last executing test programs:

1m15.906167058s ago: executing program 3 (id=922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x82, {0x0, 0x0, 0x0, 0x0, 0x24603, 0x481}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000d809}, 0x0)

1m15.819771716s ago: executing program 3 (id=928):
capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000240)={0x200000, 0x200000})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0xc, 0x11, 0x135, 0x0})

1m15.819050406s ago: executing program 3 (id=931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004600), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000004640)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x26008800}, 0x800)

1m15.760013292s ago: executing program 3 (id=932):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@user_xattr}]}, 0xfe, 0x7a7, &(0x7f0000000240)="$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")
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2abe076, 0x0)

1m15.567797542s ago: executing program 3 (id=940):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/48, 0x30}], 0x1)
lseek(r0, 0x3, 0x1)

1m15.352773064s ago: executing program 3 (id=942):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000500)="b800000500000000", &(0x7f0000000540)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m15.217813298s ago: executing program 32 (id=942):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000500)="b800000500000000", &(0x7f0000000540)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.791403137s ago: executing program 1 (id=3800):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @mcast1, 0xfffeffff}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

1.775438198s ago: executing program 1 (id=3802):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0xd9c, 0xa, 0xef91b30119caed00, 0x30}, {0x0, 0x7f, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x4080)
syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "d6a6ac", 0x18, 0x6, 0x1, @remote, @rand_addr=' \x01\x00', {[], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x2, 0xff, 0x0, 0x0, 0x2, 0x4, 0x0, 0xe261, 0x80, 0x0, 0x4e22, 0x4e21}}}}}}}}, 0x0)

1.76061501s ago: executing program 1 (id=3804):
r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x400, &(0x7f0000000100)={[{@nodelalloc}, {@stripe={'stripe', 0x3d, 0x9}}, {@noacl}, {@nolazytime}]}, 0x2, 0x790, &(0x7f0000000740)="$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")
rename(&(0x7f0000000f00)='./file1\x00', &(0x7f0000000140)='./file2\x00')
openat(r0, &(0x7f0000000f80)='./file1\x00', 0x143041, 0x2a)

1.522398354s ago: executing program 1 (id=3810):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(r1)

1.439433233s ago: executing program 1 (id=3815):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES8, @ANYRES8=0x0], 0x1, 0x105f2, &(0x7f00000060c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000006000)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0)
rename(&(0x7f0000006040)='./bus\x00', &(0x7f0000006080)='./file0\x00')

450.569414ms ago: executing program 4 (id=3841):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)

434.778176ms ago: executing program 2 (id=3843):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000940)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

406.207788ms ago: executing program 4 (id=3844):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa18800, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32, @ANYRES32=0x0], 0x1, 0x314, &(0x7f00000003c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x141a42, 0x15)

343.145315ms ago: executing program 2 (id=3847):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000c80)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

343.009555ms ago: executing program 5 (id=3848):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x10, &(0x7f0000000680)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000000800)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

324.757007ms ago: executing program 1 (id=3849):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
read(r0, &(0x7f00000005c0)=""/121, 0x79)

280.865711ms ago: executing program 2 (id=3850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x78}}, 0x0)

273.523122ms ago: executing program 4 (id=3851):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setuid(0xee01)
ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0)

273.231852ms ago: executing program 0 (id=3852):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/anycast6\x00')
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131)

258.467263ms ago: executing program 2 (id=3853):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

257.382154ms ago: executing program 5 (id=3854):
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x40, 0x0, 0x7, 0xa}, {0x0, 0x1, 0x0, 0xfffffffffffffffb, 0xb, 0x6, 0x6, 0x4}, {0xffffffffffffffff, 0x1000000000, 0xd, 0x20}, 0x2, 0x1, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0x1502, 0x1, 0x3, 0x6, 0x0, 0xfffffffd, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x99, @loopback}, 0x1c)

209.417738ms ago: executing program 0 (id=3855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")

208.358578ms ago: executing program 4 (id=3856):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

204.262739ms ago: executing program 2 (id=3857):
r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2800700, &(0x7f0000000d40)={[], [{@seclabel}]}, 0x2, 0x460, &(0x7f00000008c0)="$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")
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x404, 0x0)
fchmodat(r0, &(0x7f0000000040)='./file0/file0\x00', 0xd)

201.840299ms ago: executing program 5 (id=3858):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c0006801400040000000000000000000000000000000001"], 0xc0}}, 0x0)

145.197425ms ago: executing program 0 (id=3859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=@ipv6_getaddr={0x2c, 0x16, 0x921, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}}, 0x20000000)

144.185525ms ago: executing program 4 (id=3860):
r0 = timerfd_create(0x8, 0x80000)
timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000140))

132.729176ms ago: executing program 0 (id=3861):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x207, 0x82)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0xf00, 0x7, 0xec, 0x0, 0x0})

82.140392ms ago: executing program 5 (id=3862):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000cc0)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000d00)=@req3={0x1000, 0x9, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)

73.005642ms ago: executing program 4 (id=3863):
io_setup(0x239f, &(0x7f0000000380)=<r0=>0x0)
r1 = eventfd2(0x9, 0x80800)
io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000080)="e2", 0xb, 0x5, 0x0, 0x1, r1}])

24.402297ms ago: executing program 2 (id=3864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022abd7001000000250f0000f829000e0068"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000)

24.211287ms ago: executing program 5 (id=3865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25150000001c000180160001006574683e76659d7468315f746f5f7465616d"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

23.437057ms ago: executing program 0 (id=3866):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}})
close(0xffffffffffffffff)

5.22302ms ago: executing program 0 (id=3867):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 5 (id=3868):
r0 = epoll_create(0x5)
unshare(0x22020600)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000900)={[0x400]}, 0x8)

kernel console output (not intermixed with test programs):

