last executing test programs: 3m36.019604106s ago: executing program 32 (id=377): r0 = inotify_init1(0x80800) r1 = epoll_create(0x81) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000001}) 3m33.0597443s ago: executing program 33 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xe010}, 0x0) 3m30.126203922s ago: executing program 6 (id=519): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f000001f380)=ANY=[@ANYBLOB='mode=0']) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 3m29.784660153s ago: executing program 6 (id=522): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffff7fffffffe]}, 0x8, 0x0) readv(r0, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) 3m29.541272331s ago: executing program 6 (id=529): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m29.504689782s ago: executing program 6 (id=533): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 3m29.462634023s ago: executing program 6 (id=537): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 3m29.380978466s ago: executing program 6 (id=539): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/68], 0x119) 3m14.941419813s ago: executing program 34 (id=518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000f00000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) 3m14.354414252s ago: executing program 35 (id=539): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/68], 0x119) 2m29.650563046s ago: executing program 1 (id=1826): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000005e00cb7427bd7000f3dbdf2500000000b5b4d63272"], 0x1c}, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) 2m29.602160117s ago: executing program 1 (id=1830): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4, 0x4, 0x4, 0x4, 0x800}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.755615615s ago: executing program 1 (id=1831): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x101) 2m27.662566139s ago: executing program 1 (id=1833): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x3, 0x470, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m27.496260304s ago: executing program 1 (id=1839): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x701, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x10044880) 2m27.389569887s ago: executing program 1 (id=1840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m27.253644682s ago: executing program 36 (id=1840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m25.705033311s ago: executing program 9 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) 2m25.664524342s ago: executing program 9 (id=1871): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x7fffffff, 0x80842) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2m25.634647483s ago: executing program 9 (id=1872): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) 2m25.568655885s ago: executing program 9 (id=1876): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m25.312143693s ago: executing program 9 (id=1879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xc) 2m25.146395289s ago: executing program 9 (id=1882): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 2m25.0900613s ago: executing program 37 (id=1882): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 2m2.058221209s ago: executing program 8 (id=2606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000004900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000004940)={0x14, r1, 0x321, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48081}, 0xc000) 2m2.01327235s ago: executing program 8 (id=2607): pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) close(0x3) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f0000000480)="5262942467", 0x5}], 0x1, 0x8) 2m1.949524312s ago: executing program 8 (id=2609): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200338a0000280012800b0001006d61637365630000180002800c0004000300000100c28000050006"], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2m1.865753665s ago: executing program 8 (id=2613): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$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") mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4000, 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x81) 2m1.606863423s ago: executing program 8 (id=2617): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000001080)={0x29, 0x3}) 2m1.36567717s ago: executing program 8 (id=2620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000019"], 0x38}}, 0x0) 2m1.280374923s ago: executing program 38 (id=2620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000019"], 0x38}}, 0x0) 1m41.654417694s ago: executing program 4 (id=3087): socketpair(0x10, 0x0, 0xf, &(0x7f0000001780)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) 1m41.628341735s ago: executing program 4 (id=3088): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x200008c4) 1m41.613460446s ago: executing program 4 (id=3089): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10) 1m41.550433628s ago: executing program 4 (id=3090): syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0063edcea4", @ANYBLOB="8e6d29c3fc9a53ac80c8a56c7438b2b95e6e05e8b8660e8a9578ca303101eae7042f36571fe385ca43c9b6efe94f145c8c1d3394126b51960200daebfb58724da631070bd493f10f1b9957d7c440fbf0599326fe2ace7e7fc02f1c7b9f576d73fc3d3ee4b5fdea642a56f98f15ff2390820b648272ec1c87b91dcc4f9b80347bfdce018481c835cc026c42d8fa03e8c7873a27466c53fd02bef82c85fc5dc280951ce91cda67becb5b7f5deb52606e0b9b9eea2aa140dd05573a11bc679b9c246fb00864a2335d3db5cab2a9b2a00354bb9075b4f4e387ef14d39d14ad2934ce0cabb1794bbefa3f847af2b9dddf1cf18c68e5082349778bed"], 0x41, 0x105c7, &(0x7f0000020c40)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x24) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000080), 0x800403, 0x0) 1m40.434114423s ago: executing program 4 (id=3095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m39.5782706s ago: executing program 4 (id=3116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 1m39.504157912s ago: executing program 39 (id=3116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 832.011504ms ago: executing program 0 (id=5524): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x8, 0x6, 0x5, 0x7ffffffffffffffd, 0x9, 0x945, 0x652, 0xc, 0x7, 0x225c17d03, 0x10000000000162d8, 0x9a3f, 0xffff, 0xb, 0x7ffffffffffffc, 0xcc8, 0x800006, 0x2, 0x94d6, 0x3, 0x6, 0xfffffffffffffff9, 0x0, 0xffffffffffff9d04, 0x7f, 0x4}) 791.100085ms ago: executing program 0 (id=5527): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x2125) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 675.521149ms ago: executing program 0 (id=5533): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 675.291279ms ago: executing program 0 (id=5534): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x402, &(0x7f0000000280)=ANY=[@ANYBLOB='errors=remount-ro,iocharset=macroman,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macroman,errors=continue,fmask=00000000000000000000005,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c74696d655f6f66667365743d3078383030303030303030303030303030302c7379735f747a2c001878a8cd73e7c7dc2bbf549d22952292dcdb98789359d9e81898bc842b3ca3ede1aea10de40cac35bae7dc738d21a58f71018e8649c44228e7fe448fca33007062577fed89803d3365794fa0e67518d6d5cbb3f1f08d7de0a8462f846762fd986793920000a0c819d1c5fe5428366cee8071fa193f1ddd095124f0bc5a9916027c58791cf27cb0068929092f457a50986c49bf5623fa8c08d8dfa32ea6a963a51129557246af2e50301e64f2664aba49168ab930"], 0x1, 0x1532, &(0x7f00000005c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) 629.82631ms ago: executing program 7 (id=5537): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0xc, 0x4) 573.444302ms ago: executing program 7 (id=5539): setuid(0xee00) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 573.274102ms ago: executing program 7 (id=5540): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@dev, @empty}, &(0x7f00000001c0)=0xc) 558.814172ms ago: executing program 0 (id=5542): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x30, r1, 0x961cadbe72747c25, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) 550.862263ms ago: executing program 2 (id=5544): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r0, 0x0, 0x4f) 541.885783ms ago: executing program 7 (id=5545): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000041c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@numtail}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f0000001880)="$eJzs3cuKI1UYAOC/0pXuRIVk4UoEC3ThKszME3SQFgazUmqhGx2cHpAkDHQg4AUzs3IvuPId3PkAPoAb38CFS8WdsxBLkkrl3jMdSffI8H2b+lPn/HUunL4QyJ9PXh/27z8cPXj81a/RaCRRO43TeJJEO2pReRQAwIvkSVHEn0XpWX2P116lteucFwBwfa789//oxqYEAFyzDz786L1ur3f2fpY1IobfjPMkymvZ3n0Qn8UgzuNWtOLviGKhjF+52zuLNMuqNwPGzcgjhh//PH/d/T1iln87WtHezK/eUchm4q3hZJxPR55e6/FSEtEtkrLLnWjFqxFFPeYPKS/v3u2d3cm28yM/jrff/H4+/3/OoxOt+OXTeBiDuD97xDL/69tZ9k7x3V9flivII5LJOD+Z9Vsq/AcEAAAAAAAAAAAAAAAAAAAAAMDBdLKF9mr9nKoaYKez2Z7mEX8Mq/xlfaDTmNUHmlf4mazU17mVZVlVxmec16Os75PGa2mkz2vdAAAAAAAAAAAAAAAAAAAA8H8y+vyL/r3B4PxiLfipmAbNp/bZDNKVO9XH+p+dtTvo/xCxf9ZVgjiaT22QbA2RVE17PPDHS5pO9plYc9egUbtsD9NBlJP/dv9NeGPfBV49aC+nWp2u/r0kFjv/aL6761mN3Ydk5dRVx/BilOxxIIsdW3d0adbxgTbh+OX/mt6MXU3TFdcXm7me1djYzPqBf1I2JIf9xQMAAAAAAAAAAAAAAAAAAGxZfug3fttqfPxcpgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN275/f+LINqbdzaDyTx5dqf29M4nF6Mdw7ZveJkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC84P4NAAD//14lUFg=") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 506.167004ms ago: executing program 0 (id=5547): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000780)=0x400000d) 456.932466ms ago: executing program 5 (id=5548): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fu\xf3e\x00'}}, 0x2b) 439.291526ms ago: executing program 2 (id=5549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) 438.747906ms ago: executing program 3 (id=5550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) 371.168938ms ago: executing program 5 (id=5551): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 370.903368ms ago: executing program 5 (id=5552): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x1010000, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {@numtail}, {@shortname_win95}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@rodir}, {@rodir}, {@fat=@fmask={'fmask', 0x3d, 0x6b}}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@utf8}, {@uni_xlateno}]}, 0x3, 0x376, &(0x7f0000000d40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)={{0x10b, 0x4, 0x1, 0x148, 0x28c, 0x1, 0x16, 0x5}}, 0x20) fadvise64(r0, 0x2, 0x0, 0x4) 317.0111ms ago: executing program 2 (id=5553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 309.23107ms ago: executing program 7 (id=5554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000840)=0x5, 0x1) 283.215711ms ago: executing program 3 (id=5555): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) 260.032502ms ago: executing program 7 (id=5556): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x10000e, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) 214.811383ms ago: executing program 3 (id=5557): ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x40106726, &(0x7f00000000c0)) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_send_signal(r0, 0x3b, &(0x7f0000000080)={0x3b, 0x8000, 0xfa}, 0x0) 158.477365ms ago: executing program 5 (id=5558): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001080)={0x6, 0x41cc, 0x3, 0x9, 0x0, "3c412f01000000000000800010000065a600"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) 158.277145ms ago: executing program 3 (id=5559): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000002200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='utf8=1,nonumtail=0,shortname=winnt,uni_xlate=0,shortname=win95,uni_xlate=1,uid=', @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x22d, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000001700000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 158.168805ms ago: executing program 5 (id=5560): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="137b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a0011"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 158.065335ms ago: executing program 2 (id=5561): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESOCT=r1, @ANYRESDEC], 0x27) 112.270757ms ago: executing program 2 (id=5562): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x12, 0x0) lseek(r0, 0xfc, 0x1) getdents64(r0, 0x0, 0x8f8db2886a7918c7) 65.080718ms ago: executing program 2 (id=5563): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2.37063ms ago: executing program 3 (id=5564): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x0, 0x3}}, 0x2e) getsockopt(r1, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) 2.22724ms ago: executing program 5 (id=5565): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) truncate(&(0x7f00000000c0)='./file1\x00', 0x127) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 3 (id=5566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f00000007c0)=@ethtool_gstrings={0x1b, 0x1}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [ 161.383833][ T7780] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3192: Corrupt directory, running e2fsck is recommended [ 161.397227][ T7785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.404014][ T7780] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.3192: path /662/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 161.423630][ T7794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=7794 comm=syz.7.3196 [ 161.458801][ T7785] EXT4-fs: Ignoring removed bh option [ 161.464384][ T7785] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 161.474203][ T7785] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 161.497426][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 161.524976][ T287] EXT4-fs (loop0): unmounting filesystem. [ 161.638942][ T7807] loop7: p2 p3 p7 [ 161.696011][ T28] audit: type=1400 audit(1780929515.718:630): avc: denied { write } for pid=7806 comm="syz.7.3203" name="loop7p2" dev="devtmpfs" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.754234][ T1790] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.792546][ T2270] udevd[2270]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 161.793213][ T1791] udevd[1791]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 161.814348][ T1790] udevd[1790]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 162.086610][ T28] audit: type=1400 audit(1780929516.118:631): avc: denied { append } for pid=7853 comm="syz.3.3223" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.183939][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3236'. [ 162.446759][ T7810] F2FS-fs (loop2): invalid crc value [ 162.464241][ T7810] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.486915][ T7860] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 162.523124][ T7860] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 162.543121][ T7860] F2FS-fs (loop7): invalid crc value [ 162.564229][ T7860] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 162.581558][ T7810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.596742][ T28] audit: type=1400 audit(1780929516.628:632): avc: denied { module_load } for pid=7884 comm="syz.0.3235" path="/sys/kernel/kheaders.tar.xz" dev="sysfs" ino=7887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 162.651872][ T7885] Invalid ELF header magic: != ELF [ 162.672442][ T7860] F2FS-fs (loop7): Found nat_bits in checkpoint [ 162.745262][ T7893] FAT-fs (loop0): Directory bread(block 64) failed [ 162.768000][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.779223][ T7893] FAT-fs (loop0): Directory bread(block 65) failed [ 162.783280][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.793595][ T7893] FAT-fs (loop0): Directory bread(block 66) failed [ 162.801289][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.810292][ T7893] FAT-fs (loop0): Directory bread(block 67) failed [ 162.810349][ T7893] FAT-fs (loop0): Directory bread(block 68) failed [ 162.810392][ T7893] FAT-fs (loop0): Directory bread(block 69) failed [ 162.824036][ T7860] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 162.842992][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.844883][ T7893] FAT-fs (loop0): Directory bread(block 70) failed [ 162.852218][ T7860] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 162.866335][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.875431][ T7893] FAT-fs (loop0): Directory bread(block 71) failed [ 162.875719][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.889720][ T7893] FAT-fs (loop0): Directory bread(block 72) failed [ 162.912110][ T7893] FAT-fs (loop0): Directory bread(block 73) failed [ 162.919266][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.928418][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.937586][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.953004][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.970269][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.979438][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.988528][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.997476][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 163.007184][ T7617] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 163.134427][ T7911] EXT4-fs: Ignoring removed bh option [ 163.175066][ T7911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 163.217742][ T7911] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.0.3257: path /668/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 163.243722][ T7911] EXT4-fs (loop0): Remounting filesystem read-only [ 163.258161][ T287] EXT4-fs (loop0): unmounting filesystem. [ 163.342142][ T28] audit: type=1400 audit(1780929517.368:633): avc: denied { ioctl } for pid=7931 comm="syz.5.3252" path="socket:[42352]" dev="sockfs" ino=42352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.388205][ T7930] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.392922][ T7935] sock: sock_set_timeout: `syz.0.3253' (pid 7935) tries to set negative timeout [ 163.425305][ T7939] netlink: 'syz.0.3255': attribute type 5 has an invalid length. [ 163.434819][ T7930] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 163.453483][ T7930] Quota error (device loop7): write_blk: dquota write failed [ 163.462659][ T7930] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 163.466729][ T7943] tmpfs: Cannot retroactively limit inodes [ 163.472920][ T7930] Quota error (device loop7): write_blk: dquota write failed [ 163.485392][ T7930] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 163.495349][ T7930] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.3251: Failed to acquire dquot type 1 [ 163.506953][ T7930] EXT4-fs (loop7): 1 truncate cleaned up [ 163.512898][ T7930] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 163.541880][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 163.621346][ T7953] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.662797][ T7953] EXT4-fs (loop7): orphan cleanup on readonly fs [ 163.692683][ T7953] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 163.706864][ T7953] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.3266: attempt to clear invalid blocks 2 len 1 [ 163.725186][ T7953] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 163.740014][ T7953] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3266: invalid indirect mapped block 1819239214 (level 0) [ 163.754913][ T7953] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3266: invalid indirect mapped block 1819239214 (level 1) [ 163.784030][ T7953] EXT4-fs (loop7): 1 truncate cleaned up [ 163.789743][ T7953] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 163.860077][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 164.067113][ T8005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.153531][ T8012] device bridge_slave_1 left promiscuous mode [ 164.164561][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.204239][ T8012] device bridge_slave_0 left promiscuous mode [ 164.213833][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.261631][ T7990] set_capacity_and_notify: 9 callbacks suppressed [ 164.261651][ T7990] loop2: detected capacity change from 0 to 40427 [ 164.297073][ T7990] F2FS-fs (loop2): fault_injection options not supported [ 164.329135][ T7990] F2FS-fs (loop2): fault_type options not supported [ 164.373420][ T7990] F2FS-fs (loop2): invalid crc value [ 164.379021][ T8033] loop5: detected capacity change from 0 to 512 [ 164.413055][ T7990] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.451539][ T8033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 164.520157][ T8033] EXT4-fs (loop5): 1 truncate cleaned up [ 164.530114][ T8033] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.526764][ T7990] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 165.535775][ T8051] loop0: detected capacity change from 0 to 2048 [ 165.564426][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 165.584657][ T8051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.593286][ T8051] ext4 filesystem being mounted at /691/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.564150][ T287] EXT4-fs (loop0): unmounting filesystem. [ 168.629896][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3316'. [ 168.748110][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3323'. [ 168.780473][ T8089] loop0: detected capacity change from 0 to 1024 [ 168.795378][ T8091] loop5: detected capacity change from 0 to 512 [ 168.809115][ T8091] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 168.820565][ T8089] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #3: block 1: comm syz.0.3324: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.837970][ T8089] Quota error (device loop0): write_blk: dquota write failed [ 168.845468][ T8089] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 168.855599][ T8089] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.3324: Failed to acquire dquot type 0 [ 168.856716][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 168.868489][ T8089] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.3324: Freeing blocks not in datazone - block = 0, count = 4096 [ 168.886406][ T8089] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3324: Invalid inode bitmap blk 0 in block_group 0 [ 168.899488][ T8089] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 168.908390][ T590] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.908804][ T8089] EXT4-fs (loop0): 1 orphan inode deleted [ 168.928729][ T8089] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.937797][ T590] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 168.946414][ T590] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 0 [ 168.968389][ T8089] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 168.973717][ T1893] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.988484][ T287] EXT4-fs (loop0): unmounting filesystem. [ 169.033437][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 169.080150][ T28] audit: type=1326 audit(1780929523.108:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.5.3328" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc94d39ce59 code=0x0 [ 169.174609][ T1893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.185961][ T1893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.196323][ T1893] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 169.205822][ T1893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.213923][ T28] audit: type=1400 audit(1780929523.238:635): avc: denied { execheap } for pid=8104 comm="syz.0.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 169.234982][ T24] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 169.246499][ T1893] usb 4-1: config 0 descriptor?? [ 169.251566][ T24] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 169.264923][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.271707][ T24] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 169.281892][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.291159][ T24] usb 3-1: config 0 descriptor?? [ 169.296608][ T8087] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 169.424101][ T8121] loop0: detected capacity change from 0 to 256 [ 169.439547][ T8121] FAT-fs (loop0): Directory bread(block 64) failed [ 169.446341][ T8121] FAT-fs (loop0): Directory bread(block 65) failed [ 169.453166][ T8121] FAT-fs (loop0): Directory bread(block 66) failed [ 169.460038][ T8121] FAT-fs (loop0): Directory bread(block 67) failed [ 169.467106][ T8121] FAT-fs (loop0): Directory bread(block 68) failed [ 169.474528][ T8121] FAT-fs (loop0): Directory bread(block 69) failed [ 169.481265][ T8121] FAT-fs (loop0): Directory bread(block 70) failed [ 169.487987][ T8121] FAT-fs (loop0): Directory bread(block 71) failed [ 169.494666][ T8121] FAT-fs (loop0): Directory bread(block 72) failed [ 169.501309][ T8121] FAT-fs (loop0): Directory bread(block 73) failed [ 169.570180][ T8127] Zero length message leads to an empty skb [ 169.677324][ T28] audit: type=1400 audit(1780929523.708:636): avc: denied { read } for pid=8130 comm="syz.0.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.697547][ T1893] hid (null): report_id 1204730351 is invalid [ 169.711115][ T24] thrustmaster 0003:044F:B304.001B: unknown global tag 0xe [ 169.719096][ T1893] hid-led 0003:27B8:01ED.001A: report_id 1204730351 is invalid [ 169.727493][ T24] thrustmaster 0003:044F:B304.001B: item 0 1 1 14 parsing failed [ 169.737951][ T1893] hid-led 0003:27B8:01ED.001A: item 0 4 1 8 parsing failed [ 169.745551][ T24] thrustmaster 0003:044F:B304.001B: parse failed [ 169.752167][ T1893] hid-led: probe of 0003:27B8:01ED.001A failed with error -22 [ 169.759757][ T24] thrustmaster: probe of 0003:044F:B304.001B failed with error -22 [ 169.899524][ T6660] usb 4-1: USB disconnect, device number 10 [ 169.921633][ T24] usb 3-1: USB disconnect, device number 4 [ 170.080593][ T8165] loop0: detected capacity change from 0 to 256 [ 170.092743][ T8165] FAT-fs (loop0): Directory bread(block 64) failed [ 170.099994][ T8165] FAT-fs (loop0): Directory bread(block 65) failed [ 170.106811][ T8165] FAT-fs (loop0): Directory bread(block 66) failed [ 170.113833][ T8165] FAT-fs (loop0): Directory bread(block 67) failed [ 170.120499][ T8165] FAT-fs (loop0): Directory bread(block 68) failed [ 170.127227][ T8165] FAT-fs (loop0): Directory bread(block 69) failed [ 170.133887][ T8165] FAT-fs (loop0): Directory bread(block 70) failed [ 170.140469][ T8165] FAT-fs (loop0): Directory bread(block 71) failed [ 170.147528][ T8165] FAT-fs (loop0): Directory bread(block 72) failed [ 170.154183][ T8165] FAT-fs (loop0): Directory bread(block 73) failed [ 170.293495][ T294] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 170.477853][ T294] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 170.487883][ T28] audit: type=1400 audit(1780929524.518:637): avc: denied { create } for pid=8184 comm="syz.2.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.501385][ T294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.516532][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3369'. [ 170.522430][ T28] audit: type=1400 audit(1780929524.518:638): avc: denied { write } for pid=8184 comm="syz.2.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.539429][ T294] usb 6-1: Product: syz [ 170.548103][ T28] audit: type=1400 audit(1780929524.548:639): avc: denied { nlmsg_write } for pid=8184 comm="syz.2.