only [ 99.522299][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.565987][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.581654][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 99.600422][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.655162][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.684200][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.714356][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.733850][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.757523][ T3013] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1119: lblock 3 mapped to illegal pblock 3 (length 1) [ 100.105070][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 100.153807][ T40] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 100.178958][ T28] audit: type=1400 audit(1790266863.384:365): avc: denied { map } for pid=3026 comm="syz.6.1128" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.218892][ T28] audit: type=1400 audit(1790266863.384:366): avc: denied { execute } for pid=3026 comm="syz.6.1128" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.363706][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 100.370562][ T40] usb 8-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.402236][ T40] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.422616][ T40] usb 8-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 100.453092][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.465464][ T40] usb 8-1: config 0 descriptor?? [ 100.535286][ T2996] loop2: detected capacity change from 0 to 131072 [ 100.553017][ T2996] F2FS-fs (loop2): invalid crc value [ 100.590312][ T2996] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.681388][ T2996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.877909][ T40] lenovo 0003:17EF:6067.0009: unknown main item tag 0x0 [ 100.889713][ T40] lenovo 0003:17EF:6067.0009: unknown main item tag 0x0 [ 100.913644][ T40] lenovo 0003:17EF:6067.0009: item fetching failed at offset 2/41 [ 100.924167][ T40] lenovo 0003:17EF:6067.0009: hid_parse failed [ 100.930498][ T40] lenovo: probe of 0003:17EF:6067.0009 failed with error -22 [ 101.088546][ T40] usb 8-1: USB disconnect, device number 3 [ 101.741013][ T3071] loop4: detected capacity change from 0 to 512 [ 101.776542][ T3071] EXT4-fs: Ignoring removed bh option [ 101.837633][ T3071] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1148: inode #1: comm syz.4.1148: iget: illegal inode # [ 101.841133][ T3046] loop6: detected capacity change from 0 to 40427 [ 101.868851][ T3046] F2FS-fs (loop6): invalid crc value [ 101.885786][ T3071] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1148: error while reading EA inode 1 err=-117 [ 101.906914][ T3046] F2FS-fs (loop6): Found nat_bits in checkpoint [ 101.933728][ T3071] EXT4-fs (loop4): 1 orphan inode deleted [ 101.939633][ T3071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.981208][ T28] audit: type=1400 audit(1790266865.184:367): avc: denied { create } for pid=3070 comm="syz.4.1148" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 102.036027][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 102.084978][ T3046] F2FS-fs (loop6): Start checkpoint disabled! [ 102.135857][ T3046] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 102.212815][ T3046] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 102.409610][ T3103] input: syz1 as /devices/virtual/input/input12 [ 102.472575][ T28] audit: type=1400 audit(1790266865.674:368): avc: denied { setopt } for pid=3106 comm="syz.7.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.493776][ T321] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.610400][ T317] kworker/u4:3: attempt to access beyond end of device [ 102.610400][ T317] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 102.683648][ T321] usb 3-1: Using ep0 maxpacket: 8 [ 102.696875][ T321] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.723640][ T321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.740594][ T321] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 102.759648][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.783335][ T321] usb 3-1: config 0 descriptor?? [ 103.403091][ T321] lenovo 0003:17EF:6067.000A: unknown main item tag 0x0 [ 103.421266][ T321] lenovo 0003:17EF:6067.000A: unknown main item tag 0x0 [ 103.428850][ T321] lenovo 0003:17EF:6067.000A: item fetching failed at offset 2/41 [ 103.446893][ T321] lenovo 0003:17EF:6067.000A: hid_parse failed [ 103.469586][ T321] lenovo: probe of 0003:17EF:6067.000A failed with error -22 [ 103.613230][ T321] usb 3-1: USB disconnect, device number 5 [ 103.657851][ T28] audit: type=1400 audit(1790266866.864:369): avc: denied { append } for pid=3150 comm="syz.7.1181" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.944173][ T3158] loop7: detected capacity change from 0 to 1024 [ 104.006939][ T3158] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.046360][ T3158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.064148][ T3158] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 104.072496][ T3158] System zones: 0-1, 3-36 [ 104.084787][ T3158] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 104.119031][ T3146] loop4: detected capacity change from 0 to 40427 [ 104.135370][ T3146] F2FS-fs (loop4): invalid crc value [ 104.178618][ T3146] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.185122][ T3168] loop5: detected capacity change from 0 to 7 [ 104.265737][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 104.275420][ T3146] F2FS-fs (loop4): Start checkpoint disabled! [ 104.293031][ T3146] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 104.318884][ T3146] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 104.505864][ T3185] loop7: detected capacity change from 0 to 512 [ 104.526124][ T3185] EXT4-fs: Ignoring removed bh option [ 104.568664][ T3185] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.1206: inode #1: comm syz.7.1206: iget: illegal inode # [ 104.601772][ T3185] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1206: error while reading EA inode 1 err=-117 [ 104.615557][ T3185] EXT4-fs (loop7): 1 orphan inode deleted [ 104.621356][ T3185] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 104.648148][ T584] kworker/u4:4: attempt to access beyond end of device [ 104.648148][ T584] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 104.672777][ T28] audit: type=1400 audit(1790266867.874:370): avc: denied { read } for pid=3190 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.726363][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 105.015058][ T28] audit: type=1326 audit(1790266868.224:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.4.1194" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb90b79e159 code=0x0 [ 105.173758][ T321] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.234943][ T3221] loop6: detected capacity change from 0 to 2048 [ 105.292105][ T3221] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #4: comm syz.6.1210: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 105.294760][ T3213] loop2: detected capacity change from 0 to 40427 [ 105.332749][ T3213] F2FS-fs (loop2): invalid crc value [ 105.338718][ T3221] EXT4-fs error (device loop6): ext4_quota_enable:7039: comm syz.6.1210: Bad quota inode: 4, type: 1 [ 105.351870][ T3213] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.363704][ T321] usb 1-1: Using ep0 maxpacket: 8 [ 105.372080][ T321] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.399745][ T3221] EXT4-fs warning (device loop6): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.410892][ T321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.424920][ T3221] EXT4-fs (loop6): mount failed [ 105.430112][ T3213] F2FS-fs (loop2): Start checkpoint disabled! [ 105.446619][ T3213] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 105.450226][ T321] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 105.464138][ T3213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 105.492740][ T28] audit: type=1400 audit(1790266868.694:372): avc: denied { read } for pid=3220 comm="syz.6.1210" name="file0" dev="tmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.501269][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.545552][ T321] usb 1-1: config 0 descriptor?? [ 105.577259][ T28] audit: type=1400 audit(1790266868.744:373): avc: denied { open } for pid=3220 comm="syz.6.1210" path="/198/file0" dev="tmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.659211][ T317] kworker/u4:3: attempt to access beyond end of device [ 105.659211][ T317] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 105.799897][ T28] audit: type=1400 audit(1790266869.004:374): avc: denied { ioctl } for pid=3237 comm="syz.6.1218" path="socket:[28613]" dev="sockfs" ino=28613 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.970551][ T321] lenovo 0003:17EF:6067.000B: unknown main item tag 0x0 [ 105.983713][ T321] lenovo 0003:17EF:6067.000B: unknown main item tag 0x0 [ 106.001166][ T321] lenovo 0003:17EF:6067.000B: item fetching failed at offset 2/41 [ 106.019737][ T321] lenovo 0003:17EF:6067.000B: hid_parse failed [ 106.047349][ T321] lenovo: probe of 0003:17EF:6067.000B failed with error -22 [ 106.067480][ T3253] loop4: detected capacity change from 0 to 128 [ 106.132646][ T3253] syz.4.1224: attempt to access beyond end of device [ 106.132646][ T3253] loop4: rw=2049, sector=153, nr_sectors = 48 limit=128 [ 106.160447][ T3253] syz.4.1224: attempt to access beyond end of device [ 106.160447][ T3253] loop4: rw=2049, sector=209, nr_sectors = 5 limit=128 [ 106.189854][ T292] usb 1-1: USB disconnect, device number 7 [ 106.400376][ T28] audit: type=1326 audit(1790266869.604:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3270 comm="syz.6.1230" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x0 [ 106.433113][ T3269] loop4: detected capacity change from 0 to 2048 [ 106.483862][ T3269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.552158][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 106.751274][ T3288] loop2: detected capacity change from 0 to 256 [ 106.770727][ T3288] exfat: Deprecated parameter 'namecase' [ 106.798775][ T3288] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 107.144338][ T3304] loop2: detected capacity change from 0 to 256 [ 107.189790][ T3304] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 107.219701][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 107.319634][ T3311] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1247'. [ 107.645702][ T3336] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 107.885287][ T3324] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 107.908776][ T3324] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 107.943378][ T3324] F2FS-fs (loop2): invalid crc value [ 107.980973][ T3324] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 108.068008][ T3324] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 108.075428][ T3324] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.267309][ T1872] syz-executor: attempt to access beyond end of device [ 108.267309][ T1872] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.414170][ T3342] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 108.449668][ T3342] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 108.504499][ T3342] F2FS-fs (loop7): invalid crc value [ 108.553114][ T3342] F2FS-fs (loop7): Found nat_bits in checkpoint [ 108.676546][ T3342] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 108.693705][ T3342] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 108.707031][ T3382] Dead loop on virtual device ip6_vti0, fix it urgently! [ 109.033794][ T321] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 109.128740][ T3403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1286'. [ 109.146079][ T3405] syz.7.1281 uses obsolete (PF_INET,SOCK_PACKET) [ 109.223776][ T321] usb 7-1: Using ep0 maxpacket: 32 [ 109.240597][ T321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.262480][ T321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.286365][ T321] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.295912][ T321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.306427][ T321] usb 7-1: config 0 descriptor?? [ 109.313433][ T321] hub 7-1:0.0: USB hub found [ 109.516555][ T321] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 109.719660][ T321] usbhid 7-1:0.0: can't add hid device: -71 [ 109.725861][ T321] usbhid: probe of 7-1:0.0 failed with error -71 [ 109.764433][ T321] usb 7-1: USB disconnect, device number 4 [ 110.262800][ T3421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 110.486300][ T28] audit: type=1400 audit(1790266873.694:376): avc: denied { shutdown } for pid=3448 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.532992][ T3453] program syz.4.1309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.574011][ T292] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 110.605660][ T3459] overlayfs: filesystem on './file0' not supported as upperdir [ 110.711986][ T3477] set_capacity_and_notify: 3 callbacks suppressed [ 110.712011][ T3477] loop4: detected capacity change from 0 to 512 [ 110.733977][ T3477] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.783688][ T292] usb 7-1: Using ep0 maxpacket: 8 [ 110.793356][ T292] usb 7-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.812819][ T292] usb 7-1: config 0 interface 0 has no altsetting 0 [ 110.834037][ T3032] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.848416][ T292] usb 7-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 110.857919][ T292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.871701][ T292] usb 7-1: config 0 descriptor?? [ 111.023766][ T3032] usb 3-1: Using ep0 maxpacket: 8 [ 111.033111][ T3032] usb 3-1: config 0 has no interfaces? [ 111.050197][ T3032] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 111.070222][ T3032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.089267][ T3032] usb 3-1: Product: syz [ 111.097552][ T3032] usb 3-1: Manufacturer: syz [ 111.102299][ T3032] usb 3-1: SerialNumber: syz [ 111.124131][ T3032] usb 3-1: config 0 descriptor?? [ 111.166682][ T28] audit: type=1326 audit(1790266874.374:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3508 comm="syz.4.1334" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb90b79e159 code=0x0 [ 111.183879][ T221] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.293468][ T292] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 111.301195][ T292] lenovo 0003:17EF:6067.000C: unknown main item tag 0x0 [ 111.308529][ T292] lenovo 0003:17EF:6067.000C: item fetching failed at offset 2/41 [ 111.317078][ T292] lenovo 0003:17EF:6067.000C: hid_parse failed [ 111.323460][ T292] lenovo: probe of 0003:17EF:6067.000C failed with error -22 [ 111.345893][ T292] usb 3-1: USB disconnect, device number 6 [ 111.385234][ T221] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.397072][ T221] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.407367][ T221] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.420561][ T221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.427260][ T221] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 111.436693][ T221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.445981][ T221] usb 1-1: config 0 descriptor?? [ 111.502690][ T3032] usb 7-1: USB disconnect, device number 5 [ 111.630874][ T3512] loop7: detected capacity change from 0 to 1024 [ 111.647939][ T3512] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.1335: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.666530][ T3497] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1328'. [ 111.677807][ T3512] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 111.683253][ T221] usbhid 1-1:0.0: can't add hid device: -71 [ 111.691245][ T3512] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.1335: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.702277][ T221] usbhid: probe of 1-1:0.0 failed with error -71 [ 111.708643][ T3512] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 111.722751][ T3512] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.1335: Failed to acquire dquot type 0 [ 111.735684][ T221] usb 1-1: USB disconnect, device number 8 [ 111.742109][ T3512] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 111.752727][ T3512] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.1335: mark_inode_dirty error [ 111.764905][ T3512] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 111.776273][ T3512] EXT4-fs (loop7): 1 orphan inode deleted [ 111.782124][ T3512] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 111.794338][ T317] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.810850][ T317] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 111.823730][ T317] EXT4-fs error (device loop7): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0 [ 111.858496][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 111.866263][ T1635] EXT4-fs error (device loop7): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 111.880165][ T1635] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 111.890347][ T1635] EXT4-fs error (device loop7): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 112.056554][ T3535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.146576][ T3546] xt_hashlimit: size too large, truncated to 1048576 [ 112.309075][ T28] audit: type=1400 audit(1790266875.514:378): avc: denied { shutdown } for pid=3559 comm="syz.7.1356" laddr=::1 lport=6 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.353696][ T28] audit: type=1400 audit(1790266875.544:379): avc: denied { read } for pid=3559 comm="syz.7.1356" path="socket:[30757]" dev="sockfs" ino=30757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.613717][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.803790][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 112.810406][ T24] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.843636][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.873767][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 112.884386][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.898102][ T24] usb 1-1: config 0 descriptor?? [ 112.977667][ T3597] loop6: detected capacity change from 0 to 512 [ 113.140257][ T3595] SELinux: avtab: truncated entry [ 113.191603][ T28] audit: type=1400 audit(1790266876.394:380): avc: denied { bind } for pid=3607 comm="syz.6.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.285030][ T3595] SELinux: failed to load policy [ 113.287260][ T3614] loop4: detected capacity change from 0 to 512 [ 113.310116][ T24] lenovo 0003:17EF:6067.000D: unknown main item tag 0x0 [ 113.317824][ T24] lenovo 0003:17EF:6067.000D: unknown main item tag 0x0 [ 113.328706][ T3614] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 113.341182][ T24] lenovo 0003:17EF:6067.000D: item fetching failed at offset 2/41 [ 113.360336][ T3614] EXT4-fs (loop4): invalid journal inode [ 113.366775][ T24] lenovo 0003:17EF:6067.000D: hid_parse failed [ 113.373119][ T3614] EXT4-fs (loop4): can't get journal size [ 113.379429][ T24] lenovo: probe of 0003:17EF:6067.000D failed with error -22 [ 113.406122][ T3614] EXT4-fs (loop4): 1 truncate cleaned up [ 113.412031][ T3614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.460868][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 113.530242][ T321] usb 1-1: USB disconnect, device number 9 [ 113.913729][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.093734][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 114.105846][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 114.130623][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.158849][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 114.171484][ T24] usb 5-1: can't read configurations, error -71 [ 114.281856][ T28] audit: type=1400 audit(1790266877.484:381): avc: denied { ioctl } for pid=3651 comm="syz.6.1397" path="socket:[31748]" dev="sockfs" ino=31748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.511657][ T3659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.538915][ T28] audit: type=1400 audit(1790266877.744:382): avc: denied { read write } for pid=3660 comm="syz.2.1401" name="cpu_dma_latency" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 114.873803][ T3032] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.886559][ T3680] loop7: detected capacity change from 0 to 128 [ 114.908236][ T3680] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 114.918090][ T3680] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.924242][ T28] audit: type=1400 audit(1790266878.134:383): avc: denied { nlmsg_read } for pid=3682 comm="syz.0.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 114.981928][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 115.010178][ T3689] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.065620][ T3032] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.078019][ T3032] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.089787][ T3032] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.090022][ T3032] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.090062][ T3032] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 115.090094][ T3032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.091405][ T3032] usb 3-1: config 0 descriptor?? [ 115.301858][ T3667] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1404'. [ 115.332359][ T3032] usbhid 3-1:0.0: can't add hid device: -71 [ 115.338910][ T3032] usbhid: probe of 3-1:0.0 failed with error -71 [ 115.356092][ T3032] usb 3-1: USB disconnect, device number 7 [ 115.631651][ T3720] loop6: detected capacity change from 0 to 40427 [ 115.646086][ T3720] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 115.669791][ T3720] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 115.688794][ T3720] F2FS-fs (loop6): invalid crc value [ 115.723249][ T3720] F2FS-fs (loop6): Found nat_bits in checkpoint [ 115.755697][ T3733] loop4: detected capacity change from 0 to 4096 [ 115.789436][ T3733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.815174][ T3733] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 115.830702][ T3720] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 115.843801][ T3720] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 115.921760][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 115.942414][ T3741] netlink: 'syz.0.1436': attribute type 12 has an invalid length. [ 116.041423][ T3751] syz.4.1441[3751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.041574][ T3751] syz.4.1441[3751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.567950][ T3801] loop7: detected capacity change from 0 to 256 [ 116.595344][ T3801] exfat: Deprecated parameter 'namecase' [ 116.609377][ T3801] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 116.697409][ T3800] SELinux: avtab: truncated entry [ 116.761179][ T3800] SELinux: failed to load policy [ 116.952517][ T3812] loop2: detected capacity change from 0 to 4096 [ 116.985630][ T3812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.010578][ T3812] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 117.059324][ T1872] EXT4-fs (loop2): unmounting filesystem. [ 117.256278][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 117.256300][ T28] audit: type=1400 audit(1790266880.464:385): avc: denied { getopt } for pid=3839 comm="syz.6.