last executing test programs: 4.508115188s ago: executing program 1 (id=539): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./file2\x00', 0x14, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_clone(0x208200, &(0x7f0000000040)="15", 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') 3.663874987s ago: executing program 1 (id=554): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r1, 0x0, 0x0, 0x102, 0x0, 0x0) 3.57123109s ago: executing program 1 (id=555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f0000000f00)="4b95"}) 3.509467381s ago: executing program 1 (id=556): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x4, 0x80000}) sched_setattr(0x0, 0x0, 0x0) eventfd2(0x156, 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) 2.685930299s ago: executing program 4 (id=564): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008840}, 0x80) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x483, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6020, 0x1) 2.147289702s ago: executing program 2 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.056191344s ago: executing program 2 (id=569): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r1, 0x0, 0x0, 0x102, 0x0, 0x0) 2.055951394s ago: executing program 2 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) get_robust_list(0x0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x5) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) syz_open_pts(r3, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="8100b2357c7d0da613d80400000000011f000000004b8a000000000c00ef932f87d48c6d6536507617174bcc76f9010ddcef82f7367aec3d531aa108a2000000000000002779dc3301", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) creat(0x0, 0xba) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000000080)=""/97, &(0x7f0000000100)=0x61) 1.706335902s ago: executing program 3 (id=572): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) creat(&(0x7f0000000080)='./bus\x00', 0x154) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x37fffd, @empty, 0x1b}, 0x1c) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 1.706095892s ago: executing program 4 (id=573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x8, 0x4, 0x804, 0x7, 0xf, 0x120002, 0x2, 0x2, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x9, 0x1000000000000000], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.636297543s ago: executing program 3 (id=574): timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r1}, &(0x7f0000000000)=""/66, 0x42, &(0x7f0000000280)={&(0x7f00000000c0)={'crc32c-generic\x00'}}) 1.636121183s ago: executing program 4 (id=575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x4010) 1.636005283s ago: executing program 3 (id=576): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.571224735s ago: executing program 4 (id=577): r0 = socket(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x10003) 1.559500355s ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000140)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x440, 0x40, 0x14}, 0x18) 1.544346685s ago: executing program 4 (id=579): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@errors_remount}, {@jqfmt_vfsv1}, {@noquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5af, &(0x7f0000003e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x2003, 0x40, 0x2, 0x276}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000080)={0xd33e, 0xaca3, 0x4}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) syz_usb_connect$uac2(0x3, 0x8b, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000002400)=""/4096, 0x1000) 735.712744ms ago: executing program 2 (id=580): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f00000005c0)={[{@block_validity}, {}, {@noacl}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0xa54ec2991df72bc, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000880)="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", 0x2058, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') unlinkat(r1, &(0x7f0000000140)='./file1\x00', 0x0) 599.876467ms ago: executing program 3 (id=582): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/48], 0x119) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 599.742957ms ago: executing program 0 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) 586.610907ms ago: executing program 0 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000005d80)={0x1, [{0x2, 0x3df0, 0x5, &(0x7f0000002480)="1bb4f4705b5647daf98245067e2eaa36bfc47b72e7ae906468fec1f06cf53718e1b8d3029983fc4759d4614bb2ec658abc9b4736514974b2b5074f593289c17abb77038dabd4fdff587d43d9eeec0066b31162710009b30f829488b6514407ddacee701bc8f9027e2fc27780a8e91ebd1eebc16d970a7a4a711a307c881ecf60b432ae1b7b3dbf6107c752a6df761cda32e2c6fb9859cfc07756121a578da1e701fb8ba8219fa7fe0ee150960b39311130ba712f402c28d2a0349cf665cf28413b9b68ab16131c7675834c8993a8279e0543547196817e39417b8edb78bf6bd96f909a2dcdf456d297496026a7532b41843b9475c2df96abbeb0d184db5c7f0f2b0b5335a13189fe8e513986178ffe41f5fd1a43db1b0517e2f9d8504918cee3bc188c6c2c7cec6ba0b952cf3b0219a5e0a0f4bbbf296bbedb7ac31820be24b9da5f204e2a30f54902d71237a0d774aa8cf23da02e7c3a6d237c103ff3e28c5ae3f6fbba38aaaaf31435975bf6d1d867c3d3fa1509f659f1a654cfb573f63fd77201c792f0e9b83609492702bcddb35b92d2b420fdf89b10b779137fadaba08b415c9d0542ceebf988c7f77fc7f53f4e4410f7ab20ff26a27dc2dfdbe39bd7e97a7298b59592386696a6b1e670ed7cd7c283d0a5200a2fafbfc483471cb65a5dbda219f8d34d39c002a3e1279dfde1fbfa5c18913f6bb7c994f5c880515ff97fb4436476a63e1c8bb216f1e4791309a12fb261554be2c976fd9f77b19db58a414a216494e0cec8fe3806c30526b6869ba830b7264542787c160d3d2d0378f3421800a1975b2e501047a32b930a59d9b786f75e98859f0f27ceac35386cf34b8f5e816298f6765733ef68828f6d9d184b1e5f68e268c80f12f1d52503502de9b91f97d59398053db2c607a081a2d881fc72b93718db659c6d3d59a2598b7e586fd2965f5ff4faf7f48efa53026cae11549da4ce9d0ef6dd6d8e117e49c3ced3ec3cb52cbfa4237e5564f44387c40258f5d53be030c00fdcaa81c6233a04404d300a719f4ce3df6c3676116b63bd38908c3f849db252a30eb11715be38b53fe5e2f685043930e769c5aae48cd3ba837129392573a4a3ce11bcc04f0c57b4a255453d985e786868593ffa4a280b5ac55390859e93fa155f080a7ac7e23cc4928ff52c435d841a9b150fc67633e4812eb9777eac756377f2d90fc1182807f0896904c3da2c00c90e9d9e7807334dc76b34418d79c53eb4fc8e392dc8b9cca73c81d563abcb955f5533b0cc44a560066ad2c959135394bc04c4192d8920c03fc6925b5b93086249d1ae9f4550914231ff29e5610f368edc2e681a709f3a46e5f908f54a985e0648b8e9f1a3256c741a9c3596bf36cb35b5fe1524aa33aab67e04dacbf79ccdd11a7845e6f4a8c9e018b89be002be919c447ff023b08a91190e5ec4d2e8dd89e0803e9d96790f94852ef58e2af3ed3025385789e6888ac06f6f916deb9cd2db0836db35a76272357d44307918c90d3e7f83971718047e9145c1b42211339f9767484e1f0aae5bef803aa68e895244d49df0d265a9048ef785447aae6ebbe2231ca2937d8b25b3fda11afa2a99b7252f78e293859b3df0b9d00352ad7f63f10ea60c7dfbc640f1cde0822ed729061bd210d8d7d24abd0971a8d9f9adebcafbabaec20d150cbc591d2a1a197e1853ba2c8d0158f87d4b7b88fe367d8f8867c4a82d0533625883f32ea8e4fd442754b37bc6ce58cbdbc7c929bda20456552e95ca643bf2b0db2b4ab54c8f00004d842fb4a836b7e683409602545e70276d76621e86963b737f1d038dfec720b26176b67a98d65eab2ba8f758585401e1cadf1fadd449b7adeedbcb118472c88642277d029b181386b66e85ac3abd916183896859225fefcd8e296fe14f7d52406295d052e90a5600361f6c94a4bf1f89840e577d05845a97108e9162b109b5a4e7942e87c6ebb44f3ddb310ab1446f3f6731169e97e03cd280e566fb139656e3331df6ec23051487758e222d92721123046c63a0ecacede799c1f0eef2d793702c97405e22a09c1cd724e5600db3831d41f280baf69c9ff671847fc850696abe1d012c025c29946d8f203dbfd6e465d3a8d32049da1c0208971f6d2a2f2874ceb06981298768ff0cde654c0bf413215c5ce18d91fd79e5562bd3d1d934548856897dadf1fab4ff56e31e584a72f7d016fdfad4bcc351c0504f50156b73f48a98a101aa5563d25edb5722858190894c937edff54e1d145ef97a5f3765c4f3587264411a049ea150127e18bb89f0ad4224293f1fb1d327a7ed7945b4f2c29a4d497c723e7db65d0e40209a4e00d24276a140b97037bda2215cb2af10ae4ee1bd8708757095212ff854d6fe76acbdc8b86716d2b55d3472241f36d07da26838019b7648410090bf1297eb27b876326d85012c0fbb5c00b61d28418a22877a07de1cd56721f89d89223a34613e50cca216ea220e10d20fda245bae81ed1d4105bc8ed9c3a53122b2ee4cc5a191150328d55f98ab142fec947e0bc9378276250e913aaf160d1a93567262a2a65bcf0fb1e410bd4e26daf72e1757dad64d002e703cf86bb0759a8b1b1c9b171879d20e774bdfc636cc0e9056833a07a2d7d11191899918ae949e85d4fbe13911618cc4341bc6e8c760a09bd914cf2f81a5b951115fa49adfbab78731d3d395709e0c46c37c18299c1f13c66e0afc1cebacd3739ac9b8c8bebc0b4fd028d7ca385c4b6ce043411071cf92f510fd867e45e0c62a0f081afde7259e688b735b3fa264226287c1"}, {0x2, 0x0, 0xa8, 0x0}, {0x3, 0x0, 0x22, 0x0}, {0x0, 0x0, 0xfff, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x2c, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x1a, &(0x7f00000059c0)}, {0x3, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x401, 0x0}, {0x1, 0x0, 0xfa08, 0x0}, {0x7, 0x0, 0x40, 0x0}, {0x0, 0x0, 0x5, 0x0}]}) 528.094119ms ago: executing program 2 (id=585): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@remote, 0x402, 0x3, 0x1, 0x7}}, 0xe8) 440.401491ms ago: executing program 2 (id=586): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000010000)=0x10006) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000019e000/0xc00000)=nil, 0xc00000) 440.298691ms ago: executing program 0 (id=587): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) r2 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000140), 0x9) 440.180131ms ago: executing program 0 (id=588): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x4f, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0x0, 0xfff3}, {0xd, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x4}}}]}]}]}}]}, 0x91}, 0x1, 0x0, 0x0, 0x20041090}, 0x4) 440.087531ms ago: executing program 3 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000014001280090001007866726d1900000004000280140003007866726d3000"], 0x48}}, 0x0) 439.960061ms ago: executing program 0 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x200002}}}}]}, 0x4c}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 347.845423ms ago: executing program 3 (id=591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') readv(r1, &(0x7f0000000780)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xa000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x1e, '\x00', 0xff}, {0x8, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x0, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xf, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0x5, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x9}, {0x4, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0x45, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x0, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0xffffffffffffffef, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x24008005}, 0x804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 251.887205ms ago: executing program 0 (id=592): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 150.793207ms ago: executing program 1 (id=593): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) 0s ago: executing program 1 (id=594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb6e7, 0xfffffde8, 0x4, 0x2, 0xff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) kernel console output (not intermixed with test programs): 1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 41.779625][ T726] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 41.850466][ T726] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 41.860392][ T726] EXT4-fs (loop1): invalid journal inode [ 41.866138][ T726] EXT4-fs (loop1): can't get journal size [ 41.882296][ T726] EXT4-fs error (device loop1): ext4_fill_super:4863: inode #2: comm syz.1.132: iget: bad extra_isize 65535 (inode size 1024) [ 41.895530][ T384] usb 3-1: config index 0 descriptor too short (expected 44880, got 80) [ 41.903947][ T384] usb 3-1: config 77 has too many interfaces: 82, using maximum allowed: 32 [ 41.912879][ T384] usb 3-1: config 77 has an invalid descriptor of length 249, skipping remainder of the config [ 41.923340][ T726] EXT4-fs (loop1): get root inode failed [ 41.923355][ T726] EXT4-fs (loop1): mount failed [ 41.934252][ T384] usb 3-1: config 77 has 0 interfaces, different from the descriptor's value: 82 [ 42.098541][ T738] FAULT_INJECTION: forcing a failure. [ 42.098541][ T738] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.111715][ T738] CPU: 1 PID: 738 Comm: syz.1.136 Not tainted syzkaller #0 [ 42.112410][ T384] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 42.118930][ T738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 42.118941][ T738] Call Trace: [ 42.118947][ T738] [ 42.118953][ T738] __dump_stack+0x21/0x30 [ 42.140638][ T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.141323][ T738] dump_stack_lvl+0x110/0x170 [ 42.148493][ T384] usb 3-1: Product: syz [ 42.148700][ T738] ? show_regs_print_info+0x20/0x20 [ 42.166327][ T384] usb 3-1: Manufacturer: syz [ 42.170726][ T738] ? stack_trace_save+0xa6/0xf0 [ 42.170753][ T738] ? __stack_depot_save+0x34/0x480 [ 42.184805][ T384] usb 3-1: SerialNumber: syz [ 42.185373][ T738] ? path_openat+0x284f/0x2f80 [ 42.194732][ T738] dump_stack+0x15/0x20 [ 42.198898][ T738] should_fail+0x3ab/0x500 [ 42.203344][ T738] should_fail_usercopy+0x1a/0x20 [ 42.208404][ T738] _copy_from_user+0x20/0xd0 [ 42.213023][ T738] __copy_msghdr_from_user+0xc9/0x630 [ 42.218417][ T738] ? _kstrtoull+0x3bb/0x4c0 [ 42.222950][ T738] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 42.228255][ T738] ? kstrtouint_from_user+0x1c4/0x220 [ 42.233672][ T738] ___sys_sendmsg+0x19a/0x2e0 [ 42.238373][ T738] ? __sys_sendmsg+0x280/0x280 [ 42.243168][ T738] ? __fdget+0x1a1/0x230 [ 42.247434][ T738] __x64_sys_sendmsg+0x201/0x2d0 [ 42.252424][ T738] ? ___sys_sendmsg+0x2e0/0x2e0 [ 42.257292][ T738] ? ksys_write+0x1fa/0x260 [ 42.261824][ T738] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 42.267912][ T738] x64_sys_call+0x4b/0x9a0 [ 42.272363][ T738] do_syscall_64+0x4c/0xa0 [ 42.276847][ T738] ? clear_bhb_loop+0x50/0xa0 [ 42.281553][ T738] ? clear_bhb_loop+0x50/0xa0 [ 42.286252][ T738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.292171][ T738] RIP: 0033:0x7fb93278ae59 [ 42.296615][ T738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.316231][ T738] RSP: 002b:00007fb9311e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.324659][ T738] RAX: ffffffffffffffda RBX: 00007fb932a12fa0 RCX: 00007fb93278ae59 [ 42.332656][ T738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 42.340737][ T738] RBP: 00007fb9311e4090 R08: 0000000000000000 R09: 0000000000000000 [ 42.348736][ T738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.356735][ T738] R13: 00007fb932a13038 R14: 00007fb932a12fa0 R15: 00007ffd56549448 [ 42.364727][ T738] [ 42.449952][ T744] loop1: detected capacity change from 0 to 128 [ 42.471942][ T740] loop3: detected capacity change from 0 to 40427 [ 42.484163][ T384] usb 3-1: USB disconnect, device number 4 [ 42.488679][ T744] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.500599][ T744] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.513263][ T740] F2FS-fs (loop3): fault_injection options not supported [ 42.521905][ T740] F2FS-fs (loop3): fault_type options not supported [ 42.529543][ T740] F2FS-fs (loop3): invalid crc value [ 42.540946][ T740] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.576584][ T740] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.642584][ T306] tipc: Node number set to 2130706433 [ 42.705014][ T752] attempt to access beyond end of device [ 42.705014][ T752] loop3: rw=2049, want=45104, limit=40427 [ 42.721578][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.739405][ T754] loop0: detected capacity change from 0 to 512 [ 42.805301][ T756] netlink: 'syz.1.140': attribute type 15 has an invalid length. [ 42.925664][ T754] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.002266][ T26] usb 5-1: device descriptor read/64, error -71 [ 43.525327][ T758] loop2: detected capacity change from 0 to 1024 [ 43.535261][ T754] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 43.614319][ T758] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 43.652185][ T26] usb 5-1: device descriptor read/64, error -71 [ 43.677010][ T758] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 43.697245][ T760] loop0: detected capacity change from 0 to 512 [ 43.725972][ T758] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.742705][ T758] mmap: syz.2.142 (758) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 43.754328][ T764] loop1: detected capacity change from 0 to 256 [ 43.772502][ T462] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 3) [ 43.789119][ T760] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 43.809335][ T760] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.821297][ T462] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 43.834595][ T462] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.834595][ T462] [ 43.845240][ T462] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 112: padding at end of block bitmap is not set [ 43.852573][ T768] loop3: detected capacity change from 0 to 512 [ 43.869280][ T462] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 43.887868][ T462] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.887868][ T462] [ 43.897690][ T462] EXT4-fs (loop2): Total free blocks count 0 [ 43.903722][ T462] EXT4-fs (loop2): Free/Dirty block details [ 43.909658][ T462] EXT4-fs (loop2): free_blocks=0 [ 43.914996][ T462] EXT4-fs (loop2): dirty_blocks=48 [ 43.920229][ T462] EXT4-fs (loop2): Block reservation details [ 43.934280][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.943313][ T462] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 43.949755][ T768] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.143: invalid indirect mapped block 4294967295 (level 1) [ 43.965431][ T768] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.143: invalid indirect mapped block 4294967295 (level 1) [ 43.980166][ T768] EXT4-fs (loop3): 2 truncates cleaned up [ 43.986097][ T768] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 44.052698][ T776] futex_wake_op: syz.0.148 tries to shift op by 144; fix this program [ 44.179678][ T768] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.143: bg 0: block 5: invalid block bitmap [ 44.239456][ T778] loop2: detected capacity change from 0 to 1024 [ 44.246086][ T26] usb 5-1: device descriptor read/64, error -71 [ 44.314520][ T778] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 44.332355][ T778] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 44.343360][ T778] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 44.358916][ T778] EXT4-fs (loop2): invalid journal inode [ 44.365111][ T778] EXT4-fs (loop2): can't get journal size [ 44.371127][ T778] EXT4-fs error (device loop2): ext4_fill_super:4863: inode #2: comm syz.2.146: iget: bad extra_isize 65535 (inode size 1024) [ 44.385077][ T778] EXT4-fs (loop2): get root inode failed [ 44.390736][ T778] EXT4-fs (loop2): mount failed [ 44.489971][ T785] loop2: detected capacity change from 0 to 128 [ 44.518837][ T785] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.529937][ T785] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.565964][ T794] process 'syz.1.154' launched '/dev/fd/7' with NULL argv: empty string added [ 44.598381][ T797] netlink: '+}[@': attribute type 12 has an invalid length. [ 44.606076][ T797] netlink: '+}[@': attribute type 29 has an invalid length. [ 44.613506][ T797] netlink: 148 bytes leftover after parsing attributes in process `+}[@'. [ 44.622211][ T797] netlink: 59 bytes leftover after parsing attributes in process `+}[@'. [ 44.632938][ T790] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 44.641000][ T790] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 44.662166][ T26] usb 5-1: device descriptor read/64, error -71 [ 44.725050][ T804] loop2: detected capacity change from 0 to 128 [ 44.742068][ T804] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.754205][ T804] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.790829][ T26] usb usb5-port1: attempt power cycle [ 44.801385][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 44.801399][ T30] audit: type=1326 audit(1783521392.896:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 44.851556][ T30] audit: type=1326 audit(1783521392.936:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 44.876308][ T361] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 44.884199][ T30] audit: type=1326 audit(1783521392.936:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 44.909506][ T30] audit: type=1326 audit(1783521392.936:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 44.941114][ T30] audit: type=1326 audit(1783521392.936:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 44.971049][ T30] audit: type=1326 audit(1783521392.936:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 45.002116][ T30] audit: type=1326 audit(1783521392.936:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 45.027243][ T335] loop0: p3 p4 < > [ 45.027240][ T30] audit: type=1326 audit(1783521392.936:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 45.027268][ T30] audit: type=1326 audit(1783521392.936:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 45.031857][ T335] loop0: p3 size 201326592 extends beyond EOD, [ 45.064245][ T30] audit: type=1326 audit(1783521392.936:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=806 comm="syz.3.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 45.114366][ T814] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 45.132334][ T814] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 45.143844][ T335] truncated [ 45.144038][ T814] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 45.157669][ T812] loop0: p3 p4 < > [ 45.161778][ T812] loop0: p3 size 201326592 extends beyond EOD, truncated [ 45.163181][ T814] EXT4-fs (loop2): invalid journal inode [ 45.172244][ T819] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.175746][ T814] EXT4-fs (loop2): can't get journal size [ 45.190803][ T821] xt_hashlimit: size too large, truncated to 1048576 [ 45.191471][ T819] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.207859][ T814] EXT4-fs error (device loop2): ext4_fill_super:4863: inode #2: comm syz.2.160: iget: bad extra_isize 65535 (inode size 1024) [ 45.222558][ T814] EXT4-fs (loop2): get root inode failed [ 45.228217][ T814] EXT4-fs (loop2): mount failed [ 45.233747][ T101] loop0: p3 p4 < > [ 45.237658][ T101] loop0: p3 size 201326592 extends beyond EOD, truncated [ 45.252223][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 45.352195][ T361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.402168][ T361] usb 2-1: not running at top speed; connect to a high speed hub [ 45.431490][ T830] FAULT_INJECTION: forcing a failure. [ 45.431490][ T830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.462193][ T26] usb 5-1: device descriptor read/8, error -71 [ 45.468492][ T830] CPU: 1 PID: 830 Comm: syz.4.166 Not tainted syzkaller #0 [ 45.475718][ T830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 45.485788][ T830] Call Trace: [ 45.489169][ T830] [ 45.492125][ T830] __dump_stack+0x21/0x30 [ 45.496476][ T830] dump_stack_lvl+0x110/0x170 [ 45.501176][ T830] ? show_regs_print_info+0x20/0x20 [ 45.506390][ T830] ? stack_trace_save+0xa6/0xf0 [ 45.511259][ T830] ? __stack_depot_save+0x34/0x480 [ 45.516396][ T830] ? path_openat+0x284f/0x2f80 [ 45.521165][ T830] dump_stack+0x15/0x20 [ 45.525327][ T830] should_fail+0x3ab/0x500 [ 45.529745][ T830] should_fail_usercopy+0x1a/0x20 [ 45.534773][ T830] _copy_from_user+0x20/0xd0 [ 45.539374][ T830] iovec_from_user+0x1bc/0x2f0 [ 45.544150][ T830] ? _kstrtoull+0x3bb/0x4c0 [ 45.548665][ T830] __import_iovec+0x71/0x3f0 [ 45.553271][ T830] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 45.558569][ T830] ? kstrtouint_from_user+0x1c4/0x220 [ 45.563960][ T830] import_iovec+0x7c/0xb0 [ 45.568300][ T830] ___sys_sendmsg+0x1fd/0x2e0 [ 45.572991][ T830] ? __sys_sendmsg+0x280/0x280 [ 45.577758][ T830] ? __fdget+0x1a1/0x230 [ 45.582005][ T830] __x64_sys_sendmsg+0x201/0x2d0 [ 45.587094][ T830] ? ___sys_sendmsg+0x2e0/0x2e0 [ 45.591956][ T830] ? ksys_write+0x1fa/0x260 [ 45.596465][ T830] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 45.602553][ T830] x64_sys_call+0x4b/0x9a0 [ 45.606990][ T830] do_syscall_64+0x4c/0xa0 [ 45.611425][ T830] ? clear_bhb_loop+0x50/0xa0 [ 45.616122][ T830] ? clear_bhb_loop+0x50/0xa0 [ 45.620811][ T830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.626715][ T830] RIP: 0033:0x7fd764a94e59 [ 45.631145][ T830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.650761][ T830] RSP: 002b:00007fd7634ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.659192][ T830] RAX: ffffffffffffffda RBX: 00007fd764d1cfa0 RCX: 00007fd764a94e59 [ 45.667255][ T830] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 45.675228][ T830] RBP: 00007fd7634ee090 R08: 0000000000000000 R09: 0000000000000000 [ 45.683198][ T830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.691180][ T830] R13: 00007fd764d1d038 R14: 00007fd764d1cfa0 R15: 00007fffe5925e58 [ 45.699160][ T830] [ 45.732171][ T361] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 45.921972][ T847] futex_wake_op: syz.2.169 tries to shift op by 144; fix this program [ 45.939613][ T361] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 45.939753][ T26] usb 5-1: device descriptor read/8, error -71 [ 45.955511][ T361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.987560][ T361] usb 2-1: Product: syz [ 46.021546][ T361] usb 2-1: Manufacturer: syz [ 46.061840][ T361] usb 2-1: SerialNumber: syz [ 46.142416][ T798] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.259801][ T850] erofs: (device loop3): mounted with root inode @ nid 36. [ 46.282656][ T850] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 46.292435][ T850] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 46.301532][ T850] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 46.311790][ T850] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 46.320935][ T850] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 46.330274][ T850] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 46.339685][ T850] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 46.349019][ T851] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.349030][ T850] attempt to access beyond end of device [ 46.349030][ T850] loop3: rw=524288, want=34359738368, limit=16 [ 46.372660][ T851] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.402253][ T846] F2FS-fs (loop0): invalid crc value [ 46.408101][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.416490][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.422327][ T850] attempt to access beyond end of device [ 46.422327][ T850] loop3: rw=524288, want=136, limit=16 [ 46.425613][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.439439][ T798] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.444943][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.462824][ T846] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.488675][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.500537][ T850] attempt to access beyond end of device [ 46.500537][ T850] loop3: rw=524288, want=88, limit=16 [ 46.505520][ T798] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 46.517157][ T850] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.534751][ T850] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.537198][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.543165][ T846] F2FS-fs (loop0): Start checkpoint disabled! [ 46.557821][ T846] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 46.565240][ T850] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.574002][ T850] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.582466][ T850] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.590653][ T850] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.601339][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.610547][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.618997][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.627345][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.635767][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.644096][ T849] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.652749][ T851] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.660940][ T851] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 46.737903][ T861] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.748666][ T361] usb 2-1: MIDIStreaming interface descriptor not found [ 46.760553][ T361] usb 2-1: USB disconnect, device number 2 [ 46.763988][ T861] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.804279][ T865] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 46.822105][ T869] FAULT_INJECTION: forcing a failure. [ 46.822105][ T869] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.822295][ T865] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 46.852300][ T869] CPU: 1 PID: 869 Comm: syz.2.177 Not tainted syzkaller #0 [ 46.859549][ T869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 46.869625][ T869] Call Trace: [ 46.872567][ T865] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 46.872922][ T869] [ 46.872931][ T869] __dump_stack+0x21/0x30 [ 46.883698][ T293] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.885863][ T869] dump_stack_lvl+0x110/0x170 [ 46.885887][ T869] ? show_regs_print_info+0x20/0x20 [ 46.891140][ T865] EXT4-fs (loop3): invalid journal inode [ 46.897682][ T869] ? avc_has_perm+0x163/0x250 [ 46.897709][ T869] dump_stack+0x15/0x20 [ 46.897727][ T869] should_fail+0x3ab/0x500 [ 46.903755][ T865] EXT4-fs (loop3): can't get journal size [ 46.907618][ T869] should_fail_alloc_page+0x55/0x80 [ 46.918510][ T865] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.175: iget: bad extra_isize 65535 (inode size 1024) [ 46.922201][ T869] prepare_alloc_pages+0x13f/0x590 [ 46.922230][ T869] ? __alloc_pages_bulk+0xab0/0xab0 [ 46.922252][ T869] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 46.922275][ T869] __alloc_pages+0x11d/0x460 [ 46.927728][ T865] EXT4-fs (loop3): get root inode failed [ 46.932419][ T869] ? prep_new_page+0x110/0x110 [ 46.932447][ T869] ? enqueue_task_fair+0xaf1/0x2130 [ 46.938844][ T865] EXT4-fs (loop3): mount failed [ 46.950660][ T869] skb_page_frag_refill+0x202/0x3a0 [ 46.950688][ T869] tun_get_user+0x6c5/0x34c0 [ 46.950713][ T869] ? tun_do_read+0x1d70/0x1d70 [ 46.965762][ T859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 46.966658][ T869] ? get_nohz_timer_target+0x7a/0x550 [ 46.971356][ T859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'. [ 46.976900][ T869] ? yield_to_task_fair+0x1a0/0x1a0 [ 46.976926][ T869] ? avc_policy_seqno+0x1b/0x70 [ 46.976948][ T869] ? selinux_file_permission+0x2aa/0x510 [ 47.045028][ T869] tun_chr_write_iter+0x1ed/0x2f0 [ 47.050068][ T869] vfs_write+0x831/0xfd0 [ 47.054305][ T869] ? file_end_write+0x1b0/0x1b0 [ 47.059152][ T869] ? __fget_files+0x2e1/0x340 [ 47.063854][ T869] ? __fdget_pos+0x1f7/0x380 [ 47.068465][ T869] ? ksys_write+0x70/0x260 [ 47.072881][ T869] ksys_write+0x14a/0x260 [ 47.077210][ T869] ? __ia32_sys_read+0x90/0x90 [ 47.081973][ T869] __x64_sys_write+0x7b/0x90 [ 47.086646][ T869] x64_sys_call+0x8ef/0x9a0 [ 47.091145][ T869] do_syscall_64+0x4c/0xa0 [ 47.095676][ T869] ? clear_bhb_loop+0x50/0xa0 [ 47.100347][ T869] ? clear_bhb_loop+0x50/0xa0 [ 47.105040][ T869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.111035][ T869] RIP: 0033:0x7f140e4e568e [ 47.115472][ T869] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 47.135180][ T869] RSP: 002b:00007f140cf7dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.143673][ T869] RAX: ffffffffffffffda RBX: 00007f140cf7e6c0 RCX: 00007f140e4e568e [ 47.151638][ T869] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 47.152202][ T293] usb 1-1: device descriptor read/64, error -71 [ 47.159611][ T869] RBP: 00007f140cf7e090 R08: 0000000000000000 R09: 0000000000000000 [ 47.159626][ T869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.181910][ T869] R13: 00007f140e7ad038 R14: 00007f140e7acfa0 R15: 00007ffedcea28c8 [ 47.189878][ T869] [ 47.251594][ T874] FAULT_INJECTION: forcing a failure. [ 47.251594][ T874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.266847][ T874] CPU: 1 PID: 874 Comm: syz.2.181 Not tainted syzkaller #0 [ 47.274074][ T874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 47.284145][ T874] Call Trace: [ 47.287477][ T874] [ 47.290425][ T874] __dump_stack+0x21/0x30 [ 47.294768][ T874] dump_stack_lvl+0x110/0x170 [ 47.299451][ T874] ? show_regs_print_info+0x20/0x20 [ 47.304761][ T874] ? vmx_get_msr+0xd66/0x1270 [ 47.309460][ T874] dump_stack+0x15/0x20 [ 47.313622][ T874] should_fail+0x3ab/0x500 [ 47.318043][ T874] should_fail_usercopy+0x1a/0x20 [ 47.323093][ T874] _copy_to_user+0x20/0x90 [ 47.327514][ T874] msr_io+0x23c/0x2c0 [ 47.331523][ T874] ? kvm_vcpu_ioctl_interrupt+0x370/0x370 [ 47.337258][ T874] ? kvm_arch_dev_ioctl+0x680/0x680 [ 47.342462][ T874] ? avc_has_perm+0x163/0x250 [ 47.347148][ T874] kvm_arch_vcpu_ioctl+0xc87/0x1b50 [ 47.352350][ T874] ? kvm_arch_vcpu_put+0x570/0x570 [ 47.357468][ T874] ? 