 Engine/Google Compute Engine, BIOS Google 11/06/2026
[   72.783775][ T5022] RIP: 0010:__iomap_dio_rw+0xd4d/0x1070
[   72.789561][ T5022] Code: 69 6e a3 ff 45 85 f6 4c 8b 6c 24 08 78 0a e8 aa 6a a3 ff e9 97 fb ff ff 4d 63 f6 e8 9d 6a a3 ff e9 e1 f8 ff ff e8 93 6a a3 ff <0f> 0b 48 c7 c3 fb ff ff ff e9 e3 f8 ff ff e8 e0 8a bc 02 44 89 f9
[   72.809730][ T5022] RSP: 0018:ffffc90000d17a80 EFLAGS: 00010283
[   72.815908][ T5022] RAX: ffffffff81c14c2d RBX: ffffc90000d17d50 RCX: 0000000000080000
[   72.818737][ T1428] usb 1-1: string descriptor 0 read error: -22
[   72.824988][ T5022] RDX: ffffc900034f3000 RSI: 0000000000000029 RDI: 000000000000002a
[   72.834910][ T1428] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   72.839045][ T5022] RBP: ffffc90000d17c18 R08: ffffc90000d17b87 R09: ffffc90000d17b60
[   72.850674][ T1428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.865141][ T5022] R10: dffffc0000000000 R11: fffff520001a2f71 R12: 0000000000002000
[   72.873301][ T5022] R13: 1ffff920001a2f68 R14: dffffc0000000000 R15: 0000000000000000
[   72.881508][ T5022] FS:  00007f75205c96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   72.890599][ T5022] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.897309][ T5022] CR2: 0000200000ffe000 CR3: 00000001190a1000 CR4: 00000000003506b0
[   72.905539][ T1428] usb 1-1: can't set config #1, error -71
[   72.918872][ T5022] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   72.927697][ T1428] usb 1-1: USB disconnect, device number 4
[   72.936449][ T5022] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   72.944690][ T5022] Call Trace:
[   72.948141][ T5022]  ? memset+0x35/0x40
[   72.952279][ T5022]  ? __fsnotify_parent+0x6d2/0x7c0
[   72.957486][ T5022]  ? iomap_dio_complete+0x6b0/0x6b0
[   72.963133][ T5022]  ? avc_policy_seqno+0x1b/0x70
[   72.968088][ T5022]  ? iov_iter_alignment+0x186/0x660
[   72.973453][ T5022]  iomap_dio_rw+0x35/0x80
[   72.978024][ T5022]  erofs_file_read_iter+0x27b/0x2f0
[   72.983453][ T5022]  vfs_read+0x62a/0xa50
[   72.987704][ T5022]  ? kernel_read+0x70/0x70
[   72.992305][ T5022]  ? mutex_trylock+0xb0/0xb0
[   72.997181][ T5022]  ? __fget_files+0x2e1/0x340
[   73.002983][ T5022]  ? __fdget_pos+0x2d2/0x380
[   73.007686][ T5022]  ? ksys_read+0x70/0x260
[   73.013455][ T5022]  ksys_read+0x14a/0x260
[   73.018060][ T5022]  ? vfs_write+0xd70/0xd70
[   73.021152][ T5029] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x4a218c98, utbl_chksum : 0xe619d30d)
[   73.038687][ T5029] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008)
[   73.039164][ T5022]  ? ____fput+0x15/0x20
[   73.049284][ T5029] exFAT-fs (loop2): error, failed to bmap (inode : ffff88812b9d5570 iblock : 8, err : -5)
[   73.062632][ T5029] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008)
[   73.066210][ T5022]  ? __kasan_check_read+0x11/0x20
[   73.077347][ T5022]  __x64_sys_read+0x7b/0x90
[   73.083424][ T5022]  do_syscall_64+0x31/0x40
[   73.088053][ T5022]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   73.094110][ T5022] RIP: 0033:0x7f7521b3b74e
[   73.098790][ T5022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   73.119472][ T5022] RSP: 002b:00007f75205c8f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   73.128114][ T5022] RAX: ffffffffffffffda RBX: 00007f75205c96c0 RCX: 00007f7521b3b74e
[   73.141430][ T5022] RDX: 0000000000002000 RSI: 0000200000000600 RDI: 0000000000000004
[   73.149568][ T5022] RBP: 00007f7521c09f6d R08: 0000000000000000 R09: 0000000000000000
[   73.157617][ T5022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[   73.165842][ T5022] R13: 0000200000002600 R14: 00007f7521df7fa0 R15: 00007ffe805d6ec8
[   73.174146][ T5022] ---[ end trace 1c80bfce59df2eca ]---
[   73.261199][ T5043] devpts: called with bogus options
[   73.346680][ T5041] F2FS-fs (loop4): invalid crc value
[   73.356442][ T5041] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   73.387129][ T5041] F2FS-fs (loop4): Start checkpoint disabled!
[   73.393929][ T5041] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   73.413651][  T112] attempt to access beyond end of device
[   73.413651][  T112] loop4: rw=2049, want=40976, limit=40427
[   73.462284][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2086'.
[   73.566375][ T5064] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   73.770254][ T5083] logitech-hidpp-device 0005:046D:B012.0007: received hid++ report of bad size (4096)
[   73.789499][  T499] logitech-hidpp-device 0005:046D:B012.0007: Device not connected
[   73.864667][ T5094] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.2101: inode has both inline data and extents flags
[   73.898080][ T5094] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2101: couldn't read orphan inode 15 (err -117)
[   73.961228][ T5094] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   74.041540][ T5094] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 2. Delete some EAs or run e2fsck.
[   74.086254][ T5053] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945)
[   74.121686][ T5053] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   74.149101][ T5053] F2FS-fs (loop5): invalid crc value
[   74.199444][ T5053] F2FS-fs (loop5): Found nat_bits in checkpoint
[   74.248778][ T5053] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   74.262734][ T5053] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   74.472810][ T5100] F2FS-fs (loop4): Test dummy encryption mode enabled
[   74.480546][ T5100] F2FS-fs (loop4): invalid crc value
[   74.487234][ T5100] F2FS-fs (loop4): Found nat_bits in checkpoint
[   74.521577][ T5100] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   74.533763][ T5100] syz.4.2103 (pid 5100) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   74.666709][ T5133] netlink: 'syz.2.2114': attribute type 16 has an invalid length.
[   74.674824][ T5133] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.2114'.
[   74.787784][ T5140] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   74.808674][ T5140] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   74.828737][ T5140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   74.844496][ T5140] System zones: 0-1, 3-36
[   74.859275][ T5140] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue
[   74.949379][ T5155] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   74.967269][ T5155] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   75.001302][ T5155] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #11: comm syz.2.2123: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   75.048574][  T444] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   75.073021][ T5155] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2123: couldn't read orphan inode 11 (err -117)
[   75.087119][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue
[   75.105527][   T24] kauditd_printk_skb: 69 callbacks suppressed
[   75.105542][   T24] audit: type=1400 audit(2000000023.320:608): avc:  denied  { create } for  pid=5154 comm="syz.2.2123" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   75.145202][ T5155] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.2123: Invalid block bitmap block 0 in block_group 0
[   75.161905][ T5155] Quota error (device loop2): write_blk: dquota write failed
[   75.169607][ T5155] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   75.179738][ T5155] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.2123: Failed to acquire dquot type 0
[   75.191998][   T24] audit: type=1400 audit(2000000023.410:609): avc:  denied  { remount } for  pid=5154 comm="syz.2.2123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   75.213695][ T5153] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12
[   75.222239][ T5155] EXT4-fs (loop2): re-mounted. Opts: 
[   75.244785][ T5153] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   75.256229][ T5153] F2FS-fs (loop1): invalid crc value
[   75.262658][   T24] audit: type=1400 audit(2000000023.480:610): avc:  denied  { create } for  pid=5169 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   75.265234][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'.
[   75.283753][   T24] audit: type=1400 audit(2000000023.480:611): avc:  denied  { write } for  pid=5169 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   75.319426][ T5153] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   75.349670][ T5153] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[   75.356418][ T5153] F2FS-fs (loop1): Start checkpoint disabled!
[   75.363556][ T5153] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   75.370771][ T5153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   75.438583][  T444] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   75.468504][  T444] usb 6-1: config 0 interface 0 has no altsetting 0
[   75.495483][  T444] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[   75.516759][  T444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.539306][  T444] usb 6-1: config 0 descriptor??
[   75.652523][   T24] audit: type=1400 audit(2000000023.870:612): avc:  denied  { mmap_zero } for  pid=5184 comm="syz.2.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   75.790800][ T5194] ip_tables: iptables: counters copy to user failed while replacing table
[   75.829637][ T5153] F2FS-fs (loop1): group quota file already specified
[   75.999028][ T5205] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2144'.
[   76.020349][  T444] input: HID 04f2:1421 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04F2:1421.0008/input/input16
[   76.033298][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'.
[   76.111495][ T5168] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   76.121242][   T24] audit: type=1400 audit(2000000024.340:613): avc:  denied  { read } for  pid=79 comm="acpid" name="event3" dev="devtmpfs" ino=842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.145013][  T444] chicony 0003:04F2:1421.0008: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0
[   76.149070][ T5168] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   76.220615][  T444] usb 6-1: USB disconnect, device number 6
[   76.243249][ T5168] F2FS-fs (loop0): invalid crc value
[   76.262400][   T24] audit: type=1400 audit(2000000024.340:614): avc:  denied  { open } for  pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.297270][ T5219] fido_id[5219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[   76.329377][ T5168] F2FS-fs (loop0): Found nat_bits in checkpoint
[   76.346393][   T24] audit: type=1400 audit(2000000024.340:615): avc:  denied  { ioctl } for  pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=842 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.427905][ T5168] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   76.437781][ T5168] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   76.503065][ T5179] F2FS-fs (loop4): invalid crc value
[   76.521267][ T5179] F2FS-fs (loop4): Found nat_bits in checkpoint
[   76.563205][ T5179] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   76.578725][ T5179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   76.610082][ T5248] exfat: Deprecated parameter 'utf8'
[   76.628957][ T5248] exfat: Deprecated parameter 'namecase'
[   76.661664][ T5248] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   76.883269][ T5280] netlink: 'syz.0.2173': attribute type 4 has an invalid length.
[   76.909704][ T5280] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2173'.
[   76.942981][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'.
[   77.010430][ T5282] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[   77.038563][ T5282] System zones: 0-7
[   77.059064][ T5282] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue
[   77.108689][ T5282] EXT4-fs (loop1): re-mounted. Opts: 
[   77.120510][ T5305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2184'.
[   77.129726][ T5305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2184'.
[   77.141220][ T5282] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[   77.176732][ T5282] EXT4-fs (loop1): re-mounted. Opts: 
[   77.189138][ T5303] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   77.230350][ T5303] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842c018, mo2=0003]
[   77.240605][ T5303] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000001,nodelalloc,acl,debug,delalloc,nogrpid,noblock_validity,dioread_nolock,,errors=continue
[   77.566018][ T5270] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945)
[   77.588576][ T5270] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   77.618534][ T1428] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   77.620050][ T5270] F2FS-fs (loop5): invalid crc value
[   77.644954][ T5270] F2FS-fs (loop5): Found nat_bits in checkpoint
[   77.691261][ T5270] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   77.698558][ T5270] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   77.709324][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2198'.
[   77.847674][ T5348] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.2201: missing EA_INODE flag
[   77.862611][ T5348] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2201: error while reading EA inode 2 err=-117
[   77.875378][ T5348] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2201: inode #3584: comm syz.4.2201: iget: illegal inode #
[   77.891280][ T5301] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   77.900198][ T5301] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   77.900349][ T5348] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2201: error while reading EA inode 3584 err=-117
[   77.921747][ T5301] F2FS-fs (loop0): invalid crc value
[   77.944164][ T5348] EXT4-fs (loop4): 1 orphan inode deleted
[   77.950820][ T5348] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue
[   77.962557][ T5301] F2FS-fs (loop0): Found nat_bits in checkpoint
[   77.988582][ T1428] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   77.998372][ T1428] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[   78.049771][ T5360] device-mapper: table: 253:0: crypt: Invalid number of feature args
[   78.057896][ T5360] device-mapper: ioctl: error adding target to table
[   78.098879][ T5301] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   78.105975][ T5301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   78.188651][ T1428] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   78.198059][ T1428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.213384][ T1428] usb 2-1: Product: syz
[   78.220622][ T1428] usb 2-1: Manufacturer: syz
[   78.225371][ T1428] usb 2-1: SerialNumber: syz
[   78.230645][ T5380] EXT4-fs (loop4): Test dummy encryption mode enabled
[   78.237634][ T1428] usb 2-1: config 0 descriptor??
[   78.251154][ T5380] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   78.261319][ T5321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.268337][ T5321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.275784][ T5380] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   78.296393][ T5380] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,jqfmt=vfsv1,noinit_itable,norecovery,minixdf,nogrpid,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000007,
[   78.446318][ T5402] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.522049][ T5321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.535969][ T5402] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,norecovery,dioread_nolock,norecovery,,errors=continue
[   78.554587][ T5321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.562395][ T5402] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.578997][ T5420] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   78.642408][ T5423] netlink: 'syz.0.2230': attribute type 2 has an invalid length.