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.301918][ T28] audit: type=1326 audit(1790266880.494:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.7.1480" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3486b9e159 code=0x7ffc0000 [ 117.328063][ T28] audit: type=1326 audit(1790266880.504:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.7.1480" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3486b9e159 code=0x7ffc0000 [ 117.373269][ T28] audit: type=1326 audit(1790266880.504:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.7.1480" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3486b9e159 code=0x7ffc0000 [ 117.419062][ T3849] loop6: detected capacity change from 0 to 4096 [ 117.446899][ T3849] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 117.479101][ T3849] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 117.513670][ T321] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.540086][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 117.628278][ T3855] SELinux: security policydb version 15 (MLS) not backwards compatible [ 117.636854][ T3855] SELinux: failed to load policy [ 117.649258][ T3845] loop2: detected capacity change from 0 to 40427 [ 117.662474][ T3845] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 117.670988][ T3845] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.679761][ T3845] F2FS-fs (loop2): fault_type options not supported [ 117.687222][ T3845] F2FS-fs (loop2): fault_injection options not supported [ 117.695090][ T3845] F2FS-fs (loop2): Image doesn't support compression [ 117.703315][ T3845] F2FS-fs (loop2): invalid crc value [ 117.708886][ T321] usb 5-1: Using ep0 maxpacket: 8 [ 117.717845][ T321] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.727032][ T3845] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.729685][ T321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.742171][ T321] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 117.751444][ T321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.775369][ T321] usb 5-1: config 0 descriptor?? [ 117.803386][ T3845] F2FS-fs (loop2): Start checkpoint disabled! [ 117.812319][ T3845] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 117.820954][ T3845] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.828508][ T3845] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 117.876060][ T28] audit: type=1400 audit(1790266881.084:389): avc: denied { mounton } for pid=3844 comm="syz.2.1482" path="/117/file0/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.904917][ T1872] F2FS-fs (loop2): access invalid blkaddr:4043309056 [ 117.911966][ T1872] CPU: 1 PID: 1872 Comm: syz-executor Tainted: G W syzkaller #0 [ 117.921082][ T1872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.931184][ T1872] Call Trace: [ 117.934514][ T1872] [ 117.937488][ T1872] __dump_stack+0x21/0x24 [ 117.941875][ T1872] dump_stack_lvl+0x110/0x170 [ 117.946604][ T1872] ? __cfi_dump_stack_lvl+0x8/0x8 [ 117.951695][ T1872] dump_stack+0x15/0x24 [ 117.955904][ T1872] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 117.961505][ T1872] f2fs_is_valid_blkaddr+0x23/0x30 [ 117.966794][ T1872] f2fs_map_blocks+0xcc1/0x4060 [ 117.971894][ T1872] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 117.977234][ T1872] ? __cfi_mempool_alloc+0x10/0x10 [ 117.982479][ T1872] ? bio_associate_blkg_from_css+0x960/0xb10 [ 117.988629][ T1872] ? xas_start+0x31d/0x3e0 [ 117.993101][ T1872] ? xa_load+0xad/0xd0 [ 117.997217][ T1872] f2fs_mpage_readpages+0xa46/0x1b20 [ 118.002555][ T1872] ? __kasan_check_read+0x11/0x20 [ 118.007626][ T1872] ? dquot_release_reservation_block+0xa0/0xa0 [ 118.013821][ T1872] ? trace_event_raw_event_f2fs_readpages+0x1e7/0x2f0 [ 118.020813][ T1872] f2fs_readahead+0xfc/0x240 [ 118.025448][ T1872] read_pages+0x1bf/0xe10 [ 118.029846][ T1872] ? page_cache_ra_unbounded+0x850/0x850 [ 118.035520][ T1872] ? filemap_add_folio+0x113/0x260 [ 118.040661][ T1872] page_cache_ra_unbounded+0x6ff/0x850 [ 118.046169][ T1872] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 118.052220][ T1872] ? is_bpf_text_address+0x177/0x190 [ 118.057636][ T1872] page_cache_ra_order+0xb0c/0xe50 [ 118.062969][ T1872] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 118.069157][ T1872] ? avc_has_perm_noaudit+0x390/0x490 [ 118.074674][ T1872] ? __cfi_page_cache_ra_order+0x10/0x10 [ 118.080439][ T1872] ondemand_readahead+0x821/0xda0 [ 118.085504][ T1872] ? page_cache_sync_ra+0x4a0/0x4a0 [ 118.090741][ T1872] page_cache_sync_ra+0x427/0x4a0 [ 118.095805][ T1872] f2fs_readdir+0x473/0x990 [ 118.100371][ T1872] ? __cfi_f2fs_readdir+0x10/0x10 [ 118.105703][ T1872] ? down_read_killable+0xbc/0x110 [ 118.110945][ T1872] ? __cfi_down_read_killable+0x10/0x10 [ 118.116527][ T1872] ? security_file_permission+0x94/0xb0 [ 118.122109][ T1872] iterate_dir+0x26d/0x610 [ 118.126564][ T1872] ? __cfi_f2fs_readdir+0x10/0x10 [ 118.131713][ T1872] __se_sys_getdents64+0xf2/0x250 [ 118.136770][ T1872] ? __x64_sys_getdents64+0x90/0x90 [ 118.141998][ T1872] ? __cfi_filldir64+0x10/0x10 [ 118.147054][ T1872] ? trace_event_raw_event_sys_enter+0xf1/0x120 [ 118.153332][ T1872] __x64_sys_getdents64+0x7b/0x90 [ 118.158400][ T1872] x64_sys_call+0x15c/0x9a0 [ 118.163049][ T1872] do_syscall_64+0x4c/0xa0 [ 118.167504][ T1872] ? clear_bhb_loop+0x30/0x80 [ 118.172210][ T1872] ? clear_bhb_loop+0x30/0x80 [ 118.177198][ T1872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.183214][ T1872] RIP: 0033:0x7f44c63c6af3 [ 118.187675][ T1872] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 118.207411][ T1872] RSP: 002b:00007ffe6fb7a4f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 118.215862][ T1872] RAX: ffffffffffffffda RBX: 000055556f35b910 RCX: 00007f44c63c6af3 [ 118.223861][ T1872] RDX: 0000000000008000 RSI: 000055556f35b940 RDI: 0000000000000005 [ 118.231863][ T1872] RBP: 000055556f35b940 R08: 00007f44c65f2e20 R09: 0000000000000001 [ 118.239860][ T1872] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556f35b914 [ 118.247856][ T1872] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe6fb7c7a0 [ 118.255864][ T1872] [ 118.287711][ T1872] syz-executor: attempt to access beyond end of device [ 118.287711][ T1872] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 118.304736][ T1872] syz-executor: attempt to access beyond end of device [ 118.304736][ T1872] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 118.430852][ T10] kworker/u4:1: attempt to access beyond end of device [ 118.430852][ T10] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 118.474965][ T321] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0 [ 118.484746][ T321] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0 [ 118.491770][ T321] lenovo 0003:17EF:6067.000E: item fetching failed at offset 2/41 [ 118.519196][ T321] lenovo 0003:17EF:6067.000E: hid_parse failed [ 118.525848][ T321] lenovo: probe of 0003:17EF:6067.000E failed with error -22 [ 118.617127][ T3872] SELinux: avtab: truncated entry [ 118.630584][ T28] audit: type=1400 audit(1790266881.834:390): avc: denied { create } for pid=3884 comm="syz.6.1497" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.696814][ T28] audit: type=1400 audit(1790266881.854:391): avc: denied { mounton } for pid=3884 comm="syz.6.1497" path="/253/file0" dev="tmpfs" ino=1369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.728232][ T24] usb 5-1: USB disconnect, device number 10 [ 118.774771][ T28] audit: type=1400 audit(1790266881.904:392): avc: denied { watch watch_reads } for pid=3888 comm="syz.0.1499" path="/353/file1" dev="tmpfs" ino=1877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.814776][ T3872] SELinux: failed to load policy [ 118.879719][ T28] audit: type=1400 audit(1790266882.084:393): avc: denied { ioctl } for pid=3890 comm="syz.0.1511" path="socket:[31425]" dev="sockfs" ino=31425 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.173646][ T221] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 119.190257][ T3908] netlink: 'syz.0.1509': attribute type 11 has an invalid length. [ 119.198509][ T3908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1509'. [ 119.276742][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.284264][ T3906] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.292304][ T3906] device bridge_slave_0 entered promiscuous mode [ 119.300244][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.309783][ T3906] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.320116][ T3906] device bridge_slave_1 entered promiscuous mode [ 119.365833][ T221] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.391951][ T221] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.421083][ T221] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.447657][ T221] usb 8-1: config 0 interface 0 has no altsetting 0 [ 119.474879][ T221] usb 8-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 119.488589][ T221] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.498219][ T221] usb 8-1: config 0 descriptor?? [ 119.522708][ T10] device bridge_slave_1 left promiscuous mode [ 119.529922][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.539905][ T10] device bridge_slave_0 left promiscuous mode [ 119.546541][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.556644][ T10] device veth1_macvtap left promiscuous mode [ 119.577175][ T10] device veth0_vlan left promiscuous mode [ 119.711683][ T3893] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1501'. [ 119.736741][ T221] usbhid 8-1:0.0: can't add hid device: -71 [ 119.744114][ T221] usbhid: probe of 8-1:0.0 failed with error -71 [ 119.761103][ T221] usb 8-1: USB disconnect, device number 4 [ 119.953706][ T814] smpboot: CPU 1 is now offline [ 120.016903][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.043935][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.113515][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.142875][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.181732][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.188899][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.205232][ T3957] loop4: detected capacity change from 0 to 256 [ 120.241178][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.261017][ T3957] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 120.307347][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.336281][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.343402][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.423920][ T3962] netlink: 'syz.0.1533': attribute type 32 has an invalid length. [ 120.464764][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.496998][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.560772][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.576443][ T28] audit: type=1400 audit(1790266883.784:394): avc: denied { listen } for pid=3971 comm="syz.4.