last executing test programs:

1m35.017527279s ago: executing program 2 (id=526):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[], 0x41, 0x2f5, &(0x7f0000000b40)="$eJzs3E1rE10UwPGTNG3SlDZZPDygIr3oRjdDG/dCkBbEgFIb8QWEaTPRkDEJmVCJiI0rt34NQ5fdSEHrB+jGnSs34qYbwU1BaySZiZ20kzaNttOS/w/KPZ17T+blTsKZgZnNu6+f5LOWltUrEowoCYrUZFsk3owci+MiEpCAtJoRe2HEbmpyeez7p/NKRJKp1MycUrPJ+SsJpdTE5Lunz1curFfG7qxOrIVlI/5w81viy8b/G2c2f80/zlkqZ6lCsaJ0tVD8XNEXTENlclZeU+qWaeiWoXIFyyjb/cWKs1oplapKL2TGo6WyYVlKL1RV3qiqSlFVylWlP9JzBaVpmhqPyuDYmmw1pcPmpetzc3qyz5Uu9pmHf259395yuf3l+dDo7EnXj26bAADASdWu/8Pu+n+rs/4POG3QXf87alJr1v+3792/0UP9vzbSpf4v7qn/nesL6ejPmkXq/35F9i5K14f6r/9xSpRHReorsvONfvlgZaoVUP8DAAAAAAAAAAAAAAAAAAAAAHAabDUasUajEWu2QbHj5l/YeWCk/b/f24mj4Z5/e65DzVln/geE68G9iIj5aim9lLZbuz+ZlZyYYsiUxORn63xw2PHs9dRMQLXE5b257OQvL6WHOvOnJSZx7/xpO1915g9L1J2fkJj8552f8MwfkUsXXfmaxOTjohTFlEzrvN7JfzGt1LWbqV35o5LxeGIOAAAAAIDTSFN/eF6/a1q3fju/l/sDU57X5yE5G/J33wEAAAAAGBRW9VleN02jfGDwxsk4cPBXZ2DPn/y3wfAh9qLX4G0rCHT75MihDt0RBO13Mu87eNQZ1NHl3J5Z9nHj+w0mfVl7qHnSu5ZEuw6eGPI64PsFYeetzM0l241dY66unvvh3wE/1p8hAAAAAMdgp+j3e0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhcx/E6Mb/3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgcAAP//06IWPQ==")
syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000000)=ANY=[], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})

1m31.333248709s ago: executing program 2 (id=532):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)

1m31.280296229s ago: executing program 2 (id=534):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[], 0x41, 0x2f5, &(0x7f0000000b40)="$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")

1m30.368721891s ago: executing program 2 (id=538):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x249, &(0x7f00000001c0)="$eJzs3c9LFGEYB/BH3fzRZSWCIIIWIui0qNDdiAJJKpIljJDWXENcERKEPKidgk5dOnb0ZgR16Fb/Q9ClS3SJjnnrEE7oxLrmWhq5E+7nc9mHmee7884s+87uYd+9c2pmemJ2bnJt7XN0d7dFbvDeepK0RW+0R0eklgMAOEy+JUl8TVJZjwUAaA73fwBoPXu8/19v4pAAgAP299//n46++ViuDJ7fQ2vSVSs/jO1/jADAvzUyeuvK+tuzPUPx6knEzKP50nwpfUz3X5iMqahGJfoiH98jkpq0vjw0fKmvsKEnojSz9DO/NF/q2J7vj3z0Rty8ujPfX0htzx+Jo/X5gcjH8cbHH2iY74xzZ+ryxcjHu7sxG9WY2PhIUpdf7C8ULl4b/iXftdkXKx2Zvj4AAAAAAAAAAAAAAAAAAAAAABxOxUJNb6P1e4rF3fan+b2vD7S1Ps/jzXwuTubiYbZnDwAAAAAAAAAAAAAAAAAAAP+HuQcL0+VqtXK/VozfmDq2fcufirb9NCsWpjcu/AEe4nREHPRZvFytvF8Zuz2S/cVsYtH4qr7IfGDjv+lpj4jN4sSzwfLrxU9fdvbEct17OZfOC+Vqg8mi0OTJCQAAAAAAAAAAAAAAAAAAWszWz4B360iaOyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyMDW///vu+isbVntSZ9sl+Z05/NMzxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb2IwAA///U1qw1")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[], 0x118)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fspick(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000), 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0}, 0x50)
kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79"], 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x4bfb, &(0x7f0000000000))

1m28.814093295s ago: executing program 2 (id=543):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9000, 0x1002, 0x213, 0xd20d627af5cebe53, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x6, @value, @void, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180100"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$selinux_load(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8cff7ce9de2c0b3cb8d5b7e5c3ddf90800001d5345204c696e7578cdab9ed085eb8863aa992d3d35b385168e57f89a6503312db37562b5591523f47dfd90d66639c8b06bb946ee166afc019ef8d157015809da3e53d365941c01ac0c4d056c9cc42ca56033cc5f63ddaceccfb89db7dba7000000000000dd3fd981f11b898dbda0d2a2a7290b8ae289a4dff6ff5e1d9efb459fa4c2"], 0x10)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r7, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100001000000", @ANYRES32, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f00000002c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="173437fb50ec1e49fbfc9a345d7a0a7a7dbefebeac01b5397ffdf21cf931ebdc91bae19fc1f69b04bad56fbf649d3f2dd11de7b4a8e6e477ffbd106871318ded93bfe1b4e76abae30d3205ca4ab6d0ceeac04841e43f90c3400c3dc2eb9147c60d9b9db39036417a2de998760443456f7825a3d821f9dabd2809704ccc8aaee84db386b4cb1fd08fde6d5c65b698d6d61d66dd6e15f89b6cfa8e9201a96160c56ad45ca6cdba551c002c619d6e7183ae4cc4dcac0e24839bf7b7a7efe8b7b0a945091332115a669cb3ac9eae463971e68309bfe67c61d1832043b605b7b5bef8a82f7dd9af43e8cda32d288ce369fa528e60c0d37be53c5755b78f2772cccaa57c2f555851506a64623fa2308387062653a7455705c01181ad2ccfed8f42f06711091955ce9f4e5b199ede97c6ada20ce201f9d5a05faeb7951c3b02b837d13a3c7f71046abfa6f3643d0fc78048f6185009951ead155a0aa630982ad6513554d2a7161110323c7b2d87a61dd504692192d32a61252f0a8c93731d7f913fe2624bd1339fe6d19f0f2eccb6441c083cbf7519e0944939a3970083cbbcca3193e8eed6a025da7a1791339803383a544dd3b8cd36c456e638a3b0ee41e46aad192b5bba092407e4f94fe35ab3a4d70c56854bd034bb4990591b0350392b5e7e5ca61fa95ee65b22a24c8aa4ce87f9d928b2a54a839ee1ab99b8c24c63899913a77376fbfe3a9071cdd92e5505a872d41a2a80c51d9baf34ad8260a4da80d5893e0e35369d2b39e112e5f1454fb2e3f2e874ebff8acbdf0bba9809fa15f9c10ed91533a609efc0dca0b8192dc986843a4b2e6961aba49965796ea88fa4be0cff760d4c8704e50bcc5e56074065f6a5e1ccb312d166c312c56cbc7820a49f4fc1e0fadb7473ec57c033c4620233811dd16cb4803286dc86cb499ecd3f342876aaf5d07e56cec8ff041db1c9054e15729b007da9371785656a3d579e705beec9811b5a6f5681c6fb9760658c49644627b01d9251ff922a1de2a1215854a77f2e85f4a439d284ffda1920388860b5f0c43455790dfd1774dff68f9ddb1ca578e95a9f928701f1505837c89ae523ead1fb1dc1f33853a70c5f140cc590d645ee5f227e5f3494f82ef516d0602ffe5321ba466fc118f51d1a8d0a653228a74b0768a1ea90a468d8390fc8d95ec53187f863bb606776f47a84d4fc34f56fa9543b534edfc75dbfb9fdf403c9dcae4bbf27451325cab492df0aa61d4d0c83d72df4389649ddbc2b2635626121865b56b76a4df1cec3fcd549144c0577c8e19d04ebb9ee0ba833f136f09b2cbeaddcdd06b4706cc346da13757cdd5a0ec3e1622f2567a8efd225c04828b8a2e66bde448d31f333a3ad2e9ab7a6f50524f3d8aac9f5860a136863859e79fbbdf2d0ed0e98c3886b4469bd1966ce387eb120bb541c8021571d4350ad22f2eef787c236de55dfcc362e5760bdc6473690db79882607557e14491dae4177aff15963f01f447a1dfab6a8c930684f41be4e32d4b1682ab19f16ed8f6a76dc783d3057efd7f62f44e0915390db2706bae5a9819bab29ba210c0a2fd762752f0bf5a2d6624a7551c70f6d795f8d7a5a6931a1852a8189cc95b083215b0052bd18ebb8023f52d28a11e6200a34dc47f706401df92a81705079782707026a05c409f1ecbd91f6aa248826041d750adf96cf55159b673d809b12b3e67a10cedff981483cb016044658d406335c01a38c835aed255f5e8b82e4dcf3d42d7e21a2860e6629ca87f50c2ce6c7f3be939ae9612545455bbf1022360e6e7e3cc3c08ce265d256307b250a698f1b21d4c67a6733885d2c4f253292cd1e61e7919dade183c2df97f568c3ed6d2f059ca69a1c406c9591937abc44c6c4a9a2ee5ae19bb567295ade86ba346658eee6f490fa8c82ebbc6ecccd320c7c6e189f7f23da91cc785ff1ae4466bf95fab53ecefe672b0a818f1f026766399063b1ea8dcdadf385a94f800202b528d4aa86dc204539511e6d4b2250eb2ae69ddaf2b3d1b0ae9cb58106ce197bbf5c0869b334d98e7df6e48a990625e12c3a4be578d705cc7b34c3dc8ad31ff249b2fda8e026d9b02fa2ade9a09e964833ed313b916a4f10192dcac1e6bc0fabbab543ed32cec19829546bb6d213ddf1ab24faf8e5d5d29cf285d1dafd5103f2379c16d6a67b31c416d73608bfc0e11a11dd552fd1380bf4fa86c290eb2a43972e6ac0c3c1510495bf38648779c7048ace128ce3f43919040a1fbbba6852836468cbdc8a4c15e75818fb0283a0a80cff420f51e77a460437e0a8af74d9b4f68f0410615c3b4fcdd784985814afefcc27cc8dc7ea79ca87ebaca9a2ba73e883f287abb4ad5d679256fd1543c6679eb2d6b41d5385499dc9afb0b02d96aa7b7940c22115e2ba8306618cd6a36f66af4fb526e8172975be64b1f1f225ef803bdc882ca18c12f4e5506459f58f2d0e2c594973d27e9259644735b18160c5d558a1d59b06784322b17584ed6024d00203b63a2c2b06bc6559d5c4022f1874a7bed16ee85549821ee9f247a6d21ba02f13ec6b30b838298a8df54192f5d1b851fc70f71e5836293504940c9886091d7d1189a222b14f9db7967f83b761be73eda2918b80db3e73aae7f8ac9ef481e0ffadae43748a01ebf8ca51aa19a5dd6856f7d887254d78e1029c1acab248dc37d105031cc296de80bd23e06b85661b1af446e534eabafaf6f015712208ed15384b07623f364e6f5e504cc274f2b37d6d2146256d0b1a76426c3e2dc43c329bea057648ac4d3f902e813aa7e1f2584e026015f3b675bce3cd6843bccbdcfc74b40f82a342c1bd053dfc81b3fe58de9fdeae102f0e72477d056e79aa8186cfeeabe82644ccbb39e06af6f3622420a2e12b9f1b7e75963594baf13fe853bae7b9b27acca0fda9333ac15a23b56d7c6aaea5734f05361d2d601950643d25e33fde7157e745a4e55094c7948515ad3a6248f0d98cbc4358659e816b782ea9d722189086cb943db07ad323497d84ea3170ce7f3203a0e6e08b61a867298f68824fad9d283711ea657a7c4a190d90155174d8c862159c328682599fd2c2b9a0a3e9ee94e1f8d0b446779def30091a7c42c4a77e8bcf6bca0a12d9bc7337a5da70f4371e152d46687c5d01f18870760e6deca6759efb064cbdaf9ccc7e4f112c7a4b6cfdf22d3cc0433ca75d98f02f68757fb6e89d92742aee766a62a48fd8b1149ba5077d60e7e32bc6cdc7a337295a32b4669926626607eed11b9beefd54eefbc41148dbefd1a55eae5f0a7855f0d946e0d739ed5655cc9f35452ea7ab880f630b97bdd2cd9878099cbfb97e9799eea64405b4c9f8bce0ab5d93b6790a09030e5f334af38fc7e96f5e2204db413c31d9ef97bf4f58397c92f9fdf20d3cc42abc4c10fe921e6ed09e18b5ec365d6b215e5307ff99992f2f439ca4b24eae1a289c5b9156d9ebb7bfe3d620103652457102625ddc377383508f85eb48d628b6b970c3a5a72b3912e0550cfed187c5e2be7f4e5d8d15eeb46bb5f53e048da33b28564924787ba218c8e29b2f59ef5fbb979295656143d761277b3e339772091238568bb701ef00d2aa795dd4bbaf6603cb649208c74da2cef3fea2083905d0fc658dcd9e6c106f0eb4477f009dd596de474749c7725dcfa54661427bc74d3521cdd5ba95e7bc90991789a47242b05ba9e0ee03ea46ce01db0bc086a22d3228191fbe95efeeda0ec478198bc889aadb2e2aa6f08ad36672055d1e03191343c394f71893a2128cef56e2afccbb5715c2aa41956bf2844d98558bfefe31055073824f613dc45ee6de3d157fd7633837645c548be44b6be3952f0f2581588c8964fb1c941af2e4a7cbb033ca63a934c55b12e8293e43d7aacb1ff26bb6b565fb162e640d2deb85c426d81ae5313f57121eb88c9d2e11868d18d49f4b3c3b011ba9ff5e80802a4759148ba89f182d63a18c8554fcfd0942d15acaddbc521a48f2544173bf9bb01ef4940a4b50ff9391aa7cdf695133433d6816bbcc63e34b7eece7c25892b447b99f9a90e882089f13b87d9e974c8ca2327930bb878df40717d1890cbd7c930a67a6b5e406d18d4d45655c834bd4252e15514116b34a3527b786ffc929efb73866c23718640b7d0e9269349ddad8f0cd9069e2bcf517f5fb62029ed20e4d2d28c451e6105e28bdb8b09dea62299367f18e57a3bfe973138edd4341686bb3be2e3ffbaa7e9e6e478533cdc695d40c2bda423ce047422dc755b6708a85cf353a3dd6f6189cbe0b21a2ebc267388cb7152c851ef4561bb68ae38e062c4654e72f85ea7145d7b7756b4d7154601a01c0de5c62bbdd651b2e8a60048b5845f618a1a4357ce33a1fe9ba24a10dd512c1c21d29c60ca9ffc0418e042034e5a535b375acbedf80de9e67923c3bdda77e54eef8158b9101c20b27b6a0111dcab5f422048d91324cda34e562afb67ed554714f855a570a75a9e3a9dac7531662c1101972913e8560f55d324ad2fc4d65471173b62a9635687e79a687455bc78a0172956dd7892003f9469a8a37acbdac7fc0113773f6c62df1d0e5caebebd8b60921be8256cb9c1c1bd8743c9c38b8716c0e5b3e9195b101079da2885bc9f762beae67ae3e673192c3f70fe81f6a791acb1b3a27bf8a6e4ba49abc3d26f25f44b699c97b7413635c09d6f21ac21bf36381d139339a6880a055fc39cdf7d7d64f7dae1cb3c2042d6b10307ed7be265f9e406e355b794e009cd6a6d69f2020b73c3920efada2edede4c3e5f180e6163eed714264c5fb39d6b41f2adba39458e4dd06ffd5193f6ea01caa61245419429ea31fb2f22c475fecfd299787ffaaa20bc049140c00a34fec15c1fae33c6b71d0f5cc13445cb0f955412c58407dc9bfe40fbedac5bb6fca30c5510182459afdd966214efe37a051b9dc8b873ba1a20935ca69fb541b9f1aacab33c25e320f51475b01dd46ed98a70cb3cf650e9cf32337829b5bc693a454ccc965131ab01ac4fe943c969e343ea749ee87dbec0b4b22094b28184863ec10707eaacc5775edc3dcc26d4901ba09cbb622467de980f7065d5bce359067729612ff3fc444bf01c59e6c2489daf6f5fee575ae3ef8d38d2fb0e56d75a972316f679c5ae1c7788be287efc8f0361b32c1e243ff796fd50fed4285425971e9b06d7fad6c94952915e8b9fedfc7dd327bfa4b0538d8ec8458a49be49938549661c342261d1352aba0b8771d810b3135c7aff8ebd50289e75d9f56752b7f89f01a907934df94eb7db9a7666364add2da4600ccf3d078b72357b8c88e5a44528cc9d39d941170e9eb5820de8a3bb980af72a98f558edd9c258626b3096c1b50d72c1d07021001b0e09840887e930e11f02ad9bc4a430c9a5f0ce24e0007d20376be5faa4234226624b709ce880c3950bb5ab33d614f8f974360c57ae6e32ccb5786a6e7d2fbbbb985b9af77c969297322fc24971a9ce14c9f89f8275c1a8c37185e2790a86cbe26173e06497b00a89d68fda0bb0b37171eee6aea273d89916caa2f961eec1af29332f10350c4577b8d0c51300dd4aaa6628d00eb3836adfb7b9f36a9665c35b6b0aaaab743db53ce93cde5625f19ccf3b372cb58f4b13e70b8d423b493bcd0c78370fd9c8cc8b88f44842af144985ebb3780d69d846d6239c61248e61d7655f4ccd066f65be7404c719aebb5d0c72b9870948d63e1279e48ba24fe5fbf505071190796561b7f1cb07700d1825e335b517f7a9f7d50465858c981ba5b9f0d4bc651355de548704e050a", 0x1000}], 0x2, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [r8, r6, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r7, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r2, r5]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r5, r6, r3, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x40}}], 0x1, 0x0)
r9 = syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x10591, &(0x7f0000020bc0)="$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")
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
dup3(r9, r9, 0x0)

