last executing test programs:

2m43.701046813s ago: executing program 2 (id=437):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/virtio/devices/virtio0/driver\x00', &(0x7f0000001b40)=""/1024, 0x400)

2m42.718700737s ago: executing program 2 (id=439):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000300), 0x3, 0x439, &(0x7f0000000d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:dri_device_t:s0\x00', 0x22)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000013)

2m42.539216102s ago: executing program 2 (id=450):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x1, r1}, 0xc)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000100)={0x0, 0x1})

2m42.483380054s ago: executing program 2 (id=452):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

2m42.299868728s ago: executing program 2 (id=461):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x24000040)

2m42.161073921s ago: executing program 2 (id=468):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x196a, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x2022, 0x0, 0x0)

2m42.108933933s ago: executing program 32 (id=468):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x196a, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x2022, 0x0, 0x0)

2m31.670163575s ago: executing program 4 (id=571):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

2m31.650742935s ago: executing program 4 (id=573):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00')
fchdir(r0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00')
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, 0x0)

2m31.573665087s ago: executing program 4 (id=574):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x6)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

2m31.493629179s ago: executing program 4 (id=578):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x210c04, &(0x7f0000000080)={[{@errors_continue}, {@dmask={'dmask', 0x3d, 0x4}}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmask={'dmask', 0x3d, 0xb0}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@keep_last_dots}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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")
syz_open_procfs(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)

2m31.402314881s ago: executing program 4 (id=580):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x2, 0xb, 0x1000, 0x1e, "ffe1ba7d820700000000000000000000096304"})
r1 = syz_open_pts(r0, 0x80)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000003c0)={0x0, 0x7, 0x6, 0x5, 0xc, "d97e23f5d51a2b5328f43c7e793ed0348f8d22", 0x2a4, 0x2})

2m29.48102763s ago: executing program 4 (id=585):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x4)

2m29.45326576s ago: executing program 33 (id=585):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x4)

1m15.002076908s ago: executing program 6 (id=2263):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x130)
write$bt_hci(r0, &(0x7f0000000140)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc8, 0xc}}}, 0x6)
pwrite64(r0, &(0x7f0000000540)='2', 0x1, 0x8080c61)
lseek(r0, 0x2, 0x4)

1m14.970354159s ago: executing program 6 (id=2266):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m14.94104535s ago: executing program 6 (id=2268):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)

1m14.9124292s ago: executing program 6 (id=2270):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000001880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,errors=remount-ro,iocharset=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000000,namecase=1,umask=00000000000000000000165,fmask=00000000000000000166141,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c7a65726f5f73697a655f6469722c74696d655f6f66667365743d3078303030303030303030303030303030352c6572726f72733d636f6e74696e75030000213258e0b74d31428201eec914b0a1309eef6fa67f9c9acd3d0f7faecfc7606d1780acf362e8c2eb308f9f6bf0dbc2a6f3bbfd298af0966c8df51bff17a1d884d217f3d05e3184594b42b733f1401e6a7a99717441f7f836034df7231df364ad31334b3e1b0fd15371b2e2ee9dc35f553c93625b158095a0ab77f5b32eab3e4252e792f82e28c94d176244e9c652c8aa0a5b60222a3643598acaee5d91428250f1a54198f0b60a932f", @ANYRESOCT=0x0], 0x1, 0x1535, &(0x7f0000001c00)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000003440)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000003480)='./proc\x00', &(0x7f00000034c0)='proc\x00', 0x0, 0x0)

1m14.776729464s ago: executing program 6 (id=2276):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff8fffff9, 0x10031, 0xffffffffffffffff, 0xbe9f6000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9)

1m14.682611236s ago: executing program 6 (id=2280):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, r1, 0x25, 0x6, @void}, 0x10)

1m14.682460366s ago: executing program 34 (id=2280):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, r1, 0x25, 0x6, @void}, 0x10)

56.786538465s ago: executing program 3 (id=2686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

56.657286228s ago: executing program 3 (id=2690):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r1, &(0x7f0000000340), 0x8)

56.58843467s ago: executing program 3 (id=2692):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12100)

56.315690817s ago: executing program 3 (id=2702):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

55.430966329s ago: executing program 3 (id=2733):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

55.376217801s ago: executing program 3 (id=2734):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000080))

41.869101089s ago: executing program 5 (id=3007):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0)
unshare(0x22020600)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x21, 0x1})

41.83500371s ago: executing program 5 (id=3009):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000002240)=""/208, 0xd0, 0x8d35)
read(r0, &(0x7f0000002340)=""/208, 0xd0)

41.822780641s ago: executing program 5 (id=3010):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1686dd6a01000000641100fc020000000000000000000000000000ff0200000000000000000000000000014e214e20006490"], 0x0)

40.952897743s ago: executing program 5 (id=3018):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x10000, &(0x7f0000000840), 0x1, 0x50a, &(0x7f0000001f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002740)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0), 0x2000008, &(0x7f0000002800)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

40.593137942s ago: executing program 5 (id=3021):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x1, 0x24b, &(0x7f0000000b40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r0, 0x2, 0x0)
getdents(r0, 0x0, 0x58)

40.575919852s ago: executing program 5 (id=3022):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1})

40.499473124s ago: executing program 35 (id=3022):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1})

40.352615058s ago: executing program 36 (id=2734):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000080))

1.477522913s ago: executing program 1 (id=3752):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x48)
io_setup(0x3, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x25, 0x0, 0x1f, 0x8, 0x2, r0, 0x0, 0x0, 0xa00, 0x0, 0x0, r0}])

1.438470544s ago: executing program 1 (id=3754):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0x1}, 0xc)

1.393992545s ago: executing program 1 (id=3757):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [], {}, [{0x8, 0x1}, {0x8, 0x2}], {}, {0x20, 0x4}}, 0x34, 0x0)

1.363758646s ago: executing program 9 (id=3760):
capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000040)={0x200000, 0x41200003, 0x0, 0x6, 0x2040007, 0x9})
r0 = syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, 0x0, 0x0, 0x15, 0x0)

1.301965077s ago: executing program 9 (id=3762):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x0, 0x24)
readv(r0, &(0x7f000001a440)=[{&(0x7f0000019080)=""/82, 0x52}], 0x1)

1.278917858s ago: executing program 9 (id=3763):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

634.090584ms ago: executing program 1 (id=3779):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)
accept$unix(r0, 0x0, 0x0)

485.978248ms ago: executing program 7 (id=3784):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0xc4, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x88, 0x2, [@TCA_BPF_ACT={0x78, 0x1, [@m_gact={0x74, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x45, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

485.812008ms ago: executing program 0 (id=3785):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x1094, 0x4)

485.627978ms ago: executing program 0 (id=3786):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000000140)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@check_normal}, {@fat=@debug}, {@fat=@showexec}, {@shortname_winnt}, {@shortname_lower}, {@fat=@check_normal}, {@fat=@nocase}, {@utf8}, {@utf8no}, {@rodir}, {@numtail}]}, 0x81, 0x2a2, &(0x7f0000000580)="$eJzs3U9rI2UYAPBn0iRNdCE5eBLBAT14Crv7CTZIhcWclBz0oovbBcmEhQaC/zDuybvgyY8g+B38AF78Bh48Ct7cgziSzEySpmlrJG2l/n6XefLO8+T9k7ctFObNh6+MR4+fTp48++KXaLWSqD2IB/E8iW7UovJVAAC3yfM8j9/zwmW59WhGRN4pX9WuYXgAwBXY5e8/AHA7vPve+2/3B4Ojd9K0FTH+ejpMorgW9/tP4uPI4jjuRif+jMiXivjOw8FR1NO0+mfAtB3DiPEHP5Wv+79FLOrvRedO2baqb5Yt6UK8Pp5Nh/Oe59dGvJBE9POkSLkfnXgpIm9Ub1Bc3no4OLqfnq2PYTPeeO27cvx/HUcvOvHzR/E0sni8eItV/Zf30vTN/Ns/Pi9mMIxIZtPh4SJvJT+48g8DAAAAAAAAAAAAAAAAAAAAAID/jV661F0/P6c6DbDX237/3POBytN9Zmvn69xN07Q6xmc6bERRX4+X61G/uZkDAAAAAAAAAAAAAAAAAADAf8fk089Gj7Ls+ORU8GM+D9oX5mwG9bWW6rH+y6u2B6MfInav+idBHJRDy5IzXSTVrT30dbhLcntbp1E7bw3rWRSD/2b3gb26rwleGFS7a/QoiUuSW9s3ydquq7bhySTZYUPmW5bu4Nyq5p7m3nzx35a3ty7UfMaN5WJm2fefrHJa809yLbmx55+UDcnef/cAAAAAAAAAAAAAAAAAAACnrR76jV/P3Hx2I0MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGu3+v7/ZRDdzZbNYFYWL1pqFycfnky2dNu95mkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0dAAD//6awUdE=")
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
getdents64(r0, &(0x7f0000000d00)=""/216, 0xd8)

469.459478ms ago: executing program 7 (id=3787):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000080)={[{@inlinecrypt}, {@debug}, {@usrquota}, {@lazytime}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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")
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x31)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffff7f8, 0x180802, 0x4000007, 0x767})
write$binfmt_script(r0, 0x0, 0x0)

464.585318ms ago: executing program 8 (id=3788):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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")

418.981769ms ago: executing program 0 (id=3789):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4)

346.502911ms ago: executing program 8 (id=3790):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

223.089264ms ago: executing program 9 (id=3791):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b)

194.227205ms ago: executing program 1 (id=3792):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/74, 0x4a}], 0x1}, 0x40)

193.699595ms ago: executing program 8 (id=3793):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000001c0), 0x10)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}])

161.488915ms ago: executing program 7 (id=3794):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000700000000000008000000000000000000000061"], 0x0, 0x2d}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10)

161.244315ms ago: executing program 0 (id=3795):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x82316000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000001a00000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000001900000000000000000000b7080000000000007baa00fe00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b705000008000000620000006900000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x7}, 0x94)

161.058376ms ago: executing program 9 (id=3796):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x2, 0x3, 0xe, 0x100, 0xfffe}, 0x20)

142.708786ms ago: executing program 8 (id=3797):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x1094, 0x4)

116.171757ms ago: executing program 7 (id=3798):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10)

107.009527ms ago: executing program 9 (id=3799):
pipe2$9p(0x0, 0x800)
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[])

106.652237ms ago: executing program 8 (id=3800):
mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/virtual/cpuid/cpu0/uevent\x00', 0x0, 0x0)
read(r0, &(0x7f00000001c0)=""/256, 0x100)

99.180028ms ago: executing program 0 (id=3801):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
chroot(&(0x7f0000000b80)='./file0\x00')

57.341378ms ago: executing program 7 (id=3802):
r0 = userfaultfd(0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x674})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000359000/0xa000)=nil, 0x400000, 0x2, 0x2})

56.956789ms ago: executing program 0 (id=3803):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

56.335229ms ago: executing program 8 (id=3804):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

37.627369ms ago: executing program 7 (id=3805):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x4, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 1 (id=3806):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
io_setup(0x8b8, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, 0x0}])

kernel console output (not intermixed with test programs):