0xffffffffa0018d18 [ 47.361621][ T874] ? is_bpf_text_address+0x177/0x190 [ 47.366908][ T874] ? __kernel_text_address+0xa0/0x100 [ 47.372285][ T874] ? unwind_get_return_address+0x4d/0x90 [ 47.377931][ T874] ? stack_trace_save+0xf0/0xf0 [ 47.382783][ T874] ? arch_stack_walk+0xee/0x140 [ 47.387641][ T874] ? stack_trace_save+0xa6/0xf0 [ 47.392498][ T874] ? __stack_depot_save+0x34/0x480 [ 47.397617][ T874] ? path_openat+0x284f/0x2f80 [ 47.402389][ T874] ? kasan_set_track+0x5b/0x70 [ 47.407151][ T874] ? kasan_set_track+0x4a/0x70 [ 47.411923][ T874] ? kasan_set_free_info+0x23/0x40 [ 47.417037][ T874] ? ____kasan_slab_free+0x125/0x160 [ 47.422323][ T874] ? __kasan_slab_free+0x11/0x20 [ 47.427273][ T874] ? slab_free_freelist_hook+0xc2/0x190 [ 47.432854][ T874] ? kmem_cache_free+0x100/0x320 [ 47.437795][ T874] ? __asan_set_shadow_00+0xe/0x10 [ 47.442907][ T874] ? do_vfs_ioctl+0x1c15/0x1d80 [ 47.447765][ T874] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 47.453406][ T874] ? kstrtouint_from_user+0x1c4/0x220 [ 47.458777][ T874] ? kstrtol_from_user+0x2a0/0x2a0 [ 47.463892][ T874] ? ioctl_has_perm+0x1b8/0x4f0 [ 47.468746][ T874] ? memcpy+0x56/0x70 [ 47.472739][ T874] ? __kasan_check_write+0x14/0x20 [ 47.477854][ T874] ? mutex_lock_killable+0x9b/0x1c0 [ 47.483063][ T874] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 47.489578][ T874] ? vfs_write+0xc72/0xfd0 [ 47.494090][ T874] kvm_vcpu_ioctl+0x6fb/0xc00 [ 47.498782][ T874] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 47.504413][ T874] ? selinux_file_ioctl+0x3ad/0x4c0 [ 47.509618][ T874] ? selinux_file_alloc_security+0x120/0x120 [ 47.515596][ T874] ? mutex_unlock+0x8f/0x230 [ 47.520235][ T874] ? __mutex_lock_slowpath+0x10/0x10 [ 47.525526][ T874] ? __fget_files+0x2e1/0x340 [ 47.530224][ T874] ? security_file_ioctl+0x84/0xa0 [ 47.535351][ T874] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 47.541009][ T874] __se_sys_ioctl+0x121/0x1a0 [ 47.545698][ T874] __x64_sys_ioctl+0x7b/0x90 [ 47.550298][ T874] x64_sys_call+0x2f/0x9a0 [ 47.554721][ T874] do_syscall_64+0x4c/0xa0 [ 47.559140][ T874] ? clear_bhb_loop+0x50/0xa0 [ 47.563820][ T874] ? clear_bhb_loop+0x50/0xa0 [ 47.568503][ T874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.574401][ T874] RIP: 0033:0x7f140e524e59 [ 47.578813][ T874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.598416][ T874] RSP: 002b:00007f140cf7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.606835][ T874] RAX: ffffffffffffffda RBX: 00007f140e7acfa0 RCX: 00007f140e524e59 [ 47.614814][ T874] RDX: 0000200000000000 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 47.622896][ T874] RBP: 00007f140cf7e090 R08: 0000000000000000 R09: 0000000000000000 [ 47.630869][ T874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.638843][ T874] R13: 00007f140e7ad038 R14: 00007f140e7acfa0 R15: 00007ffedcea28c8 [ 47.646821][ T874] [ 47.657582][ T440] udevd[440]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.848600][ T893] futex_wake_op: syz.1.185 tries to shift op by 144; fix this program [ 49.041417][ T898] overlayfs: './file0' not a directory [ 49.185912][ T891] set_capacity_and_notify: 8 callbacks suppressed [ 49.185925][ T891] loop3: detected capacity change from 0 to 40427 [ 49.206182][ T906] loop2: detected capacity change from 0 to 1024 [ 49.215442][ T891] F2FS-fs (loop3): fault_injection options not supported [ 49.245341][ T891] F2FS-fs (loop3): fault_type options not supported [ 49.262811][ T891] F2FS-fs (loop3): invalid crc value [ 49.283152][ T906] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 49.295682][ T891] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.334415][ T906] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 49.410020][ T891] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.449608][ T921] xt_hashlimit: size too large, truncated to 1048576 [ 49.467551][ T919] netlink: 'syz.0.187': attribute type 15 has an invalid length. [ 49.712133][ T928] attempt to access beyond end of device [ 49.712133][ T928] loop3: rw=2049, want=45104, limit=40427 [ 50.280478][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 50.280493][ T30] audit: type=1400 audit(1783521398.376:636): avc: denied { mmap_zero } for pid=925 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 50.502636][ T937] loop1: detected capacity change from 0 to 1024 [ 50.588610][ T30] audit: type=1400 audit(1783521398.686:637): avc: denied { create } for pid=934 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.643072][ T937] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 50.680779][ T937] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 50.692768][ T30] audit: type=1400 audit(1783521398.686:638): avc: denied { connect } for pid=934 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.737533][ T937] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 50.748199][ T30] audit: type=1400 audit(1783521398.686:639): avc: denied { ioctl } for pid=934 comm="syz.2.195" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18250 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.782252][ T937] EXT4-fs (loop1): invalid journal inode [ 50.788046][ T937] EXT4-fs (loop1): can't get journal size [ 50.802179][ T937] EXT4-fs error (device loop1): ext4_fill_super:4863: inode #2: comm syz.1.196: iget: bad extra_isize 65535 (inode size 1024) [ 50.822291][ T937] EXT4-fs (loop1): get root inode failed [ 50.838241][ T937] EXT4-fs (loop1): mount failed [ 50.872295][ T30] audit: type=1400 audit(1783521398.976:640): avc: denied { read } for pid=941 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.910472][ T30] audit: type=1326 audit(1783521399.006:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.4.198" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 50.945569][ T942] tipc: Started in network mode [ 50.950496][ T942] tipc: Node identity b2c3714a0344, cluster identity 4711 [ 50.961624][ T30] audit: type=1326 audit(1783521399.006:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.4.198" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 50.991288][ T30] audit: type=1326 audit(1783521399.006:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.4.198" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 51.009464][ T942] tipc: Enabled bearer , priority 0 [ 51.022748][ T30] audit: type=1326 audit(1783521399.006:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.4.198" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 51.048616][ T30] audit: type=1326 audit(1783521399.006:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=943 comm="syz.4.198" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 51.092788][ T949] futex_wake_op: syz.4.199 tries to shift op by 144; fix this program [ 51.185179][ T945] device syzkaller0 entered promiscuous mode [ 51.221599][ T957] loop1: detected capacity change from 0 to 512 [ 51.313580][ T957] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.358691][ T957] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.399961][ T957] FAULT_INJECTION: forcing a failure. [ 51.399961][ T957] name failslab, interval 1, probability 0, space 0, times 0 [ 51.416270][ T964] loop2: detected capacity change from 0 to 4096 [ 51.432891][ T957] CPU: 1 PID: 957 Comm: syz.1.202 Not tainted syzkaller #0 [ 51.440115][ T957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 51.450192][ T957] Call Trace: [ 51.453491][ T957] [ 51.456443][ T957] __dump_stack+0x21/0x30 [ 51.460805][ T957] dump_stack_lvl+0x110/0x170 [ 51.465505][ T957] ? show_regs_print_info+0x20/0x20 [ 51.470721][ T957] ? kstrtouint_from_user+0x1c4/0x220 [ 51.476110][ T957] dump_stack+0x15/0x20 [ 51.480281][ T957] should_fail+0x3ab/0x500 [ 51.484719][ T957] __should_failslab+0xa4/0xe0 [ 51.489501][ T957] should_failslab+0x9/0x20 [ 51.494021][ T957] slab_pre_alloc_hook+0x39/0xd0 [ 51.498977][ T957] ? getname_flags+0xba/0x510 [ 51.503667][ T957] kmem_cache_alloc+0x44/0x260 [ 51.508457][ T957] ? security_file_permission+0x79/0xa0 [ 51.514039][ T957] getname_flags+0xba/0x510 [ 51.518568][ T957] user_path_at_empty+0x2f/0x1c0 [ 51.523523][ T957] path_removexattr+0xdf/0x480 [ 51.528296][ T957] ? listxattr+0x300/0x300 [ 51.532730][ T957] ? __kasan_check_write+0x14/0x20 [ 51.537852][ T957] ? mutex_unlock+0x8f/0x230 [ 51.542457][ T957] ? __mutex_lock_slowpath+0x10/0x10 [ 51.547753][ T957] ? __kasan_check_write+0x14/0x20 [ 51.552888][ T957] ? fput_many+0x15a/0x1a0 [ 51.557314][ T957] ? fput+0x1a/0x20 [ 51.561130][ T957] ? ksys_write+0x1fa/0x260 [ 51.565649][ T957] ? __ia32_sys_read+0x90/0x90 [ 51.570429][ T957] ? debug_smp_processor_id+0x17/0x20 [ 51.575825][ T957] __x64_sys_removexattr+0x60/0x70 [ 51.580951][ T957] x64_sys_call+0xfa/0x9a0 [ 51.585383][ T957] do_syscall_64+0x4c/0xa0 [ 51.589819][ T957] ? clear_bhb_loop+0x50/0xa0 [ 51.594623][ T957] ? clear_bhb_loop+0x50/0xa0 [ 51.599307][ T957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.605402][ T957] RIP: 0033:0x7fb93278ae59 [ 51.609845][ T957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.629473][ T957] RSP: 002b:00007fb9311e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 51.637901][ T957] RAX: ffffffffffffffda RBX: 00007fb932a12fa0 RCX: 00007fb93278ae59 [ 51.645886][ T957] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000200000000580 [ 51.653894][ T957] RBP: 00007fb9311e4090 R08: 0000000000000000 R09: 0000000000000000 [ 51.661885][ T957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.669883][ T957] R13: 00007fb932a13038 R14: 00007fb932a12fa0 R15: 00007ffd56549448 [ 51.677901][ T957] [ 51.729926][ T964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.742110][ T862] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.916397][ T976] loop2: detected capacity change from 0 to 1024 [ 51.929327][ T976] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 51.956202][ T979] xt_hashlimit: size too large, truncated to 1048576 [ 51.967030][ T986] FAULT_INJECTION: forcing a failure. [ 51.967030][ T986] name failslab, interval 1, probability 0, space 0, times 0 [ 51.989802][ T976] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 52.002107][ T293] tipc: Node number set to 2978443594 [ 52.010902][ T986] CPU: 0 PID: 986 Comm: syz.1.212 Not tainted syzkaller #0 [ 52.018137][ T986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 52.028206][ T986] Call Trace: [ 52.031506][ T986] [ 52.034455][ T986] __dump_stack+0x21/0x30 [ 52.038808][ T986] dump_stack_lvl+0x110/0x170 [ 52.043505][ T986] ? show_regs_print_info+0x20/0x20 [ 52.048725][ T986] ? fault_around_bytes_set+0xc0/0xc0 [ 52.054135][ T986] dump_stack+0x15/0x20 [ 52.058302][ T986] should_fail+0x3ab/0x500 [ 52.062511][ T976] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 52.062746][ T986] __should_failslab+0xa4/0xe0 [ 52.077059][ T986] should_failslab+0x9/0x20 [ 52.079405][ T976] EXT4-fs (loop2): invalid journal inode [ 52.081578][ T986] slab_pre_alloc_hook+0x39/0xd0 [ 52.092143][ T986] ? dst_alloc+0x15c/0x1d0 [ 52.095626][ T976] EXT4-fs (loop2): can't get journal size [ 52.096590][ T986] kmem_cache_alloc+0x44/0x260 [ 52.102633][ T862] usb 4-1: config 0 has an invalid interface number: 42 but max is 8 [ 52.107101][ T986] dst_alloc+0x15c/0x1d0 [ 52.107125][ T986] ip_route_output_key_hash_rcu+0x13b5/0x1f90 [ 52.122873][ T862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 52.125481][ T986] ip_route_output_flow+0x138/0x2f0 [ 52.125502][ T986] ? ipv4_sk_update_pmtu+0x14e0/0x14e0 [ 52.144982][ T986] ? avc_denied+0x1b0/0x1b0 [ 52.148793][ T862] usb 4-1: config 0 has no interface number 0 [ 52.149506][ T986] raw_sendmsg+0xb07/0x13f0 [ 52.160066][ T986] ? compat_raw_ioctl+0x10/0x10 [ 52.164945][ T986] ? inet_send_prepare+0x60/0x4c0 [ 52.170001][ T986] inet_sendmsg+0xa5/0xc0 [ 52.174351][ T986] ? inet_send_prepare+0x4c0/0x4c0 [ 52.176061][ T862] usb 4-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 52.179473][ T986] ____sys_sendmsg+0x5be/0x8f0 [ 52.193271][ T986] ? __sys_sendmsg_sock+0x40/0x40 [ 52.198310][ T986] ? import_iovec+0x7c/0xb0 [ 52.202836][ T986] ___sys_sendmsg+0x236/0x2e0 [ 52.207524][ T986] ? _kstrtoull+0x3bb/0x4c0 [ 52.212051][ T986] ? __sys_sendmsg+0x280/0x280 [ 52.214990][ T862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.216844][ T986] __sys_sendmmsg+0x2ba/0x4e0 [ 52.229504][ T986] ? __ia32_sys_sendmsg+0x2d0/0x2d0 [ 52.234729][ T986] ? __ia32_sys_read+0x90/0x90 [ 52.239521][ T986] __x64_sys_sendmmsg+0xa0/0xb0 [ 52.244391][ T986] x64_sys_call+0x6c6/0x9a0 [ 52.247736][ T862] usb 4-1: config 0 descriptor?? [ 52.248918][ T986] do_syscall_64+0x4c/0xa0 [ 52.248943][ T986] ? clear_bhb_loop+0x50/0xa0 [ 52.248962][ T986] ? clear_bhb_loop+0x50/0xa0 [ 52.248980][ T986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.273586][ T986] RIP: 0033:0x7fb93278ae59 [ 52.278011][ T986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.297637][ T986] RSP: 002b:00007fb9311e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 52.306075][ T986] RAX: ffffffffffffffda RBX: 00007fb932a12fa0 RCX: 00007fb93278ae59 [ 52.314074][ T986] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 52.322088][ T986] RBP: 00007fb9311e4090 R08: 0000000000000000 R09: 0000000000000000 [ 52.330076][ T986] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000001 [ 52.338058][ T986] R13: 00007fb932a13038 R14: 00007fb932a12fa0 R15: 00007ffd56549448 [ 52.346127][ T986] [ 52.359985][ T976] EXT4-fs error (device loop2): ext4_fill_super:4863: inode #2: comm syz.2.210: iget: bad extra_isize 65535 (inode size 1024) [ 52.379794][ T976] EXT4-fs (loop2): get root inode failed [ 52.391024][ T976] EXT4-fs (loop2): mount failed [ 52.503042][ T942] UDC core: couldn't find an available UDC or it's busy: -16 [ 52.510547][ T942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 52.564823][ T994] futex_wake_op: syz.1.213 tries to shift op by 144; fix this program [ 52.752691][ T942] UDC core: couldn't find an available UDC or it's busy: -16 [ 52.850287][ T942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 52.905363][ T997] loop0: detected capacity change from 0 to 4096 [ 52.911065][ T1001] loop2: detected capacity change from 0 to 4096 [ 52.924136][ T1001] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.936158][ T997] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.965596][ T997] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.216: corrupted inode contents [ 52.977859][ T997] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #15: comm syz.0.216: mark_inode_dirty error [ 52.989368][ T997] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.216: corrupted inode contents [ 53.001574][ T997] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.216: mark_inode_dirty error [ 53.018993][ T997] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.216: corrupted inode contents [ 53.031241][ T997] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.216: mark_inode_dirty error [ 53.042876][ T997] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.216: corrupted inode contents [ 53.055287][ T997] EXT4-fs error (device loop0): ext4_truncate:4317: inode #15: comm syz.0.216: mark_inode_dirty error [ 53.066779][ T997] EXT4-fs error (device loop0): ext4_evict_inode:296: comm syz.0.216: couldn't truncate inode 15 (err -117) [ 53.094426][ T941] tipc: Resetting bearer [ 53.109269][ T941] tipc: Disabling bearer [ 53.122770][ T862] usb-storage 4-1:0.42: USB Mass Storage device detected [ 53.133914][ T862] usb-storage 4-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 53.195736][ T862] usb-storage 4-1:0.42: This device (04cb,0100,00bb S 04 P ff) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 53.195736][ T862] Please send a copy of this message to and [ 53.224520][ T862] usb 4-1: USB disconnect, device number 5 [ 53.328060][ T1014] netlink: 'syz.0.218': attribute type 15 has an invalid length. [ 53.627922][ T1017] netlink: 'syz.2.217': attribute type 15 has an invalid length. [ 54.130373][ T1028] loop4: detected capacity change from 0 to 256 [ 54.142054][ T1024] loop3: detected capacity change from 0 to 1024 [ 54.235316][ T1030] loop1: detected capacity change from 0 to 1024 [ 54.274342][ T1024] EXT4-fs (loop3): Invalid want_extra_isize 9 [ 54.303371][ T1024] netlink: 216 bytes leftover after parsing attributes in process `syz.3.222'. [ 54.330740][ T1032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.226'. [ 54.347092][ T1030] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 54.381574][ T1030] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 54.402487][ T1030] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 54.422629][ T1039] fuse: Unknown parameter 'groyp_)d' [ 54.440572][ T1038] xt_hashlimit: size too large, truncated to 1048576 [ 54.447350][ T1030] EXT4-fs (loop1): invalid journal inode [ 54.454138][ T1030] EXT4-fs (loop1): can't get journal size [ 54.475469][ T1030] EXT4-fs error (device loop1): ext4_fill_super:4863: inode #2: comm syz.1.224: iget: bad extra_isize 65535 (inode size 1024) [ 54.508042][ T1030] EXT4-fs (loop1): get root inode failed [ 54.513784][ T1030] EXT4-fs (loop1): mount failed [ 54.612261][ T1047] futex_wake_op: syz.0.229 tries to shift op by 144; fix this program [ 55.089073][ T1065] loop3: detected capacity change from 0 to 128 [ 55.111421][ T1066] device bridge0 entered promiscuous mode [ 55.125161][ T1066] bridge0: port 3(macsec1) entered blocking state [ 55.132522][ T1065] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 55.145812][ T1066] bridge0: port 3(macsec1) entered disabled state [ 55.152530][ T1065] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.165652][ T1066] device bridge0 left promiscuous mode [ 55.187085][ T1068] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1068 comm=syz.1.234 [ 55.238031][ T1065] syz.3.237 (1065): /proc/1064/oom_adj is deprecated, please use /proc/1064/oom_score_adj instead. [ 55.390435][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 55.390451][ T30] audit: type=1326 audit(1783521403.486:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.427933][ T1075] loop0: detected capacity change from 0 to 1024 [ 55.471844][ T1075] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 55.482631][ T1070] loop4: detected capacity change from 0 to 40427 [ 55.489206][ T30] audit: type=1326 audit(1783521403.516:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.520046][ T1075] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 55.530574][ T30] audit: type=1326 audit(1783521403.516:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.549558][ T1075] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 55.569518][ T30] audit: type=1326 audit(1783521403.516:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.596089][ T1080] xt_hashlimit: size too large, truncated to 1048576 [ 55.605028][ T30] audit: type=1326 audit(1783521403.526:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.629904][ T30] audit: type=1326 audit(1783521403.526:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.657695][ T30] audit: type=1326 audit(1783521403.526:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8959a668e code=0x7ffc0000 [ 55.699831][ T1075] EXT4-fs (loop0): invalid journal inode [ 55.706847][ T1070] F2FS-fs (loop4): fault_injection options not supported [ 55.715928][ T1075] EXT4-fs (loop0): can't get journal size [ 55.721767][ T1070] F2FS-fs (loop4): fault_type options not supported [ 55.735076][ T1075] EXT4-fs error (device loop0): ext4_fill_super:4863: inode #2: comm syz.0.240: iget: bad extra_isize 65535 (inode size 1024) [ 55.749939][ T1070] F2FS-fs (loop4): invalid crc value [ 55.766351][ T1075] EXT4-fs (loop0): get root inode failed [ 55.786976][ T30] audit: type=1326 audit(1783521403.526:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.820568][ T1075] EXT4-fs (loop0): mount failed [ 55.827488][ T1070] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.884126][ T30] audit: type=1326 audit(1783521403.526:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.911502][ T30] audit: type=1326 audit(1783521403.526:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.3.239" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb8959e5e59 code=0x7ffc0000 [ 55.946354][ T1070] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.973036][ T1090] input: syz0 as /devices/virtual/input/input5 [ 56.106436][ T1099] FAULT_INJECTION: forcing a failure. [ 56.106436][ T1099] name failslab, interval 1, probability 0, space 0, times 0 [ 56.125330][ T1095] attempt to access beyond end of device [ 56.125330][ T1095] loop4: rw=2049, want=45104, limit=40427 [ 56.144932][ T1102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.247'. [ 56.146989][ T1099] CPU: 1 PID: 1099 Comm: syz.3.246 Not tainted syzkaller #0 [ 56.161178][ T1099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 56.171261][ T1099] Call Trace: [ 56.174571][ T1099] [ 56.177515][ T1099] __dump_stack+0x21/0x30 [ 56.181859][ T1099] dump_stack_lvl+0x110/0x170 [ 56.186547][ T1099] ? show_regs_print_info+0x20/0x20 [ 56.191762][ T1099] dump_stack+0x15/0x20 [ 56.195952][ T1099] should_fail+0x3ab/0x500 [ 56.200388][ T1099] __should_failslab+0xa4/0xe0 [ 56.205316][ T1099] should_failslab+0x9/0x20 [ 56.209850][ T1099] slab_pre_alloc_hook+0x39/0xd0 [ 56.214824][ T1099] ? kvm_mmu_topup_memory_cache+0xd8/0x210 [ 56.220673][ T1099] kmem_cache_alloc+0x44/0x260 [ 56.225482][ T1099] kvm_mmu_topup_memory_cache+0xd8/0x210 [ 56.231150][ T1099] kvm_mmu_load+0x88/0x1ea0 [ 56.235688][ T1099] ? kvm_apic_accept_events+0x576/0x580 [ 56.241269][ T1099] ? _raw_spin_lock+0xf0/0xf0 [ 56.245967][ T1099] ? kvm_apic_has_interrupt+0x776/0x780 [ 56.251516][ T1099] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 56.257154][ T1099] vcpu_enter_guest+0x4edb/0x6600 [ 56.262187][ T1099] ? avc_has_perm+0x163/0x250 [ 56.266875][ T1099] ? local_bh_enable+0x30/0x30 [ 56.271645][ T1099] ? avc_has_perm_noaudit+0x490/0x490 [ 56.277046][ T1099] ? inode_doinit_with_dentry+0xf6/0xd90 [ 56.282692][ T1099] ? 0xffffffffa001a000 [ 56.286843][ T1099] ? is_bpf_text_address+0x177/0x190 [ 56.292139][ T1099] ? __kernel_text_address+0xa0/0x100 [ 56.297518][ T1099] ? unwind_get_return_address+0x4d/0x90 [ 56.303154][ T1099] ? stack_trace_save+0xf0/0xf0 [ 56.308016][ T1099] ? arch_stack_walk+0xee/0x140 [ 56.312880][ T1099] ? stack_trace_save+0xa6/0xf0 [ 56.317737][ T1099] ? __stack_depot_save+0x34/0x480 [ 56.322853][ T1099] ? path_openat+0x284f/0x2f80 [ 56.327759][ T1099] ? kasan_set_track+0x5b/0x70 [ 56.332537][ T1099] ? __kasan_check_read+0x11/0x20 [ 56.337605][ T1099] ? vmx_vcpu_pi_load+0xa1/0x370 [ 56.342556][ T1099] ? __kasan_check_write+0x14/0x20 [ 56.347689][ T1099] ? kvm_arch_vcpu_load+0x56f/0x760 [ 56.352901][ T1099] ? local_bh_enable+0x1f/0x30 [ 56.357679][ T1099] ? kvm_load_guest_fpu+0x12a/0x240 [ 56.362894][ T1099] kvm_arch_vcpu_ioctl_run+0xfa7/0x2020 [ 56.368449][ T1099] kvm_vcpu_ioctl+0x8ed/0xc00 [ 56.373147][ T1099] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 56.378785][ T1099] ? selinux_file_ioctl+0x3ad/0x4c0 [ 56.384001][ T1099] ? selinux_file_alloc_security+0x120/0x120 [ 56.389987][ T1099] ? mutex_unlock+0x8f/0x230 [ 56.394579][ T1099] ? __mutex_lock_slowpath+0x10/0x10 [ 56.399860][ T1099] ? __fget_files+0x2e1/0x340 [ 56.404543][ T1099] ? security_file_ioctl+0x84/0xa0 [ 56.409679][ T1099] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 56.415458][ T1099] __se_sys_ioctl+0x121/0x1a0 [ 56.420154][ T1099] __x64_sys_ioctl+0x7b/0x90 [ 56.424771][ T1099] x64_sys_call+0x2f/0x9a0 [ 56.429192][ T1099] do_syscall_64+0x4c/0xa0 [ 56.433615][ T1099] ? clear_bhb_loop+0x50/0xa0 [ 56.438299][ T1099] ? clear_bhb_loop+0x50/0xa0 [ 56.442985][ T1099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.448888][ T1099] RIP: 0033:0x7fb8959e5e59 [ 56.453311][ T1099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.472923][ T1099] RSP: 002b:00007fb89443f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.481357][ T1099] RAX: ffffffffffffffda RBX: 00007fb895c6dfa0 RCX: 00007fb8959e5e59 [ 56.489353][ T1099] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 56.497333][ T1099] RBP: 00007fb89443f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.505511][ T1099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.513493][ T1099] R13: 00007fb895c6e038 R14: 00007fb895c6dfa0 R15: 00007fff39f04058 [ 56.521481][ T1099] [ 56.548272][ T1105] xt_hashlimit: size too large, truncated to 1048576 [ 56.682097][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 56.766798][ T1112] futex_wake_op: syz.3.250 tries to shift op by 144; fix this program [ 57.332814][ T1123] netlink: 'syz.0.253': attribute type 15 has an invalid length. [ 57.344182][ T862] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 57.372223][ T6] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 57.390846][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.409145][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.427541][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 57.485396][ T1134] loop3: detected capacity change from 0 to 256 [ 57.486605][ T1132] loop4: detected capacity change from 0 to 1024 [ 57.512179][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 57.521341][ T6] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 57.529471][ T6] usb 2-1: Manufacturer: syz [ 57.542319][ T6] usb 2-1: config 0 descriptor?? [ 57.551310][ T1132] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 57.564714][ T1132] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 57.584270][ T1132] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 57.592772][ T862] usb 3-1: Using ep0 maxpacket: 32 [ 57.600492][ T1132] EXT4-fs (loop4): invalid journal inode [ 57.608638][ T1132] EXT4-fs (loop4): can't get journal size [ 57.615103][ T1132] EXT4-fs error (device loop4): ext4_fill_super:4863: inode #2: comm syz.4.257: iget: bad extra_isize 65535 (inode size 1024) [ 57.628416][ T1132] EXT4-fs (loop4): get root inode failed [ 57.634345][ T1132] EXT4-fs (loop4): mount failed [ 57.661492][ T1137] loop3: detected capacity change from 0 to 1024 [ 57.694339][ T1137] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 57.708057][ T1137] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 57.719095][ T862] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 57.722408][ T1137] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 57.728717][ T862] usb 3-1: config 0 has no interface number 0 [ 57.764504][ T1137] EXT4-fs (loop3): invalid journal inode [ 57.770205][ T1137] EXT4-fs (loop3): can't get journal size [ 57.787417][ T1140] loop4: detected capacity change from 0 to 512 [ 57.795993][ T1137] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.259: iget: bad extra_isize 65535 (inode size 1024) [ 57.822712][ T1137] EXT4-fs (loop3): get root inode failed [ 57.828475][ T1137] EXT4-fs (loop3): mount failed [ 57.833763][ T1140] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.841814][ T1140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 57.850624][ T1140] System zones: 0-1, 15-15, 18-18, 34-34 [ 57.858481][ T1140] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.865373][ T1140] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.880260][ T1140] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 57.888197][ T1140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.260: bg 0: block 40: padding at end of block bitmap is not set [ 57.902890][ T1140] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 57.911756][ T1140] EXT4-fs (loop4): 1 truncate cleaned up [ 57.917713][ T1140] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 57.931210][ T862] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 57.956165][ T862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.972056][ T862] usb 3-1: Product: syz [ 57.987031][ T862] usb 3-1: Manufacturer: syz [ 58.019730][ T862] usb 3-1: SerialNumber: syz [ 58.028023][ T1146] loop3: detected capacity change from 0 to 256 [ 58.036384][ T862] usb 3-1: config 0 descriptor?? [ 58.037500][ T6] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 58.043303][ T1140] overlayfs: upper fs is r/o, try multi-lower layers mount [ 58.057908][ T6] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 58.072612][ T862] smsc95xx v2.0.0 [ 58.121478][ T1146] FAULT_INJECTION: forcing a failure. [ 58.121478][ T1146] name failslab, interval 1, probability 0, space 0, times 0 [ 58.152126][ T1146] CPU: 0 PID: 1146 Comm: syz.3.261 Not tainted syzkaller #0 [ 58.159442][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 58.169541][ T1146] Call Trace: [ 58.172832][ T1146] [ 58.175768][ T1146] __dump_stack+0x21/0x30 [ 58.180107][ T1146] dump_stack_lvl+0x110/0x170 [ 58.184796][ T1146] ? show_regs_print_info+0x20/0x20 [ 58.190008][ T1146] dump_stack+0x15/0x20 [ 58.194174][ T1146] should_fail+0x3ab/0x500 [ 58.198609][ T1146] __should_failslab+0xa4/0xe0 [ 58.203474][ T1146] should_failslab+0x9/0x20 [ 58.208002][ T1146] slab_pre_alloc_hook+0x39/0xd0 [ 58.212959][ T1146] ? __d_alloc+0x2d/0x690 [ 58.217322][ T1146] kmem_cache_alloc+0x44/0x260 [ 58.222110][ T1146] __d_alloc+0x2d/0x690 [ 58.226280][ T1146] d_alloc+0x48/0x260 [ 58.230284][ T1146] ? lookup_one_qstr_excl+0xb6/0x250 [ 58.235588][ T1146] lookup_one_qstr_excl+0xcb/0x250 [ 58.240719][ T1146] filename_create+0x23d/0x440 [ 58.245507][ T1146] ? kern_path_create+0x1b0/0x1b0 [ 58.250560][ T1146] do_mkdirat+0x5c/0x4d0 [ 58.254851][ T1146] ? getname_flags+0x205/0x510 [ 58.259635][ T1146] __x64_sys_mkdirat+0x89/0xa0 [ 58.264429][ T1146] x64_sys_call+0x37e/0x9a0 [ 58.268952][ T1146] do_syscall_64+0x4c/0xa0 [ 58.273389][ T1146] ? clear_bhb_loop+0x50/0xa0 [ 58.278082][ T1146] ? clear_bhb_loop+0x50/0xa0 [ 58.282781][ T1146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.288698][ T1146] RIP: 0033:0x7fb8959e4cc7 [ 58.293144][ T1146] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.312775][ T1146] RSP: 002b:00007fb89443ee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 58.321240][ T1146] RAX: ffffffffffffffda RBX: 00007fb89443eee0 RCX: 00007fb8959e4cc7 [ 58.322201][ T306] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 58.329231][ T1146] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 58.329249][ T1146] RBP: 0000000000000000 R08: 0000200000000140 R09: 0000000000000000 [ 58.329263][ T1146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 58.360652][ T1146] R13: 00007fb89443eea0 R14: 0000000000000000 R15: 0000000000000000 [ 58.368648][ T1146] [ 58.432189][ T862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 58.456225][ T862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 58.533872][ T862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 58.546981][ T862] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 58.554737][ T862] usb 3-1: USB disconnect, device number 5 [ 58.582174][ T306] usb 5-1: Using ep0 maxpacket: 32 [ 58.701878][ T1161] loop2: detected capacity change from 0 to 16 [ 58.709421][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 58.736081][ T306] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 58.802980][ T1161] erofs: (device loop2): mounted with root inode @ nid 36. [ 58.884664][ T306] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 59.019914][ T306] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 59.262337][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=bba1, bcdDevice=55.da [ 59.296754][ T306] usb 5-1: New USB device strings: Mfr=107, Product=2, SerialNumber=3 [ 59.622283][ T306] usb 5-1: Product: syz [ 59.626503][ T306] usb 5-1: Manufacturer: syz [ 59.631116][ T306] usb 5-1: SerialNumber: syz [ 59.654308][ T26] usb 2-1: USB disconnect, device number 3 [ 59.848199][ T1174] loop2: detected capacity change from 0 to 256 [ 59.864620][ T1176] loop1: detected capacity change from 0 to 256 [ 59.886026][ T1178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.270'. [ 59.895625][ T1176] exfat: Deprecated parameter 'namecase' [ 59.896733][ T1174] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 59.901337][ T1176] exfat: Deprecated parameter 'namecase' [ 59.932535][ T306] cdc_ncm 5-1:1.0: skipping garbage [ 59.937930][ T306] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 59.945511][ T306] cdc_ncm 5-1:1.0: bind() failure [ 59.961863][ T306] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 59.974752][ T306] cdc_ncm 5-1:1.1: bind() failure [ 59.979009][ T1180] loop0: detected capacity change from 0 to 256 [ 59.990680][ T306] usb 5-1: USB disconnect, device number 8 [ 60.001090][ T1176] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 60.013929][ T1174] attempt to access beyond end of device [ 60.013929][ T1174] loop2: rw=524288, want=11192, limit=256 [ 60.025818][ T1174] attempt to access beyond end of device [ 60.025818][ T1174] loop2: rw=524288, want=11448, limit=256 [ 60.044019][ T1174] attempt to access beyond end of device [ 60.044019][ T1174] loop2: rw=0, want=10944, limit=256 [ 60.058405][ T1174] attempt to access beyond end of device [ 60.058405][ T1174] loop2: rw=0, want=10944, limit=256 [ 60.060324][ T1180] FAT-fs (loop0): Directory bread(block 64) failed [ 60.069862][ T1174] attempt to access beyond end of device [ 60.069862][ T1174] loop2: rw=0, want=10944, limit=256 [ 60.089197][ T1174] attempt to access beyond end of device [ 60.089197][ T1174] loop2: rw=0, want=10944, limit=256 [ 60.112260][ T1180] FAT-fs (loop0): Directory bread(block 65) failed [ 60.128063][ T1180] FAT-fs (loop0): Directory bread(block 66) failed [ 60.136047][ T1174] attempt to access beyond end of device [ 60.136047][ T1174] loop2: rw=0, want=10944, limit=256 [ 60.141432][ T1180] FAT-fs (loop0): Directory bread(block 67) failed [ 60.176763][ T1180] FAT-fs (loop0): Directory bread(block 68) failed [ 60.183652][ T6] kernel write not supported for file /vcs (pid: 6 comm: kworker/0:0) [ 60.194645][ T1185] loop3: detected capacity change from 0 to 512 [ 60.200996][ T1180] FAT-fs (loop0): Directory bread(block 69) failed [ 60.208113][ T1180] FAT-fs (loop0): Directory bread(block 70) failed [ 60.214802][ T1180] FAT-fs (loop0): Directory bread(block 71) failed [ 60.221545][ T1180] FAT-fs (loop0): Directory bread(block 72) failed [ 60.228310][ T1180] FAT-fs (loop0): Directory bread(block 73) failed [ 60.244791][ T1180] attempt to access beyond end of device [ 60.244791][ T1180] loop0: rw=2051, want=1256, limit=256 [ 60.262326][ T1174] attempt to access beyond end of device [ 60.262326][ T1174] loop2: rw=0, want=10944, limit=256 [ 60.296211][ T1185] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 60.314881][ T1185] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.326404][ T1185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 60.351086][ T1185] xt_hashlimit: size too large, truncated to 1048576 [ 60.395536][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 60.395551][ T30] audit: type=1400 audit(1783521408.496:814): avc: denied { name_bind } for pid=1184 comm="syz.3.272" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 60.453254][ T30] audit: type=1400 audit(1783521408.546:815): avc: denied { create } for pid=1184 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 60.664224][ T1197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.891228][ T30] audit: type=1326 audit(1783521408.986:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1203 comm="syz.3.277" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8959e5e59 code=0x0 [ 60.993746][ T1213] loop3: detected capacity change from 0 to 512 [ 61.142868][ T1216] netlink: 'syz.0.281': attribute type 15 has an invalid length. [ 61.244253][ T1213] EXT4-fs (loop3): Ignoring removed orlov option [ 61.652212][ T1213] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.096026][ T1220] netlink: 'syz.1.282': attribute type 15 has an invalid length. [ 62.304250][ T1213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.878698][ T1213] EXT4-fs (loop3): inodes count not valid: 40 vs 32 [ 62.889260][ T1224] loop4: detected capacity change from 0 to 512 [ 63.313892][ T1224] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.634959][ T1224] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.124437][ T1224] SELinux: policydb string length -234974456 does not match expected length 8 [ 64.138164][ T30] audit: type=1400 audit(1783521412.226:817): avc: denied { load_policy } for pid=1223 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.194199][ T1224] SELinux: failed to load policy [ 64.691740][ T1262] netlink: 'syz.4.294': attribute type 15 has an invalid length. [ 65.460115][ T30] audit: type=1400 audit(1783521413.556:818): avc: denied { bind } for pid=1244 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.502518][ T1228] loop1: detected capacity change from 0 to 131072 [ 65.532638][ T1228] F2FS-fs (loop1): Test dummy encryption mode enabled [ 65.565824][ T1228] F2FS-fs (loop1): invalid crc value [ 65.597329][ T1228] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.648442][ T1268] loop0: detected capacity change from 0 to 256 [ 65.697729][ T384] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 65.722963][ T1268] FAT-fs (loop0): Directory bread(block 64) failed [ 65.730149][ T1268] FAT-fs (loop0): Directory bread(block 65) failed [ 65.739268][ T1268] FAT-fs (loop0): Directory bread(block 66) failed [ 65.746094][ T1268] FAT-fs (loop0): Directory bread(block 67) failed [ 65.753007][ T1268] FAT-fs (loop0): Directory bread(block 68) failed [ 65.759569][ T1228] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.767318][ T1268] FAT-fs (loop0): Directory bread(block 69) failed [ 65.774391][ T1268] FAT-fs (loop0): Directory bread(block 70) failed [ 65.781528][ T1268] FAT-fs (loop0): Directory bread(block 71) failed [ 65.791796][ T1268] FAT-fs (loop0): Directory bread(block 72) failed [ 65.798518][ T30] audit: type=1400 audit(1783521413.896:819): avc: denied { read write open } for pid=1227 comm="syz.1.286" path="/72/bus/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.803629][ T1268] FAT-fs (loop0): Directory bread(block 73) failed [ 65.848769][ T1268] handle_bad_sector: 8119 callbacks suppressed [ 65.848785][ T1268] attempt to access beyond end of device [ 65.848785][ T1268] loop0: rw=2051, want=1256, limit=256 [ 65.866106][ T30] audit: type=1400 audit(1783521413.926:820): avc: denied { map } for pid=1227 comm="syz.1.286" path="/72/bus/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.922790][ T1275] loop4: detected capacity change from 0 to 128 [ 65.933869][ T1275] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 65.944624][ T335] udevd[335]: incorrect ext4 checksum on /dev/loop4 [ 65.966557][ T335] udevd[335]: incorrect ext4 checksum on /dev/loop4 [ 65.992126][ T384] usb 3-1: device descriptor read/64, error -71 [ 66.013024][ T1275] loop4: detected capacity change from 0 to 1024 [ 66.052210][ T60] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 66.085717][ T30] audit: type=1326 audit(1783521414.186:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1286 comm="syz.4.301" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 66.112850][ T1287] loop4: detected capacity change from 0 to 256 [ 66.119212][ T30] audit: type=1326 audit(1783521414.186:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1286 comm="syz.4.301" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 66.144192][ T30] audit: type=1326 audit(1783521414.186:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1286 comm="syz.4.301" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 66.169653][ T30] audit: type=1326 audit(1783521414.186:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1286 comm="syz.4.301" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 66.202134][ T30] audit: type=1326 audit(1783521414.186:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1286 comm="syz.4.301" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 66.269806][ T1284] loop3: detected capacity change from 0 to 8192 [ 66.302910][ T30] audit: type=1326 audit(1783521414.186:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1286 comm="syz.4.301" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 66.327678][ T30] audit: type=1326 audit(1783521414.216:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1286 comm="syz.4.301" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd764a94e59 code=0x7ffc0000 [ 66.708886][ T1291] loop1: detected capacity change from 0 to 1024 [ 67.059105][ T1291] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.099927][ T1297] loop3: detected capacity change from 0 to 4096 [ 67.217018][ T1297] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.229190][ T1291] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,noquota,barrier,auto_da_alloc,dioread_nolock,. Quota mode: none. [ 67.274161][ T1297] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.303: corrupted inode contents [ 67.288346][ T1304] loop0: detected capacity change from 0 to 4096 [ 67.312677][ T1291] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.313432][ T1297] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #15: comm syz.3.303: mark_inode_dirty error [ 67.343865][ T1297] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.303: corrupted inode contents [ 67.356061][ T1297] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.303: mark_inode_dirty error [ 67.367612][ T1297] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.303: corrupted inode contents [ 67.379856][ T1297] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.303: mark_inode_dirty error [ 67.391539][ T1297] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.303: corrupted inode contents [ 67.415753][ T384] usb 3-1: device descriptor read/64, error -71 [ 67.423041][ T1304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.436685][ T1297] EXT4-fs error (device loop3): ext4_truncate:4317: inode #15: comm syz.3.303: mark_inode_dirty error [ 67.448017][ T1297] EXT4-fs error (device loop3) in ext4_setattr:5676: Corrupt filesystem [ 67.460393][ T1308] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.303: corrupted inode contents [ 67.473314][ T1304] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.306: corrupted inode contents [ 67.548198][ T1304] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #15: comm syz.0.306: mark_inode_dirty error [ 67.565935][ T290] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 67.577463][ T1304] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.306: corrupted inode contents [ 67.589488][ T1304] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.306: mark_inode_dirty error [ 67.636485][ T1304] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.306: corrupted inode contents [ 67.652403][ T1315] netlink: 'syz.2.307': attribute type 15 has an invalid length. [ 67.991408][ T1319] loop3: detected capacity change from 0 to 1024 [ 68.016859][ T1304] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.306: mark_inode_dirty error [ 68.107676][ T1319] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 68.201188][ T1304] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.306: corrupted inode contents [ 68.226111][ T1319] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 68.385748][ T1304] EXT4-fs error (device loop0): ext4_truncate:4317: inode #15: comm syz.0.306: mark_inode_dirty error [ 68.396974][ T1319] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 68.432697][ T1319] EXT4-fs (loop3): invalid journal inode [ 68.438405][ T1319] EXT4-fs (loop3): can't get journal size [ 68.444489][ T1304] EXT4-fs error (device loop0) in ext4_setattr:5676: Corrupt filesystem [ 68.464625][ T1312] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.306: corrupted inode contents [ 68.482393][ T1319] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.308: iget: bad extra_isize 65535 (inode size 1024) [ 68.512221][ T1319] EXT4-fs (loop3): get root inode failed [ 68.522940][ T287] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 68.542122][ T1319] EXT4-fs (loop3): mount failed [ 68.664409][ T1323] fuse: Unknown parameter 'ÿÿ0x0000000000000006' [ 68.742148][ T1331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.312'. [ 68.887081][ T1337] kvm [1336]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 68.916422][ T1337] kvm [1336]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 68.942280][ T1337] kvm [1336]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 68.961243][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 68.980172][ T1345] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.013102][ T1327] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 69.020856][ T1327] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 