[   78.706691][ T5438] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   78.717433][ T5438] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[   78.717433][ T5438] 
[   78.727574][ T5438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   78.775688][ T5449] netlink: 'syz.0.2242': attribute type 2 has an invalid length.
[   78.829172][ T1428] Error reading MAC address
[   78.838074][ T1428] usb 2-1: USB disconnect, device number 6
[   79.031722][ T5498] EXT4-fs (loop2): Ignoring removed oldalloc option
[   79.038564][ T5498] EXT4-fs (loop2): Ignoring removed oldalloc option
[   79.045258][ T5498] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   79.059778][ T5498] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,noquota,norecovery,,errors=continue
[   79.148583][ T1432] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   79.342911][ T5507] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   79.373668][ T5507] EXT4-fs (loop1): orphan cleanup on readonly fs
[   79.382645][ T5507] EXT4-fs error (device loop1): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[   79.396945][ T5507] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.2268: Failed to acquire dquot type 1
[   79.413719][ T5507] EXT4-fs (loop1): 1 truncate cleaned up
[   79.426742][ T5517] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   79.429469][ T5507] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,init_itable=0x0000000000000080,noauto_da_alloc,resuid=0x00000000000000002,errors=continue
[   79.466926][ T5507] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.2268: path /379/file0: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0
[   79.518590][ T1432] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.688694][ T1432] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   79.708686][ T1432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.717009][ T1432] usb 1-1: Product: syz
[   79.721347][ T1432] usb 1-1: Manufacturer: syz
[   79.726533][ T1432] usb 1-1: SerialNumber: syz
[   79.779744][ T1432] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[   79.998899][  T510] usb 1-1: USB disconnect, device number 5
[   80.114619][ T5614] EXT4-fs (loop5): Ignoring removed oldalloc option
[   80.132047][ T5614] EXT4-fs (loop5): Ignoring removed oldalloc option
[   80.140328][ T5614] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   80.179227][ T5614] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,noquota,norecovery,,errors=continue
[   80.282601][   T24] kauditd_printk_skb: 85 callbacks suppressed
[   80.282614][   T24] audit: type=1400 audit(2000000028.500:697): avc:  denied  { connect } for  pid=5653 comm="syz.2.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   80.411159][   T24] audit: type=1400 audit(2000000028.630:698): avc:  denied  { shutdown } for  pid=5666 comm="syz.1.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.539692][ T5676] EXT4-fs (loop0): Ignoring removed bh option
[   80.553333][ T5676] EXT4-fs error (device loop0): ext4_iget_extra_inode:4692: inode #15: comm syz.0.2346: corrupted in-inode xattr
[   80.553498][ T5676] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2346: couldn't read orphan inode 15 (err -117)
[   80.553634][ T5676] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,delalloc,init_itable=0x0000000000000009,inode_readahead_blks=0x0000000000000400,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue
[   80.639117][ T5686] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   80.908511][  T511] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   81.148573][  T511] usb 1-1: Using ep0 maxpacket: 32
[   81.268603][  T511] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[   81.276827][  T511] usb 1-1: config 0 has no interface number 0
[   81.282984][  T511] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   81.293027][  T511] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   81.302960][  T511] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   81.312900][  T511] usb 1-1: config 0 interface 196 has no altsetting 0
[   81.478875][  T511] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   81.487974][  T511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.496022][  T511] usb 1-1: Product: syz
[   81.500224][  T511] usb 1-1: Manufacturer: syz
[   81.504825][  T511] usb 1-1: SerialNumber: syz
[   81.510301][  T511] usb 1-1: config 0 descriptor??
[   81.528672][ T5690] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   81.990279][  T511] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached
[   82.007181][   T24] audit: type=1400 audit(2000000030.220:699): avc:  denied  { read } for  pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   82.032000][   T24] audit: type=1400 audit(2000000030.220:700): avc:  denied  { search } for  pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.053419][   T24] audit: type=1400 audit(2000000030.220:701): avc:  denied  { read } for  pid=134 comm="dhcpcd" name="n18" dev="tmpfs" ino=2836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.075150][   T24] audit: type=1400 audit(2000000030.220:702): avc:  denied  { open } for  pid=134 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=2836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.098645][   T24] audit: type=1400 audit(2000000030.220:703): avc:  denied  { getattr } for  pid=134 comm="dhcpcd" path="/run/udev/data/n18" dev="tmpfs" ino=2836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   82.121924][   T24] audit: type=1400 audit(2000000030.300:704): avc:  denied  { read } for  pid=5699 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.145322][   T24] audit: type=1400 audit(2000000030.300:705): avc:  denied  { open } for  pid=5699 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.170418][   T24] audit: type=1400 audit(2000000030.300:706): avc:  denied  { getattr } for  pid=5699 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   82.197968][  T448] usb 1-1: USB disconnect, device number 6
[   82.238752][  T448] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected
[   82.814152][ T5731] EXT4-fs (loop0): Ignoring removed oldalloc option
[   82.828551][ T5731] EXT4-fs (loop0): Ignoring removed oldalloc option
[   82.829472][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'.
[   82.845355][ T5731] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   82.889001][ T5731] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,noquota,norecovery,,errors=continue
[   83.348738][ T5763] EXT4-fs (loop5): Test dummy encryption mode enabled
[   83.378559][ T5763] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.2371: missing EA_INODE flag
[   83.428173][ T5763] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2371: error while reading EA inode 2 err=-117
[   83.469038][ T5763] EXT4-fs (loop5): 1 orphan inode deleted
[   83.474820][ T5763] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue
[   83.740034][ T5797] erofs: (device loop2): mounted with root inode @ nid 36.
[   83.769303][ T5797] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 12 for nid 36, please upgrade kernel
[   83.804467][ T5797] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95]
[   83.922825][ T5812] EXT4-fs (loop1): Test dummy encryption mode enabled
[   83.931160][ T5812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   83.942449][ T5812] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.2394: bad orphan inode 131083
[   83.953283][ T5812] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,usrquota,,errors=continue
[   83.971246][ T5816] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[   83.980801][ T5816] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   84.015697][ T5816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   84.037373][ T5816] System zones: 0-1, 3-36
[   84.043532][ T5816] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue
[   84.170565][ T5826] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   84.179814][ T5826] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   84.392686][ T5869] netem: incorrect ge model size
[   84.404267][ T5869] netem: change failed
[   84.538132][ T5897] device bridge0 entered promiscuous mode
[   84.544095][ T5897] device macsec1 entered promiscuous mode
[   84.577593][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'.
[   84.640203][ T5916] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   84.640325][ T5916] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.757015][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2444'.
[   84.815731][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2445'.
[   84.971426][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2457'.
[   85.090155][ T5971] netlink: 'syz.5.2466': attribute type 5 has an invalid length.
[   85.117515][ T5975] netlink: 'syz.1.2468': attribute type 1 has an invalid length.
[   85.198501][ T5909] F2FS-fs (loop0): Found nat_bits in checkpoint
[   85.250435][ T5909] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   85.312497][ T5993] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[   85.322173][ T5993] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   85.339049][ T5993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   85.347361][ T5993] System zones: 0-1, 3-36
[   85.353797][ T5993] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue
[   85.374959][   T24] kauditd_printk_skb: 46 callbacks suppressed
[   85.374972][   T24] audit: type=1400 audit(2000000033.590:753): avc:  denied  { map } for  pid=5992 comm="syz.5.2474" path="/283/bus/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   85.405464][ T5909] F2FS-fs (loop0): lookup inode (7) has corrupted xattr
[   85.416719][ T5909] F2FS-fs (loop0): recover xattr in inode (7)
[   85.423193][ T5909] F2FS-fs (loop0): set inode (7) has corrupted xattr
[   85.430849][ T6003] F2FS-fs (loop0): lookup inode (7) has corrupted xattr
[   85.505914][ T6006] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.2479: inode #1: comm syz.2.2479: iget: illegal inode #
[   85.519854][ T6006] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2479: error while reading EA inode 1 err=-117
[   85.532577][ T6006] EXT4-fs (loop2): 1 orphan inode deleted
[   85.538348][ T6006] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,min_batch_time=0x000000000000000f,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue
[   85.589904][ T6006] EXT4-fs error (device loop2): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.2.2479: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   85.698506][ T6025] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5b357923, utbl_chksum : 0xe619d30d)
[   85.712230][ T6025] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 3377699720527874)
[   85.753517][ T6034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2480'.
[   85.971026][ T6053] EXT4-fs (loop2): Test dummy encryption mode enabled
[   85.989580][ T6053] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2500: inode has both inline data and extents flags
[   86.002999][ T6053] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2500: couldn't read orphan inode 15 (err -117)
[   86.015421][ T6053] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[   86.030252][   T24] audit: type=1400 audit(2000000034.250:754): avc:  denied  { create } for  pid=6052 comm="syz.2.2500" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   86.102864][   T24] audit: type=1400 audit(2000000034.310:755): avc:  denied  { watch } for  pid=6058 comm="syz.1.2502" path="/442/cgroup" dev="tmpfs" ino=2284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[   86.183494][ T6067] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2506'.
[   86.415914][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2520'.
[   86.449892][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'.
[   86.494139][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2522'.
[   86.504495][ T6100] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   86.552731][ T6040] F2FS-fs (loop5): invalid crc value
[   86.563552][ T6107] netlink: 'syz.1.2526': attribute type 8 has an invalid length.
[   86.587582][ T6040] F2FS-fs (loop5): Found nat_bits in checkpoint
[   86.618864][ T6040] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[   86.639486][   T24] audit: type=1400 audit(2000000034.860:756): avc:  denied  { create } for  pid=6118 comm="syz.1.2529" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   86.660506][ T6040] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   86.674253][   T24] audit: type=1400 audit(2000000034.860:757): avc:  denied  { read write } for  pid=6118 comm="syz.1.2529" name="file0" dev="tmpfs" ino=2359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   86.697969][   T24] audit: type=1400 audit(2000000034.860:758): avc:  denied  { open } for  pid=6118 comm="syz.1.2529" path="/456/file0" dev="tmpfs" ino=2359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   86.720948][   T24] audit: type=1400 audit(2000000034.870:759): avc:  denied  { ioctl } for  pid=6118 comm="syz.1.2529" path="/456/file0" dev="tmpfs" ino=2359 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   86.745783][   T24] audit: type=1400 audit(2000000034.940:760): avc:  denied  { unlink } for  pid=281 comm="syz-executor" name="file0" dev="tmpfs" ino=2359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   86.781508][   T24] audit: type=1400 audit(2000000035.000:761): avc:  denied  { create } for  pid=6125 comm="syz.2.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   86.824524][   T24] audit: type=1400 audit(2000000035.030:762): avc:  denied  { write } for  pid=6125 comm="syz.2.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   86.844692][ T6130] overlayfs: workdir and upperdir must be separate subtrees
[   87.235196][ T6201] SELinux: security_context_str_to_sid(5ýÆÉ]ÖS9q#“�ë) failed for (dev pstore, type pstore) errno=-22
[   87.261565][ T6205] ip_tables: iptables: counters copy to user failed while replacing table
[   87.400300][ T6227] device-mapper: table: 253:9: verity: Data device lookup failed
[   87.438521][ T6227] device-mapper: ioctl: error adding target to table
[   87.680255][ T6257] netlink: 'syz.0.2596': attribute type 3 has an invalid length.
[   87.797253][ T6273] device sit0 entered promiscuous mode
[   87.819719][ T6273] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[   87.888226][ T6285] binder: 6284:6285 ioctl c0306201 200000000100 returned -14
[   87.971571][ T6301] device syz_tun entered promiscuous mode
[   88.015481][ T6308] __nla_validate_parse: 5 callbacks suppressed
[   88.015486][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'.
[   88.036311][ T6213] F2FS-fs (loop5): invalid crc value
[   88.066556][ T6213] F2FS-fs (loop5): Found nat_bits in checkpoint
[   88.114423][ T6213] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[   88.121483][ T6213] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   88.463166][ T6342] EXT4-fs (loop2): Test dummy encryption mode enabled
[   88.502137][ T6342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   88.531937][ T6349] usb usb1: usbfs: process 6349 (syz.1.2636) did not claim interface 0 before use
[   88.550752][ T6342] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2634: bad orphan inode 131083
[   88.637817][ T6342] EXT4-fs (loop2): Remounting filesystem read-only
[   88.670457][ T6342] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,resgid=0x0000000000000000,inlinecrypt,errors=remount-ro,discard,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000001,test_dummy_encryption=v1,grpid,
[   88.736453][ T6358] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,nombcache,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000040,inlinecrypt,grpid,nobarrier,nouid32,,errors=continue
[   88.878135][ T6390] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   88.915103][ T6390] EXT4-fs (loop2): 1 truncate cleaned up