 from 0 to 1024
[  148.645082][ T6554] EXT4-fs: Ignoring removed nobh option
[  148.689961][ T6554] EXT4-fs: Ignoring removed bh option
[  148.699742][ T6558] loop3: detected capacity change from 0 to 256
[  148.716462][ T6554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  148.738549][ T6554] System zones: 0-1, 3-12
[  148.745440][ T6558] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  148.771531][ T6554] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  148.791146][ T6521] loop1: detected capacity change from 0 to 131072
[  148.798162][ T6554] EXT4-fs (loop7): unmounting filesystem.
[  148.809164][ T6521] F2FS-fs (loop1): invalid crc value
[  148.833256][ T6521] F2FS-fs (loop1): Found nat_bits in checkpoint
[  148.921399][ T6582] program syz.7.2578 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.930735][ T6521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  148.949500][ T6585] loop5: detected capacity change from 0 to 256
[  149.026638][ T6521] F2FS-fs (loop1): access invalid blkaddr:36
[  149.049816][ T6521] CPU: 0 PID: 6521 Comm: syz.1.2554 Tainted: G        W          syzkaller #0
[  149.058694][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  149.068738][ T6521] Call Trace:
[  149.072004][ T6521]  <TASK>
[  149.074921][ T6521]  __dump_stack+0x21/0x24
[  149.079262][ T6521]  dump_stack_lvl+0x110/0x170
[  149.083941][ T6521]  ? __cfi_dump_stack_lvl+0x8/0x8
[  149.088969][ T6521]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[  149.095632][ T6521]  dump_stack+0x15/0x24
[  149.099794][ T6521]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[  149.105332][ T6521]  f2fs_is_valid_blkaddr+0x23/0x30
[  149.110449][ T6521]  f2fs_get_read_data_page+0x4ef/0x850
[  149.115897][ T6521]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[  149.121866][ T6521]  f2fs_find_data_page+0x198/0x3a0
[  149.126965][ T6521]  f2fs_empty_dir+0x12b/0x2e0
[  149.131648][ T6521]  ? __cfi_f2fs_empty_dir+0x10/0x10
[  149.136840][ T6521]  f2fs_rmdir+0x3f/0x70
[  149.140985][ T6521]  vfs_rmdir+0x381/0x4f0
[  149.145216][ T6521]  do_rmdir+0x261/0x6b0
[  149.149362][ T6521]  ? __cfi_do_rmdir+0x10/0x10
[  149.154044][ T6521]  __x64_sys_unlinkat+0xc7/0xf0
[  149.158884][ T6521]  x64_sys_call+0x79f/0x9a0
[  149.163377][ T6521]  do_syscall_64+0x4c/0xa0
[  149.167796][ T6521]  ? clear_bhb_loop+0x30/0x80
[  149.172460][ T6521]  ? clear_bhb_loop+0x30/0x80
[  149.177124][ T6521]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  149.183002][ T6521] RIP: 0033:0x7f25d719e2d9
[  149.187405][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.207015][ T6521] RSP: 002b:00007f25d811e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  149.215422][ T6521] RAX: ffffffffffffffda RBX: 00007f25d7425fa0 RCX: 00007f25d719e2d9
[  149.223384][ T6521] RDX: 0000000000000200 RSI: 0000200000011780 RDI: ffffffffffffff9c
[  149.231357][ T6521] RBP: 00007f25d7235888 R08: 0000000000000000 R09: 0000000000000000
[  149.239315][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.247273][ T6521] R13: 00007f25d7426038 R14: 00007f25d7425fa0 R15: 00007ffcf679a4f8
[  149.255246][ T6521]  </TASK>
[  149.403954][ T6599] loop3: detected capacity change from 0 to 128
[  149.433197][ T6599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  149.442896][ T6599] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.478635][  T288] EXT4-fs (loop3): unmounting filesystem.
[  149.788992][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2597'.
[  149.874437][ T6635] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  149.905339][ T6638] syz.1.2602: attempt to access beyond end of device
[  149.905339][ T6638] loop1: rw=524288, sector=17179852706, nr_sectors = 16 limit=512
[  149.924281][ T6635] ext4 filesystem being mounted at /557/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.948713][ T6635] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x1d)
[  149.958038][ T6638] syz.1.2602: attempt to access beyond end of device
[  149.958038][ T6638] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  149.984701][  T287] EXT4-fs (loop0): unmounting filesystem.
[  149.995491][ T6638] syz.1.2602: attempt to access beyond end of device
[  149.995491][ T6638] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  150.030770][ T6646] exfat: Deprecated parameter 'namecase'
[  150.051494][ T6638] syz.1.2602: attempt to access beyond end of device
[  150.051494][ T6638] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  150.066488][ T6646] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  150.168116][   T28] audit: type=1400 audit(1791876124.524:1154): avc:  denied  { getopt } for  pid=6655 comm="syz.1.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  150.203339][ T6656] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  150.259090][ T6656] overlayfs: filesystem on './file0' not supported
[  150.322294][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2613'.
[  150.358186][   T28] audit: type=1400 audit(1791876124.714:1155): avc:  denied  { read } for  pid=6666 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  150.392652][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2613'.
[  150.435153][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2620'.
[  150.454408][   T28] audit: type=1400 audit(1791876124.744:1156): avc:  denied  { read write } for  pid=6669 comm="syz.7.2617" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.548646][   T28] audit: type=1400 audit(1791876124.744:1157): avc:  denied  { open } for  pid=6669 comm="syz.7.2617" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.620391][ T6693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  150.656662][   T19] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  150.668401][   T28] audit: type=1400 audit(1791876124.744:1158): avc:  denied  { ioctl } for  pid=6669 comm="syz.7.2617" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.694850][  T287] EXT4-fs (loop0): unmounting filesystem.
[  150.829579][ T6712] syz.3.2633: attempt to access beyond end of device
[  150.829579][ T6712] loop3: rw=524288, sector=17179852706, nr_sectors = 16 limit=512
[  150.881334][ T6719] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  150.894541][   T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.910543][ T6686] F2FS-fs (loop5): fault_injection options not supported
[  150.940677][ T6686] F2FS-fs (loop5): Image doesn't support compression
[  150.947669][   T19] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00
[  150.961613][ T6719] EXT4-fs (loop1): 1 truncate cleaned up
[  150.969651][ T6712] syz.3.2633: attempt to access beyond end of device
[  150.969651][ T6712] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  150.983839][ T6686] F2FS-fs (loop5): heap/no_heap options were deprecated
[  150.995984][   T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.004183][ T6719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  151.015098][ T6686] F2FS-fs (loop5): invalid crc value
[  151.022862][   T19] usb 8-1: config 0 descriptor??
[  151.031923][ T6686] F2FS-fs (loop5): Found nat_bits in checkpoint
[  151.042626][ T6712] syz.3.2633: attempt to access beyond end of device
[  151.042626][ T6712] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  151.066805][  T289] EXT4-fs (loop1): unmounting filesystem.
[  151.106729][ T6686] F2FS-fs (loop5): Start checkpoint disabled!
[  151.123874][ T6712] syz.3.2633: attempt to access beyond end of device
[  151.123874][ T6712] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  151.146949][ T6686] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  151.174470][ T6686] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  151.267204][ T6737] tipc: Started in network mode
[  151.297618][ T1726] kworker/u4:5: attempt to access beyond end of device
[  151.297618][ T1726] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  151.313419][ T6737] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  151.349536][ T6737] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  151.391018][ T6741] syz.0.2646: attempt to access beyond end of device
[  151.391018][ T6741] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128
[  151.442839][   T19] hid (null): report_id 3384472111 is invalid
[  151.451629][ T6743] buffer_io_error: 4 callbacks suppressed
[  151.451641][ T6743] Buffer I/O error on dev loop0, logical block 70, lost async page write
[  151.488700][   T19] wacom 0003:056A:0331.0011: report_id 3384472111 is invalid
[  151.496095][   T19] wacom 0003:056A:0331.0011: item 0 4 1 8 parsing failed
[  151.504248][ T6744] binder: 6742:6744 ioctl 4018620d 0 returned -22
[  151.528987][   T19] wacom 0003:056A:0331.0011: parse failed
[  151.546950][   T19] wacom: probe of 0003:056A:0331.0011 failed with error -22
[  151.611335][ T6761] tap0: tun_chr_ioctl cmd 1074025681
[  151.662614][   T19] usb 8-1: USB disconnect, device number 3
[  151.745885][ T6780] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  151.765230][ T6782] raw_sendmsg: syz.1.2663 forgot to set AF_INET. Fix it!
[  151.779198][   T28] audit: type=1400 audit(1791876126.134:1159): avc:  denied  { setattr } for  pid=6779 comm="syz.5.2662" name="file0" dev="loop5" ino=1048807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.878832][ T6784] SELinux: failed to load policy
[  152.011349][ T6796] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  152.024545][ T6796] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.039985][ T6796] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  152.054858][ T6796] EXT4-fs (loop5): Remounting filesystem read-only
[  152.081865][ T1415] EXT4-fs (loop5): unmounting filesystem.
[  152.222692][ T6814] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  152.258167][ T6814] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.2675: invalid indirect mapped block 32768 (level 2)
[  152.298804][ T6814] EXT4-fs (loop7): 1 orphan inode deleted
[  152.314700][ T6814] EXT4-fs (loop7): 1 truncate cleaned up
[  152.338380][ T6814] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  152.358179][ T6817] set_capacity_and_notify: 13 callbacks suppressed
[  152.358194][ T6817] loop3: detected capacity change from 0 to 512
[  152.393961][ T6814] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  152.425817][ T6808] loop5: detected capacity change from 0 to 40427
[  152.450314][ T6808] F2FS-fs (loop5): Image doesn't support compression
[  152.464388][ T6817] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  152.483039][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  152.489532][ T6810] loop1: detected capacity change from 0 to 40427
[  152.504836][ T6808] F2FS-fs (loop5): fault_type options not supported
[  152.529036][ T6810] F2FS-fs (loop1): fault_injection options not supported
[  152.537173][ T6808] F2FS-fs (loop5): invalid crc value
[  152.546751][ T6817] System zones: 0-2, 18-18, 34-34
[  152.570430][ T6827] loop0: detected capacity change from 0 to 2048
[  152.580221][ T6808] F2FS-fs (loop5): Found nat_bits in checkpoint
[  152.587008][ T6810] F2FS-fs (loop1): invalid crc value
[  152.594517][ T6817] EXT4-fs (loop3): 1 orphan inode deleted
[  152.618884][ T6810] F2FS-fs (loop1): Found nat_bits in checkpoint
[  152.627092][ T6827]  loop0: p1 p2 p3
[  152.633608][ T6817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  152.646640][ T6827] loop0: p1 size 16777216 extends beyond EOD, truncated
[  152.673458][ T6827] loop0: p2 size 458752 extends beyond EOD, truncated
[  152.680441][ T6808] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  152.696702][ T6817] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.715281][ T6827] loop0: p3 start 3036741376 is beyond EOD, truncated
[  152.725923][ T6810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  152.736292][   T28] audit: type=1400 audit(1791876127.094:1160): avc:  denied  { unlink } for  pid=6807 comm="syz.5.2672" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  152.847666][  T287] __loop_clr_fd: partition scan of loop0 failed (rc=-16)
[  152.856676][ T6172] blk_print_req_error: 5 callbacks suppressed
[  152.856687][ T6172] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  152.919544][ T6842] loop0: detected capacity change from 0 to 512
[  152.936409][  T288] EXT4-fs (loop3): unmounting filesystem.
[  152.946081][ T6172] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.955841][ T6172] Buffer I/O error on dev loop0p1, logical block 1, async page read
[  152.975790][ T6842] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  153.038747][ T6842] EXT4-fs (loop0): 1 truncate cleaned up
[  153.065901][ T6842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  153.095092][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  153.106996][ T6172] udevd[6172]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  153.139123][ T6859] loop1: detected capacity change from 0 to 256
[  153.166236][ T6859] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  153.204157][ T6866] loop7: detected capacity change from 0 to 1024
[  153.238393][ T6866] EXT4-fs: Ignoring removed bh option
[  153.289069][ T6866] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  153.321859][ T6860] SELinux: failed to load policy
[  153.337118][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  153.403724][   T28] audit: type=1326 audit(1791876127.754:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  153.487320][   T28] audit: type=1326 audit(1791876127.794:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  153.551262][   T28] audit: type=1326 audit(1791876127.794:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  153.635499][  T287] EXT4-fs (loop0): unmounting filesystem.
[  153.645703][   T28] audit: type=1326 audit(1791876127.794:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  153.757429][ T6914] loop0: detected capacity change from 0 to 512
[  153.775240][ T6917] xt_hashlimit: size too large, truncated to 1048576
[  153.796350][   T28] audit: type=1326 audit(1791876127.794:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  153.828588][ T6914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  153.855791][ T6914] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.904140][   T28] audit: type=1326 audit(1791876127.794:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  153.941063][  T287] EXT4-fs (loop0): unmounting filesystem.
[  154.009126][   T28] audit: type=1326 audit(1791876127.794:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  154.110183][   T28] audit: type=1326 audit(1791876127.794:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  154.155563][ T6942] loop0: detected capacity change from 0 to 512
[  154.208563][ T6942] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2728: error while reading EA inode 32 err=-116
[  154.231027][   T28] audit: type=1326 audit(1791876127.794:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.5.2700" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522f9e2d9 code=0x7ffc0000
[  154.316882][ T6942] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2728: error while reading EA inode 32 err=-116
[  154.362788][ T6942] EXT4-fs (loop0): 1 orphan inode deleted
[  154.384688][ T6942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  154.445393][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.465864][  T287] EXT4-fs (loop0): unmounting filesystem.
[  154.477098][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.509749][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.552678][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.592286][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.605336][ T6967] loop0: detected capacity change from 0 to 512
[  154.637067][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.657475][ T6967] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  154.676989][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.714105][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.754055][  T287] EXT4-fs (loop0): unmounting filesystem.
[  154.766689][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.806695][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.840997][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.876582][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.911193][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.941559][ T6956] binder: 6955:6956 ioctl 4020ae46 7f25d811dfc0 returned -22