69.030104][ T1327] F2FS-fs (loop2): invalid crc value [ 69.110752][ T1359] futex_wake_op: syz.3.319 tries to shift op by 144; fix this program [ 69.306863][ T1327] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.372165][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 69.372194][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 69.452964][ T1327] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 69.460161][ T1327] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.491984][ T1327] attempt to access beyond end of device [ 69.491984][ T1327] loop2: rw=10241, want=45104, limit=40427 [ 69.526312][ T8] attempt to access beyond end of device [ 69.526312][ T8] loop2: rw=1, want=45104, limit=40427 [ 69.623113][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 69.683361][ T1364] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 69.692890][ T1364] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.713927][ T1364] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 69.737154][ T1364] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.752202][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.769727][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 42408, setting to 1024 [ 69.791210][ T39] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.804139][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.813841][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.823589][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.022197][ T39] usb 2-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40 [ 70.032202][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 70.041497][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 70.059333][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.087187][ T26] usb 1-1: Product: syz [ 70.095256][ T1374] netlink: 'syz.2.323': attribute type 15 has an invalid length. [ 70.124868][ T39] usb 2-1: Product: syz [ 70.143916][ T26] usb 1-1: Manufacturer: syz [ 70.173124][ T39] usb 2-1: Manufacturer: syz [ 70.188103][ T26] usb 1-1: SerialNumber: syz [ 70.222302][ T39] usb 2-1: SerialNumber: syz [ 70.342474][ T1352] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 70.531232][ T26] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 70.692233][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 70.692311][ T30] audit: type=1400 audit(1783521418.686:885): avc: denied { wake_alarm } for pid=1346 comm="syz.1.318" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.848447][ T1349] set_capacity_and_notify: 4 callbacks suppressed [ 70.848465][ T1349] loop1: detected capacity change from 0 to 1024 [ 70.886145][ T1354] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_1 [ 70.913055][ T26] usb 1-1: USB disconnect, device number 5 [ 70.926831][ T26] usblp0: removed [ 70.970862][ T30] audit: type=1400 audit(1783521418.946:886): avc: denied { read write } for pid=1353 comm="syz.0.320" name="lp0" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 71.033920][ T1349] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 71.054517][ T1378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.324'. [ 71.090342][ T1349] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 71.109936][ T30] audit: type=1400 audit(1783521418.946:887): avc: denied { open } for pid=1353 comm="syz.0.320" path="/dev/usb/lp0" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 71.155107][ T1349] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.318: Failed to acquire dquot type 0 [ 71.187209][ T1387] loop2: detected capacity change from 0 to 1024 [ 71.199497][ T1389] loop4: detected capacity change from 0 to 256 [ 71.209673][ T30] audit: type=1400 audit(1783521418.986:888): avc: denied { read } for pid=1353 comm="syz.0.320" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 71.236956][ T1349] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 71.261144][ T1349] EXT4-fs (loop1): 1 truncate cleaned up [ 71.267023][ T30] audit: type=1400 audit(1783521418.986:889): avc: denied { open } for pid=1353 comm="syz.0.320" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 71.291844][ T1387] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 71.301751][ T1349] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,inlinecrypt,,errors=continue. Quota mode: writeback. [ 71.312036][ T1387] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 71.336853][ T1389] FAT-fs (loop4): Directory bread(block 64) failed [ 71.344291][ T1387] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 71.357375][ T1387] EXT4-fs (loop2): invalid journal inode [ 71.369122][ T1387] EXT4-fs (loop2): can't get journal size [ 71.373118][ T1389] FAT-fs (loop4): Directory bread(block 65) failed [ 71.381949][ T1389] FAT-fs (loop4): Directory bread(block 66) failed [ 71.389354][ T1387] EXT4-fs error (device loop2): ext4_fill_super:4863: inode #2: comm syz.2.327: iget: bad extra_isize 65535 (inode size 1024) [ 71.390828][ T1389] FAT-fs (loop4): Directory bread(block 67) failed [ 71.410527][ T1387] EXT4-fs (loop2): get root inode failed [ 71.419426][ T1389] FAT-fs (loop4): Directory bread(block 68) failed [ 71.424649][ T1387] EXT4-fs (loop2): mount failed [ 71.433185][ T1389] FAT-fs (loop4): Directory bread(block 69) failed [ 71.439738][ T1389] FAT-fs (loop4): Directory bread(block 70) failed [ 71.452138][ T1389] FAT-fs (loop4): Directory bread(block 71) failed [ 71.462230][ T1389] FAT-fs (loop4): Directory bread(block 72) failed [ 71.468764][ T1389] FAT-fs (loop4): Directory bread(block 73) failed [ 71.524872][ T39] usb 2-1: USB disconnect, device number 4 [ 71.549161][ T1389] attempt to access beyond end of device [ 71.549161][ T1389] loop4: rw=2051, want=1256, limit=256 [ 71.564277][ T1392] loop0: detected capacity change from 0 to 4096 [ 71.620687][ T30] audit: type=1400 audit(1783521419.716:890): avc: denied { set_context_mgr } for pid=1398 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.641224][ T1399] binder: 1398:1399 ioctl 4c01 0 returned -22 [ 71.648867][ T1392] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 71.714056][ T1403] futex_wake_op: syz.2.332 tries to shift op by 144; fix this program [ 71.792572][ T1392] EXT4-fs (loop0): Unsupported encryption level 6 [ 71.981074][ T30] audit: type=1400 audit(1783521419.826:891): avc: denied { write } for pid=1396 comm="syz.2.332" name="icmp" dev="proc" ino=4026532568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.053663][ T30] audit: type=1400 audit(1783521420.156:892): avc: denied { link } for pid=1406 comm="syz.1.334" name="#9" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.272611][ T1368] loop3: detected capacity change from 0 to 131072 [ 72.284942][ T1368] F2FS-fs (loop3): Test dummy encryption mode enabled [ 72.349252][ T1417] netlink: 'syz.0.337': attribute type 15 has an invalid length. [ 72.365209][ T1368] F2FS-fs (loop3): invalid crc value [ 72.713345][ T1421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.338'. [ 72.745816][ T1368] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.104413][ T1411] loop1: detected capacity change from 0 to 40427 [ 73.163264][ T1426] loop2: detected capacity change from 0 to 128 [ 73.193453][ T1411] F2FS-fs (loop1): fault_injection options not supported [ 73.200588][ T1411] F2FS-fs (loop1): fault_type options not supported [ 73.246547][ T1411] F2FS-fs (loop1): invalid crc value [ 73.263160][ T1411] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.271711][ T1413] loop4: detected capacity change from 0 to 40427 [ 73.283836][ T1426] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.294522][ T1426] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.320249][ T1411] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.438473][ T1413] F2FS-fs (loop4): fault_injection options not supported [ 73.445938][ T1413] F2FS-fs (loop4): fault_type options not supported [ 73.464583][ T1434] loop0: detected capacity change from 0 to 256 [ 73.471028][ T1413] F2FS-fs (loop4): invalid crc value [ 73.488754][ T1434] FAT-fs (loop0): Directory bread(block 64) failed [ 73.495323][ T1434] FAT-fs (loop0): Directory bread(block 65) failed [ 73.501935][ T1434] FAT-fs (loop0): Directory bread(block 66) failed [ 73.510133][ T1434] FAT-fs (loop0): Directory bread(block 67) failed [ 73.517475][ T1434] FAT-fs (loop0): Directory bread(block 68) failed [ 73.524806][ T1434] FAT-fs (loop0): Directory bread(block 69) failed [ 73.531567][ T1434] FAT-fs (loop0): Directory bread(block 70) failed [ 73.539295][ T1434] FAT-fs (loop0): Directory bread(block 71) failed [ 73.546750][ T1434] FAT-fs (loop0): Directory bread(block 72) failed [ 73.554378][ T1434] FAT-fs (loop0): Directory bread(block 73) failed [ 73.569279][ T1413] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.792286][ T1438] attempt to access beyond end of device [ 73.792286][ T1438] loop1: rw=2049, want=45104, limit=40427 [ 74.443343][ T39] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 74.499217][ T1434] attempt to access beyond end of device [ 74.499217][ T1434] loop0: rw=2051, want=1256, limit=256 [ 74.556372][ T1413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 74.842215][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.885202][ T1448] attempt to access beyond end of device [ 74.885202][ T1448] loop4: rw=2049, want=45104, limit=40427 [ 75.009806][ T39] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 75.450567][ T39] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 75.562244][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.584863][ T1453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.592132][ T1453] IPv6: NLM_F_CREATE should be set when creating new route [ 75.599588][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.621625][ T39] usb 3-1: SerialNumber: syz [ 75.673748][ T39] cdc_acm 3-1:1.0: Zero length descriptor references [ 75.680459][ T39] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 75.803988][ T1466] futex_wake_op: syz.3.348 tries to shift op by 144; fix this program [ 75.888695][ T39] usb 3-1: USB disconnect, device number 8 [ 75.922156][ T1234] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 76.182131][ T1234] usb 1-1: Using ep0 maxpacket: 32 [ 76.299802][ T1471] loop4: detected capacity change from 0 to 40427 [ 76.342263][ T1234] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 76.350714][ T1234] usb 1-1: config 0 has no interface number 0 [ 76.368719][ T1475] netlink: 'syz.1.352': attribute type 15 has an invalid length. [ 76.456920][ T1471] F2FS-fs (loop4): fault_injection options not supported [ 76.473607][ T1471] F2FS-fs (loop4): fault_type options not supported [ 76.488316][ T1471] F2FS-fs (loop4): invalid crc value [ 76.501656][ T1471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.532356][ T1234] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 76.867148][ T1234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.003762][ T1471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.125713][ T1234] usb 1-1: Product: syz [ 77.129925][ T1234] usb 1-1: Manufacturer: syz [ 77.175144][ T1234] usb 1-1: SerialNumber: syz [ 77.257561][ T1234] usb 1-1: config 0 descriptor?? [ 77.376821][ T1488] attempt to access beyond end of device [ 77.376821][ T1488] loop4: rw=2049, want=45104, limit=40427 [ 77.395135][ T1234] smsc95xx v2.0.0 [ 77.652141][ T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 77.745810][ T1479] loop2: detected capacity change from 0 to 40427 [ 77.782706][ T1479] F2FS-fs (loop2): fault_injection options not supported [ 77.793622][ T1479] F2FS-fs (loop2): fault_type options not supported [ 77.811463][ T1479] F2FS-fs (loop2): invalid crc value [ 77.827863][ T1479] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.862244][ T1234] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 77.882166][ T1234] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.923145][ T1479] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.940475][ T1490] loop1: detected capacity change from 0 to 40427 [ 77.947130][ T306] usb 4-1: device descriptor read/64, error -71 [ 77.992728][ T1490] F2FS-fs (loop1): fault_injection options not supported [ 77.999866][ T1490] F2FS-fs (loop1): fault_type options not supported [ 78.116243][ T1490] F2FS-fs (loop1): invalid crc value [ 78.123300][ T1490] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.165398][ T1490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.253512][ T1498] attempt to access beyond end of device [ 78.253512][ T1498] loop2: rw=2049, want=45104, limit=40427 [ 79.158763][ T1500] attempt to access beyond end of device [ 79.158763][ T1500] loop1: rw=2049, want=45104, limit=40427 [ 79.175941][ T306] usb 4-1: device descriptor read/64, error -71 [ 79.312928][ T1500] syz.1.357 (1500) used greatest stack depth: 20416 bytes left [ 79.770812][ T306] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 79.822533][ T1234] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 79.891352][ T1234] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 80.031955][ T1234] usb 1-1: USB disconnect, device number 6 [ 80.132273][ T306] usb 4-1: device descriptor read/64, error -71 [ 80.421047][ T1507] loop2: detected capacity change from 0 to 40427 [ 80.454398][ T1507] F2FS-fs (loop2): fault_injection options not supported [ 80.461640][ T1507] F2FS-fs (loop2): fault_type options not supported [ 80.489224][ T1517] netlink: 180 bytes leftover after parsing attributes in process `syz.0.363'. [ 80.509235][ T1507] F2FS-fs (loop2): invalid crc value [ 80.529693][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 80.529705][ T30] audit: type=1400 audit(1783521428.626:902): avc: denied { read write } for pid=1516 comm="syz.0.363" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.564948][ T1517] loop0: detected capacity change from 0 to 256 [ 80.576149][ T1507] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.686885][ T30] audit: type=1400 audit(1783521428.666:903): avc: denied { open } for pid=1516 comm="syz.0.363" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.713379][ T306] usb 4-1: device descriptor read/64, error -71 [ 80.752296][ T1525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.364'. [ 80.768529][ T1507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.794381][ T30] audit: type=1400 audit(1783521428.726:904): avc: denied { ioctl } for pid=1516 comm="syz.0.363" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.865272][ T306] usb usb4-port1: attempt power cycle [ 82.032193][ T1533] netlink: 'syz.0.367': attribute type 15 has an invalid length. [ 83.800671][ T1535] attempt to access beyond end of device [ 83.800671][ T1535] loop2: rw=2049, want=45104, limit=40427 [ 85.618739][ T1542] loop3: detected capacity change from 0 to 1024 [ 85.745958][ T1544] futex_wake_op: syz.1.370 tries to shift op by 144; fix this program [ 85.829495][ T1542] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 85.970140][ T1542] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 86.080825][ T1542] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 86.090817][ T1542] EXT4-fs (loop3): invalid journal inode [ 86.096598][ T1542] EXT4-fs (loop3): can't get journal size [ 86.103179][ T1542] EXT4-fs error (device loop3): ext4_fill_super:4863: inode #2: comm syz.3.369: iget: bad extra_isize 65535 (inode size 1024) [ 86.126488][ T1542] EXT4-fs (loop3): get root inode failed [ 86.142175][ T1542] EXT4-fs (loop3): mount failed [ 86.321961][ T1539] loop0: detected capacity change from 0 to 40427 [ 86.427513][ T1549] loop2: detected capacity change from 0 to 40427 [ 