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.570924][ T294] usb 6-1: Manufacturer: 񟍜 [ 170.571978][ T8187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3370'. [ 170.588150][ T294] usb 6-1: SerialNumber: syz [ 170.738460][ T8214] loop3: detected capacity change from 0 to 2048 [ 170.788548][ T8214] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.811885][ T8214] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 170.830583][ T294] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 170.846316][ T8214] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 170.858907][ T8214] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.858907][ T8214] [ 170.863734][ T294] usb 6-1: USB disconnect, device number 5 [ 170.868799][ T8214] EXT4-fs (loop3): Total free blocks count 0 [ 170.880863][ T8214] EXT4-fs (loop3): Free/Dirty block details [ 170.886992][ T8214] EXT4-fs (loop3): free_blocks=2415919504 [ 170.892763][ T8214] EXT4-fs (loop3): dirty_blocks=32 [ 170.898132][ T8214] EXT4-fs (loop3): Block reservation details [ 170.904198][ T8214] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 170.923503][ T1905] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 170.982969][ T8200] loop2: detected capacity change from 0 to 40427 [ 170.999237][ T8200] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 171.011357][ T8200] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 171.017493][ T8228] hub 8-0:1.0: USB hub found [ 171.025204][ T8228] hub 8-0:1.0: 1 port detected [ 171.041416][ T8200] F2FS-fs (loop2): invalid crc value [ 171.090201][ T8200] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.126921][ T8243] loop3: detected capacity change from 0 to 1024 [ 171.129205][ T8245] loop7: detected capacity change from 0 to 256 [ 171.153217][ T8245] exfat: Deprecated parameter 'utf8' [ 171.158682][ T8245] exfat: Deprecated parameter 'namecase' [ 171.164850][ T8245] exfat: Deprecated parameter 'utf8' [ 171.172925][ T8245] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 171.183825][ T8243] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.3394: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.199690][ T8245] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 171.208274][ T8245] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 171.227657][ T8243] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 171.246250][ T8243] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.3394: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.261087][ T8200] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 171.262715][ T8248] loop7: detected capacity change from 0 to 512 [ 171.268812][ T8200] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 171.277119][ T8243] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.3394: Failed to acquire dquot type 0 [ 171.285982][ T8248] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 171.332605][ T8243] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 171.342452][ T8243] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.3394: mark_inode_dirty error [ 171.354076][ T8248] EXT4-fs (loop7): 1 truncate cleaned up [ 171.359766][ T8248] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 171.368710][ T8243] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 171.379347][ T8243] EXT4-fs (loop3): 1 orphan inode deleted [ 171.385582][ T8243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.402808][ T1905] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.426423][ T8252] loop5: detected capacity change from 0 to 256 [ 171.436354][ T1905] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:6: Failed to release dquot type 0 [ 171.468560][ T8252] FAT-fs (loop5): Directory bread(block 64) failed [ 171.476046][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 171.481937][ T8252] FAT-fs (loop5): Directory bread(block 65) failed [ 171.488862][ T308] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.504125][ T8252] FAT-fs (loop5): Directory bread(block 66) failed [ 171.510692][ T8252] FAT-fs (loop5): Directory bread(block 67) failed [ 171.517629][ T308] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0 [ 171.529434][ T4769] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 171.542592][ T8252] FAT-fs (loop5): Directory bread(block 68) failed [ 171.549425][ T8252] FAT-fs (loop5): Directory bread(block 69) failed [ 171.556311][ T8248] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 171.556583][ T4769] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 171.572787][ T8252] FAT-fs (loop5): Directory bread(block 70) failed [ 171.579605][ T8252] FAT-fs (loop5): Directory bread(block 71) failed [ 171.587016][ T4769] EXT4-fs error (device loop3): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 171.598456][ T8252] FAT-fs (loop5): Directory bread(block 72) failed [ 171.609941][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 171.616035][ T8252] FAT-fs (loop5): Directory bread(block 73) failed [ 171.645566][ T8256] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.699694][ T8261] IPv6: Can't replace route, no match found [ 171.777221][ T8271] loop5: detected capacity change from 0 to 512 [ 171.806224][ T8274] loop7: detected capacity change from 0 to 512 [ 171.811579][ T8277] exfat: Deprecated parameter 'namecase' [ 171.813972][ T8271] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 171.826109][ T8277] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 171.839749][ T8271] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.3407: corrupted in-inode xattr [ 171.886246][ T8271] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3407: couldn't read orphan inode 15 (err -117) [ 171.917953][ T8254] F2FS-fs (loop2): invalid crc value [ 171.923298][ T8271] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.939148][ T8274] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 171.957327][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 171.999943][ T8254] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.020131][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 172.073500][ T8296] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3415'. [ 172.087889][ T8254] F2FS-fs (loop2): Start checkpoint disabled! [ 172.102507][ T8254] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 172.114177][ T8254] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 172.203033][ T308] kworker/u4:3: attempt to access beyond end of device [ 172.203033][ T308] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.245121][ T8254] F2FS-fs (loop2): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 172.283387][ T8254] F2FS-fs (loop2): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 172.293614][ T8254] F2FS-fs (loop2): f2fs_enable_checkpoint() finishes, writeback:39, sync:0 [ 172.309610][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3426'. [ 172.422848][ T8331] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 172.488362][ T8339] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 172.496214][ T8339] netlink: 8996 bytes leftover after parsing attributes in process `syz.2.3436'. [ 172.505409][ T8339] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 172.623414][ T294] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.673472][ T1893] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 172.793408][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 172.804597][ T294] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 172.812997][ T294] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 172.823466][ T294] usb 4-1: config 220 has no interface number 2 [ 172.829798][ T294] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 172.843068][ T294] usb 4-1: config 220 interface 0 has no altsetting 0 [ 172.849910][ T294] usb 4-1: config 220 interface 76 has no altsetting 0 [ 172.856885][ T1893] usb 8-1: Using ep0 maxpacket: 8 [ 172.861968][ T294] usb 4-1: config 220 interface 1 has no altsetting 0 [ 172.870222][ T1893] usb 8-1: config 0 interface 0 altsetting 133 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 172.881727][ T1893] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.888451][ T1893] usb 8-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 172.897671][ T1893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.905965][ T294] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 172.915691][ T1893] usb 8-1: config 0 descriptor?? [ 172.920725][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.928803][ T294] usb 4-1: Product: syz [ 172.933751][ T294] usb 4-1: Manufacturer: syz [ 172.938396][ T294] usb 4-1: SerialNumber: syz [ 172.973397][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 172.979806][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.990293][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.007167][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.016379][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.024465][ T19] usb 3-1: Product: syz [ 173.028751][ T19] usb 3-1: Manufacturer: syz [ 173.033718][ T19] usb 3-1: SerialNumber: syz [ 173.078862][ T8345] netlink: 'syz.5.3439': attribute type 16 has an invalid length. [ 173.086805][ T8345] netlink: 'syz.5.3439': attribute type 3 has an invalid length. [ 173.094676][ T8345] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3439'. [ 173.147646][ T294] usb 4-1: selecting invalid altsetting 0 [ 173.161009][ T294] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 173.167610][ T294] usb 4-1: No valid video chain found. [ 173.185014][ T294] usb 4-1: USB disconnect, device number 11 [ 173.241544][ T19] usb 3-1: 0:2 : does not exist [ 173.252614][ T19] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 173.270914][ T19] usb 3-1: USB disconnect, device number 5 [ 173.285547][ T2270] udevd[2270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.339342][ T1893] uclogic 0003:2179:0053.001C: interface is invalid, ignoring [ 173.523461][ T291] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 173.542854][ T294] usb 8-1: USB disconnect, device number 2 [ 173.674986][ T8362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.684102][ T8362] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.698848][ T8362] fs-verity: sha512 using implementation "sha512-avx2" [ 173.706786][ T8362] fs-verity (loop3, inode 15): Error -22 reading file data [ 173.713668][ T291] usb 6-1: Using ep0 maxpacket: 8 [ 173.714601][ T8362] fs-verity (loop3, inode 15): Error -22 building Merkle tree [ 173.722055][ T291] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30 [ 173.747802][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 173.753809][ T291] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 173.778799][ T291] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.785834][ T291] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 173.800205][ T291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.814261][ T291] usb 6-1: config 0 descriptor?? [ 173.863140][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 173.863159][ T28] audit: type=1326 audit(1780929527.888:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 173.895344][ T28] audit: type=1326 audit(1780929527.888:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 173.900775][ T8373] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 173.921148][ T28] audit: type=1326 audit(1780929527.918:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 173.959376][ T28] audit: type=1326 audit(1780929527.918:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 173.992985][ T28] audit: type=1326 audit(1780929527.918:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 174.018899][ T28] audit: type=1326 audit(1780929527.918:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 174.058162][ T28] audit: type=1326 audit(1780929527.918:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 174.118074][ T28] audit: type=1326 audit(1780929527.918:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 174.157274][ T8395] device bridge0 entered promiscuous mode [ 174.188940][ T28] audit: type=1326 audit(1780929527.918:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 174.232613][ T28] audit: type=1326 audit(1780929527.918:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.3454" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 174.240207][ T291] microsoft 0003:045E:00F9.001D: collection stack underflow [ 174.258391][ T1893] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 174.267492][ T8399] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 174.286328][ T8399] ext4 filesystem being mounted at /605/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.309019][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 174.328025][ T291] microsoft 0003:045E:00F9.001D: item 0 2 0 12 parsing failed [ 174.342148][ T291] microsoft 0003:045E:00F9.001D: parse failed [ 174.348631][ T291] microsoft: probe of 0003:045E:00F9.001D failed with error -22 [ 174.351035][ T8411] EXT4-fs: Ignoring removed oldalloc option [ 174.396437][ T8411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 174.406632][ T8411] EXT4-fs (loop0): orphan cleanup on readonly fs [ 174.420823][ T8411] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 174.455775][ T291] usb 6-1: USB disconnect, device number 6 [ 174.467299][ T1893] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.489064][ T1893] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.499190][ T8411] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 174.513503][ T8411] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.3470: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 174.531964][ T1893] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 174.548801][ T1893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.570121][ T1893] hub 4-1:4.0: USB hub found [ 174.588820][ T8411] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.3470: couldn't read orphan inode 13 (err -117) [ 174.615005][ T8411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.657416][ T8411] EXT4-fs: Ignoring removed nobh option [ 174.673312][ T8411] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 174.681321][ T8411] EXT4-fs error (device loop0): __ext4_remount:6637: comm syz.0.3470: Abort forced by user [ 174.711704][ T8411] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 174.728945][ T8420] set_capacity_and_notify: 7 callbacks suppressed [ 174.728966][ T8420] loop2: detected capacity change from 0 to 40427 [ 174.729617][ T287] EXT4-fs (loop0): unmounting filesystem. [ 174.753398][ T8420] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 174.770930][ T8420] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 174.771033][ T1893] hub 4-1:4.0: 2 ports detected [ 174.787936][ T8420] F2FS-fs (loop2): Image doesn't support compression [ 174.803446][ T1893] usb 4-1: selecting invalid altsetting 1 [ 174.809433][ T8420] F2FS-fs (loop2): Image doesn't support compression [ 174.819534][ T1893] hub 4-1:4.0: Using single TT (err -22) [ 174.830178][ T8420] F2FS-fs (loop2): invalid crc value [ 174.844089][ T8420] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 174.914969][ T8420] F2FS-fs (loop2): Start checkpoint disabled! [ 174.921753][ T8420] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 174.929576][ T8420] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 174.936801][ T8420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 175.148174][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3492'. [ 175.178112][ T1893] usb 4-1: USB disconnect, device number 12 [ 175.202728][ T8466] loop5: detected capacity change from 0 to 512 [ 175.213204][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'. [ 175.213663][ T8466] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3495: bg 0: block 5: invalid block bitmap [ 175.235733][ T8466] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 175.245202][ T8466] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3495: invalid indirect mapped block 3 (level 2) [ 175.262261][ T8466] EXT4-fs (loop5): 1 orphan inode deleted [ 175.268259][ T8466] EXT4-fs (loop5): 1 truncate cleaned up [ 175.279838][ T8466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 175.310581][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'. [ 175.319811][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 175.428238][ T8491] loop5: detected capacity change from 0 to 256 [ 175.446063][ T8491] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 175.473252][ T8495] hub 8-0:1.0: USB hub found [ 175.478932][ T8495] hub 8-0:1.0: 1 port detected [ 175.505843][ T8499] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3510'. [ 175.573208][ T8509] loop5: detected capacity change from 0 to 512 [ 175.588801][ T8509] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.648366][ T8517] loop2: detected capacity change from 0 to 1024 [ 175.665324][ T8517] EXT4-fs: Ignoring removed orlov option [ 175.671114][ T8517] EXT4-fs: Ignoring removed oldalloc option [ 175.677437][ T8517] EXT4-fs: Ignoring removed orlov option [ 175.700913][ T8517] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 175.712681][ T8517] System zones: 0-1, 3-12 [ 175.717875][ T8517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.732801][ T8525] hub 8-0:1.0: USB hub found [ 175.737621][ T8525] hub 8-0:1.0: 1 port detected [ 175.780568][ T8517] EXT4-fs error (device loop2): __ext4_new_inode:1291: comm syz.2.3519: failed to insert inode 12: doubly allocated? [ 175.830997][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 175.852225][ T8538] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3529'. [ 175.923593][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3535'. [ 176.072370][ T8570] loop5: detected capacity change from 0 to 16 [ 176.091916][ T8570] erofs: (device loop5): mounted with root inode @ nid 36. [ 176.108667][ T8572] loop3: detected capacity change from 0 to 512 [ 176.148394][ T8572] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.185151][ T8572] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3545: bg 0: block 384: padding at end of block bitmap is not set [ 176.214269][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.221069][ T8572] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 176.230301][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.232517][ T8584] device syz_tun entered promiscuous mode [ 176.236941][ T8572] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.3545: attempt to clear invalid blocks 983260 len 1 [ 176.256071][ T294] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 176.265019][ T8583] device syz_tun left promiscuous mode [ 176.272856][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.279689][ T8572] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.3545: Invalid inode table block 0 in block_group 0 [ 176.299775][ T8587] loop0: detected capacity change from 0 to 2048 [ 176.308456][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.318142][ T8572] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 176.328465][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.335508][ T8572] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 176.344616][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.351171][ T8572] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.3545: Invalid inode table block 0 in block_group 0 [ 176.365132][ T8587] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.377489][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.382333][ T8587] ext4 filesystem being mounted at /755/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.393482][ T8572] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 176.410935][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.420814][ T8572] EXT4-fs error (device loop3): ext4_truncate:4327: inode #11: comm syz.3.3545: mark_inode_dirty error [ 176.432442][ T8587] EXT4-fs error (device loop0): __ext4_remount:6637: comm syz.0.3552: Abort forced by user [ 176.442797][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.443721][ T294] usb 8-1: Using ep0 maxpacket: 16 [ 176.451072][ T8587] EXT4-fs (loop0): Remounting filesystem read-only [ 176.461314][ T8587] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 176.463096][ T294] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.468231][ T8572] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 176.495660][ T8572] EXT4-fs (loop3): Remounting filesystem read-only [ 176.502346][ T8572] EXT4-fs (loop3): 1 truncate cleaned up [ 176.502529][ T294] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.510351][ T287] EXT4-fs (loop0): unmounting filesystem. [ 176.522971][ T8572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.554092][ T294] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.563193][ T294] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.573892][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 176.605173][ T294] usb 8-1: Product: syz [ 176.613562][ T294] usb 8-1: Manufacturer: syz [ 176.620859][ T294] usb 8-1: SerialNumber: syz [ 176.682777][ T1893] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 176.792928][ T8625] loop2: detected capacity change from 0 to 512 [ 176.813838][ T8625] EXT4-fs: Ignoring removed i_version option [ 176.846805][ T8625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 176.858615][ T294] usb 8-1: 0:2 : does not exist [ 176.864018][ T8604] loop3: detected capacity change from 0 to 40427 [ 176.871160][ T294] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 176.875733][ T8625] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.882339][ T8604] F2FS-fs (loop3): invalid crc value [ 176.894683][ T1893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 176.910062][ T1893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 176.923672][ T8625] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 176.935751][ T294] usb 8-1: USB disconnect, device number 3 [ 176.942843][ T8604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.962007][ T1893] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 177.003797][ T1893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.016938][ T8604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 177.018136][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 177.053420][ T1893] usb 6-1: Product: syz [ 177.057664][ T1893] usb 6-1: Manufacturer: syz [ 177.080402][ T1893] usb 6-1: SerialNumber: syz [ 177.101744][ T1893] usb 6-1: config 0 descriptor?? [ 177.107790][ T4769] syz-executor: attempt to access beyond end of device [ 177.107790][ T4769] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.122567][ T8593] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.130011][ T8593] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.143591][ T8621] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 177.159545][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3573'. [ 177.165829][ T8621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 177.193541][ T8621] F2FS-fs (loop0): Image doesn't support compression [ 177.198886][ T8635] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 177.218950][ T8621] F2FS-fs (loop0): Image doesn't support compression [ 177.254872][ T8621] F2FS-fs (loop0): invalid crc value [ 177.273751][ T8621] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 177.334314][ T8621] F2FS-fs (loop0): Start checkpoint disabled! [ 177.342459][ T8593] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.351569][ T8621] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 177.359220][ T8593] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.367747][ T8621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 177.374967][ T8621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 177.577601][ T1893] Error reading MAC address [ 177.583588][ T1893] usb 6-1: USB disconnect, device number 7 [ 177.603491][ T294] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 177.666473][ T8654] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 177.688846][ T8654] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 177.703790][ T8654] F2FS-fs (loop2): invalid crc value [ 177.740332][ T8654] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.787899][ T8654] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 177.793698][ T294] usb 4-1: Using ep0 maxpacket: 8 [ 177.795374][ T8654] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.804109][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.838870][ T294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.872057][ T294] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 177.883044][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.909240][ T294] usb 4-1: config 0 descriptor?? [ 178.026693][ T8680] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 178.035234][ T8680] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3593: invalid indirect mapped block 256 (level 1) [ 178.048987][ T8680] EXT4-fs (loop0): Remounting filesystem read-only [ 178.055586][ T8680] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3593: invalid indirect mapped block 2683928664 (level 1) [ 178.069982][ T8680] EXT4-fs (loop0): Remounting filesystem read-only [ 178.076811][ T8680] EXT4-fs (loop0): 1 truncate cleaned up [ 178.082576][ T8680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.135033][ T8680] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.3593: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 178.238517][ T8680] EXT4-fs (loop0): Remounting filesystem read-only [ 178.287923][ T287] EXT4-fs (loop0): unmounting filesystem. [ 178.320163][ T294] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 178.324386][ T8660] F2FS-fs (loop7): Test dummy encryption mode enabled [ 178.343391][ T294] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 178.361514][ T8660] F2FS-fs (loop7): invalid crc value [ 178.459629][ T8660] F2FS-fs (loop7): Found nat_bits in checkpoint [ 178.475143][ T8707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.533548][ T8707] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.545593][ T294] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 179.553411][ T294] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 180.530389][ T294] hid-picolcd 0003:04D8:C002.001E: No report with id 0x11 found [ 180.540896][ T294] usb 4-1: USB disconnect, device number 13 [ 180.569499][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 180.711023][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 180.711042][ T28] audit: type=1400 audit(1780929534.738:679): avc: denied { execute } for pid=8728 comm="syz.0.3613" name="file0" dev="tmpfs" ino=3998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.795924][ T8737] set_capacity_and_notify: 5 callbacks suppressed [ 180.795946][ T8737] loop0: detected capacity change from 0 to 4096 [ 180.913045][ T8748] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.068494][ T8775] tipc: Enabled bearer , priority 10 [ 181.241185][ T8805] loop0: detected capacity change from 0 to 512 [ 181.304641][ T8805] ext4 filesystem being mounted at /781/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.342757][ T8820] loop2: detected capacity change from 0 to 512 [ 181.368410][ T8820] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.416619][ T8820] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.3654: corrupted xattr block 33 [ 181.433445][ T19] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 181.450174][ T8820] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 181.476344][ T8820] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.3654: corrupted xattr block 33 [ 181.493999][ T8820] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 181.507440][ T28] audit: type=1400 audit(1780929535.538:680): avc: denied { unlink } for pid=8819 comm="syz.2.3654" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.532803][ T8817] loop3: detected capacity change from 0 to 40427 [ 181.535619][ T8820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.3654: bg 0: bad block bitmap checksum [ 181.560292][ T8817] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 181.570400][ T8817] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 181.577911][ T8827] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.3654: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 181.612212][ T28] audit: type=1400 audit(1780929535.638:681): avc: denied { ioctl } for pid=8830 comm="syz.5.3658" path="socket:[44986]" dev="sockfs" ino=44986 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.640224][ T19] usb 8-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 181.652373][ T8817] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.669849][ T19] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 181.674753][ T8820] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Filesystem failed CRC [ 181.686454][ T19] usb 8-1: config 0 interface 0 has no altsetting 0 [ 181.716060][ T19] usb 8-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 181.733547][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.741837][ T8820] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2916: inode #15: comm syz.2.3654: corrupted xattr block 33 [ 181.754413][ T19] usb 8-1: config 0 descriptor?? [ 181.761551][ T8817] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 181.769116][ T8817] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 181.777364][ T8820] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -74) [ 181.810657][ T8839] loop5: detected capacity change from 0 to 256 [ 181.939695][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'. [ 182.073366][ T291] tipc: Node number set to 2151776430 [ 182.167663][ T19] lenovo 0003:17EF:60A3.001F: unknown main item tag 0x2 [ 182.183466][ T6660] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.193803][ T19] lenovo 0003:17EF:60A3.001F: unknown main item tag 0x6 [ 182.200894][ T19] lenovo 0003:17EF:60A3.001F: ignoring exceeding usage max [ 182.219000][ T8887] raw_sendmsg: syz.5.3684 forgot to set AF_INET. Fix it! [ 182.223143][ T19] lenovo 0003:17EF:60A3.001F: hidraw0: USB HID v0.81 Device [HID 17ef:60a3] on usb-dummy_hcd.7-1/input0 [ 182.304984][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3689'. [ 182.357785][ T8901] loop0: detected capacity change from 0 to 4096 [ 182.369052][ T8901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.384715][ T6660] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 182.393050][ T8901] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.416655][ T6660] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.429912][ T8901] EXT4-fs (loop0): Test dummy encryption mode enabled [ 182.437817][ T1893] usb 8-1: USB disconnect, device number 4 [ 182.442977][ T6660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.452990][ T6660] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 182.466322][ T6660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.484398][ T28] audit: type=1400 audit(1780929536.518:682): avc: denied { create } for pid=8900 comm="syz.0.3690" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 182.520270][ T6660] usb 3-1: config 0 descriptor?? [ 182.831336][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3718'. [ 182.856968][ T28] audit: type=1326 audit(1780929536.888:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.5.3719" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 182.882544][ T8966] sch_fq: defrate 4294964870 ignored. [ 182.897601][ T28] audit: type=1326 audit(1780929536.928:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.5.3719" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 182.944397][ T6660] input: HID 28bd:0935 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0935.0020/input/input27 [ 182.946742][ T28] audit: type=1326 audit(1780929536.928:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.5.3719" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 182.989515][ T6660] uclogic 0003:28BD:0935.0020: input,hidraw0: USB HID vff.