[  154.981990][ T6991] EXT4-fs: Ignoring removed nobh option
[  155.006741][ T6991] EXT4-fs: Ignoring removed bh option
[  155.049406][ T6991] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  155.086763][ T6991] System zones: 0-1, 3-12
[  155.095656][ T6991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  155.108190][ T6979] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  155.136822][ T6981] F2FS-fs (loop7): fault_injection options not supported
[  155.144856][ T6979] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  155.176568][ T6981] F2FS-fs (loop7): Image doesn't support compression
[  155.183280][ T6981] F2FS-fs (loop7): heap/no_heap options were deprecated
[  155.190780][ T6979] F2FS-fs (loop5): invalid crc value
[  155.208455][  T287] EXT4-fs (loop0): unmounting filesystem.
[  155.214824][ T6979] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  155.236280][ T6981] F2FS-fs (loop7): invalid crc value
[  155.267281][ T6981] F2FS-fs (loop7): Found nat_bits in checkpoint
[  155.306870][ T6979] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  155.346579][ T6979] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  155.357830][ T6981] F2FS-fs (loop7): Start checkpoint disabled!
[  155.385621][ T6981] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  155.429691][ T6981] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  155.439491][ T6979] bio_check_eod: 2 callbacks suppressed
[  155.439519][ T6979] syz.5.2755: attempt to access beyond end of device
[  155.439519][ T6979] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  155.521802][ T6979] syz.5.2755: attempt to access beyond end of device
[  155.521802][ T6979] loop5: rw=2049, sector=53256, nr_sectors = 48 limit=40427
[  155.554851][ T1726] kworker/u4:5: attempt to access beyond end of device
[  155.554851][ T1726] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.588152][ T7006] F2FS-fs (loop0): fault_injection options not supported
[  155.602952][ T1415] syz-executor: attempt to access beyond end of device
[  155.602952][ T1415] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.632082][ T7006] F2FS-fs (loop0): invalid crc value
[  155.652888][ T7006] F2FS-fs (loop0): Found nat_bits in checkpoint
[  155.731062][ T7006] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.747315][ T1726] Bluetooth: hci0: Frame reassembly failed (-84)
[  156.045047][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2765'.
[  156.096662][ T7033] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  156.132506][ T7033] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  156.176546][ T1726] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  156.227418][ T7043] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2771'.
[  156.251637][ T7043] netem: unknown loss type 4
[  156.263785][ T7043] netem: change failed
[  156.437409][ T7066] EXT4-fs: Ignoring removed oldalloc option
[  156.451052][ T7066] EXT4-fs: Ignoring removed i_version option
[  156.461317][ T7066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  156.478517][ T7066] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2782: invalid block
[  156.496707][ T7066] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2782: invalid indirect mapped block 4294967295 (level 1)
[  156.517140][ T7066] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2782: invalid indirect mapped block 4294967295 (level 1)
[  156.541461][ T7066] EXT4-fs (loop5): 2 truncates cleaned up
[  156.547378][ T7066] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  156.572530][ T7066] EXT4-fs (loop5): shut down requested (2)
[  156.578910][ T7066] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop5 ino=15
[  156.596606][ T2611] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  156.609641][ T1415] EXT4-fs (loop5): unmounting filesystem.
[  156.788026][ T2611] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.809132][ T2611] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  156.840181][ T2611] usb 1-1: config 0 interface 0 has no altsetting 0
[  156.856875][ T2611] usb 1-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00
[  156.883430][ T2611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.904271][ T2611] usb 1-1: config 0 descriptor??
[  156.919603][ T7102] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2798'.
[  156.929423][ T2611] usbhid 1-1:0.0: Interface 0 is not authorized for usage
[  157.766584][ T6326] Bluetooth: hci0: command 0x1003 tx timeout
[  157.772679][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  157.825549][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2802'.
[  157.977020][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  157.977032][   T28] audit: type=1326 audit(1791876132.334:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.7.2811" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53fef9e2d9 code=0x0
[  158.051635][   T28] audit: type=1400 audit(1791876132.394:1178): avc:  denied  { view } for  pid=7140 comm="syz.5.2814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  158.426560][   T19] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  158.526694][ T7152] set_capacity_and_notify: 6 callbacks suppressed
[  158.526708][ T7152] loop1: detected capacity change from 0 to 256
[  158.600659][ T7158] binder: 7157:7158 ioctl c0306201 200000000440 returned -14
[  158.616616][   T19] usb 6-1: Using ep0 maxpacket: 32
[  158.627836][   T19] usb 6-1: unable to get BOS descriptor or descriptor too short
[  158.638965][ T7160] loop1: detected capacity change from 0 to 512
[  158.649575][   T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.667401][ T7160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  158.679564][   T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  158.690774][ T7160] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.705787][   T19] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  158.723574][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.736172][  T289] EXT4-fs (loop1): unmounting filesystem.
[  158.745017][   T19] usb 6-1: Product: syz
[  158.760067][   T19] usb 6-1: Manufacturer: syz
[  158.771164][   T19] usb 6-1: SerialNumber: syz
[  158.787072][   T19] usb 6-1: selecting invalid altsetting 1
[  158.808757][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  158.993695][   T19] usb 6-1: USB disconnect, device number 11
[  159.024346][ T7163] loop1: detected capacity change from 0 to 40427
[  159.132858][ T7174] syzkaller1: tun_chr_ioctl cmd 1074025677
[  159.156983][ T7174] syzkaller1: linktype set to 823
[  159.170794][ T7178] netlink: 'syz.1.2831': attribute type 7 has an invalid length.
[  159.182950][ T7178] netlink: 'syz.1.2831': attribute type 5 has an invalid length.
[  159.195064][ T7178] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2831'.
[  159.329398][   T19] usb 1-1: USB disconnect, device number 12
[  159.422169][ T7196] loop7: detected capacity change from 0 to 512
[  159.453167][ T7196] EXT4-fs (loop7): Test dummy encryption mode enabled
[  159.490735][ T7196] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #11: comm syz.7.2838: casefold flag without casefold feature
[  159.546890][ T7196] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.2838: couldn't read orphan inode 11 (err -117)
[  159.596589][ T7196] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  159.635915][ T7196] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.2838: bg 0: block 7: invalid block bitmap
[  159.660812][ T7192] loop0: detected capacity change from 0 to 40427
[  159.668647][ T7196] EXT4-fs error (device loop7) in ext4_setattr:5697: error 28
[  159.684274][ T7192] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  159.725867][ T7192] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  159.736225][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  159.742187][ T7206] ip_tables: iptables: counters copy to user failed while replacing table
[  159.776252][ T7192] F2FS-fs (loop0): invalid crc value
[  159.785263][ T7206] ip_tables: iptables: counters copy to user failed while replacing table
[  159.802869][ T7192] F2FS-fs (loop0): Found nat_bits in checkpoint
[  159.875818][ T7192] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  159.908350][ T7192] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  159.942959][ T7230] loop5: detected capacity change from 0 to 256
[  159.956579][   T28] audit: type=1400 audit(1791876134.314:1179): avc:  denied  { setattr } for  pid=7224 comm="syz.7.2847" name="tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  160.019658][ T7230] FAT-fs (loop5): Directory bread(block 64) failed
[  160.050564][ T7230] FAT-fs (loop5): Directory bread(block 65) failed
[  160.061344][ T1726] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  160.075074][ T7230] FAT-fs (loop5): Directory bread(block 66) failed
[  160.086979][ T1726] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  160.107957][ T7230] FAT-fs (loop5): Directory bread(block 67) failed
[  160.134584][ T7230] FAT-fs (loop5): Directory bread(block 68) failed
[  160.177328][ T7230] FAT-fs (loop5): Directory bread(block 69) failed
[  160.202215][ T7230] FAT-fs (loop5): Directory bread(block 70) failed
[  160.227889][ T7230] FAT-fs (loop5): Directory bread(block 71) failed
[  160.244175][ T7230] FAT-fs (loop5): Directory bread(block 72) failed
[  160.261642][ T7230] FAT-fs (loop5): Directory bread(block 73) failed
[  160.272252][   T28] audit: type=1400 audit(1791876134.634:1180): avc:  denied  { setopt } for  pid=7242 comm="syz.7.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  160.342959][ T7251] MTRR 1 not used
[  160.412396][ T7262] loop0: detected capacity change from 0 to 256
[  160.428554][ T7262] FAT-fs (loop0): Directory bread(block 1285) failed
[  160.439707][ T7262] FAT-fs (loop0): Directory bread(block 1286) failed
[  160.449681][ T7262] FAT-fs (loop0): Directory bread(block 1287) failed
[  160.460754][ T7262] FAT-fs (loop0): Directory bread(block 1288) failed
[  160.495987][ T7264] loop0: detected capacity change from 0 to 512
[  160.676976][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2870'.
[  160.847328][   T28] audit: type=1400 audit(1791876135.204:1181): avc:  denied  { write } for  pid=7289 comm="syz.1.2876" name="file2" dev="tmpfs" ino=2983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  161.005888][ T7292] loop1: detected capacity change from 0 to 40427
[  161.021949][ T7292] F2FS-fs (loop1): invalid crc value
[  161.039631][ T7292] F2FS-fs (loop1): Found nat_bits in checkpoint
[  161.073114][ T7292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  161.118950][   T28] audit: type=1400 audit(1791876135.474:1182): avc:  denied  { read } for  pid=7299 comm="syz.5.2879" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[  161.188224][  T289] syz-executor: attempt to access beyond end of device
[  161.188224][  T289] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  161.216641][   T28] audit: type=1400 audit(1791876135.504:1183): avc:  denied  { open } for  pid=7299 comm="syz.5.2879" path="/558/proc/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1
[  161.247483][ T7302] loop7: detected capacity change from 0 to 1024
[  161.282010][ T7302] EXT4-fs (loop7): invalid inodes per group: 204800
[  161.282010][ T7302] 
[  161.385268][   T28] audit: type=1400 audit(1791876135.734:1184): avc:  denied  { map } for  pid=7311 comm="syz.1.2882" path="socket:[45173]" dev="sockfs" ino=45173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  161.446674][   T19] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  161.500319][ T7324] EXT4-fs: Ignoring removed bh option
[  161.506940][   T28] audit: type=1400 audit(1791876135.774:1185): avc:  denied  { read write } for  pid=7311 comm="syz.1.2882" path="socket:[45173]" dev="sockfs" ino=45173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  161.550929][ T7324] EXT4-fs: Ignoring removed nomblk_io_submit option
[  161.573539][ T7324] EXT4-fs: Ignoring removed oldalloc option
[  161.596897][ T7324] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  161.647953][ T7331] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  161.659593][   T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.675320][ T7324] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.2891: Allocating blocks 41-42 which overlap fs metadata
[  161.699168][   T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.719319][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  161.753034][   T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.764272][ T7324] Quota error (device loop0): write_blk: dquota write failed
[  161.791067][ T7324] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.2891: Allocating blocks 41-42 which overlap fs metadata
[  161.805090][   T19] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.848416][   T19] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  161.858224][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  161.876662][ T7324] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.2891: Failed to acquire dquot type 1
[  161.897050][   T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.931534][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  161.946644][ T7324] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  162.001567][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.026297][ T7324] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.2891: corrupted inode contents
[  162.061659][ T7348] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2900'.
[  162.077078][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.099804][ T7324] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #12: comm syz.0.2891: mark_inode_dirty error
[  162.142469][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.158758][ T7324] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.2891: corrupted inode contents
[  162.195022][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.214948][ T7324] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.2891: mark_inode_dirty error
[  162.244578][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.263018][ T7324] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.2891: corrupted inode contents
[  162.295296][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.312606][ T7324] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  162.332287][   T19] lg-g15 0003:046D:C222.0012: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0
[  162.347916][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.364152][ T7324] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #12: comm syz.0.2891: corrupted inode contents
[  162.395362][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.412070][ T7324] EXT4-fs error (device loop0): ext4_truncate:4327: inode #12: comm syz.0.2891: mark_inode_dirty error
[  162.440447][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.447137][   T19] lg-g15 0003:046D:C222.0012: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[  162.471080][ T7324] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  162.502825][ T7324] EXT4-fs (loop0): Remounting filesystem read-only
[  162.530767][ T7324] EXT4-fs (loop0): 1 truncate cleaned up
[  162.538323][   T19] usb 6-1: USB disconnect, device number 12
[  162.560598][ T7324] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  162.601917][  T287] EXT4-fs (loop0): unmounting filesystem.
[  162.997779][ T7358] F2FS-fs (loop7): Test dummy encryption mode enabled
[  163.021613][ T7358] F2FS-fs (loop7): invalid crc value
[  163.040019][ T7358] F2FS-fs (loop7): Found nat_bits in checkpoint
[  163.125518][ T7358] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  163.166561][ T2617] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  163.346153][ T7409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  163.367789][ T2617] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.394097][ T7409] ext4 filesystem being mounted at /626/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.416572][ T2617] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.437444][ T7417] xt_hashlimit: size too large, truncated to 1048576
[  163.467520][  T287] EXT4-fs (loop0): unmounting filesystem.