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.618673][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.681728][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.829419][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.856283][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.909472][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.940165][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.987714][ T3990] loop7: detected capacity change from 0 to 256 [ 120.997363][ T3906] device veth0_vlan entered promiscuous mode [ 121.013230][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.034567][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.051075][ T3990] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 121.091640][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.104126][ T814] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 121.132327][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.176941][ T3906] device veth1_macvtap entered promiscuous mode [ 121.232251][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.271093][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.308466][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.326341][ T814] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 121.361914][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.373695][ T814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.395651][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.407321][ T814] usb 7-1: Product: syz [ 121.411513][ T814] usb 7-1: Manufacturer: syz [ 122.014615][ T4026] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 122.054393][ T814] scsi host1: uas [ 122.073749][ C0] usb 7-1: stat urb: no pending cmd for uas-tag 0 [ 122.281540][ C0] usb 7-1: cmd cmplt err -71 [ 122.290501][ T19] usb 7-1: USB disconnect, device number 6 [ 122.301037][ T4047] loop4: detected capacity change from 0 to 512 [ 122.324948][ T19] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 122.332824][ T19] scsi 1:0:0:0: tag#8 CDB: opcode=0x12 12 00 00 00 24 00 [ 122.379088][ T4047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.439020][ T4047] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.535327][ T4047] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 122.599615][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 123.107300][ T4061] loop8: detected capacity change from 0 to 40427 [ 123.161405][ T4061] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 123.213638][ T4061] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 123.228021][ T4104] loop7: detected capacity change from 0 to 128 [ 123.279506][ T4061] F2FS-fs (loop8): invalid crc value [ 123.296902][ T4104] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 123.329792][ T4061] F2FS-fs (loop8): Found nat_bits in checkpoint [ 123.340266][ T4104] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.465701][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 123.505576][ T4061] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 123.552168][ T4061] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 123.577570][ T4122] loop6: detected capacity change from 0 to 2048 [ 123.655110][ T4122] loop6: p1 < > p4 [ 123.669299][ T4122] loop6: p4 size 8388608 extends beyond EOD, truncated [ 123.729942][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 123.729957][ T28] audit: type=1400 audit(1790266886.934:396): avc: denied { write } for pid=4120 comm="syz.6.1597" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 123.891175][ T1943] udevd[1943]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 123.905041][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 123.955596][ T28] audit: type=1400 audit(1790266886.964:397): avc: denied { read write } for pid=4120 comm="syz.6.1597" name="loop6p4" dev="devtmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.007908][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 124.019995][ T1943] udevd[1943]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 124.158001][ T28] audit: type=1400 audit(1790266886.974:398): avc: denied { open } for pid=4120 comm="syz.6.1597" path="/dev/loop6p4" dev="devtmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.232806][ T4138] loop7: detected capacity change from 0 to 512 [ 124.294311][ T4138] EXT4-fs: Ignoring removed nobh option [ 124.323683][ T28] audit: type=1400 audit(1790266887.354:399): avc: denied { map } for pid=4135 comm="syz.0.1602" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.353720][ T4138] ext4: Unknown parameter 'grpquota..' [ 124.514298][ T4147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1606'. [ 124.533218][ T28] audit: type=1400 audit(1790266887.484:400): avc: denied { write } for pid=4139 comm="syz.0.1604" name="usbmon6" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.798442][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.805783][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.714576][ T4185] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 126.260397][ T4231] xt_hashlimit: size too large, truncated to 1048576 [ 126.542024][ T4254] xt_hashlimit: size too large, truncated to 1048576 [ 126.591129][ T4260] input: syz1 as /devices/virtual/input/input18 [ 126.724034][ T28] audit: type=1400 audit(1790266889.934:401): avc: denied { bind } for pid=4265 comm="syz.8.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.147420][ T4282] xt_hashlimit: size too large, truncated to 1048576 [ 127.230725][ T4286] xt_connbytes: Forcing CT accounting to be enabled [ 128.086421][ T4314] loop8: detected capacity change from 0 to 1024 [ 128.116577][ T4314] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.188910][ T4314] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.229843][ T4314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 128.243605][ T28] audit: type=1326 audit(1790266891.444:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 128.322545][ T4314] System zones: 0-1, 3-36 [ 128.365732][ T4314] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 128.421559][ T28] audit: type=1326 audit(1790266891.444:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 128.552231][ T4337] loop6: detected capacity change from 0 to 1024 [ 128.562385][ T28] audit: type=1326 audit(1790266891.444:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 128.611613][ T4337] EXT4-fs: Ignoring removed orlov option [ 128.650847][ T4337] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 128.703808][ T28] audit: type=1326 audit(1790266891.444:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 128.766893][ T4343] loop7: detected capacity change from 0 to 512 [ 128.779143][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 128.853065][ T4343] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 128.881466][ T28] audit: type=1326 audit(1790266891.444:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 128.924553][ T4343] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.945203][ T4314] EXT4-fs (loop8): unmounting filesystem. [ 129.025623][ T4354] loop6: detected capacity change from 0 to 512 [ 129.047264][ T4358] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1694'. [ 129.070900][ T4343] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 129.102365][ T28] audit: type=1326 audit(1790266891.444:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 129.145687][ T4354] incfs: Can't find or create .incomplete dir in . [ 129.178305][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 129.204886][ T4354] incfs: mount failed -22 [ 129.365902][ T19] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 129.392411][ T28] audit: type=1326 audit(1790266891.444:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 129.450276][ T4368] loop6: detected capacity change from 0 to 256 [ 129.563066][ T28] audit: type=1326 audit(1790266891.444:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 129.590792][ T4370] loop4: detected capacity change from 0 to 512 [ 129.615971][ T19] usb 9-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 129.653937][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 129.685524][ T4370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.724730][ T19] usb 9-1: Product: syz [ 129.729016][ T19] usb 9-1: Manufacturer: syz [ 129.736782][ T28] audit: type=1326 audit(1790266891.444:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 129.774446][ T4370] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.933213][ T28] audit: type=1326 audit(1790266891.444:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 129.986112][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 130.074352][ T28] audit: type=1326 audit(1790266891.444:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 130.137827][ T4390] loop7: detected capacity change from 0 to 256 [ 130.144398][ T1940] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 130.231608][ T28] audit: type=1326 audit(1790266891.444:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 130.344471][ T28] audit: type=1326 audit(1790266891.444:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 130.370844][ T1940] usb 7-1: Using ep0 maxpacket: 32 [ 130.383174][ T19] scsi host1: uas [ 130.390347][ T1940] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.430653][ T1940] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.459641][ T1940] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 130.477454][ T28] audit: type=1326 audit(1790266891.444:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.6.1669" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d099e159 code=0x7fc00000 [ 130.520005][ T1940] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 130.563284][ T1940] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.602242][ T1940] usb 7-1: config 1 interface 1 has no altsetting 0 [ 130.620212][ C0] usb 9-1: stat urb: no pending cmd for uas-tag 0 [ 130.628718][ T1940] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 130.644318][ T1940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.653115][ T1940] usb 7-1: Product: syz [ 130.657847][ T1940] usb 7-1: Manufacturer: syz [ 130.662693][ T1940] usb 7-1: SerialNumber: syz [ 130.828680][ C0] usb 9-1: cmd cmplt err -71 [ 130.837492][ T321] usb 9-1: USB disconnect, device number 2 [ 130.844610][ T321] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 130.852449][ T321] scsi 1:0:0:0: tag#24 CDB: opcode=0x12 12 00 00 00 24 00 [ 130.875828][ T1940] usb 7-1: selecting invalid altsetting 0 [ 131.082703][ T1940] usb 7-1: 1:1: cannot get freq (v2/v3): err -32 [ 131.294573][ T1940] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 131.344381][ T1940] usb 7-1: USB disconnect, device number 7 [ 131.401579][ T4423] fuse: Invalid rootmode [ 131.788756][ T4459] loop8: detected capacity change from 0 to 128 [ 132.161246][ T4476] loop8: detected capacity change from 0 to 1024 [ 132.188295][ T4476] EXT4-fs: Ignoring removed orlov option [ 132.232283][ T4476] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 132.316253][ T3906] EXT4-fs (loop8): unmounting filesystem. [ 132.512009][ T4487] loop7: detected capacity change from 0 to 2048 [ 132.543930][ T4487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.578371][ T4487] EXT4-fs (loop7): can't mount with commit=1, fs mounted w/o journal [ 132.847897][ T4503] FAT-fs (loop7): Directory bread(block 64) failed [ 132.879155][ T4503] FAT-fs (loop7): Directory bread(block 65) failed [ 132.908438][ T4503] FAT-fs (loop7): Directory bread(block 66) failed [ 132.935220][ T4503] FAT-fs (loop7): Directory bread(block 67) failed [ 132.961803][ T4503] FAT-fs (loop7): Directory bread(block 68) failed [ 132.985322][ T4503] FAT-fs (loop7): Directory bread(block 69) failed [ 132.996629][ T4503] FAT-fs (loop7): Directory bread(block 70) failed [ 133.007991][ T4503] FAT-fs (loop7): Directory bread(block 71) failed [ 133.020425][ T4503] FAT-fs (loop7): Directory bread(block 72) failed [ 133.031679][ T4503] FAT-fs (loop7): Directory bread(block 73) failed [ 133.202282][ T4515] set_capacity_and_notify: 1 callbacks suppressed [ 133.202299][ T4515] loop6: detected capacity change from 0 to 1024 [ 133.244046][ T4515] EXT4-fs: Ignoring removed bh option [ 133.270409][ T4515] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 133.283801][ T4515] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.351457][ T4515] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.1762: lblock 0 mapped to illegal pblock 0 (length 1) [ 133.409911][ T4515] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 133.448519][ T4528] input: syz1 as /devices/virtual/input/input19 [ 133.469447][ T4515] EXT4-fs (loop6): This should not happen!! Data will be lost [ 133.469447][ T4515] [ 133.513718][ T1940] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 133.524126][ T4526] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: comm syz.6.1762: lblock 0 mapped to illegal pblock 0 (length 1) [ 133.612311][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 133.723680][ T1940] usb 8-1: Using ep0 maxpacket: 16 [ 133.746828][ T1940] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.774214][ T1940] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.825264][ T1940] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.846795][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.854082][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.866222][ T1940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.891205][ T1940] usb 8-1: Product: syz [ 133.910413][ T1940] usb 8-1: Manufacturer: syz [ 133.925222][ T1940] usb 8-1: SerialNumber: syz [ 134.152440][ T1940] usb 8-1: 0:2 : does not exist [ 134.174459][ T1940] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 134.218881][ T1940] usb 8-1: USB disconnect, device number 5 [ 134.563671][ T321] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 134.753697][ T321] usb 9-1: Using ep0 maxpacket: 16 [ 134.769198][ T321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 134.792375][ T321] usb 9-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 134.838983][ T321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.850879][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 134.850894][ T28] audit: type=1400 audit(1790266898.054:485): avc: denied { append } for pid=4570 comm="syz.7.1784" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.909506][ T321] usb 9-1: config 0 descriptor?? [ 134.954619][ T4576] netlink: 'syz.7.1787': attribute type 1 has an invalid length. [ 135.213659][ T1940] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 135.347791][ T321] usbhid 9-1:0.0: can't add hid device: -71 [ 135.357145][ T321] usbhid: probe of 9-1:0.0 failed with error -71 [ 135.378209][ T321] usb 9-1: USB disconnect, device number 3 [ 135.415100][ T1940] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.428843][ T1940] usb 5-1: config 0 has no interface number 0 [ 135.441911][ T1940] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.466545][ T1940] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.487444][ T1940] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.514530][ T1940] usb 5-1: config 0 interface 1 has no altsetting 0 [ 135.530031][ T1940] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 135.548766][ T1940] usb 5-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 135.581284][ T1940] usb 5-1: Manufacturer: syz [ 135.609009][ T1940] usb 5-1: config 0 descriptor?? [ 135.658657][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.665981][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.867699][ T4604] loop7: detected capacity change from 0 to 256 [ 135.945874][ T4604] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 136.171288][ T28] audit: type=1400 audit(1790266899.374:486): avc: denied { append } for pid=4615 comm="syz.7.1803" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.245627][ T1940] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.000F/input/input20 [ 136.257518][ T4619] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 136.310884][ T1940] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.000F/input/input21 [ 136.345088][ T28] audit: type=1400 audit(1790266899.554:487): avc: denied { mounton } for pid=4623 comm="syz.6.1807" path="/301/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 136.405250][ T1940] uclogic 0003:145F:0212.000F: input,hiddev96,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.4-1/input1 [ 136.501423][ T1940] usb 5-1: USB disconnect, device number 11 [ 136.597745][ T4638] loop7: detected capacity change from 0 to 128 [ 136.652335][ T4634] fido_id[4634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 136.701331][ T4640] loop8: detected capacity change from 0 to 512 [ 136.774608][ T4642] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 136.795256][ T4640] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 136.825541][ T4640] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.838919][ T4642] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 136.909988][ T4640] EXT4-fs (loop8): shut down requested (1) [ 136.954608][ T28] audit: type=1400 audit(1790266900.164:488): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 137.014140][ T3906] EXT4-fs (loop8): unmounting filesystem. [ 137.106647][ T28] audit: type=1400 audit(1790266900.164:489): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.239681][ T28] audit: type=1400 audit(1790266900.164:490): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.373511][ T28] audit: type=1400 audit(1790266900.164:491): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.513958][ T28] audit: type=1400 audit(1790266900.164:492): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.635330][ T28] audit: type=1400 audit(1790266900.164:493): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.802833][ T28] audit: type=1400 audit(1790266900.164:494): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.996515][ T4671] loop4: detected capacity change from 0 to 128 [ 138.066059][ T4673] loop6: detected capacity change from 0 to 512 [ 138.121840][ T4673] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 138.197235][ T4673] EXT4-fs (loop6): 1 truncate cleaned up [ 138.213306][ T4673] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 138.346132][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 138.531716][ T4697] loop7: detected capacity change from 0 to 1024 [ 138.579087][ T4697] EXT4-fs: Ignoring removed bh option [ 138.590065][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.634731][ T4697] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 138.682282][ T4697] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.779895][ T4697] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.1845: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.846934][ T4697] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 138.896086][ T4697] EXT4-fs (loop7): This should not happen!! Data will be lost [ 138.896086][ T4697] [ 138.944393][ T4707] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.1845: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.048085][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 139.195867][ T4718] xt_hashlimit: max too large, truncated to 1048576 [ 140.807242][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.814581][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.980755][ T4805] loop7: detected capacity change from 0 to 16 [ 141.010404][ T4805] erofs: (device loop7): mounted with root inode @ nid 36. [ 141.171612][ T4811] loop8: detected capacity change from 0 to 512 [ 141.225197][ T4811] EXT4-fs: Ignoring removed nobh option [ 141.269859][ T4811] EXT4-fs: Ignoring removed oldalloc option [ 141.306944][ T4811] EXT4-fs: old and new quota format mixing [ 141.910211][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 141.910227][ T28] audit: type=1400 audit(1790267161.114:498): avc: denied { getopt } for pid=4850 comm="syz.4.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.960005][ T4852] loop4: detected capacity change from 0 to 256 [ 142.058306][ T4852] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 142.328446][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1912'. [ 143.380558][ T4886] loop6: detected capacity change from 0 to 128 [ 143.446730][ T4886] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 143.494922][ T4886] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.625691][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 143.991849][ T4885] loop8: detected capacity change from 0 to 40427 [ 144.047729][ T4885] F2FS-fs (loop8): fault_injection options not supported [ 144.112314][ T4885] F2FS-fs (loop8): fault_type options not supported [ 144.153458][ T4885] F2FS-fs (loop8): invalid crc value [ 144.193482][ T4885] F2FS-fs (loop8): Found nat_bits in checkpoint [ 144.315455][ T4906] pimreg0: tun_chr_ioctl cmd 1074025677 [ 144.355165][ T4906] pimreg0: linktype set to 774 [ 144.403992][ T4885] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 144.555078][ T4885] syz.8.1917: attempt to access beyond end of device [ 144.555078][ T4885] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.884710][ T28] audit: type=1400 audit(1790267164.094:499): avc: denied { listen } for pid=4933 comm="syz.4.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.961372][ T3906] syz-executor: attempt to access beyond end of device [ 144.961372][ T3906] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 145.086294][ T28] audit: type=1400 audit(1790267164.294:500): avc: denied { map } for pid=4948 comm="syz.0.1947" path="socket:[36927]" dev="sockfs" ino=36927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.159876][ T4949] loop6: detected capacity change from 0 to 4096 [ 145.231034][ T4949] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.273305][ T28] audit: type=1400 audit(1790267164.424:501): avc: denied { write } for pid=4952 comm="syz.0.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.313674][ T4949] EXT4-fs (loop6): Test dummy encryption mode enabled [ 145.368049][ T4949] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 145.415994][ T4949] System zones: 0-5 [ 145.436657][ T4949] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 145.544519][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 145.758234][ T4982] loop6: detected capacity change from 0 to 128 [ 145.776648][ T4981] xt_hashlimit: size too large, truncated to 1048576 [ 145.825691][ T4982] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.856316][ T4984] netlink: 'syz.4.1961': attribute type 12 has an invalid length. [ 145.888077][ T4982] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.912032][ T4984] netlink: 'syz.4.1961': attribute type 29 has an invalid length. [ 145.982146][ T4984] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1961'. [ 146.167047][ T4993] netlink: 'syz.7.1963': attribute type 2 has an invalid length. [ 146.185518][ T4994] sda1: Can't mount, would change RO state [ 146.229605][ T4993] netlink: 'syz.7.1963': attribute type 3 has an invalid length. [ 146.648374][ T5023] user requested TSC rate below hardware speed [ 146.671294][ T5027] loop6: detected capacity change from 0 to 512 [ 146.750466][ T28] audit: type=1400 audit(1790267165.954:502): avc: denied { create } for pid=5029 comm="syz.7.