[   88.921374][ T6390] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,bsddf,nombcache,jqfmt=vfsold,nojournal_checksum,,errors=continue
[   89.060360][ T6424] device-mapper: table: 253:10: crypt: Invalid iv_offset sector
[   89.069009][ T6424] device-mapper: ioctl: error adding target to table
[   89.078726][ T6431] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2672'.
[   89.239225][ T6455] SELinux: security_context_str_to_sid(5ýÆÉ]ÖS9q#“�ë) failed for (dev binder, type binder) errno=-22
[   89.511319][ T6483] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   89.569353][ T6483] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[   89.654099][ T6509] device wireguard0 entered promiscuous mode
[   89.670772][ T6512] netlink: 'syz.4.2710': attribute type 1 has an invalid length.
[   89.733296][ T6430] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[   89.745894][ T6515] netem: change failed
[   89.758656][ T6430] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   89.772332][ T6430] F2FS-fs (loop1): invalid crc value
[   89.796040][   T25] sony 0005:054C:03D5.0009: UNIQ does not contain a MAC address; duplicate check skipped
[   89.820506][ T6529] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   89.830126][ T6430] F2FS-fs (loop1): Found nat_bits in checkpoint
[   89.832806][   T25] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0009/input/input17
[   89.846503][   T25] sony 0005:054C:03D5.0009: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[   89.886812][ T6430] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   89.894098][ T6430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   89.953461][ T6533] fido_id[6533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   90.072640][ T6553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   90.127740][ T6553] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2727: bg 0: block 384: padding at end of block bitmap is not set
[   90.158863][ T6553] EXT4-fs (loop2): Remounting filesystem read-only
[   90.166610][ T6553] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   90.190935][ T6553] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #11: comm syz.2.2727: attempt to clear invalid blocks 983260 len 1
[   90.206786][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2731'.
[   90.227837][ T6563] netem: unknown loss type 13
[   90.234030][ T6553] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.2727: Invalid inode table block 0 in block_group 0
[   90.251105][ T6563] netem: change failed
[   90.267917][ T6565] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   90.277647][ T6553] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   90.296172][ T6553] EXT4-fs error (device loop2) in ext4_orphan_del:3292: Corrupt filesystem
[   90.309196][ T6553] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.2727: Invalid inode table block 0 in block_group 0
[   90.326170][ T6553] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   90.348533][ T6553] EXT4-fs error (device loop2): ext4_truncate:4403: inode #11: comm syz.2.2727: mark_inode_dirty error
[   90.374151][ T6553] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3106: Corrupt filesystem
[   90.396302][ T6553] EXT4-fs (loop2): 1 truncate cleaned up
[   90.402246][ T6553] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,
[   90.421088][ T6553] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.2727: Invalid inode table block 0 in block_group 0
[   90.448521][ T6553] EXT4-fs (loop2): Remounting filesystem read-only
[   90.455116][ T6553] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   90.465650][ T6553] EXT4-fs error (device loop2): ext4_setattr:5590: inode #2: comm syz.2.2727: mark_inode_dirty error
[   90.627302][   T24] kauditd_printk_skb: 38 callbacks suppressed
[   90.627315][   T24] audit: type=1400 audit(2000000038.840:801): avc:  denied  { name_bind } for  pid=6590 comm="syz.1.2742" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   90.768492][  T511] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   90.867988][   T24] audit: type=1400 audit(2000000039.080:802): avc:  denied  { create } for  pid=6598 comm="syz.4.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   90.897056][   T24] audit: type=1400 audit(2000000039.110:803): avc:  denied  { connect } for  pid=6598 comm="syz.4.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   90.958507][   T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   90.981870][   T24] audit: type=1400 audit(2000000039.200:804): avc:  denied  { getopt } for  pid=6600 comm="syz.4.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.151070][ T6579] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   91.163006][ T6579] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   91.171664][  T511] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   91.189206][ T6579] F2FS-fs (loop0): invalid crc value
[   91.209308][ T6579] F2FS-fs (loop0): Found nat_bits in checkpoint
[   91.248566][   T25] usb 2-1: device descriptor read/64, error -71
[   91.248588][ T6579] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   91.261940][ T6579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   91.279147][ T6593] F2FS-fs (loop2): invalid crc value
[   91.287290][ T6593] F2FS-fs (loop2): Found nat_bits in checkpoint
[   91.342324][ T6593] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   91.378645][  T511] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   91.389290][  T511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.397306][  T511] usb 6-1: Product: syz
[   91.401870][  T511] usb 6-1: Manufacturer: syz
[   91.406485][  T511] usb 6-1: SerialNumber: syz
[   91.449056][  T511] rtl8150 6-1:1.0: couldn't find required endpoints
[   91.456510][  T511] rtl8150: probe of 6-1:1.0 failed with error -5
[   91.580067][ T6616] erofs: (device loop0): mounted with root inode @ nid 36.
[   91.650335][ T1428] usb 6-1: USB disconnect, device number 7
[   91.675402][   T24] audit: type=1326 audit(2000000039.890:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.2755" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[   91.700365][   T24] audit: type=1326 audit(2000000039.890:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.2755" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[   91.708754][   T25] usb 2-1: device descriptor read/64, error -71
[   91.726594][   T24] audit: type=1326 audit(2000000039.890:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.2755" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[   91.756873][   T24] audit: type=1326 audit(2000000039.890:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.2755" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[   91.791757][   T24] audit: type=1326 audit(2000000039.890:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.2755" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[   91.818182][   T24] audit: type=1400 audit(2000000040.010:810): avc:  denied  { mount } for  pid=6632 comm="syz.0.2757" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   91.882282][ T6646] device batadv_slave_1 entered promiscuous mode
[   91.918568][  T511] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   91.994987][ T6663] tipc: Enabling of bearer <ib:pim6reg1> rejected, media not registered
[   92.008509][   T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   92.093075][ T6667] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[   92.237408][ T6690] netlink: 'syz.4.2784': attribute type 2 has an invalid length.
[   92.290185][  T511] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.301169][   T25] usb 2-1: device descriptor read/64, error -71
[   92.314104][  T511] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.324245][  T511] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[   92.333576][  T511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.450177][ T6740] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   92.491308][ T6748] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2812'.
[   92.592714][ T6776] netlink: 'syz.4.2826': attribute type 2 has an invalid length.
[   92.698645][   T25] usb 2-1: device descriptor read/64, error -71
[   92.739582][ T6800] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[   92.747751][ T6800] System zones: 0-2, 18-18, 34-34
[   92.754081][ T6800] EXT4-fs (loop5): 1 orphan inode deleted
[   92.760285][ T6800] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue
[   92.774589][ T6800] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.818908][   T25] usb usb2-port1: attempt power cycle
[   92.829919][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x2
[   92.839794][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.847273][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.848853][ T6810] overlayfs: unrecognized mount option "\¨" or missing value
[   92.856003][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.869889][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.877311][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.884777][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.892287][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.899738][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.907161][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.914606][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.922250][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   92.931078][  T511] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0
[   93.008624][  T511] hid-picolcd 0003:04D8:C002.000A: No report with id 0x11 found
[   93.035218][ T1429] usb 3-1: USB disconnect, device number 6
[   93.238514][   T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   93.408564][   T25] usb 2-1: device descriptor read/8, error -71
[   93.678620][   T25] usb 2-1: device descriptor read/8, error -71
[   93.849258][ T6898] netlink: 'syz.5.2882': attribute type 10 has an invalid length.
[   93.873519][ T6898] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2882'.
[   94.083794][ T1428] kernel write not supported for file /stat (pid: 1428 comm: kworker/0:7)
[   94.139395][ T6948] netem: change failed
[   94.168471][   T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   94.330131][ T6960] device dummy0 entered promiscuous mode
[   94.448585][   T25] usb 2-1: unable to get BOS descriptor or descriptor too short
[   94.548624][   T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.565675][   T25] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   94.575138][   T25] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   94.587339][   T25] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   94.589451][ T6900] F2FS-fs (loop2): Test dummy encryption mode enabled
[   94.601878][   T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   94.619187][   T25] usb 2-1: config 1 interface 1 has no altsetting 0
[   94.621657][ T6900] F2FS-fs (loop2): invalid crc value
[   94.651340][ T6900] F2FS-fs (loop2): Found nat_bits in checkpoint
[   94.743451][ T6900] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   94.754260][ T6900] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[   94.762559][ T6900] F2FS-fs (loop2): Start checkpoint disabled!
[   94.778905][ T6900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   94.810568][ T6900] F2FS-fs (loop2): Should run fsck to repair first.
[   94.908602][   T25] usb 2-1: string descriptor 0 read error: -22
[   94.914924][   T25] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   94.930485][ T6949] F2FS-fs (loop0): invalid crc_offset: 266236
[   94.973811][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.982850][ T6949] F2FS-fs (loop0): Found nat_bits in checkpoint
[   95.069994][ T6949] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   95.100547][ T6949] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=f0000, run fsck to fix.
[   95.109975][ T6949] F2FS-fs (loop0): sanity_check_inode: inode (ino=8) has corrupted i_xattr_nid: 983040, run fsck to fix.
[   95.508561][   T25] usb 2-1: cannot get ctl value: req = 0x82, wValue = 0x201, wIndex = 0x200, type = 4
[   95.528417][   T25] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[   95.558549][   T25] usb 2-1: USB disconnect, device number 10
[   95.723051][ T7048] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[   95.740652][ T7048] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   95.757665][ T7048] F2FS-fs (loop0): fault_type options not supported
[   95.765215][ T7048] F2FS-fs (loop0): invalid crc value
[   95.771516][ T7048] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   95.814591][   T24] kauditd_printk_skb: 49 callbacks suppressed
[   95.814605][   T24] audit: type=1326 audit(2000000044.030:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.2.2955" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0354dff19 code=0x0
[   95.819362][ T7048] F2FS-fs (loop0): Start checkpoint disabled!
[   95.853383][ T7048] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   95.860562][ T7048] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   96.044510][ T6999] F2FS-fs (loop5): Found nat_bits in checkpoint
[   96.105427][ T6999] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   96.256839][ T7107] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   96.536130][ T7124] xt_hashlimit: max too large, truncated to 1048576
[   96.673425][ T7136] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[   96.695956][ T7136] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   96.738436][ T7136] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,
[   96.759500][ T7136] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.774456][ T7136] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.2988: path /384/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[   96.795775][ T7136] EXT4-fs (loop5): Remounting filesystem read-only
[   96.842469][ T7117] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   96.851225][ T7117] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   96.860543][ T7117] F2FS-fs (loop0): invalid crc value
[   96.893039][ T7117] F2FS-fs (loop0): Found nat_bits in checkpoint
[   96.928753][ T7152] EXT4-fs (loop2): Ignoring removed orlov option
[   96.947907][ T7117] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   96.955505][ T7117] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   96.969201][ T7152] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,noquota,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[   97.215605][ T7188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3009'.
[   97.224736][ T7188] tipc: Invalid UDP bearer configuration
[   97.224762][ T7188] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   97.260690][ T7192] tipc: Enabling <eth:lo> not permitted
[   97.266371][ T7192] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[   97.290161][   T24] audit: type=1400 audit(2000000045.510:861): avc:  denied  { bind } for  pid=7195 comm="syz.2.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   97.319559][   T24] audit: type=1400 audit(2000000045.510:862): avc:  denied  { name_bind } for  pid=7195 comm="syz.2.3012" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   97.341663][   T24] audit: type=1400 audit(2000000045.510:863): avc:  denied  { node_bind } for  pid=7195 comm="syz.2.3012" saddr=ff01::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   97.458528][  T499] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   97.564051][ T7208] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   97.588481][ T7208] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   97.598230][ T7208] F2FS-fs (loop2): invalid crc value
[   97.605460][ T7208] F2FS-fs (loop2): Found nat_bits in checkpoint