1m28.460040516s ago: executing program 2 (id=544):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)

1m27.847000208s ago: executing program 32 (id=544):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)

7.50839546s ago: executing program 5 (id=917):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000100), &(0x7f0000000280)='%-5lx  \x00'}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0)

7.3824961s ago: executing program 5 (id=919):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4aa, &(0x7f0000000100)="$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")

7.076027811s ago: executing program 5 (id=926):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)

6.903577491s ago: executing program 5 (id=931):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTdP96nQdjKE+SGGgk7l0bf0xwYf5KDoc6PsM7V0ZTZfRpGOtA7cH9+KLDEHEgfjkk+8+Dv8B/4qBDoaMog++VG5602Zr0mZdtmbm84HbnnPPTc89Ofd7em5OQgIYWGPZj0LEyxHxTRJxqKWsGHnh2NpxKw+uTWdbEqurn/6VRJLvax6f5L9H8sxLEfHbVxEnCpvrrS0tz5UrlXQhz4/X5y+P15aWT16cL8+ms+mlyamp029PTb737js9a+sb5/75/pM7H57++tjKd7/cO3wriTNxMC9rbccTuN6aGYux/DkZjjOPHDjRg8r6SbLbJ8CODOVxPhzZGHAohvKoB/7/voyIVWBAJeIfBlRzHtC8t+/RffBz4/4HazdAG+3/OS8prr02Evsa90YHVpKH7oyy+93RHtSf1fHrn7dvZVv07nUIgG1dvxERp4rFzeN/ko9/O3eqi2MercP4B8/OnWz+82a7+V9hff4TbeY/I21idye2j//CvR5U01E2/3u/7fx3fdFqdCjPvdCY8w0nFy5W0mxsezEijsfw3iy/1XrO6ZW7q53KWud/2ZbV35wL5udxr7j34cfMlOvlJ2lzq/s3Il4ptmt/st7/SZv+z56Pc13WcTS9/Wqnsu3b/3St/hTxetv+31jRSrZenxxvXA/jzatis79vHv29U/273f6s/w9s3f7RpHW9tvb4dfy479+0U9lOr/89yWeN9J5839Vyvb4wEbEn+Xjz/smNxzbzzeOz9h8/tvX41+763x8Rn3fZ/ptHbnY8tB/6f+ax+v/xE3c/+uKHTvV31/9vNVLH8z3djH/dnuCTPHcAAAAAAADQbwoRcTCSQmk9XSiUSmvv7zgSBwqVaq1+4kJ18dJMND4rOxrDheZK90jL+yEm8vfDNvOTj+SnIuJwRHw7tL+RL01XKzO73XgAAAAAAAAAAAAAAAAAAADoEyMdPv+f+WNot88OeOp85TcMrm3jvxff9AT0Jf//YXCJfxhc4h8Gl/iHwSX+YXCJfxhc4h8Gl/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2ra48uDad5WeuLC3OVa+cnElrc6X5xenSdHXhcmm2Wp2tpKXp6vx2f69SrV6emIzFq+P1tFYfry0tn5+vLl6qn784X55Nz6fDz6RVAAAAAAAAAAAAAAAAAAAA8HypLS3PlSuVdEHiuUi8FhF9cBotiWJ/nIZEjxO7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb/AgAA//84SzbQ")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]})
write$selinux_create(r0, &(0x7f00000008c0)=@objname={'system_u:object_r:auditd_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x80, 0x20, './file3\x00'}, 0x53)

6.519724732s ago: executing program 5 (id=941):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

6.329357403s ago: executing program 5 (id=950):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2, 0x0, 0x1}, 0x18)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000015000000540001800d0001"], 0x68}}, 0x0)

6.298622013s ago: executing program 33 (id=950):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2, 0x0, 0x1}, 0x18)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000015000000540001800d0001"], 0x68}}, 0x0)

1.557809246s ago: executing program 0 (id=1100):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)

1.516255245s ago: executing program 0 (id=1104):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0x4fed0)
sendfile(r0, r1, 0x0, 0x100001)

1.448867956s ago: executing program 1 (id=1106):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x0)

1.367879546s ago: executing program 1 (id=1111):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0)

1.351503416s ago: executing program 1 (id=1114):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)
unshare(0x8000000)
arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000300)={@empty, @multicast2, <r2=>0x0}, &(0x7f0000000340)=0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000003c0)={&(0x7f0000000380)=""/6, 0x6, <r3=>0x0, &(0x7f0000001740)=""/4096, 0x1000}}, 0x10)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2a400, 0x0)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x25, 0x32, 0x0, 0x1000d, 0xa, 0xbffe, 0x2})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r2, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
mknodat(r0, &(0x7f0000000280)='./file2\x00', 0x40, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
timerfd_create(0x1, 0x0)
timerfd_settime(r0, 0x6, &(0x7f0000000640)={{0x0, 0x3938700}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0, <r10=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000480), &(0x7f00000004c0)='%-010d \x00'}, 0x20)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x7}})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0xfffffff1, 0x4000000, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6f1dcc8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x40000, 0x0, 0x0, 0x101, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x1, 0x0, 0xb97, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0xb, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd79, 0x0, 0x4, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x80000001, 0xeffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfe}, 0x1}}]}}]}, 0x45c}}, 0x0)

1.075256417s ago: executing program 4 (id=1122):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getcwd(0x0, 0x0)

1.040196227s ago: executing program 0 (id=1125):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x18000, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64, @ANYRES16=0x0], 0x8, 0x306, &(0x7f0000002300)="$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")

987.972927ms ago: executing program 4 (id=1126):
unshare(0x2040400)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4, @void, @value}, 0x14)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1, @void, @value}, 0x11)

983.462227ms ago: executing program 4 (id=1129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x32a000, 0x800}, 0x20)

903.743517ms ago: executing program 4 (id=1133):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x39000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = memfd_create(&(0x7f0000000080), 0x0)
splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e)

903.692037ms ago: executing program 0 (id=1134):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

796.030777ms ago: executing program 0 (id=1138):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_nolock}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000300)='.\x00')
pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0\x00')

571.417548ms ago: executing program 0 (id=1148):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfb, "3bd4a1a19f1de9", ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2044015)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x7c, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6})

403.321789ms ago: executing program 6 (id=1153):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

395.497939ms ago: executing program 1 (id=1154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
close(r2)

220.054029ms ago: executing program 6 (id=1155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c00078008001240000a0000050005000a000000050004000000000012000300686173683a6e65742c706f7274"], 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0)

219.771179ms ago: executing program 6 (id=1157):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='./bus/file0\x00', 0x0)
renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x0)

196.332999ms ago: executing program 3 (id=1159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
r3 = gettid()
rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000))

145.706239ms ago: executing program 3 (id=1160):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)

145.591369ms ago: executing program 3 (id=1161):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

145.130779ms ago: executing program 6 (id=1162):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, r0, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r3)

97.964179ms ago: executing program 1 (id=1163):
unshare(0x22020600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pwritev(r0, 0x0, 0x0, 0x0, 0x5)

97.786759ms ago: executing program 3 (id=1164):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3eae1bf8744a474, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r1)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20)

97.655ms ago: executing program 1 (id=1165):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$eJzs3c9vHFcdAPDvjH+sm6ZxAj1ABSRAIaAou/Gmjape2lxAqKqEqDggDqmxN5bJbjZk16U2kXD/hiKBxAn+BA5IHJB64sCNIxIHhFQOSAEsUIwE0qKZHf+ovcaLd73bej8faTLz5s3M973Ys+/t2/W8ACbWlYjYjIjZiHgzIuaL/UmxxKvdJTvuydajpe2tR0tJdDpv/C3J87N9+QmlvWs+XVxzLiK+8dWI7ySH47bWN+4t1uu1h0W60m48qLTWN66vNhZXaiu1+9XqrYVbN166+WJ1aHW93PjF46+svvbNX//q0+//bvPLP8iKdb7I263HkHWrPrMbJzMdEa+dRrAxmCrWs2MuByeTRsTHIuJz+f0/H1P5bycAcJZ1OvPRmd+fBgDOujQfA0vSckSkadEJKHfH8J6Nc2m92Wpfu9tcu7/cHSu7GDPp3dV67cal0h++lx88k2TphTwvz8/T1QPpmxFxKSJ+VHoqT5eXmvXl8XR5AGDiPb2//Y+If5bStFzu69Qen+oBAB8Zc+MuAAAwctp/AJg82n8AmDx9tP/Fh/2bp14WAGA0/r/3/xdOrRwAwOgY/weAyaP9B4CJ8vXXX8+Wznbx/Ovlt9bX7jXfur5ca90rN9aWykvNhw/KK83mSv7MnsZx16s3mw8WXoi1tyvtWqtdaa1v3Gk01+637+TP9b5TmxlJrQCA/+XS5fd+n0TE5stP5Uvsm8tBWw1nWzruAgBjMzXIyToI8JFmti+YXH014Xkn4benXhZgPHo+zHuu5+YH/aS7erefIL5nBB8qVz/Z//i/OZ7hbDH+D5PrZOP/rwy9HMDoGf+HydXpJAfn/J/dzQIAzqQBvsLX+eGwOiHAWB03mfdxn/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJDofEd+NJC3nc4Gn2b9puRzxTERcjJnk7mq9diMiLsTliJgpZemFcRcaABhQ+pekmP/r6vzz5w/mzib/KuXriPj+T9/48duL7fbDhWz/33f3l3amD6vunTfAvIIAwJDl7Xe1WO97I/9k69HSzjLK8jy+Hf8ppiJe2t56lC/dnOnIdkbM5X2Jc/9IYro4Zy4inouIqSHE33wnIj7Rq/5JPjZysZj5dH/8KGI/M9L46Qfip3led511vj4+hLLApHnvdkS82uv+S+NKvu59/8/lr1CDe3y7e7Gd177tffGni0hTPeJn9/yVfmO88JuvHdrZme/mvRPx3HSv+Mlu/OSI+M/3Gf+Pn/rMu68ckdf5WcTV6B1/f6xKu/Gg0lrfuL7aWFyprdTuV6u3Fm7deOnmi9VKPkZd2RmpPuyvL1+7cFTZsvqfOyL+XM/6z+6e+4U+6//zf7/57c/uJUsH43/p871//s/2jN+VtYlf7DP+4rlfHjl9dxZ/+Yj6H/fzv9Zn/Pf/vLHc56EAwAi01jfuLdbrtYcDbWTvQodxnUMbWRH7O3inuzhY0D/FadTihBszp/W/euob07t9xeFe+VvZFXtkpX3+kpxkIx16LQbaeDKqWON7TQJGY++mH3dJAAAAAAAAAAAAAACAo4ziT5fGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrv8GAAD//xxkzKw=")
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0x9, 0xf8, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x5, 0x17, 0x32, 0x80, 0x0, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x443}}]}, 0x38}}, 0x2000)

97.44103ms ago: executing program 6 (id=1166):
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8)
dup2(r1, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)

28.059229ms ago: executing program 3 (id=1167):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, 0x0}, 0x7e88}], 0x1, 0x40000021, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

27.94912ms ago: executing program 4 (id=1168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0)
syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0)

24.86666ms ago: executing program 4 (id=1169):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0)

13.2784ms ago: executing program 6 (id=1170):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
utime(0x0, 0x0)

0s ago: executing program 3 (id=1171):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
unshare(0x2a020400)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='fib_table_lookup\x00', r1}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r2, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x8, 0x0, 0x0}}, 0x10)

kernel console output (not intermixed with test programs):

