last executing test programs: 3.521464738s ago: executing program 4 (id=650): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x148}], 0x1}}], 0x1, 0x2090) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb449052ef2d76f3c0ab72b88db15921409f4efe9fe517430ec288238072967546e6a834ac62fec1df765d0147d8d2993dceb59f5b66b848a8f1d09a0d8108e7ef271311ea18df574e3e0b9242dd27f45258cb3bb762582f5737efdc15dabfa031673c84696ab886bdd35bb35a5346cf472e001e71c5384fc353b3181775acb185307d6f762e564b7fd4f06f875fc919c3ebb015f673a3cb380b03abbbfe30c781bd8b17292a1e2b748107e60e568c1e1f86a0cf01e30772b6b2146cd4d1f2e9fc7b5bcefded909fe7bf723490ced2d106004e3a0cd7b9c3519b05741751325fe8538085cc1f902fa544dcc929f10469fe39c3cf61f786254a373316923186fa08ef3c8917d4c2df0d3e41c32b6948177e71b23c3a9eb9c30db62011da02d48da9318c20a438f6ba2962ce066b8793e16831c350a379f8c54c5de2eab0b0117e3dc30f5c27c87b2eb33b43215bdcabb7185b1ca317dc967cfdfdcbf92a4e196bcf0d6ba1cea19dd296b4de3625a95ea0ee82efc84379be3125e84d8183ebce42f98654f44f86d49b13529b6cec5acbe93af52987080df30eed17685881b67777877226704091bd1f07b76c3af968b6afc17751d27756d8df673ee1cc756cbc9ef90ee5477c529105548e84a9fa4cba55b8fe48ef33e206952e5be378ef8df0c7c024080b8961d49a6b863cd8f4e29dd1c66fd9f93ea18010b541133f792fde35c33b0bd8ef50f205193ac4c223f6f5e9659ff679a132fee9cf1769ecef53bc2ed1b3feaa0306025a68e87a88f7bf740a457024963ef1dac67dbd1bae5aec6604b8440e5f3cf21d1c4187db1a1f205054ec1f9dd4d86977bdd6c4c30ef70e2f96fca9ad0cd08dd057286fb658aa836f5a0b1e0c0b86e5e4ab951fd85fa9bc1fa58696b69b2a423a9da883ea945955840c11ae26af5a08cf7d8ce3eda8eef541ba114e0614a0e864424df8aaab36a8abcacf52adddd298c11557f6948215b809e817fefbba3c2fdd96b2c3f23c20bb3c04ccf92c570db4a1555907a79c1ea7fe4085356dbf1d892d86691fcb6ad8b9a7b4b3703afe7e2c2d0da56e31f7d724aa1ece518602235cccf491bc282195054dfebb630b0cbbf7c2a9b82ea6999316dff165c06df46731d1e6a8424cfabac225c32e1fee0a82bcc954f56e5c92da2a1f5d5dc6f6f0b6cf207f0b5986459f5f56643e7b147056c3186753749e6d4ba51a594429a9b4a99b4885fc1888ef784025ad07afe5e7aa8a50dd0d4981905b7f11198b983eb0437ca00e0e642644e63d9d87d64ae75915230887fa8a6e9b446bd4c1d0200a4d77d63782b8d00448849aac5a152df21ef03665613f18f2d4f94f147bd73bf37c7f706a57c9352db92b7359f76a06c63e34fa61037e00457527effd358a21ee7cdee24fb5a8f57494f6e9913935afbd76cc11981b9ed2774c2150312e26d9e17a903b4c34c512a92b608dd46b95e023fe59fc3c343373899d8e52a4460ca1ab875f4dfc16383dd7a1e64e6b97f0adafa0d76dc7ff428cbb3c88aa8ae5e7362a776c565635db3147517477fbe5cc37c0359236dfd5c11e9800747e9419a04a5404c049c831a21837c264418f7ff83ba34ae6a884189d65047842346ef6610659e8eeade4b9c688d27950d08a568ab02f7da11d431dcc291280304d4256cce5a9234c323f490fd6a48dbb95bfc1e16df4e2b6ef940e477bdffc56b330a803c239c3abc18d8ed1f6719d5868a91f99e3477961641c0077a295d7764b18e08e21a2f1806f980a8669949fcaacfc0ee4b1d14984ad5fdc98959d628938a3a3873cc35d5f3053e613487dadf4cc1a0181d4b7b3125151a32b5994bee46a75ec69909a602e3793eff825afa958ca56714038f8b83c01a3561ee0d9f549e48ff0cd5d6dcc2a05f4311f0df694f62f5f3d562135a8a49a64fba30d291e751e968a365339e3925e2b7192e9402e06c27c4f7cab5710fb82f3816049b1cbd84333f440662f0a7cb88e2d5be960be3b67f79d165010dba4b702da28231aada36f2de81c80a1e54cc19d4e77526fb1df86b280d1e15500e7659a92bead43f033d5ee03ea8a229d7dff749026cf6a573c7c613857e9aae44dfc9f9bd85286cd1c698135b8d8948af601722a649ee67c1414d2ee2a767ab71489f69394f404d90a9e6dcc2eeefe481fbc3017ac9dde22fc3592b8d17a5ab493c49293ff051c76fd0848f23c745136247da91ad95813c0313d62dff330cecf5b903a12f03d9ad6995600e1922eb4d79a8cb64b4b9274d0dedb1dc49f8ad439dec3209203965a17e4275e8617379cc6e4f1cf290e4c388aab4a892b6a5a5192e0ce925ee41b87ce81aa0988f12833b65df8992bbe37ea971943db23a2ef07077843b7d0b91626e969c54ddfd440c87d32faecdd0c70758e259e54f91fdcb5331b2b975e6c1053e430739f53cb26e5154aaf973dabf56fa732c254e73e8dd50945021712f62a47ad8bab72c33fb1d1989232b66624aacb", 0x744}], 0x1) 2.835165119s ago: executing program 4 (id=658): timer_create(0xfffffffc, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone3(0x0, 0x0) getegid() tkill(r0, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f0000000580)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x701401, 0xc1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 2.695906693s ago: executing program 2 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000240), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0xfffffffffffffffe) 2.638948139s ago: executing program 0 (id=668): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001b00), 0x8481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000001b40)={0xffffffffffffffff, 0x6, 0x2}) 2.368781247s ago: executing program 0 (id=670): openat$kvm(0x0, 0x0, 0x941400, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f00000027c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000002940)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, 0x0, &(0x7f0000002980)) 2.093328845s ago: executing program 0 (id=673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000030000000000000010000000cd0000000000000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x94) 2.093138725s ago: executing program 0 (id=674): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf9, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2.051481199s ago: executing program 1 (id=675): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000a80)="0a000000010001", 0x7) 2.04181495s ago: executing program 1 (id=676): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f00000001c0), 0xfc, 0x56f, &(0x7f0000000b80)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000001180)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) io_setup(0x8, &(0x7f0000000600)) 1.902914315s ago: executing program 4 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) clock_adjtime(0x0, &(0x7f0000000a80)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0x4, 0x1fff, 0xfffffffffffffffc, 0x4, 0xbab, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.5560392s ago: executing program 2 (id=681): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x8481, 0x0) eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000001b80)={0xffffffffffffffff, 0x7, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000001d40)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) modify_ldt$read(0x0, &(0x7f0000001d80)=""/87, 0x57) 1.492188677s ago: executing program 4 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x808000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) 1.491232937s ago: executing program 4 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) 1.403275866s ago: executing program 3 (id=685): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0xc004, 0x8000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x4}, 0x4) 1.297576817s ago: executing program 3 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.26658599s ago: executing program 3 (id=687): unshare(0x2040400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000740)) 1.249495262s ago: executing program 2 (id=688): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x40000) ioctl$BLKPG(r1, 0x1269, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x83) inotify_init() userfaultfd(0x801) r2 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 1.249164942s ago: executing program 3 (id=689): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, &(0x7f0000001840)={0x0, 0x0}) r0 = syz_mount_image$ext4(&(0x7f00000018c0)='ext4\x00', &(0x7f0000001900)='./file0\x00', 0x280440e, &(0x7f0000001940), 0x1, 0xbdb, &(0x7f0000002140)="$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") r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) 1.183120409s ago: executing program 2 (id=690): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x278, 0x148, 0x1e0, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 1.182780659s ago: executing program 2 (id=691): syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/4096, 0x20001b80}, {&(0x7f0000001800)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0x100000}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{}, 0x0, 0x0}, 0x20) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) 1.087000399s ago: executing program 1 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) 435.923506ms ago: executing program 4 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f00000004c0), &(0x7f0000000500)=@tcp=r4}, 0x20) sendto(r5, &(0x7f0000000540)="01", 0x1, 0x0, 0x0, 0x0) 330.470516ms ago: executing program 1 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xa0, r1, 0x1, 0x0, 0xfffffffe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 330.041136ms ago: executing program 3 (id=695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x2, 0x0, 0x40, 0x8}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x7}, {0xd, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff}, {0x7, 0xab5d, 0x47b, 0x7e000000}}}]}]}]}}]}, 0x74}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x46) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 329.784146ms ago: executing program 1 (id=696): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 292.64371ms ago: executing program 0 (id=697): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000100)={{}, 0x1, 0x65, 0x1}, 0x18) write$input_event(r0, &(0x7f0000000140), 0x18) 1.83813ms ago: executing program 1 (id=698): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(r0, &(0x7f0000000080)='\x00', 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x14, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 1.06531ms ago: executing program 3 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0xe, &(0x7f00000005c0)={[{@test_dummy_encryption, 0x3d}, {@discard}, {@noauto_da_alloc}, {@minixdf}, {@nojournal_checksum}, {@nogrpid}], [{@euid_eq}]}, 0x3, 0x45c, &(0x7f0000000640)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000200)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, "006074333200009bb3c2ce0000000000000000011800f5ff0100fffffffdff00"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file2\x00', 0x0) 424.08µs ago: executing program 2 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@deltaction={0x30, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) 0s ago: executing program 0 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000600)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000b00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x10, 0xa456, 0x3, 0x4, 0x8, "5de3b3d5c0d64bca54849f8ad51ca2d8100071", 0x0, 0x8}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800402, &(0x7f00000002c0)=ANY=[@ANYBLOB="646f733178666c6f7070792c756e695f786c6174653d302c6e6f6e756d7461696c3d302c726f6469722c646d61736b3d30303030303030303030303031363237323131333534362c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c756e695f786c6174653d302c726f6469722c726f6469722c757466383d312c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c64656275672c726f6f74636f6e746578743d73797374656d5f752c00fa89c7305b5864b7c58e516ef9042f721ebaf84b2b9f89de5b5715fb1e350ce4372e5d117aefdca3441210b0585c898028bc3cc26934715f4adac97defa8452cc7deba423aa53c8a69665e7d869c2af8c7fa97"], 0x4, 0x2f0, &(0x7f0000000700)="$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") bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): syscall=1 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 59.628108][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.641005][ T29] audit: type=1326 audit(1793821979.716:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.4.150" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 59.673892][ T29] audit: type=1326 audit(1793821979.716:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.4.150" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 59.715769][ T306] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 59.740013][ T306] usb 3-1: Found UVC 71.01 device (0000:0000) [ 59.753706][ T306] usb 3-1: No streaming interface found for terminal 2. [ 60.077780][ T905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.092783][ T905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.212659][ T793] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.242355][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 60.403942][ T793] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 60.419172][ T793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.423375][ T312] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 60.430483][ T793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 60.444700][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.447054][ T793] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 60.467133][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.469688][ T312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 60.484435][ T312] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 60.491180][ T793] uvcvideo 1-1:1.0: Found multiple Units with ID 1 [ 60.493847][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.510390][ T793] usb 1-1: Found UVC 71.01 device (0000:0000) [ 60.517489][ T312] uvcvideo 4-1:1.0: Found multiple Units with ID 1 [ 60.517517][ T312] usb 4-1: Found UVC 71.01 device (0000:0000) [ 60.517550][ T312] usb 4-1: No streaming interface found for terminal 2. [ 60.524390][ T793] usb 1-1: No streaming interface found for terminal 2. [ 60.727888][ T926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.737266][ T926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.760264][ T922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.768902][ T922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.114947][ T29] audit: type=1400 audit(1793821981.316:207): avc: denied { accept } for pid=940 comm="syz.4.