[   97.647784][ T7208] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   97.655134][ T7208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   97.858623][  T499] usb 2-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.871742][  T499] usb 2-1: config 0 interface 0 has no altsetting 0
[   97.878712][  T499] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[   97.888129][  T499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.899749][  T499] usb 2-1: config 0 descriptor??
[   97.956376][ T7240] xt_hashlimit: size too large, truncated to 1048576
[   98.028790][ T7242] exfat: Deprecated parameter 'utf8'
[   98.044930][ T7242] exfat: Deprecated parameter 'utf8'
[   98.064000][ T7242] exfat: Deprecated parameter 'namecase'
[   98.086079][ T7242] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   98.126353][   T24] audit: type=1400 audit(2000000046.340:864): avc:  denied  { getattr } for  pid=7241 comm="syz.2.3032" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   98.262186][ T7228] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   98.274885][ T7228] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   98.284060][ T7228] F2FS-fs (loop0): invalid crc value
[   98.320865][ T7228] F2FS-fs (loop0): Found nat_bits in checkpoint
[   98.378530][ T7228] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   98.384296][ T7259] xt_hashlimit: size too large, truncated to 1048576
[   98.392429][ T7228] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   98.397033][  T499] hid-led 0003:1294:1320.000B: unknown main item tag 0x0
[   98.407033][  T499] hid-led 0003:1294:1320.000B: unknown main item tag 0x0
[   98.414300][  T499] hid-led 0003:1294:1320.000B: unknown main item tag 0x0
[   98.421545][  T499] hid-led 0003:1294:1320.000B: unknown main item tag 0x0
[   98.441001][  T499] hid-led 0003:1294:1320.000B: unknown main item tag 0x0
[   98.448099][  T499] hid-led 0003:1294:1320.000B: unknown main item tag 0x0
[   98.458798][ T7261] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3038' sets config #0
[   98.460649][  T499] hid-led 0003:1294:1320.000B: hidraw0: USB HID v10.01 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0
[   98.491544][  T499] hid-led 0003:1294:1320.000B: Riso Kagaku Webmail Notifier initialized
[   98.604051][ T1428] usb 2-1: USB disconnect, device number 11
[   98.611410][ T1432] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[   98.620032][ T1432] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[   98.628359][ T1432] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[   98.680168][ T7271] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   98.720603][ T7271] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   98.736965][ T7271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c042e128, mo2=0002]
[   98.748802][ T7277] EXT4-fs (loop4): Test dummy encryption mode enabled
[   98.763916][ T7271] EXT4-fs (loop2): orphan cleanup on readonly fs
[   98.770652][ T7277] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   98.779962][ T7271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3043: bg 0: block 15: invalid block bitmap
[   98.782591][ T7277] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   98.782591][ T7277] 
[   98.802694][ T7277] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,barrier=0x0000000000000005,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue
[   98.834269][ T7277] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[   98.839106][ T7271] EXT4-fs (loop2): Remounting filesystem read-only
[   98.863106][ T7271] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   98.872698][ T7271] EXT4-fs (loop2): 1 truncate cleaned up
[   98.878388][ T7271] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,barrier,nouid32,nomblk_io_submit,
[   98.960463][ T7285] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   98.972412][ T7285] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   98.986396][ T7285] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   98.996058][   T24] audit: type=1400 audit(2000000047.220:865): avc:  denied  { read } for  pid=7270 comm="syz.2.3043" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   98.996204][ T7271] fscrypt (loop2, inode 16): Error -61 getting encryption context
[   99.047347][ T7285] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3357: comm syz.4.3048: Allocating blocks 41-42 which overlap fs metadata
[   99.049664][ T7271] fscrypt (loop2, inode 16): Error -61 getting encryption context
[   99.072438][ T7296] exfat: Deprecated parameter 'namecase'
[   99.078138][ T7296] exfat: Deprecated parameter 'namecase'
[   99.092249][   T24] audit: type=1400 audit(2000000047.310:866): avc:  denied  { create } for  pid=7298 comm="syz.5.3052" dev="anon_inodefs" ino=37450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   99.092943][ T7285] Quota error (device loop4): write_blk: dquota write failed
[   99.122380][ T7285] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[   99.132462][ T7285] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3357: comm syz.4.3048: Allocating blocks 41-42 which overlap fs metadata
[   99.146551][   T24] audit: type=1400 audit(2000000047.340:867): avc:  denied  { ioctl } for  pid=7298 comm="syz.5.3052" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37450 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   99.149135][ T7285] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.3048: Failed to acquire dquot type 1
[   99.184856][ T7285] EXT4-fs error (device loop4): mb_free_blocks:1540: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   99.199519][ T7285] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27
[   99.207994][ T7285] EXT4-fs error (device loop4): ext4_dirty_inode:6191: inode #12: comm syz.4.3048: mark_inode_dirty error
[   99.223099][ T7285] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27
[   99.231604][ T7285] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #12: comm syz.4.3048: mark_inode_dirty error
[   99.245865][ T7285] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27
[   99.254719][ T7285] EXT4-fs error (device loop4) in ext4_orphan_del:3292: error 27
[   99.264764][ T7296] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   99.268182][ T7285] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27
[   99.285782][ T7285] EXT4-fs error (device loop4): ext4_truncate:4403: inode #12: comm syz.4.3048: mark_inode_dirty error
[   99.304582][ T7285] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3106: error 27
[   99.325910][ T7285] EXT4-fs (loop4): 1 truncate cleaned up
[   99.338007][ T7285] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue
[   99.360970][ T7301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   99.370072][ T7301] System zones: 1-12
[   99.375100][ T7301] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.3053: missing EA_INODE flag
[   99.387591][ T7301] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3053: error while reading EA inode 12 err=-117
[   99.400524][ T7301] EXT4-fs (loop2): 1 orphan inode deleted
[   99.406286][ T7301] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue
[   99.445529][ T7301] SELinux:  Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped).
[   99.481565][ T7285] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.3048: Failed to acquire dquot type 1
[   99.553696][ T7318] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,,errors=continue
[   99.676254][ T7318] EXT4-fs warning (device loop1): empty_inline_dir:1865: bad inline directory (dir #12) - no `..'
[   99.730117][ T7328] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.3065: Failed to acquire dquot type 1
[   99.748806][ T7328] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.3065: Failed to acquire dquot type 1
[   99.788903][ T7328] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3065: bg 0: block 248: padding at end of block bitmap is not set
[   99.819053][ T7350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3073'.
[   99.836360][ T7328] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   99.887849][ T7328] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.3065: Failed to acquire dquot type 1
[   99.922319][ T7328] EXT4-fs (loop2): 1 orphan inode deleted
[   99.941403][ T7328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   99.972322][ T7328] ext4 filesystem being mounted at /673/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.271174][ T7330] F2FS-fs (loop4): Test dummy encryption mode enabled
[  100.282069][ T7330] F2FS-fs (loop4): invalid crc value
[  100.319431][ T7330] F2FS-fs (loop4): Found nat_bits in checkpoint
[  100.357398][ T7330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  100.844633][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3115'.
[  100.853014][ T7442] EXT4-fs (loop0): Ignoring removed orlov option
[  100.860200][ T7442] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  100.873252][ T7444] tipc: MTU too low for tipc bearer
[  100.881116][ T7442] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resgid=0x0000000000000000,auto_da_alloc=0x0000000000000003,acl,debug_want_extra_isize=0x0000000000000080,inode_readahead_blks=0x0000000000100000,errors=remount-ro,noinit_itable,orlov,
[  100.911449][   T24] kauditd_printk_skb: 14 callbacks suppressed
[  100.911463][   T24] audit: type=1400 audit(2000000049.130:872): avc:  denied  { relabelto } for  pid=7448 comm="syz.2.3116" name="blkio.bfq.io_serviced" dev="tmpfs" ino=3506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=""
[  100.946685][   T24] audit: type=1400 audit(2000000049.170:873): avc:  denied  { associate } for  pid=7448 comm="syz.2.3116" name="blkio.bfq.io_serviced" dev="tmpfs" ino=3506 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=""
[  100.991462][   T24] audit: type=1400 audit(2000000049.210:874): avc:  denied  { unlink } for  pid=280 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=3506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=""
[  101.086113][   T24] audit: type=1400 audit(2000000049.300:875): avc:  denied  { setopt } for  pid=7470 comm="syz.2.3127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  101.194636][ T7473] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue
[  101.213384][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3135'.
[  101.223077][ T7473] ext4 filesystem being mounted at /623/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.265589][   T24] audit: type=1400 audit(2000000049.480:876): avc:  denied  { set_context_mgr } for  pid=7499 comm="syz.2.3141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  101.287225][ T7500] binder: 7499:7500 ioctl c0306201 2000000001c0 returned -22
[  101.322664][ T7506] syz.4.3142 (7506): /proc/7505/oom_adj is deprecated, please use /proc/7505/oom_score_adj instead.
[  101.336529][ T7509] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  101.438555][ T1428] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  101.510311][ T7545] EXT4-fs (loop1): Ignoring removed orlov option
[  101.521329][ T7545] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  101.540939][ T7545] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resgid=0x0000000000000000,auto_da_alloc=0x0000000000000003,acl,debug_want_extra_isize=0x0000000000000080,inode_readahead_blks=0x0000000000100000,errors=remount-ro,noinit_itable,orlov,
[  101.645097][ T7554] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,lazytime,max_batch_time=0x0000000000004948,max_dir_size_kb=0x0000000000000004,user_xattr,,errors=continue
[  101.664594][ T7554] ext4 filesystem being mounted at /692/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  101.848577][ T1428] usb 6-1: unable to get BOS descriptor or descriptor too short
[  101.864470][ T7566] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  101.872477][ T7566] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  101.881736][ T7566] F2FS-fs (loop0): invalid crc value
[  101.895799][ T7566] F2FS-fs (loop0): Found nat_bits in checkpoint
[  101.903431][ T7574] EXT4-fs (loop4): Test dummy encryption mode enabled
[  101.928626][ T1428] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.943345][ T1428] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  101.955017][ T1428] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  101.966053][ T7574] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.3175: inode has both inline data and extents flags
[  101.978676][ T7566] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  101.981176][ T1428] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  101.986673][ T7566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  101.999410][ T7574] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.3175: couldn't read orphan inode 15 (err -117)
[  101.999626][ T1428] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  102.009133][ T7574] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[  102.019192][ T1428] usb 6-1: config 1 interface 1 has no altsetting 0
[  102.071830][ T7580] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue
[  102.101866][  T300] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  102.114219][  T300] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  102.220844][ T7603] device vlan4 entered promiscuous mode
[  102.226706][ T7603] device bridge0 entered promiscuous mode
[  102.324201][   T24] audit: type=1326 audit(2000000050.540:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.0.3193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  102.352037][ T1428] usb 6-1: string descriptor 0 read error: -22
[  102.357582][   T24] audit: type=1326 audit(2000000050.540:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.0.3193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  102.369791][ T1428] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  102.385496][   T24] audit: type=1326 audit(2000000050.540:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.0.3193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  102.396112][ T1428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.425835][   T24] audit: type=1326 audit(2000000050.540:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.0.3193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  102.452221][   T24] audit: type=1326 audit(2000000050.570:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.0.3193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  102.491266][ T7626] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  102.500533][ T7626] ext4 filesystem being mounted at /701/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.522185][ T7626] EXT4-fs error (device loop2): ext4_get_first_dir_block:3730: inode #12: comm syz.2.3195: directory missing '..'
[  102.546943][ T7633] device vlan2 entered promiscuous mode
[  102.553005][ T7633] device bridge0 entered promiscuous mode
[  102.647700][ T7642] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3201'.
[  102.657414][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3201'.
[  102.670246][ T7629] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  102.677922][ T7629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  102.721163][ T7629] F2FS-fs (loop1): invalid crc value
[  102.747837][ T7629] F2FS-fs (loop1): Found nat_bits in checkpoint
[  102.760316][ T7652] device vlan0 entered promiscuous mode
[  102.828304][ T7629] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  102.837886][ T7629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  102.928578][ T1428] usb 6-1: cannot get ctl value: req = 0x82, wValue = 0x201, wIndex = 0x200, type = 4
[  102.938201][ T1428] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  102.960632][ T1428] usb 6-1: USB disconnect, device number 8
[  103.043248][ T7661] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,journal_ioprio=0x0000000000000004,,errors=continue