[  163.474495][ T2617] usb 2-1: config 0 interface 0 has no altsetting 0
[  163.504760][ T2617] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  163.534980][ T2617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.564790][ T2617] usb 2-1: config 0 descriptor??
[  163.593938][ T7420] set_capacity_and_notify: 5 callbacks suppressed
[  163.593966][ T7420] loop7: detected capacity change from 0 to 256
[  163.654132][ T7420] exfat: Deprecated parameter 'utf8'
[  163.684557][ T7420] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  163.711365][ T7428] loop0: detected capacity change from 0 to 512
[  163.743765][ T7428] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  163.796892][ T7428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  163.826605][ T7428] System zones: 1-12
[  163.830865][ T7428] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.2935: bad orphan inode 131072
[  163.880800][ T7428] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  163.920514][  T287] EXT4-fs (loop0): unmounting filesystem.
[  163.959368][ T7446] loop0: detected capacity change from 0 to 512
[  163.989947][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.007558][ T7446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  164.027632][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.057701][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.072082][ T7446] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2942: invalid indirect mapped block 32768 (level 2)
[  164.093882][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.118835][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.136173][ T7446] EXT4-fs (loop0): 1 orphan inode deleted
[  164.156010][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.163667][ T7446] EXT4-fs (loop0): 1 truncate cleaned up
[  164.179468][ T7446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  164.195506][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.215994][ T7463] loop5: detected capacity change from 0 to 1024
[  164.227490][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.242100][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.259873][  T287] EXT4-fs (loop0): unmounting filesystem.
[  164.268667][ T7463] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  164.279382][ T2617] acrux 0003:1A34:0802.0013: unknown main item tag 0x0
[  164.292687][ T2617] acrux 0003:1A34:0802.0013: unbalanced collection at end of report description
[  164.306123][ T1415] EXT4-fs (loop5): unmounting filesystem.
[  164.315929][ T2617] acrux 0003:1A34:0802.0013: parse failed
[  164.324941][ T2617] acrux: probe of 0003:1A34:0802.0013 failed with error -22
[  164.341316][ T2617] usb 2-1: USB disconnect, device number 13
[  164.838319][ T7484] loop0: detected capacity change from 0 to 40427
[  164.853926][ T7484] F2FS-fs (loop0): invalid crc value
[  164.871811][ T7484] F2FS-fs (loop0): Found nat_bits in checkpoint
[  164.902889][ T7484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  164.926928][  T287] syz-executor: attempt to access beyond end of device
[  164.926928][  T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  165.036765][ T2617] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  165.227623][ T2617] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.262267][ T2617] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  165.306802][ T2617] usb 8-1: config 0 interface 0 has no altsetting 0
[  165.331645][ T2617] usb 8-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  165.363356][ T2617] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.395188][ T2617] usb 8-1: config 0 descriptor??
[  165.860358][ T7503] loop0: detected capacity change from 0 to 131072
[  165.877356][ T7503] F2FS-fs (loop0): Invalid log sectorsize (0)
[  165.896573][ T7503] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  165.927065][ T7503] F2FS-fs (loop0): invalid crc value
[  165.952333][ T7519] loop5: detected capacity change from 0 to 40427
[  165.959548][ T7503] F2FS-fs (loop0): Found nat_bits in checkpoint
[  165.989982][ T7519] F2FS-fs (loop5): invalid crc value
[  166.017179][ T7519] F2FS-fs (loop5): Found nat_bits in checkpoint
[  166.033721][ T7503] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  166.050927][ T7503] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  166.089367][ T7519] F2FS-fs (loop5): Start checkpoint disabled!
[  166.119047][ T7519] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  166.146572][ T7519] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  166.216837][ T2617] sony 0003:054C:09CC.0014: Failed to get calibration data from Dualshock 4
[  166.254593][ T2617] sony 0003:054C:09CC.0014: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.7-1/input0
[  166.296216][ T2617] sony 0003:054C:09CC.0014: failed to claim input
[  166.315187][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.315187][ T1726] loop5: rw=1, sector=77824, nr_sectors = 8 limit=40427
[  166.357561][ T2617] usb 8-1: USB disconnect, device number 4
[  166.410241][ T7541] fido_id[7541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  166.443847][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.443847][ T1726] loop5: rw=1, sector=77832, nr_sectors = 2064 limit=40427
[  166.517682][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.517682][ T1726] loop5: rw=1, sector=79896, nr_sectors = 2024 limit=40427
[  166.543285][ T7547] loop0: detected capacity change from 0 to 512
[  166.569425][ T7547] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  166.588087][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.588087][ T1726] loop5: rw=1, sector=49152, nr_sectors = 8 limit=40427
[  166.630196][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.630196][ T1726] loop5: rw=1, sector=49160, nr_sectors = 2048 limit=40427
[  166.647490][ T7547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  166.676656][ T7547] ext4 filesystem being mounted at /644/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.700738][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.700738][ T1726] loop5: rw=1, sector=51208, nr_sectors = 2040 limit=40427
[  166.727036][  T287] EXT4-fs (loop0): unmounting filesystem.
[  166.767041][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.767041][ T1726] loop5: rw=1, sector=57344, nr_sectors = 8 limit=40427
[  166.815284][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.815284][ T1726] loop5: rw=1, sector=57352, nr_sectors = 2048 limit=40427
[  166.855865][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.855865][ T1726] loop5: rw=1, sector=59400, nr_sectors = 2016 limit=40427
[  166.893002][ T1726] kworker/u4:5: attempt to access beyond end of device
[  166.893002][ T1726] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.006729][ T7536] loop1: detected capacity change from 0 to 131072
[  167.031699][ T7536] F2FS-fs (loop1): invalid crc value
[  167.053746][ T7562] loop5: detected capacity change from 0 to 256
[  167.065277][ T7536] F2FS-fs (loop1): Found nat_bits in checkpoint
[  167.122387][ T7536] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  167.154546][ T7536] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  167.225557][ T7536] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=4 iblocks=0, run fsck to fix.
[  167.267649][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.284202][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.298640][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.313159][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.327484][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  167.352196][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.377653][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.402731][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.429896][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.456061][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.480170][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.505333][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.531578][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.556552][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.580565][  T289] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  167.680396][ T7608] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  167.982789][ T7610] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  168.012257][ T7625] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  168.028023][ T7610] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  168.050587][ T7610] F2FS-fs (loop7): invalid crc value
[  168.060866][ T7625] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.2992: inode has both inline data and extents flags
[  168.084232][ T7610] F2FS-fs (loop7): Found nat_bits in checkpoint
[  168.106714][ T7625] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2992: couldn't read orphan inode 15 (err -117)
[  168.147682][ T7610] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  168.156847][ T7625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  168.172812][ T7610] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  168.200002][ T7625] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.2992: Directory hole found for htree leaf block 0
[  168.271529][  T289] EXT4-fs (loop1): unmounting filesystem.
[  168.633989][ T7645] set_capacity_and_notify: 3 callbacks suppressed
[  168.634004][ T7645] loop1: detected capacity change from 0 to 40427
[  168.663194][ T7618] loop0: detected capacity change from 0 to 131072
[  168.677161][ T7645] F2FS-fs (loop1): invalid crc value
[  168.692361][ T7618] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[  168.712765][ T7645] F2FS-fs (loop1): Found nat_bits in checkpoint
[  168.726559][ T7618] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  168.754655][ T7618] F2FS-fs (loop0): invalid crc value
[  168.762988][ T7649] loop5: detected capacity change from 0 to 512
[  168.786648][ T7645] F2FS-fs (loop1): Start checkpoint disabled!
[  168.793558][ T7618] F2FS-fs (loop0): Found nat_bits in checkpoint
[  168.802618][ T7649] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.3018: iget: bad i_size value: 38620345925642
[  168.825389][ T7645] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  168.843659][ T7649] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3018: couldn't read orphan inode 15 (err -117)
[  168.859475][ T7645] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  168.871496][ T7618] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  168.885100][ T7618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  168.892951][ T7649] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  168.921729][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  168.921739][   T28] audit: type=1400 audit(1791876143.274:1188): avc:  denied  { mounton } for  pid=7648 comm="syz.5.3018" path="/607/file0/file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  168.953649][ T7649] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3018: bg 0: block 5: invalid block bitmap
[  169.015279][ T7649] overlayfs: failed to set xattr on upper
[  169.036114][ T7649] overlayfs: ...falling back to index=off,metacopy=off.
[  169.108489][ T1415] EXT4-fs (loop5): unmounting filesystem.
[  169.467282][   T43] device bridge_slave_1 left promiscuous mode
[  169.495344][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.716513][ T2611] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  169.746524][ T2617] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  169.906518][ T2611] usb 8-1: Using ep0 maxpacket: 16
[  169.915862][ T2611] usb 8-1: config index 0 descriptor too short (expected 51443, got 18)
[  169.933111][ T2611] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  169.942277][ T2617] usb 1-1: Using ep0 maxpacket: 16
[  169.951583][ T2617] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.964744][ T2611] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.978367][ T2617] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.993482][ T2611] usb 8-1: Product: syz
[  170.001355][ T2611] usb 8-1: Manufacturer: syz
[  170.010226][ T2611] usb 8-1: SerialNumber: syz
[  170.016568][ T2617] usb 1-1: config 0 interface 0 has no altsetting 0
[  170.998431][ T2611] r8152-cfgselector 8-1: config 0 descriptor??
[  171.014990][ T2617] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  171.032648][ T2617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.705049][ T2611] r8152-cfgselector 8-1: Unknown version 0x0000
[  175.736795][ T2617] usb 1-1: config 0 descriptor??
[  175.746862][ T2611] r8152-cfgselector 8-1: USB disconnect, device number 5
[  175.762970][   T28] audit: type=1400 audit(1791876150.114:1189): avc:  denied  { create } for  pid=7692 comm="syz.1.3036" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  175.785417][ T2617] usb 1-1: can't set config #0, error -71
[  175.849688][ T2617] usb 1-1: USB disconnect, device number 13
[  175.879042][ T7702] loop7: detected capacity change from 0 to 2048
[  175.905426][ T7705] loop0: detected capacity change from 0 to 4096
[  175.925196][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.967009][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.974393][ T7674] device bridge_slave_0 entered promiscuous mode
[  175.985254][ T7702] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  175.996163][ T7705] EXT4-fs: Ignoring removed orlov option
[  176.007924][ T7702] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  176.051710][ T7705] EXT4-fs (loop0): Test dummy encryption mode enabled
[  176.075214][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.087368][ T7705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  176.106816][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.122445][ T7684] device bridge_slave_0 entered promiscuous mode
[  176.135236][  T287] EXT4-fs (loop0): unmounting filesystem.
[  176.147168][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.154230][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.173821][ T7702] fs-verity: sha512 using implementation "sha512-avx2"
[  176.197230][ T7674] device bridge_slave_1 entered promiscuous mode
[  176.203863][   T43] tipc: Left network mode
[  176.208328][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.215343][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.237180][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  176.256078][ T7684] device bridge_slave_1 entered promiscuous mode
[  176.277456][ T7725] loop0: detected capacity change from 0 to 512
[  176.333327][ T7725] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  176.396319][   T28] audit: type=1400 audit(1791876150.744:1190): avc:  denied  { override_creds } for  pid=7734 comm="syz.7.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  176.475104][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.482219][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.489470][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.496512][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.511664][ T7741] p�
[  176.532482][ T7746] 9p: Unknown access argument c: -22
[  176.593355][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.600437][ T7684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.607750][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.614770][ T7684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.705913][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.723448][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.739833][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.758909][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.766762][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.780284][   T43] device bridge_slave_1 left promiscuous mode