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.973118][ T5042] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1987'. [ 147.073733][ T5045] synth uevent: /bus/acpi: unknown uevent action string [ 147.216172][ T28] audit: type=1400 audit(1790267166.424:503): avc: denied { ioctl } for pid=5051 comm="syz.0.1991" path="socket:[37324]" dev="sockfs" ino=37324 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.367742][ T5060] tap0: tun_chr_ioctl cmd 1074025677 [ 147.414291][ T5060] tap0: linktype set to 804 [ 147.502292][ T5056] loop4: detected capacity change from 0 to 8192 [ 147.531106][ T5069] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1999'. [ 147.555960][ T28] audit: type=1400 audit(1790267166.764:504): avc: denied { mount } for pid=5070 comm="syz.6.2000" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 147.586540][ T5056] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.687691][ T5074] SELinux: failed to load policy [ 147.799190][ T28] audit: type=1400 audit(1790267167.004:505): avc: denied { ioctl } for pid=5076 comm="syz.8.2003" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 147.898903][ T5082] loop8: detected capacity change from 0 to 512 [ 147.910907][ T5084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2006'. [ 147.938839][ T5082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.959932][ T5084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2006'. [ 147.993382][ T5082] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 148.023148][ T5082] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.099572][ T28] audit: type=1400 audit(1790267167.304:506): avc: denied { read } for pid=5081 comm="syz.8.2005" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 148.169174][ T3906] EXT4-fs (loop8): unmounting filesystem. [ 148.186714][ T5092] loop6: detected capacity change from 0 to 1024 [ 148.244250][ T5092] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.321031][ T5092] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.379912][ T5092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 148.426939][ T5092] System zones: 0-1, 3-36 [ 148.453196][ T5092] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 148.563486][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 148.939582][ T5133] loop6: detected capacity change from 0 to 256 [ 149.178524][ T28] audit: type=1400 audit(1790267168.384:507): avc: denied { bind } for pid=5148 comm="syz.6.2034" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.293684][ T28] audit: type=1400 audit(1790267168.404:508): avc: denied { node_bind } for pid=5148 comm="syz.6.2034" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 149.445107][ T28] audit: type=1400 audit(1790267168.654:509): avc: denied { write } for pid=5166 comm="syz.0.2042" name="usb_gadget" dev="configfs" ino=5530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.555609][ T28] audit: type=1400 audit(1790267168.674:510): avc: denied { add_name } for pid=5166 comm="syz.0.2042" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.605821][ T5174] WARNING! power/level is deprecated; use power/control instead [ 149.658313][ T28] audit: type=1400 audit(1790267168.674:511): avc: denied { create } for pid=5166 comm="syz.0.2042" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 149.749634][ T28] audit: type=1400 audit(1790267168.684:512): avc: denied { remove_name } for pid=5166 comm="syz.0.2042" name="g1" dev="configfs" ino=37863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.889346][ T5187] loop8: detected capacity change from 0 to 256 [ 150.041559][ T5191] loop8: detected capacity change from 0 to 4096 [ 150.078915][ T5191] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.122681][ T5191] EXT4-fs (loop8): Test dummy encryption mode enabled [ 150.157113][ T5191] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 150.230457][ T5198] loop6: detected capacity change from 0 to 1024 [ 150.259597][ T3906] EXT4-fs (loop8): unmounting filesystem. [ 150.276989][ T5198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.320196][ T5198] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 150.525294][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 150.583858][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 150.653628][ T5213] <½žé-Áôa [ 150.658767][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 150.681514][ T5217] loop8: detected capacity change from 0 to 1024 [ 150.754239][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 150.768514][ T5217] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 150.801180][ T5223] loop4: detected capacity change from 0 to 512 [ 150.831584][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 150.854297][ T3906] EXT4-fs (loop8): unmounting filesystem. [ 150.875496][ T5223] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.895807][ T5227] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2069'. [ 150.914132][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 150.954328][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 151.027481][ T5232] bridge0: port 3(syz_tun) entered blocking state [ 151.038925][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 151.069249][ T5232] bridge0: port 3(syz_tun) entered disabled state [ 151.107441][ T5232] device syz_tun entered promiscuous mode [ 151.116752][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 151.160074][ T1029] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 151.358599][ T1029] EXT4-fs (loop6): unmounting filesystem. [ 151.454461][ T5260] loop8: detected capacity change from 0 to 128 [ 151.496357][ T5260] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.571939][ T5260] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.725249][ T1927] device bridge_slave_1 left promiscuous mode [ 151.772075][ T1927] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.266744][ T5295] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 152.272428][ T5295] pim6reg0: ignored: set checksum disabled [ 152.370774][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.418598][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.459560][ T5286] device bridge_slave_0 entered promiscuous mode [ 152.484567][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.517497][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.544080][ T5286] device bridge_slave_1 entered promiscuous mode [ 152.552521][ T5309] loop8: detected capacity change from 0 to 8192 [ 152.914970][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.951429][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.005626][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.023484][ T5318] loop7: detected capacity change from 0 to 4096 [ 153.035066][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.062670][ T5318] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.084905][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.092120][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.112912][ T5318] EXT4-fs (loop7): Test dummy encryption mode enabled [ 153.139545][ T5318] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 153.151328][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.170877][ T5318] System zones: 0-5 [ 153.179620][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.195258][ T5318] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 153.226129][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.233333][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.289833][ T5318] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 153.324165][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.365611][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.418388][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.437791][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 153.468944][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.528321][ T5286] device veth0_vlan entered promiscuous mode [ 153.574057][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.598054][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.634049][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.681530][ T5286] device veth1_macvtap entered promiscuous mode [ 153.714904][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.763221][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.784262][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.821181][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.851396][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.900479][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.931105][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.479416][ T5393] loop9: detected capacity change from 0 to 256 [ 154.597078][ T5398] loop9: detected capacity change from 0 to 128 [ 155.400167][ T5428] loop8: detected capacity change from 0 to 256 [ 155.439222][ T5428] exfat: Deprecated parameter 'namecase' [ 155.463981][ T5428] exfat: Deprecated parameter 'namecase' [ 155.501231][ T5428] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 155.647599][ T5430] loop8: detected capacity change from 0 to 128 [ 155.686440][ T5430] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 155.738512][ T5430] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 155.758453][ T5414] loop4: detected capacity change from 0 to 40427 [ 155.794423][ T5430] ext2 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.827340][ T5414] F2FS-fs (loop4): invalid crc value [ 155.885641][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 155.885658][ T28] audit: type=1400 audit(1790267175.094:523): avc: denied { read } for pid=5429 comm="syz.8.2158" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 155.946237][ T5414] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.977749][ T3906] EXT4-fs (loop8): unmounting filesystem. [ 156.196242][ T5450] loop9: detected capacity change from 0 to 512 [ 156.213070][ T5414] F2FS-fs (loop4): Start checkpoint disabled! [ 156.226118][ T5452] loop8: detected capacity change from 0 to 1024 [ 156.253449][ T5450] /dev/loop9: Can't open blockdev [ 156.263860][ T5414] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 156.294884][ T5452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.327417][ T5414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 156.402493][ T5452] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 156.492020][ T3906] EXT4-fs (loop8): unmounting filesystem. [ 156.502665][ T5414] syz.4.2148: attempt to access beyond end of device [ 156.502665][ T5414] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.618774][ T5414] syz.4.2148: attempt to access beyond end of device [ 156.618774][ T5414] loop4: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 156.826612][ T317] kworker/u4:3: attempt to access beyond end of device [ 156.826612][ T317] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 157.514138][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2184'. [ 158.488317][ T5502] loop7: detected capacity change from 0 to 40427 [ 158.528294][ T5502] F2FS-fs (loop7): invalid crc value [ 158.594942][ T5502] F2FS-fs (loop7): Found nat_bits in checkpoint [ 158.673788][ T5480] loop9: detected capacity change from 0 to 131072 [ 158.697021][ T5502] F2FS-fs (loop7): Start checkpoint disabled! [ 158.732118][ T5502] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 158.783948][ T5502] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 158.919050][ T5523] loop8: detected capacity change from 0 to 8192 [ 158.947694][ T5502] syz.7.2189: attempt to access beyond end of device [ 158.947694][ T5502] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.037373][ T321] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.064181][ T5502] syz.7.2189: attempt to access beyond end of device [ 159.064181][ T5502] loop7: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 159.100320][ T321] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.287489][ T5533] fido_id[5533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.368044][ T317] kworker/u4:3: attempt to access beyond end of device [ 159.368044][ T317] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 159.814732][ T5551] MTRR 0 not used [ 159.928592][ T5555] loop9: detected capacity change from 0 to 512 [ 159.984168][ T5555] /dev/loop9: Can't open blockdev [ 160.382378][ T5567] xt_hashlimit: max too large, truncated to 1048576 [ 160.701017][ T5557] loop7: detected capacity change from 0 to 40427 [ 160.786960][ T5557] F2FS-fs (loop7): invalid crc value [ 160.830199][ T5557] F2FS-fs (loop7): Found nat_bits in checkpoint [ 160.918484][ T5598] loop4: detected capacity change from 0 to 256 [ 161.009007][ T5598] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 161.063842][ T5557] F2FS-fs (loop7): Start checkpoint disabled! [ 161.085182][ T5604] loop9: detected capacity change from 0 to 256 [ 161.104452][ T5557] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 161.139727][ T5604] exfat: Deprecated parameter 'utf8' [ 161.145439][ T5557] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 161.167607][ T5604] exfat: Deprecated parameter 'utf8' [ 161.173010][ T5604] /dev/loop9: Can't open blockdev [ 161.305247][ T28] audit: type=1400 audit(1790267180.514:524): avc: denied { reparent } for pid=5556 comm="syz.7.2213" name="file0" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 161.454270][ T317] kworker/u4:3: attempt to access beyond end of device [ 161.454270][ T317] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 161.497428][ T5613] input: syz1 as /devices/virtual/input/input23 [ 161.919119][ T5629] loop9: detected capacity change from 0 to 512 [ 161.987394][ T5629] EXT4-fs: Ignoring