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 61.371178][ T943] loop4: detected capacity change from 0 to 40427 [ 61.379750][ T943] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 61.387854][ T943] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 61.396799][ T943] F2FS-fs (loop4): invalid crc value [ 61.403416][ T943] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.427151][ T943] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 61.434279][ T943] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.045477][ T19] usb 3-1: USB disconnect, device number 3 [ 62.171936][ T958] fuse: Bad value for 'fd' [ 62.178950][ T29] audit: type=1326 audit(1793821982.376:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=955 comm="syz.2.163" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 62.203754][ T29] audit: type=1326 audit(1793821982.376:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=955 comm="syz.2.163" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 62.228906][ T29] audit: type=1326 audit(1793821982.376:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=955 comm="syz.2.163" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 62.825908][ T6] usb 4-1: USB disconnect, device number 4 [ 63.292406][ T362] usb 1-1: USB disconnect, device number 3 [ 64.072374][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 64.135053][ T986] loop4: detected capacity change from 0 to 40427 [ 64.146212][ T986] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 64.154219][ T986] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 64.164282][ T986] F2FS-fs (loop4): invalid crc value [ 64.173065][ T986] F2FS-fs (loop4): Found nat_bits in checkpoint [ 64.296682][ T986] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 64.304022][ T986] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.313410][ T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 64.342342][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.362627][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.392160][ T6] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 64.401761][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.415730][ T6] usb 3-1: Found UVC 71.01 device (0000:0000) [ 64.432923][ T6] usb 3-1: No streaming interface found for terminal 2. [ 64.472331][ T362] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 64.482327][ T793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.629324][ T24] usb 3-1: USB disconnect, device number 4 [ 64.653771][ T362] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 64.667787][ T362] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.679291][ T793] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 64.690909][ T793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.701556][ T362] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.710541][ T793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.719470][ T362] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 64.728601][ T793] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 64.735578][ T1007] loop4: detected capacity change from 0 to 40427 [ 64.738870][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.752122][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.752170][ T1007] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 64.766139][ T793] uvcvideo 1-1:1.0: Found multiple Units with ID 1 [ 64.768297][ T1007] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 64.777479][ T793] usb 1-1: Found UVC 71.01 device (0000:0000) [ 64.790060][ T793] usb 1-1: No streaming interface found for terminal 2. [ 64.792258][ T1007] F2FS-fs (loop4): invalid crc value [ 64.798043][ T362] uvcvideo 4-1:1.0: Found multiple Units with ID 1 [ 64.809175][ T362] usb 4-1: Found UVC 71.01 device (0000:0000) [ 64.816255][ T362] usb 4-1: No streaming interface found for terminal 2. [ 64.817043][ T1007] F2FS-fs (loop4): Found nat_bits in checkpoint [ 64.850053][ T1007] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 64.857206][ T1007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.975595][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.984180][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.002594][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.011057][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.632332][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 65.712415][ T312] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.813498][ T6] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 65.822455][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.832750][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.841637][ T6] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 65.850831][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.860765][ T6] uvcvideo 2-1:1.0: Found multiple Units with ID 1 [ 65.867417][ T6] usb 2-1: Found UVC 71.01 device (0000:0000) [ 65.874471][ T6] usb 2-1: No streaming interface found for terminal 2. [ 65.903614][ T312] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.913813][ T312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.922771][ T312] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 65.931819][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.941642][ T312] usb 5-1: Found UVC 1.00 device (0000:0000) [ 65.948560][ T312] usb 5-1: No streaming interface found for terminal 2. [ 66.066814][ T1019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.075484][ T1019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.149876][ T312] usb 5-1: USB disconnect, device number 4 [ 66.157097][ T1027] fuse: Unknown parameter 'us0000000000000000000000000000000000000000' [ 66.175636][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 66.175649][ T29] audit: type=1326 audit(1793821986.376:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.182" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 66.214581][ T29] audit: type=1326 audit(1793821986.376:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.182" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 66.239408][ T29] audit: type=1326 audit(1793821986.376:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.182" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 66.264464][ T29] audit: type=1326 audit(1793821986.376:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.182" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 66.289171][ T29] audit: type=1326 audit(1793821986.376:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.182" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 66.313852][ T29] audit: type=1326 audit(1793821986.376:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.182" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 66.338384][ T29] audit: type=1326 audit(1793821986.376:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.182" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 66.363086][ T29] audit: type=1326 audit(1793821986.376:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.182" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 67.027356][ T1040] loop2: detected capacity change from 0 to 2048 [ 67.034970][ T1040] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 67.044811][ T1040] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.055900][ T1040] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 67.066197][ T1040] EXT4-fs (loop2): group descriptors corrupted! [ 67.430966][ T1042] netlink: 260 bytes leftover after parsing attributes in process `syz.4.187'. [ 67.573016][ T793] usb 4-1: USB disconnect, device number 5 [ 67.973243][ T362] usb 1-1: USB disconnect, device number 4 [ 68.160244][ T1058] loop4: detected capacity change from 0 to 2048 [ 68.193181][ T1058] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 68.220739][ T1058] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.242387][ T1058] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 68.262346][ T1058] EXT4-fs (loop4): group descriptors corrupted! [ 68.381471][ T362] usb 2-1: USB disconnect, device number 3 [ 68.852528][ T362] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 69.064605][ T362] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 69.076766][ T362] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.097789][ T362] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.116504][ T362] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 69.145963][ T362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.165485][ T362] uvcvideo 2-1:1.0: Found multiple Units with ID 1 [ 69.180056][ T362] usb 2-1: Found UVC 71.01 device (0000:0000) [ 69.194793][ T362] usb 2-1: No streaming interface found for terminal 2. [ 69.381753][ T1067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.390599][ T1067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.415639][ T1083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 69.426875][ T29] audit: type=1400 audit(1793821989.626:224): avc: denied { create } for pid=1081 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.820737][ T1096] fuse: Bad value for 'fd' [ 69.827654][ T29] audit: type=1326 audit(1793821990.026:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1093 comm="syz.4.203" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 69.922444][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 70.113415][ T6] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 70.122664][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.133057][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.141997][ T6] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 70.151291][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.166979][ T6] usb 4-1: Found UVC 71.01 device (0000:0000) [ 70.174254][ T6] usb 4-1: No streaming interface found for terminal 2. [ 70.426062][ T6] usb 4-1: USB disconnect, device number 6 [ 71.041414][ T1120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 71.466106][ T362] usb 2-1: USB disconnect, device number 4 [ 71.472845][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 71.663581][ T6] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 71.672437][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.682687][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.691638][ T6] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 71.700724][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.710631][ T6] usb 1-1: Found UVC 71.01 device (0000:0000) [ 71.717679][ T6] usb 1-1: No streaming interface found for terminal 2. [ 71.931838][ T362] usb 1-1: USB disconnect, device number 5 [ 72.491946][ T1155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 72.570804][ T1157] fuse: Bad value for 'fd' [ 72.577972][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 72.577987][ T29] audit: type=1326 audit(1793821992.776:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.220" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 72.609166][ T29] audit: type=1326 audit(1793821992.776:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.220" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 72.634225][ T29] audit: type=1326 audit(1793821992.776:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.220" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 72.660823][ T29] audit: type=1326 audit(1793821992.776:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.220" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 72.686912][ T29] audit: type=1326 audit(1793821992.776:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.220" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 72.711645][ T29] audit: type=1326 audit(1793821992.776:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.220" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 72.736414][ T29] audit: type=1326 audit(1793821992.776:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.220" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 72.761321][ T29] audit: type=1326 audit(1793821992.776:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.220" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 73.672423][ T362] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.986760][ T1189] netlink: 260 bytes leftover after parsing attributes in process `syz.2.231'. [ 74.154289][ T362] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 74.317153][ T362] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.548554][ T1197] syz.0.234 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.800448][ T362] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.815158][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 74.815220][ T362] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 74.833311][ T362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.859684][ T362] usb 5-1: Found UVC 71.01 device (0000:0000) [ 74.867055][ T362] usb 5-1: No streaming interface found for terminal 2. [ 75.059916][ T362] usb 5-1: USB disconnect, device number 5 [ 75.152364][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 75.363456][ T6] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 75.372216][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.383028][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.391911][ T6] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 75.400974][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.410495][ T6] usb 4-1: Found UVC 71.01 device (0000:0000) [ 75.417529][ T6] usb 4-1: No streaming interface found for terminal 2. [ 75.618001][ T319] usb 4-1: USB disconnect, device number 7 [ 75.887853][ T1227] fuse: Unknown parameter '0x0000000000000008' [ 75.998662][ T1230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 76.132407][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.333387][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.345247][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.360927][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 76.370059][ T6] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 76.379391][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.394800][ T6] uvcvideo 5-1:1.0: Found multiple Units with ID 1 [ 76.401391][ T6] usb 5-1: Found UVC 71.01 device (0000:0000) [ 76.408456][ T6] usb 5-1: No streaming interface found for terminal 2. [ 76.594816][ T1226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.603427][ T1226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.402416][ T319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.587846][ T319] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 77.596664][ T319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.607057][ T319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.618359][ T319] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 77.627479][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.648004][ T319] uvcvideo 1-1:1.0: Found multiple Units with ID 1 [ 77.654655][ T319] usb 1-1: Found UVC 71.01 device (0000:0000) [ 77.661687][ T319] usb 1-1: No streaming interface found for terminal 2. [ 77.926571][ T1253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.968403][ T1253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.087191][ T1269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 78.188528][ T1268] loop3: detected capacity change from 0 to 40427 [ 78.220578][ T1268] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 78.237201][ T1268] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 78.247800][ T1268] F2FS-fs (loop3): invalid crc value [ 78.253046][ T1273] fuse: Unknown parameter 'use00000000000000000000' [ 78.264485][ T1268] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.303952][ T1268] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 78.311121][ T1268] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.276896][ T793] usb 5-1: USB disconnect, device number 6 [ 79.369915][ T1285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 80.013898][ T1301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 80.060905][ T1305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 80.090730][ T312] usb 1-1: USB disconnect, device number 6 [ 80.338808][ T1314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 81.635872][ T1346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 81.871424][ T1345] loop1: detected capacity change from 0 to 40427 [ 81.888779][ T1345] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 81.903501][ T1345] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 81.920538][ T1345] F2FS-fs (loop1): invalid crc value [ 81.935834][ T1345] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.978512][ T1345] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 81.986476][ T1345] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.069833][ T1356] Zero length message leads to an empty skb [ 82.426656][ T1364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 