24][ T2080] loop1: detected capacity change from 0 to 131072
[  180.833885][ T2080] F2FS-fs (loop1): Test dummy encryption mode enabled
[  180.851849][ T2080] F2FS-fs (loop1): invalid crc value
[  180.858879][  T318] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  180.868021][ T2080] F2FS-fs (loop1): Found nat_bits in checkpoint
[  180.911761][ T2080] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  180.938822][ T1307] Bluetooth: hci0: command 0x1003 tx timeout
[  180.947961][ T1416] Bluetooth: hci0: sending frame failed (-49)
[  180.999969][ T2100] loop4: detected capacity change from 0 to 1024
[  181.170293][  T318] usb 1-1: device descriptor read/64, error -71
[  181.283605][ T2102] netlink: 'syz.4.416': attribute type 4 has an invalid length.
[  181.323632][ T2102] netlink: 'syz.4.416': attribute type 4 has an invalid length.
[  181.674242][   T30] audit: type=1400 audit(1733892381.380:307): avc:  denied  { create } for  pid=2104 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  181.693949][   T30] audit: type=1400 audit(1733892381.400:308): avc:  denied  { write } for  pid=2104 comm="syz.4.418" path="socket:[20755]" dev="sockfs" ino=20755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  182.136259][  T318] usb 1-1: device descriptor read/64, error -71
[  182.226382][ T2108] loop1: detected capacity change from 0 to 40427
[  182.253192][ T2108] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  182.259906][ T2108] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  182.270606][ T2108] F2FS-fs (loop1): Found nat_bits in checkpoint
[  182.282833][  T297] usb 3-1: USB disconnect, device number 11
[  182.314126][ T2108] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  182.321116][ T2108] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  182.336968][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  182.336982][   T30] audit: type=1400 audit(1733892382.040:311): avc:  denied  { append } for  pid=2107 comm="syz.1.417" path="/77/file2/memory.events.local" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  182.428790][  T318] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  182.456751][ T2108] attempt to access beyond end of device
[  182.456751][ T2108] loop1: rw=2049, want=55304, limit=40427
[  182.472228][ T2108] attempt to access beyond end of device
[  182.472228][ T2108] loop1: rw=2049, want=57344, limit=40427
[  182.491159][ T2108] attempt to access beyond end of device
[  182.491159][ T2108] loop1: rw=2049, want=53232, limit=40427
[  182.734238][ T2108] attempt to access beyond end of device
[  182.734238][ T2108] loop1: rw=2049, want=53248, limit=40427
[  182.871839][ T2108] attempt to access beyond end of device
[  182.871839][ T2108] loop1: rw=2049, want=64048, limit=40427
[  182.883416][ T2120] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  182.883986][ T2118] attempt to access beyond end of device
[  182.883986][ T2118] loop1: rw=524288, want=53504, limit=40427
[  182.904853][ T2118] attempt to access beyond end of device
[  182.904853][ T2118] loop1: rw=0, want=53256, limit=40427
[  182.905963][ T2120] SELinux: failed to load policy
[  182.916095][ T2118] attempt to access beyond end of device
[  182.916095][ T2118] loop1: rw=0, want=53256, limit=40427
[  182.931572][ T2118] attempt to access beyond end of device
[  182.931572][ T2118] loop1: rw=0, want=53256, limit=40427
[  182.942508][ T2118] attempt to access beyond end of device
[  182.942508][ T2118] loop1: rw=0, want=53256, limit=40427
[  183.002088][ T2123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.420'.
[  183.034806][  T524] Bluetooth: hci0: command 0x1001 tx timeout
[  183.041643][ T1416] Bluetooth: hci0: sending frame failed (-49)
[  183.157971][ T2126] netlink: 'syz.0.421': attribute type 2 has an invalid length.
[  183.165615][ T2126] netlink: 9 bytes leftover after parsing attributes in process `syz.0.421'.
[  183.409859][ T2128] xt_hashlimit: size too large, truncated to 1048576
[  183.538802][  T778] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  184.348853][  T778] usb 5-1: Using ep0 maxpacket: 32
[  184.508339][ T2145] netlink: 'syz.2.425': attribute type 2 has an invalid length.
[  184.515904][ T2145] netlink: 9 bytes leftover after parsing attributes in process `syz.2.425'.
[  184.735727][ T2144] loop1: detected capacity change from 0 to 40427
[  184.748850][  T778] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  184.947825][ T2144] F2FS-fs (loop1): invalid crc value
[  184.962177][ T2144] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  185.001124][  T778] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.011969][  T778] usb 5-1: config 0 has no interfaces?
[  185.017239][  T778] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  185.025028][ T2144] F2FS-fs (loop1): Start checkpoint disabled!
[  185.026470][  T778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.038949][ T2144] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  185.040703][  T778] usb 5-1: config 0 descriptor??
[  185.068868][   T30] audit: type=1400 audit(1733892384.770:312): avc:  denied  { create } for  pid=2143 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  185.088272][   T30] audit: type=1400 audit(1733892384.780:313): avc:  denied  { setopt } for  pid=2143 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  185.108854][   T39] Bluetooth: hci0: command 0x1009 tx timeout
[  185.123484][   T30] audit: type=1400 audit(1733892384.830:314): avc:  denied  { ioctl } for  pid=2143 comm="syz.1.426" path="socket:[20813]" dev="sockfs" ino=20813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  185.181055][   T30] audit: type=1400 audit(1733892384.830:315): avc:  denied  { write } for  pid=2143 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  185.369112][ T2156] loop2: detected capacity change from 0 to 128
[  185.394965][ T2158] netlink: 876 bytes leftover after parsing attributes in process `syz.1.429'.
[  185.404093][ T2158] netlink: 876 bytes leftover after parsing attributes in process `syz.1.429'.
[  185.417514][   T30] audit: type=1326 audit(1733892385.120:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  185.442260][ T2156] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  185.499814][ T2156] FAT-fs (loop2): FAT read failed (blocknr 128)
[  185.519539][   T30] audit: type=1326 audit(1733892385.150:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  185.522466][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'.
[  185.551923][   T30] audit: type=1326 audit(1733892385.150:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  185.576606][   T30] audit: type=1326 audit(1733892385.150:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  185.603870][   T30] audit: type=1326 audit(1733892385.150:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  185.631659][ T2163] loop1: detected capacity change from 0 to 1024
[  185.782930][ T2168] loop0: detected capacity change from 0 to 128
[  185.848596][ T2168] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  185.956739][ T2170] netlink: 'syz.1.431': attribute type 4 has an invalid length.
[  185.987741][ T2170] netlink: 'syz.1.431': attribute type 4 has an invalid length.
[  186.012171][ T2120] loop4: detected capacity change from 0 to 131072
[  186.041217][ T2120] F2FS-fs (loop4): invalid crc value
[  186.117750][ T2120] F2FS-fs (loop4): Found nat_bits in checkpoint
[  186.165829][ T2175] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  186.201051][ T2175] SELinux: failed to load policy
[  186.219270][ T2120] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  186.232819][ T2120] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  186.318874][  T778] usb 5-1: string descriptor 0 read error: -71
[  186.325785][  T778] usb 5-1: USB disconnect, device number 16
[  186.511488][ T2183] netlink: 'syz.1.435': attribute type 2 has an invalid length.
[  186.519006][ T2183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.435'.
[  186.768900][  T297] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  186.792477][ T2185] loop0: detected capacity change from 0 to 128
[  186.802084][ T2185] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  186.966195][ T2189] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  186.976346][ T2189] SELinux: failed to load policy
[  187.028809][  T297] usb 3-1: Using ep0 maxpacket: 32
[  187.033390][ T2190] netlink: 48 bytes leftover after parsing attributes in process `syz.0.438'.
[  187.148840][  T297] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  187.157184][  T297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.167958][  T297] usb 3-1: config 0 has no interfaces?
[  187.173737][  T297] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  187.183035][  T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.195390][  T297] usb 3-1: config 0 descriptor??
[  187.252226][ T2195] overlayfs: missing 'lowerdir'
[  187.372984][ T1317] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  187.657570][ T2199] loop4: detected capacity change from 0 to 256
[  187.730166][ T2199] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  187.991059][ T1317] usb 1-1: Using ep0 maxpacket: 32
[  188.411021][ T2204] netlink: 'syz.1.441': attribute type 2 has an invalid length.
[  188.418541][ T2204] netlink: 9 bytes leftover after parsing attributes in process `syz.1.441'.
[  188.771028][ T1317] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  188.779519][ T1317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.791382][ T1317] usb 1-1: config 0 has no interfaces?
[  188.796851][ T1317] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  188.805753][ T1317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.814208][ T1317] usb 1-1: config 0 descriptor??
[  189.272987][ T2210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'.
[  189.329661][ T1051] usb 3-1: USB disconnect, device number 12
[  189.411686][ T2215] loop2: detected capacity change from 0 to 1024
[  189.598353][ T2220] loop3: detected capacity change from 0 to 128
[  189.699203][ T2220] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  189.835802][ T2225] netlink: 'syz.2.445': attribute type 4 has an invalid length.
[  189.877941][ T2225] netlink: 'syz.2.445': attribute type 4 has an invalid length.
[  190.368522][ T2230] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  190.432450][ T2230] SELinux: failed to load policy
[  190.485011][ T2230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.449'.
[  190.723402][ T2235] loop2: detected capacity change from 0 to 128
[  190.790822][ T2235] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  190.848890][  T318] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  190.868876][ T1317] usb 1-1: string descriptor 0 read error: -71
[  190.878893][ T1317] usb 1-1: USB disconnect, device number 16
[  190.901789][ T2242] overlayfs: missing 'lowerdir'
[  191.258634][ T2244] loop0: detected capacity change from 0 to 256
[  191.300580][ T2244] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  191.656630][ T2247] loop3: detected capacity change from 0 to 256
[  191.674082][  T318] usb 2-1: Using ep0 maxpacket: 32
[  192.759994][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  192.760020][   T30] audit: type=1400 audit(1733892392.460:348): avc:  denied  { write } for  pid=2238 comm="syz.3.451" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  192.869060][   T30] audit: type=1400 audit(1733892392.460:349): avc:  denied  { add_name } for  pid=2238 comm="syz.3.451" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  192.889456][   T30] audit: type=1400 audit(1733892392.470:350): avc:  denied  { associate } for  pid=2238 comm="syz.3.451" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  192.942114][   T30] audit: type=1400 audit(1733892392.500:351): avc:  denied  { write open } for  pid=2238 comm="syz.3.451" path="/90/file0/bus" dev="loop3" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  193.211673][ T2254] loop2: detected capacity change from 0 to 256
[  193.229171][  T318] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  193.250227][  T318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.531970][ T2252] netlink: 88 bytes leftover after parsing attributes in process `syz.0.454'.
[  193.537097][  T318] usb 2-1: config 0 has no interfaces?
[  193.549342][  T318] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  193.558486][  T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.567350][  T318] usb 2-1: config 0 descriptor??
[  193.598868][  T318] usb 2-1: can't set config #0, error -71
[  193.612887][  T318] usb 2-1: USB disconnect, device number 18
[  193.636065][ T2256] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  193.647458][ T2256] SELinux: failed to load policy
[  193.889195][ T2263] netlink: 48 bytes leftover after parsing attributes in process `syz.4.456'.
[  193.937696][ T2265] loop1: detected capacity change from 0 to 1024
[  193.968649][ T2267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'.
[  194.020875][ T2270] loop3: detected capacity change from 0 to 1024
[  194.595352][ T1051] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  195.100885][ T2275] netlink: 'syz.3.460': attribute type 4 has an invalid length.
[  195.217775][ T2275] netlink: 'syz.3.460': attribute type 4 has an invalid length.
[  195.632795][ T2281] loop2: detected capacity change from 0 to 128
[  195.706803][ T1051] usb 5-1: Using ep0 maxpacket: 32
[  195.723540][ T2281] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  195.833466][ T1051] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  195.842144][ T1051] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.878894][ T1051] usb 5-1: config 0 has no interfaces?
[  195.905907][ T1051] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  195.996212][ T1051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.018441][ T1051] usb 5-1: config 0 descriptor??
[  196.187575][ T2291] loop0: detected capacity change from 0 to 1024
[  197.952377][ T2296] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  198.055124][ T1226] Bluetooth: hci0: Frame reassembly failed (-84)
[  198.117558][ T2309] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  198.127730][ T2309] SELinux: failed to load policy
[  198.188857][ T1051] usb 5-1: string descriptor 0 read error: -71
[  198.190156][ T2312] netlink: 48 bytes leftover after parsing attributes in process `syz.1.467'.
[  198.195591][ T1051] usb 5-1: USB disconnect, device number 17
[  198.967251][ T2318] loop4: detected capacity change from 0 to 1024
[  199.118834][  T778] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  199.277506][ T2324] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  199.307636][   T45] Bluetooth: hci1: Frame reassembly failed (-84)
[  199.762033][ T2323] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  199.880662][ T2332] overlayfs: missing 'lowerdir'
[  199.960919][  T778] usb 2-1: Using ep0 maxpacket: 32
[  199.978976][ T1051] Bluetooth: hci0: command 0x1003 tx timeout
[  199.984951][ T2326] Bluetooth: hci0: sending frame failed (-49)
[  200.972169][ T2338] loop4: detected capacity change from 0 to 256
[  201.031127][ T2337] loop2: detected capacity change from 0 to 256
[  205.185925][ T1307] Bluetooth: hci0: command 0x1001 tx timeout
[  205.194660][ T2326] Bluetooth: hci0: sending frame failed (-49)
[  205.269573][ T2343] loop1: detected capacity change from 0 to 1024
[  205.319708][ T2345] loop2: detected capacity change from 0 to 1024
[  205.368787][  T318] Bluetooth: hci1: command 0x1003 tx timeout
[  205.381061][ T2326] Bluetooth: hci1: sending frame failed (-49)
[  205.408854][  T778] usb 2-1: unable to read config index 0 descriptor/start: -71
[  205.416307][  T778] usb 2-1: can't read configurations, error -71
[  205.443805][ T2348] loop4: detected capacity change from 0 to 1024
[  205.485520][ T2346] netlink: 'syz.1.476': attribute type 4 has an invalid length.
[  205.495235][ T2346] netlink: 'syz.1.476': attribute type 4 has an invalid length.
[  205.981431][ T2349] netlink: 'syz.2.477': attribute type 4 has an invalid length.
[  205.992116][ T2349] netlink: 'syz.2.477': attribute type 4 has an invalid length.
[  206.645432][ T2357] xt_hashlimit: size too large, truncated to 1048576
[  206.674528][   T30] audit: type=1400 audit(1733892406.380:352): avc:  denied  { read } for  pid=2358 comm="syz.1.480" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  206.709612][ T2359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  206.769095][   T30] audit: type=1400 audit(1733892406.420:353): avc:  denied  { open } for  pid=2358 comm="syz.1.480" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  206.865254][   T30] audit: type=1400 audit(1733892406.420:354): avc:  denied  { ioctl } for  pid=2358 comm="syz.1.480" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  206.931050][ T2370] overlayfs: missing 'lowerdir'
[  207.177990][ T2372] loop4: detected capacity change from 0 to 256
[  207.189378][   T30] audit: type=1400 audit(1733892406.550:355): avc:  denied  { write } for  pid=2358 comm="syz.1.480" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  207.270903][ T1307] Bluetooth: hci0: command 0x1009 tx timeout
[  207.418815][  T778] Bluetooth: hci1: command 0x1001 tx timeout
[  207.435349][ T2326] Bluetooth: hci1: sending frame failed (-49)
[  208.714210][ T2386] loop2: detected capacity change from 0 to 256
[  208.945359][ T2388] loop3: detected capacity change from 0 to 256
[  209.040192][  T778] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  209.253335][ T2392] loop4: detected capacity change from 0 to 1024
[  209.508856][ T1317] Bluetooth: hci1: command 0x1009 tx timeout
[  209.515374][ T2394] netlink: 'syz.4.485': attribute type 4 has an invalid length.
[  209.524809][ T2394] netlink: 'syz.4.485': attribute type 4 has an invalid length.
[  209.532884][ T2398] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  209.617294][ T2399] netlink: 'syz.2.487': attribute type 2 has an invalid length.
[  209.624828][ T2399] netlink: 9 bytes leftover after parsing attributes in process `syz.2.487'.
[  209.802986][ T2398] SELinux: failed to load policy
[  209.854803][  T778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.868648][  T778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.878247][  T778] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  209.885451][ T2401] netlink: 48 bytes leftover after parsing attributes in process `syz.3.488'.
[  209.887104][  T778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.935626][  T778] usb 2-1: config 0 descriptor??
[  211.122374][  T780] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  212.428317][ T2418] loop0: detected capacity change from 0 to 256
[  213.221709][  T778] usbhid 2-1:0.0: can't add hid device: -71
[  213.227512][  T778] usbhid: probe of 2-1:0.0 failed with error -71
[  213.237495][ T2430] netlink: 88 bytes leftover after parsing attributes in process `syz.4.493'.
[  213.580362][ T2432] loop2: detected capacity change from 0 to 256
[  213.591226][  T778] usb 2-1: USB disconnect, device number 21
[  213.601405][ T2434] loop1: detected capacity change from 0 to 256