removed nobh option [ 162.028940][ T5629] /dev/loop9: Can't open blockdev [ 162.161534][ T5548] loop8: detected capacity change from 0 to 131072 [ 162.244503][ T5548] F2FS-fs (loop8): Test dummy encryption mode enabled [ 162.287382][ T5652] loop4: detected capacity change from 0 to 512 [ 162.299558][ T5548] F2FS-fs (loop8): invalid crc value [ 162.340857][ T5548] F2FS-fs (loop8): Found nat_bits in checkpoint [ 162.370669][ T5652] EXT4-fs: Ignoring removed nobh option [ 162.436163][ T5652] EXT4-fs: Ignoring removed oldalloc option [ 162.475944][ T5652] EXT4-fs: old and new quota format mixing [ 162.547704][ T5548] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 162.850090][ T5642] loop7: detected capacity change from 0 to 40427 [ 163.127015][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 163.223437][ T5691] loop7: detected capacity change from 0 to 512 [ 163.263066][ T5691] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 163.329519][ T5691] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.2274: bad orphan inode 131083 [ 163.398873][ T5691] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 163.468524][ T5691] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz.7.2274: path /newroot/340/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 163.645796][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 163.815334][ T28] audit: type=1326 audit(1790267183.024:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 163.982534][ T28] audit: type=1326 audit(1790267183.044:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 164.173928][ T28] audit: type=1326 audit(1790267183.044:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 164.240805][ T5732] loop9: detected capacity change from 0 to 2048 [ 164.308245][ T5732] /dev/loop9: Can't open blockdev [ 164.362338][ T28] audit: type=1326 audit(1790267183.044:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 164.572291][ T28] audit: type=1326 audit(1790267183.044:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 164.740594][ T5751] loop9: detected capacity change from 0 to 512 [ 164.753642][ T28] audit: type=1326 audit(1790267183.054:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 164.796409][ T5751] /dev/loop9: Can't open blockdev [ 164.892616][ T28] audit: type=1326 audit(1790267183.054:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 165.043834][ T28] audit: type=1326 audit(1790267183.054:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 165.173930][ T28] audit: type=1326 audit(1790267183.064:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.9.2283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2ba0d9e159 code=0x7ffc0000 [ 165.616285][ T5789] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 165.684700][ T5789] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 165.744325][ T5789] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 165.838964][ T5805] set_capacity_and_notify: 1 callbacks suppressed [ 165.838983][ T5805] loop7: detected capacity change from 0 to 1024 [ 165.870766][ T3906] EXT4-fs (loop8): unmounting filesystem. [ 165.898445][ T5805] EXT4-fs: Ignoring removed bh option [ 165.955457][ T5805] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 166.164952][ T5823] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2329'. [ 166.669451][ T5845] loop9: detected capacity change from 0 to 4096 [ 166.737834][ T5845] /dev/loop9: Can't open blockdev [ 166.974594][ T5858] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2347'. [ 166.996763][ T5859] loop8: detected capacity change from 0 to 128 [ 167.028255][ T5859] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.106965][ T5859] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.563621][ T321] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 167.660981][ T5873] tap0: tun_chr_ioctl cmd 1074025677 [ 167.691316][ T5873] tap0: linktype set to 804 [ 167.765086][ T321] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.802934][ T321] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 167.837520][ T321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.870755][ T321] usb 9-1: Product: syz [ 167.877854][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 167.890516][ T321] usb 9-1: Manufacturer: syz [ 167.915259][ T321] usb 9-1: SerialNumber: syz [ 167.964687][ T321] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 168.002823][ T5886] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2361'. [ 168.179413][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 168.179428][ T28] audit: type=1400 audit(1790267187.384:536): avc: denied { read write } for pid=5864 comm="syz.8.2351" name="cdc-wdm0" dev="devtmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 168.221861][ T321] usb 9-1: USB disconnect, device number 4 [ 168.381340][ T28] audit: type=1400 audit(1790267187.414:537): avc: denied { open } for pid=5864 comm="syz.8.2351" path="/dev/cdc-wdm0" dev="devtmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 168.599412][ T5918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2376'. [ 168.658005][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'. [ 168.699724][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'. [ 169.022558][ T5944] loop7: detected capacity change from 0 to 256 [ 169.183288][ T5956] loop7: detected capacity change from 0 to 128 [ 169.197325][ T5954] loop4: detected capacity change from 0 to 1024 [ 169.206375][ T321] wiimote 0005:057E:0330.0011: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 169.216772][ T5956] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.229309][ T321] wiimote 0005:057E:0330.0011: New device registered [ 169.238139][ T5954] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 169.267023][ T5960] wiimote 0005:057E:0330.0011: Unhandled report 32 size 1 [ 169.302879][ T5960] wiimote 0005:057E:0330.0011: Event data for report 32 was too short (31 vs 0) [ 169.325446][ T5954] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 169.371924][ T5957] wiimote 0005:057E:0330.0011: Device removed [ 169.381438][ T5961] fido_id[5961]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.410676][ T5954] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.547691][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 169.572868][ T5968] loop7: detected capacity change from 0 to 8192 [ 169.623170][ T5968] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.708703][ T5980] loop9: detected capacity change from 0 to 1024 [ 169.757886][ T5980] /dev/loop9: Can't open blockdev [ 169.887115][ T5989] loop9: detected capacity change from 0 to 256 [ 170.263743][ T321] wiimote 0005:057E:0330.0011: detected device: Nintendo Wii Remote Plus (Gen 2) [ 170.312709][ T321] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input25 [ 170.370834][ T321] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input26 [ 170.412209][ T321] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0011/input/input24 [ 170.709253][ T6015] loop4: detected capacity change from 0 to 256 [ 170.791816][ T6019] EXT4-fs: Ignoring removed oldalloc option [ 170.822858][ T6021] /dev/loop9: Can't open blockdev [ 170.876359][ T6019] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 170.940932][ T6019] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.007391][ T6032] set_capacity_and_notify: 2 callbacks suppressed [ 171.007408][ T6032] loop9: detected capacity change from 0 to 512 [ 171.036927][ T6028] loop4: detected capacity change from 0 to 4096 [ 171.054362][ T1635] EXT4-fs (loop7): unmounting filesystem. [ 171.076681][ T6032] /dev/loop9: Can't open blockdev [ 171.105855][ T3262] blk_print_req_error: 5 callbacks suppressed [ 171.105871][ T3262] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.136961][ T6028] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.172084][ T6037] netlink: 'syz.8.2427': attribute type 2 has an invalid length. [ 171.202432][ T6028] EXT4-fs (loop4): Test dummy encryption mode enabled [ 171.281408][ T6028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.452417][ T1797] EXT4-fs (loop4): unmounting filesystem. [ 171.640365][ T6064] bridge0: port 3(syz_tun) entered blocking state [ 171.659515][ T6064] bridge0: port 3(syz_tun) entered disabled state [ 171.677841][ T6064] device syz_tun entered promiscuous mode [ 171.743717][ T221] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 171.944838][ T221] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.966660][ T221] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 171.981555][ T221] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.993883][ T221] usb 10-1: Product: syz [ 172.002639][ T221] usb 10-1: Manufacturer: syz [ 172.013172][ T221] usb 10-1: SerialNumber: syz [ 172.033707][ T221] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 172.245333][ T221] usb 10-1: USB disconnect, device number 2 [ 172.433623][ T814] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.623598][ T814] usb 5-1: Using ep0 maxpacket: 16 [ 172.635664][ T814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.652908][ T814] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.680871][ T814] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.704117][ T814] usb 5-1: config 1 has no interface number 0 [ 172.720635][ T814] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.742083][ T814] usb 5-1: config 1 interface 2 has no altsetting 0 [ 172.754083][ T814] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 172.770797][ T6099] SELinux: ebitmap: truncated map [ 172.793883][ T814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.811672][ T814] usb 5-1: Product: syz [ 172.820033][ T6099] SELinux: failed to load policy [ 172.825333][ T814] usb 5-1: Manufacturer: syz [ 172.830135][ T814] usb 5-1: SerialNumber: syz [ 173.063702][ T19] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 173.245044][ T19] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.259476][ T814] usb 5-1: 2:1 : can't get High Capability descriptor [ 173.293083][ T19] usb 10-1: config 0 interface 0 has no altsetting 0 [ 173.313378][ T19] usb 10-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 173.332880][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.354391][ T19] usb 10-1: config 0 descriptor?? [ 173.494379][ T814] usb 5-1: USB disconnect, device number 12 [ 273.203491][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 273.210506][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6109 [ 273.217994][ C0] (detected by 0, t=10002 jiffies, g=46429, q=480 ncpus=1) [ 273.225282][ C0] task:syz.8.2460 state:R running task stack:26184 pid:6109 ppid:3906 flags:0x00004000 [ 273.236081][ C0] Call Trace: [ 273.239381][ C0] [ 273.242252][ C0] sched_show_task+0x391/0x550 [ 273.247042][ C0] ? __kasan_check_write+0x14/0x20 [ 273.252269][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 273.258339][ C0] ? __cfi_sched_show_task+0x10/0x10 [ 273.263649][ C0] ? wq_watchdog_touch+0x100/0x190 [ 273.268780][ C0] print_other_cpu_stall+0xd8d/0x10c0 [ 273.274166][ C0] ? print_cpu_stall+0x590/0x590 [ 273.279115][ C0] ? __cfi_trace_event_raw_event_rcu_utilization+0x10/0x10 [ 273.286329][ C0] rcu_sched_clock_irq+0x7bc/0x1310 [ 273.291556][ C0] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 273.297199][ C0] ? debug_smp_processor_id+0x17/0x20 [ 273.302587][ C0] ? hrtimer_run_queues+0x166/0x420 [ 273.307796][ C0] update_process_times+0x148/0x1b0 [ 273.313021][ C0] tick_sched_timer+0x17c/0x240 [ 273.318231][ C0] ? __cfi_tick_sched_timer+0x10/0x10 [ 273.323705][ C0] __hrtimer_run_queues+0x398/0x8a0 [ 273.328926][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 273.334268][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 273.340541][ C0] hrtimer_interrupt+0x3ad/0x8c0 [ 273.345518][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 273.351536][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 273.357221][ C0] [ 273.360166][ C0] [ 273.363102][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 273.369095][ C0] RIP: 0010:page_pool_put_defragged_page+0x8/0x790 [ 273.375627][ C0] Code: e8 69 84 fd fc e9 95 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0e 87 16 80 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 ec 28 89 4d d4 41 89 d5 49 89 f4 49 89 fe 48 [ 273.395261][ C0] RSP: 0018:ffffc90002cff528 EFLAGS: 00000246 [ 273.401366][ C0] RAX: ffffffff84012d40 RBX: ffffea00045e98c0 RCX: 0000000000000000 [ 273.409363][ C0] RDX: 00000000ffffffff RSI: ffffea00045e98c0 RDI: ffff8881135b5000 [ 273.417360][ C0] RBP: ffffc90002cff538 R08: ffff8881352c5100 R09: 0000000000000004 [ 273.425356][ C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffffea0000000000 [ 273.433341][ C0] R13: dffffc0000000000 R14: ffff8881135b5000 R15: 0000000000000000 [ 273.441337][ C0] ? __xdp_return+0x330/0x480 [ 273.446213][ C0] __xdp_return+0x3da/0x480 [ 273.450723][ C0] xdp_return_frame_rx_napi+0x82/0x260 [ 273.456365][ C0] dev_map_enqueue_multi+0xe87/0xfa0 [ 273.461668][ C0] ? __cfi_dev_map_enqueue_multi+0x10/0x10 [ 273.467482][ C0] ? page_pool_refill_alloc_cache+0x514/0x610 [ 273.473556][ C0] ? 