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.2-1/input0 [ 182.998758][ T28] audit: type=1326 audit(1780929536.928:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.5.3719" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 183.119079][ T28] audit: type=1326 audit(1780929536.928:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.5.3719" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 183.145709][ T6660] usb 3-1: USB disconnect, device number 6 [ 183.153988][ T28] audit: type=1326 audit(1780929536.958:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.5.3719" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 183.206024][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3734'. [ 183.239804][ T8998] loop0: detected capacity change from 0 to 256 [ 183.251187][ T9000] loop5: detected capacity change from 0 to 128 [ 183.271334][ T8998] FAT-fs (loop0): Directory bread(block 64) failed [ 183.290435][ T8998] FAT-fs (loop0): Directory bread(block 65) failed [ 183.298187][ T8998] FAT-fs (loop0): Directory bread(block 66) failed [ 183.305354][ T8998] FAT-fs (loop0): Directory bread(block 67) failed [ 183.312063][ T8998] FAT-fs (loop0): Directory bread(block 68) failed [ 183.325521][ T8998] FAT-fs (loop0): Directory bread(block 69) failed [ 183.335561][ T8998] FAT-fs (loop0): Directory bread(block 70) failed [ 183.344330][ T8998] FAT-fs (loop0): Directory bread(block 71) failed [ 183.357215][ T8998] FAT-fs (loop0): Directory bread(block 72) failed [ 183.364645][ T8998] FAT-fs (loop0): Directory bread(block 73) failed [ 183.481465][ T9012] netlink: 'syz.0.3743': attribute type 1 has an invalid length. [ 183.517118][ T8996] loop7: detected capacity change from 0 to 40427 [ 183.532468][ T8996] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 183.545191][ T8996] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 183.562791][ T8996] F2FS-fs (loop7): invalid crc value [ 183.600835][ T8996] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 183.674755][ T8996] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 183.686260][ T8996] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 183.862793][ T1811] syz-executor: attempt to access beyond end of device [ 183.862793][ T1811] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.884767][ T9014] loop5: detected capacity change from 0 to 40427 [ 183.912327][ T9014] F2FS-fs (loop5): invalid crc value [ 183.942795][ T9014] F2FS-fs (loop5): Found nat_bits in checkpoint [ 183.986333][ T9016] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.051465][ T9014] F2FS-fs (loop5): Start checkpoint disabled! [ 184.066089][ T9039] FAT-fs (loop2): Directory bread(block 64) failed [ 184.078931][ T9014] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 184.093751][ T9039] FAT-fs (loop2): Directory bread(block 65) failed [ 184.104155][ T9014] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 184.122083][ T9039] FAT-fs (loop2): Directory bread(block 66) failed [ 184.149338][ T9039] FAT-fs (loop2): Directory bread(block 67) failed [ 184.159289][ T9016] F2FS-fs (loop0): Start checkpoint disabled! [ 184.170567][ T9039] FAT-fs (loop2): Directory bread(block 68) failed [ 184.184111][ T9016] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 184.191660][ T9039] FAT-fs (loop2): Directory bread(block 69) failed [ 184.208604][ T9039] FAT-fs (loop2): Directory bread(block 70) failed [ 184.218275][ T9016] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 184.230732][ T9039] FAT-fs (loop2): Directory bread(block 71) failed [ 184.263719][ T9039] FAT-fs (loop2): Directory bread(block 72) failed [ 184.283566][ T9039] FAT-fs (loop2): Directory bread(block 73) failed [ 184.324265][ T590] kworker/u4:4: attempt to access beyond end of device [ 184.324265][ T590] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 184.371845][ T1905] kworker/u4:6: attempt to access beyond end of device [ 184.371845][ T1905] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.582645][ T9085] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3776'. [ 184.596099][ T9087] erofs: (device loop5): mounted with root inode @ nid 36. [ 184.628521][ T9087] syz.5.3775: attempt to access beyond end of device [ 184.628521][ T9087] loop5: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 184.643477][ T9087] syz.5.3775: attempt to access beyond end of device [ 184.643477][ T9087] loop5: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 184.659164][ T9087] syz.5.3775: attempt to access beyond end of device [ 184.659164][ T9087] loop5: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 184.681637][ T9087] syz.5.3775: attempt to access beyond end of device [ 184.681637][ T9087] loop5: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 184.753662][ T9101] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 185.016367][ T9112] FAT-fs (loop2): Directory bread(block 64) failed [ 185.033246][ T9112] FAT-fs (loop2): Directory bread(block 65) failed [ 185.053497][ T9112] FAT-fs (loop2): Directory bread(block 66) failed [ 185.060092][ T9112] FAT-fs (loop2): Directory bread(block 67) failed [ 185.083805][ T9105] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 185.091442][ T9112] FAT-fs (loop2): Directory bread(block 68) failed [ 185.098358][ T9105] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 185.106877][ T9112] FAT-fs (loop2): Directory bread(block 69) failed [ 185.114367][ T9105] F2FS-fs (loop5): invalid crc value [ 185.119853][ T9112] FAT-fs (loop2): Directory bread(block 70) failed [ 185.127995][ T9105] F2FS-fs (loop5): Found nat_bits in checkpoint [ 185.143571][ T9112] FAT-fs (loop2): Directory bread(block 71) failed [ 185.150203][ T9112] FAT-fs (loop2): Directory bread(block 72) failed [ 185.196909][ T9112] FAT-fs (loop2): Directory bread(block 73) failed [ 185.257821][ T9105] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 185.270422][ T9105] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 185.351511][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3792'. [ 185.409923][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3792'. [ 185.419882][ T7223] syz-executor: attempt to access beyond end of device [ 185.419882][ T7223] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.537297][ T9132] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3798'. [ 185.779516][ T9150] netlink: 'syz.5.3806': attribute type 195 has an invalid length. [ 185.811752][ T9097] set_capacity_and_notify: 6 callbacks suppressed [ 185.811774][ T9097] loop0: detected capacity change from 0 to 131072 [ 185.852060][ T9097] F2FS-fs (loop0): invalid crc value [ 185.904915][ T9097] F2FS-fs (loop0): Found nat_bits in checkpoint [ 185.992128][ T9097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 186.024399][ T9109] loop3: detected capacity change from 0 to 131072 [ 186.033542][ T9097] SELinux: Context : is not valid (left unmapped). [ 186.044483][ T9144] loop2: detected capacity change from 0 to 40427 [ 186.052873][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 186.052888][ T28] audit: type=1400 audit(1780929540.078:700): avc: denied { relabelto } for pid=9096 comm="syz.0.3781" name="rdma.current" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 186.084008][ T9109] F2FS-fs (loop3): invalid crc value [ 186.091280][ T9144] F2FS-fs (loop2): invalid crc value [ 187.525116][ T9144] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.539680][ T9109] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.605541][ T9144] F2FS-fs (loop2): Start checkpoint disabled! [ 187.640149][ T9144] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 187.658316][ T9144] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 187.676162][ T9109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 187.777141][ T1905] kworker/u4:6: attempt to access beyond end of device [ 187.777141][ T1905] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.994827][ T9181] loop0: detected capacity change from 0 to 256 [ 188.013569][ T9183] loop2: detected capacity change from 0 to 1024 [ 188.024933][ T9183] EXT4-fs: Ignoring removed bh option [ 188.037659][ T9181] exfat: Deprecated parameter 'utf8' [ 188.051801][ T9181] exfat: Deprecated parameter 'namecase' [ 188.067425][ T9181] exfat: Deprecated parameter 'namecase' [ 188.082364][ T9183] EXT4-fs mount: 8 callbacks suppressed [ 188.082386][ T9183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.099187][ T9181] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 188.117337][ T28] audit: type=1400 audit(1780929542.148:701): avc: denied { execute } for pid=9182 comm="syz.2.3817" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.141769][ T9183] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 188.149373][ T294] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 188.171790][ T28] audit: type=1400 audit(1780929542.168:702): avc: denied { execute_no_trans } for pid=9182 comm="syz.2.3817" path="/121/file1/file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.214888][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 188.299088][ T9192] netlink: 'syz.3.3814': attribute type 322 has an invalid length. [ 188.325876][ T9194] loop0: detected capacity change from 0 to 1024 [ 188.336569][ T294] usb 8-1: unable to get BOS descriptor or descriptor too short [ 188.350112][ T294] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 188.358559][ T9194] EXT4-fs: Ignoring removed bh option [ 188.366466][ T294] usb 8-1: can't read configurations, error -71 [ 188.385036][ T9194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 188.421084][ T287] EXT4-fs (loop0): unmounting filesystem. [ 188.466259][ T9202] netlink: 'syz.5.3824': attribute type 16 has an invalid length. [ 188.483715][ T9206] loop3: detected capacity change from 0 to 1024 [ 188.518810][ T9206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.520179][ T9213] loop5: detected capacity change from 0 to 256 [ 188.528574][ T9206] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.549736][ T9213] FAT-fs (loop5): Directory bread(block 64) failed [ 188.556539][ T6660] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 188.563788][ T9213] FAT-fs (loop5): Directory bread(block 65) failed [ 188.580100][ T9213] FAT-fs (loop5): Directory bread(block 66) failed [ 188.586872][ T9213] FAT-fs (loop5): Directory bread(block 67) failed [ 188.593632][ T9213] FAT-fs (loop5): Directory bread(block 68) failed [ 188.596325][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 188.600420][ T9213] FAT-fs (loop5): Directory bread(block 69) failed [ 188.612751][ T9213] FAT-fs (loop5): Directory bread(block 70) failed [ 188.619363][ T9213] FAT-fs (loop5): Directory bread(block 71) failed [ 188.626165][ T9213] FAT-fs (loop5): Directory bread(block 72) failed [ 188.632777][ T9213] FAT-fs (loop5): Directory bread(block 73) failed [ 188.753424][ T6660] usb 3-1: Using ep0 maxpacket: 16 [ 188.754976][ T9228] loop0: detected capacity change from 0 to 512 [ 188.764702][ T6660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.778998][ T9228] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 188.790273][ T6660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.812568][ T6660] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.821899][ T9228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 188.831055][ T6660] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.842619][ T6660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.851768][ T6660] usb 3-1: config 0 descriptor?? [ 188.857076][ T9228] System zones: 1-12 [ 188.862922][ T9228] EXT4-fs (loop0): 1 truncate cleaned up [ 188.870206][ T9228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.919263][ T28] audit: type=1400 audit(1780929542.948:703): avc: denied { checkpoint_restore } for pid=9238 comm="syz.7.3841" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.946298][ T287] EXT4-fs (loop0): unmounting filesystem. [ 188.961604][ T28] audit: type=1400 audit(1780929542.948:704): avc: denied { listen } for pid=9239 comm="syz.3.3839" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.020275][ T9250] loop3: detected capacity change from 0 to 512 [ 189.154575][ T9261] loop3: p1 < > p4 [ 189.159788][ T9261] loop3: p4 size 722688 extends beyond EOD, truncated [ 189.218375][ T1791] udevd[1791]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 189.231969][ T2270] udevd[2270]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 189.245144][ T9271] netlink: 416 bytes leftover after parsing attributes in process `syz.3.3856'. [ 189.277159][ T6660] microsoft 0003:045E:07DA.0021: unbalanced delimiter at end of report description [ 189.287135][ T6660] microsoft 0003:045E:07DA.0021: parse failed [ 189.302138][ T6660] microsoft: probe of 0003:045E:07DA.0021 failed with error -22 [ 189.310057][ T6] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 189.346053][ T9275] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3858: bg 0: block 5: invalid block bitmap [ 189.370802][ T9275] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 189.379479][ T9257] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 189.379551][ T9257] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 189.380585][ T9257] F2FS-fs (loop7): invalid crc value [ 189.424249][ T9257] F2FS-fs (loop7): Found nat_bits in checkpoint [ 189.443537][ T9275] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3858: invalid indirect mapped block 3 (level 2) [ 189.473711][ T9275] EXT4-fs (loop3): 2 truncates cleaned up [ 189.479510][ T9275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.496296][ T6660] usb 3-1: USB disconnect, device number 7 [ 189.503470][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 189.519174][ T6] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.537204][ T9257] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 189.544986][ T9257] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 189.563950][ T6] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.593472][ T6] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.600216][ T6] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 189.611579][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 189.617504][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.634498][ T6] usb 6-1: config 0 descriptor?? [ 189.834876][ T9299] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3866'. [ 189.862688][ T9299] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3866'. [ 189.873528][ T9299] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3866'. [ 189.899079][ T9299] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3866'. [ 190.051576][ T6] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 190.058860][ T6] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 190.066218][ T6] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 190.073485][ T6] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 190.080607][ T6] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 190.088033][ T6] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 190.095255][ T6] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 190.103494][ T6] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 190.111540][ T6] samsung 0003:0419:0600.0022: hidraw0: USB HID v0.08 Device [HID 0419:0600] on usb-dummy_hcd.5-1/input0 [ 190.145893][ T9280] F2FS-fs (loop0): Test dummy encryption mode enabled [ 190.163156][ T9280] F2FS-fs (loop0): invalid crc value [ 190.173464][ T9280] F2FS-fs (loop0): Found nat_bits in checkpoint [ 190.211758][ T9280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 190.228527][ T9280] fscrypt (loop0, inode 3): Mutually exclusive encryption flags (0x0d) [ 190.267753][ T6] usb 6-1: USB disconnect, device number 8 [ 190.283366][ T294] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 190.473525][ T294] usb 8-1: Using ep0 maxpacket: 32 [ 190.480246][ T294] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 190.491743][ T294] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.504633][ T294] usb 8-1: config 0 interface 0 has no altsetting 0 [ 190.511534][ T294] usb 8-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 190.520646][ T294] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.543967][ T294] usb 8-1: config 0 descriptor?? [ 190.581305][ T9332] F2FS-fs (loop0): heap/no_heap options were deprecated [ 190.588435][ T9332] F2FS-fs (loop0): fault_injection options not supported [ 190.595613][ T9332] F2FS-fs (loop0): fault_type options not supported [ 190.602750][ T9332] F2FS-fs (loop0): invalid crc value [ 190.609890][ T9332] F2FS-fs (loop0): Found nat_bits in checkpoint [ 190.649743][ T9332] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 190.688789][ T287] syz-executor: attempt to access beyond end of device [ 190.688789][ T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.883581][ T9346] set_capacity_and_notify: 5 callbacks suppressed [ 190.883604][ T9346] loop3: detected capacity change from 0 to 4096 [ 190.910112][ T9346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.944035][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 190.952728][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 190.964409][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 190.988304][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 191.005469][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 191.022020][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 191.026529][ T9357] netlink: 'syz.3.3889': attribute type 4 has an invalid length. [ 191.030041][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 191.044145][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 191.051273][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 191.057978][ T9357] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3889'. [ 191.069092][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 191.081521][ T294] elecom 0003:056E:00FB.0023: unknown main item tag 0x0 [ 191.095600][ T294] elecom 0003:056E:00FB.0023: unbalanced collection at end of report description [ 191.105199][ T294] elecom: probe of 0003:056E:00FB.0023 failed with error -22 [ 191.170177][ T294] usb 8-1: USB disconnect, device number 7 [ 191.221427][ T9373] loop5: detected capacity change from 0 to 512 [ 191.230304][ T28] audit: type=1400 audit(1780929545.258:705): avc: denied { accept } for pid=9374 comm="syz.2.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 191.254030][ T9373] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 191.298328][ T9381] xt_hashlimit: size too large, truncated to 1048576 [ 191.315846][ T9373] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.3897: bad orphan inode 131083 [ 191.336759][ T9373] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 191.377707][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 191.571710][ T9387] loop2: detected capacity change from 0 to 512 [ 191.595303][ T9387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.604526][ T9387] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.629869][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 191.695676][ T6] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 191.734338][ T9399] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3908'. [ 191.755969][ T9399] device gretap0 entered promiscuous mode [ 191.764128][ T9399] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3908'. [ 191.773805][ T9399] 0{X: renamed from gretap0 [ 191.784159][ T9399] device 30{X left promiscuous mode [ 191.790700][ T9399] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 191.818575][ T9403] netlink: 'syz.7.3910': attribute type 1 has an invalid length. [ 191.826682][ T9403] netlink: 8980 bytes leftover after parsing attributes in process `syz.7.3910'. [ 191.836204][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3910'. [ 191.848828][ T9365] loop3: detected capacity change from 0 to 131072 [ 191.880170][ T9408] loop2: detected capacity change from 0 to 512 [ 191.893390][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 191.899692][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.903143][ T9365] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.933453][ T6] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 191.953368][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.966499][ T9406] loop7: detected capacity change from 0 to 8192 [ 191.974293][ T6] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 191.987409][ T9406] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.998183][ T2270] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.012137][ T9365] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.021158][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 192.052615][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.071441][ T6] usb 6-1: Product: syz [ 192.083963][ T6] usb 6-1: Manufacturer: syz [ 192.091701][ T6] usb 6-1: SerialNumber: syz [ 192.111692][ T6] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 192.119178][ T6] usb-storage 6-1:1.0: USB Mass Storage device detected [ 192.134093][ T9417] loop2: detected capacity change from 0 to 256 [ 192.157087][ T6] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 192.178697][ T9417] FAT-fs (loop2): Directory bread(block 64) failed [ 192.193505][ T9417] FAT-fs (loop2): Directory bread(block 65) failed [ 192.210299][ T9417] FAT-fs (loop2): Directory bread(block 66) failed [ 192.225996][ T9417] FAT-fs (loop2): Directory bread(block 67) failed [ 192.233444][ T9417] FAT-fs (loop2): Directory bread(block 68) failed [ 192.240052][ T9417] FAT-fs (loop2): Directory bread(block 69) failed [ 192.273884][ T9417] FAT-fs (loop2): Directory bread(block 70) failed [ 192.280508][ T9417] FAT-fs (loop2): Directory bread(block 71) failed [ 192.303438][ T9417] FAT-fs (loop2): Directory bread(block 72) failed [ 192.323752][ T40] usb 6-1: USB disconnect, device number 9 [ 192.330733][ T9417] FAT-fs (loop2): Directory bread(block 73) failed [ 192.356501][ T9415] loop7: detected capacity change from 0 to 40427 [ 192.373167][ T9415] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 192.393457][ T9415] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 192.414621][ T9415] F2FS-fs (loop7): invalid crc value [ 192.454421][ T9415] F2FS-fs (loop7): Found nat_bits in checkpoint [ 192.494197][ T9426] loop2: detected capacity change from 0 to 4096 [ 192.508586][ T9426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.524346][ T9415] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 192.528763][ T28] audit: type=1400 audit(1780929546.558:706): avc: denied { accept } for pid=9428 comm="syz.3.3916" path="socket:[47010]" dev="sockfs" ino=47010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.531726][ T9415] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 192.563909][ T9426] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.572658][ T9426] EXT4-fs (loop2): Test dummy encryption mode enabled [ 192.599026][ T9426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.655186][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 192.863151][ T9458] loop5: detected capacity change from 0 to 2048 [ 192.884961][ T9458] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 192.909498][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 192.957349][ T9466] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 192.966233][ T9466] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.3934: corrupted in-inode xattr [ 192.978678][ T9466] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3934: couldn't read orphan inode 15 (err -117) [ 192.990938][ T9466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 193.012227][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 193.038216][ T40] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.083384][ T1893] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 193.191166][ T9489] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 193.200416][ T9489] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.215640][ T9489] EXT4-fs (loop5): resizing filesystem from 256 to 0 blocks [ 193.223002][ T9489] EXT4-fs warning (device loop5): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 193.225526][ T40] usb 3-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 193.244365][ T40] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 193.256153][ T40] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 