[  213.672197][ T2423] netlink: 88 bytes leftover after parsing attributes in process `syz.3.497'.
[  214.894937][ T2451] loop1: detected capacity change from 0 to 256
[  216.214311][ T2467] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  216.288939][ T2467] SELinux: failed to load policy
[  216.416151][ T2470] netlink: 48 bytes leftover after parsing attributes in process `syz.3.505'.
[  216.585818][ T2465] loop2: detected capacity change from 0 to 128
[  216.662377][ T2465] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  216.724468][ T2476] loop0: detected capacity change from 0 to 256
[  216.749467][ T2476] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  216.798793][  T549] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  216.977868][   T30] audit: type=1326 audit(1733892416.680:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.001349][   T30] audit: type=1326 audit(1733892416.680:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.009363][  T524] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  217.033590][   T30] audit: type=1326 audit(1733892416.680:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.147226][  T549] usb 4-1: Using ep0 maxpacket: 32
[  217.156394][   T30] audit: type=1326 audit(1733892416.680:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.218084][ T2482] loop4: detected capacity change from 0 to 1024
[  217.227379][   T30] audit: type=1326 audit(1733892416.680:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.251297][   T30] audit: type=1326 audit(1733892416.680:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.274717][   T30] audit: type=1326 audit(1733892416.680:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.305248][  T549] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  217.313565][   T30] audit: type=1326 audit(1733892416.680:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.336700][  T549] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.347073][  T549] usb 4-1: config 0 has no interfaces?
[  217.352411][  T549] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  217.362958][   T30] audit: type=1326 audit(1733892416.680:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.386347][  T549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.471445][  T524] usb 3-1: device descriptor read/64, error -71
[  217.488610][  T549] usb 4-1: config 0 descriptor??
[  217.497107][   T30] audit: type=1326 audit(1733892416.680:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2477 comm="syz.1.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  217.523722][ T2483] netlink: 'syz.4.508': attribute type 4 has an invalid length.
[  217.533475][ T2483] netlink: 'syz.4.508': attribute type 4 has an invalid length.
[  219.391032][ T2499] loop1: detected capacity change from 0 to 256
[  219.588149][ T2501] loop0: detected capacity change from 0 to 256
[  219.924950][ T2503] overlayfs: missing 'workdir'
[  220.038866][  T549] usb 4-1: string descriptor 0 read error: -71
[  220.048878][  T549] usb 4-1: USB disconnect, device number 10
[  220.377314][ T2508] loop4: detected capacity change from 0 to 256
[  220.740228][ T2508] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  221.402461][ T2511] loop2: detected capacity change from 0 to 256
[  222.926688][ T2517] loop4: detected capacity change from 0 to 128
[  223.169227][ T2517] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  223.203917][ T2531] xt_hashlimit: size too large, truncated to 1048576
[  223.218271][ T2533] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  223.248802][ T2533] SELinux: failed to load policy
[  223.352769][ T2538] netlink: 48 bytes leftover after parsing attributes in process `syz.0.521'.
[  223.573725][ T2542] netlink: 'syz.2.519': attribute type 2 has an invalid length.
[  223.581298][ T2542] netlink: 9 bytes leftover after parsing attributes in process `syz.2.519'.
[  223.841881][ T2547] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  223.852357][ T2547] SELinux: failed to load policy
[  223.888795][  T778] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  223.909309][ T2548] netlink: 48 bytes leftover after parsing attributes in process `syz.4.524'.
[  224.178775][  T778] usb 1-1: Using ep0 maxpacket: 32
[  224.437948][ T2556] loop1: detected capacity change from 0 to 256
[  224.448954][  T778] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  224.484026][  T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.615991][  T778] usb 1-1: config 0 has no interfaces?
[  224.653226][  T778] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  224.707690][  T778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.728506][  T778] usb 1-1: config 0 descriptor??
[  224.758816][  T549] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  224.810101][ T2557] loop2: detected capacity change from 0 to 128
[  224.825442][ T2560] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  224.835568][ T2560] SELinux: failed to load policy
[  224.849457][ T2557] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  224.893339][ T2561] netlink: 48 bytes leftover after parsing attributes in process `syz.3.527'.
[  224.998872][  T549] usb 5-1: Using ep0 maxpacket: 32
[  225.118881][  T549] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  225.128803][ T1307] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  225.138123][  T549] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.158632][  T549] usb 5-1: config 0 has no interfaces?
[  225.168797][  T318] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  225.172892][  T549] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  225.195429][  T549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.215853][  T549] usb 5-1: config 0 descriptor??
[  225.252691][ T2564] netlink: 88 bytes leftover after parsing attributes in process `syz.1.528'.
[  225.408788][ T1307] usb 3-1: device descriptor read/64, error -71
[  225.438773][  T318] usb 4-1: Using ep0 maxpacket: 32
[  225.584034][ T2533] loop0: detected capacity change from 0 to 131072
[  225.588883][  T318] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  225.598651][  T318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.609350][  T318] usb 4-1: config 0 has no interfaces?
[  225.614655][  T318] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  225.633815][  T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.646102][ T2533] F2FS-fs (loop0): invalid crc value
[  225.657613][  T318] usb 4-1: config 0 descriptor??
[  225.682486][ T2533] F2FS-fs (loop0): Found nat_bits in checkpoint
[  225.755832][ T2533] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  225.772324][ T2533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  225.798902][ T1307] usb 3-1: device descriptor read/64, error -71
[  225.916313][ T2564] loop1: detected capacity change from 0 to 131072
[  225.958898][  T778] usb 1-1: string descriptor 0 read error: -71
[  225.967415][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  225.967430][   T30] audit: type=1400 audit(1733892425.670:388): avc:  denied  { unlink } for  pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  225.973452][  T778] usb 1-1: USB disconnect, device number 17
[  226.001638][ T2564] F2FS-fs (loop1): Test dummy encryption mode enabled
[  226.016174][ T2564] F2FS-fs (loop1): invalid crc value
[  226.060348][ T2564] F2FS-fs (loop1): Found nat_bits in checkpoint
[  226.078802][ T1307] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  226.118624][ T2564] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  226.230517][ T2566] loop4: detected capacity change from 0 to 131072
[  226.265641][ T2566] F2FS-fs (loop4): invalid crc value
[  226.295879][ T2566] F2FS-fs (loop4): Found nat_bits in checkpoint
[  226.348810][ T1307] usb 3-1: device descriptor read/64, error -71
[  226.381641][ T2566] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  226.408815][ T2566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  226.709280][ T2560] loop3: detected capacity change from 0 to 131072
[  226.738833][ T1307] usb 3-1: device descriptor read/64, error -71
[  226.750392][ T2560] F2FS-fs (loop3): invalid crc value
[  226.842231][ T2560] F2FS-fs (loop3): Found nat_bits in checkpoint
[  226.859277][ T1307] usb usb3-port1: attempt power cycle
[  227.015978][ T2560] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  227.094982][ T2560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  227.308971][  T318] usb 4-1: string descriptor 0 read error: -71
[  227.525770][ T2594] loop1: detected capacity change from 0 to 256
[  227.532974][ T1307] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  227.536811][  T318] usb 4-1: USB disconnect, device number 11
[  227.892450][ T2597] netlink: 88 bytes leftover after parsing attributes in process `syz.0.531'.
[  227.928816][  T549] usb 5-1: string descriptor 0 read error: -71
[  227.939290][  T549] usb 5-1: USB disconnect, device number 18
[  228.218130][ T2603] loop2: detected capacity change from 0 to 128
[  228.260906][ T2603] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  228.358785][ T1307] usb 3-1: device not accepting address 16, error -71
[  228.932274][ T2616] loop2: detected capacity change from 0 to 256
[  228.974741][ T2616] FAT-fs (loop2): Directory bread(block 64) failed
[  228.990512][ T2616] FAT-fs (loop2): Directory bread(block 65) failed
[  229.016607][ T2616] FAT-fs (loop2): Directory bread(block 66) failed
[  229.027597][ T2617] loop1: detected capacity change from 0 to 256
[  229.033821][ T2616] FAT-fs (loop2): Directory bread(block 67) failed
[  229.045490][ T2616] FAT-fs (loop2): Directory bread(block 68) failed
[  229.058840][ T2616] FAT-fs (loop2): Directory bread(block 69) failed
[  229.074930][ T2616] FAT-fs (loop2): Directory bread(block 70) failed
[  229.368877][ T2619] netlink: 'syz.3.536': attribute type 2 has an invalid length.
[  229.376455][ T2619] netlink: 9 bytes leftover after parsing attributes in process `syz.3.536'.
[  229.385939][ T2617] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  229.393587][ T2616] FAT-fs (loop2): Directory bread(block 71) failed
[  229.409164][ T2616] FAT-fs (loop2): Directory bread(block 72) failed
[  229.424276][ T2616] FAT-fs (loop2): Directory bread(block 73) failed
[  229.574995][ T2596] loop0: detected capacity change from 0 to 131072
[  229.583852][ T2622] netlink: 88 bytes leftover after parsing attributes in process `syz.4.539'.
[  229.612646][ T2596] F2FS-fs (loop0): Test dummy encryption mode enabled
[  229.629150][ T2596] F2FS-fs (loop0): invalid crc value
[  229.635819][ T2596] F2FS-fs (loop0): Found nat_bits in checkpoint
[  229.686641][ T2596] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  230.325261][   T30] audit: type=1326 audit(1733892430.030:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  230.394824][   T30] audit: type=1326 audit(1733892430.070:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  230.434676][  T291] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  230.447501][   T30] audit: type=1326 audit(1733892430.070:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  230.468904][  T291] FAT-fs (loop2): Filesystem has been set read-only
[  230.477099][  T291] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  230.531840][   T30] audit: type=1326 audit(1733892430.070:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  230.578973][   T30] audit: type=1326 audit(1733892430.070:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  230.647566][   T30] audit: type=1326 audit(1733892430.070:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  230.748715][   T30] audit: type=1326 audit(1733892430.070:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  230.828668][   T30] audit: type=1326 audit(1733892430.070:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.122386][ T2641] loop3: detected capacity change from 0 to 256
[  231.267327][   T30] audit: type=1326 audit(1733892430.070:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.372689][   T30] audit: type=1326 audit(1733892430.070:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.400411][   T30] audit: type=1326 audit(1733892430.070:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.455748][   T30] audit: type=1326 audit(1733892430.070:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.522785][   T30] audit: type=1326 audit(1733892430.070:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.573200][ T2622] loop4: detected capacity change from 0 to 131072
[  231.579634][   T30] audit: type=1326 audit(1733892430.070:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.602820][   T30] audit: type=1326 audit(1733892430.080:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.626858][   T30] audit: type=1326 audit(1733892430.080:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.659009][   T30] audit: type=1326 audit(1733892430.080:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbd65cf19 code=0x7ffc0000
[  231.746992][ T2622] F2FS-fs (loop4): Test dummy encryption mode enabled
[  231.753670][   T30] audit: type=1326 audit(1733892430.080:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2635 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedbd68f7c5 code=0x7ffc0000
[  231.781236][ T2622] F2FS-fs (loop4): invalid crc value
[  231.802215][ T2622] F2FS-fs (loop4): Found nat_bits in checkpoint
[  231.809296][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.827314][ T2644] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.000923][ T2644] device bridge_slave_0 entered promiscuous mode
[  232.113079][ T2654] netlink: 'syz.0.542': attribute type 2 has an invalid length.
[  232.120601][ T2654] netlink: 9 bytes leftover after parsing attributes in process `syz.0.542'.
[  232.132247][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.139154][ T2644] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.146487][ T2644] device bridge_slave_1 entered promiscuous mode
[  232.215979][ T2622] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  232.462956][ T2660] loop1: detected capacity change from 0 to 256
[  232.726561][ T2665] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  232.746535][ T2665] SELinux: failed to load policy
[  232.778372][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  232.787681][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  232.807016][ T1226] device bridge_slave_1 left promiscuous mode
[  232.813412][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.830099][ T1226] device bridge_slave_0 left promiscuous mode
[  232.836199][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.844879][ T1226] device veth1_macvtap left promiscuous mode
[  232.939894][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  232.955504][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  232.964359][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.971238][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.985173][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.993600][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  233.014580][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.021480][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.045085][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  233.054197][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  233.062413][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  233.099912][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  233.108714][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  233.118802][  T780] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  233.159948][ T2675] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  233.273697][ T2675] SELinux: failed to load policy
[  233.358994][  T780] usb 1-1: Using ep0 maxpacket: 32
[  233.395961][ T2676] netlink: 'syz.4.550': attribute type 2 has an invalid length.
[  233.403677][ T2676] netlink: 9 bytes leftover after parsing attributes in process `syz.4.550'.
[  233.412421][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  233.421308][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  233.435132][ T2644] device veth0_vlan entered promiscuous mode
[  233.441590][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  233.454834][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  233.463248][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  233.471936][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  233.481854][ T2681] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  233.487636][ T2644] device veth1_macvtap entered promiscuous mode
[  233.498018][ T2681] SELinux: failed to load policy
[  233.498895][  T780] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  233.511142][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  233.519564][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  233.527292][  T780] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.537319][  T780] usb 1-1: config 0 has no interfaces?
[  233.543190][  T780] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  233.551285][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  233.552133][  T780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.563448][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  233.576592][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  233.580651][  T780] usb 1-1: config 0 descriptor??
[  233.585235][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.599219][ T2682] netlink: 48 bytes leftover after parsing attributes in process `syz.1.554'.
[  233.974303][ T2688] loop5: detected capacity change from 0 to 256
[  234.149657][ T1317] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  234.348820][   T60] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  234.737531][ T2692] loop4: detected capacity change from 0 to 256
[  234.780803][ T2692] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  235.018970][   T60] usb 4-1: Using ep0 maxpacket: 32
[  235.228879][   T60] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  235.247287][   T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.297507][   T60] usb 4-1: config 0 has no interfaces?
[  235.308956][   T60] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  235.345263][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.378409][   T60] usb 4-1: config 0 descriptor??
[  236.054489][ T2701] loop5: detected capacity change from 0 to 256
[  236.060935][ T1317] usb 2-1: Using ep0 maxpacket: 32
[  236.248865][ T1317] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  236.323591][ T1317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.325355][  T780] usb 1-1: USB disconnect, device number 18
[  236.338913][ T1317] usb 2-1: config 0 has no interfaces?
[  236.345818][ T1317] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  236.354943][ T1317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.384492][ T1317] usb 2-1: config 0 descriptor??
[  236.447006][ T2706] loop0: detected capacity change from 0 to 1024
[  236.529128][ T2708] overlayfs: failed to resolve './file2': -2
[  236.539158][ T1317] usb 2-1: string descriptor 0 read error: -71
[  236.547914][ T1317] usb 2-1: USB disconnect, device number 22