0xffffffffa0001f64 [ 273.477728][ C0] xdp_do_redirect_frame+0x3bd/0x620 [ 273.483026][ C0] bpf_test_run_xdp_live+0xaae/0x1b00 [ 273.488405][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 273.493453][ C0] ? text_poke_copy+0x7d/0xa0 [ 273.498139][ C0] ? bpf_test_run_xdp_live+0x549/0x1b00 [ 273.503693][ C0] ? xdp_convert_md_to_buff+0x370/0x370 [ 273.509336][ C0] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 273.515248][ C0] ? __kasan_check_write+0x14/0x20 [ 273.520389][ C0] ? _copy_from_user+0x8f/0xc0 [ 273.525217][ C0] bpf_prog_test_run_xdp+0x757/0xf80 [ 273.530507][ C0] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 273.536338][ C0] ? __kasan_check_write+0x14/0x20 [ 273.541449][ C0] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 273.547257][ C0] bpf_prog_test_run+0x3b4/0x5c0 [ 273.552199][ C0] ? bpf_prog_query+0x270/0x270 [ 273.557054][ C0] ? selinux_bpf+0xce/0xf0 [ 273.561500][ C0] ? security_bpf+0x93/0xb0 [ 273.566202][ C0] __sys_bpf+0x5ee/0x850 [ 273.570447][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 273.575823][ C0] ? trace_event_raw_event_sys_enter+0xf1/0x120 [ 273.582092][ C0] __x64_sys_bpf+0x7c/0x90 [ 273.586510][ C0] x64_sys_call+0x488/0x9a0 [ 273.591019][ C0] do_syscall_64+0x4c/0xa0 [ 273.595440][ C0] ? clear_bhb_loop+0x30/0x80 [ 273.600136][ C0] ? clear_bhb_loop+0x30/0x80 [ 273.604819][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.610720][ C0] RIP: 0033:0x7f443f79e159 [ 273.615158][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.634783][ C0] RSP: 002b:00007f444057e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.643230][ C0] RAX: ffffffffffffffda RBX: 00007f443fa25fa0 RCX: 00007f443f79e159 [ 273.651292][ C0] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 273.659466][ C0] RBP: 00007f443f83506b R08: 0000000000000000 R09: 0000000000000000 [ 273.667620][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.675598][ C0] R13: 00007f443fa26038 R14: 00007f443fa25fa0 R15: 00007ffffa942208 [ 273.683575][ C0] [ 273.686597][ C0] rcu: rcu_preempt kthread starved for 9952 jiffies! g46429 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 273.697787][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 273.707760][ C0] rcu: RCU grace-period kthread stack dump: [ 273.713672][ C0] task:rcu_preempt state:R running task stack:28264 pid:14 ppid:2 flags:0x00004000 [ 273.724453][ C0] Call Trace: [ 273.727761][ C0] [ 273.730735][ C0] __schedule+0xcb3/0x1700 [ 273.735185][ C0] ? release_firmware_map_entry+0x190/0x190 [ 273.741108][ C0] ? __mod_timer+0x865/0xc00 [ 273.745711][ C0] schedule+0xbd/0x170 [ 273.749810][ C0] schedule_timeout+0x159/0x340 [ 273.754673][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 273.760073][ C0] ? __cfi_process_timeout+0x10/0x10 [ 273.765381][ C0] ? prepare_to_swait_event+0x30f/0x330 [ 273.770940][ C0] rcu_gp_fqs_loop+0x2ed/0x1100 [ 273.775812][ C0] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 273.781912][ C0] ? rcu_gp_init+0xf30/0xf30 [ 273.786505][ C0] rcu_gp_kthread+0x99/0x390 [ 273.791106][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 273.796324][ C0] ? try_to_wake_up+0x622/0x1250 [ 273.801322][ C0] ? __kasan_check_read+0x11/0x20 [ 273.806359][ C0] ? __kthread_parkme+0x13a/0x180 [ 273.811393][ C0] kthread+0x281/0x320 [ 273.815470][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 273.820690][ C0] ? __cfi_kthread+0x10/0x10 [ 273.825319][ C0] ret_from_fork+0x1f/0x30 [ 273.829847][ C0] [ 273.832882][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 273.839207][ C0] CPU: 0 PID: 6109 Comm: syz.8.2460 Tainted: G W syzkaller #0 [ 273.848163][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.858325][ C0] RIP: 0010:page_pool_put_defragged_page+0x8/0x790 [ 273.864956][ C0] Code: e8 69 84 fd fc e9 95 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0e 87 16 80 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 ec 28 89 4d d4 41 89 d5 49 89 f4 49 89 fe 48 [ 273.884678][ C0] RSP: 0018:ffffc90002cff528 EFLAGS: 00000246 [ 273.890759][ C0] RAX: ffffffff84012d40 RBX: ffffea00045e98c0 RCX: 0000000000000000 [ 273.898828][ C0] RDX: 00000000ffffffff RSI: ffffea00045e98c0 RDI: ffff8881135b5000 [ 273.906911][ C0] RBP: ffffc90002cff538 R08: ffff8881352c5100 R09: 0000000000000004 [ 273.914919][ C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffffea0000000000 [ 273.922897][ C0] R13: dffffc0000000000 R14: ffff8881135b5000 R15: 0000000000000000 [ 273.930979][ C0] FS: 00007f444057e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 273.939942][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.946574][ C0] CR2: 0000001b2df1bff8 CR3: 0000000144563000 CR4: 00000000003506b0 [ 273.954563][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.962572][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 273.970561][ C0] Call Trace: [ 273.973847][ C0] [ 273.976799][ C0] __xdp_return+0x3da/0x480 [ 273.981334][ C0] xdp_return_frame_rx_napi+0x82/0x260 [ 273.986807][ C0] dev_map_enqueue_multi+0xe87/0xfa0 [ 273.992104][ C0] ? __cfi_dev_map_enqueue_multi+0x10/0x10 [ 273.997916][ C0] ? page_pool_refill_alloc_cache+0x514/0x610 [ 274.004021][ C0] ? 0xffffffffa0001f64 [ 274.008179][ C0] xdp_do_redirect_frame+0x3bd/0x620 [ 274.013478][ C0] bpf_test_run_xdp_live+0xaae/0x1b00 [ 274.018856][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 274.023883][ C0] ? text_poke_copy+0x7d/0xa0 [ 274.028596][ C0] ? bpf_test_run_xdp_live+0x549/0x1b00 [ 274.034165][ C0] ? xdp_convert_md_to_buff+0x370/0x370 [ 274.039722][ C0] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 274.045626][ C0] ? __kasan_check_write+0x14/0x20 [ 274.050747][ C0] ? _copy_from_user+0x8f/0xc0 [ 274.055522][ C0] bpf_prog_test_run_xdp+0x757/0xf80 [ 274.060817][ C0] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 274.066648][ C0] ? __kasan_check_write+0x14/0x20 [ 274.071763][ C0] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 274.077592][ C0] bpf_prog_test_run+0x3b4/0x5c0 [ 274.082536][ C0] ? bpf_prog_query+0x270/0x270 [ 274.087566][ C0] ? selinux_bpf+0xce/0xf0 [ 274.091995][ C0] ? security_bpf+0x93/0xb0 [ 274.096595][ C0] __sys_bpf+0x5ee/0x850 [ 274.100933][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 274.106330][ C0] ? trace_event_raw_event_sys_enter+0xf1/0x120 [ 274.112577][ C0] __x64_sys_bpf+0x7c/0x90 [ 274.117003][ C0] x64_sys_call+0x488/0x9a0 [ 274.121537][ C0] do_syscall_64+0x4c/0xa0 [ 274.125965][ C0] ? clear_bhb_loop+0x30/0x80 [ 274.130845][ C0] ? clear_bhb_loop+0x30/0x80 [ 274.135544][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.141452][ C0] RIP: 0033:0x7f443f79e159 [ 274.146044][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.165653][ C0] RSP: 002b:00007f444057e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.174102][ C0] RAX: ffffffffffffffda RBX: 00007f443fa25fa0 RCX: 00007f443f79e159 [ 274.182188][ C0] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 274.190163][ C0] RBP: 00007f443f83506b R08: 0000000000000000 R09: 0000000000000000 [ 274.198412][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.206410][ C0] R13: 00007f443fa26038 R14: 00007f443fa25fa0 R15: 00007ffffa942208 [ 274.214397][ C0] [ 428.983629][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 255s! [ 428.992933][ C0] Showing busy workqueues and worker pools: [ 428.998897][ C0] workqueue events: flags=0x0 [ 429.003613][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=8/256 refcnt=10 [ 429.003664][ C0] in-flight: 321:wiimote_init_worker BAR(5957) [ 429.003826][ C0] pending: psi_avgs_work, vmstat_shepherd, xfrm_state_gc_task, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 429.004185][ C0] workqueue events_long: flags=0x0 [ 429.038536][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.038584][ C0] pending: br_multicast_gc_work [ 429.038701][ C0] workqueue events_unbound: flags=0x2 [ 429.057018][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 429.057060][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 429.057232][ C0] workqueue events_power_efficient: flags=0x80 [ 429.078178][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=8/256 refcnt=9 [ 429.078222][ C0] in-flight: 1940:power_supply_deferred_register_work [ 429.078325][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_managed_work, neigh_managed_work, neigh_periodic_work, gc_worker, check_lifetime [ 429.078585][ C0] workqueue mm_percpu_wq: flags=0x8 [ 429.113821][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.113866][ C0] pending: vmstat_update [ 429.113901][ C0] workqueue writeback: flags=0x4a [ 429.131204][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 429.131250][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 429.131386][ C0] workqueue kblockd: flags=0x18 [ 429.149639][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=4/256 refcnt=5 [ 429.149683][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 429.149857][ C0] workqueue usb_hub_wq: flags=0x4 [ 429.173316][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 429.173368][ C0] in-flight: 814:hub_event hub_event, 19:hub_event hub_event [ 429.188981][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.194383][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.194426][ C0] pending: work_fn [ 429.194541][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.211904][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=7 [ 429.211949][ C0] pending: addrconf_verify_work [ 429.212061][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 429.212163][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.242965][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.243009][ C0] pending: wg_packet_handshake_send_worker [ 429.243105][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.261884][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.261927][ C0] pending: wg_packet_encrypt_worker [ 429.261962][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.280380][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.280420][ C0] pending: wg_packet_handshake_send_worker [ 429.280452][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.299161][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.299217][ C0] pending: wg_packet_encrypt_worker [ 429.299256][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.317551][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.317595][ C0] pending: wg_packet_handshake_send_worker [ 429.317667][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.336338][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.336382][ C0] pending: wg_packet_encrypt_worker [ 429.336417][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=255s workers=6 idle: 221 1938