82.838692][ T1360] loop3: detected capacity change from 0 to 40427 [ 82.858611][ T1360] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 82.893772][ T1360] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 82.912121][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 82.921325][ T1360] F2FS-fs (loop3): invalid crc value [ 82.941043][ T1360] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.012863][ T1360] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 83.021590][ T1379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 83.030511][ T1360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.134164][ T1382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 83.322487][ T1391] fuse: Unknown parameter '0x0000000000000008' [ 83.332578][ T29] audit: type=1326 audit(1793822003.526:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 83.465333][ T29] audit: type=1326 audit(1793822003.526:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 83.567909][ T29] audit: type=1326 audit(1793822003.526:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 83.640824][ T29] audit: type=1326 audit(1793822003.526:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 83.705422][ T29] audit: type=1326 audit(1793822003.526:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 83.791606][ T29] audit: type=1326 audit(1793822003.526:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 83.879193][ T29] audit: type=1326 audit(1793822003.526:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 83.945089][ T29] audit: type=1326 audit(1793822003.526:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 83.966214][ T1401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 84.382472][ T1415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 84.566185][ T1421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 84.697731][ T1430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 84.836746][ T1429] loop1: detected capacity change from 0 to 40427 [ 84.844097][ T1429] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 84.851644][ T1429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 84.860671][ T1429] F2FS-fs (loop1): invalid crc value [ 84.861359][ T1434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 84.867896][ T1429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.926689][ T1429] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 84.933897][ T1429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.056160][ T1433] loop3: detected capacity change from 0 to 40427 [ 85.063344][ T1433] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 85.144148][ T1433] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 85.254387][ T1433] F2FS-fs (loop3): invalid crc value [ 85.343122][ T1433] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.401910][ T1433] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 85.412176][ T1433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.485823][ T1450] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.536376][ T29] audit: type=1400 audit(1793822005.736:249): avc: denied { ioctl } for pid=1449 comm="syz.2.309" path="socket:[89962]" dev="sockfs" ino=89962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.597629][ T29] audit: type=1400 audit(1793822005.736:250): avc: denied { bind } for pid=1449 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.599591][ T1455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 85.825271][ T1461] ======================================================= [ 85.825271][ T1461] WARNING: The mand mount option has been deprecated and [ 85.825271][ T1461] and is ignored by this kernel. Remove the mand [ 85.825271][ T1461] option from the mount to silence this warning. [ 85.825271][ T1461] ======================================================= [ 85.984742][ T1466] 8021q: VLANs not supported on wg1 [ 86.006713][ T1466] netlink: 104 bytes leftover after parsing attributes in process `syz.0.313'. [ 86.041567][ T1454] loop3: detected capacity change from 0 to 40427 [ 86.066321][ T1454] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 86.078879][ T1454] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 86.113871][ T1454] F2FS-fs (loop3): invalid crc value [ 86.131113][ T1454] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.141604][ T1468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 86.222558][ T1454] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 86.229635][ T1454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.538456][ T1486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 87.601919][ T1480] loop4: detected capacity change from 0 to 40427 [ 87.651468][ T1480] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 87.665815][ T1510] Illegal XDP return value 1510 on prog (id 138) dev syz_tun, expect packet loss! [ 87.695892][ T1480] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 87.733435][ T1480] F2FS-fs (loop4): invalid crc value [ 87.776431][ T1480] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.875278][ T1480] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 87.899143][ T1480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.702324][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.139226][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 89.139242][ T29] audit: type=1400 audit(1793822009.336:266): avc: denied { unlink } for pid=1527 comm="syz.1.336" name="#1" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.180350][ T1504] loop3: detected capacity change from 0 to 131072 [ 89.194055][ T1530] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 89.216853][ T1530] overlayfs: filesystem on './bus' not supported as upperdir [ 89.225961][ T1504] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 89.234994][ T1504] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.243515][ T1504] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 89.251978][ T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 89.261240][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.271609][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.280834][ T6] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 89.290093][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.293123][ T1507] loop0: detected capacity change from 0 to 131072 [ 89.305226][ T1534] __nla_validate_parse: 2 callbacks suppressed [ 89.305251][ T1534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 89.313808][ T6] usb 3-1: Found UVC 71.01 device (0000:0000) [ 89.341154][ T1507] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 5) [ 89.356587][ T1503] loop3: detected capacity change from 0 to 512 [ 89.363352][ T1507] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 89.372077][ T6] usb 3-1: No streaming interface found for terminal 2. [ 89.387457][ T1503] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.412441][ T1503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.422104][ T1507] F2FS-fs (loop0): invalid crc value [ 89.463122][ T1503] EXT4-fs (loop3): 1 truncate cleaned up [ 89.463500][ T1507] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.468810][ T1503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.523284][ T29] audit: type=1400 audit(1793822009.726:267): avc: denied { write } for pid=1502 comm="syz.3.328" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.554660][ T1501] usb 3-1: USB disconnect, device number 5 [ 89.581362][ T29] audit: type=1400 audit(1793822009.746:268): avc: denied { add_name } for pid=1502 comm="syz.3.328" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.611435][ T1507] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 89.621314][ T1507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.646276][ T295] EXT4-fs (loop3): unmounting filesystem. [ 89.654301][ T29] audit: type=1400 audit(1793822009.746:269): avc: denied { create } for pid=1502 comm="syz.3.328" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.738890][ T29] audit: type=1400 audit(1793822009.746:270): avc: denied { read append open } for pid=1502 comm="syz.3.328" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.893036][ T29] audit: type=1400 audit(1793822009.806:271): avc: denied { map } for pid=1502 comm="syz.3.328" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.169213][ T29] audit: type=1400 audit(1793822009.816:272): avc: denied { write } for pid=1502 comm="syz.3.328" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.230784][ T29] audit: type=1400 audit(1793822009.856:273): avc: denied { create } for pid=1506 comm="syz.0.329" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 90.260359][ T29] audit: type=1400 audit(1793822009.876:274): avc: denied { map } for pid=1506 comm="syz.0.329" path="socket:[104660]" dev="sockfs" ino=104660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 90.286298][ T29] audit: type=1400 audit(1793822009.896:275): avc: denied { ioctl } for pid=1506 comm="syz.0.329" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=111190 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.314547][ T1559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 90.550941][ T1556] loop2: detected capacity change from 0 to 40427 [ 90.568085][ T1556] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 90.620463][ T1562] loop0: detected capacity change from 0 to 512 [ 90.671229][ T1556] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 90.671368][ T1562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.704635][ T1556] F2FS-fs (loop2): invalid crc value [ 90.712771][ T1556] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.969247][ T1562] EXT4-fs (loop0): 1 truncate cleaned up [ 90.979481][ T1562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.032532][ T1556] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 91.039716][ T1556] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.159901][ T1579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 91.216593][ T288] EXT4-fs (loop0): unmounting filesystem. [ 91.234116][ T1583] loop0: detected capacity change from 0 to 1024 [ 91.270622][ T1583] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.495857][ T1583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.822332][ T633] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.012438][ T633] usb 2-1: Using ep0 maxpacket: 32 [ 92.511220][ T1599] netlink: 260 bytes leftover after parsing attributes in process `syz.3.353'. [ 92.544502][ T633] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 92.552894][ T633] usb 2-1: config 0 has no interface number 0 [ 92.559292][ T633] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 92.658171][ T633] usb 2-1: config 0 interface 189 altsetting 128 has an invalid endpoint descriptor of length 2, skipping [ 92.922658][ T1599] syz.3.353 (1599) used greatest stack depth: 19240 bytes left [ 92.930363][ T633] usb 2-1: config 0 interface 189 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.943904][ T633] usb 2-1: config 0 interface 189 has no altsetting 0 [ 92.962446][ T633] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0134, bcdDevice=aa.35 [ 92.962840][ T288] EXT4-fs (loop0): unmounting filesystem. [ 92.976019][ T633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.999410][ T633] usb 2-1: Product: syz [ 93.015537][ T633] usb 2-1: Manufacturer: syz [ 93.020181][ T633] usb 2-1: SerialNumber: syz [ 93.043970][ T633] usb 2-1: config 0 descriptor?? [ 93.076045][ T1613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 93.405128][ T633] ftdi_sio 2-1:0.189: FTDI USB Serial Device converter detected [ 93.416504][ T633] ftdi_sio ttyUSB0: unknown device type: 0xaa35 [ 93.424631][ T633] usb 2-1: USB disconnect, device number 5 [ 93.431103][ T633] ftdi_sio 2-1:0.189: device disconnected [ 93.505511][ T1618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 93.511899][ T1610] loop4: detected capacity change from 0 to 40427 [ 93.526577][ T1610] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 93.534180][ T1610] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 93.543141][ T1610] F2FS-fs (loop4): invalid crc value [ 93.549416][ T1610] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.574132][ T1610] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 93.581252][ T1610] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.792311][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 93.815420][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.087177][ T1632] loop1: detected capacity change from 0 to 512 [ 94.214628][ T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 94.224000][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.245272][ T1632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.255156][ T1632] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.266292][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.275720][ T6] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 94.285289][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 94.285301][ T29] audit: type=1400 audit(1793822014.486:293): avc: denied { create } for pid=1631 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 94.312485][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.325596][ T6] usb 3-1: Found UVC 71.01 device (0000:0000) [ 94.333287][ T6] usb 3-1: No streaming interface found for terminal 2. [ 94.364914][ T29] audit: type=1400 audit(1793822014.566:294): avc: denied { setattr } for pid=1631 comm="syz.1.364" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.365013][ T1641] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.364: corrupted inode contents [ 94.399021][ T1641] EXT4-fs (loop1): Remounting filesystem read-only [ 94.405671][ T1641] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.364: mark_inode_dirty error [ 94.417121][ T1641] EXT4-fs (loop1): Remounting filesystem read-only [ 94.423963][ T1641] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.364: corrupted inode contents [ 94.435856][ T1641] EXT4-fs (loop1): Remounting filesystem read-only [ 94.443238][ T1642] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.364: corrupted inode contents [ 94.455432][ T1642] EXT4-fs (loop1): Remounting filesystem read-only [ 94.469552][ T1642] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.364: mark_inode_dirty error [ 94.481100][ T1642] EXT4-fs (loop1): Remounting filesystem read-only [ 94.487956][ T1642] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.364: corrupted inode contents [ 94.500016][ T1642] EXT4-fs (loop1): Remounting filesystem read-only [ 94.506604][ T1642] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.364: mark_inode_dirty error [ 94.520224][ T1642] EXT4-fs (loop1): Remounting filesystem read-only [ 94.526947][ T1642] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.364: corrupted inode contents [ 94.539073][ T1642] EXT4-fs (loop1): Remounting filesystem read-only [ 94.545757][ T1642] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.364: mark_inode_dirty error [ 94.546741][ T312] usb 3-1: USB disconnect, device number 6 [ 94.557444][ T1642] EXT4-fs (loop1): Remounting filesystem read-only [ 94.594607][ T1641] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.364: corrupted inode contents [ 94.611722][ T29] audit: type=1400 