[  236.873121][ T2706] netlink: 'syz.0.559': attribute type 4 has an invalid length.
[  236.884062][ T2706] netlink: 'syz.0.559': attribute type 4 has an invalid length.
[  237.167704][ T2716] device gretap0 entered promiscuous mode
[  237.177336][ T2716] netlink: 'syz.5.558': attribute type 2 has an invalid length.
[  237.184885][ T2716] netlink: 9 bytes leftover after parsing attributes in process `syz.5.558'.
[  237.451990][ T2719] overlayfs: failed to resolve './file2': -2
[  237.468274][ T1317] usb 4-1: USB disconnect, device number 12
[  238.102559][ T2731] netlink: 'syz.1.565': attribute type 2 has an invalid length.
[  238.110180][ T2731] netlink: 9 bytes leftover after parsing attributes in process `syz.1.565'.
[  239.139978][ T2736] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  239.178701][ T2736] SELinux: failed to load policy
[  239.290755][ T2746] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  239.301325][ T2746] SELinux: failed to load policy
[  239.309723][ T2747] netlink: 48 bytes leftover after parsing attributes in process `syz.1.567'.
[  239.645278][ T2752] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  239.655691][ T2752] SELinux: failed to load policy
[  239.788785][  T778] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  239.792924][  T524] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  239.914865][ T2758] netlink: 'syz.5.571': attribute type 4 has an invalid length.
[  239.950012][ T2758] netlink: 'syz.5.571': attribute type 4 has an invalid length.
[  240.549062][ T1317] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  240.616128][  T778] usb 2-1: Using ep0 maxpacket: 32
[  240.683660][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'.
[  240.698794][  T524] usb 4-1: Using ep0 maxpacket: 32
[  240.819192][  T524] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  240.837025][  T524] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.927322][  T524] usb 4-1: config 0 has no interfaces?
[  241.048086][  T524] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  241.060877][  T524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.070169][  T524] usb 4-1: config 0 descriptor??
[  241.088849][  T778] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  241.097082][ T1317] usb 5-1: Using ep0 maxpacket: 32
[  241.102041][  T778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.111924][  T778] usb 2-1: config 0 has no interfaces?
[  241.117183][  T778] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  241.126205][  T778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.187033][  T778] usb 2-1: config 0 descriptor??
[  241.298835][ T1317] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  241.307347][ T1317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.317498][ T1317] usb 5-1: config 0 has no interfaces?
[  241.322909][ T1317] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  241.331971][ T1317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.344467][ T1317] usb 5-1: config 0 descriptor??
[  241.738304][ T2778] loop5: detected capacity change from 0 to 256
[  242.108868][  T778] usb 2-1: string descriptor 0 read error: -71
[  242.126205][  T778] usb 2-1: USB disconnect, device number 23
[  242.186229][ T2786] xt_hashlimit: size too large, truncated to 1048576
[  242.251801][ T2787] netlink: 'syz.0.577': attribute type 2 has an invalid length.
[  242.259419][ T2787] netlink: 9 bytes leftover after parsing attributes in process `syz.0.577'.
[  242.628916][  T524] usb 4-1: string descriptor 0 read error: -71
[  242.642665][  T524] usb 4-1: USB disconnect, device number 13
[  243.250306][  T348] usb 5-1: USB disconnect, device number 19
[  244.309910][ T2799] loop5: detected capacity change from 0 to 256
[  244.339909][ T2799] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ00000000000000000004" or missing value
[  244.351078][ T2806] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  244.379220][ T2806] SELinux: failed to load policy
[  244.396379][ T2810] overlayfs: missing 'lowerdir'
[  244.455106][ T2813] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  244.479277][ T2813] SELinux: failed to load policy
[  244.507764][ T2818] netlink: 48 bytes leftover after parsing attributes in process `syz.4.584'.
[  244.554561][ T2821] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  245.168121][ T2821] SELinux: failed to load policy
[  245.181373][ T2824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.588'.
[  246.194416][ T2828] loop0: detected capacity change from 0 to 256
[  246.239770][ T2821] netlink: 48 bytes leftover after parsing attributes in process `syz.5.590'.
[  246.328886][ T2832] netlink: 88 bytes leftover after parsing attributes in process `syz.3.591'.
[  246.368817][ T1307] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  246.498839][  T429] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  246.608790][ T1307] usb 5-1: Using ep0 maxpacket: 32
[  246.738795][  T429] usb 2-1: Using ep0 maxpacket: 32
[  246.778807][ T1307] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  246.786988][ T1307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.796914][ T1307] usb 5-1: config 0 has no interfaces?
[  246.802207][ T1307] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  246.811489][ T1307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.823010][ T1307] usb 5-1: config 0 descriptor??
[  246.866251][ T2837] netlink: 'syz.0.592': attribute type 2 has an invalid length.
[  246.873785][ T2837] netlink: 9 bytes leftover after parsing attributes in process `syz.0.592'.
[  246.927718][ T2832] loop3: detected capacity change from 0 to 131072
[  247.052333][ T2832] F2FS-fs (loop3): Test dummy encryption mode enabled
[  247.103282][ T2832] F2FS-fs (loop3): invalid crc value
[  247.137896][ T2832] F2FS-fs (loop3): Found nat_bits in checkpoint
[  247.138883][  T429] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  247.152483][  T429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.163458][  T429] usb 2-1: config 0 has no interfaces?
[  247.169024][  T429] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  247.178080][  T429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.187274][  T429] usb 2-1: config 0 descriptor??
[  247.256733][ T2832] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  247.318807][ T1307] usb 5-1: string descriptor 0 read error: -71
[  247.345200][ T1307] usb 5-1: USB disconnect, device number 20
[  247.364149][ T2846] netlink: 'syz.5.593': attribute type 4 has an invalid length.
[  247.403108][ T2846] netlink: 'syz.5.593': attribute type 4 has an invalid length.
[  247.999383][  T429] usb 2-1: string descriptor 0 read error: -71
[  248.020728][ T2853] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  248.059019][ T2853] SELinux: failed to load policy
[  248.063795][  T429] usb 2-1: USB disconnect, device number 24
[  250.566241][ T2874] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  250.592529][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  250.858814][  T429] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  251.065924][ T2881] loop5: detected capacity change from 0 to 256
[  251.196219][ T2875] loop0: detected capacity change from 0 to 256
[  251.299446][ T2883] netlink: 88 bytes leftover after parsing attributes in process `syz.1.603'.
[  251.494811][ T2886] loop3: detected capacity change from 0 to 256
[  251.549455][ T2886] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ00000000000000000004" or missing value
[  251.677670][ T2891] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  251.715932][ T2891] SELinux: failed to load policy
[  251.773217][ T2894] netlink: 48 bytes leftover after parsing attributes in process `syz.3.606'.
[  251.890845][ T2893] loop0: detected capacity change from 0 to 128
[  252.019374][ T2893] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  252.069487][  T780] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  252.129536][ T2898] netlink: 'syz.5.605': attribute type 4 has an invalid length.
[  252.171669][ T2898] netlink: 'syz.5.605': attribute type 4 has an invalid length.
[  252.483056][ T2883] loop1: detected capacity change from 0 to 131072
[  252.508423][ T2883] F2FS-fs (loop1): Test dummy encryption mode enabled
[  252.539778][ T2883] F2FS-fs (loop1): invalid crc value
[  252.553583][ T2883] F2FS-fs (loop1): Found nat_bits in checkpoint
[  252.580415][ T2908] loop5: detected capacity change from 0 to 1024
[  252.605262][ T2883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  252.661465][  T780] usb 4-1: Using ep0 maxpacket: 32
[  252.666478][ T1307] Bluetooth: hci0: command 0x1003 tx timeout
[  252.672539][ T1366] Bluetooth: hci0: sending frame failed (-49)
[  253.134113][ T2908] netlink: 'syz.5.610': attribute type 4 has an invalid length.
[  253.166334][ T2908] netlink: 'syz.5.610': attribute type 4 has an invalid length.
[  253.383926][  T780] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  253.392166][  T780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.402537][  T780] usb 4-1: config 0 has no interfaces?
[  253.407881][  T780] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  253.416777][  T780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.521990][  T780] usb 4-1: config 0 descriptor??
[  253.754714][ T2925] netlink: 88 bytes leftover after parsing attributes in process `syz.1.611'.
[  253.780476][ T2924] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  253.803238][ T2924] SELinux: failed to load policy
[  253.824898][ T2927] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  253.850073][ T2927] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  254.121449][ T2930] loop5: detected capacity change from 0 to 256
[  254.160585][ T2930] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  254.725791][ T1307] Bluetooth: hci0: command 0x1001 tx timeout
[  254.731746][ T1366] Bluetooth: hci0: sending frame failed (-49)
[  255.038836][  T780] usb 4-1: string descriptor 0 read error: -71
[  255.047454][  T780] usb 4-1: USB disconnect, device number 14
[  255.158777][  T429] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  255.237419][ T2937] netlink: 'syz.3.615': attribute type 4 has an invalid length.
[  255.250174][ T2937] netlink: 'syz.3.615': attribute type 4 has an invalid length.
[  255.447283][ T2936] loop5: detected capacity change from 0 to 256
[  255.463253][ T2921] loop1: detected capacity change from 0 to 131072
[  255.471903][ T2936] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ00000000000000000004" or missing value
[  255.566546][ T2921] F2FS-fs (loop1): Test dummy encryption mode enabled
[  255.574647][ T2921] F2FS-fs (loop1): invalid crc value
[  255.581529][ T2921] F2FS-fs (loop1): Found nat_bits in checkpoint
[  255.645804][ T2921] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  256.048158][ T2952] netlink: 'syz.3.619': attribute type 4 has an invalid length.
[  256.084596][ T2952] netlink: 'syz.3.619': attribute type 4 has an invalid length.
[  256.288789][  T429] usb 1-1: Using ep0 maxpacket: 32
[  256.490306][ T2955] loop5: detected capacity change from 0 to 256
[  256.639024][  T429] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  256.662846][  T429] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.791764][  T780] Bluetooth: hci0: command 0x1009 tx timeout
[  256.839004][  T429] usb 1-1: config 0 has no interfaces?
[  256.844452][  T429] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  256.845801][ T2958] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  256.853383][  T429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.864287][ T2958] SELinux: failed to load policy
[  256.878078][ T2960] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  256.890918][ T2960] SELinux: failed to load policy
[  256.894285][  T429] usb 1-1: config 0 descriptor??
[  256.928811][  T429] usb 1-1: can't set config #0, error -71
[  256.937539][  T429] usb 1-1: USB disconnect, device number 19
[  257.689129][  T780] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  257.836318][ T2973] netlink: 'syz.5.622': attribute type 4 has an invalid length.
[  257.871630][ T2973] netlink: 'syz.5.622': attribute type 4 has an invalid length.
[  258.161532][  T429] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  258.222963][ T2981] xt_hashlimit: size too large, truncated to 1048576
[  258.258795][  T780] usb 4-1: Using ep0 maxpacket: 32
[  258.330034][ T2982] netlink: 'syz.1.624': attribute type 2 has an invalid length.
[  258.337756][ T2982] netlink: 9 bytes leftover after parsing attributes in process `syz.1.624'.
[  258.538875][  T780] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  258.547621][  T780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.558029][  T780] usb 4-1: config 0 has no interfaces?
[  258.564283][  T780] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  258.573540][  T780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.589015][  T780] usb 4-1: config 0 descriptor??
[  258.648781][  T429] usb 1-1: Using ep0 maxpacket: 32
[  258.788839][  T429] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  258.797112][  T429] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.807089][  T429] usb 1-1: config 0 has no interfaces?
[  258.812375][  T429] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  258.821206][  T429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.832945][  T429] usb 1-1: config 0 descriptor??
[  259.386822][ T2989] loop1: detected capacity change from 0 to 256
[  259.876306][ T2994] loop5: detected capacity change from 0 to 256
[  259.919602][ T2994] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  260.340248][  T318] usb 4-1: USB disconnect, device number 15
[  260.472446][ T2998] netlink: 88 bytes leftover after parsing attributes in process `syz.3.630'.
[  260.672550][  T318] usb 1-1: USB disconnect, device number 20
[  260.836790][ T3006] loop1: detected capacity change from 0 to 256
[  261.148178][ T3004] netlink: 88 bytes leftover after parsing attributes in process `syz.5.633'.
[  261.745270][ T3017] loop4: detected capacity change from 0 to 256
[  262.909854][ T3024] netlink: 'syz.0.638': attribute type 2 has an invalid length.
[  262.917358][ T3024] netlink: 9 bytes leftover after parsing attributes in process `syz.0.638'.
[  263.331374][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  263.331392][   T30] audit: type=1400 audit(1733892463.040:428): avc:  denied  { listen } for  pid=3025 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  263.396116][ T3028] xt_hashlimit: size too large, truncated to 1048576
[  263.408921][   T30] audit: type=1400 audit(1733892463.070:429): avc:  denied  { accept } for  pid=3025 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  263.627545][ T3034] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  263.638797][ T3034] SELinux: failed to load policy
[  264.121582][ T3046] loop5: detected capacity change from 0 to 256
[  264.169467][ T3046] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  264.185612][ T3048] loop3: detected capacity change from 0 to 256
[  264.465546][ T3049] loop4: detected capacity change from 0 to 128
[  264.771354][ T3049] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  265.127109][ T3055] loop5: detected capacity change from 0 to 256
[  265.279560][  T297] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  265.279612][   T20] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  265.604732][  T297] usb 5-1: device descriptor read/64, error -71
[  266.044825][ T3065] netlink: 'syz.1.648': attribute type 4 has an invalid length.
[  266.476755][ T3071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'.
[  266.558834][   T20] usb 1-1: Using ep0 maxpacket: 32
[  266.688840][   T20] usb 1-1: unable to read config index 0 descriptor/start: -71
[  266.696241][   T20] usb 1-1: can't read configurations, error -71
[  266.696665][ T3083] netlink: 88 bytes leftover after parsing attributes in process `syz.4.653'.
[  266.793325][ T3089] netlink: 88 bytes leftover after parsing attributes in process `syz.3.651'.
[  266.925179][ T3092] loop1: detected capacity change from 0 to 256
[  266.979471][ T3092] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  267.565478][ T3103] loop5: detected capacity change from 0 to 256
[  267.683733][ T3105] loop1: detected capacity change from 0 to 1024
[  267.693802][ T3107] xt_hashlimit: size too large, truncated to 1048576
[  267.975953][ T3105] netlink: 'syz.1.659': attribute type 4 has an invalid length.
[  267.983804][ T3105] netlink: 'syz.1.659': attribute type 4 has an invalid length.
[  268.267815][ T3083] loop4: detected capacity change from 0 to 131072
[  268.319797][ T3083] F2FS-fs (loop4): Test dummy encryption mode enabled
[  268.351121][ T3083] F2FS-fs (loop4): invalid crc value
[  268.562066][ T3083] F2FS-fs (loop4): Found nat_bits in checkpoint
[  268.820679][ T3083] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  268.831966][ T3089] loop3: detected capacity change from 0 to 131072
[  268.901501][ T3089] F2FS-fs (loop3): Test dummy encryption mode enabled
[  268.909470][   T30] audit: type=1400 audit(1733892468.620:430): avc:  denied  { setattr } for  pid=3123 comm="syz.0.662" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  268.932167][ T3089] F2FS-fs (loop3): invalid crc value
[  268.945622][ T3089] F2FS-fs (loop3): Found nat_bits in checkpoint
[  269.039588][ T3089] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  269.513813][ T3134] loop0: detected capacity change from 0 to 128
[  269.593580][ T3142] netlink: 'syz.1.664': attribute type 2 has an invalid length.
[  269.601169][ T3142] netlink: 9 bytes leftover after parsing attributes in process `syz.1.664'.
[  269.622750][ T3134] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  269.868464][   T30] audit: type=1400 audit(1733892469.570:431): avc:  denied  { unmount } for  pid=2644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  270.107433][ T3155] loop5: detected capacity change from 0 to 256
[  270.350816][ T3157] loop3: detected capacity change from 0 to 256
[  270.379731][ T3155] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  270.458938][  T549] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  270.692620][ T3165] FAULT_INJECTION: forcing a failure.
[  270.692620][ T3165] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  270.705870][ T3165] CPU: 1 PID: 3165 Comm: syz.4.674 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0
[  270.715503][ T3165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  270.725406][ T3165] Call Trace:
[  270.728520][ T3165]  <TASK>
[  270.731328][ T3165]  dump_stack_lvl+0x151/0x1c0
[  270.735812][ T3165]  ? io_uring_drop_tctx_refs+0x190/0x190
[  270.741276][ T3165]  ? avc_has_perm+0x16f/0x260
[  270.745795][ T3165]  dump_stack+0x15/0x20
[  270.749784][ T3165]  should_fail+0x3c6/0x510
[  270.754037][ T3165]  should_fail_alloc_page+0x5a/0x80
[  270.759164][ T3165]  prepare_alloc_pages+0x15c/0x700
[  270.764126][ T3165]  ? __alloc_pages_bulk+0xe40/0xe40
[  270.769164][ T3165]  ? stack_trace_save+0x1c0/0x1c0