[  103.056337][ T7661] ext4 filesystem being mounted at /711/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.176425][ T7670] ip_tables: iptables: counters copy to user failed while replacing table
[  103.185551][  T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  103.222789][ T7639] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0)
[  103.248596][ T7639] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  103.262732][ T7639] F2FS-fs (loop0): invalid crc value
[  103.281951][ T7639] F2FS-fs (loop0): Found nat_bits in checkpoint
[  103.320139][ T7639] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  103.327322][ T7639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  103.361220][ T7639] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix.
[  103.371404][ T7639] F2FS-fs (loop0): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4
[  103.502452][ T7704] EXT4-fs (loop2): Ignoring removed oldalloc option
[  103.509952][ T7704] EXT4-fs (loop2): Ignoring removed nobh option
[  103.530361][ T7704] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,nobh,quota,,errors=continue
[  103.541290][ T7704] ext4 filesystem being mounted at /726/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.555537][ T7704] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  103.563981][ T7704] EXT4-fs error (device loop2): ext4_dirty_inode:6191: inode #2: comm syz.2.3227: mark_inode_dirty error
[  103.575751][ T7704] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  103.586137][ T7704] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  103.594567][ T7704] EXT4-fs error (device loop2): ext4_dirty_inode:6191: inode #2: comm syz.2.3227: mark_inode_dirty error
[  103.606150][ T7704] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  103.614583][ T7704] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.3227: mark_inode_dirty error
[  103.626058][ T7704] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  103.634485][ T7704] EXT4-fs error (device loop2): ext4_dirty_inode:6191: inode #2: comm syz.2.3227: mark_inode_dirty error
[  103.728676][   T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  103.755805][ T7730] xt_hashlimit: size too large, truncated to 1048576
[  103.952730][ T7754] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  103.971832][ T7754] FAT-fs (loop0): error, clusters badly computed (0 != 1)
[  103.979209][ T7754] FAT-fs (loop0): Filesystem has been set read-only
[  103.985902][ T7754] FAT-fs (loop0): error, clusters badly computed (1 != 2)
[  103.993475][ T7754] FAT-fs (loop0): error, clusters badly computed (2 != 3)
[  104.000857][ T7754] FAT-fs (loop0): error, clusters badly computed (3 != 4)
[  104.008076][ T7754] FAT-fs (loop0): error, clusters badly computed (4 != 5)
[  104.015527][ T7754] FAT-fs (loop0): error, clusters badly computed (5 != 6)
[  104.022944][ T7754] FAT-fs (loop0): error, clusters badly computed (6 != 7)
[  104.030293][ T7754] FAT-fs (loop0): error, clusters badly computed (7 != 8)
[  104.037518][ T7754] FAT-fs (loop0): error, clusters badly computed (8 != 9)
[  104.044980][ T7754] FAT-fs (loop0): error, clusters badly computed (9 != 10)
[  104.052543][ T7754] FAT-fs (loop0): error, clusters badly computed (10 != 11)
[  104.060152][ T7754] FAT-fs (loop0): error, clusters badly computed (11 != 12)
[  104.067755][ T7754] FAT-fs (loop0): error, clusters badly computed (12 != 13)
[  104.075276][ T7754] FAT-fs (loop0): error, clusters badly computed (13 != 14)
[  104.093245][  T279] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  104.108573][   T25] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.121484][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[  104.128097][   T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00
[  104.137206][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.163796][   T25] usb 6-1: config 0 descriptor??
[  104.258120][ T7763] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,journal_ioprio=0x0000000000000004,,errors=continue
[  104.280418][ T7763] ext4 filesystem being mounted at /704/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.413754][ T7768] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  104.422036][ T7768] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  104.439878][ T7768] F2FS-fs (loop2): invalid crc value
[  104.450308][ T7768] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  104.481115][ T7768] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  104.488647][ T7768] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  104.518977][  T280] attempt to access beyond end of device
[  104.518977][  T280] loop2: rw=2049, want=45104, limit=40427
[  104.578693][ T1428] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  104.669761][   T25] apple 0003:05AC:0241.000C: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling
[  104.689429][   T25] input: HID 05ac:0241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:0241.000C/input/input19
[  104.784018][   T25] apple 0003:05AC:0241.000C: input,hidraw0: USB HID v0.50 Joystick [HID 05ac:0241] on usb-dummy_hcd.5-1/input0
[  104.879483][  T448] usb 6-1: USB disconnect, device number 9
[  104.948621][ T1428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.959598][ T1428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.973029][ T1428] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  104.982143][ T1428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.998939][ T1428] usb 2-1: config 0 descriptor??
[  105.191645][ T7816] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[  105.200915][ T7816] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  105.210656][ T7816] F2FS-fs (loop2): invalid crc value
[  105.257325][ T7816] F2FS-fs (loop2): Found nat_bits in checkpoint
[  105.298138][ T7816] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  105.308546][ T7816] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  105.316212][ T7839] EXT4-fs (loop4): Ignoring removed oldalloc option
[  105.344523][ T7839] EXT4-fs (loop4): Test dummy encryption mode enabled
[  105.351646][ T7839] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  105.377772][ T7839] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.3280: bad orphan inode 131083
[  105.393385][ T7839] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000008,resgid=0x0000000000000000,inlinecrypt,oldalloc,discard,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000001,test_dummy_encryption=v1,noblock_validity,,errors=continue
[  105.420196][ T7816] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  105.480749][ T1428] microsoft 0003:045E:009D.000D: unknown main item tag 0x2
[  105.488847][ T1428] microsoft 0003:045E:009D.000D: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0
[  105.504961][ T7831] F2FS-fs (loop0): invalid crc value
[  105.510944][ T1428] microsoft 0003:045E:009D.000D: no inputs found
[  105.517974][ T1428] microsoft 0003:045E:009D.000D: could not initialize ff, continuing anyway
[  105.528294][ T7831] F2FS-fs (loop0): Found nat_bits in checkpoint
[  105.566658][ T7831] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  105.685419][ T1428] usb 2-1: USB disconnect, device number 12
[  105.713659][ T7864] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  105.894065][ T7885] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3298'.
[  105.912036][ T7882] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[  105.912036][ T7882] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  105.912036][ T7882] 
[  105.935098][ T7882] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  105.945535][   T24] kauditd_printk_skb: 74 callbacks suppressed
[  105.945548][   T24] audit: type=1326 audit(2000000054.169:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.3300" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  105.947483][ T7882] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  105.962014][   T24] audit: type=1326 audit(2000000054.169:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.3300" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  105.977745][ T7882] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  106.017859][   T24] audit: type=1326 audit(2000000054.179:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.3300" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  106.044105][ T7882] EXT4-fs (loop2): 1 truncate cleaned up
[  106.049840][ T7882] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nouser_xattr,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue
[  106.071906][   T24] audit: type=1326 audit(2000000054.179:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.3300" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  106.097278][   T24] audit: type=1326 audit(2000000054.179:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.3300" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  106.124285][   T24] audit: type=1326 audit(2000000054.179:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.3300" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  106.150260][   T24] audit: type=1326 audit(2000000054.179:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.3300" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  106.175776][   T24] audit: type=1326 audit(2000000054.179:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.3300" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x7ffc0000
[  106.249728][ T7898] EXT4-fs (loop0): Ignoring removed nobh option
[  106.283522][ T7898] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,nogrpid,quota,,errors=continue
[  106.296271][ T7898] ext4 filesystem being mounted at /724/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.330379][ T7921] ip_tables: iptables: counters copy to user failed while replacing table
[  106.379803][ T7917] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,bsdgroups,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue
[  106.454210][   T24] audit: type=1400 audit(2000000054.669:964): avc:  denied  { rmdir } for  pid=7913 comm="syz.1.3310" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  106.490472][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'.
[  106.550211][ T7940] device vlan3 entered promiscuous mode
[  106.655908][ T7935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  106.674542][ T7935] ext4 filesystem being mounted at /726/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  106.729880][ T7964] xt_hashlimit: size too large, truncated to 1048576
[  106.810934][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3335'.
[  106.877248][ T7985] xt_hashlimit: size too large, truncated to 1048576
[  107.062327][ T8011] ------------[ cut here ]------------
[  107.078055][ T8011] trace type BPF program uses run-time allocation
[  107.088621][ T8011] WARNING: CPU: 0 PID: 8011 at kernel/bpf/verifier.c:10536 check_map_prog_compatibility+0x5d8/0x740
[  107.118503][ T8011] Modules linked in:
[  107.122609][ T8011] CPU: 0 PID: 8011 Comm: syz.0.3352 Tainted: G        W         syzkaller #0
[  107.141643][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  107.161988][ T8011] RIP: 0010:check_map_prog_compatibility+0x5d8/0x740
[  107.178582][ T8011] Code: 85 e9 14 fe ff ff e8 67 d0 ef ff 31 c0 e9 15 fe ff ff e8 5b d0 ef ff c6 05 e5 bf 4b 05 01 48 c7 c7 a0 de 25 85 e8 c8 53 05 03 <0f> 0b e9 7d fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9b fa ff
[  107.198572][ T8011] RSP: 0018:ffffc90000fd7430 EFLAGS: 00010246
[  107.204685][ T8011] RAX: b9dd72aa530cb100 RBX: 0000000000000001 RCX: 0000000000080000
[  107.212852][ T8011] RDX: ffffc900014eb000 RSI: 0000000000001b7d RDI: 0000000000001b7e
[  107.222490][ T8011] RBP: ffffc90000fd7470 R08: ffff8881f7052fff R09: 1ffff1103ee0a5ff
[  107.230844][ T8011] R10: dffffc0000000000 R11: ffffed103ee0a600 R12: ffff88812cdfc000
[  107.244523][ T8011] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888111de4000
[  107.258580][ T8011] FS:  00007f747ec916c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  107.267576][ T8011] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  107.281094][ T8011] CR2: 000000110c30660e CR3: 000000011270e000 CR4: 00000000003506b0
[  107.295104][ T8011] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  107.303477][ T8011] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  107.311898][ T8011] Call Trace:
[  107.316596][ T8011]  ? __fdget+0x1a1/0x230
[  107.321074][ T8011]  resolve_pseudo_ldimm64+0x557/0x10b0
[  107.326605][   T24] audit: type=1400 audit(2000000055.549:965): avc:  denied  { append } for  pid=8026 comm="syz.1.3360" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  107.351526][ T8011]  ? bpf_check+0xdcd0/0xdcd0
[  107.356175][ T8011]  ? kvmalloc_node+0x88/0x130
[  107.361007][ T8011]  bpf_check+0x91f3/0xdcd0
[  107.365557][ T8011]  ? get_page_from_freelist+0x225f/0x23f0
[  107.371399][ T8011]  ? __alloc_pages_nodemask+0x29a/0x640
[  107.377117][ T8011]  ? bpf_get_btf_vmlinux+0x70/0x70
[  107.382328][ T8011]  ? 0xffffffffa002835c
[  107.386520][ T8011]  ? is_bpf_text_address+0x177/0x190
[  107.391987][ T8011]  ? selinux_bpf_prog_alloc+0x51/0x140
[  107.397491][ T8011]  ? __kernel_text_address+0xa0/0x100
[  107.404209][ T8011]  ? unwind_get_return_address+0x4d/0x90
[  107.414036][ T8011]  ? stack_trace_save+0xf0/0xf0
[  107.421640][ T8011]  ? arch_stack_walk+0xee/0x140
[  107.426605][ T8011]  ? stack_trace_save+0xa6/0xf0
[  107.438236][ T8011]  ? stack_trace_snprint+0xe0/0xe0
[  107.443790][ T8011]  ? selinux_bpf_prog_alloc+0x51/0x140
[  107.450660][ T8011]  ? selinux_bpf_prog_alloc+0x51/0x140
[  107.456212][ T8011]  ? __kasan_kmalloc+0xe6/0x100
[  107.461445][ T8011]  ? __kasan_kmalloc+0xd4/0x100
[  107.466365][ T8011]  ? kmem_cache_alloc_trace+0x179/0x2e0
[  107.472347][ T8011]  ? selinux_bpf_prog_alloc+0x51/0x140
[  107.479271][ T8011]  ? security_bpf_prog_alloc+0x62/0x90
[  107.484868][ T8011]  ? bpf_prog_load+0x9fa/0x14e0
[  107.492185][ T8011]  ? __se_sys_bpf+0x49a/0x740
[  107.502909][ T8011]  ? __x64_sys_bpf+0x7b/0x90
[  107.507891][ T8011]  ? do_syscall_64+0x31/0x40
[  107.513795][ T8011]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  107.520145][ T8011]  ? memset+0x35/0x40
[  107.525495][ T8011]  ? bpf_obj_name_cpy+0x193/0x1e0
[  107.527625][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3363'.
[  107.531162][ T8011]  bpf_prog_load+0x1004/0x14e0
[  107.545432][ T8011]  ? map_freeze+0x330/0x330
[  107.555453][ T8011]  ? selinux_bpf+0xc7/0xf0
[  107.560381][ T8011]  ? security_bpf+0x82/0xa0
[  107.566627][ T8011]  __se_sys_bpf+0x49a/0x740
[  107.571534][ T8011]  ? __x64_sys_bpf+0x90/0x90
[  107.576203][ T8011]  ? __kasan_check_read+0x11/0x20
[  107.582939][ T8011]  __x64_sys_bpf+0x7b/0x90
[  107.587430][ T8011]  do_syscall_64+0x31/0x40
[  107.592153][ T8011]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  107.598141][ T8011] RIP: 0033:0x7f7480242f19
[  107.602890][ T8011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.626870][ T8011] RSP: 002b:00007f747ec91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  107.638631][ T8011] RAX: ffffffffffffffda RBX: 00007f74804bffa0 RCX: 00007f7480242f19
[  107.646776][ T8011] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000005
[  107.655016][ T8011] RBP: 00007f74802d1f6d R08: 0000000000000000 R09: 0000000000000000
[  107.664928][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.673206][ T8011] R13: 00007f74804c0038 R14: 00007f74804bffa0 R15: 00007ffc0814cef8
[  107.683073][ T8011] ---[ end trace 1c80bfce59df2ecb ]---
[  107.753879][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'.
[  107.884030][ T8042] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  107.898875][ T8042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  107.909422][ T8042] F2FS-fs (loop1): invalid crc value