audit(1793822014.806:295): avc: denied { getopt } for pid=1631 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.736587][ T1647] fuse: Unknown parameter 'use00000000000000000000' [ 94.752413][ T29] audit: type=1326 audit(1793822014.946:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.366" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 94.787237][ T29] audit: type=1326 audit(1793822014.946:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.366" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 94.814219][ T29] audit: type=1326 audit(1793822014.946:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.366" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 94.838930][ T29] audit: type=1326 audit(1793822014.946:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.366" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 94.863992][ T29] audit: type=1326 audit(1793822014.946:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.366" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 94.895182][ T29] audit: type=1326 audit(1793822014.946:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.366" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 94.919927][ T29] audit: type=1326 audit(1793822014.946:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.4.366" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851b39fb19 code=0x7ffc0000 [ 95.118913][ T1651] loop1: detected capacity change from 0 to 40427 [ 95.150849][ T1651] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 95.157626][ T1651] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 95.216354][ T1651] F2FS-fs (loop1): invalid crc value [ 95.244089][ T1651] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 95.267535][ T1651] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 95.274748][ T1651] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.297761][ T1651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.367'. [ 95.318574][ T289] syz-executor: attempt to access beyond end of device [ 95.318574][ T289] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.476695][ T1669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 95.892329][ T1630] Bluetooth: hci0: command 0x1003 tx timeout [ 95.898420][ T46] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.961065][ T1683] loop3: detected capacity change from 0 to 256 [ 95.981405][ T1683] exfat: Bad value for 'uid' [ 96.021821][ T1683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.376'. [ 96.101225][ T1691] loop1: detected capacity change from 0 to 512 [ 96.142419][ T1691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.346597][ T1699] netlink: 260 bytes leftover after parsing attributes in process `syz.4.377'. [ 96.452978][ T1691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.498596][ T1691] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.030120][ T289] EXT4-fs (loop1): unmounting filesystem. [ 97.108029][ T1702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 97.123065][ T1702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'. [ 97.131968][ T1702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 97.145085][ T1706] loop4: detected capacity change from 0 to 4096 [ 97.198813][ T1706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.232229][ T1696] loop2: detected capacity change from 0 to 40427 [ 97.249350][ T1696] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 97.263782][ T1706] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 97.273025][ T1696] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 97.330676][ T1714] fuse: Unknown parameter 'use00000000000000000000' [ 97.419061][ T1696] F2FS-fs (loop2): invalid crc value [ 97.441175][ T294] EXT4-fs (loop4): unmounting filesystem. [ 97.459853][ T1696] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 97.509313][ T1720] loop4: detected capacity change from 0 to 512 [ 97.546183][ T1720] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 97.560896][ T1696] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 97.567698][ T1720] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.387: corrupted inode contents [ 97.578235][ T1696] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.595594][ T1720] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #16: comm syz.4.387: mark_inode_dirty error [ 97.610772][ T1696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 97.620299][ T1720] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.387: corrupted inode contents [ 97.639348][ T1720] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.387: mark_inode_dirty error [ 97.651113][ T290] syz-executor: attempt to access beyond end of device [ 97.651113][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.716451][ T1720] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.387: corrupted inode contents [ 97.735873][ T1727] loop0: detected capacity change from 0 to 512 [ 97.743124][ T1727] overlayfs: failed to get inode (-116) [ 97.749063][ T1727] overlayfs: failed to get inode (-116) [ 97.754875][ T1727] overlayfs: failed to get inode (-116) [ 97.961919][ T1727] loop0: detected capacity change from 0 to 256 [ 97.970557][ T1727] exfat: Deprecated parameter 'utf8' [ 97.976073][ T1727] exfat: Deprecated parameter 'namecase' [ 97.981728][ T1727] exfat: Deprecated parameter 'utf8' [ 97.987161][ T1727] exfat: Bad value for 'uid' [ 98.038164][ T1720] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.387: mark_inode_dirty error [ 98.224807][ T1720] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.387: corrupted inode contents [ 98.412936][ T1729] program syz.1.390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.815647][ T1720] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 98.850909][ T1720] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.387: corrupted inode contents [ 98.895315][ T1720] EXT4-fs error (device loop4): ext4_truncate:4327: inode #16: comm syz.4.387: mark_inode_dirty error [ 98.912612][ T1720] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 98.942777][ T1720] EXT4-fs (loop4): 1 truncate cleaned up [ 99.018100][ T1741] fuse: Unknown parameter '0x0000000000000008' [ 99.026931][ T1720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.036269][ T43] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 1 [ 99.052439][ T1720] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.075573][ T1720] EXT4-fs (loop4): unmounting filesystem. [ 99.138597][ T1694] loop3: detected capacity change from 0 to 131072 [ 99.161367][ T1694] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 99.190494][ T1694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 99.200769][ T1694] F2FS-fs (loop3): invalid crc value [ 99.213287][ T1694] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 99.265422][ T1745] fuseblk: Unknown parameter 'Kroupd' [ 99.810214][ T1752] netlink: 260 bytes leftover after parsing attributes in process `syz.4.394'. [ 100.547805][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 100.547820][ T29] audit: type=1400 audit(1793822020.746:334): avc: denied { connect } for pid=1763 comm="syz.1.399" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.631537][ T29] audit: type=1400 audit(1793822020.816:335): avc: denied { setopt } for pid=1763 comm="syz.1.399" laddr=fe80::12 lport=60 faddr=fe80::bb fport=20480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.661327][ T1764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.680924][ T1764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 100.692470][ T1764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan2: link becomes ready [ 100.700365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 100.712492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.723854][ T29] audit: type=1400 audit(1793822020.926:336): avc: denied { write } for pid=1763 comm="syz.1.399" path="socket:[134436]" dev="sockfs" ino=134436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.726380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 100.787136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.796968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.805392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.822904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.837870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.854696][ T1501] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 100.907050][ T1776] fuse: Unknown parameter 'use00000000000000000000' [ 100.916177][ T29] audit: type=1326 audit(1793822021.116:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.2.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 100.960430][ T29] audit: type=1326 audit(1793822021.116:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.2.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 101.025242][ T29] audit: type=1326 audit(1793822021.116:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.2.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 101.078378][ T1771] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 101.089978][ T29] audit: type=1326 audit(1793822021.116:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.2.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 101.139348][ T29] audit: type=1326 audit(1793822021.116:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.2.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 101.165090][ T29] audit: type=1326 audit(1793822021.116:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.2.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 101.222578][ T29] audit: type=1326 audit(1793822021.116:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.2.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7459fb19 code=0x7ffc0000 [ 101.498111][ T1788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 101.540935][ T1791] loop2: detected capacity change from 0 to 7 [ 101.558884][ T317] udevd[317]: symlink '../../loop2' '/dev/disk/by-diskseq/159.tmp-b7:2' failed: Read-only file system [ 101.577547][ T1783] loop1: detected capacity change from 0 to 40427 [ 101.595982][ T317] udevd[317]: symlink '../../loop2' '/dev/disk/by-diskseq/159.tmp-b7:2' failed: Read-only file system [ 101.598526][ T1783] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 101.616775][ T1783] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.626174][ T1783] F2FS-fs (loop1): Image doesn't support compression [ 101.633043][ T1783] F2FS-fs (loop1): Image doesn't support compression [ 101.642585][ T1783] F2FS-fs (loop1): invalid crc value [ 101.653985][ T317] udevd[317]: symlink '../../loop2' '/dev/disk/by-diskseq/159.tmp-b7:2' failed: Read-only file system [ 101.665676][ T1783] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 101.677199][ T343] udevd[343]: symlink '../../loop1' '/dev/disk/by-diskseq/160.tmp-b7:1' failed: Read-only file system [ 101.690152][ T343] udevd[343]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 101.704356][ T317] udevd[317]: symlink '../../loop2' '/dev/disk/by-diskseq/159.tmp-b7:2' failed: Read-only file system [ 101.747069][ T1783] F2FS-fs (loop1): Start checkpoint disabled! [ 101.760073][ T1783] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 101.763804][ T1801] loop2: detected capacity change from 0 to 2048 [ 101.933100][ T1804] netlink: 260 bytes leftover after parsing attributes in process `syz.4.408'. [ 101.953466][ T1783] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.961681][ T1783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 102.432815][ T1801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.551455][ T1801] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.888893][ T1816] loop4: detected capacity change from 0 to 512 [ 102.912389][ T312] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.974081][ T382] kworker/u4:7: attempt to access beyond end of device [ 102.974081][ T382] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 103.081896][ T1818] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 103.103459][ T312] usb 3-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 103.124072][ T312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.137401][ T312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=94b4, bcdDevice= 0.5e [ 103.156470][ T1827] TCP: TCP_TX_DELAY enabled [ 103.159063][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.164078][ T1827] FAULT_INJECTION: forcing a failure. [ 103.164078][ T1827] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.174014][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 103.182455][ T1827] CPU: 1 PID: 1827 Comm: syz.3.419 Not tainted syzkaller #0 [ 103.195126][ T312] usb 3-1: config 0 descriptor?? [ 103.198055][ T1827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.213035][ T1827] Call Trace: [ 103.216320][ T1827] [ 103.219263][ T1827] __dump_stack+0x21/0x24 [ 103.224058][ T1827] dump_stack_lvl+0x110/0x170 [ 103.228749][ T1827] ? __cfi_dump_stack_lvl+0x8/0x8 [ 103.233787][ T1827] dump_stack+0x15/0x24 [ 103.237951][ T1827] should_fail_ex+0x3bf/0x510 [ 103.242641][ T1827] should_fail+0xb/0x10 [ 103.246806][ T1827] should_fail_usercopy+0x1a/0x20 [ 103.251839][ T1827] _copy_to_user+0x1e/0x90 [ 103.256271][ T1827] simple_read_from_buffer+0xe9/0x160 [ 103.261660][ T1827] proc_fail_nth_read+0x1a6/0x220 [ 103.266682][ T1827] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.272238][ T1827] ? security_file_permission+0x94/0xb0 [ 103.277803][ T1827] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.283347][ T1827] vfs_read+0x286/0x930 [ 103.287510][ T1827] ? __cfi_vfs_read+0x10/0x10 [ 103.292199][ T1827] ? __kasan_check_write+0x14/0x20 [ 103.297323][ T1827] ? mutex_lock+0x93/0x1b0 [ 103.301755][ T1827] ? __cfi_mutex_lock+0x10/0x10 [ 103.306627][ T1827] ? __fdget_pos+0x2cd/0x380 [ 103.311223][ T1827] ? ksys_read+0x70/0x260 [ 103.315555][ T1827] ksys_read+0x14a/0x260 [ 103.319796][ T1827] ? __cfi_ksys_read+0x10/0x10 [ 103.324557][ T1827] ? fpregs_restore_userregs+0x128/0x260 [ 103.330198][ T1827] __x64_sys_read+0x7b/0x90 [ 103.334715][ T1827] x64_sys_call+0x2f/0x9a0 [ 103.339145][ T1827] do_syscall_64+0x4c/0xa0 [ 103.343578][ T1827] ? clear_bhb_loop+0x30/0x80 [ 103.348261][ T1827] ? clear_bhb_loop+0x30/0x80 [ 103.352959][ T1827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.358876][ T1827] RIP: 0033:0x7f7b64b6034e [ 103.363314][ T1827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.382928][ T1827] RSP: 002b:00007f7b659dafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.391838][ T1827] RAX: ffffffffffffffda RBX: 00007f7b659db6c0 RCX: 00007f7b64b6034e [ 103.399840][ T1827] RDX: 000000000000000f RSI: 00007f7b659db0a0 RDI: 0000000000000004 [ 103.407833][ T1827] RBP: 00007f7b659db090 R08: 0000000000000000 R09: 0000000000000000 [ 103.415837][ T1827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.423808][ T1827] R13: 00007f7b64e26038 R14: 00007f7b64e25fa0 R15: 00007ffdfeb57c48 [ 103.431789][ T1827] [ 104.456077][ T1839] sched: RT throttling activated [ 104.468683][ T1845] netlink: 260 bytes leftover after parsing attributes in process `syz.3.423'. [ 104.753587][ T1847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 104.776783][ T312] usbhid 3-1:0.0: can't add hid device: -71 [ 104.782793][ T312] usbhid: probe of 3-1:0.0 failed with error -71 [ 104.790934][ T290] EXT4-fs (loop2): unmounting filesystem. [ 104.800473][ T312] usb 3-1: USB disconnect, device number 7 [ 104.829865][ T1855] loop2: detected capacity change from 0 to 256 [ 104.838437][ T1856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 104.852332][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.897938][ T1852] loop3: detected capacity change from 0 to 256 [ 104.910382][ T1855] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 104.913742][ T1847] loop4: detected capacity change from 0 to 40427 [ 104.938458][ T1847] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 104.946036][ T1847] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 104.959409][ T1852] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 104.972557][ T1847] F2FS-fs (loop4): invalid crc value [ 104.989210][ T1847] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.058091][ T1847] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 105.072398][ T1847] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.330649][ T1856] loop1: detected capacity change from 0 to 40427 [ 105.361470][ T1856] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 105.374488][ T1856] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 105.390994][ T1856] F2FS-fs (loop1): invalid crc value [ 105.405179][ T1856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.412945][ T633] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.602403][ T633] usb 1-1: Using ep0 maxpacket: 32 [ 105.609425][ T633] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.632405][ T633] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.641043][ T633] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 105.654057][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 105.654073][ T29] audit: type=1400 audit(1793822025.856:358): avc: denied { bind } for pid=1873 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.676109][ T633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.690803][ T1856] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 105.697748][ T633] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 105.702297][ T1856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.709567][ T633] usb 1-1: New USB device found, idVendor=00f0, idProduct=9d0a, bcdDevice= 0.5e [ 105.722622][ T29] audit: type=1400 audit(1793822025.896:359): avc: denied { setopt } for pid=1873 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.741983][ T633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.754261][ T29] audit: type=1400 audit(1794346313.950:360): avc: denied { write } for pid=1879 comm="syz.2.434" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.764191][ T633] usb 1-1: config 0 descriptor?? [ 105.782656][ T29] audit: type=1400 audit(1794346313.960:361): avc: denied { ioctl } for pid=1879 comm="syz.2.434" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.880272][ T1880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 106.030367][ T362] usb 1-1: USB disconnect, device number 7 [ 106.042373][ T312] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.202370][ T312] usb 4-1: device descriptor read/64, error -71 [ 107.168808][ T1895] netlink: 260 bytes leftover after parsing attributes in process `syz.4.436'. [ 107.345355][ T1905] loop1: detected capacity change from 0 to 256 [ 107.376739][ T1905] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 107.435279][ T29] audit: type=1400 audit(1794346315.630:362): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 107.436539][ T1908] loop1: detected capacity change from 0 to 512 [ 107.470986][ T1908] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.700944][ T312] usb 4-1: device descriptor read/64, error -71 [ 107.720934][ T1915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 107.730955][ T1908] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.440: invalid indirect mapped block 32768 (level 2) [ 107.746777][ T1908] EXT4-fs (loop1): 1 orphan inode deleted [ 107.756924][ T1908] EXT4-fs (loop1): 1 truncate cleaned up [ 107.766979][ T1908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.834235][ T289] EXT4-fs (loop1): unmounting filesystem. [ 107.903722][ T1914] loop0: detected capacity change from 0 to 40427 [ 107.920502][ T1914] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 107.928402][ T1914] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 108.034451][ T312] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.050244][ T1914] F2FS-fs (loop0): invalid crc value [ 108.079163][ T1914] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.182126][ T1914] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 108.189707][ T1914] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.322320][ T312] usb 4-1: device descriptor read/64, error -71 [ 109.760777][ T1944] netlink: 260 bytes leftover after parsing attributes in process `syz.3.449'. [ 110.002877][ T1963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 111.037018][ T1975] loop2: detected capacity change from 0 to 7 [ 111.058057][ T29] audit: type=1400 audit(1794346319.250:363): avc: denied { name_bind } for pid=1976 comm="syz.0.461" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 111.200225][ T29] audit: type=1326 audit(1794346319.390:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.320607][ T29] audit: type=1326 audit(1794346319.440:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.355009][ T29] audit: type=1326 audit(1794346319.440:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.359495][ T1961] loop3: detected capacity change from 0 to 40427 [ 111.379828][ T29] audit: type=1326 audit(1794346319.440:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.387147][ T1961] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 111.410866][ T29] audit: type=1326 audit(1794346319.440:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.419385][ T1961] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 111.451452][ T29] audit: type=1326 audit(1794346319.450:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.476419][ T29] audit: type=1326 audit(1794346319.450:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.476459][ T1961] F2FS-fs (loop3): invalid crc value [ 111.502453][ T1961] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.506525][ T29] audit: type=1326 audit(1794346319.450:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.539841][ T29] audit: type=1326 audit(1794346319.450:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1976 comm="syz.0.461" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 111.591455][ T1961] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 111.598695][ T1961] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.680076][ T1996] fuse: Unknown parameter 'use00000000000000000000' [ 112.914411][ T2011] fuse: Unknown parameter 'use00000000000000000000' [ 112.932393][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 113.008116][ T2010] netlink: 260 bytes leftover after parsing attributes in process `syz.4.467'. [ 114.086094][ T2024] loop4: detected capacity change from 0 to 512 [ 114.189616][ T2024] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 114.373329][ T2024] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.473: corrupted inode contents [ 114.582980][ T2024] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #16: comm syz.4.473: mark_inode_dirty error [ 114.643926][ T2040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 114.713554][ T2024] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.473: corrupted inode contents [ 114.900941][ T2024] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.473: mark_inode_dirty error [ 115.230829][ T2024] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.473: corrupted inode contents [ 115.274906][ T2024] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.473: mark_inode_dirty error [ 115.305315][ T2024] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.473: corrupted inode contents [ 115.328837][ T2024] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 115.357831][ T2024] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.473: corrupted inode contents [ 115.512318][ T2024] EXT4-fs error (device loop4): ext4_truncate:4327: inode #16: comm syz.4.473: mark_inode_dirty error [ 115.584226][ T2024] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 115.614111][ T2024] EXT4-fs (loop4): 1 truncate cleaned up [ 115.619828][ T2024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.631932][ T2024] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.643391][ T38] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 1 [ 115.666882][ T2024] EXT4-fs (loop4): unmounting filesystem. [ 115.694295][ T2039] loop3: detected capacity change from 0 to 40427 [ 115.707251][ T2039] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 115.715017][ T2039] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 115.733608][ T2039] F2FS-fs (loop3): invalid crc value [ 115.834064][ T2039] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.976925][ T2039] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 116.992265][ T2039] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.934473][ T2076] netlink: 260 bytes leftover after parsing attributes in process `syz.0.484'. [ 121.499162][ T2149] fuse: Unknown parameter '0x0000000000000008' [ 121.582822][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 121.590045][ T29] audit: type=1326 audit(1794346329.710:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.504" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b64b9fb19 code=0x7ffc0000 [ 121.652473][ T29] audit: type=1326 audit(1794346329.710:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.504" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f7b64b9fb19 code=0x7ffc0000 [ 121.719131][ T29] audit: type=1326 audit(1794346329.710:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.504" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b64b9fb19 code=0x7ffc0000 [ 121.886677][ T29] audit: type=1326 audit(1794346329.710:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.504" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b64b9fb19 code=0x7ffc0000 [ 121.972032][ T29] audit: type=1326 audit(1794346329.710:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.504" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b64b9fb19 code=0x7ffc0000 [ 122.000803][ T29] audit: type=1326 audit(1794346329.710:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.504" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b64b9fb19 code=0x7ffc0000 [ 122.027340][ T29] audit: type=1326 audit(1794346329.710:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.504" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b64b9fb19 code=0x7ffc0000 [ 122.542635][ T29] audit: type=1326 audit(1794346329.710:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.504" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b64b9fb19 code=0x7ffc0000 [ 122.612478][ T2158] loop4: detected capacity change from 0 to 512 [ 122.950057][ T2158] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 123.100553][ T2158] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.509: corrupted inode contents [ 123.301361][ T2158] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #16: comm syz.4.509: mark_inode_dirty error [ 123.740862][ T2158] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.509: corrupted inode contents [ 123.769510][ T2158] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.509: mark_inode_dirty error [ 123.782496][ T2158] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.509: corrupted inode contents [ 123.808543][ T2158] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.509: mark_inode_dirty error [ 124.090309][ T2158] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.509: corrupted inode contents [ 124.102521][ T2158] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 124.111351][ T2158] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.509: corrupted inode contents [ 124.123737][ T2158] EXT4-fs error (device loop4): ext4_truncate:4327: inode #16: comm syz.4.509: mark_inode_dirty error [ 124.135148][ T2158] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 124.144601][ T2158] EXT4-fs (loop4): 1 truncate cleaned up [ 124.150344][ T2158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.160768][ T2158] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.387033][ T382] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.420680][ T382] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 124.439517][ T294] EXT4-fs (loop4): unmounting filesystem. [ 125.102897][ T2193] loop2: detected capacity change from 0 to 512 [ 125.109936][ T2193] overlayfs: failed to get inode (-116) [ 125.116066][ T2193] overlayfs: failed to get inode (-116) [ 125.121873][ T2193] overlayfs: failed to get inode (-116) [ 125.996108][ T2203] fuse: Unknown parameter '0x0000000000000008' [ 126.153479][ T29] audit: type=1326 audit(1794346334.200:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.0.