193.257211][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 193.268245][ T40] usb 3-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 193.286345][ T1893] usb 8-1: Using ep0 maxpacket: 8 [ 193.298191][ T40] usb 3-1: config 0 interface 0 has no altsetting 0 [ 193.305016][ T40] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 193.314383][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.322642][ T1893] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 193.337035][ T1893] usb 8-1: config 179 has no interface number 0 [ 193.347439][ T40] usb 3-1: config 0 descriptor?? [ 193.352624][ T1893] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 193.363913][ T9448] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 193.371352][ T1893] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 193.384323][ T1893] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.396043][ T1893] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 193.404451][ T28] audit: type=1400 audit(1780929547.428:707): avc: denied { execute_no_trans } for pid=9493 comm="syz.5.3947" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.423470][ T1893] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 193.459394][ T1893] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 193.468672][ T1893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.495121][ T9454] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 193.739634][ T9454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.749676][ T9454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.785248][ T40] uclogic 0003:28BD:0071.0024: interface is invalid, ignoring [ 193.847454][ T9515] F2FS-fs (loop5): invalid crc value [ 193.869176][ T9515] F2FS-fs (loop5): Found nat_bits in checkpoint [ 193.922055][ T9528] exfat: Deprecated parameter 'utf8' [ 193.931267][ T9528] exfat: Deprecated parameter 'namecase' [ 193.939801][ T9528] exfat: Deprecated parameter 'namecase' [ 193.948257][ T9528] exfat: Deprecated parameter 'utf8' [ 193.954819][ T9515] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 193.961717][ T9528] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 194.000195][ T40] usb 8-1: USB disconnect, device number 8 [ 194.000234][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 194.014419][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 194.032218][ T28] audit: type=1400 audit(1780929548.058:708): avc: denied { getattr } for pid=9527 comm="syz.0.3961" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 194.074039][ T6] usb 3-1: USB disconnect, device number 8 [ 194.103053][ T7223] syz-executor: attempt to access beyond end of device [ 194.103053][ T7223] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.173497][ T9542] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 194.233282][ T9546] EXT4-fs: Ignoring removed orlov option [ 194.261712][ T9546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 194.282851][ T287] EXT4-fs (loop0): unmounting filesystem. [ 194.297330][ T9552] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.308210][ T9552] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 194.320203][ T9552] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 194.615300][ T28] audit: type=1400 audit(1780929548.648:709): avc: denied { write } for pid=9582 comm="syz.2.3986" path="socket:[48056]" dev="sockfs" ino=48056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 194.680997][ T9591] netlink: 'syz.7.3990': attribute type 1 has an invalid length. [ 194.973378][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.174757][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.189228][ T9597] F2FS-fs (loop7): invalid crc value [ 195.201194][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.228536][ T6] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.238617][ T9597] F2FS-fs (loop7): Found nat_bits in checkpoint [ 195.247812][ T6] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 195.270896][ T6] usb 3-1: string descriptor 0 read error: -22 [ 195.285833][ T6] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 195.295682][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.333423][ T9597] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 195.381383][ T9607] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3996: inode has both inline data and extents flags [ 195.394867][ T9607] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3996: couldn't read orphan inode 15 (err -117) [ 195.407103][ T9607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.442396][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 195.451358][ T9613] __nla_validate_parse: 2 callbacks suppressed [ 195.451379][ T9613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4000'. [ 195.473651][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4000'. [ 195.482674][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4000'. [ 195.492481][ T9613] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4000'. [ 195.503961][ T9613] netlink: 'syz.5.4000': attribute type 1 has an invalid length. [ 195.512602][ T9613] netlink: 'syz.5.4000': attribute type 2 has an invalid length. [ 195.716029][ T6] usb 3-1: Can't set UAC3 power state to 1 for id 10 [ 195.732441][ T6] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 195.761244][ T6] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 195.810973][ T6] usb 3-1: USB disconnect, device number 9 [ 195.998451][ T28] audit: type=1400 audit(1780929550.028:710): avc: denied { append } for pid=9653 comm="syz.5.4017" name="file0" dev="tmpfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 196.137053][ T9662] set_capacity_and_notify: 10 callbacks suppressed [ 196.137074][ T9662] loop3: detected capacity change from 0 to 128 [ 196.165676][ T9662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.183833][ T9662] ext4 filesystem being mounted at /467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.269917][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 196.297760][ T9668] loop2: detected capacity change from 0 to 256 [ 196.314354][ T9668] exfat: Deprecated parameter 'namecase' [ 196.331202][ T9668] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 196.393642][ T9674] loop2: detected capacity change from 0 to 256 [ 196.423769][ T9674] FAT-fs (loop2): Directory bread(block 64) failed [ 196.443424][ T9674] FAT-fs (loop2): Directory bread(block 65) failed [ 196.469575][ T9674] FAT-fs (loop2): Directory bread(block 66) failed [ 196.483403][ T9674] FAT-fs (loop2): Directory bread(block 67) failed [ 196.501821][ T9674] FAT-fs (loop2): Directory bread(block 68) failed [ 196.518785][ T9674] FAT-fs (loop2): Directory bread(block 69) failed [ 196.541880][ T9674] FAT-fs (loop2): Directory bread(block 70) failed [ 196.563631][ T9674] FAT-fs (loop2): Directory bread(block 71) failed [ 196.570272][ T9674] FAT-fs (loop2): Directory bread(block 72) failed [ 196.599789][ T9674] FAT-fs (loop2): Directory bread(block 73) failed [ 196.616841][ T9692] loop7: detected capacity change from 0 to 256 [ 196.638873][ T9696] loop3: detected capacity change from 0 to 256 [ 196.644682][ T9692] exfat: Deprecated parameter 'utf8' [ 196.671270][ T9692] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 196.732076][ T9706] loop2: detected capacity change from 0 to 256 [ 196.742496][ T9704] loop3: detected capacity change from 0 to 256 [ 196.752199][ T9704] exfat: Deprecated parameter 'utf8' [ 196.757649][ T9704] exfat: Deprecated parameter 'namecase' [ 196.765658][ T9704] exfat: Deprecated parameter 'utf8' [ 196.777927][ T9706] FAT-fs (loop2): Directory bread(block 64) failed [ 196.786753][ T9706] FAT-fs (loop2): Directory bread(block 65) failed [ 196.793749][ T9706] FAT-fs (loop2): Directory bread(block 66) failed [ 196.795302][ T9704] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 196.814047][ T9706] FAT-fs (loop2): Directory bread(block 67) failed [ 196.832672][ T9706] FAT-fs (loop2): Directory bread(block 68) failed [ 196.843787][ T9706] FAT-fs (loop2): Directory bread(block 69) failed [ 196.858166][ T9706] FAT-fs (loop2): Directory bread(block 70) failed [ 196.875019][ T9706] FAT-fs (loop2): Directory bread(block 71) failed [ 196.893424][ T9706] FAT-fs (loop2): Directory bread(block 72) failed [ 196.907606][ T9706] FAT-fs (loop2): Directory bread(block 73) failed [ 196.944878][ T19] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 196.987377][ T9722] loop3: detected capacity change from 0 to 256 [ 197.020790][ T9722] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 197.133457][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 197.140092][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.159004][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.174079][ T19] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.185058][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.206747][ T19] usb 6-1: config 0 descriptor?? [ 197.211957][ T9732] loop2: detected capacity change from 0 to 128 [ 197.215786][ T19] hub 6-1:0.0: USB hub found [ 197.229042][ T9732] FAT-fs (loop2): Directory bread(block 524322) failed [ 197.236256][ T9732] FAT-fs (loop2): Directory bread(block 524323) failed [ 197.243165][ T9732] FAT-fs (loop2): Directory bread(block 524324) failed [ 197.250532][ T9732] FAT-fs (loop2): Directory bread(block 524325) failed [ 197.253512][ T6] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 197.258402][ T9732] FAT-fs (loop2): Directory bread(block 524326) failed [ 197.272199][ T9732] FAT-fs (loop2): Directory bread(block 524327) failed [ 197.279344][ T9732] FAT-fs (loop2): Directory bread(block 524328) failed [ 197.286655][ T9732] FAT-fs (loop2): Directory bread(block 524329) failed [ 197.299721][ T9732] FAT-fs (loop2): Directory bread(block 524322) failed [ 197.310362][ T9732] FAT-fs (loop2): Directory bread(block 524323) failed [ 197.338244][ T9738] loop3: detected capacity change from 0 to 256 [ 197.417506][ T19] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 197.464514][ T6] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 197.478381][ T6] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 197.507014][ T6] usb 8-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 197.516172][ T6] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 197.535050][ T9759] EXT4-fs: Ignoring removed oldalloc option [ 197.541055][ T9759] EXT4-fs: Ignoring removed oldalloc option [ 197.551884][ T6] usb 8-1: config 220 has no interface number 2 [ 197.559532][ T6] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 197.581059][ T6] usb 8-1: config 220 interface 0 has no altsetting 0 [ 197.588627][ T6] usb 8-1: config 220 interface 76 has no altsetting 0 [ 197.596142][ T6] usb 8-1: config 220 interface 1 has no altsetting 0 [ 197.609603][ T9759] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.4068: inode #1: comm syz.2.4068: iget: illegal inode # [ 197.624194][ T9759] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4068: error while reading EA inode 1 err=-117 [ 197.639200][ T6] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 197.649084][ T9759] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.4068: inode #1: comm syz.2.4068: iget: illegal inode # [ 197.649175][ T19] usbhid 6-1:0.0: can't add hid device: -71 [ 197.669085][ T9759] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4068: error while reading EA inode 1 err=-117 [ 197.681915][ T9759] EXT4-fs (loop2): 1 orphan inode deleted [ 197.683434][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.688563][ T9759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.696279][ T19] usbhid: probe of 6-1:0.0 failed with error -71 [ 197.711424][ T6] usb 8-1: Product: syz [ 197.715841][ T6] usb 8-1: Manufacturer: syz [ 197.720514][ T6] usb 8-1: SerialNumber: syz [ 197.753840][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 197.774801][ T19] usb 6-1: USB disconnect, device number 10 [ 197.953229][ T6] usb 8-1: selecting invalid altsetting 0 [ 197.965157][ T6] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 197.971588][ T6] usb 8-1: No valid video chain found. [ 197.991544][ T6] usb 8-1: USB disconnect, device number 9 [ 198.094491][ T9778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 198.103499][ T9778] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.173601][ T9761] F2FS-fs (loop0): Test dummy encryption mode enabled [ 198.187611][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 198.198685][ T9761] F2FS-fs (loop0): invalid crc value [ 198.213453][ T9761] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.265119][ T9761] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.396643][ T28] audit: type=1326 audit(1780929552.428:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.442200][ T28] audit: type=1326 audit(1780929552.428:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.503364][ T40] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.503379][ T28] audit: type=1326 audit(1780929552.438:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.503412][ T28] audit: type=1326 audit(1780929552.438:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.621841][ T28] audit: type=1326 audit(1780929552.448:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.667597][ T28] audit: type=1326 audit(1780929552.448:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.693458][ T40] usb 3-1: Using ep0 maxpacket: 8 [ 198.699867][ T40] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 198.720680][ T28] audit: type=1326 audit(1780929552.448:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.749222][ T40] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.761963][ T9807] erofs: (device loop0): mounted with root inode @ nid 36. [ 198.763476][ T6660] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 198.783707][ T40] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 198.787406][ T28] audit: type=1326 audit(1780929552.448:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.810647][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.830177][ T28] audit: type=1326 audit(1780929552.448:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.830434][ T40] usb 3-1: config 0 descriptor?? [ 198.854614][ T9807] [syz.0.4082/9807] FS: loop0 File: /file1 would truncate fibmap result [ 198.869850][ T28] audit: type=1326 audit(1780929552.448:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.3.4084" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f788379ce59 code=0x7ffc0000 [ 198.963388][ T6660] usb 8-1: Using ep0 maxpacket: 32 [ 198.970073][ T6660] usb 8-1: unable to get BOS descriptor or descriptor too short [ 198.996519][ T6660] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 199.033523][ T6660] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.043509][ T6660] usb 8-1: Product: syz [ 199.047720][ T6660] usb 8-1: Manufacturer: syz [ 199.052355][ T6660] usb 8-1: SerialNumber: syz [ 199.085278][ T9824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.130807][ T9824] EXT4-fs (loop3): 1 truncate cleaned up [ 199.166054][ T9824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 199.222858][ T4769] EXT4-fs (loop3): unmounting filesystem. [ 199.238652][ T9791] F2FS-fs (loop5): invalid crc value [ 199.271862][ T9791] F2FS-fs (loop5): Found nat_bits in checkpoint [ 199.307365][ T40] wacom 0003:17EF:6004.0025: unknown main item tag 0x0 [ 199.321576][ T40] wacom 0003:17EF:6004.0025: unknown main item tag 0x0 [ 199.343869][ T40] wacom 0003:17EF:6004.0025: unknown main item tag 0x0 [ 199.365990][ T40] wacom 0003:17EF:6004.0025: unknown main item tag 0x0 [ 199.372941][ T40] wacom 0003:17EF:6004.0025: unknown main item tag 0x0 [ 199.396025][ T9791] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 199.405757][ T40] wacom 0003:17EF:6004.0025: unknown main item tag 0x0 [ 199.412693][ T40] wacom 0003:17EF:6004.0025: unknown main item tag 0x0 [ 199.465022][ T9849] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4106'. [ 199.474507][ T40] wacom 0003:17EF:6004.0025: unknown main item tag 0x0 [ 199.487404][ T40] wacom 0003:17EF:6004.0025: hidraw0: USB HID v0.04 Device [HID 17ef:6004] on usb-dummy_hcd.2-1/input0 [ 199.498883][ T9791] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 199.516663][ T6660] snd-usb-audio: probe of 8-1:1.0 failed with error -2 [ 199.537421][ T40] usb 3-1: USB disconnect, device number 10 [ 199.606371][ T9857] fido_id[9857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 199.735030][ T6660] snd-usb-audio: probe of 8-1:1.1 failed with error -2 [ 199.743829][ T9858] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 199.754387][ T6660] snd-usb-audio: probe of 8-1:1.2 failed with error -2 [ 199.761436][ T9858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 199.770892][ T6660] usb 8-1: USB disconnect, device number 10 [ 199.796169][ T9858] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.840515][ T9858] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 199.847809][ T9858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 199.984347][ T2270] udevd[2270]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.096379][ T9879] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.4118: inode has both inline data and extents flags [ 200.113785][ T9879] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.4118: couldn't read orphan inode 15 (err -117) [ 200.126181][ T9879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.159064][ T287] EXT4-fs (loop0): unmounting filesystem. [ 200.200882][ T9897] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 200.233377][ T40] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.313564][ T19] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 200.350438][ T9911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.364121][ T9911] EXT4-fs (loop0): Test dummy encryption mode enabled [ 200.373597][ T9911] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 200.381998][ T9911] System zones: 0-5 [ 200.393234][ T9911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.424628][ T9918] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.438360][ T9918] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.450128][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.466283][ T9918] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.4134: corrupted xattr block 33 [ 200.488581][ T40] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.507305][ T9924] exfat: Deprecated parameter 'namecase' [ 200.513161][ T9924] exfat: Deprecated parameter 'utf8' [ 200.518980][ T9918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 200.529638][ T9918] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.4134: corrupted xattr block 33 [ 200.542687][ T287] EXT4-fs (loop0): unmounting filesystem. [ 200.548778][ T9918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 200.560146][ T9918] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.4134: corrupted xattr block 33 [ 200.565411][ T40] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 200.581932][ T9924] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 200.609034][ T9918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 200.612195][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.634012][ T9918] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.4134: corrupted xattr block 33 [ 200.665258][ T40] usb 4-1: config 0 descriptor?? [ 200.672333][ T9918] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 200.745127][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 200.779257][ T9913] F2FS-fs (loop2): heap/no_heap options were deprecated [ 200.786433][ T9913] F2FS-fs (loop2): fault_injection options not supported [ 200.793945][ T9913] F2FS-fs (loop2): fault_type options not supported [ 200.807391][ T9913] F2FS-fs (loop2): invalid crc value [ 200.825077][ T9913] F2FS-fs (loop2): Found nat_bits in checkpoint [ 200.870314][ T9913] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 200.907459][ T9941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.926189][ T9941] ext4 filesystem being mounted at /870/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.937396][ T9913] syz.2.4131: attempt to access beyond end of device [ 200.937396][ T9913] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.995519][ T287] EXT4-fs (loop0): unmounting filesystem. [ 201.011152][ T294] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 201.024086][ T6660] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 201.095240][ T40] saitek 0003:06A3:0CFA.0026: item fetching failed at offset 2/41 [ 201.113698][ T40] saitek 0003:06A3:0CFA.0026: parse failed [ 201.123807][ T40] saitek: probe of 0003:06A3:0CFA.0026 failed with error -22 [ 201.155752][ T9958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4152'. [ 201.178190][ T9958] tipc: Invalid UDP bearer configuration [ 201.178217][ T9958] tipc: Enabling of bearer rejected, failed to enable media [ 201.203626][ T294] usb 8-1: Using ep0 maxpacket: 32 [ 201.210248][ T9960] netlink: 532 bytes leftover after parsing attributes in process `syz.2.4146'. [ 201.215417][ T294] usb 8-1: unable to get BOS descriptor or descriptor too short [ 201.248102][ T294] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 201.269865][ T9966] set_capacity_and_notify: 16 callbacks suppressed [ 201.269888][ T9966] loop0: detected capacity change from 0 to 256 [ 201.285315][ T294] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.301371][ T294] usb 8-1: Product: syz [ 201.315834][ T294] usb 8-1: Manufacturer: syz [ 201.325578][ T294] usb 8-1: SerialNumber: syz [ 201.337040][ T9966] FAT-fs (loop0): Directory bread(block 64) failed [ 201.344377][ T40] usb 4-1: USB disconnect, device number 15 [ 201.347894][ T9966] FAT-fs (loop0): Directory bread(block 65) failed [ 201.357976][ T9966] FAT-fs (loop0): Directory bread(block 66) failed [ 201.365441][ T9966] FAT-fs (loop0): Directory bread(block 67) failed [ 201.372209][ T9966] FAT-fs (loop0): Directory bread(block 68) failed [ 201.406127][ T9966] FAT-fs (loop0): Directory bread(block 69) failed [ 201.413690][ T9966] FAT-fs (loop0): Directory bread(block 70) failed [ 201.420348][ T9966] FAT-fs (loop0): Directory bread(block 71) failed [ 201.427143][ T9966] FAT-fs (loop0): Directory bread(block 72) failed [ 201.435137][ T9966] FAT-fs (loop0): Directory bread(block 73) failed [ 201.476846][ T9966] syz.0.4155: attempt to access beyond end of device [ 201.476846][ T9966] loop0: rw=2051, sector=1224, nr_sectors = 544 limit=256 [ 201.614275][ T9979] loop5: detected capacity change from 0 to 40427 [ 201.626676][ T9979] F2FS-fs (loop5): heap/no_heap options were deprecated [ 201.634753][ T9979] F2FS-fs (loop5): fault_injection options not supported [ 201.642348][ T9979] F2FS-fs (loop5): fault_type options not supported [ 201.662343][ T9985] loop0: detected capacity change from 0 to 8192 [ 201.669480][ T9979] F2FS-fs (loop5): invalid crc value [ 201.680465][ T9979] F2FS-fs (loop5): Found nat_bits in checkpoint [ 201.753355][ T9981] loop2: detected capacity change from 0 to 40427 [ 201.766203][ T9981] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 201.774274][ T9981] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 201.778473][ T9979] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 201.790859][ T294] usb 8-1: unit 0 not found! [ 201.810008][ T9981] F2FS-fs (loop2): invalid crc value [ 201.833929][ T9981] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.900376][ T9981] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 201.907602][ T9981] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 201.997608][ T294] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 202.013133][ T294] usb 8-1: unit 0 not found! [ 202.020127][ T294] snd-usb-audio: probe of 8-1:1.1 failed with error -22 [ 202.050567][ T294] usb 8-1: unit 0 not found! [ 202.072036][ T294] snd-usb-audio: probe of 8-1:1.2 failed with error -22 [ 202.080850][ T294] usb 8-1: USB disconnect, device number 11 [ 202.102968][ T1791] udevd[1791]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.233396][ T1893] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 202.413373][ T1893] usb 4-1: Using ep0 maxpacket: 8 [ 202.419777][ T1893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 202.433239][ T1893] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 202.442554][ T1893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.451650][ T1893] usb 4-1: config 0 descriptor?? [ 202.511425][T10015] loop2: detected capacity change from 0 to 131072 [ 202.526814][T10015] F2FS-fs (loop2): invalid crc value [ 202.555460][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4177'. [ 202.566905][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4177'. [ 202.576668][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4177'. [ 202.581461][T10015] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.596578][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4177'. [ 202.605765][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4177'. [ 202.654957][T10015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 202.720133][T10036] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4183'. [ 202.772085][T10042] loop0: detected capacity change from 0 to 256 [ 202.779631][T10042] exfat: Deprecated parameter 'utf8' [ 202.796224][T10042] exfat: Deprecated parameter 'namecase' [ 202.810697][T10042] exfat: Deprecated parameter 'namecase' [ 202.820385][T10042] exfat: Deprecated parameter 'utf8' [ 202.846501][T10042] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 202.867362][ T1893] greenasia 0003:0E8F:0012.0027: unknown main item tag 0x2 [ 202.878134][ T1893] greenasia 0003:0E8F:0012.0027: bogus close delimiter [ 202.892818][ T1893] greenasia 0003:0E8F:0012.0027: item 0 0 2 10 parsing failed [ 202.915297][ T1893] greenasia 0003:0E8F:0012.0027: parse failed [ 202.929120][ T1893] greenasia: probe of 0003:0E8F:0012.0027 failed with error -22 [ 203.071276][ T19] usb 4-1: USB disconnect, device number 16 [ 203.094109][T10066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4184'. [ 203.133076][T10072] xt_hashlimit: size too large, truncated to 1048576 [ 203.332874][T10092] loop0: detected capacity change from 0 to 2048 [ 203.377757][T10092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.410461][T10092] SELinux: Context is not valid (left unmapped). [ 203.424891][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 203.424908][ T28] audit: type=1400 audit(1780929557.458:726): avc: denied { relabelto } for pid=10091 comm="syz.0.4210" name="blkio.bfq.io_serviced" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 203.553787][ T287] EXT4-fs (loop0): unmounting filesystem. [ 203.658044][T10116] loop0: detected capacity change from 0 to 256 [ 203.690553][T10119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4231'. [ 203.785503][T10117] loop2: detected capacity change from 0 to 8192 [ 203.806460][T10117] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 203.810205][T10117] loop2: p3 start 1048320 is beyond EOD, truncated [ 204.063823][T10117] loop2: p5 start 1048320 is beyond EOD, truncated [ 204.078223][T10117] loop2: p7 start 1048320 is beyond EOD, truncated [ 204.117870][T10117] loop2: p9 start 1048320 is beyond EOD, truncated [ 204.143692][T10117] loop2: p11 start 1048320 is beyond EOD, truncated [ 204.153929][T10117] loop2: p13 start 1048320 is beyond EOD, truncated [ 204.173698][T10117] loop2: p15 start 1048320 is beyond EOD, truncated [ 204.193691][T10117] loop2: p17 start 1048320 is beyond EOD, truncated [ 204.213858][T10117] loop2: p19 start 1048320 is beyond EOD, truncated [ 204.239668][T10117] loop2: p21 start 1048320 is beyond EOD, truncated [ 204.254140][T10117] loop2: p23 start 1048320 is beyond EOD, truncated [ 204.273678][T10117] loop2: p25 start 1048320 is beyond EOD, truncated [ 204.283813][T10117] loop2: p27 start 1048320 is beyond EOD, truncated [ 204.304817][T10117] loop2: p29 start 1048320 is beyond EOD, truncated [ 