[  270.774019][ T3165]  __alloc_pages+0x18c/0x8f0
[  270.778442][ T3165]  ? prep_new_page+0x110/0x110
[  270.783043][ T3165]  ? stack_trace_save+0x113/0x1c0
[  270.787904][ T3165]  ? stack_trace_snprint+0xf0/0xf0
[  270.792853][ T3165]  skb_page_frag_refill+0x209/0x3b0
[  270.797886][ T3165]  tun_get_user+0x6f0/0x3aa0
[  270.802326][ T3165]  ? __x64_sys_openat+0x1c0/0x290
[  270.807170][ T3165]  ? x64_sys_call+0x6bf/0x9a0
[  270.811772][ T3165]  ? tun_do_read+0x2010/0x2010
[  270.816372][ T3165]  ? kstrtouint_from_user+0x20a/0x2a0
[  270.821578][ T3165]  ? kstrtol_from_user+0x310/0x310
[  270.826530][ T3165]  ? strncpy_from_kernel_nofault+0x169/0x1e0
[  270.832354][ T3165]  ? avc_policy_seqno+0x1b/0x70
[  270.837035][ T3165]  ? selinux_file_permission+0x2c4/0x570
[  270.842504][ T3165]  tun_chr_write_iter+0x1e1/0x2e0
[  270.847365][ T3165]  vfs_write+0xd5d/0x1110
[  270.851529][ T3165]  ? file_end_write+0x1c0/0x1c0
[  270.856238][ T3165]  ? __fdget_pos+0x209/0x3a0
[  270.860639][ T3165]  ? ksys_write+0x77/0x2c0
[  270.864892][ T3165]  ksys_write+0x199/0x2c0
[  270.869057][ T3165]  ? __ia32_sys_read+0x90/0x90
[  270.873653][ T3165]  ? debug_smp_processor_id+0x17/0x20
[  270.878866][ T3165]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  270.884761][ T3165]  __x64_sys_write+0x7b/0x90
[  270.889367][ T3165]  x64_sys_call+0x2f/0x9a0
[  270.893618][ T3165]  do_syscall_64+0x3b/0xb0
[  270.897868][ T3165]  ? clear_bhb_loop+0x35/0x90
[  270.902388][ T3165]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  270.908114][ T3165] RIP: 0033:0x7fe47f8969cf
[  270.912369][ T3165] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  270.931804][ T3165] RSP: 002b:00007fe47df0f020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  270.940053][ T3165] RAX: ffffffffffffffda RBX: 00007fe47fa5dfa0 RCX: 00007fe47f8969cf
[  270.947860][ T3165] RDX: 00000000000000d2 RSI: 0000000020000080 RDI: 00000000000000c8
[  270.955673][ T3165] RBP: 00007fe47df0f0a0 R08: 0000000000000000 R09: 0000000000000000
[  270.963484][ T3165] R10: 00000000000000d2 R11: 0000000000000293 R12: 0000000000000001
[  270.971298][ T3165] R13: 0000000000000000 R14: 00007fe47fa5dfa0 R15: 00007ffec983bfe8
[  270.979112][ T3165]  </TASK>
[  271.044601][ T3169] loop4: detected capacity change from 0 to 1024
[  271.130357][  T780] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  271.168939][  T549] usb 1-1: device descriptor read/64, error -71
[  271.610497][ T3173] loop5: detected capacity change from 0 to 256
[  271.863919][ T3175] netlink: 'syz.4.677': attribute type 4 has an invalid length.
[  272.308834][  T780] usb 2-1: Using ep0 maxpacket: 16
[  272.987284][ T3189] netlink: 'syz.0.680': attribute type 2 has an invalid length.
[  272.994961][ T3189] netlink: 9 bytes leftover after parsing attributes in process `syz.0.680'.
[  274.077788][ T3187] loop4: detected capacity change from 0 to 256
[  274.088697][ T3190] loop3: detected capacity change from 0 to 256
[  274.400597][  T780] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[  274.410777][  T780] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  274.427458][  T780] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  274.439309][  T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.467959][  T780] usb 2-1: config 0 descriptor??
[  274.468008][ T3195] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  274.498834][  T780] usb 2-1: can't set config #0, error -71
[  274.525320][  T780] usb 2-1: USB disconnect, device number 26
[  274.527558][ T3195] SELinux: failed to load policy
[  274.602969][ T3197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.681'.
[  274.748989][ T3204] loop3: detected capacity change from 0 to 1024
[  274.759741][ T3202] loop5: detected capacity change from 0 to 256
[  274.779408][ T3202] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  275.057965][ T3208] netlink: 'syz.4.682': attribute type 2 has an invalid length.
[  275.065835][ T3208] netlink: 9 bytes leftover after parsing attributes in process `syz.4.682'.
[  275.158889][  T549] usb 1-1: device descriptor read/64, error -71
[  275.371446][ T3212] netlink: 'syz.3.683': attribute type 4 has an invalid length.
[  275.387700][ T3212] netlink: 'syz.3.683': attribute type 4 has an invalid length.
[  275.438979][  T549] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  275.641784][ T3215] loop1: detected capacity change from 0 to 256
[  275.690479][ T3215] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  275.978789][  T549] usb 1-1: Using ep0 maxpacket: 32
[  276.110951][ T3221] netlink: 'syz.4.688': attribute type 4 has an invalid length.
[  276.120595][ T3221] netlink: 'syz.4.688': attribute type 4 has an invalid length.
[  276.618753][  T549] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  276.626949][  T549] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.650215][ T3225] loop4: detected capacity change from 0 to 1024
[  276.666737][  T549] usb 1-1: config 0 has no interfaces?
[  276.701700][  T549] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  276.744559][ T3229] loop5: detected capacity change from 0 to 256
[  276.790612][ T3229] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  276.814970][  T549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.828935][  T549] usb 1-1: config 0 descriptor??
[  277.103071][ T3232] netlink: 'syz.1.690': attribute type 4 has an invalid length.
[  277.796992][ T3233] netlink: 'syz.4.689': attribute type 4 has an invalid length.
[  278.187745][ T3245] netlink: 'syz.1.691': attribute type 2 has an invalid length.
[  278.195363][ T3245] netlink: 9 bytes leftover after parsing attributes in process `syz.1.691'.
[  278.360208][ T3247] IPv6: sit1: Disabled Multicast RS
[  278.368362][  T549] usb 1-1: string descriptor 0 read error: -71
[  278.475762][  T549] usb 1-1: USB disconnect, device number 24
[  279.539254][ T3264] loop4: detected capacity change from 0 to 256
[  279.810168][ T3266] loop3: detected capacity change from 0 to 256
[  279.859436][ T3266] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  280.095844][ T3271] netlink: 'syz.1.700': attribute type 4 has an invalid length.
[  280.105316][ T3271] netlink: 'syz.1.700': attribute type 4 has an invalid length.
[  280.459370][ T3275] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  280.478787][ T3275] SELinux: failed to load policy
[  280.535243][ T3276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.702'.
[  281.359197][    T6] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  281.624724][ T3289] loop5: detected capacity change from 0 to 256
[  281.798800][    T6] usb 4-1: Using ep0 maxpacket: 32
[  282.794507][ T3282] loop4: detected capacity change from 0 to 2048
[  283.587446][ T3304] loop0: detected capacity change from 0 to 256
[  283.599137][    T6] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  283.607620][    T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.803160][ T3282] EXT4-fs: failed to create workqueue
[  283.812306][ T3282] EXT4-fs (loop4): mount failed
[  283.824256][    T6] usb 4-1: config 0 has no interfaces?
[  283.885317][    T6] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  283.911136][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.949940][    T6] usb 4-1: config 0 descriptor??
[  283.989153][    T6] usb 4-1: can't set config #0, error -71
[  284.242755][ T3314] loop3: detected capacity change from 0 to 256
[  284.307114][    T6] usb 4-1: USB disconnect, device number 16
[  284.750059][ T3323] loop4: detected capacity change from 0 to 256
[  285.509498][ T3323] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  285.569921][ T3332] loop0: detected capacity change from 0 to 256
[  286.146158][ T3339] netlink: 'syz.5.716': attribute type 4 has an invalid length.
[  286.167920][ T3339] netlink: 'syz.5.716': attribute type 4 has an invalid length.
[  286.479735][   T30] audit: type=1400 audit(1733892486.190:432): avc:  denied  { read } for  pid=3343 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  286.522952][ T3348] loop3: detected capacity change from 0 to 1024
[  286.526602][ T3350] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  286.539627][ T3350] SELinux: failed to load policy
[  286.570973][ T3346] netlink: 88 bytes leftover after parsing attributes in process `syz.5.719'.
[  286.597232][ T3351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.720'.
[  286.613907][ T3353] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  286.629556][ T3353] capability: warning: `syz.0.718' uses 32-bit capabilities (legacy support in use)
[  287.103716][ T3359] netlink: 'syz.3.715': attribute type 4 has an invalid length.
[  287.145145][ T3359] netlink: 'syz.3.715': attribute type 4 has an invalid length.
[  287.745594][  T780] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  288.388053][ T3377] loop3: detected capacity change from 0 to 256
[  288.721886][ T3381] loop4: detected capacity change from 0 to 256
[  288.728436][  T780] usb 2-1: Using ep0 maxpacket: 32
[  288.808924][ T3381] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  288.858873][  T780] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  288.878766][  T780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.889481][  T780] usb 2-1: config 0 has no interfaces?
[  288.895362][  T780] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  288.974518][  T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.991002][  T780] usb 2-1: config 0 descriptor??
[  289.157255][ T3390] netlink: 'syz.0.729': attribute type 4 has an invalid length.
[  289.186269][ T3390] netlink: 'syz.0.729': attribute type 4 has an invalid length.
[  290.204053][   T30] audit: type=1400 audit(1733892488.980:433): avc:  denied  { create } for  pid=3387 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  290.291713][   T30] audit: type=1400 audit(1733892489.020:434): avc:  denied  { bind } for  pid=3387 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  290.314429][   T30] audit: type=1400 audit(1733892489.500:435): avc:  denied  { set_context_mgr } for  pid=3387 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  290.318838][  T780] usb 2-1: string descriptor 0 read error: -71
[  290.436085][  T780] usb 2-1: USB disconnect, device number 27
[  290.450141][ T3399] loop3: detected capacity change from 0 to 4096
[  290.802218][ T3399] EXT4-fs (loop3): filesystem too large to mount safely on this system
[  291.617887][ T3415] loop5: detected capacity change from 0 to 256
[  291.694942][ T3409] loop4: detected capacity change from 0 to 128
[  291.879244][   T30] audit: type=1400 audit(1733892491.590:436): avc:  denied  { bind } for  pid=3398 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  291.909371][ T3409] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  291.977663][ T3424] overlayfs: failed to resolve './file0': -2
[  292.466589][ T3428] loop3: detected capacity change from 0 to 256
[  292.499787][ T3428] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  292.984297][ T3432] netlink: 'syz.0.740': attribute type 4 has an invalid length.
[  293.188774][  T778] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  293.293260][ T3439] loop5: detected capacity change from 0 to 1024
[  293.340175][ T3438] loop0: detected capacity change from 0 to 256
[  293.374713][ T3441] 9pnet: Insufficient options for proto=fd
[  293.379287][ T3438] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ00000000000000000006" or missing value
[  293.509894][ T3447] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  293.524165][ T3447] SELinux: failed to load policy
[  295.378923][ T3455] netlink: 'syz.5.739': attribute type 4 has an invalid length.
[  295.402399][ T3457] loop1: detected capacity change from 0 to 512
[  295.660711][ T3462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.743'.
[  295.726454][ T3457] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  295.737346][ T3457] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.480303][ T3476] loop0: detected capacity change from 0 to 256
[  296.622881][ T3470] netlink: 88 bytes leftover after parsing attributes in process `syz.5.748'.
[  297.349182][ T3495] loop1: detected capacity change from 0 to 256
[  297.531416][ T3496] loop3: detected capacity change from 0 to 256
[  297.571000][ T3495] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  299.254700][ T3490] netlink: 88 bytes leftover after parsing attributes in process `syz.4.754'.
[  299.434990][ T3499] loop5: detected capacity change from 0 to 128
[  299.518954][ T3502] loop1: detected capacity change from 0 to 1024
[  299.525630][ T3499] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  299.903912][  T524] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  299.918268][ T3511] netlink: 'syz.1.758': attribute type 4 has an invalid length.
[  299.938283][ T3511] netlink: 'syz.1.758': attribute type 4 has an invalid length.
[  300.283362][ T3514] loop0: detected capacity change from 0 to 256
[  301.005445][ T3522] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  301.057115][ T3522] SELinux: failed to load policy
[  301.068390][ T3526] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  301.109470][ T3526] SELinux: failed to load policy
[  301.119618][ T3522] netlink: 48 bytes leftover after parsing attributes in process `syz.3.760'.
[  301.226143][ T3529] netlink: 'syz.1.763': attribute type 2 has an invalid length.
[  301.233799][ T3529] netlink: 9 bytes leftover after parsing attributes in process `syz.1.763'.
[  301.326314][ T3530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.764'.
[  301.598806][ T3286] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  301.646857][   T30] audit: type=1400 audit(1733892501.350:437): avc:  denied  { setopt } for  pid=3538 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  301.671649][ T3541] netlink: 'syz.5.766': attribute type 4 has an invalid length.
[  301.680832][ T3541] netlink: 'syz.5.766': attribute type 4 has an invalid length.
[  302.317087][  T780] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  302.337822][ T3544] loop1: detected capacity change from 0 to 2048
[  302.361183][ T3544] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  302.381992][ T3544] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none.
[  303.521621][ T3544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.767'.
[  303.539343][   T30] audit: type=1400 audit(1733892503.230:438): avc:  denied  { write } for  pid=3543 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  303.570183][ T3286] usb 4-1: Using ep0 maxpacket: 32
[  303.684944][ T3559] loop0: detected capacity change from 0 to 256
[  303.699271][ T3559] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value
[  303.980820][  T780] usb 5-1: Using ep0 maxpacket: 32
[  304.058823][   T60] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  304.088832][ T3286] usb 4-1: unable to read config index 0 descriptor/start: -71
[  304.148776][  T780] usb 5-1: unable to read config index 0 descriptor/start: -71
[  304.160323][  T780] usb 5-1: can't read configurations, error -71
[  304.173499][ T3562] loop3: detected capacity change from 0 to 1024
[  304.185428][ T3286] usb 4-1: can't read configurations, error -71
[  304.196462][ T3564] SELinux:  policydb magic number 0xe97cff8c does not match expected magic number 0xf97cff8c
[  304.206725][ T3564] SELinux: failed to load policy
[  304.263161][ T3565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.772'.
[  304.524265][ T3567] netlink: 'syz.3.771': attribute type 4 has an invalid length.
[  305.009121][  T780] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  305.018840][   T60] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  305.037620][ T3575] loop0: detected capacity change from 0 to 1024
[  306.202014][   T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.322592][   T60] usb 2-1: config 0 descriptor??
[  306.355009][   T60] usb 2-1: can't set config #0, error -71
[  306.363321][   T60] usb 2-1: USB disconnect, device number 28
[  306.400230][ T3590] xt_hashlimit: size too large, truncated to 1048576
[  306.438789][  T780] usb 5-1: Using ep0 maxpacket: 32
[  306.468034][ T3591] netlink: 'syz.0.775': attribute type 4 has an invalid length.
[  306.477923][ T3591] netlink: 'syz.0.775': attribute type 4 has an invalid length.
[  306.865911][ T3596] loop0: detected capacity change from 0 to 512
[  306.889910][ T3596] EXT4-fs (loop0): inodes count not valid: 0 vs 32
[  306.918798][  T780] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  306.927307][  T780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.938879][  T780] usb 5-1: config 0 has no interfaces?
[  306.944179][  T780] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  306.953276][  T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.961908][  T780] usb 5-1: config 0 descriptor??
[  307.047462][ T3598] loop0: detected capacity change from 0 to 2048
[  307.159272][ T3600] loop3: detected capacity change from 0 to 512
[  307.197184][ T3600] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  307.205273][  T780] usb 5-1: string descriptor 0 read error: -71
[  307.209421][ T3612] loop0: detected capacity change from 0 to 128
[  307.222853][  T780] usb 5-1: USB disconnect, device number 24
[  307.231209][ T3600] System zones: 0-2, 18-18, 34-34
[  307.253238][ T3600] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.783: bg 0: block 248: padding at end of block bitmap is not set
[  307.272080][   T30] audit: type=1400 audit(1733892506.980:439): avc:  denied  { watch watch_reads } for  pid=3611 comm="syz.0.787" path="/176/file1/file0" dev="loop0" ino=1048660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  307.323444][ T3600] Quota error (device loop3): write_blk: dquota write failed
[  307.331680][ T3600] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  307.346995][ T3600] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.783: Failed to acquire dquot type 1
[  307.359603][ T3621] loop0: detected capacity change from 0 to 256
[  307.378670][ T3600] EXT4-fs (loop3): 1 truncate cleaned up
[  307.384904][ T3600] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noload,abort,,errors=continue. Quota mode: writeback.
[  307.400248][   T30] audit: type=1400 audit(1733892507.100:440): avc:  denied  { append } for  pid=3622 comm="syz.5.792" name="ppp" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  307.406499][ T3600] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.430040][ T3625] loop4: detected capacity change from 0 to 256
[  307.448299][ T3600] EXT4-fs error (device loop3): ext4_remount:5846: comm syz.3.783: Abort forced by user
[  307.453079][ T3621] FAT-fs (loop0): Directory bread(block 64) failed
[  307.464482][ T3621] FAT-fs (loop0): Directory bread(block 65) failed
[  307.466732][ T3600] EXT4-fs (loop3): Remounting filesystem read-only
[  307.477691][   T30] audit: type=1400 audit(1733892507.180:441): avc:  denied  { map } for  pid=3628 comm="syz.1.795" path="socket:[25010]" dev="sockfs" ino=25010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  307.500910][ T3621] FAT-fs (loop0): Directory bread(block 66) failed