[  176.790809][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.858647][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.867934][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.876145][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.883218][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.893240][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.901963][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.909013][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.916672][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  176.925168][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  176.940714][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.949134][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.957932][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.964975][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.973577][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.982053][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.990398][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.997463][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.005009][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  177.013485][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.028471][ T7674] device veth0_vlan entered promiscuous mode
[  177.035100][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.043752][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.052821][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.061310][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.069603][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  177.077729][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  177.093998][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  177.101558][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  177.110163][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  177.118913][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.127425][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  177.135588][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  177.145553][ T7674] device veth1_macvtap entered promiscuous mode
[  177.154264][ T7684] device veth0_vlan entered promiscuous mode
[  177.160838][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  177.169621][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  177.177646][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  177.196003][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  177.204074][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  177.212765][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  177.221927][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.230385][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.238897][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.247552][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  177.255713][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  177.264941][ T7684] device veth1_macvtap entered promiscuous mode
[  177.288196][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  177.300521][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  177.318566][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.341274][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.359325][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.451857][ T7799] loop9: detected capacity change from 0 to 512
[  177.527393][ T7803] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3079'.
[  177.561061][ T7803] netlink: 'syz.7.3079': attribute type 1 has an invalid length.
[  177.598283][ T7803] netlink: 'syz.7.3079': attribute type 2 has an invalid length.
[  181.083973][   T28] audit: type=1400 audit(1791876411.437:1191): avc:  denied  { read write } for  pid=7838 comm="syz.8.3096" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  181.113514][ T2617] logitech-hidpp-device 0005:046D:B012.0015: Device not connected
[  181.231327][   T28] audit: type=1400 audit(1791876411.467:1192): avc:  denied  { open } for  pid=7838 comm="syz.8.3096" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  181.290286][ T7867] xt_hashlimit: size too large, truncated to 1048576
[  181.301675][ T7870] loop8: detected capacity change from 0 to 128
[  181.335482][ T7874] loop1: detected capacity change from 0 to 4096
[  181.376770][ T7870] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  181.425330][ T7870] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.444094][ T7882] tap0: tun_chr_ioctl cmd 2147767506
[  181.465404][ T7874] EXT4-fs: Invalid uid value -1
[  181.508913][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  181.633704][ T7892] loop9: detected capacity change from 0 to 512
[  181.675871][ T7895] loop1: detected capacity change from 0 to 256
[  181.691169][ T7892] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.3117: inode has both inline data and extents flags
[  181.737709][ T7895] exfat: Deprecated parameter 'utf8'
[  181.765084][ T7892] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.3117: couldn't read orphan inode 15 (err -117)
[  181.786548][ T7895] exfat: Deprecated parameter 'utf8'
[  181.807920][ T7895] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  181.840547][ T7892] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  181.918440][ T7684] EXT4-fs (loop9): unmounting filesystem.
[  182.021043][ T7886] loop8: detected capacity change from 0 to 40427
[  182.064590][ T7910] loop9: detected capacity change from 0 to 256
[  182.080626][ T7886] F2FS-fs (loop8): Invalid SB checksum offset: 0
[  182.116922][ T7886] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  182.133315][ T7910] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  182.177178][ T7886] F2FS-fs (loop8): invalid crc value
[  182.197097][ T7910] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  182.217003][ T7886] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  182.316038][ T7886] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  182.346744][ T7886] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  182.458865][ T7908] loop0: detected capacity change from 0 to 40427
[  182.476929][ T7674] bio_check_eod: 1 callbacks suppressed
[  182.476944][ T7674] syz-executor: attempt to access beyond end of device
[  182.476944][ T7674] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  182.496813][   T28] audit: type=1400 audit(1791876412.857:1193): avc:  denied  { connect } for  pid=7927 comm="syz.7.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  182.536746][ T7908] F2FS-fs (loop0): invalid crc value
[  182.567148][ T7908] F2FS-fs (loop0): Found nat_bits in checkpoint
[  182.622983][ T7936] loop7: detected capacity change from 0 to 512
[  182.656770][ T7908] F2FS-fs (loop0): Start checkpoint disabled!
[  182.674882][ T7936] EXT4-fs (loop7): invalid journal inode
[  182.697309][ T7908] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  182.706719][ T7936] EXT4-fs (loop7): can't get journal size
[  182.737085][ T7936] EXT4-fs (loop7): 1 truncate cleaned up
[  182.742749][ T7936] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  182.756671][ T7908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  182.839763][ T7942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=7942 comm=syz.8.3138
[  182.854146][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  182.919307][   T43] kworker/u4:2: attempt to access beyond end of device
[  182.919307][   T43] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  183.035546][ T7959] loop8: detected capacity change from 0 to 512
[  183.389648][ T7983] loop0: detected capacity change from 0 to 128
[  183.426390][ T7983] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  183.436272][ T7898] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[  183.480343][ T7898] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  183.520460][ T7898] F2FS-fs (loop1): invalid crc value
[  183.555793][ T7898] F2FS-fs (loop1): Found nat_bits in checkpoint
[  183.628080][   T28] audit: type=1400 audit(1791876413.987:1194): avc:  denied  { mounton } for  pid=7993 comm="syz.8.3159" path="/14/file0" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  183.655998][ T2617] kernel write not supported for file /input/event2 (pid: 2617 comm: kworker/0:8)
[  183.669780][ T7898] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  183.700789][ T7898] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  183.760096][ T7981] F2FS-fs (loop9): invalid crc value
[  183.791763][ T7981] F2FS-fs (loop9): Found nat_bits in checkpoint
[  183.876934][ T7981] F2FS-fs (loop9): Start checkpoint disabled!
[  183.906843][ T7981] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  183.943345][ T7981] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  184.038873][ T8016] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  184.102359][ T8016] EXT4-fs (loop8): 1 truncate cleaned up
[  184.122101][ T8016] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  184.216700][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  184.904211][ T8034] tun0: tun_chr_ioctl cmd 1074812117
[  185.172869][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3188'.
[  185.216608][ T1603] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  185.225125][ T8036] F2FS-fs (loop7): fault_injection options not supported
[  185.254763][ T8036] F2FS-fs (loop7): invalid crc value
[  185.278957][ T8036] F2FS-fs (loop7): Found nat_bits in checkpoint
[  185.335706][ T8036] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  185.405266][ T8062] f2fs_ckpt-7:7: attempt to access beyond end of device
[  185.405266][ T8062] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  185.426519][ T1603] usb 1-1: Using ep0 maxpacket: 16
[  185.437472][ T1603] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.466658][ T8036] SELinux:  Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped).
[  185.477071][ T1603] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  185.496291][   T28] audit: type=1400 audit(1791876671.846:1195): avc:  denied  { relabelto } for  pid=8035 comm="syz.7.3175" name="file1" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0"
[  185.551052][ T1603] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  185.599000][ T1603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  185.646255][ T1603] usb 1-1: SerialNumber: syz
[  185.651313][   T28] audit: type=1400 audit(1791876671.896:1196): avc:  denied  { nlmsg_write } for  pid=8065 comm="syz.9.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  185.677932][ T8072] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  185.697803][ T1603] usb 1-1: 0:2 : does not exist
[  185.713572][ T8072] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.756355][   T28] audit: type=1400 audit(1791876671.896:1197): avc:  denied  { nlmsg_write } for  pid=8065 comm="syz.9.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  185.793318][ T8072] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  185.883639][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  185.890551][   T28] audit: type=1400 audit(1791876672.136:1198): avc:  denied  { create } for  pid=8071 comm="syz.8.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  185.996511][   T28] audit: type=1400 audit(1791876672.196:1199): avc:  denied  { relabelto } for  pid=8071 comm="syz.8.3192" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  186.148836][ T8090] EXT4-fs: Ignoring removed i_version option
[  186.171757][ T8090] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  186.199598][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  186.224452][ T8048] F2FS-fs (loop1): invalid crc value
[  186.257505][ T8048] F2FS-fs (loop1): Found nat_bits in checkpoint
[  186.291251][ T8099] EXT4-fs (loop8): Test dummy encryption mode enabled
[  186.315579][ T1603] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[  186.327727][ T8048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  186.336015][ T8099] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  186.345048][ T8099] System zones: 0-5
[  186.350625][ T1603] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[  186.361948][ T8099] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  186.380904][ T1603] usb 1-1: USB disconnect, device number 14
[  186.396483][ T2611] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  186.433081][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  186.581844][ T8121] set_capacity_and_notify: 10 callbacks suppressed
[  186.581858][ T8121] loop9: detected capacity change from 0 to 256
[  186.597404][ T2611] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.626691][ T2611] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.647968][ T8125] loop8: detected capacity change from 0 to 512
[  186.667692][ T2611] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  186.713049][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3214'.
[  186.723593][ T8125] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  186.736413][ T2611] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  186.754086][ T2611] usb 8-1: SerialNumber: syz
[  186.759124][ T8125] FAT-fs (loop8): Filesystem has been set read-only
[  186.773833][ T8132] loop1: detected capacity change from 0 to 512
[  186.828024][ T8132] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  186.859848][   T28] audit: type=1400 audit(1791876673.216:1200): avc:  denied  { mounton } for  pid=8143 comm="syz.8.3220" path="/39/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  186.883306][ T8132] ext4 filesystem being mounted at /625/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.947799][ T8155] loop9: detected capacity change from 0 to 512
[  186.972268][  T289] EXT4-fs (loop1): unmounting filesystem.
[  186.986191][ T2611] usb 8-1: 0:2 : does not exist
[  186.997876][ T8155] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  187.014939][ T2611] usb 8-1: unit 9 not found!
[  187.033996][ T2611] usb 8-1: unit 196 not found!
[  187.046506][   T28] audit: type=1400 audit(1791876673.406:1201): avc:  denied  { mount } for  pid=8163 comm="syz.8.3231" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  187.073278][ T8155] EXT4-fs error (device loop9): ext4_find_inline_data_nolock:164: inode #15: comm syz.9.3225: inline data xattr refers to an external xattr inode
[  187.092157][ T2611] usb 8-1: unit 237 not found!
[  187.105072][ T2611] usb 8-1: unit 128 not found!
[  187.118438][ T2611] usb 8-1: unit 144 not found!
[  187.132619][ T8155] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.3225: couldn't read orphan inode 15 (err -117)
[  187.144678][ T2611] usb 8-1: unit 4 not found!
[  187.161762][ T2611] usb 8-1: unit 2 not found!
[  187.184507][ T2611] usb 8-1: USB disconnect, device number 6
[  187.198825][ T8155] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  187.277498][ T7684] EXT4-fs (loop9): unmounting filesystem.
[  187.329772][ T8187] SELinux: failed to load policy
[  187.550936][ T8189] loop0: detected capacity change from 0 to 40427
[  187.564887][ T8186] loop1: detected capacity change from 0 to 40427
[  187.606502][ T8189] F2FS-fs (loop0): invalid crc value
[  187.626101][ T8186] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  187.645120][ T8189] F2FS-fs (loop0): Found nat_bits in checkpoint
[  187.660643][ T8186] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  187.684164][ T8186] F2FS-fs (loop1): Found nat_bits in checkpoint
[  187.697580][ T8189] F2FS-fs (loop0): Start checkpoint disabled!
[  187.713645][ T8189] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  187.739582][ T8189] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  187.756435][ T8186] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  187.775411][ T8186] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  187.795570][    T8] kworker/u4:0: attempt to access beyond end of device
[  187.795570][    T8] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  188.061675][ T8251] loop1: detected capacity change from 0 to 512
[  188.081465][ T8251] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  188.111936][ T8251] EXT4-fs (loop1): Remounting filesystem read-only
[  188.126374][ T8251] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3266: invalid indirect mapped block 4278190080 (level 0)
[  188.162862][ T8251] EXT4-fs (loop1): Remounting filesystem read-only
[  188.195320][ T8258] loop7: detected capacity change from 0 to 256
[  188.202043][ T8251] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3266: invalid indirect mapped block 1 (level 1)
[  188.253241][ T8251] EXT4-fs (loop1): Remounting filesystem read-only
[  188.267615][ T8251] EXT4-fs (loop1): 1 truncate cleaned up
[  188.279862][ T8251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  188.309157][ T8251] EXT4-fs (loop1): shut down requested (0)
[  190.064296][  T289] EXT4-fs (loop1): unmounting filesystem.
[  190.074257][ T8271] loop9: detected capacity change from 0 to 512