204.313838][T10117] loop2: p31 start 1048320 is beyond EOD, truncated [ 204.333660][T10117] loop2: p33 start 1048320 is beyond EOD, truncated [ 204.351297][T10117] loop2: p35 start 1048320 is beyond EOD, truncated [ 204.371497][T10117] loop2: p37 start 1048320 is beyond EOD, truncated [ 204.384120][T10117] loop2: p39 start 1048320 is beyond EOD, truncated [ 204.401909][T10117] loop2: p41 start 1048320 is beyond EOD, truncated [ 204.409384][T10117] loop2: p43 start 1048320 is beyond EOD, truncated [ 204.427198][T10117] loop2: p45 start 1048320 is beyond EOD, truncated [ 204.444261][T10117] loop2: p47 start 1048320 is beyond EOD, truncated [ 204.464173][T10117] loop2: p49 start 1048320 is beyond EOD, truncated [ 204.481856][T10117] loop2: p51 start 1048320 is beyond EOD, truncated [ 204.511759][T10117] loop2: p53 start 1048320 is beyond EOD, truncated [ 204.532306][T10117] loop2: p55 start 1048320 is beyond EOD, truncated [ 204.554109][T10117] loop2: p57 start 1048320 is beyond EOD, truncated [ 204.575320][T10117] loop2: p59 start 1048320 is beyond EOD, truncated [ 204.600051][T10117] loop2: p61 start 1048320 is beyond EOD, truncated [ 204.614079][T10117] loop2: p63 start 1048320 is beyond EOD, truncated [ 204.625131][T10139] loop3: detected capacity change from 0 to 512 [ 204.643763][T10117] loop2: p65 start 1048320 is beyond EOD, truncated [ 204.651590][T10139] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 204.660802][T10107] F2FS-fs (loop7): Invalid log sectors per block(570425347) log sectorsize(9) [ 204.672844][T10117] loop2: p67 start 1048320 is beyond EOD, truncated [ 204.680203][T10107] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 204.688002][T10117] loop2: p69 start 1048320 is beyond EOD, truncated [ 204.705322][T10117] loop2: p71 start 1048320 is beyond EOD, truncated [ 204.710510][T10139] EXT4-fs (loop3): 1 truncate cleaned up [ 204.713703][T10117] loop2: p73 start 1048320 is beyond EOD, truncated [ 204.726097][T10117] loop2: p75 start 1048320 is beyond EOD, truncated [ 204.733279][T10117] loop2: p77 start 1048320 is beyond EOD, truncated [ 204.740492][T10117] loop2: p79 start 1048320 is beyond EOD, truncated [ 204.747756][T10117] loop2: p81 start 1048320 is beyond EOD, truncated [ 204.754611][T10107] F2FS-fs (loop7): invalid crc value [ 204.755486][T10117] loop2: p83 start 1048320 is beyond EOD, truncated [ 204.765826][T10139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 204.768281][T10117] loop2: p85 start 1048320 is beyond EOD, truncated [ 204.782431][T10117] loop2: p87 start 1048320 is beyond EOD, truncated [ 204.789662][T10117] loop2: p89 start 1048320 is beyond EOD, truncated [ 204.796967][T10117] loop2: p91 start 1048320 is beyond EOD, truncated [ 204.804225][T10117] loop2: p93 start 1048320 is beyond EOD, truncated [ 204.811392][T10117] loop2: p95 start 1048320 is beyond EOD, truncated [ 204.814033][T10107] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 204.819707][T10117] loop2: p97 start 1048320 is beyond EOD, truncated [ 204.839137][T10117] loop2: p99 start 1048320 is beyond EOD, truncated [ 204.856298][T10139] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4229: invalid indirect mapped block 4294901760 (level 0) [ 204.857161][T10117] loop2: p101 start 1048320 is beyond EOD, truncated [ 204.877946][T10117] loop2: p103 start 1048320 is beyond EOD, truncated [ 204.887281][T10117] loop2: p105 start 1048320 is beyond EOD, truncated [ 204.901166][T10117] loop2: p107 start 1048320 is beyond EOD, truncated [ 204.909011][T10117] loop2: p109 start 1048320 is beyond EOD, truncated [ 204.918701][T10117] loop2: p111 start 1048320 is beyond EOD, truncated [ 204.926025][T10117] loop2: p113 start 1048320 is beyond EOD, truncated [ 204.926941][T10139] EXT4-fs (loop3): Remounting filesystem read-only [ 204.939935][T10117] loop2: p115 start 1048320 is beyond EOD, truncated [ 204.948067][T10117] loop2: p117 start 1048320 is beyond EOD, truncated [ 204.956901][T10139] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4229: invalid indirect mapped block 2185560079 (level 0) [ 204.971658][T10117] loop2: p119 start 1048320 is beyond EOD, truncated [ 204.979239][T10117] loop2: p121 start 1048320 is beyond EOD, truncated [ 204.986512][T10139] EXT4-fs (loop3): Remounting filesystem read-only [ 204.993149][T10139] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #13: comm syz.3.4229: corrupted inode contents [ 205.006552][T10117] loop2: p123 start 1048320 is beyond EOD, truncated [ 205.014328][T10117] loop2: p125 start 1048320 is beyond EOD, truncated [ 205.021395][T10139] EXT4-fs (loop3): Remounting filesystem read-only [ 205.025791][T10107] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 205.030708][T10117] loop2: p127 start 1048320 is beyond EOD, [ 205.037572][T10139] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #13: comm syz.3.4229: mark_inode_dirty error [ 205.054820][T10107] F2FS-fs (loop7): Bad quota inode 2:50331648 [ 205.054894][T10107] F2FS-fs (loop7): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 205.054919][T10107] F2FS-fs (loop7): Cannot turn on quotas: error -22 [ 205.072943][T10102] F2FS-fs (loop5): Test dummy encryption mode enabled [ 205.085003][T10117] truncated [ 205.088708][T10107] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 205.092808][T10117] loop2: p129 start 1048320 is beyond EOD, truncated [ 205.096569][T10107] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 205.104811][T10139] EXT4-fs (loop3): Remounting filesystem read-only [ 205.117229][T10117] loop2: p131 start 1048320 is beyond EOD, truncated [ 205.124795][T10102] F2FS-fs (loop5): invalid crc value [ 205.133679][T10117] loop2: p133 start 1048320 is beyond EOD, truncated [ 205.148417][T10117] loop2: p135 start 1048320 is beyond EOD, truncated [ 205.158272][T10102] F2FS-fs (loop5): Found nat_bits in checkpoint [ 205.164824][T10139] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4229: invalid indirect mapped block 65535 (level 2) [ 205.164993][T10117] loop2: p137 start 1048320 is beyond EOD, truncated [ 205.200389][T10139] EXT4-fs (loop3): Remounting filesystem read-only [ 205.207827][T10117] loop2: p139 start 1048320 is beyond EOD, truncated [ 205.214987][T10139] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #13: comm syz.3.4229: corrupted inode contents [ 205.237389][T10117] loop2: p141 start 1048320 is beyond EOD, truncated [ 205.253614][T10139] EXT4-fs (loop3): Remounting filesystem read-only [ 205.260551][T10139] EXT4-fs error (device loop3): ext4_truncate:4327: inode #13: comm syz.3.4229: mark_inode_dirty error [ 205.271899][T10117] loop2: p143 start 1048320 is beyond EOD, truncated [ 205.281081][T10117] loop2: p145 start 1048320 is beyond EOD, truncated [ 205.301326][T10139] EXT4-fs (loop3): Remounting filesystem read-only [ 205.308283][T10117] loop2: p147 start 1048320 is beyond EOD, truncated [ 205.311827][T10139] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem [ 205.323996][T10117] loop2: p149 start 1048320 is beyond EOD, truncated [ 205.324599][T10102] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 205.338429][T10139] EXT4-fs (loop3): Remounting filesystem read-only [ 205.345363][T10117] loop2: p151 start 1048320 is beyond EOD, truncated [ 205.346747][T10148] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #13: comm syz.3.4229: corrupted inode contents [ 205.373614][T10117] loop2: p153 start 1048320 is beyond EOD, truncated [ 205.388415][T10148] EXT4-fs (loop3): Remounting filesystem read-only [ 205.388454][T10117] loop2: p155 start 1048320 is beyond EOD, [ 205.399357][ T28] audit: type=1400 audit(1780929559.428:727): avc: denied { mounton } for pid=10101 comm="syz.5.4213" path="/305/bus/bus" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 205.403753][T10117] truncated [ 205.419999][T10102] incfs: ino conflict with backing FS 3 [ 205.439658][T10117] loop2: p157 start 1048320 is beyond EOD, truncated [ 205.446693][T10148] EXT4-fs error (device loop3): __ext4_unlink:3341: inode #13: comm syz.3.4229: mark_inode_dirty error [ 205.459749][T10117] loop2: p159 start 1048320 is beyond EOD, truncated [ 205.468714][T10117] loop2: p161 start 1048320 is beyond EOD, truncated [ 205.476242][T10117] loop2: p163 start 1048320 is beyond EOD, truncated [ 205.490131][T10117] loop2: p165 start 1048320 is beyond EOD, truncated [ 205.498070][ T4769] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 205.500666][T10117] loop2: p167 start 1048320 is beyond EOD, truncated [ 205.547720][T10117] loop2: p169 start 1048320 is beyond EOD, truncated [ 205.562167][T10117] loop2: p171 start 1048320 is beyond EOD, truncated [ 205.570792][T10117] loop2: p173 start 1048320 is beyond EOD, truncated [ 205.578473][T10117] loop2: p175 start 1048320 is beyond EOD, truncated [ 205.595993][T10117] loop2: p177 start 1048320 is beyond EOD, truncated [ 205.611830][T10117] loop2: p179 start 1048320 is beyond EOD, truncated [ 205.620251][T10117] loop2: p181 start 1048320 is beyond EOD, truncated [ 205.637480][T10117] loop2: p183 start 1048320 is beyond EOD, truncated [ 205.645266][T10117] loop2: p185 start 1048320 is beyond EOD, truncated [ 205.652659][T10117] loop2: p187 start 1048320 is beyond EOD, truncated [ 205.660601][T10117] loop2: p189 start 1048320 is beyond EOD, truncated [ 205.690616][T10117] loop2: p191 start 1048320 is beyond EOD, truncated [ 205.704134][T10117] loop2: p193 start 1048320 is beyond EOD, truncated [ 205.723984][T10117] loop2: p195 start 1048320 is beyond EOD, truncated [ 205.739740][T10117] loop2: p197 start 1048320 is beyond EOD, truncated [ 205.747861][T10117] loop2: p199 start 1048320 is beyond EOD, truncated [ 205.755710][T10117] loop2: p201 start 1048320 is beyond EOD, truncated [ 205.768592][T10117] loop2: p203 start 1048320 is beyond EOD, truncated [ 205.777655][T10117] loop2: p205 start 1048320 is beyond EOD, truncated [ 205.785367][T10117] loop2: p207 start 1048320 is beyond EOD, truncated [ 205.792825][T10117] loop2: p209 start 1048320 is beyond EOD, truncated [ 205.818696][T10117] loop2: p211 start 1048320 is beyond EOD, truncated [ 205.833756][T10117] loop2: p213 start 1048320 is beyond EOD, truncated [ 205.841051][ T28] audit: type=1400 audit(1780929559.868:728): avc: denied { connect } for pid=10168 comm="syz.3.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.860948][T10117] loop2: p215 start 1048320 is beyond EOD, truncated [ 205.874503][T10117] loop2: p217 start 1048320 is beyond EOD, truncated [ 205.889874][T10117] loop2: p219 start 1048320 is beyond EOD, truncated [ 205.908298][T10117] loop2: p221 start 1048320 is beyond EOD, truncated [ 205.925259][T10117] loop2: p223 start 1048320 is beyond EOD, truncated [ 205.940615][T10117] loop2: p225 start 1048320 is beyond EOD, truncated [ 205.956841][T10179] cgroup: fork rejected by pids controller in /syz3 [ 205.958097][T10117] loop2: p227 start 1048320 is beyond EOD, truncated [ 205.986739][T10117] loop2: p229 start 1048320 is beyond EOD, truncated [ 206.013243][T10117] loop2: p231 start 1048320 is beyond EOD, truncated [ 206.032953][T10117] loop2: p233 start 1048320 is beyond EOD, truncated [ 206.050094][T10117] loop2: p235 start 1048320 is beyond EOD, truncated [ 206.062165][T10117] loop2: p237 start 1048320 is beyond EOD, truncated [ 206.075843][T10117] loop2: p239 start 1048320 is beyond EOD, truncated [ 206.083531][T10117] loop2: p241 start 1048320 is beyond EOD, truncated [ 206.090961][T10117] loop2: p243 start 1048320 is beyond EOD, truncated [ 206.099193][T10117] loop2: p245 start 1048320 is beyond EOD, truncated [ 206.108572][T10117] loop2: p247 start 1048320 is beyond EOD, truncated [ 206.116993][T10117] loop2: p249 start 1048320 is beyond EOD, truncated [ 206.139086][T10117] loop2: p251 start 1048320 is beyond EOD, truncated [ 206.147112][T10187] syz.7.4250 (10187) used greatest stack depth: 19296 bytes left [ 206.173678][T10117] loop2: p253 start 1048320 is beyond EOD, truncated [ 206.180928][T10117] loop2: p255 start 1048320 is beyond EOD, truncated [ 206.381311][T10212] set_capacity_and_notify: 2 callbacks suppressed [ 206.381332][T10212] loop2: detected capacity change from 0 to 512 [ 206.403885][T10212] EXT4-fs: Ignoring removed oldalloc option [ 206.410717][ T2270] udevd[2270]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 206.416715][ T1790] udevd[1790]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 206.427747][ T1793] udevd[1793]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 206.435174][ T1791] udevd[1791]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 206.451552][ T3982] udevd[3982]: inotify_add_watch(7, /dev/loop2p10, 10) failed: No such file or directory [ 206.463111][ T2391] udevd[2391]: inotify_add_watch(7, /dev/loop2p12, 10) failed: No such file or directory [ 206.479002][T10212] EXT4-fs (loop2): Test dummy encryption mode enabled [ 206.501289][ T2270] udevd[2270]: inotify_add_watch(7, /dev/loop2p26, 10) failed: No such file or directory [ 206.501308][ T1790] udevd[1790]: inotify_add_watch(7, /dev/loop2p28, 10) failed: No such file or directory [ 206.506962][ T1791] udevd[1791]: inotify_add_watch(7, /dev/loop2p30, 10) failed: No such file or directory [ 206.532658][ T1793] udevd[1793]: inotify_add_watch(7, /dev/loop2p32, 10) failed: No such file or directory [ 206.544109][T10212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 206.648472][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 206.822597][ T28] audit: type=1400 audit(1780929560.848:729): avc: denied { read write } for pid=10243 comm="syz.2.4271" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.859107][ T28] audit: type=1400 audit(1780929560.848:730): avc: denied { open } for pid=10243 comm="syz.2.4271" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.869899][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.889728][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.897648][T10213] device bridge_slave_0 entered promiscuous mode [ 206.905376][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.912745][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.920559][T10213] device bridge_slave_1 entered promiscuous mode [ 206.930541][ T28] audit: type=1400 audit(1780929560.848:731): avc: denied { ioctl } for pid=10243 comm="syz.2.4271" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.956147][ T1284] device bridge_slave_1 left promiscuous mode [ 206.975691][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.989955][ T1284] device bridge_slave_0 left promiscuous mode [ 206.998007][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.016953][ T1284] device bridge0 left promiscuous mode [ 207.032393][ T1284] device veth1_macvtap left promiscuous mode [ 207.038911][ T1284] device veth0_vlan left promiscuous mode [ 207.103506][ T294] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 207.118662][T10252] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4274'. [ 207.194416][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.201600][T10213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.208976][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.216048][T10213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.237996][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.245740][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.253037][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.270288][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.281125][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.288264][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.293711][ T294] usb 3-1: Using ep0 maxpacket: 32 [ 207.297955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.305185][ T294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.309983][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.320965][ T294] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 207.323559][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.341369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.349851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.385351][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.405548][ T294] usb 3-1: Product: syz [ 207.405957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.409892][ T294] usb 3-1: Manufacturer: syz [ 207.428695][T10213] device veth0_vlan entered promiscuous mode [ 207.439638][ T294] usb 3-1: SerialNumber: syz [ 207.446056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.455358][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.465534][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.482877][T10213] device veth1_macvtap entered promiscuous mode [ 207.490557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.508798][T10272] sock: sock_timestamping_bind_phc: sock not bind to device [ 207.519292][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.537887][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.667381][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4291'. [ 207.679683][ T294] usb 3-1: unit 4 not found! [ 207.685337][ T294] usb 3-1: unit 0 not found! [ 207.907042][T10312] loop5: detected capacity change from 0 to 256 [ 207.924026][T10312] exfat: Deprecated parameter 'namecase' [ 207.939621][T10312] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 207.990855][ T28] audit: type=1400 audit(1780929562.018:732): avc: denied { append } for pid=10311 comm="syz.5.4300" path="/324/file0/rdma.current" dev="loop5" ino=1049104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.081409][ T294] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 208.094336][ T294] usb 3-1: unit 4 not found! [ 208.099004][ T294] usb 3-1: unit 0 not found! [ 208.117485][ T294] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 208.131868][ T294] usb 3-1: unit 4 not found! [ 208.147023][ T294] usb 3-1: unit 0 not found! [ 208.175117][ T294] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 208.202528][ T294] usb 3-1: USB disconnect, device number 11 [ 208.401455][T10328] loop5: detected capacity change from 0 to 40427 [ 208.438485][T10328] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 208.458891][T10328] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 208.488999][T10328] F2FS-fs (loop5): invalid crc value [ 208.522369][T10328] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 208.600780][T10328] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 208.634724][T10328] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 208.746861][ T7223] syz-executor: attempt to access beyond end of device [ 208.746861][ T7223] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.847515][T10361] loop0: detected capacity change from 0 to 128 [ 208.879211][ T28] audit: type=1400 audit(1780929562.908:733): avc: denied { mount } for pid=10360 comm="syz.0.4323" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 209.019417][ T28] audit: type=1400 audit(1780929563.048:734): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 209.112226][T10355] loop2: detected capacity change from 0 to 40427 [ 209.137894][T10355] F2FS-fs (loop2): invalid crc value [ 209.164477][T10355] F2FS-fs (loop2): Found nat_bits in checkpoint [ 209.210316][T10336] loop7: detected capacity change from 0 to 131072 [ 209.239373][T10336] F2FS-fs (loop7): invalid crc value [ 209.276066][T10355] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 209.288781][T10336] F2FS-fs (loop7): Found nat_bits in checkpoint [ 209.384899][T10355] syz.2.4319: attempt to access beyond end of device [ 209.384899][T10355] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 209.399115][T10336] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 209.468845][ T7617] syz-executor: attempt to access beyond end of device [ 209.468845][ T7617] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.741415][T10349] loop3: detected capacity change from 0 to 131072 [ 209.756894][T10349] F2FS-fs (loop3): Test dummy encryption mode enabled [ 209.813510][T10349] F2FS-fs (loop3): invalid crc value [ 209.854304][T10349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.879743][T10410] loop5: detected capacity change from 0 to 128 [ 209.917164][T10412] loop0: detected capacity change from 0 to 512 [ 209.953711][T10412] EXT4-fs: Ignoring removed orlov option [ 209.973583][T10349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 209.975077][T10412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 210.046648][ T287] EXT4-fs (loop0): unmounting filesystem. [ 210.061319][ T28] audit: type=1400 audit(1780929564.088:735): avc: denied { unlink } for pid=10348 comm="syz.3.4318" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 210.151197][T10424] loop0: detected capacity change from 0 to 512 [ 210.199730][ T28] audit: type=1326 audit(1780929564.228:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.5.4349" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x0 [ 210.241373][T10424] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 210.268812][T10424] ext4 filesystem being mounted at /922/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.316519][ T287] EXT4-fs (loop0): unmounting filesystem. [ 210.340639][T10440] netlink: 'syz.5.4353': attribute type 4 has an invalid length. [ 210.370673][T10438] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 210.404532][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 210.460538][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4358'. [ 210.473838][T10446] FAT-fs (loop0): Directory bread(block 64) failed [ 210.490639][T10446] FAT-fs (loop0): Directory bread(block 65) failed [ 210.500473][T10452] FAT-fs (loop7): Unrecognized mount option "tots" or missing value [ 210.510204][T10446] FAT-fs (loop0): Directory bread(block 66) failed [ 210.533523][T10446] FAT-fs (loop0): Directory bread(block 67) failed [ 210.552075][T10446] FAT-fs (loop0): Directory bread(block 68) failed [ 210.565052][T10446] FAT-fs (loop0): Directory bread(block 69) failed [ 210.571668][T10446] FAT-fs (loop0): Directory bread(block 70) failed [ 210.578579][T10446] FAT-fs (loop0): Directory bread(block 71) failed [ 210.616775][T10446] FAT-fs (loop0): Directory bread(block 72) failed [ 210.640995][T10446] FAT-fs (loop0): Directory bread(block 73) failed [ 210.801792][T10475] netlink: 'syz.7.4370': attribute type 2 has an invalid length. [ 213.707336][T10499] set_capacity_and_notify: 3 callbacks suppressed [ 213.707359][T10499] loop5: detected capacity change from 0 to 256 [ 213.780065][T10499] FAT-fs (loop5): Directory bread(block 64) failed [ 213.795793][T10499] FAT-fs (loop5): Directory bread(block 65) failed [ 213.803857][ T28] audit: type=1326 audit(1780929567.838:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.0.4385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 213.816289][T10499] FAT-fs (loop5): Directory bread(block 66) failed [ 213.884201][ T28] audit: type=1326 audit(1780929567.868:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.0.4385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 213.886787][T10499] FAT-fs (loop5): Directory bread(block 67) failed [ 213.942702][ T28] audit: type=1326 audit(1780929567.868:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.0.4385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 213.967242][T10499] FAT-fs (loop5): Directory bread(block 68) failed [ 213.994853][T10499] FAT-fs (loop5): Directory bread(block 69) failed [ 214.001489][T10499] FAT-fs (loop5): Directory bread(block 70) failed [ 214.013527][T10499] FAT-fs (loop5): Directory bread(block 71) failed [ 214.032901][ T28] audit: type=1326 audit(1780929567.868:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.0.4385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 214.049550][T10499] FAT-fs (loop5): Directory bread(block 72) failed [ 214.066931][T10532] loop3: detected capacity change from 0 to 256 [ 214.073399][T10499] FAT-fs (loop5): Directory bread(block 73) failed [ 214.101783][ T28] audit: type=1326 audit(1780929567.868:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.0.4385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 214.183374][ T28] audit: type=1326 audit(1780929567.868:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.0.4385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 214.235789][ T28] audit: type=1326 audit(1780929567.868:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.0.4385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 214.273998][ T28] audit: type=1326 audit(1780929567.868:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10507 comm="syz.0.4385" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859af9ce59 code=0x7ffc0000 [ 214.416590][T10544] loop0: detected capacity change from 0 to 8192 [ 214.422767][T10548] loop5: detected capacity change from 0 to 512 [ 214.481340][T10548] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 214.533581][T10548] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.592180][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'. [ 214.604016][ T294] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 214.619906][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 214.629236][T10560] loop7: detected capacity change from 0 to 256 [ 214.648266][ T28] audit: type=1400 audit(1780929568.678:745): avc: denied { unmount } for pid=10562 comm="syz.0.4411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 214.742855][T10572] loop2: detected capacity change from 0 to 256 [ 214.793638][ T294] usb 4-1: Using ep0 maxpacket: 32 [ 214.800518][T10572] FAT-fs (loop2): Directory bread(block 64) failed [ 214.808665][ T294] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.833201][T10572] FAT-fs (loop2): Directory bread(block 65) failed [ 214.850167][T10572] FAT-fs (loop2): Directory bread(block 66) failed [ 214.860213][ T294] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.880405][T10572] FAT-fs (loop2): Directory bread(block 67) failed [ 214.892069][ T294] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 214.911659][T10572] FAT-fs (loop2): Directory bread(block 68) failed [ 214.921721][T10572] FAT-fs (loop2): Directory bread(block 69) failed [ 214.928497][ T294] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 214.953429][T10572] FAT-fs (loop2): Directory bread(block 70) failed [ 214.960102][ T294] usb 4-1: Product: syz [ 214.970307][ T294] usb 4-1: Manufacturer: syz [ 214.975346][T10572] FAT-fs (loop2): Directory bread(block 71) failed [ 214.994241][ T294] hub 4-1:4.0: USB hub found [ 214.999139][T10572] FAT-fs (loop2): Directory bread(block 72) failed [ 215.013399][T10572] FAT-fs (loop2): Directory bread(block 73) failed [ 215.195708][ T294] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 215.232213][T10583] loop5: detected capacity change from 0 to 40427 [ 215.259738][T10583] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 215.273411][T10583] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 215.323410][T10583] F2FS-fs (loop5): Found nat_bits in checkpoint [ 215.430370][T10583] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 215.444239][T10583] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 215.492777][T10609] loop7: detected capacity change from 0 to 256 [ 215.522892][ T294] usb 4-1: USB disconnect, device number 17 [ 215.534290][T10609] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 215.626220][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4430'. [ 215.644955][T10568] loop0: detected capacity change from 0 to 131072 [ 215.664416][T10568] F2FS-fs (loop0): Test dummy encryption mode enabled [ 215.676993][T10568] F2FS-fs (loop0): invalid crc value [ 215.713475][T10568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.803429][T10568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 215.967252][T10633] loop7: detected capacity change from 0 to 128 [ 216.019615][T10633] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 216.193996][T10595] F2FS-fs (loop2): Found nat_bits in checkpoint [ 216.279556][T10670] usb usb8: usbfs: process 10670 (syz.3.4456) did not claim interface 0 before use [ 216.303701][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4458'. [ 216.325069][ T28] audit: type=1400 audit(1780929570.358:746): avc: denied { override_creds } for pid=10673 comm="syz.5.