[  107.927111][ T8042] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  107.958771][ T8042] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  107.966068][ T8042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  108.004795][  T281] attempt to access beyond end of device
[  108.004795][  T281] loop1: rw=2049, want=45104, limit=40427
[  108.067943][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'.
[  108.079862][ T8102] device gretap0 entered promiscuous mode
[  108.085656][ T8102] device macsec2 entered promiscuous mode
[  108.092601][ T8102] device gretap0 left promiscuous mode
[  108.134951][ T8103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  108.170329][ T8103] System zones: 1-3, 19-19, 35-36
[  108.176031][ T8103] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue
[  108.185908][ T8103] ext4 filesystem being mounted at /772/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  108.213331][ T8118] raw_sendmsg: syz.5.3399 forgot to set AF_INET. Fix it!
[  108.340961][ T8130] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  108.441688][ T8157] ip_tables: iptables: counters copy to user failed while replacing table
[  108.569426][ T8186] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3433'.
[  108.578714][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3433'.
[  108.749772][ T8170] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  108.757576][ T8170] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  108.767181][ T8170] F2FS-fs (loop5): invalid crc value
[  108.774127][ T8170] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  108.808040][ T8170] F2FS-fs (loop5): Start checkpoint disabled!
[  108.823648][ T8170] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  108.831031][ T8170] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  108.855783][ T8170] F2FS-fs (loop5): Skipping Checkpoint. Checkpoints currently disabled.
[  108.870728][ T8213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3442'.
[  108.885611][  T300] attempt to access beyond end of device
[  108.885611][  T300] loop5: rw=2049, want=45104, limit=40427
[  108.970904][ T8217] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  109.090253][ T8228] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  109.099558][ T8228] ext4 filesystem being mounted at /592/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  109.179364][ T8228] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option
[  109.207507][ T8233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  109.208287][ T8228] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  109.208287][ T8228] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  109.208287][ T8228] 
[  109.235184][ T8228] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option
[  109.245684][ T8228] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  109.258012][ T8228] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  109.269689][ T8228] EXT4-fs (loop1): can't enable nombcache during remount
[  109.287150][ T8255] SELinux:  policydb magic number 0x87b3c73f does not match expected magic number 0xf97cff8c
[  109.299639][ T8255] SELinux: failed to load policy
[  109.305063][ T8244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  109.372311][ T8266] ip_tables: iptables: counters copy to user failed while replacing table
[  109.434938][ T8279] netem: change failed
[  109.518804][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'.
[  109.564960][    C1] print_req_error: 1 callbacks suppressed
[  109.564976][    C1] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.579055][ T8308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  109.581882][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  109.599644][    C1] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.610534][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  109.618527][ T8312]  loop2: unable to read partition table
[  109.624272][ T8312] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  109.637895][    C1] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.648896][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  109.658812][    C1] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.669797][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  109.677888][    C1] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.688798][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  109.696832][    C1] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.707783][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  109.716686][    C1] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.717319][ T8308] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #16: comm syz.0.3487: invalid indirect mapped block 32768 (level 2)
[  109.727598][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  109.758957][ T8308] EXT4-fs (loop0): 1 orphan inode deleted
[  109.764757][ T8308] EXT4-fs (loop0): 1 truncate cleaned up
[  109.775587][ T8308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  109.811223][ T8308] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  109.962514][ T8303] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  109.988482][ T8303] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  110.055822][ T8303] F2FS-fs (loop5): invalid crc value
[  110.070796][ T8303] F2FS-fs (loop5): Found nat_bits in checkpoint
[  110.088806][ T8343] exfat: Deprecated parameter 'utf8'
[  110.094176][ T8343] exfat: Deprecated parameter 'utf8'
[  110.113447][ T8303] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  110.120702][ T8303] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  110.128613][ T8343] exfat: Deprecated parameter 'namecase'
[  110.134295][ T8343] exfat: Deprecated parameter 'namecase'
[  110.176041][ T2462] attempt to access beyond end of device
[  110.176041][ T2462] loop5: rw=2049, want=45104, limit=40427
[  110.188512][   T52] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  110.206268][ T8343] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d)
[  110.232753][ T8354] device macsec2 entered promiscuous mode
[  110.358064][ T8359] ip_tables: iptables: counters copy to user failed while replacing table
[  110.422449][ T8328] F2FS-fs (loop1): invalid crc value
[  110.459552][ T8328] F2FS-fs (loop1): Found nat_bits in checkpoint
[  110.495736][ T8328] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  110.505520][ T8328] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  110.548633][   T52] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  110.561624][   T52] usb 3-1: config 0 interface 0 has no altsetting 0
[  110.568272][   T52] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  110.577536][   T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.586634][   T52] usb 3-1: config 0 descriptor??
[  110.983137][ T8392] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  110.990762][ T8392] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  111.011325][ T8392] F2FS-fs (loop4): invalid crc value
[  111.019924][ T8392] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  111.050843][ T8392] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  111.058023][ T8392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  111.070511][   T52] input: HID 0810:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0810:0001.000E/input/input21
[  111.084321][   T52] pantherlord 0003:0810:0001.000E: input,hidraw0: USB HID v80.00 Joystick [HID 0810:0001] on usb-dummy_hcd.2-1/input0
[  111.097285][   T52] pantherlord 0003:0810:0001.000E: no output reports found
[  111.115079][  T283] attempt to access beyond end of device
[  111.115079][  T283] loop4: rw=2049, want=45104, limit=40427
[  111.130080][ T8412] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[  111.139168][ T8412] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.208834][ T1428] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  111.230528][   T24] kauditd_printk_skb: 38 callbacks suppressed
[  111.230542][   T24] audit: type=1400 audit(2000000059.449:1004): avc:  denied  { read } for  pid=8417 comm="syz.5.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  111.266685][ T8422] ip_tables: iptables: counters copy to user failed while replacing table
[  111.283277][   T15] usb 3-1: USB disconnect, device number 7
[  111.424336][   T24] audit: type=1400 audit(2000000059.639:1005): avc:  denied  { create } for  pid=8440 comm="syz.5.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  111.459635][ T8448] netlink: 'syz.0.3543': attribute type 27 has an invalid length.
[  111.563261][ T8454] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue
[  111.573908][ T1428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  111.585273][ T1428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.598514][ T1428] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  111.598703][ T8454] ext4 filesystem being mounted at /797/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.607714][ T1428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.627816][ T1428] usb 2-1: config 0 descriptor??
[  111.683085][ T8447] F2FS-fs (loop5): Unrecognized mount option "noflush" or missing value
[  111.772076][   T24] audit: type=1326 audit(2000000059.989:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.0.3549" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7480242f19 code=0x0
[  111.815883][ T8462] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  111.844271][ T8462] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.3548: invalid indirect mapped block 256 (level 2)
[  111.844384][ T8471] ip_tables: iptables: counters copy to user failed while replacing table
[  111.860425][ T8462] EXT4-fs (loop5): 2 truncates cleaned up
[  111.873647][ T8462] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue
[  111.892265][ T8462] EXT4-fs error (device loop5): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.5.3548: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=0, size=1024 fake=1
[  112.043688][ T8496] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  112.110333][ T1428] input: HID 046a:0023 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046A:0023.000F/input/input22
[  112.139877][ T1428] cherry 0003:046A:0023.000F: input,hidraw0: USB HID v0.00 Joystick [HID 046a:0023] on usb-dummy_hcd.1-1/input0
[  112.152847][ T8505] __nla_validate_parse: 1 callbacks suppressed
[  112.152856][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3565'.
[  112.219329][ T8499] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  112.226324][ T8499] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  112.239504][ T8499] F2FS-fs (loop5): fault_injection options not supported
[  112.246737][ T8499] F2FS-fs (loop5): fault_type options not supported
[  112.255048][ T8499] F2FS-fs (loop5): invalid crc value
[  112.279397][ T8499] F2FS-fs (loop5): Found nat_bits in checkpoint
[  112.286611][   T24] audit: type=1400 audit(2000000060.499:1007): avc:  denied  { read } for  pid=8518 comm="syz.4.3569" name="file0" dev="tmpfs" ino=3471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  112.317637][   T25] usb 2-1: USB disconnect, device number 13
[  112.344578][ T8499] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  112.356477][ T8499] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  112.396481][   T24] audit: type=1400 audit(2000000060.609:1008): avc:  denied  { setattr } for  pid=8497 comm="syz.5.3563" name="cgroup.controllers" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  112.421125][ T2462] attempt to access beyond end of device
[  112.421125][ T2462] loop5: rw=2049, want=45104, limit=40427
[  112.572837][ T8535] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d)
[  112.589277][ T8535] exFAT-fs (loop5): error, invalid size(size(1) > aligned(18374686479671623680)
[  112.589277][ T8535] 
[  112.601563][ T8535] exFAT-fs (loop5): Filesystem has been set read-only
[  112.679047][ T8544] exfat: Deprecated parameter 'utf8'
[  112.684497][ T8544] exfat: Deprecated parameter 'namecase'
[  112.715787][ T8544] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xa33dbf40, utbl_chksum : 0xe619d30d)
[  112.721153][ T8547] netlink: 'syz.0.3581': attribute type 16 has an invalid length.
[  112.803519][ T8559] ip_tables: iptables: counters copy to user failed while replacing table
[  112.832512][ T8557] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  112.861563][ T8566] ip_tables: iptables: counters copy to user failed while replacing table
[  112.967955][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'.
[  113.018347][ T8586] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue
[  113.033164][ T8586] ext4 filesystem being mounted at /607/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.156384][ T8615] xt_hashlimit: size too large, truncated to 1048576
[  113.183651][ T8617] EXT4-fs (loop1): dax option not supported
[  113.299447][   T24] audit: type=1400 audit(2000000061.519:1009): avc:  denied  { remount } for  pid=8624 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  113.339941][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'.
[  113.408495][   T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  113.487084][ T8643] ip_tables: iptables: counters copy to user failed while replacing table
[  113.503982][ T8643] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  113.540512][   T24] audit: type=1400 audit(2000000061.759:1010): avc:  denied  { read } for  pid=8647 comm="syz.0.3627" path="socket:[41603]" dev="sockfs" ino=41603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  113.649243][   T24] audit: type=1400 audit(2000000061.869:1011): avc:  denied  { audit_control } for  pid=8668 comm="syz.4.3637" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  113.766457][ T8694] exfat: Deprecated parameter 'utf8'
[  113.777193][ T8700] ip_tables: iptables: counters copy to user failed while replacing table
[  113.786089][ T8694] exfat: Deprecated parameter 'namecase'
[  113.792141][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.803597][ T8694] exfat: Deprecated parameter 'utf8'
[  113.809003][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.819059][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  113.832015][   T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  113.841124][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.860176][ T8694] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  113.873348][ T8707] ip_tables: iptables: counters copy to user failed while replacing table
[  113.891177][ T8701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  113.903001][   T25] usb 6-1: config 0 descriptor??
[  113.951352][ T8720] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3662'.
[  113.962620][ T8720] device vlan3 entered promiscuous mode
[  114.051512][   T24] audit: type=1400 audit(2000000062.269:1012): avc:  denied  { connect } for  pid=8731 comm="syz.4.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  114.084834][ T8739] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  114.097907][ T8736] EXT4-fs (loop1): Ignoring removed oldalloc option
[  114.106988][ T8736] EXT4-fs (loop1): Ignoring removed orlov option
[  114.126972][ T8736] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,max_dir_size_kb=0x0000000000000002,grpjquota=,,errors=continue
[  114.169284][ T8744] exfat: Deprecated parameter 'utf8'
[  114.174656][ T8744] exfat: Deprecated parameter 'namecase'
[  114.189800][ T8736] SELinux:  Context : is not valid (left unmapped).
[  114.195418][ T8744] exfat: Deprecated parameter 'utf8'
[  114.202278][   T24] audit: type=1400 audit(2000000062.429:1013): avc:  denied  { relabelto } for  pid=8734 comm="syz.1.3669" name="rdma.current" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  114.239150][ T8744] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  114.359251][ T8766] xt_hashlimit: size too large, truncated to 1048576