[  190.082766][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'.
[  190.111707][ T8274] loop1: detected capacity change from 0 to 2048
[  190.126371][ T8271] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  190.195780][ T8271] EXT4-fs (loop9): 1 truncate cleaned up
[  190.215800][ T8274] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  190.224622][ T8271] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  190.264852][ T8287] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  190.276518][ T8274] ext4 filesystem being mounted at /629/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.294038][   T28] audit: type=1400 audit(1791876676.647:1202): avc:  denied  { watch watch_reads } for  pid=8268 comm="syz.9.3274" path="/42/bus" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  190.330274][ T7684] EXT4-fs (loop9): unmounting filesystem.
[  190.362247][ T8274] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3276: bg 0: block 345: padding at end of block bitmap is not set
[  190.411890][ T8294] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  190.450403][ T8294] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  190.468480][   T28] audit: type=1400 audit(1791876676.827:1203): avc:  denied  { rename } for  pid=8273 comm="syz.1.3276" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  190.504752][ T8266] F2FS-fs (loop8): Invalid SB checksum offset: 0
[  190.512237][ T8302] tipc: Started in network mode
[  190.517869][  T289] EXT4-fs (loop1): unmounting filesystem.
[  190.528718][ T8294] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62e2eca, utbl_chksum : 0xe619d30d)
[  190.542706][ T8302] tipc: Node identity ac14142f, cluster identity 4711
[  190.549673][ T8266] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  190.569180][ T8302] tipc: New replicast peer: 127.0.0.1
[  190.577088][ T8266] F2FS-fs (loop8): invalid crc value
[  190.590141][ T8302] tipc: Enabled bearer <udp:syz2>, priority 10
[  190.610838][ T8266] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  190.625208][ T8305] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3286'.
[  190.690953][   T28] audit: type=1326 audit(1791876677.047:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  190.722507][ T8266] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  190.755380][ T8266] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  190.801013][   T43] kworker/u4:2: attempt to access beyond end of device
[  190.801013][   T43] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.816558][ T8320] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  190.830403][   T28] audit: type=1326 audit(1791876677.077:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  190.902178][ T7684] EXT4-fs (loop9): unmounting filesystem.
[  190.981721][   T28] audit: type=1326 audit(1791876677.077:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  191.010568][ T8333] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  191.070615][ T7684] EXT4-fs (loop9): unmounting filesystem.
[  191.116531][   T28] audit: type=1326 audit(1791876677.077:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  191.176666][ T8342] SELinux: ebitmap: truncated map
[  191.203735][ T8342] SELinux: failed to load policy
[  191.250742][   T28] audit: type=1326 audit(1791876677.077:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  191.300659][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3314'.
[  191.337217][ T8376] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  193.031624][ T2611] tipc: Node number set to 2886997039
[  194.028978][   T28] audit: type=1326 audit(1791876677.077:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  195.190500][ T8406] set_capacity_and_notify: 7 callbacks suppressed
[  195.190515][ T8406] loop8: detected capacity change from 0 to 512
[  195.214723][   T28] audit: type=1326 audit(1791876677.077:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  195.288117][ T8411] loop0: detected capacity change from 0 to 512
[  195.319895][ T8406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  195.357940][ T8411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  195.366174][ T8417] netlink: 'syz.7.3335': attribute type 15 has an invalid length.
[  195.388990][ T8406] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  195.400860][   T28] audit: type=1326 audit(1791876677.077:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  195.425846][ T8411] System zones: 1-12
[  195.440465][ T8421] loop1: detected capacity change from 0 to 16
[  195.447220][ T8411] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.3333: missing EA_INODE flag
[  195.483885][ T8406] EXT4-fs (loop8): 1 truncate cleaned up
[  195.489963][ T8421] erofs: (device loop1): mounted with root inode @ nid 36.
[  195.506969][ T8406] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  195.517543][ T8411] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.3333: error while reading EA inode 12 err=-117
[  195.538565][ T8427] loop7: detected capacity change from 0 to 128
[  195.565424][   T28] audit: type=1326 audit(1791876677.077:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  195.602421][ T8427] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  195.614729][ T8411] EXT4-fs (loop0): 1 orphan inode deleted
[  195.633517][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  195.645345][ T8411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  195.655619][ T8427] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.670324][ T8431] loop1: detected capacity change from 0 to 1024
[  195.722685][ T8411] fscrypt (loop0, inode 18): Direct key flag not allowed with different contents and filenames modes
[  195.743208][   T28] audit: type=1326 audit(1791876677.077:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  195.770925][ T8431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  195.786981][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  195.834729][  T289] EXT4-fs (loop1): unmounting filesystem.
[  195.845911][  T287] EXT4-fs (loop0): unmounting filesystem.
[  195.857653][ T8449] loop8: detected capacity change from 0 to 512
[  195.900254][ T8453] loop0: detected capacity change from 0 to 512
[  195.909384][ T8449] EXT4-fs: Ignoring removed nobh option
[  195.918932][   T28] audit: type=1326 audit(1791876677.077:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  195.975755][ T8449] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  195.990905][ T8453] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.025682][ T8453] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  196.033937][ T8449] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.3349: attempt to clear invalid blocks 1 len 1
[  196.077232][ T8453] EXT4-fs (loop0): 1 truncate cleaned up
[  196.090237][   T28] audit: type=1326 audit(1791876677.077:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  196.121832][ T8449] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  196.140271][ T8453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  196.192803][ T8449] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3349: invalid indirect mapped block 1819239214 (level 0)
[  196.226556][  T287] EXT4-fs (loop0): unmounting filesystem.
[  196.238779][   T28] audit: type=1326 audit(1791876677.077:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  196.280664][ T8476] loop1: detected capacity change from 0 to 256
[  196.309000][ T8449] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3349: invalid indirect mapped block 1819239214 (level 1)
[  196.342679][ T8476] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  196.385600][ T8449] EXT4-fs (loop8): 1 truncate cleaned up
[  196.395846][ T8476] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  196.415219][   T28] audit: type=1326 audit(1791876677.077:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  196.445901][ T8449] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  196.472759][ T8476] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d)
[  196.525597][ T8449] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.8.3349: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  196.564780][ T8485] loop7: detected capacity change from 0 to 8192
[  196.571392][   T28] audit: type=1326 audit(1791876677.097:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.9.3290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc8f79e2d9 code=0x7ffc0000
[  196.655331][ T8485] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  196.678312][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  196.755496][ T8491] binder: binder_mmap: 8490 200000000000-200000b36000 bad vm_flags failed -1
[  196.874477][ T8509] loop1: detected capacity change from 0 to 256
[  196.936440][ T8509] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  197.233152][ T8556] IPv6: NLM_F_REPLACE set, but no existing node found!
[  197.423444][ T8576] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  197.453881][ T8580] tun0: tun_chr_ioctl cmd 1074025677
[  197.473225][ T8580] tun0: linktype set to 778
[  197.651500][ T8616] exfat: Deprecated parameter 'utf8'
[  197.691107][ T8616] exfat: Deprecated parameter 'utf8'
[  197.723431][ T8616] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  197.768619][ T8631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  197.787912][ T8638] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  197.816205][ T8631] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.853955][ T8638] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.894843][ T8649] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  197.950499][   T43] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.960977][  T289] EXT4-fs (loop1): unmounting filesystem.
[  198.017430][ T8657] zero sized request
[  198.133324][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3451'.
[  198.188039][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3451'.
[  198.292786][ T8682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  198.329003][ T8682] ext4 filesystem being mounted at /729/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.384834][ T8682] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  198.457452][ T8682] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  198.505220][ T8682] EXT4-fs (loop0): This should not happen!! Data will be lost
[  198.505220][ T8682] 
[  198.545199][ T8682] EXT4-fs (loop0): Total free blocks count 0
[  198.569563][ T8682] EXT4-fs (loop0): Free/Dirty block details
[  198.600509][ T8682] EXT4-fs (loop0): free_blocks=65280
[  198.615143][ T8682] EXT4-fs (loop0): dirty_blocks=1
[  198.640419][ T8682] EXT4-fs (loop0): Block reservation details
[  198.660580][ T8682] EXT4-fs (loop0): i_reserved_data_blocks=1
[  198.715155][ T2611] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  198.723753][  T287] EXT4-fs (loop0): unmounting filesystem.
[  198.790417][ T8702] FAT-fs (loop0): Directory bread(block 64) failed
[  198.827312][ T8702] FAT-fs (loop0): Directory bread(block 65) failed
[  198.833861][ T8702] FAT-fs (loop0): Directory bread(block 66) failed
[  198.872933][ T8702] FAT-fs (loop0): Directory bread(block 67) failed
[  198.901047][ T8702] FAT-fs (loop0): Directory bread(block 68) failed
[  198.916082][ T2611] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.945158][ T8702] FAT-fs (loop0): Directory bread(block 69) failed
[  198.955242][ T2611] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.976403][ T8702] FAT-fs (loop0): Directory bread(block 70) failed
[  198.982923][ T8702] FAT-fs (loop0): Directory bread(block 71) failed
[  199.006693][ T2611] usb 8-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00
[  199.029029][ T8645] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  199.046807][ T8702] FAT-fs (loop0): Directory bread(block 72) failed
[  199.060680][ T2611] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  199.077292][ T8645] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  199.087808][ T8702] FAT-fs (loop0): Directory bread(block 73) failed
[  199.105158][ T2611] usb 8-1: SerialNumber: syz
[  199.113259][ T8645] F2FS-fs (loop9): invalid crc value
[  199.148061][ T8645] F2FS-fs (loop9): Found nat_bits in checkpoint
[  199.245296][ T8645] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  199.252388][ T8645] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  199.299116][ T8666] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  199.335777][ T2611] usb 8-1: 0:2 : does not exist
[  199.365051][ T2611] usb 8-1: USB disconnect, device number 7
[  199.624665][ T8666] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  199.633664][ T8717] F2FS-fs (loop0): invalid crc value
[  199.668480][ T8717] F2FS-fs (loop0): Found nat_bits in checkpoint
[  199.694889][ T8717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  199.713686][ T8666] F2FS-fs (loop1): Test dummy encryption mode enabled
[  199.762788][ T8666] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name
[  199.805346][ T8666] F2FS-fs (loop1): invalid crc value
[  199.855685][ T8666] F2FS-fs (loop1): Found nat_bits in checkpoint
[  199.963072][ T8666] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  200.015672][ T8666] F2FS-fs (loop1): Failed to read root inode
[  200.180263][ T8749] can0: slcan on ttyS3.
[  200.235192][ T8754] can0 (unregistered): slcan off ttyS3.
[  200.335536][ T8769] tap0: tun_chr_ioctl cmd 1074025677
[  200.372576][ T8769] tap0: linktype set to 6
[  200.704285][ T8812] device erspan0 entered promiscuous mode
[  200.742136][ T8819] set_capacity_and_notify: 11 callbacks suppressed
[  200.742152][ T8819] loop1: detected capacity change from 0 to 512
[  200.825228][ T8819] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  200.846608][ T2611] kernel write not supported for file task/534/net/snmp6 (pid: 2611 comm: kworker/0:5)
[  200.922686][ T8819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  200.963639][ T8819] ext4 filesystem being mounted at /661/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.069996][ T8862] loop7: detected capacity change from 0 to 512
[  201.092672][ T8864] loop9: detected capacity change from 0 to 512
[  201.106635][ T8862] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.3516: iget: bad i_size value: 38620345925642
[  201.165991][ T8862] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.3516: couldn't read orphan inode 15 (err -117)
[  201.194777][  T289] EXT4-fs (loop1): unmounting filesystem.
[  201.205250][ T2617] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  201.224007][ T8862] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  201.303377][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  201.303390][   T28] audit: type=1400 audit(1791876944.657:1225): avc:  denied  { ioctl } for  pid=8869 comm="syz.1.3519" path="/663/tracefs/dynamic_events" dev="tracefs" ino=1048 ioctlcmd=0xae9a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  201.346280][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  201.406216][ T2617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.462177][ T2617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.523359][ T2617] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  201.578558][ T2617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.629822][ T2617] usb 1-1: config 0 descriptor??
[  201.639933][ T8909] loop8: detected capacity change from 0 to 16
[  201.647003][ T8866] loop9: detected capacity change from 0 to 40427
[  201.689130][ T8909] erofs: (device loop8): mounted with root inode @ nid 36.
[  201.710062][ T8866] F2FS-fs (loop9): invalid crc value
[  201.742257][ T8866] F2FS-fs (loop9): Found nat_bits in checkpoint
[  201.755871][ T8909] syz.8.3537: attempt to access beyond end of device
[  201.755871][ T8909] loop8: rw=524288, sector=1347167552, nr_sectors = 256 limit=16
[  201.826786][ T8909] syz.8.3537: attempt to access beyond end of device
[  201.826786][ T8909] loop8: rw=0, sector=1347167672, nr_sectors = 32 limit=16
[  201.845208][ T8866] F2FS-fs (loop9): Start checkpoint disabled!
[  201.865534][ T8866] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  201.885373][ T8909] syz.8.3537: attempt to access beyond end of device
[  201.885373][ T8909] loop8: rw=0, sector=1347167672, nr_sectors = 32 limit=16