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 216.345676][T10595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 216.437032][T10685] netlink: 'syz.7.4462': attribute type 28 has an invalid length. [ 216.453803][T10595] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=6 iblocks=0, run fsck to fix. [ 216.477333][T10684] FAT-fs (loop3): Directory bread(block 64) failed [ 216.513449][T10684] FAT-fs (loop3): Directory bread(block 65) failed [ 216.562361][T10684] FAT-fs (loop3): Directory bread(block 66) failed [ 216.588899][T10684] FAT-fs (loop3): Directory bread(block 67) failed [ 216.604524][T10684] FAT-fs (loop3): Directory bread(block 68) failed [ 216.613886][T10684] FAT-fs (loop3): Directory bread(block 69) failed [ 216.633447][T10684] FAT-fs (loop3): Directory bread(block 70) failed [ 216.640028][T10684] FAT-fs (loop3): Directory bread(block 71) failed [ 216.665132][T10684] FAT-fs (loop3): Directory bread(block 72) failed [ 216.671834][T10684] FAT-fs (loop3): Directory bread(block 73) failed [ 216.911728][T10713] FAT-fs (loop2): Directory bread(block 32) failed [ 216.922147][T10713] FAT-fs (loop2): Directory bread(block 33) failed [ 216.929090][ T6] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 216.938042][T10713] FAT-fs (loop2): Directory bread(block 34) failed [ 216.945478][T10713] FAT-fs (loop2): Directory bread(block 35) failed [ 216.952201][T10713] FAT-fs (loop2): Directory bread(block 36) failed [ 216.959119][T10713] FAT-fs (loop2): Directory bread(block 37) failed [ 216.965926][T10713] FAT-fs (loop2): Directory bread(block 38) failed [ 216.972568][T10713] FAT-fs (loop2): Directory bread(block 39) failed [ 216.979460][T10713] FAT-fs (loop2): Directory bread(block 40) failed [ 216.986351][T10713] FAT-fs (loop2): Directory bread(block 41) failed [ 217.054352][T10713] syz.2.4467: attempt to access beyond end of device [ 217.054352][T10713] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 217.079764][T10713] FAT-fs (loop2): Filesystem has been set read-only [ 217.093117][T10713] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 217.124419][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.152221][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 217.169835][ T6] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 217.191560][ T6] usb 8-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 217.211947][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.229905][ T6] usb 8-1: config 0 descriptor?? [ 217.316473][T10723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.561054][T10710] F2FS-fs (loop0): Found nat_bits in checkpoint [ 217.635422][T10710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 217.655376][ T6] logitech 0003:046D:CA03.0028: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.7-1/input0 [ 217.675724][ T6] logitech 0003:046D:CA03.0028: no inputs found [ 217.706983][T10710] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 217.728054][T10756] device 30{X entered promiscuous mode [ 217.735542][T10756] device vlan2 entered promiscuous mode [ 217.861046][ T294] usb 8-1: USB disconnect, device number 12 [ 217.949874][T10764] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbab21acc, utbl_chksum : 0xe619d30d) [ 218.028901][T10766] FAT-fs (loop0): Directory bread(block 64) failed [ 218.043671][T10766] FAT-fs (loop0): Directory bread(block 65) failed [ 218.060296][T10766] FAT-fs (loop0): Directory bread(block 66) failed [ 218.077257][T10766] FAT-fs (loop0): Directory bread(block 67) failed [ 218.084932][T10766] FAT-fs (loop0): Directory bread(block 68) failed [ 218.091628][T10766] FAT-fs (loop0): Directory bread(block 69) failed [ 218.095851][T10770] exfat: Deprecated parameter 'namecase' [ 218.105450][T10766] FAT-fs (loop0): Directory bread(block 70) failed [ 218.112173][T10766] FAT-fs (loop0): Directory bread(block 71) failed [ 218.119236][T10766] FAT-fs (loop0): Directory bread(block 72) failed [ 218.126114][T10766] FAT-fs (loop0): Directory bread(block 73) failed [ 218.133402][T10770] exfat: Deprecated parameter 'namecase' [ 218.162432][T10770] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 218.310397][ T28] audit: type=1326 audit(1780929572.338:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.3.4509" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 218.385255][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4514'. [ 218.404880][T10802] erofs: (device loop3): mounted with root inode @ nid 36. [ 218.533932][T10811] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 218.545049][T10820] bridge_slave_0: default FDB implementation only supports local addresses [ 218.554774][T10811] ext4 filesystem being mounted at /771/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.606149][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 218.693900][T10834] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4527'. [ 218.760082][T10840] netlink: 'syz.7.4533': attribute type 2 has an invalid length. [ 218.833601][T10847] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4536'. [ 218.892743][T10856] set_capacity_and_notify: 10 callbacks suppressed [ 218.892766][T10856] loop2: detected capacity change from 0 to 256 [ 218.927843][T10856] FAT-fs (loop2): Directory bread(block 64) failed [ 218.932851][T10858] loop7: detected capacity change from 0 to 512 [ 218.945313][T10856] FAT-fs (loop2): Directory bread(block 65) failed [ 218.954011][T10859] tipc: Enabling of bearer rejected, failed to enable media [ 218.962358][T10856] FAT-fs (loop2): Directory bread(block 66) failed [ 218.979297][T10856] FAT-fs (loop2): Directory bread(block 67) failed [ 218.982788][T10858] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.995244][T10856] FAT-fs (loop2): Directory bread(block 68) failed [ 218.995278][T10856] FAT-fs (loop2): Directory bread(block 69) failed [ 218.995354][T10856] FAT-fs (loop2): Directory bread(block 70) failed [ 219.013626][T10858] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 219.016445][T10856] FAT-fs (loop2): Directory bread(block 71) failed [ 219.043661][T10858] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 219.059368][T10858] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 219.063706][T10856] FAT-fs (loop2): Directory bread(block 72) failed [ 219.073659][T10858] System zones: 0-2, 18-18, 34-35 [ 219.089260][T10858] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 219.095866][T10856] FAT-fs (loop2): Directory bread(block 73) failed [ 219.106936][T10862] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 219.165248][T10858] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 219.233741][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 219.254847][T10868] netlink: 612 bytes leftover after parsing attributes in process `syz.3.4547'. [ 219.297108][T10868] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 219.355305][T10878] loop3: detected capacity change from 0 to 256 [ 219.585502][T10800] loop0: detected capacity change from 0 to 131072 [ 219.625838][T10800] F2FS-fs (loop0): Test dummy encryption mode enabled [ 219.661636][T10800] F2FS-fs (loop0): invalid crc value [ 219.679812][T10800] F2FS-fs (loop0): Found nat_bits in checkpoint [ 219.766908][T10800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 219.972325][T10929] loop2: detected capacity change from 0 to 256 [ 219.979795][T10912] loop3: detected capacity change from 0 to 40427 [ 220.037536][T10912] F2FS-fs (loop3): invalid crc value [ 220.061642][T10912] F2FS-fs (loop3): Found nat_bits in checkpoint [ 220.192197][T10912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 220.421059][T10939] loop0: detected capacity change from 0 to 4096 [ 220.464469][T10939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.539472][T10910] loop5: detected capacity change from 0 to 131072 [ 220.549061][T10910] F2FS-fs (loop5): invalid crc value [ 220.567311][ T287] EXT4-fs (loop0): unmounting filesystem. [ 220.575314][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 220.575332][ T28] audit: type=1400 audit(1780929574.608:756): avc: denied { create } for pid=10945 comm="syz.2.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.608385][T10910] F2FS-fs (loop5): Found nat_bits in checkpoint [ 220.713438][T10910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 220.778151][T10897] loop7: detected capacity change from 0 to 131072 [ 220.845593][T10897] F2FS-fs (loop7): Found nat_bits in checkpoint [ 220.928813][T10897] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 220.961699][T10944] loop3: detected capacity change from 0 to 40427 [ 220.984769][T10944] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 221.003762][T10944] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 221.042670][T10944] F2FS-fs (loop3): invalid crc value [ 221.058224][T10944] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 221.088718][T10944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.210370][T10944] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 221.226590][T10944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.280975][T10213] syz-executor: attempt to access beyond end of device [ 221.280975][T10213] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 221.295263][T10213] syz-executor: attempt to access beyond end of device [ 221.295263][T10213] loop3: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 221.522096][T10953] F2FS-fs (loop2): Invalid log sectorsize (0) [ 221.528784][T10953] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 221.546732][T10953] F2FS-fs (loop2): invalid crc value [ 221.566620][T10953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.648098][T10953] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 221.656211][T10953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.802347][T11009] exfat: Deprecated parameter 'namecase' [ 221.861283][T11009] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 221.888613][T11021] exfat: Deprecated parameter 'namecase' [ 221.895572][T11020] usb usb9: usbfs: interface 0 claimed by hub while 'syz.5.4609' sets config #6 [ 221.923054][T11021] exfat: Deprecated parameter 'utf8' [ 221.983774][T11021] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7c8, utbl_chksum : 0xe619d30d) [ 222.329066][T11027] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 222.342531][T11069] device bridge_slave_0 entered promiscuous mode [ 222.356597][T11027] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 222.379158][T11027] F2FS-fs (loop5): invalid crc value [ 222.417099][T11076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4635'. [ 222.437354][T11027] F2FS-fs (loop5): Found nat_bits in checkpoint [ 222.538360][T11027] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 222.545613][T11027] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 222.569336][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 222.590096][ T28] audit: type=1400 audit(1780929576.618:757): avc: denied { link } for pid=11026 comm="syz.5.4611" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.673773][T11103] FAT-fs (loop2): Directory bread(block 64) failed [ 222.682775][T11103] FAT-fs (loop2): Directory bread(block 65) failed [ 222.706121][T11103] FAT-fs (loop2): Directory bread(block 66) failed [ 222.720928][T11105] FAT-fs (loop7): Directory bread(block 64) failed [ 222.722798][T11103] FAT-fs (loop2): Directory bread(block 67) failed [ 222.735750][T11103] FAT-fs (loop2): Directory bread(block 68) failed [ 222.737165][T11105] FAT-fs (loop7): Directory bread(block 65) failed [ 222.742314][T11103] FAT-fs (loop2): Directory bread(block 69) failed [ 222.742445][T11103] FAT-fs (loop2): Directory bread(block 70) failed [ 222.762824][T11103] FAT-fs (loop2): Directory bread(block 71) failed [ 222.767335][T11105] FAT-fs (loop7): Directory bread(block 66) failed [ 222.770153][T11103] FAT-fs (loop2): Directory bread(block 72) failed [ 222.782660][T11103] FAT-fs (loop2): Directory bread(block 73) failed [ 222.790884][T11105] FAT-fs (loop7): Directory bread(block 67) failed [ 222.806269][T11105] FAT-fs (loop7): Directory bread(block 68) failed [ 222.815666][T11105] FAT-fs (loop7): Directory bread(block 69) failed [ 222.822368][T11105] FAT-fs (loop7): Directory bread(block 70) failed [ 222.829228][T11105] FAT-fs (loop7): Directory bread(block 71) failed [ 222.835995][T11105] FAT-fs (loop7): Directory bread(block 72) failed [ 222.842626][T11105] FAT-fs (loop7): Directory bread(block 73) failed [ 222.864245][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4646'. [ 222.915677][T11114] futex_wake_op: syz.5.4652 tries to shift op by -1; fix this program [ 222.976188][T11121] netlink: 'syz.2.4655': attribute type 49 has an invalid length. [ 223.024822][T11128] can0: slcan on ptm0. [ 223.133748][T11127] can0 (unregistered): slcan off ptm0. [ 223.145156][T11147] tmpfs: Too few inodes for current use [ 223.187220][ T28] audit: type=1326 audit(1780929577.218:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11148 comm="syz.5.4666" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc94d39ce59 code=0x0 [ 224.202768][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4670'. [ 224.342629][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4678'. [ 224.362156][T11190] set_capacity_and_notify: 7 callbacks suppressed [ 224.362176][T11190] loop0: detected capacity change from 0 to 512 [ 224.413737][T11190] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.474265][T11190] EXT4-fs (loop0): 1 truncate cleaned up [ 224.481572][T11190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 224.528809][ T287] EXT4-fs (loop0): unmounting filesystem. [ 224.683382][ T291] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 224.714160][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.731785][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.739623][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.757244][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.773500][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.783515][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.790964][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.798688][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.806305][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.813968][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.821405][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.829152][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.836761][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.844472][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.852034][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.859756][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.867398][ T6660] hid-generic 0006:0008:0001.0029: unknown main item tag 0x0 [ 224.876112][ T291] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 224.889393][ T6660] hid-generic 0006:0008:0001.0029: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 224.898884][ T291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 224.913394][ T291] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 224.932320][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.944976][T11219] fido_id[11219]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 224.959995][ T291] usb 3-1: config 0 descriptor?? [ 225.163142][T11161] loop3: detected capacity change from 0 to 131072 [ 225.178965][T11161] F2FS-fs (loop3): invalid crc value [ 225.207139][T11161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.256354][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4691'. [ 225.273389][ T19] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 225.283395][T11161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 225.321582][T11161] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 225.407351][T11237] loop0: detected capacity change from 0 to 1024 [ 225.463423][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 225.471358][ T19] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 225.489024][T11237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 225.490919][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.505752][ T19] usb 6-1: Product: syz [ 225.509971][ T19] usb 6-1: Manufacturer: syz [ 225.514649][ T19] usb 6-1: SerialNumber: syz [ 225.532284][T11237] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 225.542307][ T19] r8152-cfgselector 6-1: config 0 descriptor?? [ 225.548890][T11237] EXT4-fs (loop0): can't enable nombcache during remount [ 225.565933][ T287] EXT4-fs (loop0): unmounting filesystem. [ 225.576381][ T291] usb 3-1: string descriptor 0 read error: -71 [ 225.588811][T11247] loop7: detected capacity change from 0 to 512 [ 225.593634][ T291] uclogic 0003:5543:0045.002A: failed retrieving string descriptor #200: -71 [ 225.604957][ T291] uclogic 0003:5543:0045.002A: failed retrieving pen parameters: -71 [ 225.613099][ T291] uclogic 0003:5543:0045.002A: failed probing pen v2 parameters: -71 [ 225.629466][ T291] uclogic 0003:5543:0045.002A: failed probing parameters: -71 [ 225.637248][ T291] uclogic: probe of 0003:5543:0045.002A failed with error -71 [ 225.646083][T11247] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 225.647870][ T291] usb 3-1: USB disconnect, device number 12 [ 225.665123][T11247] ext4 filesystem being mounted at /819/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.758761][ T19] r8152-cfgselector 6-1: Unknown version 0x0000 [ 225.765718][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 225.776119][ T19] r8152-cfgselector 6-1: Unknown version 0x38f0 [ 225.858471][T11267] loop7: detected capacity change from 0 to 1024 [ 225.913244][T11267] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 225.923813][T11267] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 225.933279][T11267] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.4705: Failed to acquire dquot type 0 [ 225.945571][T11267] EXT4-fs (loop7): 1 truncate cleaned up [ 225.951537][T11267] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 225.962700][ T28] audit: type=1400 audit(1780929579.988:759): avc: denied { ioctl } for pid=11275 comm="syz.0.4709" path="pid:[4026532289]" dev="nsfs" ino=4026532289 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 225.994658][ T614] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 226.010144][ T28] audit: type=1400 audit(1780929580.038:760): avc: denied { create } for pid=11277 comm="syz.3.4711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 226.031080][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 226.077553][ T28] audit: type=1400 audit(1780929580.108:761): avc: denied { mounton } for pid=11283 comm="syz.0.4714" path="/980/file0" dev="tmpfs" ino=5085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 226.186612][T11301] loop2: detected capacity change from 0 to 512 [ 226.200450][T11301] EXT4-fs (loop2): Test dummy encryption mode enabled [ 226.221960][T11301] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.2.4722: corrupted xattr block 95 [ 226.243075][T11301] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.4722: bg 0: block 7: invalid block bitmap [ 226.255926][T11301] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 226.256095][T11301] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2916: inode #11: comm syz.2.4722: corrupted xattr block 95 [ 226.256235][T11301] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 226.256278][T11301] EXT4-fs (loop2): 1 orphan inode deleted [ 226.256298][T11301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 226.318556][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 226.339941][T11316] loop0: detected capacity change from 0 to 512 [ 226.371196][T11316] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.4730: bad orphan inode 14 [ 226.384347][T11316] ext4_test_bit(bit=13, block=18) = 1 [ 226.389958][T11316] is_bad_inode(inode)=0 [ 226.395000][T11321] tipc: Enabling of bearer rejected, failed to enable media [ 226.405029][T11323] 9p: Unknown access argument us: -22 [ 226.411189][T11316] NEXT_ORPHAN(inode)=0 [ 226.423956][T11316] max_ino=32 [ 226.437202][T11325] loop2: detected capacity change from 0 to 1024 [ 226.443727][T11316] i_nlink=1 [ 226.446916][T11316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 226.462324][T11316] ext4 filesystem being mounted at /984/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.484800][T11325] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 226.499456][ T28] audit: type=1400 audit(1780929580.528:762): avc: denied { create } for pid=11315 comm="syz.0.4730" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 226.537289][T11316] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.4730: Directory hole found for htree leaf block 0 [ 226.594889][T11340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4741'. [ 226.607882][ T287] EXT4-fs (loop0): unmounting filesystem. [ 226.709984][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4747'. [ 226.734708][T11362] xt_hashlimit: size too large, truncated to 1048576 [ 226.776490][T11370] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 226.789044][T11371] loop0: detected capacity change from 0 to 256 [ 226.821739][T11371] FAT-fs (loop0): Directory bread(block 64) failed [ 226.854135][T11371] FAT-fs (loop0): Directory bread(block 65) failed [ 226.873217][T11371] FAT-fs (loop0): Directory bread(block 66) failed [ 226.881899][T11371] FAT-fs (loop0): Directory bread(block 67) failed [ 226.888815][T11371] FAT-fs (loop0): Directory bread(block 68) failed [ 226.896235][T11371] FAT-fs (loop0): Directory bread(block 69) failed [ 226.903067][T11371] FAT-fs (loop0): Directory bread(block 70) failed [ 226.919616][T11371] FAT-fs (loop0): Directory bread(block 71) failed [ 226.932026][T11371] FAT-fs (loop0): Directory bread(block 72) failed [ 226.957894][T11371] FAT-fs (loop0): Directory bread(block 73) failed [ 226.986772][T11393] loop3: detected capacity change from 0 to 512 [ 227.005850][T11393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.055686][T11396] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbab21acc, utbl_chksum : 0xe619d30d) [ 227.068227][T11393] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.4766: bad orphan inode 131083 [ 227.097672][T11393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.113805][ T28] audit: type=1400 audit(1780929581.138:763): avc: denied { setattr } for pid=11394 comm="syz.5.4767" name="file0" dev="loop5" ino=1049143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.191358][T10213] EXT4-fs (loop3): unmounting filesystem. [ 227.250308][T11411] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 227.347426][T11411] ext4 filesystem being mounted at /842/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.475028][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 227.514869][T11438] netlink: 25 bytes leftover after parsing attributes in process `syz.7.4785'. [ 227.529369][ T28] audit: type=1400 audit(1780929581.558:764): avc: denied { map } for pid=11435 comm="syz.5.4787" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.775784][T11457] xt_hashlimit: size too large, truncated to 1048576 [ 227.883206][ T28] audit: type=1400 audit(1780929581.908:765): avc: denied { shutdown } for pid=11461 comm="syz.7.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.925948][T11460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 227.982213][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 228.189764][T11432] F2FS-fs (loop0): fault_injection options not supported [ 228.230150][T11432] F2FS-fs (loop0): fault_type options not supported [ 228.283837][T11432] F2FS-fs (loop0): invalid crc value [ 228.324543][T11432] F2FS-fs (loop0): Found nat_bits in checkpoint [ 228.542809][T11432] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 228.643663][ T28] audit: type=1326 audit(1780929582.678:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.2.4814" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deb79ce59 code=0x7ffc0000 [ 228.758004][T11493] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 228.765943][T11493] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 228.794664][T11493] F2FS-fs (loop5): invalid crc value [ 228.831221][T11493] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 228.893225][T11493] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 228.900488][T11493] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 229.280139][T11527] exfat: Deprecated parameter 'namecase' [ 229.291411][T11527] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 229.312133][T11423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 229.376035][T11423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.595885][T11549] set_capacity_and_notify: 9 callbacks suppressed [ 229.595910][T11549] loop7: detected capacity change from 0 to 512 [ 229.648242][T11549] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 229.694116][T11549] EXT4-fs (loop7): 1 truncate cleaned up [ 229.712848][T11549] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 229.795219][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 229.821663][T11557] syz.2.4837 (11557) used obsolete PPPIOCDETACH ioctl [ 230.022251][T11584] loop0: detected capacity change from 0 to 256 [ 230.032158][T11585] loop2: detected capacity change from 0 to 1024 [ 230.050251][T11584] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 230.104445][T11585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 230.125448][T11585] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.161703][T11585] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.4850: Directory hole found for htree leaf block 0 [ 230.204199][T11599] loop3: detected capacity change from 0 to 256 [ 230.212405][T11600] tipc: Enabling of bearer rejected, failed to enable media [ 230.222345][T11585] EXT4-fs (loop2): Remounting filesystem read-only [ 230.253040][T11599] incfs: Can't find or create .incomplete dir in ./file0 [ 230.289838][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 230.297666][T11599] incfs: mount failed -28 [ 230.304377][T11602] loop0: detected capacity change from 0 to 16 [ 230.316172][T11602] erofs: (device loop0): mounted with root inode @ nid 36. [ 230.331026][T11541] loop5: detected capacity change from 0 to 131072 [ 230.368009][T11541] F2FS-fs (loop5): Test dummy encryption mode enabled [ 230.392655][T11541] F2FS-fs (loop5): invalid crc value [ 230.444269][T11541] F2FS-fs (loop5): Found nat_bits in checkpoint [ 230.522833][T11541] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 230.595706][T11541] fscrypt (loop5, inode 3): Unsupported encryption flags (0x23) [ 230.641837][T11633] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4871'. [ 230.685338][T11640] loop3: detected capacity change from 0 to 256 [ 230.691892][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4871'. [ 230.705837][T11640] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.720339][T11642] loop7: detected capacity change from 0 to 256 [ 230.726816][T11640] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 230.733752][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4871'. [ 230.759563][T11640] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 231.085931][T11670] netlink: 'syz.7.4887': attribute type 1 has an invalid length. [ 231.223417][ T294] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 231.243201][T11694] loop7: detected capacity change from 0 to 256 [ 231.296186][T11702] device syz_tun entered promiscuous mode [ 231.302006][T11702] device macsec1 entered promiscuous mode [ 231.308775][T11702] device syz_tun left promiscuous mode [ 