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907879fb19 code=0x7ffc0000 [ 126.181587][ T318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.614338][ T1901] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.293352][ T1901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.321775][ T1901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.344038][ T1901] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 127.379444][ T1901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.413182][ T1901] usb 4-1: config 0 descriptor?? [ 127.438193][ T2232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 127.789765][ T2235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 128.901770][ T2247] loop0: detected capacity change from 0 to 512 [ 128.908649][ T2247] overlayfs: failed to get inode (-116) [ 128.914613][ T2247] overlayfs: failed to get inode (-116) [ 128.920345][ T2247] overlayfs: failed to get inode (-116) [ 128.932547][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.061869][ T2245] netlink: 260 bytes leftover after parsing attributes in process `syz.1.529'. [ 129.402324][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 129.402340][ T29] audit: type=1400 audit(1794346337.570:454): avc: denied { create } for pid=2250 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.505971][ T29] audit: type=1400 audit(1794346337.700:455): avc: denied { write } for pid=2262 comm="syz.2.538" name="filter" dev="tracefs" ino=2480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 129.707056][ T2243] loop4: detected capacity change from 0 to 40427 [ 129.719198][ T2243] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 129.746660][ T2269] process 'syz.1.541' launched './file0' with NULL argv: empty string added [ 129.772207][ T29] audit: type=1400 audit(1794346337.960:456): avc: denied { bind } for pid=2270 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.783960][ T2243] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 129.801151][ T29] audit: type=1400 audit(1794346337.990:457): avc: denied { execute } for pid=2268 comm="syz.1.541" name="file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.801185][ T2243] F2FS-fs (loop4): invalid crc value [ 129.830886][ T29] audit: type=1400 audit(1794346337.990:458): avc: denied { execute_no_trans } for pid=2268 comm="syz.1.541" path="/115/file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.856132][ T29] audit: type=1400 audit(1794346337.990:459): avc: denied { connect } for pid=2270 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.879839][ T2243] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 129.914792][ T29] audit: type=1400 audit(1794346338.000:460): avc: denied { write } for pid=2270 comm="syz.0.542" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.007501][ T29] audit: type=1400 audit(1794346338.000:461): avc: denied { open } for pid=2270 comm="syz.0.542" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.020614][ T2243] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 130.038723][ T29] audit: type=1400 audit(1794346338.000:462): avc: denied { ioctl } for pid=2270 comm="syz.0.542" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.047262][ T2243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 130.076728][ T29] audit: type=1400 audit(1794346338.100:463): avc: denied { write } for pid=2266 comm="syz.2.540" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 130.160695][ T2272] f2fs_ckpt-7:4: attempt to access beyond end of device [ 130.160695][ T2272] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.789037][ T1901] usbhid 4-1:0.0: can't add hid device: -71 [ 130.795207][ T1901] usbhid: probe of 4-1:0.0 failed with error -71 [ 130.804168][ T1901] usb 4-1: USB disconnect, device number 10 [ 130.821776][ T2300] loop3: detected capacity change from 0 to 512 [ 130.843771][ T2306] loop2: detected capacity change from 0 to 2048 [ 130.850966][ T2300] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.858173][ T2300] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.874796][ T2300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.886564][ T2306] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.899744][ T2306] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.912989][ T2300] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 130.929615][ T290] EXT4-fs (loop2): unmounting filesystem. [ 130.936068][ T2300] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.552: invalid indirect mapped block 2683928664 (level 1) [ 130.944550][ T2313] loop4: detected capacity change from 0 to 512 [ 130.956582][ T2300] EXT4-fs (loop3): Remounting filesystem read-only [ 130.963554][ T2300] EXT4-fs (loop3): 1 truncate cleaned up [ 130.969570][ T2300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.986924][ T2313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.006338][ T295] EXT4-fs (loop3): unmounting filesystem. [ 131.008736][ T2318] FAULT_INJECTION: forcing a failure. [ 131.008736][ T2318] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 131.041713][ T2318] CPU: 0 PID: 2318 Comm: syz.1.558 Not tainted syzkaller #0 [ 131.049039][ T2318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.059116][ T2318] Call Trace: [ 131.062401][ T2318] [ 131.065338][ T2318] __dump_stack+0x21/0x24 [ 131.069695][ T2318] dump_stack_lvl+0x110/0x170 [ 131.074392][ T2318] ? __cfi_dump_stack_lvl+0x8/0x8 [ 131.079431][ T2318] ? __alloc_pages+0x1fa/0x610 [ 131.084219][ T2318] dump_stack+0x15/0x24 [ 131.088389][ T2318] should_fail_ex+0x3bf/0x510 [ 131.093085][ T2318] should_fail_alloc_page+0x61/0x90 [ 131.093697][ T2329] ip_tables: iptables: counters copy to user failed while replacing table [ 131.098302][ T2318] prepare_alloc_pages+0x131/0x570 [ 131.112028][ T2318] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 131.117244][ T2318] ? __vmalloc_node_range+0x1398/0x1440 [ 131.122783][ T2318] __alloc_pages+0x15b/0x610 [ 131.127372][ T2318] ? __cfi___alloc_pages+0x10/0x10 [ 131.132473][ T2318] ? __cfi___wake_up+0x10/0x10 [ 131.137230][ T2318] ? rwsem_write_trylock+0x136/0x300 [ 131.142507][ T2318] ? serial8250_do_pm+0x3d0/0x4d0 [ 131.147538][ T2318] get_zeroed_page+0x19/0x40 [ 131.152125][ T2318] uart_startup+0x1e0/0xb90 [ 131.156626][ T2318] ? mutex_lock+0x93/0x1b0 [ 131.161039][ T2318] uart_port_activate+0x8c/0xf0 [ 131.165883][ T2318] tty_port_open+0x1e6/0x2a0 [ 131.170460][ T2318] uart_open+0x47/0x60 [ 131.174531][ T2318] tty_open+0x5ce/0x1040 [ 131.178764][ T2318] ? __cfi_tty_open+0x10/0x10 [ 131.183427][ T2318] chrdev_open+0x593/0x600 [ 131.187830][ T2318] ? __cfi_chrdev_open+0x10/0x10 [ 131.192755][ T2318] ? fsnotify_perm+0x3e9/0x5b0 [ 131.197515][ T2318] do_dentry_open+0x885/0x11f0 [ 131.202282][ T2318] ? __cfi_chrdev_open+0x10/0x10 [ 131.207217][ T2318] vfs_open+0x73/0x80 [ 131.211276][ T2318] path_openat+0x2699/0x2f30 [ 131.215856][ T2318] ? slab_post_alloc_hook+0x4f/0x2d0 [ 131.221133][ T2318] ? kmem_cache_alloc+0x166/0x320 [ 131.226151][ T2318] ? getname_flags+0xba/0x510 [ 131.230815][ T2318] ? do_sys_openat2+0xeb/0x820 [ 131.235572][ T2318] ? do_filp_open+0x420/0x420 [ 131.240237][ T2318] do_filp_open+0x1ee/0x420 [ 131.244903][ T2318] ? __cfi_do_filp_open+0x10/0x10 [ 131.250024][ T2318] ? alloc_fd+0x4c1/0x570 [ 131.254345][ T2318] do_sys_openat2+0x15e/0x820 [ 131.259102][ T2318] ? __se_sys_futex+0x136/0x310 [ 131.263947][ T2318] ? do_sys_open+0xe0/0xe0 [ 131.268366][ T2318] ? __this_cpu_preempt_check+0x13/0x20 [ 131.273899][ T2318] ? xfd_validate_state+0x70/0x150 [ 131.279001][ T2318] __x64_sys_openat+0x136/0x160 [ 131.283845][ T2318] x64_sys_call+0x783/0x9a0 [ 131.288337][ T2318] do_syscall_64+0x4c/0xa0 [ 131.292740][ T2318] ? clear_bhb_loop+0x30/0x80 [ 131.297404][ T2318] ? clear_bhb_loop+0x30/0x80 [ 131.302080][ T2318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.307990][ T2318] RIP: 0033:0x7fd7d8d9fb19 [ 131.312412][ T2318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.332007][ T2318] RSP: 002b:00007fd7d9c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.340412][ T2318] RAX: ffffffffffffffda RBX: 00007fd7d9025fa0 RCX: 00007fd7d8d9fb19 [ 131.348374][ T2318] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 131.356330][ T2318] RBP: 00007fd7d8e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 131.364292][ T2318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.372263][ T2318] R13: 00007fd7d9026038 R14: 00007fd7d9025fa0 R15: 00007ffd53d6ff18 [ 131.380232][ T2318] [ 131.438700][ T2313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.447771][ T2334] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 131.447920][ T2313] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.466332][ T2334] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 131.500853][ T2340] FAULT_INJECTION: forcing a failure. [ 131.500853][ T2340] name failslab, interval 1, probability 0, space 0, times 1 [ 131.513689][ T2340] CPU: 0 PID: 2340 Comm: syz.0.568 Not tainted syzkaller #0 [ 131.520991][ T2340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.531055][ T2340] Call Trace: [ 131.534326][ T2340] [ 131.537245][ T2340] __dump_stack+0x21/0x24 [ 131.541577][ T2340] dump_stack_lvl+0x110/0x170 [ 131.546238][ T2340] ? __cfi_dump_stack_lvl+0x8/0x8 [ 131.551253][ T2340] dump_stack+0x15/0x24 [ 131.555398][ T2340] should_fail_ex+0x3bf/0x510 [ 131.560064][ T2340] __should_failslab+0xac/0xf0 [ 131.564829][ T2340] should_failslab+0x9/0x20 [ 131.569319][ T2340] __kmem_cache_alloc_node+0x3d/0x2d0 [ 131.574684][ T2340] ? ovl_fill_super+0x1772/0x4790 [ 131.579702][ T2340] ? kasan_save_alloc_info+0x1f/0x30 [ 131.584990][ T2340] ? ovl_fill_super+0x1772/0x4790 [ 131.590006][ T2340] __kmalloc+0xa4/0x1e0 [ 131.594150][ T2340] ovl_fill_super+0x1772/0x4790 [ 131.598994][ T2340] ? xas_store+0xb65/0x17d0 [ 131.603491][ T2340] ? __cfi_ovl_fill_super+0x10/0x10 [ 131.609818][ T2340] ? rwsem_write_trylock+0x136/0x300 [ 131.615121][ T2340] ? __cfi_ida_alloc_range+0x10/0x10 [ 131.620417][ T2340] ? clear_nonspinnable+0x60/0x60 [ 131.625441][ T2340] ? up_write+0x7b/0x290 [ 131.629693][ T2340] ? __cfi_set_anon_super+0x10/0x10 [ 131.634936][ T2340] ? __cfi_ovl_fill_super+0x10/0x10 [ 131.640128][ T2340] mount_nodev+0x6a/0x100 [ 131.644453][ T2340] ovl_mount+0x2c/0x40 [ 131.648546][ T2340] legacy_get_tree+0xfe/0x1a0 [ 131.653568][ T2340] ? __cfi_ovl_mount+0x10/0x10 [ 131.658667][ T2340] vfs_get_tree+0x9a/0x270 [ 131.663077][ T2340] do_new_mount+0x251/0xb40 [ 131.667574][ T2340] ? security_capable+0x99/0xc0 [ 131.672425][ T2340] path_mount+0x640/0xfd0 [ 131.676755][ T2340] __se_sys_mount+0x320/0x390 [ 131.681422][ T2340] ? __this_cpu_preempt_check+0x13/0x20 [ 131.686965][ T2340] ? __x64_sys_mount+0xd0/0xd0 [ 131.691712][ T2340] ? __kasan_check_write+0x14/0x20 [ 131.696810][ T2340] ? fpregs_restore_userregs+0x128/0x260 [ 131.702443][ T2340] __x64_sys_mount+0xbf/0xd0 [ 131.707024][ T2340] x64_sys_call+0x65d/0x9a0 [ 131.711529][ T2340] do_syscall_64+0x4c/0xa0 [ 131.715928][ T2340] ? clear_bhb_loop+0x30/0x80 [ 131.720594][ T2340] ? clear_bhb_loop+0x30/0x80 [ 131.725264][ T2340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.731154][ T2340] RIP: 0033:0x7f907879fb19 [ 131.735574][ T2340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.755175][ T2340] RSP: 002b:00007f907968e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.763587][ T2340] RAX: ffffffffffffffda RBX: 00007f9078a25fa0 RCX: 00007f907879fb19 [ 131.771553][ T2340] RDX: 00002000000047c0 RSI: 0000200000004780 RDI: 0000000000000000 [ 131.779536][ T2340] RBP: 00007f9078837b70 R08: 0000200000004800 R09: 0000000000000000 [ 131.787497][ T2340] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 131.795559][ T2340] R13: 00007f9078a26038 R14: 00007f9078a25fa0 R15: 00007ffc244bf708 [ 131.803536][ T2340] [ 131.809208][ T2341] loop3: detected capacity change from 0 to 512 [ 132.269308][ T294] EXT4-fs (loop4): unmounting filesystem. [ 132.284948][ T2341] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.320516][ T2341] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.560: inode has both inline data and extents flags [ 132.334831][ T2341] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.560: couldn't read orphan inode 15 (err -117) [ 132.347881][ T2341] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.396191][ T2355] loop2: detected capacity change from 0 to 512 [ 132.403293][ T2355] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.436797][ T2355] EXT4-fs (loop2): 1 truncate cleaned up [ 132.437386][ T2359] loop4: detected capacity change from 0 to 128 [ 132.443438][ T2355] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.463917][ T2355] futex_wake_op: syz.2.572 tries to shift op by 144; fix this program [ 132.488002][ T295] EXT4-fs (loop3): unmounting filesystem. [ 132.495452][ T290] EXT4-fs (loop2): unmounting filesystem. [ 132.502250][ T318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.856708][ T2372] loop2: detected capacity change from 0 to 40427 [ 132.882793][ T2372] F2FS-fs (loop2): invalid crc value [ 132.906363][ T2372] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.974832][ T2372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 132.990160][ T2375] loop3: detected capacity change from 0 to 40427 [ 133.014587][ T2375] F2FS-fs (loop3): invalid crc value [ 133.039014][ T2375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.119615][ T2375] F2FS-fs (loop3): Start checkpoint disabled! [ 133.133469][ T2375] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 133.153247][ T2375] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 133.320543][ T382] kworker/u4:7: attempt to access beyond end of device [ 133.320543][ T382] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 133.347365][ T2375] VFS:Filesystem freeze failed [ 133.376114][ T2395] FAULT_INJECTION: forcing a failure. [ 133.376114][ T2395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.421799][ T2395] CPU: 1 PID: 2395 Comm: syz.0.586 Not tainted syzkaller #0 [ 133.429235][ T2395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.439302][ T2395] Call Trace: [ 133.442600][ T2395] [ 133.445628][ T2395] __dump_stack+0x21/0x24 [ 133.449984][ T2395] dump_stack_lvl+0x110/0x170 [ 133.454777][ T2395] ? __cfi_dump_stack_lvl+0x8/0x8 [ 133.459826][ T2395] dump_stack+0x15/0x24 [ 133.464085][ T2395] should_fail_ex+0x3bf/0x510 [ 133.468789][ T2395] should_fail+0xb/0x10 [ 133.473060][ T2395] should_fail_usercopy+0x1a/0x20 [ 133.478110][ T2395] strncpy_from_user+0x24/0x2c0 [ 133.483025][ T2395] ? kmem_cache_alloc+0x166/0x320 [ 133.488087][ T2395] ? getname_flags+0xba/0x510 [ 133.491403][ T2385] F2FS-fs (loop1): invalid crc value [ 133.493060][ T2395] getname_flags+0xf5/0x510 [ 133.502869][ T2395] getname+0x19/0x20 [ 133.506866][ T2395] do_sys_openat2+0xeb/0x820 [ 133.511533][ T2395] ? __se_sys_futex+0x136/0x310 [ 133.516428][ T2395] ? do_sys_open+0xe0/0xe0 [ 133.520865][ T2395] ? __this_cpu_preempt_check+0x13/0x20 [ 133.526619][ T2395] ? xfd_validate_state+0x70/0x150 [ 133.531752][ T2395] __x64_sys_openat+0x136/0x160 [ 133.536747][ T2395] x64_sys_call+0x783/0x9a0 [ 133.541645][ T2395] do_syscall_64+0x4c/0xa0 [ 133.546107][ T2395] ? clear_bhb_loop+0x30/0x80 [ 133.550810][ T2395] ? clear_bhb_loop+0x30/0x80 [ 133.555515][ T2395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.561577][ T2395] RIP: 0033:0x7f907876034e [ 133.566276][ T2395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.586267][ T2395] RSP: 002b:00007f907968dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.594805][ T2395] RAX: ffffffffffffffda RBX: 00007f907968e6c0 RCX: 00007f907876034e [ 133.602905][ T2395] RDX: 0000000000000002 RSI: 00007f907968df90 RDI: ffffffffffffff9c [ 133.610999][ T2395] RBP: 00007f9078837b70 R08: 0000000000000000 R09: 0000000000000000 [ 133.613827][ T2386] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 133.619366][ T2395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.619388][ T2395] R13: 00007f9078a26038 R14: 00007f9078a25fa0 R15: 00007ffc244bf708 [ 133.619405][ T2395] [ 133.650941][ T2386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 133.661476][ T2385] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.679760][ T2386] F2FS-fs (loop2): invalid crc value [ 133.707715][ T2386] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.744400][ T2385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.767385][ T2386] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 133.784719][ T2386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.906551][ T1501] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 134.155909][ T2386] syz.2.579: attempt to access beyond end of device [ 134.155909][ T2386] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.172488][ T2386] syz.2.579: attempt to access beyond end of device [ 134.172488][ T2386] loop2: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 134.188390][ T2386] syz.2.579: attempt to access beyond end of device [ 134.188390][ T2386] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 134.321723][ T1501] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 134.330439][ T1501] usb 4-1: config 0 has no interface number 0 [ 134.336651][ T1501] usb 4-1: config 0 interface 41 has no altsetting 0 [ 134.345364][ T1501] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 