[  307.508684][ T3621] FAT-fs (loop0): Directory bread(block 67) failed
[  307.515389][ T3621] FAT-fs (loop0): Directory bread(block 68) failed
[  307.529214][ T3621] FAT-fs (loop0): Directory bread(block 69) failed
[  307.538969][ T3621] FAT-fs (loop0): Directory bread(block 70) failed
[  307.545704][ T3621] FAT-fs (loop0): Directory bread(block 71) failed
[  307.553341][ T3621] FAT-fs (loop0): Directory bread(block 72) failed
[  307.554903][ T3631] loop5: detected capacity change from 0 to 2048
[  307.559955][ T3621] FAT-fs (loop0): Directory bread(block 73) failed
[  307.584407][   T30] audit: type=1400 audit(1733892507.290:442): avc:  denied  { sys_module } for  pid=3620 comm="syz.0.790" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  307.612119][   T10] handle_bad_sector: 25 callbacks suppressed
[  307.612139][   T10] attempt to access beyond end of device
[  307.612139][   T10] loop0: rw=1, want=1804, limit=256
[  307.612604][ T3635] syz.1.799[3635] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  307.636082][   T30] audit: type=1400 audit(1733892507.340:443): avc:  denied  { create } for  pid=3636 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  307.666752][ T3635] syz.1.799[3635] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  307.676360][   T30] audit: type=1400 audit(1733892507.380:444): avc:  denied  { connect } for  pid=3636 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  307.707651][   T30] audit: type=1400 audit(1733892507.390:445): avc:  denied  { write } for  pid=3636 comm="syz.3.797" path="socket:[25020]" dev="sockfs" ino=25020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  307.719453][ T3631] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  307.743204][   T30] audit: type=1400 audit(1733892507.450:446): avc:  denied  { mount } for  pid=3644 comm="syz.3.803" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  307.886910][ T3660] loop5: detected capacity change from 0 to 1024
[  307.897794][ T3668] loop0: detected capacity change from 0 to 512
[  307.910895][ T3665] loop1: detected capacity change from 0 to 4096
[  307.922905][ T3660] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  307.933001][ T3665] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  307.948547][ T3674] loop3: detected capacity change from 0 to 4096
[  307.952677][ T3660] EXT4-fs warning (device loop5): ext4_enable_quotas:6423: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  307.969883][ T3660] EXT4-fs (loop5): mount failed
[  308.023257][ T3674] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  308.043956][ T3668] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  308.075342][ T3668] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  308.094377][ T3685] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  308.235794][ T3704] cgroup: none used incorrectly
[  308.495724][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'.
[  308.620643][ T3756] loop1: detected capacity change from 0 to 512
[  308.699763][ T3774] SELinux: failed to load policy
[  308.709727][ T3756] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  308.734168][ T3756] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  308.756361][ T3756] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  308.787492][ T3756] EXT4-fs (loop1): 1 truncate cleaned up
[  308.793122][ T3756] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,nombcache,quota,,errors=continue. Quota mode: writeback.
[  308.874421][ T3793] process '+}[@' launched '/dev/fd/3' with NULL argv: empty string added
[  308.893973][ T3797] loop4: detected capacity change from 0 to 256
[  309.000401][ T3797] FAT-fs (loop4): Directory bread(block 64) failed
[  309.006840][ T3797] FAT-fs (loop4): Directory bread(block 65) failed
[  309.018512][ T3797] FAT-fs (loop4): Directory bread(block 66) failed
[  309.025284][ T3797] FAT-fs (loop4): Directory bread(block 67) failed
[  309.028795][ T3286] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  309.032162][ T3797] FAT-fs (loop4): Directory bread(block 68) failed
[  309.046015][ T3797] FAT-fs (loop4): Directory bread(block 69) failed
[  309.053040][ T3797] FAT-fs (loop4): Directory bread(block 70) failed
[  309.059470][ T3797] FAT-fs (loop4): Directory bread(block 71) failed
[  309.065822][ T3797] FAT-fs (loop4): Directory bread(block 72) failed
[  309.072446][ T3797] FAT-fs (loop4): Directory bread(block 73) failed
[  309.102034][ T3797] attempt to access beyond end of device
[  309.102034][ T3797] loop4: rw=524288, want=1768, limit=256
[  309.123426][ T3797] attempt to access beyond end of device
[  309.123426][ T3797] loop4: rw=0, want=1744, limit=256
[  309.181829][ T3815] loop4: detected capacity change from 0 to 512
[  309.261009][ T3815] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  309.272082][ T3815] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.288756][ T3286] usb 6-1: Using ep0 maxpacket: 16
[  309.419268][ T3286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.430032][ T3286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.439795][ T3286] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  309.452770][ T3286] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  309.461796][ T3286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.474054][ T3286] usb 6-1: config 0 descriptor??
[  309.588491][ T3825] loop3: detected capacity change from 0 to 128
[  309.716568][ T3827] loop1: detected capacity change from 0 to 128
[  309.732193][ T3827] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,,errors=continue. Quota mode: none.
[  309.747478][ T3827] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.761781][ T3827] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.883: bg 0: block 81: padding at end of block bitmap is not set
[  309.772842][ T3833] loop0: detected capacity change from 0 to 1024
[  309.826052][ T3833] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.885: Failed to acquire dquot type 0
[  309.841187][ T3833] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  309.855893][ T3833] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #13: comm syz.0.885: corrupted inode contents
[  309.874200][ T3833] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #13: comm syz.0.885: mark_inode_dirty error
[  309.885946][ T3833] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #13: comm syz.0.885: corrupted inode contents
[  309.904333][ T3833] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #13: comm syz.0.885: mark_inode_dirty error
[  309.917322][ T3833] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #13: comm syz.0.885: corrupted inode contents
[  309.929742][ T3833] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  309.938377][ T3833] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #13: comm syz.0.885: corrupted inode contents
[  309.950511][ T3833] EXT4-fs error (device loop0): ext4_truncate:4303: inode #13: comm syz.0.885: mark_inode_dirty error
[  309.961642][ T3833] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  309.971561][ T3833] EXT4-fs (loop0): 1 truncate cleaned up
[  309.977135][ T3833] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  310.022413][ T3286] uclogic 0003:5543:0064.0001: ignoring exceeding usage max
[  310.031946][ T3286] uclogic 0003:5543:0064.0001: No inputs registered, leaving
[  310.040673][ T3286] uclogic 0003:5543:0064.0001: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0
[  310.241133][  T780] usb 6-1: USB disconnect, device number 4
[  310.554103][ T3859] syz.0.895[3859] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  310.554339][ T3859] syz.0.895[3859] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  310.705239][ T3861] loop4: detected capacity change from 0 to 2048
[  310.915223][ T3865] loop5: detected capacity change from 0 to 2048
[  310.981018][ T3861] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  311.040366][ T3865] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  311.341607][ T3871] tipc: Started in network mode
[  311.346320][ T3871] tipc: Node identity 423b835576c8, cluster identity 4711
[  311.356227][ T2644] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  311.379817][ T3871] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[  311.422056][ T3871] ªªªªªª: renamed from syzkaller0
[  311.469837][ T3871] tipc: Disabling bearer <eth:syzkaller0>
[  311.581277][ T3896] loop5: detected capacity change from 0 to 256
[  311.631998][ T3902] loop3: detected capacity change from 0 to 512
[  311.640047][ T3898] loop1: detected capacity change from 0 to 2048
[  311.660399][ T3902] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  311.739260][ T3898] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  311.897352][ T3920] loop0: detected capacity change from 0 to 512
[  311.924066][ T3917] loop5: detected capacity change from 0 to 512
[  311.936885][ T3922] loop3: detected capacity change from 0 to 1024
[  311.974421][ T3920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  311.986436][ T3920] EXT4-fs (loop0): 1 truncate cleaned up
[  311.993187][ T3920] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,grpid,init_itable=0x0000000000000006,,errors=continue. Quota mode: none.
[  312.017727][ T3917] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.919: invalid indirect mapped block 256 (level 2)
[  312.049106][ T3917] EXT4-fs (loop5): 2 truncates cleaned up
[  312.054683][ T3917] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  312.070393][ T3922] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000005,dioread_lock,,errors=continue. Quota mode: none.
[  312.187311][ T3930] loop3: detected capacity change from 0 to 512
[  312.195686][ T3936] loop4: detected capacity change from 0 to 128
[  312.211688][ T3934] loop0: detected capacity change from 0 to 512
[  312.229891][ T3940] syz.1.928[3940] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  312.229921][ T3930] EXT4-fs (loop3): first meta block group too large: 127 (group descriptor block count 1)
[  312.229968][ T3940] syz.1.928[3940] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  312.252259][ T3936] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  312.279312][ T3934] EXT4-fs (loop0): orphan cleanup on readonly fs
[  312.291051][  T330] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  312.293065][ T3943] tun0: tun_chr_ioctl cmd 21731
[  312.307144][ T3934] __quota_error: 345 callbacks suppressed
[  312.307162][ T3934] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  312.322813][ T3945] loop5: detected capacity change from 0 to 1024
[  312.329295][ T3934] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  312.339292][ T3934] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.924: Failed to acquire dquot type 1
[  312.358523][ T3934] EXT4-fs (loop0): 1 truncate cleaned up
[  312.365303][ T3934] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,delalloc,nodioread_nolock,init_itable,,errors=continue. Quota mode: writeback.
[  312.405260][   T30] audit: type=1400 audit(1733896607.107:790): avc:  denied  { bind } for  pid=3948 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  312.449430][ T3945] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  312.470922][   T30] audit: type=1400 audit(1733896607.107:791): avc:  denied  { listen } for  pid=3948 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  312.491153][   T30] audit: type=1400 audit(1733896607.107:792): avc:  denied  { write } for  pid=3948 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  312.510641][   T30] audit: type=1400 audit(1733896607.107:793): avc:  denied  { accept } for  pid=3948 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  312.530151][   T30] audit: type=1400 audit(1733896607.137:794): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.554121][   T30] audit: type=1400 audit(1733896607.137:795): avc:  denied  { open } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.577953][   T30] audit: type=1400 audit(1733896607.137:796): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.603647][   T30] audit: type=1400 audit(1733896607.147:797): avc:  denied  { prog_load } for  pid=3953 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  312.632065][ T3945] loop_set_status: loop5 () has still dirty pages (nrpages=4)
[  312.700274][ T2644] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  312.704845][ T3971] loop1: detected capacity change from 0 to 256
[  312.741571][ T3975] loop0: detected capacity change from 0 to 256
[  312.748031][ T2644] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  312.785248][ T3964] loop4: detected capacity change from 0 to 2048
[  312.969791][ T3997] loop4: detected capacity change from 0 to 128
[  313.001369][ T3999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3999 comm=syz.0.956
[  313.067226][ T4006] loop1: detected capacity change from 0 to 2048
[  313.087786][ T4008] loop0: detected capacity change from 0 to 512
[  313.100415][ T4006]  loop1: p1 < > p4
[  313.101407][ T4010] loop4: detected capacity change from 0 to 512
[  313.105632][ T4006] loop1: p4 size 8388608 extends beyond EOD, truncated
[  313.122313][ T4008] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #3: comm syz.0.960: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  313.129398][ T4010] EXT4-fs (loop4): Ignoring removed oldalloc option
[  313.140875][ T4008] EXT4-fs error (device loop0): ext4_quota_enable:6382: comm syz.0.960: Bad quota inode: 3, type: 0
[  313.158980][ T4010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  313.170584][ T4002] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.170618][ T4010] EXT4-fs (loop4): 1 truncate cleaned up
[  313.183298][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.185922][ T4008] EXT4-fs warning (device loop0): ext4_enable_quotas:6423: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  313.191647][ T4002] device bridge_slave_0 entered promiscuous mode
[  313.206177][ T4008] EXT4-fs (loop0): mount failed
[  313.211424][ T4010] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,nolazytime,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  313.233503][  T101]  loop1: p1 < > p4
[  313.237874][  T101] loop1: p4 size 8388608 extends beyond EOD, truncated
[  313.244808][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.252350][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.261509][ T4002] device bridge_slave_1 entered promiscuous mode
[  313.317042][ T4022] tipc: Started in network mode
[  313.321775][ T4022] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  313.331485][ T4022] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  313.346816][  T101]  loop1: p1 < > p4
[  313.354069][  T101] loop1: p4 size 8388608 extends beyond EOD, truncated
[  313.404860][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.411942][ T4002] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.419061][ T4002] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.425909][ T4002] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.446373][  T311] udevd[311]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  313.458118][  T338] udevd[338]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  313.509353][  T419] udevd[419]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  313.545210][  T311] udevd[311]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  313.556887][ T3307] device bridge_slave_1 left promiscuous mode
[  313.563702][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.571822][ T3307] device bridge_slave_0 left promiscuous mode
[  313.577790][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.601942][ T3307] device veth1_macvtap left promiscuous mode
[  313.623073][ T4048] mmap: syz.4.975 (4048) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  313.754276][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.765039][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.773206][ T4058] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  313.790729][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  313.807772][ T4070] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  313.811048][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  313.888835][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  313.897669][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  313.909126][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.915979][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.930102][ T4084] loop1: detected capacity change from 0 to 512
[  313.936332][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  313.945151][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  313.953777][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.960646][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.968134][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  313.976530][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  313.993731][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  314.002262][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  314.018554][ T4002] device veth0_vlan entered promiscuous mode
[  314.025723][ T4084] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.993: inode #1: comm syz.1.993: iget: illegal inode #
[  314.039083][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  314.042963][ T4084] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.993: error while reading EA inode 1 err=-117
[  314.047490][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  314.088085][ T4084] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.993: inode #1: comm syz.1.993: iget: illegal inode #
[  314.107019][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  314.117987][ T4084] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.993: error while reading EA inode 1 err=-117
[  314.123916][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  314.130959][ T4084] EXT4-fs (loop1): 1 orphan inode deleted
[  314.143420][ T4084] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000007,auto_da_alloc=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none.
[  314.172727][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  314.180379][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  314.206634][ T4002] device veth1_macvtap entered promiscuous mode
[  314.241467][ T4101] loop4: detected capacity change from 0 to 1024
[  314.254610][ T4103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'.
[  314.264770][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  314.273443][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  314.280691][ T4105] loop0: detected capacity change from 0 to 128
[  314.282781][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  314.294792][ T4101] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  314.314515][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  314.323334][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  314.325176][ T4105] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  314.331978][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  314.350445][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  314.353925][ T4105] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  314.391227][ T4101] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback.