[  201.912765][ T8866] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  201.925950][ T8932] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  201.962326][ T8909] syz.8.3537: attempt to access beyond end of device
[  201.962326][ T8909] loop8: rw=0, sector=1347167672, nr_sectors = 32 limit=16
[  202.029450][ T8909] syz.8.3537: attempt to access beyond end of device
[  202.029450][ T8909] loop8: rw=0, sector=1347167672, nr_sectors = 32 limit=16
[  202.084286][ T8942] loop7: detected capacity change from 0 to 512
[  202.091766][ T2617] hid-led 0003:1D34:000A.0016: unknown main item tag 0x0
[  202.105381][ T1726] kworker/u4:5: attempt to access beyond end of device
[  202.105381][ T1726] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  202.119425][ T2617] hid-led 0003:1D34:000A.0016: unknown main item tag 0x0
[  202.160884][ T8942] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  202.169833][ T2617] hid-led 0003:1D34:000A.0016: item fetching failed at offset 2/3
[  202.218514][ T8942] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.229217][ T2617] hid-led: probe of 0003:1D34:000A.0016 failed with error -22
[  202.289990][ T8940] SELinux: failed to load policy
[  202.322118][ T2617] usb 1-1: USB disconnect, device number 15
[  202.350779][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  202.465643][ T8968] __vm_enough_memory: pid: 8968, comm: syz.8.3564, no enough memory for the allocation
[  202.607696][ T8991] loop7: detected capacity change from 0 to 1024
[  202.629924][ T8996] loop9: detected capacity change from 0 to 256
[  202.661214][ T8996] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.676360][ T8991] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  202.690665][ T8991] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.701696][ T9002] syz.8.3579 (9002): /proc/9001/oom_adj is deprecated, please use /proc/9001/oom_score_adj instead.
[  202.714527][ T8996] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  202.729786][ T8991] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.3575: lblock 0 mapped to illegal pblock 0 (length 1)
[  202.743247][ T8996] FAT-fs (loop9): Filesystem has been set read-only
[  202.765159][ T8991] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  202.790575][ T9008] loop8: detected capacity change from 0 to 4096
[  202.797320][ T8991] EXT4-fs (loop7): This should not happen!! Data will be lost
[  202.797320][ T8991] 
[  202.807235][ T2617] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  202.826358][ T9008] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  202.841476][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  202.863457][ T9008] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[  202.901329][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  202.914375][ T9015] loop9: detected capacity change from 0 to 1024
[  202.959072][ T9015] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  202.996224][ T9015] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  203.014514][ T9015] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  203.025044][ T2617] usb 2-1: unable to get BOS descriptor or descriptor too short
[  203.044054][ T2617] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.083850][ T2617] usb 2-1: string descriptor 0 read error: -22
[  203.108559][ T7684] EXT4-fs (loop9): unmounting filesystem.
[  203.114402][ T2617] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  203.135129][ T2617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.273907][ T9037] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  203.304578][   T28] audit: type=1400 audit(1791876946.657:1226): avc:  denied  { setattr } for  pid=9036 comm="syz.8.3595" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  203.341662][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  203.391316][   T28] audit: type=1400 audit(1791876946.687:1227): avc:  denied  { watch_reads } for  pid=9044 comm="syz.9.3598" path="/102/file1" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  203.576168][ T9011] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945)
[  203.605922][ T9011] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  203.625205][ T1603] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  203.633944][ T9011] F2FS-fs (loop7): invalid crc value
[  203.651437][ T9011] F2FS-fs (loop7): Found nat_bits in checkpoint
[  203.695340][ T9011] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  203.708953][ T9011] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  203.757097][ T2617] usb 2-1: current rate 256 is different from the runtime rate 48000
[  203.815831][ T1603] usb 10-1: not running at top speed; connect to a high speed hub
[  203.835549][ T1603] usb 10-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  203.862531][ T1603] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.912949][ T1603] usb 10-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  203.946889][ T1603] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  203.996654][ T1603] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.039349][ T1603] usb 10-1: config 0 descriptor??
[  204.044734][ T2617] usb 2-1: USB disconnect, device number 14
[  204.066484][ T1603] usb 10-1: Found UVC 9.00 device <unnamed> (046d:0825)
[  204.094846][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3613'.
[  204.118181][ T9083] SELinux: security_context_str_to_sid (��a`yv��-�|J+0l�8G[�kT��_��|n��U�5
[  204.118181][ T9083] M9) failed with errno=-22
[  204.346501][ T9111] FAT-fs (loop8): Directory bread(block 64) failed
[  204.363943][ T9109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  204.380038][ T9111] FAT-fs (loop8): Directory bread(block 65) failed
[  204.395964][ T9111] FAT-fs (loop8): Directory bread(block 66) failed
[  204.402910][   T28] audit: type=1326 audit(1791876947.757:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.3629" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fef9e2d9 code=0x7ffc0000
[  204.445192][ T9111] FAT-fs (loop8): Directory bread(block 67) failed
[  204.452469][ T1603] usb 10-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  204.474573][ T9111] FAT-fs (loop8): Directory bread(block 68) failed
[  204.500449][ T9109] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  204.529055][ T9111] FAT-fs (loop8): Directory bread(block 69) failed
[  204.558474][   T28] audit: type=1326 audit(1791876947.787:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.3629" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53fef9e2d9 code=0x7ffc0000
[  204.585183][ T9111] FAT-fs (loop8): Directory bread(block 70) failed
[  204.613670][ T9109] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 468 with error 28
[  204.635887][ T9111] FAT-fs (loop8): Directory bread(block 71) failed
[  204.657503][ T9111] FAT-fs (loop8): Directory bread(block 72) failed
[  204.674212][ T9109] EXT4-fs (loop0): This should not happen!! Data will be lost
[  204.674212][ T9109] 
[  204.690686][ T1603] usb 10-1: USB disconnect, device number 2
[  204.708428][ T9111] FAT-fs (loop8): Directory bread(block 73) failed
[  204.717448][   T28] audit: type=1326 audit(1791876947.787:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.3629" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fef9e2d9 code=0x7ffc0000
[  204.751104][ T9109] EXT4-fs (loop0): Total free blocks count 0
[  204.779628][ T9109] EXT4-fs (loop0): Free/Dirty block details
[  204.797873][ T9109] EXT4-fs (loop0): free_blocks=4096
[  204.825180][ T9109] EXT4-fs (loop0): dirty_blocks=512
[  204.835250][   T28] audit: type=1326 audit(1791876947.787:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.3629" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fef9e2d9 code=0x7ffc0000
[  204.875206][ T9109] EXT4-fs (loop0): Block reservation details
[  204.889618][ T9144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  204.915602][ T9109] EXT4-fs (loop0): i_reserved_data_blocks=32
[  204.942447][ T9148] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.3641: inode has both inline data and extents flags
[  204.968102][ T9144] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.3639: inode has both inline data and extents flags
[  204.991481][   T28] audit: type=1326 audit(1791876947.797:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.3629" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f53fef9d147 code=0x7ffc0000
[  205.024491][  T315] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28
[  205.037208][ T9148] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.3641: couldn't read orphan inode 15 (err -117)
[  205.049407][ T9144] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3639: couldn't read orphan inode 15 (err -117)
[  205.081212][ T9148] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  205.099936][ T9144] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  205.122240][   T28] audit: type=1326 audit(1791876947.797:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.3629" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fef9e2d9 code=0x7ffc0000
[  205.153310][ T9148] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #2: comm syz.8.3641: Directory hole found for htree leaf block 0
[  205.180434][ T9144] EXT4-fs (loop1): shut down requested (1)
[  205.234218][  T289] EXT4-fs (loop1): unmounting filesystem.
[  205.251736][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  205.282117][   T28] audit: type=1326 audit(1791876947.797:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.7.3629" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fef9e2d9 code=0x7ffc0000
[  205.405526][ T9183] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  205.450142][ T9183] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.462637][ T9195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9195 comm=syz.1.3660
[  205.539283][ T7684] EXT4-fs (loop9): unmounting filesystem.
[  205.693021][ T9225] kvm [9224]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x80000006
[  205.804603][ T9241] set_capacity_and_notify: 8 callbacks suppressed
[  205.804616][ T9241] loop8: detected capacity change from 0 to 512
[  205.846603][ T9244] loop9: detected capacity change from 0 to 512
[  205.884500][ T9244] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  205.905171][ T9241] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  205.968170][ T9244] EXT4-fs (loop9): 1 truncate cleaned up
[  205.973835][ T9244] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  205.982923][ T9241] EXT4-fs error (device loop8): ext4_orphan_get:1431: comm syz.8.3682: bad orphan inode 131083
[  206.016249][ T9241] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  206.061451][ T7684] EXT4-fs (loop9): unmounting filesystem.
[  206.085947][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  206.098812][ T9217] syz.1.3671 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  206.195545][ T9269] loop7: detected capacity change from 0 to 512
[  206.220865][ T2617] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0017/input/input21
[  206.263251][ T9269] EXT4-fs (loop7): 1 orphan inode deleted
[  206.277184][ T2617] hid-generic 0005:0009:0040.0017: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 
[  206.291657][ T9269] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  206.332246][ T9269] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.368413][    T8] __quota_error: 4 callbacks suppressed
[  206.368426][    T8] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  206.431899][ T9291] loop8: detected capacity change from 0 to 512
[  206.455480][ T9293] IPv6: NLM_F_REPLACE set, but no existing node found!
[  206.462423][    T8] EXT4-fs error (device loop7): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 1
[  206.505008][ T9291] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3702: invalid indirect mapped block 4294967295 (level 1)
[  206.545870][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  206.590319][ T9291] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3702: invalid indirect mapped block 4294967295 (level 1)
[  206.629538][ T9303] tun0: tun_chr_ioctl cmd 1074025677
[  206.638412][ T9305] zram: Cannot change disksize for initialized device
[  206.659797][ T9291] EXT4-fs (loop8): 2 truncates cleaned up
[  206.665847][ T9303] tun0: linktype set to 778
[  206.681551][ T9291] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  206.739736][ T9291] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #2: comm syz.8.3702: directory missing '.'
[  206.788756][ T9181] loop0: detected capacity change from 0 to 131072
[  206.846842][ T9181] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[  206.873942][ T7674] EXT4-fs (loop8): unmounting filesystem.
[  206.927742][ T9181] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  206.969989][ T9181] F2FS-fs (loop0): invalid crc value
[  207.006059][ T9181] F2FS-fs (loop0): Found nat_bits in checkpoint
[  207.080121][ T9181] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  207.104416][ T9181] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  207.188061][ T9329] loop1: detected capacity change from 0 to 8192
[  207.236402][ T9329] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  207.394774][   T28] audit: type=1400 audit(1791876950.747:1239): avc:  denied  { setcheckreqprot } for  pid=9339 comm="syz.1.3723" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  207.966726][ T9389] loop7: detected capacity change from 0 to 256
[  208.363047][ T9423] loop7: detected capacity change from 0 to 512
[  208.389973][ T9423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  208.442656][ T9423] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  208.464567][ T9423] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.484153][ T9431] loop9: detected capacity change from 0 to 2048
[  208.546129][ T9431] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  208.597819][ T9416] loop1: detected capacity change from 0 to 40427
[  208.608100][ T5861] EXT4-fs (loop7): unmounting filesystem.
[  208.626389][ T9416] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  208.664046][ T9416] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  208.700324][ T9416] F2FS-fs (loop1): Image doesn't support compression
[  208.714991][ T9431] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  208.739489][ T9416] F2FS-fs (loop1): Image doesn't support compression
[  208.751086][ T9445] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.763162][ T9443] tap0: tun_chr_ioctl cmd 1074025677
[  208.768925][ T9416] F2FS-fs (loop1): invalid crc value
[  208.774295][ T9443] tap0: linktype set to 6
[  208.785059][ T9416] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  208.810618][ T9431] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28
[  208.864586][ T9416] F2FS-fs (loop1): Start checkpoint disabled!
[  208.892387][ T9416] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  208.908366][ T9431] EXT4-fs (loop9): This should not happen!! Data will be lost
[  208.908366][ T9431] 
[  208.932264][ T9416] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  208.946438][ T9459] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3775'.
[  208.963065][ T9416] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  208.985657][ T9431] EXT4-fs (loop9): Total free blocks count 0
[  209.026831][ T9431] EXT4-fs (loop9): Free/Dirty block details
[  209.072955][ T9431] EXT4-fs (loop9): free_blocks=4096
[  209.079612][    T8] kworker/u4:0: attempt to access beyond end of device
[  209.079612][    T8] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  209.119254][ T9431] EXT4-fs (loop9): dirty_blocks=512
[  209.168818][ T9431] EXT4-fs (loop9): Block reservation details
[  209.220429][ T9431] EXT4-fs (loop9): i_reserved_data_blocks=32
[  209.303296][ T9485] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002]
[  209.336862][ T9431] EXT4-fs error (device loop9) in ext4_setattr:5697: error 28
[  209.350250][ T9485] System zones: 0-2, 18-18, 34-35
[  209.374686][   T28] audit: type=1400 audit(1791876952.727:1240): avc:  denied  { accept } for  pid=9489 comm="syz.1.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  209.407223][ T9485] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  209.420571][ T9496] tap0: tun_chr_ioctl cmd 1074025677
[  209.444407][ T9496] tap0: linktype set to 804