231.413193][T11706] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4905'. [ 231.415606][ T294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.431228][ T294] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.441652][ T294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.456390][ T294] usb 3-1: string descriptor 0 read error: -22 [ 231.462772][ T294] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 231.472200][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.494579][ T294] usb 3-1: selecting invalid altsetting 1 [ 231.500609][ T294] usb 3-1: unit 6 not found! [ 231.587388][T11721] loop5: detected capacity change from 0 to 256 [ 231.594304][T11721] exfat: Deprecated parameter 'utf8' [ 231.603241][T11721] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 231.689727][ T294] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 231.705389][ T294] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 231.732383][T10217] udevd[10217]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.787275][T11740] tipc: Started in network mode [ 231.792258][T11740] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 231.801504][T11740] tipc: Enabled bearer , priority 10 [ 231.826872][T11742] netlink: 165 bytes leftover after parsing attributes in process `syz.5.4922'. [ 231.890622][T11744] FAT-fs (loop5): Directory bread(block 64) failed [ 231.906396][ T294] usb 3-1: USB disconnect, device number 13 [ 231.910226][T11744] FAT-fs (loop5): Directory bread(block 65) failed [ 231.940019][T11744] FAT-fs (loop5): Directory bread(block 66) failed [ 231.946941][T11744] FAT-fs (loop5): Directory bread(block 67) failed [ 231.955262][T11744] FAT-fs (loop5): Directory bread(block 68) failed [ 231.961956][T11744] FAT-fs (loop5): Directory bread(block 69) failed [ 231.968882][T11744] FAT-fs (loop5): Directory bread(block 70) failed [ 231.976012][T11744] FAT-fs (loop5): Directory bread(block 71) failed [ 231.982665][T11744] FAT-fs (loop5): Directory bread(block 72) failed [ 231.989596][T11744] FAT-fs (loop5): Directory bread(block 73) failed [ 232.069008][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4928'. [ 232.169984][T11762] tipc: Invalid UDP bearer configuration [ 232.170009][T11762] tipc: Enabling of bearer rejected, failed to enable media [ 232.250071][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 232.250089][ T28] audit: type=1400 audit(1780929586.278:807): avc: denied { mount } for pid=11769 comm="syz.5.4936" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 232.292918][ T28] audit: type=1400 audit(1780929586.308:808): avc: denied { remount } for pid=11769 comm="syz.5.4936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 232.313498][ T28] audit: type=1400 audit(1780929586.318:809): avc: denied { unmount } for pid=7223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 232.334574][T11772] tipc: Enabling of bearer rejected, media not registered [ 232.413386][ T6] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 232.458726][T11782] device erspan0 entered promiscuous mode [ 232.473983][T11782] device macsec1 entered promiscuous mode [ 232.582326][T11782] device erspan0 left promiscuous mode [ 232.680062][ T6] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.701592][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.712931][ T6] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 232.748816][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.770421][ T6] usb 4-1: config 0 descriptor?? [ 232.776021][T11807] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 232.793890][T11807] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.4955: bad orphan inode 131083 [ 232.809634][T11807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 232.832359][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 232.884973][T11794] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 232.891620][T11794] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 232.901868][T11794] F2FS-fs (loop7): invalid crc value [ 232.908579][T11794] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 232.920010][ T40] tipc: Node number set to 4269801488 [ 232.949716][T11794] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 232.957140][T11794] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 232.980645][T11814] f2fs_ckpt-7:7: attempt to access beyond end of device [ 232.980645][T11814] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.053556][ T291] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 233.117741][T11827] can0: slcan on ptm0. [ 233.173767][T11826] can0 (unregistered): slcan off ptm0. [ 233.197717][ T6] acrux 0003:1A34:F705.002B: ignoring exceeding usage max [ 233.215854][ T6] acrux 0003:1A34:F705.002B: unknown main item tag 0x0 [ 233.222793][ T6] acrux 0003:1A34:F705.002B: unknown main item tag 0x0 [ 233.234587][ T6] acrux 0003:1A34:F705.002B: unknown main item tag 0x0 [ 233.241846][ T6] acrux 0003:1A34:F705.002B: unknown main item tag 0x0 [ 233.249009][ T6] acrux 0003:1A34:F705.002B: unknown main item tag 0x0 [ 233.260681][ T291] usb 6-1: unable to get BOS descriptor or descriptor too short [ 233.268479][ T6] acrux 0003:1A34:F705.002B: unknown main item tag 0x0 [ 233.275487][ T6] acrux 0003:1A34:F705.002B: unknown main item tag 0x0 [ 233.282751][ T6] acrux 0003:1A34:F705.002B: unknown main item tag 0x0 [ 233.289791][ T6] acrux 0003:1A34:F705.002B: item fetching failed at offset 38/40 [ 233.298201][ T6] acrux 0003:1A34:F705.002B: parse failed [ 233.304278][ T291] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 233.312177][ T6] acrux: probe of 0003:1A34:F705.002B failed with error -22 [ 233.319593][ T291] usb 6-1: can't read configurations, error -71 [ 233.410719][ T40] usb 4-1: USB disconnect, device number 18 [ 233.450669][T11855] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 233.486557][T11857] tipc: Started in network mode [ 233.584726][T11857] tipc: Node identity , cluster identity 4711 [ 233.593392][T11857] tipc: Failed to obtain node identity [ 233.608913][T11857] tipc: Enabling of bearer rejected, failed to enable media [ 233.712835][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4975'. [ 233.733607][T11884] erofs: Unknown parameter '00000000000000000000000c(k{*ʧdzh872z;N1@\xVaz?' [ 233.745881][T10217] udevd[10217]: incorrect erofs checksum on /dev/loop2 [ 233.753350][ T28] audit: type=1400 audit(1780929587.778:810): avc: denied { mounton } for pid=11883 comm="syz.2.4976" path="/344/file0" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 233.756491][T11884] incfs: Can't find or create .index dir in ./file0 [ 233.783688][T11884] incfs: mount failed -22 [ 233.845304][T11894] erofs: (device loop5): mounted with root inode @ nid 36. [ 233.894571][ T614] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 233.941220][T11904] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.5.4986: corrupted xattr block 95 [ 233.955389][T11904] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.4986: bg 0: block 7: invalid block bitmap [ 233.975664][T11904] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 234.000420][T11904] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2916: inode #11: comm syz.5.4986: corrupted xattr block 95 [ 234.027828][T11904] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 234.043441][T11904] EXT4-fs (loop5): 1 orphan inode deleted [ 234.062071][T11904] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 234.093578][ T614] usb 8-1: Using ep0 maxpacket: 8 [ 234.098696][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 234.112635][T11919] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 234.126151][ T614] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 234.135466][T11919] FAT-fs (loop3): Filesystem has been set read-only [ 234.149712][ T614] usb 8-1: config 179 has no interface number 0 [ 234.159967][ T614] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 234.216657][ T614] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 234.244205][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.255122][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5000'. [ 234.257822][ T614] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.293598][ T614] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 234.309285][ T614] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 234.342885][ T614] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 234.352433][ T614] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.369886][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5004'. [ 234.371950][T11869] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 234.471879][T11951] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5007'. [ 234.752422][T11953] set_capacity_and_notify: 9 callbacks suppressed [ 234.752446][T11953] loop2: detected capacity change from 0 to 40427 [ 234.784620][T11953] F2FS-fs (loop2): invalid crc value [ 234.821273][T11953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.851043][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 234.859407][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 234.867836][ T614] usb 8-1: USB disconnect, device number 13 [ 234.916610][T11953] F2FS-fs (loop2): Start checkpoint disabled! [ 234.929842][T11953] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 234.953413][T11953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 234.964453][T11926] loop0: detected capacity change from 0 to 131072 [ 234.971711][T11926] F2FS-fs (loop0): Test dummy encryption mode enabled [ 234.979304][T11926] F2FS-fs (loop0): invalid crc value [ 234.990823][T11961] loop5: detected capacity change from 0 to 40427 [ 235.000921][T11961] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 235.007493][T11961] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 235.023756][T11961] F2FS-fs (loop5): invalid crc value [ 235.036386][T11926] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.064129][T11961] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 235.104827][ T1284] kworker/u4:5: attempt to access beyond end of device [ 235.104827][ T1284] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 235.143601][T11961] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 235.150706][T11961] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 235.157568][T11926] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.243683][ T7223] syz-executor: attempt to access beyond end of device [ 235.243683][ T7223] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.559047][ T28] audit: type=1326 audit(1780929589.588:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 235.633990][ T28] audit: type=1326 audit(1780929589.588:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 235.697683][ T28] audit: type=1326 audit(1780929589.588:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 237.574867][ T28] audit: type=1326 audit(1780929589.588:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 237.609345][ T28] audit: type=1326 audit(1780929589.588:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 237.678791][ T28] audit: type=1326 audit(1780929589.588:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 237.751572][ T28] audit: type=1326 audit(1780929589.588:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 237.827652][ T28] audit: type=1326 audit(1780929589.588:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 237.859188][T12039] tipc: Can't bind to reserved service type 0 [ 237.875801][T12041] loop7: detected capacity change from 0 to 1024 [ 237.903681][T12041] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 237.914773][ T28] audit: type=1326 audit(1780929589.588:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 237.958549][T12041] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 237.978599][ T28] audit: type=1326 audit(1780929589.588:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 237.996266][T12047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12047 comm=syz.3.5049 [ 238.013873][T12041] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #3: comm syz.7.5046: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 238.053350][ T28] audit: type=1326 audit(1780929589.588:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.5029" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 238.083490][T12041] EXT4-fs (loop7): no journal found [ 238.093501][T12041] EXT4-fs (loop7): can't get journal size [ 238.114000][T12041] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 238.188302][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 239.038792][T12112] loop5: detected capacity change from 0 to 512 [ 239.094584][T12112] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 239.134224][T12112] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.194519][T12068] loop7: detected capacity change from 0 to 131072 [ 239.211539][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 239.217692][T12068] F2FS-fs (loop7): invalid crc value [ 239.254678][T12068] F2FS-fs (loop7): Found nat_bits in checkpoint [ 239.288274][T12108] loop3: detected capacity change from 0 to 40427 [ 239.308280][T12108] F2FS-fs (loop3): invalid crc value [ 239.323442][T12068] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 239.332164][T12108] F2FS-fs (loop3): Found nat_bits in checkpoint [ 239.400272][T12132] loop2: detected capacity change from 0 to 256 [ 239.430928][T12132] FAT-fs (loop2): Directory bread(block 64) failed [ 239.439208][T12132] FAT-fs (loop2): Directory bread(block 65) failed [ 239.447365][T12108] F2FS-fs (loop3): Start checkpoint disabled! [ 239.453684][T12132] FAT-fs (loop2): Directory bread(block 66) failed [ 239.460248][T12132] FAT-fs (loop2): Directory bread(block 67) failed [ 239.467624][T12132] FAT-fs (loop2): Directory bread(block 68) failed [ 239.474330][T12108] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 239.481839][T12132] FAT-fs (loop2): Directory bread(block 69) failed [ 239.488606][T12108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 239.497435][T12132] FAT-fs (loop2): Directory bread(block 70) failed [ 239.523537][T12132] FAT-fs (loop2): Directory bread(block 71) failed [ 239.542546][T12132] FAT-fs (loop2): Directory bread(block 72) failed [ 239.566488][T12132] FAT-fs (loop2): Directory bread(block 73) failed [ 239.725205][T12145] loop2: detected capacity change from 0 to 256 [ 239.743930][T12145] exfat: Deprecated parameter 'utf8' [ 239.771715][T12145] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 240.012169][T12108] F2FS-fs (loop3): switch atgc option is not allowed [ 240.150076][T12187] loop5: detected capacity change from 0 to 256 [ 240.162663][T12185] loop2: detected capacity change from 0 to 512 [ 240.179708][T12189] loop3: detected capacity change from 0 to 4096 [ 240.193943][T12187] exfat: Deprecated parameter 'namecase' [ 240.211075][T12187] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 240.228753][T12189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.250336][T12185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.262847][T12185] ext4 filesystem being mounted at /380/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.294345][T10213] EXT4-fs (loop3): unmounting filesystem. [ 240.309797][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 240.401295][T12200] loop5: detected capacity change from 0 to 128 [ 240.434419][T10217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.511304][T12204] loop3: detected capacity change from 0 to 8192 [ 240.522152][T12207] loop2: detected capacity change from 0 to 8192 [ 240.576433][T12207] loop2: p1 p2 [ 240.580090][T12207] loop2: p1 start 16777216 is beyond EOD, truncated [ 240.600414][T12207] loop2: p2 start 50331648 is beyond EOD, truncated [ 240.800544][T12246] loop2: detected capacity change from 0 to 16 [ 240.810472][T12248] netlink: 457 bytes leftover after parsing attributes in process `syz.3.5140'. [ 240.819761][T12246] erofs: (device loop2): mounted with root inode @ nid 36. [ 241.003834][T12244] loop5: detected capacity change from 0 to 40427 [ 241.016246][T12244] F2FS-fs (loop5): fault_injection options not supported [ 241.024767][T12244] F2FS-fs (loop5): fault_type options not supported [ 241.045701][T12244] F2FS-fs (loop5): invalid crc value [ 241.081192][T12244] F2FS-fs (loop5): Found nat_bits in checkpoint [ 241.091070][T12269] loop0: detected capacity change from 0 to 512 [ 241.120148][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5150'. [ 241.149432][T12269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 241.150933][T12244] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 241.168256][T12269] ext4 filesystem being mounted at /1019/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.227067][ T28] audit: type=1400 audit(1780929595.258:822): avc: denied { mounton } for pid=12267 comm="syz.0.5149" path="/1019/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.284325][ T287] EXT4-fs (loop0): unmounting filesystem. [ 241.310042][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5154'. [ 241.465475][T12297] loop2: detected capacity change from 0 to 512 [ 241.534613][T12297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 241.613501][T12297] EXT4-fs error (device loop2): ext4_readdir:223: inode #12: comm syz.2.5161: path /391/file0/file0: directory fails checksum at offset 0 [ 241.635153][T12285] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 241.652381][T12285] F2FS-fs (loop5): invalid crc value [ 241.665268][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 241.671681][T12285] F2FS-fs (loop5): Found nat_bits in checkpoint [ 241.783069][T12285] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 241.923742][ T28] audit: type=1326 audit(1780929595.958:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12325 comm="syz.5.5171" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 242.013539][ T40] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 242.167705][T12353] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 242.196373][ T40] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 242.206048][ T40] usb 3-1: config 0 has no interface number 0 [ 242.212232][ T40] usb 3-1: config 0 interface 32 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.228458][ T40] usb 3-1: config 0 interface 32 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 242.248244][ T40] usb 3-1: config 0 interface 32 has no altsetting 0 [ 242.261769][ T40] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 242.272472][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.288442][ T40] usb 3-1: config 0 descriptor?? [ 242.501153][T12375] exfat: Deprecated parameter 'utf8' [ 242.515676][T12375] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 242.599166][T12388] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5200'. [ 242.715061][ T40] kye 0003:0458:5010.002C: unexpected long global item [ 242.729328][ T40] kye 0003:0458:5010.002C: parse failed [ 242.735304][ T40] kye: probe of 0003:0458:5010.002C failed with error -22 [ 242.803043][T12417] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 242.929584][ T40] usb 3-1: USB disconnect, device number 14 [ 243.013266][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 243.013283][ T28] audit: type=1326 audit(1780929597.038:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.3.5229" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 243.044923][ T28] audit: type=1326 audit(1780929597.038:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.3.5229" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 243.075683][ T28] audit: type=1326 audit(1780929597.048:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.3.5229" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 243.100897][ T28] audit: type=1326 audit(1780929597.048:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.3.5229" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 243.126818][ T28] audit: type=1326 audit(1780929597.048:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.3.5229" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 243.156961][ T28] audit: type=1326 audit(1780929597.048:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.3.5229" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 243.184115][ T28] audit: type=1326 audit(1780929597.048:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.3.5229" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 243.210319][ T28] audit: type=1326 audit(1780929597.048:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12448 comm="syz.3.5229" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5479ce59 code=0x7ffc0000 [ 243.278700][T12463] xt_hashlimit: size too large, truncated to 1048576 [ 243.747298][T12488] FAT-fs (loop3): Directory bread(block 64) failed [ 243.753746][ T614] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 243.762409][T12488] FAT-fs (loop3): Directory bread(block 65) failed [ 243.769185][T12488] FAT-fs (loop3): Directory bread(block 66) failed [ 243.780026][T12488] FAT-fs (loop3): Directory bread(block 67) failed [ 243.787167][T12488] FAT-fs (loop3): Directory bread(block 68) failed [ 243.794091][T12488] FAT-fs (loop3): Directory bread(block 69) failed [ 243.806416][T12488] FAT-fs (loop3): Directory bread(block 70) failed [ 243.813048][T12488] FAT-fs (loop3): Directory bread(block 71) failed [ 243.820731][T12488] FAT-fs (loop3): Directory bread(block 72) failed [ 243.833482][T12488] FAT-fs (loop3): Directory bread(block 73) failed [ 243.896328][T12498] netlink: 'syz.7.5252': attribute type 3 has an invalid length. [ 243.917437][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5253'. [ 243.928023][T12500] device ip6gre1 entered promiscuous mode [ 243.946253][ T614] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 243.960733][ T614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.977117][ T614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.988357][ T614] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 244.007057][ T614] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 244.016308][ T614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.034419][ T614] usb 6-1: config 0 descriptor?? [ 244.173373][ T294] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 244.353761][ T294] usb 4-1: Using ep0 maxpacket: 8 [ 244.360153][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.371552][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.387651][ T294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.409371][ T294] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 244.419112][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.429792][ T294] usb 4-1: config 0 descriptor?? [ 244.440250][T12514] FAT-fs (loop2): Directory bread(block 64) failed [ 244.447646][T12514] FAT-fs (loop2): Directory bread(block 65) failed [ 244.451195][ T614] holtek_kbd 0003:04D9:A055.002D: bogus close delimiter [ 244.455007][T12514] FAT-fs (loop2): Directory bread(block 66) failed [ 244.467916][ T614] holtek_kbd 0003:04D9:A055.002D: item 0 4 2 10 parsing failed [ 244.468157][T12514] FAT-fs (loop2): Directory bread(block 67) failed [ 244.477682][ T614] holtek_kbd: probe of 0003:04D9:A055.002D failed with error -22 [ 244.484660][T12514] FAT-fs (loop2): Directory bread(block 68) failed [ 244.496999][T12514] FAT-fs (loop2): Directory bread(block 69) failed [ 244.503762][T12514] FAT-fs (loop2): Directory bread(block 70) failed [ 244.510404][T12514] FAT-fs (loop2): Directory bread(block 71) failed [ 244.517122][T12514] FAT-fs (loop2): Directory bread(block 72) failed [ 244.523731][T12514] FAT-fs (loop2): Directory bread(block 73) failed [ 244.597003][T12520] exfat: Deprecated parameter 'namecase' [ 244.605993][T12520] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 244.655734][ T6660] usb 6-1: USB disconnect, device number 14 [ 244.813496][T12525] EXT4-fs (loop2): Test dummy encryption mode enabled [ 244.822161][T12525] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.5264: inode has both inline data and extents flags [ 244.835711][T12525] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5264: couldn't read orphan inode 15 (err -117) [ 244.848665][ T294] hid (null): unknown global tag 0xc [ 244.854108][T12525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 244.854526][ T294] hid (null): unknown global tag 0xd [ 244.871871][T12525] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #2: comm syz.2.5264: invalid size [ 244.889744][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 244.896928][ T294] itetech 0003:06CB:73F4.002E: unknown main item tag 0x0 [ 244.919373][ T294] itetech 0003:06CB:73F4.002E: unknown main item tag 0x0 [ 244.926671][ T294] itetech 0003:06CB:73F4.002E: unknown main item tag 0x0 [ 244.935531][ T294] itetech 0003:06CB:73F4.002E: unknown main item tag 0x0 [ 244.943047][ T294] itetech 0003:06CB:73F4.002E: unknown main item tag 0x0 [ 244.951073][ T294] itetech 0003:06CB:73F4.002E: unknown main item tag 0x0 [ 244.960882][ T294] itetech 0003:06CB:73F4.002E: unknown main item tag 0x0 [ 244.968176][ T294] itetech 0003:06CB:73F4.002E: unknown main item tag 0x0 [ 244.977791][ T294] itetech 0003:06CB:73F4.002E: unknown global tag 0xc [ 244.987699][ T294] itetech 0003:06CB:73F4.002E: item 0 1 1 12 parsing failed [ 244.995540][ T294] itetech: probe of 0003:06CB:73F4.002E failed with error -22 [ 245.019782][T12533] FAT-fs (loop7): Directory bread(block 64) failed [ 245.026611][T12533] FAT-fs (loop7): Directory bread(block 65) failed [ 245.033240][T12533] FAT-fs (loop7): Directory bread(block 66) failed [ 245.040224][T12533] FAT-fs (loop7): Directory bread(block 67) failed [ 245.046951][T12533] FAT-fs (loop7): Directory bread(block 68) failed [ 245.063872][T12533] FAT-fs (loop7): Directory bread(block 69) failed [ 245.072420][ T6] usb 4-1: USB disconnect, device number 19 [ 245.082858][T12533] FAT-fs (loop7): Directory bread(block 70) failed [ 245.089755][T12533] FAT-fs (loop7): Directory bread(block 71) failed [ 245.096524][T12533] FAT-fs (loop7): Directory bread(block 72) failed [ 245.103139][T12533] FAT-fs (loop7): Directory bread(block 73) failed [ 245.485715][ T28] audit: type=1326 audit(1780929599.518:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.7.5283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 245.532361][ T28] audit: type=1326 audit(1780929599.518:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.7.5283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0883b9ce59 code=0x7ffc0000 [ 245.769998][T12593] set_capacity_and_notify: 9 callbacks suppressed [ 245.770021][T12593] loop7: detected capacity change from 0 to 1024 [ 245.808740][T12593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.839388][T12593] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 245.854503][T12593] ext4 filesystem being mounted at /954/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.866437][T12535] loop2: detected capacity change from 0 to 131072 [ 245.875450][T12593] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm syz.7.5294: lblock 3 mapped to illegal pblock 3 (length 2) [ 245.890322][T12598] binder: 12596:12598 ioctl c0306201 200000000600 returned -22 [ 245.903161][T12535] F2FS-fs (loop2): Test dummy encryption mode enabled [ 245.904279][T12593] EXT4-fs (loop7): Remounting filesystem read-only [ 245.929019][T12535] F2FS-fs (loop2): invalid crc value [ 245.951464][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 245.992072][T12535] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.117167][T12535] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.306353][T12627] loop7: detected capacity change from 0 to 512 [ 246.340015][T12627] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 246.366054][T12627] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.5309: Unimplemented hash flags: 0x0001 [ 246.403378][T12627] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5309: Corrupt directory, running e2fsck is recommended [ 