[  314.551206][ T4120] loop6: detected capacity change from 0 to 512
[  314.565068][ T4122] loop1: detected capacity change from 0 to 512
[  314.809979][ T4120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  314.817863][ T4120] System zones: 0-2, 18-18, 34-34
[  314.827158][ T4122] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  314.846971][ T4122] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.860331][ T4120] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1007: bg 0: block 248: padding at end of block bitmap is not set
[  314.892353][ T4120] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.1007: Failed to acquire dquot type 1
[  314.902677][ T4136] loop0: detected capacity change from 0 to 512
[  314.919924][ T4136] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  314.939181][ T4120] EXT4-fs (loop6): 1 truncate cleaned up
[  314.944663][ T4120] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback.
[  314.961462][ T4140] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1010'.
[  314.974054][ T4136] EXT4-fs (loop0): 1 truncate cleaned up
[  314.979961][ T4136] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  315.004584][ T4120] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.175242][ T4162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1023'.
[  315.215467][ T4169] loop4: detected capacity change from 0 to 256
[  315.238217][ T4167] loop1: detected capacity change from 0 to 512
[  315.241167][ T4171] loop3: detected capacity change from 0 to 512
[  315.270123][ T4168] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  315.284199][ T4168] FAT-fs (loop4): Filesystem has been set read-only
[  315.291586][ T4167] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[  315.299500][ T4171] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[  315.299500][ T4171] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  315.299500][ T4171] 
[  315.329014][ T4167] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.371679][ T4167] EXT4-fs error (device loop1): ext4_acquire_dquot:6188: comm syz.1.1024: Failed to acquire dquot type 0
[  315.415342][ T4171] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[  315.415342][ T4171] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  315.415342][ T4171] 
[  315.471494][ T4171] EXT4-fs (loop3): dax option not supported
[  315.702605][ T4208] xt_hashlimit: max too large, truncated to 1048576
[  315.778194][ T4216] syz.0.1046 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  315.839359][ T4221] loop0: detected capacity change from 0 to 512
[  315.889283][ T4225] loop3: detected capacity change from 0 to 512
[  315.920034][ T4225] EXT4-fs (loop3): Ignoring removed bh option
[  315.953934][ T4221] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1048: iget: bad extended attribute block 1
[  315.969423][ T4225] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,bsddf,,errors=continue. Quota mode: writeback.
[  315.999537][ T4221] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1048: couldn't read orphan inode 15 (err -117)
[  316.029497][ T4225] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.046585][ T4234] loop6: detected capacity change from 0 to 128
[  316.053138][ T4221] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[  316.141577][ T4221] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  316.161543][ T4234] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  316.174395][ T4234] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  316.356365][ T4258] loop0: detected capacity change from 0 to 2048
[  316.372177][ T4266] loop6: detected capacity change from 0 to 128
[  316.459460][ T4266] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  316.479246][ T4266] FAT-fs (loop6): Directory bread(block 287) failed
[  316.491040][ T4258] Alternate GPT is invalid, using primary GPT.
[  316.492051][ T4266] FAT-fs (loop6): Directory bread(block 288) failed
[  316.500110][ T4258]  loop0: p2 p3 p7
[  316.506992][ T4266] FAT-fs (loop6): Directory bread(block 289) failed
[  316.507022][ T4266] FAT-fs (loop6): Directory bread(block 290) failed
[  316.507045][ T4266] FAT-fs (loop6): Directory bread(block 291) failed
[  316.523910][ T4273] loop3: detected capacity change from 0 to 128
[  316.527224][ T4266] FAT-fs (loop6): Directory bread(block 292) failed
[  316.542713][ T4266] FAT-fs (loop6): Directory bread(block 293) failed
[  316.549433][ T4266] FAT-fs (loop6): Directory bread(block 294) failed
[  316.729536][ T4266] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  316.890313][  T311] udevd[311]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  316.915538][  T419] udevd[419]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  316.915632][  T420] udevd[420]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  317.158537][ T4294] loop4: detected capacity change from 0 to 512
[  317.203438][ T4297] loop3: detected capacity change from 0 to 128
[  317.319700][ T4294] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  317.332124][ T4294] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  317.358820][   T30] kauditd_printk_skb: 349 callbacks suppressed
[  317.358837][   T30] audit: type=1326 audit(1733896612.057:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2b9ff8f19 code=0x7ffc0000
[  317.416233][ T4318] syz.6.1091[4318] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  317.416309][ T4318] syz.6.1091[4318] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  317.437929][   T30] audit: type=1326 audit(1733896612.057:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b9ff8f19 code=0x7ffc0000
[  317.486069][ T4318] 9pnet: Could not find request transport: rdma
[  317.544851][   T30] audit: type=1326 audit(1733896612.057:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff2b9ff8f19 code=0x7ffc0000
[  317.575419][   T30] audit: type=1326 audit(1733896612.057:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b9ff8f19 code=0x7ffc0000
[  317.645357][ T4340] loop6: detected capacity change from 0 to 1024
[  317.657092][   T30] audit: type=1326 audit(1733896612.057:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff2b9ff8f19 code=0x7ffc0000
[  317.698623][   T30] audit: type=1326 audit(1733896612.067:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b9ff8f19 code=0x7ffc0000
[  317.717598][ T4349] loop0: detected capacity change from 0 to 1024
[  317.734124][ T4340] EXT4-fs (loop6): Ignoring removed nobh option
[  317.744045][   T30] audit: type=1326 audit(1733896612.067:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b9ff8f19 code=0x7ffc0000
[  317.750105][ T4340] EXT4-fs (loop6): Ignoring removed orlov option
[  317.782204][ T4349] EXT4-fs (loop0): Ignoring removed orlov option
[  317.803942][ T4349] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  317.822267][ T4349] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  317.844455][   T30] audit: type=1400 audit(1733896612.117:1150): avc:  denied  { integrity } for  pid=4317 comm="syz.6.1091" lockdown_reason="use of bpf to write user RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1
[  317.883859][ T4368] loop3: detected capacity change from 0 to 128
[  317.896130][   T30] audit: type=1326 audit(1733896612.187:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  317.899588][ T4340] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,abort,block_validity,init_itable=0x0000000000000006,usrjquota=,max_dir_size_kb=0x00000000000001ff,nobh,bsddf,orlov,user_xattr,init_itable=0x0000000000000400,,errors=continue. Quota mode: none.
[  317.919734][   T30] audit: type=1326 audit(1733896612.187:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff109e10f19 code=0x7ffc0000
[  317.971545][ T4371] loop1: detected capacity change from 0 to 2048
[  317.983403][ T4349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  317.996865][ T4349] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  318.045825][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  318.124900][ T1307] kernel write not supported for file bpf-prog (pid: 1307 comm: kworker/1:9)
[  318.179306][ T4388] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  318.206840][ T4394] request_module fs-nfs succeeded, but still no fs?
[  318.260401][ T4404] loop0: detected capacity change from 0 to 128
[  318.367311][ T4418] loop6: detected capacity change from 0 to 2048
[  318.431050][ T4418]  loop6: p1 < > p4
[  318.435306][ T4418] loop6: p4 size 8388608 extends beyond EOD, truncated
[  318.442300][ T4428] loop0: detected capacity change from 0 to 512
[  318.519748][ T4428] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  318.569359][ T4442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7058 sclass=netlink_route_socket pid=4442 comm=syz.3.1145
[  318.570049][ T4428] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_nolock,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  318.619452][ T4428] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.733205][  T311] udevd[311]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  318.752268][  T338] udevd[338]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  318.783360][ T4453] SELinux:  policydb version 0 does not match my version range 15-33
[  318.803667][ T4453] SELinux: failed to load policy
[  318.812304][ T4458] loop3: detected capacity change from 0 to 2048
[  318.848345][ T4460] loop6: detected capacity change from 0 to 512
[  318.864275][ T4460] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  318.872132][ T4460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  318.881206][ T4460] EXT4-fs (loop6): orphan cleanup on readonly fs
[  318.887786][ T4460] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949761 > max in inode 13
[  318.898048][ T4460] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949762 > max in inode 13
[  318.908522][ T4460] EXT4-fs (loop6): 1 truncate cleaned up
[  318.914344][ T4460] EXT4-fs (loop6): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none.
[  318.930485][ T4458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  318.942577][ T4460] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.1153: dx entry: limit 65535 != root limit 120
[  318.954944][ T4460] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1153: Corrupt directory, running e2fsck is recommended
[  319.022384][ T4469] loop6: detected capacity change from 0 to 128
[  319.162429][ T4487] loop1: detected capacity change from 0 to 512
[  319.196840][ T4487] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  319.244078][ T4487] ==================================================================
[  319.251980][ T4487] BUG: KASAN: use-after-free in __ext4_iget+0x2ee/0x3ef0
[  319.258828][ T4487] Read of size 8 at addr ffff8881290bf838 by task syz.1.1165/4487
[  319.266470][ T4487] 
[  319.268635][ T4487] CPU: 0 PID: 4487 Comm: syz.1.1165 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0
[  319.278356][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  319.288258][ T4487] Call Trace:
[  319.291378][ T4487]  <TASK>
[  319.294158][ T4487]  dump_stack_lvl+0x151/0x1c0
[  319.298680][ T4487]  ? io_uring_drop_tctx_refs+0x190/0x190
[  319.304142][ T4487]  ? panic+0x760/0x760
[  319.308038][ T4487]  ? __kasan_check_write+0x14/0x20
[  319.312990][ T4487]  print_address_description+0x87/0x3b0
[  319.318401][ T4487]  ? __se_sys_mount+0x2c4/0x3b0
[  319.323056][ T4487]  ? __x64_sys_mount+0xbf/0xd0
[  319.327656][ T4487]  kasan_report+0x179/0x1c0
[  319.331993][ T4487]  ? __ext4_iget+0x2ee/0x3ef0
[  319.336509][ T4487]  ? __ext4_iget+0x2ee/0x3ef0
[  319.341019][ T4487]  __asan_report_load8_noabort+0x14/0x20
[  319.346691][ T4487]  __ext4_iget+0x2ee/0x3ef0
[  319.351016][ T4487]  ? xas_nomem+0x19a/0x1d0
[  319.355354][ T4487]  ? ida_alloc_range+0x9fd/0xa80
[  319.360124][ T4487]  ? __kasan_kmalloc+0x9/0x10
[  319.364634][ T4487]  ? ext4_get_projid+0x140/0x140
[  319.369515][ T4487]  ? __kasan_check_write+0x14/0x20
[  319.374456][ T4487]  ? _raw_write_lock+0xa4/0x170
[  319.379154][ T4487]  ? __proc_create+0x65a/0xa00
[  319.383741][ T4487]  ? ext4_init_orphan_info+0x161/0x1080
[  319.389127][ T4487]  ext4_enable_quotas+0x556/0x980
[  319.393988][ T4487]  ? ext4_force_commit+0xc0/0xc0
[  319.398766][ T4487]  ? proc_create+0x2b0/0x2b0
[  319.403202][ T4487]  ? ext4_register_sysfs+0x281/0x2c0
[  319.408304][ T4487]  ext4_fill_super+0x8b95/0x96e0
[  319.413088][ T4487]  ? ext4_mount+0x40/0x40
[  319.417255][ T4487]  ? vscnprintf+0x80/0x80
[  319.421419][ T4487]  ? set_blocksize+0x1f0/0x380
[  319.426013][ T4487]  ? sb_set_blocksize+0xa8/0xf0
[  319.430699][ T4487]  mount_bdev+0x282/0x3b0
[  319.434865][ T4487]  ? ext4_mount+0x40/0x40
[  319.439036][ T4487]  ext4_mount+0x34/0x40
[  319.443020][ T4487]  legacy_get_tree+0xf1/0x190
[  319.447628][ T4487]  ? ext4_errno_to_code+0x140/0x140
[  319.452655][ T4487]  vfs_get_tree+0x88/0x290
[  319.456914][ T4487]  do_new_mount+0x2ba/0xb30
[  319.461252][ T4487]  ? do_move_mount_old+0x160/0x160
[  319.466196][ T4487]  ? security_capable+0x87/0xb0
[  319.470895][ T4487]  ? ns_capable+0x89/0xe0
[  319.475059][ T4487]  path_mount+0x671/0x1070
[  319.479305][ T4487]  __se_sys_mount+0x2c4/0x3b0
[  319.483820][ T4487]  ? exc_page_fault+0x47a/0x7f0
[  319.488503][ T4487]  ? __x64_sys_mount+0xd0/0xd0
[  319.493201][ T4487]  __x64_sys_mount+0xbf/0xd0
[  319.497625][ T4487]  x64_sys_call+0x49d/0x9a0
[  319.501964][ T4487]  do_syscall_64+0x3b/0xb0
[  319.506217][ T4487]  ? clear_bhb_loop+0x35/0x90
[  319.510730][ T4487]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  319.516457][ T4487] RIP: 0033:0x7ff109e126ba
[  319.520715][ T4487] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.540336][ T4487] RSP: 002b:00007ff108487e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  319.548580][ T4487] RAX: ffffffffffffffda RBX: 00007ff108487f10 RCX: 00007ff109e126ba
[  319.556393][ T4487] RDX: 0000000020000100 RSI: 0000000020000500 RDI: 00007ff108487ed0
[  319.564202][ T4487] RBP: 0000000020000100 R08: 00007ff108487f10 R09: 0000000002008002
[  319.572106][ T4487] R10: 0000000002008002 R11: 0000000000000246 R12: 0000000020000500
[  319.579921][ T4487] R13: 00007ff108487ed0 R14: 000000000000054e R15: 0000000020000080
[  319.587736][ T4487]  </TASK>
[  319.590599][ T4487] 
[  319.592768][ T4487] Allocated by task 1187:
[  319.596931][ T4487]  __kasan_slab_alloc+0xb1/0xe0
[  319.601822][ T4487]  slab_post_alloc_hook+0x53/0x2c0
[  319.606739][ T4487]  kmem_cache_alloc+0xf5/0x200
[  319.611337][ T4487]  f2fs_alloc_inode+0x26/0x340
[  319.615943][ T4487]  iget_locked+0x174/0x860
[  319.620193][ T4487]  f2fs_iget+0x55/0x4fe0
[  319.624273][ T4487]  f2fs_fill_super+0x4f0f/0x8190
[  319.629041][ T4487]  mount_bdev+0x282/0x3b0
[  319.633215][ T4487]  f2fs_mount+0x34/0x40
[  319.637201][ T4487]  legacy_get_tree+0xf1/0x190
[  319.641715][ T4487]  vfs_get_tree+0x88/0x290
[  319.645984][ T4487]  do_new_mount+0x2ba/0xb30
[  319.650310][ T4487]  path_mount+0x671/0x1070
[  319.654559][ T4487]  __se_sys_mount+0x2c4/0x3b0
[  319.659158][ T4487]  __x64_sys_mount+0xbf/0xd0
[  319.663584][ T4487]  x64_sys_call+0x49d/0x9a0
[  319.667925][ T4487]  do_syscall_64+0x3b/0xb0
[  319.672182][ T4487]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  319.677908][ T4487] 
[  319.680079][ T4487] Last potentially related work creation:
[  319.685642][ T4487]  kasan_save_stack+0x3b/0x60
[  319.690147][ T4487]  __kasan_record_aux_stack+0xd3/0xf0
[  319.695353][ T4487]  kasan_record_aux_stack_noalloc+0xb/0x10
[  319.700992][ T4487]  call_rcu+0x123/0x10b0
[  319.705081][ T4487]  evict+0x87d/0x930
[  319.708806][ T4487]  iput+0x63b/0x7e0
[  319.712450][ T4487]  f2fs_fill_super+0x6b2a/0x8190
[  319.717225][ T4487]  mount_bdev+0x282/0x3b0
[  319.721389][ T4487]  f2fs_mount+0x34/0x40
[  319.725385][ T4487]  legacy_get_tree+0xf1/0x190
[  319.729899][ T4487]  vfs_get_tree+0x88/0x290
[  319.734235][ T4487]  do_new_mount+0x2ba/0xb30
[  319.738576][ T4487]  path_mount+0x671/0x1070
[  319.742830][ T4487]  __se_sys_mount+0x2c4/0x3b0
[  319.747340][ T4487]  __x64_sys_mount+0xbf/0xd0
[  319.751770][ T4487]  x64_sys_call+0x49d/0x9a0
[  319.756105][ T4487]  do_syscall_64+0x3b/0xb0
[  319.760358][ T4487]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  319.766088][ T4487] 
[  319.768259][ T4487] The buggy address belongs to the object at ffff8881290bf330
[  319.768259][ T4487]  which belongs to the cache f2fs_inode_cache of size 1424
[  319.782665][ T4487] The buggy address is located 1288 bytes inside of
[  319.782665][ T4487]  1424-byte region [ffff8881290bf330, ffff8881290bf8c0)
[  319.795945][ T4487] The buggy address belongs to the page:
[  319.801436][ T4487] page:ffffea0004a42e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881290be710 pfn:0x1290b8
[  319.812786][ T4487] head:ffffea0004a42e00 order:3 compound_mapcount:0 compound_pincount:0
[  319.820942][ T4487] flags: 0x4000000000010200(slab|head|zone=1)
[  319.826857][ T4487] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888107fb3980
[  319.835269][ T4487] raw: ffff8881290be710 0000000080150002 00000001ffffffff 0000000000000000
[  319.843682][ T4487] page dumped because: kasan: bad access detected
[  319.849942][ T4487] page_owner tracks the page as allocated
[  319.855486][ T4487] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 321, ts 24107814189, free_ts 0
[  319.875795][ T4487]  post_alloc_hook+0x1a3/0x1b0
[  319.880395][ T4487]  prep_new_page+0x1b/0x110
[  319.884820][ T4487]  get_page_from_freelist+0x3550/0x35d0
[  319.890200][ T4487]  __alloc_pages+0x27e/0x8f0
[  319.894642][ T4487]  new_slab+0x9a/0x4e0
[  319.898549][ T4487]  ___slab_alloc+0x39e/0x830
[  319.903067][ T4487]  __slab_alloc+0x4a/0x90
[  319.907232][ T4487]  kmem_cache_alloc+0x134/0x200
[  319.911916][ T4487]  f2fs_alloc_inode+0x26/0x340
[  319.916697][ T4487]  iget_locked+0x174/0x860
[  319.920940][ T4487]  f2fs_iget+0x55/0x4fe0
[  319.925017][ T4487]  f2fs_fill_super+0x4f0f/0x8190
[  319.929788][ T4487]  mount_bdev+0x282/0x3b0
[  319.933957][ T4487]  f2fs_mount+0x34/0x40
[  319.937947][ T4487]  legacy_get_tree+0xf1/0x190
[  319.942462][ T4487]  vfs_get_tree+0x88/0x290
[  319.946716][ T4487] page_owner free stack trace missing
[  319.951922][ T4487] 
[  319.954089][ T4487] Memory state around the buggy address:
[  319.959565][ T4487]  ffff8881290bf700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  319.967461][ T4487]  ffff8881290bf780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  319.975360][ T4487] >ffff8881290bf800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  319.983253][ T4487]                                         ^
[  319.988986][ T4487]  ffff8881290bf880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  319.996882][ T4487]  ffff8881290bf900: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[  320.004778][ T4487] ==================================================================
[  320.012679][ T4487] Disabling lock debugging due to kernel taint
[  320.050064][ T4487] EXT4-fs warning (device loop1): ext4_enable_quotas:6423: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  320.065476][ T4487] EXT4-fs (loop1): mount failed