[  114.389503][   T25] plantronics 0003:047F:FFFF.0010: unbalanced collection at end of report description
[  114.402646][ T8768] netlink: 'syz.2.3683': attribute type 30 has an invalid length.
[  114.410978][   T25] plantronics 0003:047F:FFFF.0010: parse failed
[  114.419540][   T25] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22
[  114.492470][ T8779] exfat: Deprecated parameter 'utf8'
[  114.515375][ T8779] exfat: Deprecated parameter 'namecase'
[  114.543301][ T8779] exfat: Deprecated parameter 'utf8'
[  114.574347][ T8779] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  114.594686][   T15] usb 6-1: USB disconnect, device number 10
[  114.601305][ T8760] F2FS-fs (loop0): invalid crc value
[  114.626212][ T8760] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  114.679938][ T8760] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  114.713714][  T279] attempt to access beyond end of device
[  114.713714][  T279] loop0: rw=2049, want=45104, limit=40427
[  114.973169][ T8814] erofs: (device loop4): mounted with root inode @ nid 36.
[  115.004382][ T8814] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  115.194707][ T8875] netlink: 'syz.1.3727': attribute type 29 has an invalid length.
[  115.419555][ T8912] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3740' resets device
[  116.015714][ T8978] netlink: 'syz.0.3755': attribute type 1 has an invalid length.
[  116.241495][ T8864] F2FS-fs (loop5): Invalid segment/section count (24 != 24 * 5)
[  116.252348][ T8864] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  116.272099][ T8864] F2FS-fs (loop5): Test dummy encryption mode enabled
[  116.288262][ T8864] F2FS-fs (loop5): invalid crc value
[  116.320285][ T8864] F2FS-fs (loop5): Found nat_bits in checkpoint
[  116.383139][ T8864] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  116.390406][ T8864] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  116.399682][ T8898] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24)
[  116.408512][ T8898] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  116.416879][ T8898] F2FS-fs (loop2): Test dummy encryption mode enabled
[  116.425077][ T8898] F2FS-fs (loop2): invalid crc value
[  116.449328][ T8898] F2FS-fs (loop2): Found nat_bits in checkpoint
[  116.504884][ T8898] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  116.526225][ T8898] F2FS-fs (loop2): Start checkpoint disabled!
[  116.544816][ T8898] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  116.554586][ T8898] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  116.640514][ T8974] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  116.647318][ T8974] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  116.678672][ T8974] F2FS-fs (loop1): invalid crc value
[  116.697380][ T8974] F2FS-fs (loop1): Found nat_bits in checkpoint
[  116.742669][ T8974] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  116.749881][ T8974] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  116.779008][   T24] kauditd_printk_skb: 14 callbacks suppressed
[  116.779022][   T24] audit: type=1400 audit(2000000064.999:1028): avc:  denied  { read } for  pid=8998 comm="syz.5.3758" path="socket:[43082]" dev="sockfs" ino=43082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  116.827001][ T8974] fscrypt (loop1, inode 8): Error -61 getting encryption context
[  116.918828][   T24] audit: type=1400 audit(2000000065.139:1029): avc:  denied  { getopt } for  pid=9006 comm="syz.5.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  117.159320][ T9034] exfat: Deprecated parameter 'utf8'
[  117.168727][ T9034] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001023e, chksum : 0x54ac9118, utbl_chksum : 0xe619d30d)
[  117.236876][ T9039] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  117.258582][   T24] audit: type=1326 audit(2000000065.469:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.3779" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55cdf1f19 code=0x7ffc0000
[  117.283848][   T24] audit: type=1326 audit(2000000065.469:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.3779" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55cdf1f19 code=0x7ffc0000
[  117.309680][ T9039] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,noinit_itable,nombcache,
[  117.348547][   T24] audit: type=1326 audit(2000000065.469:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.3779" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55cdf1f19 code=0x7ffc0000
[  117.399474][ T9039] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.3777: missing EA_INODE flag
[  117.430020][   T24] audit: type=1326 audit(2000000065.469:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.3779" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55cdf1f19 code=0x7ffc0000
[  117.469212][ T9039] EXT4-fs (loop4): Remounting filesystem read-only
[  117.486104][ T9039] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3777: error while reading EA inode 11 err=-117
[  117.518863][   T24] audit: type=1326 audit(2000000065.469:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.3779" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc55cdf1f19 code=0x7ffc0000
[  117.554014][   T24] audit: type=1326 audit(2000000065.469:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.3779" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55cdf1f19 code=0x7ffc0000
[  117.579386][   T24] audit: type=1326 audit(2000000065.469:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.3779" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55cdf1f19 code=0x7ffc0000
[  117.605103][   T24] audit: type=1326 audit(2000000065.469:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.3779" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55cdf1f19 code=0x7ffc0000
[  117.698496][  T510] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  117.799031][ T9065] exfat: Deprecated parameter 'utf8'
[  117.829479][ T9022] F2FS-fs (loop2): Test dummy encryption mode enabled
[  117.839524][ T9065] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023e, chksum : 0x54ac9118, utbl_chksum : 0xe619d30d)
[  117.857177][ T9022] F2FS-fs (loop2): invalid crc value
[  117.876728][ T9022] F2FS-fs (loop2): Found nat_bits in checkpoint
[  117.915335][ T9022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  118.002742][ T9083] erofs: (device loop4): mounted with root inode @ nid 36.
[  118.020813][ T9083] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89
[  118.030132][ T9083] attempt to access beyond end of device
[  118.030132][ T9083] loop4: rw=524288, want=524304, limit=16
[  118.043076][   T41] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100]
[  118.070625][ T9083] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[  118.087665][  T510] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.107824][  T510] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.144963][  T510] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.182601][  T510] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.197745][  T510] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  118.207184][  T510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.216354][  T510] usb 6-1: config 0 descriptor??
[  118.384392][ T9102] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  118.401971][ T9102] FAT-fs (loop4): Filesystem has been set read-only
[  118.423445][ T9106] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5
[  118.423445][ T9106] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  118.423445][ T9106] 
[  118.449949][ T9106] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,stripe=0x0000000000000009,noacl,nolazytime,,errors=continue
[  118.689630][  T510] plantronics 0003:047F:FFFF.0011: unbalanced collection at end of report description
[  118.706370][  T510] plantronics 0003:047F:FFFF.0011: parse failed
[  118.716887][  T510] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22
[  118.895477][  T511] usb 6-1: USB disconnect, device number 11
[  118.967840][ T9144] F2FS-fs (loop4): invalid crc value
[  118.980201][ T9144] F2FS-fs (loop4): Found nat_bits in checkpoint
[  119.018791][ T9144] F2FS-fs (loop4): Start checkpoint disabled!
[  119.035162][ T9144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  119.110134][ T9166] exfat: Deprecated parameter 'utf8'
[  119.129072][    T9] attempt to access beyond end of device
[  119.129072][    T9] loop4: rw=2049, want=40976, limit=40427
[  119.148750][ T9166] exfat: Deprecated parameter 'utf8'
[  119.158494][ T9166] exfat: Deprecated parameter 'namecase'
[  119.176573][ T9166] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  119.369212][ T9173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  119.381000][ T9173] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #16: comm syz.0.3832: invalid indirect mapped block 4294967295 (level 0)
[  119.395418][ T9173] EXT4-fs (loop0): Remounting filesystem read-only
[  119.402284][ T9173] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #16: comm syz.0.3832: invalid indirect mapped block 4294967295 (level 1)
[  119.418927][ T9134] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24)
[  119.428256][ T9134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  119.437051][ T9173] EXT4-fs (loop0): 1 orphan inode deleted
[  119.443189][ T9173] EXT4-fs (loop0): 1 truncate cleaned up
[  119.449331][ T9134] F2FS-fs (loop1): Test dummy encryption mode enabled
[  119.456285][ T9173] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,jqfmt=vfsv0,
[  119.465158][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3835'.
[  119.485133][ T9134] F2FS-fs (loop1): invalid crc value
[  119.511955][ T9173] EXT4-fs error (device loop0): ext4_empty_dir:3092: inode #2: block 13: comm syz.0.3832: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  119.535890][ T9134] F2FS-fs (loop1): Found nat_bits in checkpoint
[  119.546533][ T9173] EXT4-fs (loop0): Remounting filesystem read-only
[  119.557493][ T9173] EXT4-fs warning (device loop0): ext4_empty_dir:3094: inode #2: comm syz.0.3832: directory missing '..'
[  119.575484][ T9190] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  119.591263][ T9190] FAT-fs (loop5): Filesystem has been set read-only
[  119.597936][ T9190] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  119.608306][ T9190] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  119.645932][ T9134] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  119.664164][ T9134] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  119.671215][ T9134] F2FS-fs (loop1): Start checkpoint disabled!
[  119.678283][ T9134] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  119.685466][ T9134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  119.745036][ T9205] FAT-fs (loop4): error, invalid access to FAT (entry 0x00007fff)
[  119.760495][ T9205] FAT-fs (loop4): Filesystem has been set read-only
[  119.778365][  T300] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  119.914445][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3858'.
[  119.949874][ T9228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.3857: Parent and EA inode have the same ino 15
[  119.974003][ T9228] EXT4-fs (loop2): 1 orphan inode deleted
[  119.983871][ T9228] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  120.012699][  T280] EXT4-fs error (device loop2): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  120.073487][  T280] ------------[ cut here ]------------
[  120.094261][  T280] kernel BUG at fs/namei.c:2836!
[  120.107245][  T280] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  120.113378][  T280] CPU: 0 PID: 280 Comm: syz-executor Tainted: G        W         syzkaller #0
[  120.122262][  T280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  120.132357][  T280] RIP: 0010:may_delete+0x7a5/0x7b0
[  120.137506][  T280] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c cb fd ff ff 48 89 df e8 bc 02 f5 ff e9 be fd ff ff e8 f2 74 ba ff 0f 0b e8 eb 74 ba ff <0f> 0b 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8
[  120.157138][  T280] RSP: 0018:ffffc90000bf7cd0 EFLAGS: 00010293
[  120.163223][  T280] RAX: ffffffff81aa41d5 RBX: ffff88810d366bb0 RCX: ffff88812485d000
[  120.171210][  T280] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[  120.179200][  T280] RBP: ffffc90000bf7d48 R08: 0000000000000003 R09: 0000000000000004
[  120.187184][  T280] R10: dffffc0000000000 R11: fffff5200017ef7c R12: ffff88812b90c878
[  120.195163][  T280] R13: 1ffff11021a6cd76 R14: ffff88812a229140 R15: dffffc0000000000
[  120.203176][  T280] FS:  0000555568332500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  120.212117][  T280] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  120.218716][  T280] CR2: 0000001b2e41dff8 CR3: 00000001254e6000 CR4: 00000000003506b0
[  120.226701][  T280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  120.234688][  T280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  120.242666][  T280] Call Trace:
[  120.245976][  T280]  ? __kasan_check_write+0x14/0x20
[  120.251101][  T280]  vfs_rmdir+0x29/0x3c0
[  120.255264][  T280]  ? incfs_kill_sb+0xec/0x200
[  120.260057][  T280]  incfs_kill_sb+0xf7/0x200
[  120.264575][  T280]  deactivate_locked_super+0xa0/0x100
[  120.269962][  T280]  deactivate_super+0xaf/0xe0
[  120.274652][  T280]  cleanup_mnt+0x44f/0x500
[  120.279085][  T280]  __cleanup_mnt+0x19/0x20
[  120.283503][  T280]  task_work_run+0x127/0x190
[  120.288204][  T280]  exit_to_user_mode_loop+0xcb/0xe0
[  120.293408][  T280]  exit_to_user_mode_prepare+0x76/0xa0
[  120.298873][  T280]  syscall_exit_to_user_mode+0x1d/0x40
[  120.304332][  T280]  do_syscall_64+0x3d/0x40
[  120.308754][  T280]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  120.314660][  T280] RIP: 0033:0x7fb0354e1157
[  120.319084][  T280] Code: a2 c7 05 9c 25 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  120.338713][  T280] RSP: 002b:00007ffeca194508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  120.347133][  T280] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb0354e1157
[  120.355111][  T280] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeca1945c0
[  120.363091][  T280] RBP: 00007ffeca1945c0 R08: 00007ffeca1955c0 R09: 00000000ffffffff
[  120.371074][  T280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeca1956b0
[  120.379057][  T280] R13: 00007fb03556e363 R14: 000000000001d43d R15: 00007ffeca196780
[  120.387039][  T280] Modules linked in:
[  120.394964][  T280] ---[ end trace 1c80bfce59df2ecc ]---
[  120.400622][  T280] RIP: 0010:may_delete+0x7a5/0x7b0
[  120.405823][  T280] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c cb fd ff ff 48 89 df e8 bc 02 f5 ff e9 be fd ff ff e8 f2 74 ba ff 0f 0b e8 eb 74 ba ff <0f> 0b 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8
[  120.426184][  T280] RSP: 0018:ffffc90000bf7cd0 EFLAGS: 00010293
[  120.432471][  T280] RAX: ffffffff81aa41d5 RBX: ffff88810d366bb0 RCX: ffff88812485d000
[  120.440906][  T280] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[  120.449034][  T280] RBP: ffffc90000bf7d48 R08: 0000000000000003 R09: 0000000000000004
[  120.457099][  T280] R10: dffffc0000000000 R11: fffff5200017ef7c R12: ffff88812b90c878
[  120.465285][  T280] R13: 1ffff11021a6cd76 R14: ffff88812a229140 R15: dffffc0000000000
[  120.473414][  T280] FS:  0000555568332500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  120.482572][  T280] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  120.489343][  T280] CR2: 00007f74804922f8 CR3: 00000001254e6000 CR4: 00000000003506b0
[  120.497412][  T280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  120.505684][  T280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  120.513842][  T280] Kernel panic - not syncing: Fatal exception
[  120.520196][  T280] Kernel Offset: disabled
[  120.524536][  T280] Rebooting in 86400 seconds..