[  209.460490][ T9485] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.681509][ T9526] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  212.010846][ T9526] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  213.016221][ T2617] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  309.685036][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  309.692151][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P9525
[  309.699440][    C0] 	(detected by 0, t=10002 jiffies, g=52841, q=920 ncpus=1)
[  309.706720][    C0] task:syz.0.3803      state:R  running task     stack:26184 pid:9525  ppid:287    flags:0x00004000
[  309.717488][    C0] Call Trace:
[  309.720753][    C0]  <IRQ>
[  309.723593][    C0]  sched_show_task+0x391/0x550
[  309.728437][    C0]  ? __kasan_check_write+0x14/0x20
[  309.733595][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  309.739491][    C0]  ? __cfi_sched_show_task+0x10/0x10
[  309.744789][    C0]  ? wq_watchdog_touch+0x100/0x190
[  309.749892][    C0]  print_other_cpu_stall+0xd8d/0x10c0
[  309.755269][    C0]  ? dummy_timer+0x2f1e/0x3270
[  309.760140][    C0]  ? print_cpu_stall+0x590/0x590
[  309.765083][    C0]  ? cpufreq_acct_update_power+0xc0/0x450
[  309.770815][    C0]  rcu_sched_clock_irq+0x7bc/0x1310
[  309.776013][    C0]  ? __cfi_rcu_sched_clock_irq+0x10/0x10
[  309.781649][    C0]  ? debug_smp_processor_id+0x17/0x20
[  309.787008][    C0]  ? hrtimer_run_queues+0x166/0x420
[  309.792197][    C0]  update_process_times+0x148/0x1b0
[  309.797385][    C0]  tick_sched_timer+0x17c/0x240
[  309.802223][    C0]  ? __cfi_tick_sched_timer+0x10/0x10
[  309.807605][    C0]  __hrtimer_run_queues+0x398/0x8a0
[  309.812806][    C0]  ? hrtimer_interrupt+0x8c0/0x8c0
[  309.817916][    C0]  ? ktime_get_update_offsets_now+0x30c/0x320
[  309.823973][    C0]  hrtimer_interrupt+0x3ad/0x8c0
[  309.828900][    C0]  __sysvec_apic_timer_interrupt+0x11e/0x440
[  309.834907][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  309.840544][    C0]  </IRQ>
[  309.843472][    C0]  <TASK>
[  309.846392][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  309.852362][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60
[  309.858520][    C0] Code: 70 ff 90 7e 65 8b 15 71 ff 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c
[  309.878112][    C0] RSP: 0018:ffffc90000b976b8 EFLAGS: 00000246
[  309.884162][    C0] RAX: ffffffff8403110b RBX: 0000000000000000 RCX: ffff88812271e540
[  309.892125][    C0] RDX: 0000000000000002 RSI: 000000000007ffff RDI: 0000000000080000
[  309.900082][    C0] RBP: ffffc90000b976b8 R08: ffffea000499f5f7 R09: 1ffffd4000933ebe
[  309.908036][    C0] R10: dffffc0000000000 R11: fffff94000933ebf R12: ffffea000499f5c0
[  309.915991][    C0] R13: 00000000ffffffff R14: ffff888111d64000 R15: 0000000000000001
[  309.923948][    C0]  ? page_pool_put_defragged_page+0xfb/0x790
[  309.929920][    C0]  ? __kasan_check_read+0x11/0x20
[  309.934930][    C0]  page_pool_put_defragged_page+0xfb/0x790
[  309.940722][    C0]  __xdp_return+0x3da/0x480
[  309.945210][    C0]  xdp_return_buff+0x9e/0x270
[  309.949870][    C0]  ? bpf_prog_e133db5e478883b4+0x54/0x58
[  309.955487][    C0]  ? bpf_warn_invalid_xdp_action+0x28/0xf0
[  309.961277][    C0]  bpf_test_run_xdp_live+0x62b/0x1b00
[  309.966646][    C0]  ? __cfi_mutex_unlock+0x10/0x10
[  309.971677][    C0]  ? text_poke_copy+0x7d/0xa0
[  309.976342][    C0]  ? bpf_test_run_xdp_live+0x549/0x1b00
[  309.981871][    C0]  ? xdp_convert_md_to_buff+0x370/0x370
[  309.987413][    C0]  ? __cfi_xdp_test_run_init_page+0x10/0x10
[  309.993295][    C0]  ? __kasan_check_write+0x14/0x20
[  309.998386][    C0]  ? _copy_from_user+0x8f/0xc0
[  310.003138][    C0]  bpf_prog_test_run_xdp+0x757/0xf80
[  310.008418][    C0]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[  310.014219][    C0]  ? __kasan_check_write+0x14/0x20
[  310.019313][    C0]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[  310.025101][    C0]  bpf_prog_test_run+0x3b4/0x5c0
[  310.030022][    C0]  ? bpf_prog_query+0x270/0x270
[  310.034864][    C0]  ? selinux_bpf+0xce/0xf0
[  310.039301][    C0]  ? security_bpf+0x93/0xb0
[  310.043792][    C0]  __sys_bpf+0x5ee/0x850
[  310.048036][    C0]  ? bpf_link_show_fdinfo+0x330/0x330
[  310.053395][    C0]  ? fpregs_restore_userregs+0x128/0x260
[  310.059011][    C0]  __x64_sys_bpf+0x7c/0x90
[  310.063408][    C0]  x64_sys_call+0x488/0x9a0
[  310.067910][    C0]  do_syscall_64+0x4c/0xa0
[  310.072317][    C0]  ? clear_bhb_loop+0x30/0x80
[  310.076978][    C0]  ? clear_bhb_loop+0x30/0x80
[  310.081637][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  310.087512][    C0] RIP: 0033:0x7f77b2d9e2d9
[  310.091912][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.111500][    C0] RSP: 002b:00007f77b3ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  310.119905][    C0] RAX: ffffffffffffffda RBX: 00007f77b3025fa0 RCX: 00007f77b2d9e2d9
[  310.127859][    C0] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  310.135816][    C0] RBP: 00007f77b2e35888 R08: 0000000000000000 R09: 0000000000000000
[  310.143787][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.151755][    C0] R13: 00007f77b3026038 R14: 00007f77b3025fa0 R15: 00007fffa92545f8
[  310.159713][    C0]  </TASK>
[  310.162717][    C0] rcu: rcu_preempt kthread starved for 9996 jiffies! g52841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  310.173816][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  310.183765][    C0] rcu: RCU grace-period kthread stack dump:
[  310.189656][    C0] task:rcu_preempt     state:R  running task     stack:28448 pid:14    ppid:2      flags:0x00004000
[  310.200427][    C0] Call Trace:
[  310.203708][    C0]  <TASK>
[  310.206627][    C0]  __schedule+0xcb3/0x1700
[  310.211033][    C0]  ? release_firmware_map_entry+0x190/0x190
[  310.216916][    C0]  ? __mod_timer+0x865/0xc00
[  310.221491][    C0]  schedule+0xbd/0x170
[  310.225548][    C0]  schedule_timeout+0x159/0x340
[  310.230385][    C0]  ? __cfi_schedule_timeout+0x10/0x10
[  310.235753][    C0]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  310.241197][    C0]  ? __cfi_process_timeout+0x10/0x10
[  310.246470][    C0]  ? prepare_to_swait_event+0x30f/0x330
[  310.252002][    C0]  rcu_gp_fqs_loop+0x2ed/0x1100
[  310.256838][    C0]  ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10
[  310.262888][    C0]  ? rcu_gp_init+0xf30/0xf30
[  310.267483][    C0]  rcu_gp_kthread+0x99/0x390
[  310.272067][    C0]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  310.277250][    C0]  ? try_to_wake_up+0x622/0x1250
[  310.282175][    C0]  ? __kasan_check_read+0x11/0x20
[  310.287181][    C0]  ? __kthread_parkme+0x13a/0x180
[  310.292188][    C0]  kthread+0x281/0x320
[  310.296249][    C0]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  310.301434][    C0]  ? __cfi_kthread+0x10/0x10
[  310.306009][    C0]  ret_from_fork+0x1f/0x30
[  310.310421][    C0]  </TASK>
[  310.313424][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  310.319726][    C0] CPU: 0 PID: 9525 Comm: syz.0.3803 Tainted: G        W          syzkaller #0
[  310.328564][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  310.338621][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60
[  310.344789][    C0] Code: 70 ff 90 7e 65 8b 15 71 ff 90 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c
[  310.364389][    C0] RSP: 0018:ffffc90000b976b8 EFLAGS: 00000246
[  310.370459][    C0] RAX: ffffffff8403110b RBX: 0000000000000000 RCX: ffff88812271e540
[  310.378415][    C0] RDX: 0000000000000002 RSI: 000000000007ffff RDI: 0000000000080000
[  310.386368][    C0] RBP: ffffc90000b976b8 R08: ffffea000499f5f7 R09: 1ffffd4000933ebe
[  310.394324][    C0] R10: dffffc0000000000 R11: fffff94000933ebf R12: ffffea000499f5c0
[  310.402280][    C0] R13: 00000000ffffffff R14: ffff888111d64000 R15: 0000000000000001
[  310.410236][    C0] FS:  00007f77b3ca76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  310.419166][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  310.425736][    C0] CR2: 0000560e78661950 CR3: 000000012702f000 CR4: 00000000003506b0
[  310.433706][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  310.441667][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  310.449624][    C0] Call Trace:
[  310.452888][    C0]  <TASK>
[  310.455806][    C0]  page_pool_put_defragged_page+0xfb/0x790
[  310.461605][    C0]  __xdp_return+0x3da/0x480
[  310.466106][    C0]  xdp_return_buff+0x9e/0x270
[  310.470768][    C0]  ? bpf_prog_e133db5e478883b4+0x54/0x58
[  310.476384][    C0]  ? bpf_warn_invalid_xdp_action+0x28/0xf0
[  310.482173][    C0]  bpf_test_run_xdp_live+0x62b/0x1b00
[  310.487530][    C0]  ? __cfi_mutex_unlock+0x10/0x10
[  310.492539][    C0]  ? text_poke_copy+0x7d/0xa0
[  310.497202][    C0]  ? bpf_test_run_xdp_live+0x549/0x1b00
[  310.502731][    C0]  ? xdp_convert_md_to_buff+0x370/0x370
[  310.508276][    C0]  ? __cfi_xdp_test_run_init_page+0x10/0x10
[  310.514170][    C0]  ? __kasan_check_write+0x14/0x20
[  310.519275][    C0]  ? _copy_from_user+0x8f/0xc0
[  310.524050][    C0]  bpf_prog_test_run_xdp+0x757/0xf80
[  310.529336][    C0]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[  310.535133][    C0]  ? __kasan_check_write+0x14/0x20
[  310.540242][    C0]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[  310.546043][    C0]  bpf_prog_test_run+0x3b4/0x5c0
[  310.550965][    C0]  ? bpf_prog_query+0x270/0x270
[  310.555795][    C0]  ? selinux_bpf+0xce/0xf0
[  310.560202][    C0]  ? security_bpf+0x93/0xb0
[  310.564692][    C0]  __sys_bpf+0x5ee/0x850
[  310.568922][    C0]  ? bpf_link_show_fdinfo+0x330/0x330
[  310.574279][    C0]  ? fpregs_restore_userregs+0x128/0x260
[  310.579897][    C0]  __x64_sys_bpf+0x7c/0x90
[  310.584308][    C0]  x64_sys_call+0x488/0x9a0
[  310.588794][    C0]  do_syscall_64+0x4c/0xa0
[  310.593200][    C0]  ? clear_bhb_loop+0x30/0x80
[  310.597861][    C0]  ? clear_bhb_loop+0x30/0x80
[  310.602694][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  310.608594][    C0] RIP: 0033:0x7f77b2d9e2d9
[  310.613006][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.632614][    C0] RSP: 002b:00007f77b3ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  310.641012][    C0] RAX: ffffffffffffffda RBX: 00007f77b3025fa0 RCX: 00007f77b2d9e2d9
[  310.648967][    C0] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  310.656923][    C0] RBP: 00007f77b2e35888 R08: 0000000000000000 R09: 0000000000000000
[  310.664897][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.672853][    C0] R13: 00007f77b3026038 R14: 00007f77b3025fa0 R15: 00007fffa92545f8
[  310.680833][    C0]  </TASK>
[  428.805302][    C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 215s!
[  428.813772][    C0] Showing busy workqueues and worker pools:
[  428.819669][    C0] workqueue events: flags=0x0
[  428.824328][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7
[  428.824352][    C0]     pending: psi_avgs_work, vmstat_shepherd, kfree_rcu_monitor, xfrm_state_gc_task, key_garbage_collector, rht_deferred_worker
[  428.824435][    C0] workqueue events_long: flags=0x0
[  428.850406][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  428.850429][    C0]     pending: br_multicast_gc_work
[  428.850445][    C0] workqueue events_unbound: flags=0x2
[  428.868687][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5
[  428.868707][    C0]     in-flight: 43:linkwatch_event, 8:toggle_allocation_gate
[  428.868734][    C0]     pending: flush_memcg_stats_dwork
[  428.868751][    C0] workqueue events_power_efficient: flags=0x80
[  428.894944][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8
[  428.894966][    C0]     pending: neigh_managed_work, wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker, check_lifetime
[  428.917751][    C0] workqueue mm_percpu_wq: flags=0x8
[  428.922930][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  428.922953][    C0]     pending: vmstat_update
[  428.922970][    C0] workqueue writeback: flags=0x4a
[  428.940181][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/256 refcnt=7
[  428.940202][    C0]     pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn
[  428.940243][    C0] workqueue kblockd: flags=0x18
[  428.960396][    C0]   pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
[  428.960418][    C0]     pending: blk_mq_timeout_work
[  428.960436][    C0] workqueue usb_hub_wq: flags=0x4
[  428.978421][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  428.978442][    C0]     in-flight: 2617:hub_event hub_event
[  428.978472][    C0] workqueue dm_bufio_cache: flags=0x8
[  428.997132][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  428.997153][    C0]     pending: work_fn
[  428.997169][    C0] workqueue ipv6_addrconf: flags=0x40008
[  429.014454][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=7
[  429.014476][    C0]     pending: addrconf_verify_work
[  429.014490][    C0]     inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
[  429.014545][    C0] workqueue wg-kex-wg0: flags=0x6
[  429.045106][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.045127][    C0]     pending: wg_packet_handshake_send_worker
[  429.045144][    C0] workqueue wg-crypt-wg0: flags=0x28
[  429.063760][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.063795][    C0]     pending: wg_packet_encrypt_worker
[  429.063817][    C0] workqueue wg-kex-wg1: flags=0x6
[  429.081989][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.082011][    C0]     pending: wg_packet_handshake_send_worker
[  429.082030][    C0] workqueue wg-crypt-wg1: flags=0x28
[  429.100616][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.100638][    C0]     pending: wg_packet_encrypt_worker
[  429.100655][    C0] workqueue wg-kex-wg2: flags=0x6
[  429.118819][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.118839][    C0]     pending: wg_packet_handshake_send_worker
[  429.118857][    C0] workqueue wg-crypt-wg2: flags=0x28
[  429.137452][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.137477][    C0]     pending: wg_packet_encrypt_worker
[  429.137496][    C0] workqueue wg-kex-wg0: flags=0x6
[  429.155635][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.155655][    C0]     pending: wg_packet_handshake_send_worker
[  429.155672][    C0] workqueue wg-crypt-wg0: flags=0x28
[  429.174250][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.174272][    C0]     pending: wg_packet_encrypt_worker
[  429.174287][    C0] workqueue wg-kex-wg0: flags=0x6
[  429.192421][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.192440][    C0]     pending: wg_packet_handshake_send_worker
[  429.192457][    C0] workqueue wg-crypt-wg0: flags=0x28
[  429.211031][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.211053][    C0]     pending: wg_packet_encrypt_worker
[  429.211070][    C0] workqueue wg-kex-wg1: flags=0x6
[  429.229234][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.229256][    C0]     pending: wg_packet_handshake_send_worker
[  429.229274][    C0] workqueue wg-crypt-wg1: flags=0x28
[  429.247866][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.247889][    C0]     pending: wg_packet_encrypt_worker
[  429.247907][    C0] workqueue wg-crypt-wg1: flags=0x28
[  429.266313][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.266334][    C0]     pending: wg_packet_encrypt_worker
[  429.266350][    C0] workqueue wg-kex-wg2: flags=0x6
[  429.284477][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.284496][    C0]     pending: wg_packet_handshake_send_worker
[  429.284513][    C0] workqueue wg-crypt-wg2: flags=0x28
[  429.303623][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.303643][    C0]     pending: wg_packet_encrypt_worker
[  429.303660][    C0] workqueue wg-kex-wg2: flags=0x6
[  429.321806][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.321825][    C0]     pending: wg_packet_handshake_send_worker
[  429.321842][    C0] workqueue wg-crypt-wg2: flags=0x28
[  429.340422][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.340443][    C0]     pending: wg_packet_encrypt_worker
[  429.340472][    C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=216s workers=6 idle: 1603 2611 19 2616 2612
[  429.340509][    C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=216s workers=5 idle: 315 1726 10