134.355077][ T1501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.363375][ T1501] usb 4-1: Product: syz [ 134.367750][ T1501] usb 4-1: Manufacturer: syz [ 134.375991][ T1501] usb 4-1: SerialNumber: syz [ 134.384145][ T1501] usb 4-1: config 0 descriptor?? [ 134.618270][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 134.618287][ T29] audit: type=1400 audit(1794346342.841:482): avc: denied { write } for pid=2432 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 134.719100][ T2438] ./dev/sda1: Can't open blockdev [ 135.458504][ T29] audit: type=1400 audit(1794346343.566:483): avc: denied { write } for pid=2448 comm="syz.0.602" path="socket:[177990]" dev="sockfs" ino=177990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.676743][ T2457] set_capacity_and_notify: 2 callbacks suppressed [ 135.676780][ T2457] loop2: detected capacity change from 0 to 1024 [ 135.710819][ T1501] CoreChips: probe of 4-1:0.41 failed with error -71 [ 135.717843][ T29] audit: type=1400 audit(1794346343.927:484): avc: denied { read write } for pid=2463 comm="syz.1.607" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.723131][ T1501] usb 4-1: USB disconnect, device number 11 [ 135.751066][ T2464] random: crng reseeded on system resumption [ 135.760946][ T2457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.890887][ T29] audit: type=1400 audit(1794346343.956:485): avc: denied { ioctl open } for pid=2463 comm="syz.1.607" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.929008][ T290] EXT4-fs (loop2): unmounting filesystem. [ 136.019701][ T2474] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 136.104564][ T29] audit: type=1400 audit(1794346344.294:486): avc: denied { ioctl } for pid=2481 comm="syz.0.613" path="socket:[178030]" dev="sockfs" ino=178030 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.146314][ T29] audit: type=1326 audit(1794346344.333:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.1.611" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d8d9fb19 code=0x7fc00000 [ 136.254156][ T2492] FAULT_INJECTION: forcing a failure. [ 136.254156][ T2492] name failslab, interval 1, probability 0, space 0, times 0 [ 136.259586][ T29] audit: type=1400 audit(1794346344.439:488): avc: denied { getopt } for pid=2489 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.266888][ T2492] CPU: 0 PID: 2492 Comm: syz.3.617 Not tainted syzkaller #0 [ 136.293861][ T2492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.303942][ T2492] Call Trace: [ 136.307254][ T2492] [ 136.310181][ T2492] __dump_stack+0x21/0x24 [ 136.314509][ T2492] dump_stack_lvl+0x110/0x170 [ 136.319195][ T2492] ? __cfi_dump_stack_lvl+0x8/0x8 [ 136.324399][ T2492] dump_stack+0x15/0x24 [ 136.328569][ T2492] should_fail_ex+0x3bf/0x510 [ 136.333236][ T2492] __should_failslab+0xac/0xf0 [ 136.337994][ T2492] should_failslab+0x9/0x20 [ 136.342485][ T2492] __kmem_cache_alloc_node+0x3d/0x2d0 [ 136.347854][ T2492] ? key_alloc+0x318/0xf00 [ 136.352268][ T2492] ? slab_post_alloc_hook+0x6d/0x2d0 [ 136.357549][ T2492] ? key_alloc+0x318/0xf00 [ 136.361969][ T2492] __kmalloc_node_track_caller+0xa1/0x1e0 [ 136.367768][ T2492] ? key_alloc+0x2d3/0xf00 [ 136.372188][ T2492] kmemdup+0x2b/0x60 [ 136.376274][ T2492] key_alloc+0x318/0xf00 [ 136.380550][ T2492] keyring_alloc+0x47/0xb0 [ 136.384997][ T2492] look_up_user_keyrings+0x419/0x630 [ 136.390278][ T2492] ? __cfi_look_up_user_keyrings+0x10/0x10 [ 136.396079][ T2492] ? _get_random_bytes+0x1e4/0x250 [ 136.401197][ T2492] call_sbin_request_key+0x218/0xbe0 [ 136.406479][ T2492] ? request_key_auth_free_preparse+0x9/0x10 [ 136.412624][ T2492] ? _raw_spin_lock+0x94/0xf0 [ 136.417291][ T2492] ? __cfi_call_sbin_request_key+0x10/0x10 [ 136.423176][ T2492] ? __kasan_check_write+0x14/0x20 [ 136.428288][ T2492] ? __cfi_request_key_auth_new+0x10/0x10 [ 136.434004][ T2492] ? mutex_unlock+0x8f/0x230 [ 136.438655][ T2492] ? refcount_dec_and_lock+0x25/0xa0 [ 136.443955][ T2492] request_key_and_link+0xb1e/0x1180 [ 136.449243][ T2492] ? key_task_permission+0x36d/0x4a0 [ 136.454548][ T2492] ? __cfi_request_key_and_link+0x10/0x10 [ 136.460277][ T2492] ? downgrade_write+0x370/0x370 [ 136.465208][ T2492] ? __cfi_key_default_cmp+0x10/0x10 [ 136.470508][ T2492] ? __cfi_keyring_search_iterator+0x10/0x10 [ 136.476479][ T2492] ? __kasan_check_write+0x14/0x20 [ 136.481584][ T2492] __se_sys_request_key+0x293/0x350 [ 136.486828][ T2492] ? __x64_sys_request_key+0xb0/0xb0 [ 136.492125][ T2492] ? fpregs_restore_userregs+0x128/0x260 [ 136.497752][ T2492] __x64_sys_request_key+0x9b/0xb0 [ 136.502855][ T2492] x64_sys_call+0x69c/0x9a0 [ 136.507351][ T2492] do_syscall_64+0x4c/0xa0 [ 136.511753][ T2492] ? clear_bhb_loop+0x30/0x80 [ 136.516454][ T2492] ? clear_bhb_loop+0x30/0x80 [ 136.521132][ T2492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.527057][ T2492] RIP: 0033:0x7f7b64b9fb19 [ 136.531461][ T2492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.551073][ T2492] RSP: 002b:00007f7b659db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 136.559493][ T2492] RAX: ffffffffffffffda RBX: 00007f7b64e25fa0 RCX: 00007f7b64b9fb19 [ 136.567463][ T2492] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 0000200000000100 [ 136.575432][ T2492] RBP: 00007f7b64c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 136.583394][ T2492] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 136.591355][ T2492] R13: 00007f7b64e26038 R14: 00007f7b64e25fa0 R15: 00007ffdfeb57c48 [ 136.599322][ T2492] [ 136.603114][ T312] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.621447][ T29] audit: type=1400 audit(1794346344.795:489): avc: denied { search } for pid=2494 comm="syz.4.618" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 136.648831][ T29] audit: type=1400 audit(1794346344.824:490): avc: denied { ioctl } for pid=2496 comm="syz.3.619" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.041849][ T29] audit: type=1326 audit(1794346345.064:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.1.611" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd7d8d9fb19 code=0x7fc00000 [ 137.159256][ T2499] Bluetooth: ISO socket layer initialized [ 137.171788][ T312] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 137.178347][ T2511] loop0: detected capacity change from 0 to 512 [ 137.189263][ T312] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.200689][ T312] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 0.00 [ 137.202037][ T2511] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 137.219698][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.232017][ T2470] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.232618][ T2511] EXT4-fs (loop0): orphan cleanup on readonly fs [ 137.247704][ T2511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.624: bg 0: block 16: invalid block bitmap [ 137.264855][ T2511] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 137.274132][ T2511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.624: invalid indirect mapped block 5 (level 0) [ 137.287793][ T2511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.624: invalid indirect mapped block 4294967295 (level 1) [ 137.302248][ T2511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.624: invalid indirect mapped block 4294967295 (level 2) [ 137.316963][ T2511] EXT4-fs (loop0): 1 truncate cleaned up [ 137.323284][ T2511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.333842][ T2511] EXT4-fs (loop0): unmounting filesystem. [ 137.478514][ T362] usb 3-1: USB disconnect, device number 8 [ 137.978425][ T2522] FAULT_INJECTION: forcing a failure. [ 137.978425][ T2522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.003428][ T2522] CPU: 0 PID: 2522 Comm: syz.4.629 Not tainted syzkaller #0 [ 138.010772][ T2522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.020839][ T2522] Call Trace: [ 138.024126][ T2522] [ 138.027063][ T2522] __dump_stack+0x21/0x24 [ 138.031404][ T2522] dump_stack_lvl+0x110/0x170 [ 138.036086][ T2522] ? __cfi_dump_stack_lvl+0x8/0x8 [ 138.041116][ T2522] ? migrate_enable+0x1af/0x2a0 [ 138.045980][ T2522] dump_stack+0x15/0x24 [ 138.050153][ T2522] should_fail_ex+0x3bf/0x510 [ 138.054850][ T2522] should_fail+0xb/0x10 [ 138.059018][ T2522] should_fail_usercopy+0x1a/0x20 [ 138.064064][ T2522] _copy_from_user+0x1e/0xc0 [ 138.068665][ T2522] generic_map_update_batch+0x4b6/0x780 [ 138.074237][ T2522] ? __cfi_generic_map_update_batch+0x10/0x10 [ 138.080602][ T2522] ? __cfi_generic_map_update_batch+0x10/0x10 [ 138.086711][ T2522] bpf_map_do_batch+0x498/0x610 [ 138.091602][ T2522] __sys_bpf+0x6ba/0x850 [ 138.095865][ T2522] ? bpf_link_show_fdinfo+0x330/0x330 [ 138.101400][ T2522] ? fpregs_restore_userregs+0x128/0x260 [ 138.107037][ T2522] __x64_sys_bpf+0x7c/0x90 [ 138.111464][ T2522] x64_sys_call+0x488/0x9a0 [ 138.115980][ T2522] do_syscall_64+0x4c/0xa0 [ 138.120408][ T2522] ? clear_bhb_loop+0x30/0x80 [ 138.125540][ T2522] ? clear_bhb_loop+0x30/0x80 [ 138.131001][ T2522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.136888][ T2522] RIP: 0033:0x7f851b39fb19 [ 138.141295][ T2522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.160890][ T2522] RSP: 002b:00007f851c341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.169322][ T2522] RAX: ffffffffffffffda RBX: 00007f851b625fa0 RCX: 00007f851b39fb19 [ 138.177735][ T2522] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 138.185714][ T2522] RBP: 00007f851b437b70 R08: 0000000000000000 R09: 0000000000000000 [ 138.193675][ T2522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.201637][ T2522] R13: 00007f851b626038 R14: 00007f851b625fa0 R15: 00007ffe958b8298 [ 138.209623][ T2522] [ 138.238092][ T2539] loop4: detected capacity change from 0 to 256 [ 138.252490][ T2539] FAT-fs (loop4): Directory bread(block 64) failed [ 138.255333][ T362] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.259682][ T2539] FAT-fs (loop4): Directory bread(block 65) failed [ 138.273882][ T2539] FAT-fs (loop4): Directory bread(block 66) failed [ 138.280473][ T2539] FAT-fs (loop4): Directory bread(block 67) failed [ 138.287173][ T2539] FAT-fs (loop4): Directory bread(block 68) failed [ 138.293959][ T2539] FAT-fs (loop4): Directory bread(block 69) failed [ 138.371529][ T24] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 138.417744][ T2549] xt_hashlimit: size too large, truncated to 1048576 [ 138.434174][ T2539] FAT-fs (loop4): Directory bread(block 70) failed [ 138.449064][ T2539] FAT-fs (loop4): Directory bread(block 71) failed [ 138.466795][ T362] usb 1-1: Using ep0 maxpacket: 32 [ 138.475981][ T362] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 138.487562][ T2539] FAT-fs (loop4): Directory bread(block 72) failed [ 138.497037][ T2539] FAT-fs (loop4): Directory bread(block 73) failed [ 138.531749][ T362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.544451][ T362] usb 1-1: Product: syz [ 138.548809][ T362] usb 1-1: Manufacturer: syz [ 138.559059][ T362] usb 1-1: SerialNumber: syz [ 138.569184][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.587051][ T362] usb 1-1: config 0 descriptor?? [ 138.593585][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 138.606527][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 138.618560][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.637581][ T2556] loop4: detected capacity change from 0 to 512 [ 138.648571][ T24] usb 3-1: string descriptor 0 read error: -22 [ 138.655989][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.670024][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.687429][ T2537] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 138.695285][ T2537] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 138.713181][ T24] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 138.809121][ T24] usb 1-1: USB disconnect, device number 8 [ 138.860297][ T2568] loop1: detected capacity change from 0 to 1024 [ 138.879898][ T2568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 138.957881][ T61] usb 3-1: USB disconnect, device number 9 [ 138.985188][ T289] EXT4-fs (loop1): unmounting filesystem. [ 139.632339][ T2586] loop2: detected capacity change from 0 to 256 [ 139.672830][ T2586] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 139.983340][ T2614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.664'. [ 140.316573][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 140.316591][ T29] audit: type=1400 audit(1794346348.174:500): avc: denied { mount } for pid=2626 comm="syz.3.669" name="/" dev="configfs" ino=12544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 140.355734][ T2631] loop0: detected capacity change from 0 to 16 [ 140.396753][ T2631] erofs: (device loop0): mounted with root inode @ nid 36. [ 140.409103][ T48] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 140.420947][ T2631] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 140.432916][ T29] audit: type=1400 audit(1794346348.174:501): avc: denied { search } for pid=2626 comm="syz.3.669" name="/" dev="configfs" ino=12544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.458009][ T2631] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 140.469301][ T29] audit: type=1400 audit(1794346348.183:502): avc: denied { setattr } for pid=2626 comm="syz.3.669" name="/" dev="configfs" ino=12544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.498977][ T29] audit: type=1400 audit(1794346348.370:503): avc: denied { read } for pid=2630 comm="syz.0.670" name="file2" dev="loop0" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.552614][ T29] audit: type=1400 audit(1794346348.370:504): avc: denied { map } for pid=2630 comm="syz.0.670" path="/147/bus/file2" dev="loop0" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.575673][ T29] audit: type=1400 audit(1794346348.370:505): avc: denied { getopt } for pid=2630 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.679897][ T2647] loop1: detected capacity change from 0 to 1024 [ 140.691981][ T2647] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.702211][ T29] audit: type=1400 audit(1794346348.651:506): avc: denied { create } for pid=2646 comm="syz.1.676" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.722359][ T29] audit: type=1400 audit(1794346348.651:507): avc: denied { read open } for pid=2646 comm="syz.1.676" path="/149/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.746140][ T29] audit: type=1400 audit(1794346348.651:508): avc: denied { write } for pid=2646 comm="syz.1.676" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.818541][ T2654] FAULT_INJECTION: forcing a failure. [ 140.818541][ T2654] name fail_futex, interval 1, probability 0, space 0, times 1 [ 140.840142][ T61] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 140.848992][ T2654] CPU: 0 PID: 2654 Comm: syz.4.678 Not tainted syzkaller #0 [ 140.856496][ T2654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.866563][ T2654] Call Trace: [ 140.870294][ T2654] [ 140.873239][ T2654] __dump_stack+0x21/0x24 [ 140.877588][ T2654] dump_stack_lvl+0x110/0x170 [ 140.882285][ T2654] ? __cfi_dump_stack_lvl+0x8/0x8 [ 140.887336][ T2654] ? __cfi_enqueue_task_fair+0x10/0x10 [ 140.892830][ T2654] dump_stack+0x15/0x24 [ 140.897144][ T2654] should_fail_ex+0x3bf/0x510 [ 140.901861][ T2654] should_fail+0xb/0x10 [ 140.906062][ T2654] get_futex_key+0x143/0xb10 [ 140.910697][ T2654] ? __cfi_check_preempt_wakeup+0x10/0x10 [ 140.916463][ T2654] ? get_wchan+0xa0/0xd0 [ 140.920740][ T2654] ? __cfi_get_futex_key+0x10/0x10 [ 140.925902][ T2654] ? __kasan_check_read+0x11/0x20 [ 140.930962][ T2654] ? ttwu_do_wakeup+0x102/0x490 [ 140.935946][ T2654] futex_wait_setup+0xb8/0x260 [ 140.940747][ T2654] ? __cfi_futex_wait_setup+0x10/0x10 [ 140.946166][ T2654] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 140.952201][ T2654] ? futex_setup_timer+0xb0/0xc0 [ 140.957268][ T2654] futex_wait+0x1ce/0x900 [ 140.961899][ T2654] ? __cfi_futex_wait+0x10/0x10 [ 140.966789][ T2654] ? __cfi_futex_wake+0x10/0x10 [ 140.971680][ T2654] ? mutex_unlock+0x8f/0x230 [ 140.976379][ T2654] ? __cfi_selinux_sb_kern_mount+0x10/0x10 [ 140.982187][ T2654] do_futex+0x2e2/0x430 [ 140.986426][ T2654] ? __kasan_check_write+0x14/0x20 [ 140.991980][ T2654] ? __cfi_do_futex+0x10/0x10 [ 140.996645][ T2654] ? __kasan_check_write+0x14/0x20 [ 141.001753][ T2654] __se_sys_futex+0x136/0x310 [ 141.006419][ T2654] ? __x64_sys_futex+0x100/0x100 [ 141.011359][ T2654] __x64_sys_futex+0xe5/0x100 [ 141.016036][ T2654] x64_sys_call+0x7ec/0x9a0 [ 141.020528][ T2654] do_syscall_64+0x4c/0xa0 [ 141.024940][ T2654] ? clear_bhb_loop+0x30/0x80 [ 141.029635][ T2654] ? clear_bhb_loop+0x30/0x80 [ 141.034350][ T2654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.040249][ T2654] RIP: 0033:0x7f851b39fb19 [ 141.045185][ T2654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.065489][ T2654] RSP: 002b:00007f851c3410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 141.074083][ T2654] RAX: ffffffffffffffda RBX: 00007f851b625fa8 RCX: 00007f851b39fb19 [ 141.082136][ T2654] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f851b625fa8 [ 141.090105][ T2654] RBP: 00007f851b625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 141.098422][ T2654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.106390][ T2654] R13: 00007f851b626038 R14: 00007ffe958b81b0 R15: 00007ffe958b8298 [ 141.114361][ T2654] [ 141.135323][ T29] audit: type=1400 audit(1794346349.059:509): avc: denied { bind } for pid=2658 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.160542][ T61] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.175147][ T2663] loop3: detected capacity change from 0 to 128 [ 141.177036][ T61] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.236320][ T61] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.243764][ T61] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 141.265142][ T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.280287][ T61] usb 1-1: config 0 descriptor?? [ 141.490210][ T2680] loop3: detected capacity change from 0 to 4096 [ 141.512920][ T2680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.626027][ T289] EXT4-fs (loop1): unmounting filesystem. [ 141.676890][ T61] lenovo 0003:17EF:6047.0001: ignoring exceeding usage max [ 141.756904][ T61] lenovo 0003:17EF:6047.0001: No inputs registered, leaving [ 141.799975][ T61] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.10 Joystick [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 141.869591][ T2692] FAULT_INJECTION: forcing a failure. [ 141.869591][ T2692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.870020][ T61] usb 1-1: USB disconnect, device number 9 [ 141.884576][ T2692] CPU: 0 PID: 2692 Comm: syz.1.692 Not tainted syzkaller #0 [ 141.896146][ T2692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.906201][ T2692] Call Trace: [ 141.909476][ T2692] [ 141.912398][ T2692] __dump_stack+0x21/0x24 [ 141.916720][ T2692] dump_stack_lvl+0x110/0x170 [ 141.921387][ T2692] ? __cfi_dump_stack_lvl+0x8/0x8 [ 141.926411][ T2692] ? __kasan_check_write+0x14/0x20 [ 141.931614][ T2692] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 141.937671][ T2692] dump_stack+0x15/0x24 [ 141.941853][ T2692] should_fail_ex+0x3bf/0x510 [ 141.945951][ T2693] fido_id[2693]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 141.946667][ T2692] should_fail_alloc_page+0x61/0x90 [ 141.966623][ T2692] prepare_alloc_pages+0x131/0x570 [ 141.972029][ T2692] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 141.977772][ T2692] ? kasan_set_track+0x60/0x70 [ 141.982570][ T2692] ? kasan_save_alloc_info+0x1f/0x30 [ 141.987864][ T2692] ? __kasan_slab_alloc+0x72/0x80 [ 141.993304][ T2692] ? slab_post_alloc_hook+0x4f/0x2d0 [ 141.998655][ T2692] __alloc_pages+0x15b/0x610 [ 142.003288][ T2692] ? __cfi___alloc_pages+0x10/0x10 [ 142.008434][ T2692] ? __kasan_check_write+0x14/0x20 [ 142.013746][ T2692] ? _raw_spin_lock+0x94/0xf0 [ 142.018780][ T2692] ? __cfi__raw_spin_lock+0x10/0x10 [ 142.024414][ T2692] __get_free_pages+0xe/0x30 [ 142.029191][ T2692] kasan_populate_vmalloc_pte+0x29/0x120 [ 142.034836][ T2692] __apply_to_page_range+0x8db/0xc80 [ 142.040131][ T2692] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 142.046373][ T2692] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 142.052625][ T2692] apply_to_page_range+0x3b/0x50 [ 142.057589][ T2692] kasan_populate_vmalloc+0x60/0x70 [ 142.062871][ T2692] alloc_vmap_area+0x1789/0x18c0 [ 142.067932][ T2692] ? vm_map_ram+0x930/0x930 [ 142.072428][ T2692] ? __kasan_kmalloc+0x95/0xb0 [ 142.077307][ T2692] ? kmalloc_node_trace+0x3d/0xb0 [ 142.082411][ T2692] __get_vm_area_node+0x160/0x360 [ 142.087442][ T2692] __vmalloc_node_range+0x326/0x1440 [ 142.092916][ T2692] ? array_map_alloc+0x27a/0x6b0 [ 142.097891][ T2692] ? memcpy+0x56/0x70 [ 142.101884][ T2692] ? __cfi___vmalloc_node_range+0x10/0x10 [ 142.107708][ T2692] ? cap_capable+0x1a6/0x230 [ 142.112315][ T2692] ? security_capable+0x99/0xc0 [ 142.117280][ T2692] bpf_map_area_alloc+0xd7/0xe0 [ 142.122245][ T2692] ? array_map_alloc+0x27a/0x6b0 [ 142.127556][ T2692] array_map_alloc+0x27a/0x6b0 [ 142.132446][ T2692] ? fd_array_map_alloc_check+0x23a/0x310 [ 142.138280][ T2692] map_create+0x467/0xcf0 [ 142.142618][ T2692] __sys_bpf+0x34e/0x850 [ 142.146883][ T2692] ? bpf_link_show_fdinfo+0x330/0x330 [ 142.152388][ T2692] ? fpregs_restore_userregs+0x128/0x260 [ 142.158015][ T2692] __x64_sys_bpf+0x7c/0x90 [ 142.163021][ T2692] x64_sys_call+0x488/0x9a0 [ 142.168500][ T2692] do_syscall_64+0x4c/0xa0 [ 142.172945][ T2692] ? clear_bhb_loop+0x30/0x80 [ 142.177620][ T2692] ? clear_bhb_loop+0x30/0x80 [ 142.182463][ T2692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.189223][ T2692] RIP: 0033:0x7fd7d8d9fb19 [ 142.193641][ T2692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.213525][ T2692] RSP: 002b:00007fd7d9c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.221950][ T2692] RAX: ffffffffffffffda RBX: 00007fd7d9025fa0 RCX: 00007fd7d8d9fb19 [ 142.230008][ T2692] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000 [ 142.238069][ T2692] RBP: 00007fd7d8e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 142.246041][ T2692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.254189][ T2692] R13: 00007fd7d9026038 R14: 00007fd7d9025fa0 R15: 00007ffd53d6ff18 [ 142.262166][ T2692] [ 142.323703][ T295] EXT4-fs (loop3): unmounting filesystem. [ 142.542122][ T2706] input: syz0 as /devices/virtual/input/input5 [ 142.613948][ T2712] loop3: detected capacity change from 0 to 512 [ 142.629371][ T2715] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.714191][ T2695] ================================================================== [ 142.722397][ T2712] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 142.722606][ T2695] BUG: KASAN: use-after-free in sk_skb_adjust_room+0x34e/0x610 [ 142.738338][ T2695] Read of size 8 at addr ffff8881200c9948 by task syz.4.693/2695 [ 142.746066][ T2695] [ 142.748384][ T2695] CPU: 1 PID: 2695 Comm: syz.4.693 Not tainted syzkaller #0 [ 142.755655][ T2695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.765699][ T2695] Call Trace: [ 142.768985][ T2695] [ 142.771903][ T2695] __dump_stack+0x21/0x24 [ 142.776314][ T2695] dump_stack_lvl+0x110/0x170 [ 142.780974][ T2695] ? __cfi_dump_stack_lvl+0x8/0x8 [ 142.785981][ T2695] ? pskb_expand_head+0x436/0x12b0 [ 142.791171][ T2695] ? sk_skb_adjust_room+0x34e/0x610 [ 142.796376][ T2695] print_address_description+0x71/0x200 [ 142.802012][ T2695] print_report+0x4a/0x60 [ 142.806365][ T2695] kasan_report+0x122/0x150 [ 142.810876][ T2695] ? sk_skb_adjust_room+0x34e/0x610 [ 142.816078][ T2695] __asan_report_load8_noabort+0x14/0x20 [ 142.821964][ T2695] sk_skb_adjust_room+0x34e/0x610 [ 142.827082][ T2695] bpf_prog_e15ab8bd9cea3c06+0x19/0x20 [ 142.832533][ T2695] sk_psock_verdict_recv+0x1c8/0x7b0 [ 142.837815][ T2695] ? skb_recv_datagram+0x140/0x180 [ 142.842924][ T2695] unix_stream_read_skb+0x13d/0x300 [ 142.848124][ T2695] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 142.854000][ T2695] ? __cfi_sk_psock_verdict_recv+0x10/0x10 [ 142.859802][ T2695] ? __cfi_unix_stream_read_skb+0x10/0x10 [ 142.865520][ T2695] ? __kasan_check_write+0x14/0x20 [ 142.870640][ T2695] ? _raw_spin_lock+0x94/0xf0 [ 142.875306][ T2695] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 142.881095][ T2695] sk_psock_verdict_data_ready+0xaf/0x1d0 [ 142.886809][ T2695] unix_stream_sendmsg+0x631/0xa80 [ 142.891914][ T2695] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 142.897627][ T2695] ? security_socket_sendmsg+0x93/0xb0 [ 142.903079][ T2695] __sys_sendto+0x4ac/0x660 [ 142.907578][ T2695] ? __cfi___sys_sendto+0x10/0x10 [ 142.912597][ T2695] ? __x64_sys_futex+0x100/0x100 [ 142.917519][ T2695] ? __kasan_check_write+0x14/0x20 [ 142.922620][ T2695] __x64_sys_sendto+0xe5/0x100 [ 142.927378][ T2695] x64_sys_call+0x83/0x9a0 [ 142.931781][ T2695] do_syscall_64+0x4c/0xa0 [ 142.936228][ T2695] ? clear_bhb_loop+0x30/0x80 [ 142.940892][ T2695] ? clear_bhb_loop+0x30/0x80 [ 142.945555][ T2695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.951440][ T2695] RIP: 0033:0x7f851b39fb19 [ 142.955847][ T2695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.975442][ T2695] RSP: 002b:00007f851c341028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 142.983844][ T2695] RAX: ffffffffffffffda RBX: 00007f851b625fa0 RCX: 00007f851b39fb19 [ 142.991806][ T2695] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000005 [ 142.999768][ T2695] RBP: 00007f851b437b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.008341][ T2695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.016332][ T2695] R13: 00007f851b626038 R14: 00007f851b625fa0 R15: 00007ffe958b8298 [ 143.024334][ T2695] [ 143.027367][ T2695] [ 143.029706][ T2695] Allocated by task 2324: [ 143.034059][ T2695] kasan_set_track+0x4b/0x70 [ 143.038646][ T2695] kasan_save_alloc_info+0x1f/0x30 [ 143.043761][ T2695] __kasan_slab_alloc+0x72/0x80 [ 143.048597][ T2695] slab_post_alloc_hook+0x4f/0x2d0 [ 143.053780][ T2695] kmem_cache_alloc+0x166/0x320 [ 143.058706][ T2695] sk_prot_alloc+0x5f/0x320 [ 143.063192][ T2695] sk_alloc+0x3b/0x460 [ 143.067246][ T2695] unix_create1+0xb8/0x710 [ 143.071646][ T2695] unix_create+0x149/0x200 [ 143.076043][ T2695] __sock_create+0x39e/0x7c0 [ 143.080616][ T2695] __sys_socketpair+0x1a1/0x5b0 [ 143.085452][ T2695] __x64_sys_socketpair+0x9b/0xb0 [ 143.090478][ T2695] x64_sys_call+0x6e/0x9a0 [ 143.094916][ T2695] do_syscall_64+0x4c/0xa0 [ 143.099342][ T2695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.105369][ T2695] [ 143.107703][ T2695] Freed by task 2323: [ 143.111677][ T2695] kasan_set_track+0x4b/0x70 [ 143.116302][ T2695] kasan_save_free_info+0x2b/0x40 [ 143.122544][ T2695] ____kasan_slab_free+0x132/0x180 [ 143.128438][ T2695] __kasan_slab_free+0x11/0x20 [ 143.133278][ T2695] slab_free_freelist_hook+0xc2/0x190 [ 143.138986][ T2695] kmem_cache_free+0x12d/0x300 [ 143.143796][ T2695] __sk_destruct+0x4b4/0x5e0 [ 143.148404][ T2695] __sk_free+0x30a/0x400 [ 143.152640][ T2695] sk_free+0x54/0x90 [ 143.156976][ T2695] unix_release_sock+0xb6d/0xe60 [ 143.161927][ T2695] unix_release+0x9d/0xd0 [ 143.166247][ T2695] sock_close+0xc9/0x220 [ 143.170768][ T2695] __fput+0x1fd/0x8f0 [ 143.174851][ T2695] ____fput+0x15/0x20 [ 143.178941][ T2695] task_work_run+0x1e1/0x250 [ 143.183720][ T2695] exit_to_user_mode_loop+0x9b/0xb0 [ 143.189273][ T2695] exit_to_user_mode_prepare+0x87/0xd0 [ 143.195398][ T2695] syscall_exit_to_user_mode+0x1a/0x30 [ 143.201402][ T2695] do_syscall_64+0x58/0xa0 [ 143.206031][ T2695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.212966][ T2695] [ 143.215320][ T2695] The buggy address belongs to the object at ffff8881200c9900 [ 143.215320][ T2695] which belongs to the cache UNIX-STREAM of size 1152 [ 143.229991][ T2695] The buggy address is located 72 bytes inside of [ 143.229991][ T2695] 1152-byte region [ffff8881200c9900, ffff8881200c9d80) [ 143.243379][ T2695] [ 143.245791][ T2695] The buggy address belongs to the physical page: [ 143.252447][ T2695] page:ffffea0004803200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1200c8 [ 143.262957][ T2695] head:ffffea0004803200 order:2 compound_mapcount:0 compound_pincount:0 [ 143.271276][ T2695] flags: 0x4000000000010200(slab|head|zone=1) [ 143.277386][ T2695] raw: 4000000000010200 dead000000000100 dead000000000122 ffff8881088b4a80 [ 143.286035][ T2695] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 143.295044][ T2695] page dumped because: kasan: bad access detected [ 143.301546][ T2695] page_owner tracks the page as allocated [ 143.307379][ T2695] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 225, tgid 225 (sshd-session), ts 21724461683, free_ts 0 [ 143.330444][ T2695] post_alloc_hook+0x1f5/0x210 [ 143.335255][ T2695] prep_new_page+0x1c/0x110 [ 143.339965][ T2695] get_page_from_freelist+0x2ca9/0x2d20 [ 143.345715][ T2695] __alloc_pages+0x1fa/0x610 [ 143.350580][ T2695] alloc_slab_page+0x6e/0xf0 [ 143.355367][ T2695] new_slab+0x98/0x3e0 [ 143.359429][ T2695] ___slab_alloc+0x70f/0xb70 [ 143.364101][ T2695] __slab_alloc+0x5e/0xa0 [ 143.368784][ T2695] kmem_cache_alloc+0x1a8/0x320 [ 143.373625][ T2695] sk_prot_alloc+0x5f/0x320 [ 143.378130][ T2695] sk_alloc+0x3b/0x460 [ 143.382495][ T2695] unix_create1+0xb8/0x710 [ 143.387076][ T2695] unix_stream_connect+0x1cd/0xda0 [ 143.392193][ T2695] __sys_connect+0x3da/0x460 [ 143.396775][ T2695] __x64_sys_connect+0x7a/0x90 [ 143.401613][ T2695] x64_sys_call+0x88d/0x9a0 [ 143.406246][ T2695] page_owner free stack trace missing [ 143.411595][ T2695] [ 143.413899][ T2695] Memory state around the buggy address: [ 143.419507][ T2695] ffff8881200c9800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 143.427543][ T2695] ffff8881200c9880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.435581][ T2695] >ffff8881200c9900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.443624][ T2695] ^ [ 143.450024][ T2695] ffff8881200c9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.458192][ T2695] ffff8881200c9a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.466318][ T2695] ================================================================== [ 143.474663][ T2695] Disabling lock debugging due to kernel taint [ 143.483149][ T2714] loop0: detected capacity change from 0 to 128 [ 143.489995][ T2714] SELinux: security_context_str_to_sid (system) failed with errno=-22 [ 143.536619][ T317] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2