86.439717][ T1539] F2FS-fs (loop0): fault_injection options not supported [ 86.448969][ T1539] F2FS-fs (loop0): fault_type options not supported [ 86.456329][ T1539] F2FS-fs (loop0): invalid crc value [ 86.472389][ T1549] F2FS-fs (loop2): fault_injection options not supported [ 86.496201][ T1549] F2FS-fs (loop2): fault_type options not supported [ 86.539369][ T1560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 86.562244][ T1560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 86.627219][ T1549] F2FS-fs (loop2): invalid crc value [ 86.643359][ T1539] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.788150][ T1549] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.830938][ T1547] loop4: detected capacity change from 0 to 40427 [ 86.853908][ T1565] loop1: detected capacity change from 0 to 256 [ 86.860330][ T1549] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.901515][ T1547] F2FS-fs (loop4): invalid crc value [ 86.917311][ T1565] FAT-fs (loop1): Directory bread(block 64) failed [ 86.936848][ T1565] FAT-fs (loop1): Directory bread(block 65) failed [ 86.951771][ T1565] FAT-fs (loop1): Directory bread(block 66) failed [ 86.959077][ T1565] FAT-fs (loop1): Directory bread(block 67) failed [ 86.965727][ T1565] FAT-fs (loop1): Directory bread(block 68) failed [ 86.972379][ T1565] FAT-fs (loop1): Directory bread(block 69) failed [ 86.977876][ T1547] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 86.979175][ T1565] FAT-fs (loop1): Directory bread(block 70) failed [ 86.991572][ T1539] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.997418][ T1565] FAT-fs (loop1): Directory bread(block 71) failed [ 87.010749][ T1565] FAT-fs (loop1): Directory bread(block 72) failed [ 87.033913][ T1565] FAT-fs (loop1): Directory bread(block 73) failed [ 87.043839][ T1547] F2FS-fs (loop4): Start checkpoint disabled! [ 87.115998][ T1570] attempt to access beyond end of device [ 87.115998][ T1570] loop2: rw=2049, want=45104, limit=40427 [ 87.135311][ T1547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 87.480037][ T1547] attempt to access beyond end of device [ 87.480037][ T1547] loop4: rw=2049, want=45104, limit=40427 [ 87.571415][ T1575] attempt to access beyond end of device [ 87.571415][ T1575] loop1: rw=2051, want=1256, limit=256 [ 87.652566][ T8] attempt to access beyond end of device [ 87.652566][ T8] loop4: rw=1, want=45160, limit=40427 [ 87.668122][ T8] attempt to access beyond end of device [ 87.668122][ T8] loop4: rw=2049, want=40976, limit=40427 [ 87.861618][ T1572] attempt to access beyond end of device [ 87.861618][ T1572] loop0: rw=2049, want=45104, limit=40427 [ 87.988688][ T1581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 88.104171][ T1583] device syzkaller0 entered promiscuous mode [ 88.301663][ T1587] loop4: detected capacity change from 0 to 1024 [ 88.372941][ T1234] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 88.373811][ T1587] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 88.403393][ T1592] loop0: detected capacity change from 0 to 128 [ 88.419841][ T1587] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 88.436202][ T1587] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12753!=20869) [ 88.448681][ T335] udevd[335]: incorrect ext4 checksum on /dev/loop0 [ 88.456249][ T1592] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 88.476793][ T1587] EXT4-fs (loop4): invalid journal inode [ 88.486768][ T1587] EXT4-fs (loop4): can't get journal size [ 88.532320][ T1587] EXT4-fs error (device loop4): ext4_fill_super:4863: inode #2: comm syz.4.383: iget: bad extra_isize 65535 (inode size 1024) [ 88.559548][ T1587] EXT4-fs (loop4): get root inode failed [ 88.592838][ T1587] EXT4-fs (loop4): mount failed [ 88.612184][ T384] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.859405][ T1604] tmpfs: Unknown parameter 'usrquota' [ 89.058409][ T1612] usb usb7: usbfs: process 1612 (syz.1.393) did not claim interface 0 before use [ 89.108379][ T30] audit: type=1400 audit(1783521437.206:905): avc: denied { mounton } for pid=1614 comm="syz.1.394" path="/98/file0" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 89.141913][ T1592] loop0: detected capacity change from 0 to 1024 [ 89.397688][ T1592] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 89.397688][ T1592] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 89.397688][ T1592] [ 89.448414][ T1592] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.460989][ T1592] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 89.460989][ T1592] [ 89.502147][ T1234] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.592285][ T1234] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 89.618993][ T1631] 9pnet_virtio: no channels available for device syz [ 89.698468][ T30] audit: type=1400 audit(1783521437.796:906): avc: denied { append } for pid=1632 comm="syz.1.400" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.795884][ T1592] loop0: detected capacity change from 0 to 16 [ 89.822242][ T1234] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 89.836993][ T1234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.845355][ T1234] usb 4-1: Product: syz [ 89.849565][ T1234] usb 4-1: Manufacturer: syz [ 89.854352][ T1234] usb 4-1: SerialNumber: syz [ 89.872571][ T1592] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.879874][ T1592] SELinux: (dev loop0, type erofs) getxattr errno 117 [ 89.988918][ T30] audit: type=1326 audit(1783521438.086:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.381" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbd4b0cbd7 code=0x7ffc0000 [ 90.013814][ T30] audit: type=1326 audit(1783521438.086:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.381" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbd4ab41d9 code=0x7ffc0000 [ 90.039199][ T30] audit: type=1326 audit(1783521438.086:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.381" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbd4b0cbd7 code=0x7ffc0000 [ 90.063965][ T30] audit: type=1326 audit(1783521438.086:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.381" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbd4ab41d9 code=0x7ffc0000 [ 90.093614][ T30] audit: type=1326 audit(1783521438.086:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.381" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbd4b0cbd7 code=0x7ffc0000 [ 90.119156][ T30] audit: type=1326 audit(1783521438.086:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.381" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbd4ab41d9 code=0x7ffc0000 [ 90.152183][ T30] audit: type=1326 audit(1783521438.086:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.381" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbd4b0cbd7 code=0x7ffc0000 [ 90.178141][ T1579] UDC core: couldn't find an available UDC or it's busy: -16 [ 90.192105][ T30] audit: type=1326 audit(1783521438.086:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1591 comm="syz.0.381" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbd4ab41d9 code=0x7ffc0000 [ 90.210895][ T1579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.372175][ T1234] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 1 [ 90.380828][ T1234] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 90.404241][ T1659] capability: warning: `syz.1.409' uses 32-bit capabilities (legacy support in use) [ 90.442146][ T1234] usb 4-1: failed to enable PITCH for EP 0x1 [ 90.482144][ T1234] usb 4-1: unit 2 not found! [ 90.486771][ T1234] usb 4-1: unit 0 not found! [ 90.495586][ T1234] usb 4-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8214 device_setup=1 to enable and report any issues to g@b4.vu [ 90.516745][ T1234] usb 4-1: USB disconnect, device number 9 [ 90.535625][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.662961][ T1683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.420'. [ 90.937438][ T1704] tipc: Enabling of bearer rejected, failed to enable media [ 90.973702][ T1707] usb usb7: usbfs: process 1707 (syz.1.429) did not claim interface 0 before use [ 91.740451][ T306] hid-generic 0001:0000:10001.0004: item fetching failed at offset 0/1 [ 91.811592][ T306] hid-generic: probe of 0001:0000:10001.0004 failed with error -22 [ 92.829887][ T1796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 92.923584][ T1803] overlayfs: failed to set xattr on upper [ 92.972241][ T1808] device erspan0 entered promiscuous mode [ 92.994109][ T1808] overlayfs: failed to resolve './file2': -2 [ 93.315677][ T1843] overlayfs: failed to get index nlink (file0/file2, err=-61) [ 93.383062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 93.393955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.411515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 93.420064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.428689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.437427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.446190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.454626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.553084][ T1851] 9pnet_virtio: no channels available for device syz [ 93.591785][ T1855] device bridge_slave_0 left promiscuous mode [ 93.598062][ T1855] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.606686][ T1855] device bridge_slave_1 left promiscuous mode [ 93.613554][ T1855] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.632117][ T384] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 93.646295][ T1855] tipc: Enabling of bearer rejected, failed to enable media [ 93.731380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 93.743748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.753907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 93.764690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.773002][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.786117][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.794968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.803131][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.882427][ T384] usb 4-1: Using ep0 maxpacket: 8 [ 93.910611][ T1875] tmpfs: Unknown parameter 'usrquota' [ 93.970740][ T1881] device syzkaller0 entered promiscuous mode [ 94.002376][ T384] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.013772][ T384] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 94.026786][ T384] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.033668][ T384] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 94.042854][ T384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.051805][ T384] usb 4-1: config 0 descriptor?? [ 94.137507][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 94.145849][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.153458][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.160915][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.169251][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.176725][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.184284][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.192165][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.199714][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.207380][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.215003][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.222501][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.230068][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.237652][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.245774][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.253254][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.260751][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.268216][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.275656][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.283121][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.290527][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.298083][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.305600][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.313130][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.320700][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.328453][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.335960][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.343486][ T306] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.351529][ T306] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.04 Device [syz1] on syz1 [ 94.512114][ T60] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 94.622120][ T306] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.671397][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 94.671412][ T30] audit: type=1400 audit(1783521442.766:1041): avc: denied { create } for pid=1918 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.772220][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 94.854232][ T30] audit: type=1400 audit(1783521442.956:1042): avc: denied { connect } for pid=1920 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.982169][ T60] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 94.990596][ T60] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 94.999387][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 95.009225][ T60] usb 3-1: config 1 has no interface number 0 [ 95.015477][ T60] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.026702][ T60] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 95.039799][ T60] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 95.049007][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.072250][ T306] usb 2-1: config 0 has no interfaces? [ 95.077868][ T306] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 95.087057][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.103489][ T306] usb 2-1: config 0 descriptor?? [ 95.114491][ T1927] tmpfs: Unsupported parameter 'mpol' [ 95.152186][ T384] usbhid 4-1:0.0: can't add hid device: -71 [ 95.158385][ T384] usbhid: probe of 4-1:0.0 failed with error -71 [ 95.169887][ T384] usb 4-1: USB disconnect, device number 10 [ 95.291530][ T1933] loop4: detected capacity change from 0 to 1024 [ 95.353637][ T306] usb 2-1: USB disconnect, device number 5 [ 95.392815][ T1933] EXT4-fs (loop4): Ignoring removed orlov option [ 95.403623][ T1933] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,minixdf,norecovery,,errors=continue. Quota mode: none. [ 95.582086][ T384] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 95.832102][ T384] usb 4-1: Using ep0 maxpacket: 16 [ 96.012727][ T30] audit: type=1400 audit(1783521444.106:1043): avc: denied { mount } for pid=1942 comm="syz.1.532" name="/" dev="configfs" ino=12408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 96.082167][ T384] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.091347][ T384] usb 4-1: config 0 has no interface number 0 [ 96.102107][ T30] audit: type=1400 audit(1783521444.116:1044): avc: denied { search } for pid=1942 comm="syz.1.532" name="/" dev="configfs" ino=12408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.127164][ T1948] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.160580][ T30] audit: type=1400 audit(1783521444.116:1045): avc: denied { read } for pid=1942 comm="syz.1.532" name="/" dev="configfs" ino=12408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.196709][ T30] audit: type=1400 audit(1783521444.116:1046): avc: denied { open } for pid=1942 comm="syz.1.532" path="/" dev="configfs" ino=12408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.312197][ T384] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 