246.474412][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 246.496180][T12634] loop5: detected capacity change from 0 to 512 [ 246.554824][T12640] loop7: detected capacity change from 0 to 128 [ 246.564679][T12634] EXT4-fs (loop5): invalid journal inode [ 246.602302][T12634] EXT4-fs (loop5): can't get journal size [ 246.619005][T12634] EXT4-fs (loop5): 1 truncate cleaned up [ 246.629329][T12634] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 246.720253][T12647] loop2: detected capacity change from 0 to 512 [ 246.754824][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 246.782764][T12647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 246.817499][T12647] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.5317: bad orphan inode 131083 [ 246.829790][T12647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 246.852673][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 247.009558][T12588] loop0: detected capacity change from 0 to 131072 [ 247.033268][T12588] F2FS-fs (loop0): Test dummy encryption mode enabled [ 247.050439][T12588] F2FS-fs (loop0): invalid crc value [ 247.145880][T12588] F2FS-fs (loop0): Found nat_bits in checkpoint [ 247.252255][T12588] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 247.324950][T12691] loop5: detected capacity change from 0 to 2048 [ 247.336178][T12697] loop3: detected capacity change from 0 to 512 [ 247.389662][T12697] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 247.402115][T12691] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 247.421808][T12697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 247.440761][T12697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 247.449393][T12697] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.5338: bad orphan inode 3 [ 247.459852][T12691] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.464326][T12697] EXT4-fs (loop3): Remounting filesystem read-only [ 247.492647][T12697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.527165][T12697] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.5338: dx entry: limit 0 != root limit 125 [ 247.534971][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 247.539610][T12697] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5338: Corrupt directory, running e2fsck is recommended [ 247.572988][T10213] EXT4-fs (loop3): unmounting filesystem. [ 247.582977][T12715] loop2: detected capacity change from 0 to 1024 [ 247.590261][T12715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.632101][T12715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.684701][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 247.993408][ T291] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 248.040623][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 248.040642][ T28] audit: type=1400 audit(1780929602.068:856): avc: denied { create } for pid=12746 comm="syz.5.5363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1 [ 248.176336][T12771] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 248.195091][ T291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.213788][ T291] usb 4-1: not running at top speed; connect to a high speed hub [ 248.231148][ T291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.264262][ T291] usb 4-1: config 1 interface 0 has no altsetting 0 [ 248.280055][ T291] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 248.299997][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.311669][ T28] audit: type=1326 audit(1780929602.338:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12784 comm="syz.5.5379" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x0 [ 248.311839][ T291] usb 4-1: Product: syz [ 248.340784][ T291] usb 4-1: Manufacturer: syz [ 248.345652][ T291] usb 4-1: SerialNumber: syz [ 248.376747][T12787] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.429639][T12787] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 248.443146][T12787] ext4 filesystem being mounted at /981/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.454605][T12789] EXT4-fs (loop2): 1 truncate cleaned up [ 248.469072][T12789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.493889][T12789] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5381: bg 0: block 465: padding at end of block bitmap is not set [ 248.496584][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 248.514809][T12789] EXT4-fs (loop2): Remounting filesystem read-only [ 248.538890][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 248.582546][ T291] usb 4-1: selecting invalid altsetting 0 [ 248.594958][ T291] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 248.615502][ T291] usb 4-1: USB disconnect, device number 20 [ 248.622422][T10217] udevd[10217]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 248.663837][T12783] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 248.688281][T12783] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 248.726481][T12783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 248.777481][T12783] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 248.784733][T12783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 248.965735][T12838] xt_hashlimit: size too large, truncated to 1048576 [ 248.992399][ T28] audit: type=1400 audit(1780929603.018:858): avc: denied { module_request } for pid=12837 comm="syz.0.5401" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 249.434986][T12843] F2FS-fs (loop7): invalid crc value [ 249.458821][T12843] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 249.533464][T12843] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 250.054294][T12841] F2FS-fs (loop3): invalid crc value [ 250.095699][T12841] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.183048][T12841] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 250.224427][T12841] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 250.290216][T12845] F2FS-fs (loop5): Test dummy encryption mode enabled [ 250.317752][T12845] F2FS-fs (loop5): invalid crc value [ 250.341764][T12845] F2FS-fs (loop5): Found nat_bits in checkpoint [ 250.367296][T12847] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 250.378487][T12847] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 250.397842][T12847] F2FS-fs (loop0): invalid crc value [ 250.419054][T12845] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 250.430736][T12845] F2FS-fs (loop5): Start checkpoint disabled! [ 250.450383][T12847] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.460614][T12845] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 250.513776][T12845] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 250.586637][T12847] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 250.595707][T12847] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 250.635870][T12847] F2FS-fs (loop0): inaccessible inode: 1, run fsck to repair [ 250.654078][T12847] F2FS-fs (loop0): inaccessible inode: 1, run fsck to repair [ 251.043070][T12855] set_capacity_and_notify: 9 callbacks suppressed [ 251.043095][T12855] loop7: detected capacity change from 0 to 131072 [ 251.084189][T12855] F2FS-fs (loop7): Test dummy encryption mode enabled [ 251.114273][T12855] F2FS-fs (loop7): invalid crc value [ 251.124066][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5410'. [ 251.144320][T12855] F2FS-fs (loop7): Found nat_bits in checkpoint [ 251.199184][T12853] loop2: detected capacity change from 0 to 131072 [ 251.205947][T12872] tipc: Invalid UDP bearer configuration [ 251.205972][T12872] tipc: Enabling of bearer rejected, failed to enable media [ 251.233891][T12853] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9) [ 251.251118][T12853] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 251.260963][T12855] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 251.270274][T12853] F2FS-fs (loop2): invalid crc value [ 251.309324][T12853] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 251.396078][T12885] loop0: detected capacity change from 0 to 256 [ 251.416044][T12853] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 251.445787][T12853] F2FS-fs (loop2): Bad quota inode 2:50331648 [ 251.462158][T12853] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 251.474218][T12885] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 251.493331][T12853] F2FS-fs (loop2): Cannot turn on quotas: error -22 [ 251.523358][T12853] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 251.550739][T12853] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 251.643888][T12890] loop0: detected capacity change from 0 to 256 [ 251.974340][T12902] loop7: detected capacity change from 0 to 256 [ 252.045855][T12902] FAT-fs (loop7): Directory bread(block 64) failed [ 252.072804][T12902] FAT-fs (loop7): Directory bread(block 65) failed [ 252.093056][T12902] FAT-fs (loop7): Directory bread(block 66) failed [ 252.112106][T12902] FAT-fs (loop7): Directory bread(block 67) failed [ 252.118950][T12902] FAT-fs (loop7): Directory bread(block 68) failed [ 252.141801][T12902] FAT-fs (loop7): Directory bread(block 69) failed [ 252.159374][T12902] FAT-fs (loop7): Directory bread(block 70) failed [ 252.180252][T12902] FAT-fs (loop7): Directory bread(block 71) failed [ 252.186978][T12902] FAT-fs (loop7): Directory bread(block 72) failed [ 252.203412][T12902] FAT-fs (loop7): Directory bread(block 73) failed [ 252.264204][T12868] loop3: detected capacity change from 0 to 131072 [ 252.297704][T12868] F2FS-fs (loop3): Test dummy encryption mode enabled [ 252.313455][T12868] F2FS-fs (loop3): invalid crc value [ 252.367806][T12868] F2FS-fs (loop3): Found nat_bits in checkpoint [ 252.428353][T12870] loop5: detected capacity change from 0 to 131072 [ 252.441476][T12870] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 252.448419][T12870] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 252.458143][T12870] F2FS-fs (loop5): invalid crc value [ 252.469340][T12868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.514301][T12870] F2FS-fs (loop5): Found nat_bits in checkpoint [ 252.561279][ T28] audit: type=1400 audit(1780929606.588:859): avc: denied { connect } for pid=12939 comm="syz.7.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.608276][T12944] device veth0 entered promiscuous mode [ 252.619012][T12870] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 252.626708][T12870] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 252.631519][T12944] device veth0 left promiscuous mode [ 252.835619][T12955] loop7: detected capacity change from 0 to 256 [ 252.852509][T12955] exfat: Deprecated parameter 'namecase' [ 252.886674][T12957] device erspan0 entered promiscuous mode [ 252.905221][T12955] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 252.970869][T12961] loop7: detected capacity change from 0 to 512 [ 253.014188][T12961] FAT-fs (loop7): FAT read failed (blocknr 128) [ 253.109269][ T28] audit: type=1400 audit(1780929607.138:860): avc: denied { read } for pid=12971 comm="syz.5.5448" path="socket:[60284]" dev="sockfs" ino=60284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 253.165135][ T28] audit: type=1326 audit(1780929607.198:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.5.5452" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 253.190431][T12978] loop7: detected capacity change from 0 to 2048 [ 253.206748][ T28] audit: type=1326 audit(1780929607.198:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.5.5452" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 253.237107][ T28] audit: type=1326 audit(1780929607.228:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.5.5452" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 253.259982][T12984] netlink: 7976 bytes leftover after parsing attributes in process `syz.5.5454'. [ 253.284381][ T28] audit: type=1326 audit(1780929607.228:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.5.5452" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 253.309568][ T28] audit: type=1326 audit(1780929607.228:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.5.5452" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 253.325591][T12978] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 253.335566][ T28] audit: type=1326 audit(1780929607.228:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.5.5452" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 253.349784][T12978] ext4 filesystem being mounted at /999/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.368803][ T28] audit: type=1326 audit(1780929607.228:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.5.5452" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 253.403799][ T28] audit: type=1326 audit(1780929607.228:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.5.5452" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d39ce59 code=0x7ffc0000 [ 253.415119][T12989] EXT4-fs: Ignoring removed oldalloc option [ 253.438009][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5456'. [ 253.459409][T12989] EXT4-fs (loop2): Test dummy encryption mode enabled [ 253.470386][T12978] netlink: 136 bytes leftover after parsing attributes in process `syz.7.5450'. [ 253.493177][ T1811] EXT4-fs (loop7): unmounting filesystem. [ 253.523874][T12989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 253.553343][ T614] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 253.584674][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 253.744611][ T614] usb 4-1: Using ep0 maxpacket: 16 [ 253.751092][ T614] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 253.764020][ T614] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 253.781005][ T614] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 253.790930][ T614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.804080][ T614] usb 4-1: config 0 descriptor?? [ 253.813414][ T6660] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 253.818969][ T28] audit: type=1400 audit(1780929607.848:869): avc: denied { read } for pid=13010 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 253.923375][ T291] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 253.993385][ T6660] usb 8-1: Using ep0 maxpacket: 32 [ 254.001031][ T6660] usb 8-1: unable to get BOS descriptor or descriptor too short [ 254.015587][ T6660] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 254.035020][ T6660] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.043119][ T6660] usb 8-1: Product: syz [ 254.053340][ T6660] usb 8-1: Manufacturer: syz [ 254.058109][ T6660] usb 8-1: SerialNumber: syz [ 254.116025][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.131624][ T291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.142868][ T291] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 254.157092][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping sshd: [ 254.169313][T13027] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 254.182946][ T291] usb 3-1: config 0 descriptor?? stopped /usr/sbin/sshd (pid 193) OK [ 254.219036][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 Stopping crond: [ 254.231027][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.244501][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 stopped /usr/sbin/crond (pid 186) OK [ 254.261752][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.269194][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.276341][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.293857][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.304064][T13036] FAT-fs (loop5): Directory bread(block 64) failed [ 254.304651][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.317933][T13036] FAT-fs (loop5): Directory bread(block 65) failed [ 254.319102][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.331613][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.333721][T13036] FAT-fs (loop5): Directory bread(block 66) failed [ 254.339167][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.352478][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.359569][T13036] FAT-fs (loop5): Directory bread(block 67) failed [ 254.366367][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.373455][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.380126][T13036] FAT-fs (loop5): Directory bread(block 68) failed [ 254.387302][T13036] FAT-fs (loop5): Directory bread(block 69) failed [ 254.389506][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.402550][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.403024][T13036] FAT-fs (loop5): Directory bread(block 70) failed [ 254.409792][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.423563][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.430581][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.437855][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.447524][T13036] FAT-fs (loop5): Directory bread(block 71) failed [ 254.448345][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 Stopping dhcpcd... [ 254.462887][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.465099][T13036] FAT-fs (loop5): Directory bread(block 72) failed [ 254.476978][T13036] FAT-fs (loop5): Directory bread(block 73) failed [ 254.482211][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.485543][ T6660] usb 8-1: unit 0 not found! [ 254.490658][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.490693][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.490736][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 stopped /sbin/dhcpcd (pid 140) [ 254.525667][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.534582][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.541605][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.561803][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.579235][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 Stopping network: [ 254.590313][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.598817][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.606167][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.615196][ T291] hid-led 0003:1D34:000A.0030: unknown main item tag 0x3 [ 254.623618][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.633526][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.640589][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.667975][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.675411][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.682581][ T614] elecom 0003:056E:010D.002F: unknown main item tag 0x0 [ 254.698061][ T6660] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 254.705896][ T614] elecom 0003:056E:010D.002F: hidraw0: USB HID v0.01 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 254.722638][ T6660] usb 8-1: unit 0 not found! [ 254.736865][ T614] usb 4-1: USB disconnect, device number 21 [ 254.758398][ T6660] snd-usb-audio: probe of 8-1:1.1 failed with error -22 [ 254.783709][ T6660] usb 8-1: unit 0 not found! [ 254.797596][ T6660] snd-usb-audio: probe of 8-1:1.2 failed with error -22 [ 254.803247][T13053] fido_id[13053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 254.820105][ T291] hid-led 0003:1D34:000A.0030: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 254.863792][ T291] hid-led 0003:1D34:000A.0030: Dream Cheeky Webmail Notifier initialized [ 254.881516][T10220] udevd[10220]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.898810][T13060] netlink: 'syz.5.5475': attribute type 1 has an invalid length. [ 254.911124][ T6660] usb 8-1: USB disconnect, device number 14 OK [ 255.021101][T13068] FAT-fs (loop5): Directory bread(block 64) failed [ 255.028329][T13068] FAT-fs (loop5): Directory bread(block 65) failed [ 255.035233][T13068] FAT-fs (loop5): Directory bread(block 66) failed [ 255.041865][T13068] FAT-fs (loop5): Directory bread(block 67) failed [ 255.048538][T13068] FAT-fs (loop5): Directory bread(block 68) failed [ 255.055390][T13068] FAT-fs (loop5): Directory bread(block 69) failed [ 255.062242][T13068] FAT-fs (loop5): Directory bread(block 70) failed [ 255.069242][ T614] usb 3-1: USB disconnect, device number 15 [ 255.082878][T13068] FAT-fs (loop5): Directory bread(block 71) failed Stopping iptables: [ 255.097558][T13071] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) OK [ 255.122862][T13068] FAT-fs (loop5): Directory bread(block 72) failed Stopping system message bus: [ 255.136355][T13068] FAT-fs (loop5): Directory bread(block 73) failed [ 255.173549][T13068] syz.5.5478: attempt to access beyond end of device [ 255.173549][T13068] loop5: rw=2049, sector=1224, nr_sectors = 76 limit=256 done [ 255.383703][T13099] bridge0: port 3(erspan0) entered blocking state [ 255.398368][T13099] bridge0: port 3(erspan0) entered disabled state [ 255.493615][T13105] EXT4-fs: Ignoring removed nobh option [ 255.499304][T13105] EXT4-fs: Ignoring removed orlov option Stopping klogd: [ 255.519617][ T102] printk: udevd: 116 output lines suppressed due to ratelimiting [ 255.533100][T13105] EXT4-fs error (device loop5): __ext4_iget:5104: inode #11: block 1: comm syz.5.5491: invalid block [ 255.553409][T13105] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.5491: couldn't read orphan inode 11 (err -117) [ 255.573041][T13105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.582335][T13114] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.588863][T13105] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 255.598317][T13114] ext4 filesystem being mounted at /215/file2 supports timestamps until 2038-01-19 (0x7fffffff) OK [ 255.652336][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 255.664500][T10213] EXT4-fs (loop3): unmounting filesystem. Stopping acpid: [ 255.730077][T13135] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.783741][T13135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.851495][ T7223] EXT4-fs (loop5): unmounting filesystem. [ 256.093434][T13176] set_capacity_and_notify: 9 callbacks suppressed [ 256.093458][T13176] loop2: detected capacity change from 0 to 512 [ 256.123656][T13176] EXT4-fs: Ignoring removed bh option [ 256.135652][T13178] loop3: detected capacity change from 0 to 4096 [ 256.142589][T13176] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 256.143102][T13178] EXT4-fs: Ignoring removed bh option [ 256.172916][T13178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 256.179928][T13176] EXT4-fs (loop2): 1 truncate cleaned up [ 256.197130][T13178] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.5517: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 256.228506][T13176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 256.239634][T13178] EXT4-fs (loop3): Remounting filesystem read-only [ 256.248647][T13184] loop0: detected capacity change from 0 to 256 [ 256.255161][T13178] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.5517: directory missing '..' [ 256.270216][T13176] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5516: bg 0: block 465: padding at end of block bitmap is not set [ 256.285086][T13184] exfat: Deprecated parameter 'utf8' [ 256.290742][T13184] exfat: Deprecated parameter 'utf8' [ 256.303035][T13176] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 256.321927][T10213] EXT4-fs (loop3): unmounting filesystem. [ 256.328364][T13184] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 256.346263][T13176] EXT4-fs (loop2): This should not happen!! Data will be lost [ 256.346263][T13176] [ 256.380798][ T7617] EXT4-fs (loop2): unmounting filesystem. [ 256.582513][T13215] loop2: detected capacity change from 0 to 256 [ 256.606970][T13219] loop0: detected capacity change from 0 to 512 [ 256.611034][T13221] netlink: 4088 bytes leftover after parsing attributes in process `syz.5.5535'. [ 256.614887][T13219] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.675928][T13219] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 256.736727][T13237] loop2: detected capacity change from 0 to 1024 OK [ 256.757417][T13239] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5543'. [ 256.774756][T13247] loop7: detected capacity change from 0 to 256 [ 256.781948][T13237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.785115][T13250] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5546'. [ 256.800087][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5543'. Stopping syslogd: [ 256.823033][ T7617] EXT4-fs (loop2): unmounting filesystem. stopped /sbin/syslogd (pid 84) OK [ 256.858616][T13256] tun0: tun_chr_ioctl cmd 2147767511 [ 256.898049][T13266] loop5: detected capacity change from 0 to 256 [ 256.910258][T13266] FAT-fs (loop5): Directory bread(block 64) failed [ 256.917143][T13266] FAT-fs (loop5): Directory bread(block 65) failed [ 256.924492][T13266] FAT-fs (loop5): Directory bread(block 66) failed [ 256.931139][T13266] FAT-fs (loop5): Directory bread(block 67) failed [ 256.937801][T13266] FAT-fs (loop5): Directory bread(block 68) failed [ 256.944503][T13266] FAT-fs (loop5): Directory bread(block 69) failed [ 256.951120][T13266] FAT-fs (loop5): Directory bread(block 70) failed [ 256.959762][T13266] FAT-fs (loop5): Directory bread(block 71) failed [ 256.966648][T13266] FAT-fs (loop5): Directory bread(block 72) failed [ 256.973523][T13266] FAT-fs (loop5): Directory bread(block 73) failed [ 256.999042][T13269] nr0: tun_chr_ioctl cmd 1074025677 umount: can't remount debugfs read-only [ 257.015573][T13266] syz.5.5552: attempt to access beyond end of device [ 257.015573][T13266] loop5: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 257.025055][T13269] nr0: linktype set to 804 [ 257.054031][T13275] xt_hashlimit: size too large, truncated to 1048576 [ 257.067523][T13275] xt_hashlimit: max too large, truncated to 1048576 [ 257.129909][T13282] device syz_tun entered promiscuous mode [ 257.137046][T13286] loop3: detected capacity change from 0 to 128 [ 257.153516][T13282] device macsec1 entered promiscuous mode [ 257.178105][T13288] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 257.178305][T13282] device syz_tun left promiscuous mode umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only Connection to 10.128.1.101 closed by remote host. The system is going dow[ 258.024129][ T1284] device bridge_slave_1 left promiscuous mode [ 258.030295][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.038128][ T1284] device bridge_slave_0 left promiscuous mode [ 258.044399][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.052498][ T1284] device veth1_macvtap left promiscuous mode [ 258.058628][ T1284] device veth0_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 258.366666][ T1284] tipc: Disabling bearer [ 258.372137][ T1284] tipc: Left network mode [ 258.376874][ T1284] tipc: Disabling bearer [ 258.382203][ T1284] tipc: Left network mode [ 258.854713][ T1284] device bridge_slave_1 left promiscuous mode [ 258.860892][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.868442][ T1284] device bridge_slave_0 left promiscuous mode [ 258.874649][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.882870][ T1284] device bridge_slave_1 left promiscuous mode [ 258.889100][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.896581][ T1284] device bridge_slave_0 left promiscuous mode [ 258.902715][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.911936][ T1284] device veth1_macvtap left promiscuous mode [ 258.918303][ T1284] device veth1_macvtap left promiscuous mode [ 258.924363][ T1284] device veth0_vlan left promiscuous mode [ 258.930432][ T1284] device veth0_to_bridge left promiscuous mode [ 258.936635][ T1284] device veth1_macvtap left promiscuous mode [ 258.942666][ T1284] device veth0_vlan left promiscuous mode [ 258.948755][ T1284] device veth1_macvtap left promiscuous mode [ 258.954910][ T1284] device veth0_vlan left promiscuous mode [ 259.360649][T13295] kvm: exiting hardware virtualization [ 259.367198][T13295] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 259.374224][T13295] ACPI: PM: Preparing to enter system sleep state S5 [ 259.381213][T13295] reboot: Power down serialport: VM disconnected.