96.321448][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.329795][ T384] usb 4-1: Product: syz [ 96.334201][ T384] usb 4-1: Manufacturer: syz [ 96.338856][ T384] usb 4-1: SerialNumber: syz [ 96.353084][ T384] usb 4-1: config 0 descriptor?? [ 96.486117][ T30] audit: type=1400 audit(1783521444.586:1047): avc: denied { setopt } for pid=1956 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.518079][ T1955] device syzkaller0 entered promiscuous mode [ 96.573234][ T1960] loop1: detected capacity change from 0 to 2048 [ 96.617134][ T1960] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.628131][ T1960] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.655139][ T30] audit: type=1400 audit(1783521444.756:1048): avc: denied { getopt } for pid=1959 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.729666][ T1969] loop4: detected capacity change from 0 to 1024 [ 96.754355][ T1972] loop1: detected capacity change from 0 to 256 [ 96.759640][ T30] audit: type=1400 audit(1783521444.856:1049): avc: denied { mounton } for pid=1973 comm="syz.0.543" path="/97/file0" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 96.761547][ T1974] cgroup: Unknown subsys name 'fsuuid' [ 96.792593][ T1974] option changes via remount are deprecated (pid=1973 comm=syz.0.543) [ 96.809508][ T1969] EXT4-fs (loop4): Ignoring removed bh option [ 96.827133][ T1972] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 96.831087][ T1976] loop0: detected capacity change from 0 to 256 [ 96.854760][ T1969] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 96.988546][ T1987] loop0: detected capacity change from 0 to 256 [ 97.080078][ T1987] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 97.175679][ T306] usb 3-1: USB disconnect, device number 9 [ 97.207829][ T30] audit: type=1400 audit(1783521445.306:1050): avc: denied { remove_name } for pid=1971 comm="syz.1.539" name="file1" dev="loop1" ino=1048671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.516746][ T2002] loop2: detected capacity change from 0 to 512 [ 97.639105][ T2002] EXT4-fs (loop2): 1 truncate cleaned up [ 97.647071][ T2002] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 97.685301][ T2002] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.553: bg 0: block 465: padding at end of block bitmap is not set [ 97.703520][ T2002] EXT4-fs (loop2): Remounting filesystem read-only [ 97.756600][ T2012] loop2: detected capacity change from 0 to 256 [ 97.792399][ T2012] exfat: Deprecated parameter 'namecase' [ 97.798544][ T2012] exfat: Deprecated parameter 'namecase' [ 97.849410][ T2012] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 97.982095][ T293] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.052113][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.195912][ T384] usb 4-1: USB disconnect, device number 11 [ 98.282023][ T2022] loop3: detected capacity change from 0 to 16 [ 98.298831][ T2022] erofs: (device loop3): erofs_read_superblock: blkszbits 10 isn't supported on this platform [ 98.362140][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.373289][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.383389][ T293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.396634][ T293] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.405947][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.412329][ T26] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 98.426191][ T293] usb 2-1: config 0 descriptor?? [ 98.444826][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 98.468506][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 98.489298][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.507822][ T26] usb 1-1: config 0 descriptor?? [ 98.923397][ T293] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 98.933237][ T293] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 98.994245][ T26] wacom 0003:056A:0027.0007: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 99.005215][ T26] wacom 0003:056A:0027.0007: hidraw1: USB HID v0.05 Device [HID 056a:0027] on usb-dummy_hcd.0-1/input0 [ 99.021641][ T26] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0027.0007/input/input8 [ 99.217725][ T2049] : renamed from bond_slave_0 [ 99.286248][ T26] usb 1-1: USB disconnect, device number 8 [ 99.490628][ T2055] 9pnet: Could not find request transport: rdma [ 99.540512][ T2062] netlink: 'syz.4.575': attribute type 13 has an invalid length. [ 99.688475][ T2071] loop4: detected capacity change from 0 to 1024 [ 99.713262][ T2071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 99.721612][ T2071] System zones: 0-1, 3-8 [ 99.727924][ T2071] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,noquota,debug,journal_dev=0x0000000000000009,nodioread_nolock,. Quota mode: none. [ 99.745523][ T2071] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.461810][ T2078] loop2: detected capacity change from 0 to 1024 [ 100.476111][ T2078] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 100.476111][ T2078] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 100.476111][ T2078] [ 100.495165][ T2078] EXT4-fs (loop2): Ignoring removed orlov option [ 100.518087][ T2078] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,noacl,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 100.564333][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 100.564347][ T30] audit: type=1400 audit(1783521448.666:1060): avc: denied { remount } for pid=2083 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 100.612403][ T30] audit: type=1400 audit(1783521448.696:1061): avc: denied { append } for pid=2077 comm="syz.2.580" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.636390][ T30] audit: type=1400 audit(1783521448.696:1062): avc: denied { map } for pid=2077 comm="syz.2.580" path="/dev/loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.763579][ T2100] tipc: Enabled bearer , priority 0 [ 100.770914][ T2100] device syzkaller0 entered promiscuous mode [ 100.793094][ T2100] tipc: Resetting bearer [ 100.810817][ T2099] tipc: Resetting bearer [ 100.838116][ T2099] tipc: Disabling bearer [ 101.077969][ T30] audit: type=1400 audit(1783521449.176:1063): avc: denied { sys_admin } for pid=2112 comm="syz.1.593" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 101.124176][ T2106] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3810754105 (3810754105 ns) > initial count (3696965314 ns). Using initial count to start timer. [ 101.174458][ T2106] kvm: apic: phys broadcast and lowest prio [ 101.182016][ T2117] ================================================================== [ 101.190113][ T2117] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 101.198378][ T2117] Read of size 8 at addr ffff888116b9dec0 by task syz.1.594/2117 [ 101.206113][ T2117] [ 101.208448][ T2117] CPU: 0 PID: 2117 Comm: syz.1.594 Not tainted syzkaller #0 [ 101.215749][ T2117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.225822][ T2117] Call Trace: [ 101.229107][ T2117] [ 101.232047][ T2117] __dump_stack+0x21/0x30 [ 101.236393][ T2117] dump_stack_lvl+0x110/0x170 [ 101.241087][ T2117] ? show_regs_print_info+0x20/0x20 [ 101.246322][ T2117] ? load_image+0x3f0/0x3f0 [ 101.250850][ T2117] print_address_description+0x7f/0x2c0 [ 101.256430][ T2117] ? tc_setup_flow_action+0x88e/0x3200 [ 101.261913][ T2117] kasan_report+0x10f/0x150 [ 101.266439][ T2117] ? tc_setup_flow_action+0x88e/0x3200 [ 101.271919][ T2117] __asan_report_load8_noabort+0x14/0x20 [ 101.277575][ T2117] tc_setup_flow_action+0x88e/0x3200 [ 101.282877][ T2117] mall_replace_hw_filter+0x2db/0x8d0 [ 101.288272][ T2117] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 101.294390][ T2117] ? mall_set_parms+0x520/0x520 [ 101.299269][ T2117] ? tcf_exts_destroy+0xb0/0xb0 [ 101.304146][ T2117] ? pcpu_alloc+0x1118/0x16f0 [ 101.308875][ T2117] ? mall_set_parms+0x1e4/0x520 [ 101.313751][ T2117] mall_change+0x544/0x760 [ 101.318185][ T2117] ? __kasan_check_write+0x14/0x20 [ 101.323414][ T2117] ? mall_get+0xa0/0xa0 [ 101.327589][ T2117] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 101.333591][ T2117] ? mall_get+0xa0/0xa0 [ 101.337849][ T2117] tc_new_tfilter+0x13df/0x1990 [ 101.342719][ T2117] ? tcf_gate_entry_destructor+0x20/0x20 [ 101.348367][ T2117] ? 0xffffffffa00182ac [ 101.352540][ T2117] ? security_capable+0x87/0xb0 [ 101.357412][ T2117] ? ns_capable+0x8c/0xf0 [ 101.361757][ T2117] ? netlink_net_capable+0x125/0x160 [ 101.367058][ T2117] ? tcf_gate_entry_destructor+0x20/0x20 [ 101.372705][ T2117] rtnetlink_rcv_msg+0x83c/0xcb0 [ 101.377749][ T2117] ? 0xffffffffa00182ac [ 101.381923][ T2117] ? rtnetlink_bind+0x80/0x80 [ 101.386716][ T2117] ? avc_has_perm_noaudit+0x390/0x490 [ 101.392113][ T2117] ? memcpy+0x56/0x70 [ 101.396115][ T2117] ? avc_has_perm_noaudit+0x30a/0x490 [ 101.401514][ T2117] ? arch_stack_walk+0xee/0x140 [ 101.406411][ T2117] ? avc_denied+0x1b0/0x1b0 [ 101.410953][ T2117] ? stack_trace_save+0xa6/0xf0 [ 101.415830][ T2117] ? avc_has_perm+0x163/0x250 [ 101.420530][ T2117] ? avc_has_perm_noaudit+0x490/0x490 [ 101.425929][ T2117] ? x64_sys_call+0x4b/0x9a0 [ 101.430563][ T2117] ? selinux_nlmsg_lookup+0x39d/0x440 [ 101.435983][ T2117] netlink_rcv_skb+0x1e9/0x430 [ 101.440788][ T2117] ? rtnetlink_bind+0x80/0x80 [ 101.445508][ T2117] ? netlink_ack+0xb10/0xb10 [ 101.450118][ T2117] ? _copy_from_iter+0x4a4/0x10a0 [ 101.455186][ T2117] ? __netlink_lookup+0x387/0x3b0 [ 101.460254][ T2117] rtnetlink_rcv+0x1c/0x20 [ 101.464712][ T2117] netlink_unicast+0x86c/0xa30 [ 101.469523][ T2117] netlink_sendmsg+0x879/0xb80 [ 101.474438][ T2117] ? netlink_getsockopt+0x530/0x530 [ 101.479680][ T2117] ? security_socket_sendmsg+0x82/0xa0 [ 101.485304][ T2117] ? netlink_getsockopt+0x530/0x530 [ 101.490538][ T2117] ____sys_sendmsg+0x5be/0x8f0 [ 101.495344][ T2117] ? __sys_sendmsg_sock+0x40/0x40 [ 101.500409][ T2117] ? import_iovec+0x7c/0xb0 [ 101.504946][ T2117] ___sys_sendmsg+0x236/0x2e0 [ 101.509652][ T2117] ? __sys_sendmsg+0x280/0x280 [ 101.514447][ T2117] ? sock_show_fdinfo+0xa0/0xa0 [ 101.519336][ T2117] ? __fdget+0x1a1/0x230 [ 101.523603][ T2117] __x64_sys_sendmsg+0x201/0x2d0 [ 101.528571][ T2117] ? ___sys_sendmsg+0x2e0/0x2e0 [ 101.533452][ T2117] ? __kasan_check_write+0x14/0x20 [ 101.538605][ T2117] ? switch_fpu_return+0x15d/0x2c0 [ 101.543752][ T2117] x64_sys_call+0x4b/0x9a0 [ 101.548303][ T2117] do_syscall_64+0x4c/0xa0 [ 101.552757][ T2117] ? clear_bhb_loop+0x50/0xa0 [ 101.557476][ T2117] ? clear_bhb_loop+0x50/0xa0 [ 101.562189][ T2117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.568116][ T2117] RIP: 0033:0x7fb93278ae59 [ 101.572561][ T2117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.592362][ T2117] RSP: 002b:00007fb9311e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.600806][ T2117] RAX: ffffffffffffffda RBX: 00007fb932a12fa0 RCX: 00007fb93278ae59 [ 101.608801][ T2117] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 101.616796][ T2117] RBP: 00007fb932820e6f R08: 0000000000000000 R09: 0000000000000000 [ 101.625227][ T2117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.633218][ T2117] R13: 00007fb932a13038 R14: 00007fb932a12fa0 R15: 00007ffd56549448 [ 101.641218][ T2117] [ 101.644258][ T2117] [ 101.646600][ T2117] Allocated by task 2117: [ 101.650947][ T2117] __kasan_kmalloc+0xd4/0x100 [ 101.655662][ T2117] __kmalloc+0x13d/0x2c0 [ 101.659937][ T2117] tcf_idr_create+0x5f/0x790 [ 101.664570][ T2117] tcf_idr_create_from_flags+0x61/0x70 [ 101.670064][ T2117] tcf_gact_init+0x342/0x570 [ 101.674682][ T2117] tcf_action_init_1+0x3fd/0x6b0 [ 101.679654][ T2117] tcf_action_init+0x233/0x7a0 [ 101.684444][ T2117] tcf_exts_validate+0x24a/0x580 [ 101.689620][ T2117] mall_set_parms+0x48/0x520 [ 101.694248][ T2117] mall_change+0x478/0x760 [ 101.698700][ T2117] tc_new_tfilter+0x13df/0x1990 [ 101.703645][ T2117] rtnetlink_rcv_msg+0x83c/0xcb0 [ 101.708657][ T2117] netlink_rcv_skb+0x1e9/0x430 [ 101.713455][ T2117] rtnetlink_rcv+0x1c/0x20 [ 101.717912][ T2117] netlink_unicast+0x86c/0xa30 [ 101.722721][ T2117] netlink_sendmsg+0x879/0xb80 [ 101.727502][ T2117] ____sys_sendmsg+0x5be/0x8f0 [ 101.732289][ T2117] ___sys_sendmsg+0x236/0x2e0 [ 101.736991][ T2117] __x64_sys_sendmsg+0x201/0x2d0 [ 101.741959][ T2117] x64_sys_call+0x4b/0x9a0 [ 101.746412][ T2117] do_syscall_64+0x4c/0xa0 [ 101.750901][ T2117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.756833][ T2117] [ 101.759173][ T2117] The buggy address belongs to the object at ffff888116b9de00 [ 101.759173][ T2117] which belongs to the cache kmalloc-192 of size 192 [ 101.773251][ T2117] The buggy address is located 0 bytes to the right of [ 101.773251][ T2117] 192-byte region [ffff888116b9de00, ffff888116b9dec0) [ 101.786911][ T2117] The buggy address belongs to the page: [ 101.792558][ T2117] page:ffffea00045ae740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116b9d [ 101.803305][ T2117] flags: 0x4000000000000200(slab|zone=1) [ 101.808998][ T2117] raw: 4000000000000200 ffffea0004640a80 0000000300000003 ffff888100042c00 [ 101.817604][ T2117] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 101.826202][ T2117] page dumped because: kasan: bad access detected [ 101.832628][ T2117] page_owner tracks the page as allocated [ 101.838716][ T2117] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 5306309798, free_ts 0 [ 101.853763][ T2117] post_alloc_hook+0x192/0x1b0 [ 101.858548][ T2117] prep_new_page+0x1c/0x110 [ 101.863065][ T2117] get_page_from_freelist+0x2c3a/0x2cd0 [ 101.868626][ T2117] __alloc_pages+0x1a2/0x460 [ 101.873228][ T2117] new_slab+0xa0/0x4d0 [ 101.877321][ T2117] ___slab_alloc+0x3ac/0x840 [ 101.881916][ T2117] __slab_alloc+0x49/0x90 [ 101.886269][ T2117] kmem_cache_alloc_trace+0x146/0x270 [ 101.891646][ T2117] kernfs_fop_open+0x375/0xbb0 [ 101.896423][ T2117] do_dentry_open+0x82a/0x1010 [ 101.901201][ T2117] vfs_open+0x73/0x80 [ 101.905201][ T2117] path_openat+0x26e6/0x2f80 [ 101.909818][ T2117] do_filp_open+0x1df/0x400 [ 101.914328][ T2117] do_sys_openat2+0x15e/0x7f0 [ 101.919012][ T2117] __x64_sys_openat+0x136/0x160 [ 101.923881][ T2117] x64_sys_call+0x219/0x9a0 [ 101.928394][ T2117] page_owner free stack trace missing [ 101.933765][ T2117] [ 101.936091][ T2117] Memory state around the buggy address: [ 101.941717][ T2117] ffff888116b9dd80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 101.949775][ T2117] ffff888116b9de00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.957843][ T2117] >ffff888116b9de80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 101.965900][ T2117] ^ [ 101.972063][ T2117] ffff888116b9df00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.980144][ T2117] ffff888116b9df80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 101.988227][ T2117] ================================================================== [ 101.996309][ T2117] Disabling lock debugging due to kernel taint [ 102.017492][ T306] usb 2-1: USB disconnect, device number 6 [ 102.030369][ T30] audit: type=1400 audit(1783521450.126:1064): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 102.055017][ T30] audit: type=1400 audit(1783521450.156:1065): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.078128][ T30] audit: type=1400 audit(1783521450.156:1066): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.100368][ T30] audit: type=1400 audit(1783521450.156:1067): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.121380][ T30] audit: type=1400 audit(1783521450.156:1068): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.142153][ T30] audit: type=1400 audit(1783521450.156:1069): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1