last executing test programs:

47.311486263s ago: executing program 1 (id=485):
openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
unshare(0x8000600)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x38}}, 0x8844)

47.256944285s ago: executing program 1 (id=487):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00001800000061917c000000fcff182a0000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x7ff}, 0x94)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x2, 0x8, 0x5, 0x7f, 0xb2c, 0x4, 0xffff, 0x710})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00007a3000/0x4000)=nil, &(0x7f0000514000/0x1000)=nil, &(0x7f00009af000/0x3000)=nil, &(0x7f0000651000/0x1000)=nil, &(0x7f00002e5000/0x3000)=nil, &(0x7f0000854000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000061e000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000001b000/0x3000)=nil, &(0x7f0000060000/0x1000)=nil, &(0x7f00000003c0)="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", 0xfd, r4}, 0x68)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}})
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}})
timer_create(0x3, 0x0, &(0x7f0000000040)=<r6=>0x0)
timer_settime(r6, 0x1, 0x0, 0x0)

46.323743052s ago: executing program 1 (id=493):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

42.571411654s ago: executing program 1 (id=521):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@abort}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==")
read(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

42.013121455s ago: executing program 1 (id=527):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80007, @private1, 0x8}, 0x1c)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, 0xffffffffffffffff, 0x0}])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x6, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
memfd_create(0x0, 0x1)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)

38.777028357s ago: executing program 1 (id=536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50)
listen(r2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f00000012c0)=[0x0])
accept$inet6(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0)

38.61381497s ago: executing program 32 (id=536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50)
listen(r2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f00000012c0)=[0x0])
accept$inet6(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0)

4.756897729s ago: executing program 5 (id=828):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000"], 0x24, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

3.714796249s ago: executing program 5 (id=831):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
socket$key(0xf, 0x3, 0x2)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x200000)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c5)
getdents64(r3, 0x0, 0x0)

3.305842737s ago: executing program 5 (id=835):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x28}}}}}, 0x36)

3.047185072s ago: executing program 5 (id=837):
r0 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
keyctl$link(0x8, r0, r0)

3.027734712s ago: executing program 4 (id=838):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f00000003c0)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@errors_remount}, {@discard}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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")
getpid()
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2.976862013s ago: executing program 5 (id=839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$sock(r3, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ftruncate(r7, 0x2000009)
sendfile(r1, r7, 0x0, 0x7ffff004)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

2.822968746s ago: executing program 3 (id=841):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006)

2.776876627s ago: executing program 3 (id=842):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r0 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x114a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003)

2.591330641s ago: executing program 4 (id=843):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000"], 0x24, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

1.791987716s ago: executing program 3 (id=844):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x4)
socket(0x10, 0x80002, 0xfffffffe)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r1 = syz_open_dev$evdev(&(0x7f00000041c0), 0x3, 0x20000)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000004200)=0xaae)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000004240)=0x8e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getpgid(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)

1.725322817s ago: executing program 0 (id=845):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
socket$key(0xf, 0x3, 0x2)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x200000)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c5)
getdents64(r3, 0x0, 0x0)

1.605604099s ago: executing program 4 (id=846):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108)

1.304965365s ago: executing program 0 (id=847):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000000000226bd7000fcdbdf25988fcda6"], 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x24008015)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.243359166s ago: executing program 4 (id=848):
r0 = io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x1000168})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x406, r1)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x4000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
close_range(r0, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

1.232051696s ago: executing program 3 (id=849):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0)

1.156820118s ago: executing program 4 (id=850):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000080))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.150223918s ago: executing program 0 (id=851):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80007, @private1, 0x8}, 0x1c)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, 0xffffffffffffffff, 0x0}])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x6, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)

1.127298469s ago: executing program 4 (id=852):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.06258353s ago: executing program 0 (id=853):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)="51e657b8220ca193c9de9030c3c7175ae0132383bf66bd1ea5bd07a8092f5c1c356ef81ebc8a3ed11284c75e4991ca84a0eda6ac4148ace258f78bc2340c45834bc28c93523f00c13f7bda920d040647a60c2f548c6d1556", 0x58}, {&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc3c9248ca350afa19d6fbf95238e23db454a07c93a0831e31bdca1de56a48b55c0e56450721a31ba40ea9fb151d57852e371a2ace8bf18e4f347744d20282453e", 0x53}, {&(0x7f0000000380)="08949a79dd9783363f6ec6795014e732a237722fd113e5b2df06331471284deb980af4fba2b20b257d426c27b35133bea57a0a9126db69cb1b4d071ca4b46a576a1a07a15e1e6d25a881c6746d9d7144673da78803763dbed0fb8b258056b77d333bca37e079e4edc895e87512f8eb46c7ca53abb303022183e6ad4ed2b524125f688a01da0fbd08bace0e4931cee109fb1a667e87f89fd34e8d959d0589655dd43f9c72e8d49aabae73b5f02a", 0xad}, {&(0x7f0000000640)="bfb665aee08189f9e638cc", 0xb}, {&(0x7f0000000440)="a11ed88992f69f03e8662746dce791f15f3513eff62810f80754890c57886c99e7305e4ad9891be383211c908efdfa5f18696fbb91a875d68f9806da294261aac2f3d35db6e676e20b9af8e41cfcae44e420d981be17428dfed1a00355b222ffdbcd45b8d0ecc80d6c6db46dea0fa69794b7e69fc1b28dc82e2e91a47db6e035", 0x80}, {&(0x7f00000000c0)="d5ff9d56d9335281cc13bf8bedad4c66a6db8c247ddbdfffe8bc9c2eeda7c13c66352b61b4e6f9ef71ae4f101a8599845214", 0x32}, {&(0x7f00000001c0)="f1", 0x1}], 0x7}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0)

1.03767639s ago: executing program 5 (id=854):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r0 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00')
preadv(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x114a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003)

1.02117933s ago: executing program 0 (id=855):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0)

924.459893ms ago: executing program 2 (id=857):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$inet(0xa, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$inet(0xa, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

908.402013ms ago: executing program 0 (id=858):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5508, &(0x7f0000002480)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x9000e0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)

891.455663ms ago: executing program 2 (id=859):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

556.958869ms ago: executing program 2 (id=860):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

493.443741ms ago: executing program 2 (id=861):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x28044085}, 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x40010)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

426.323102ms ago: executing program 2 (id=862):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}}, 0x0)

407.823822ms ago: executing program 2 (id=863):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x20000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6)
close_range(r2, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x8, 0x4000, 0x4000)

216.942196ms ago: executing program 3 (id=864):
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r2, &(0x7f0000000040)=ANY=[], 0x27)

0s ago: executing program 3 (id=865):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80007, @private1, 0x8}, 0x1c)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, 0xffffffffffffffff, 0x0}])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x6, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)

kernel console output (not intermixed with test programs):

21][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.891964][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.900329][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.908574][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.916619][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.924865][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.933135][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.945069][  T284] device veth0_vlan entered promiscuous mode
[   23.951661][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.959675][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.972138][  T286] device veth1_macvtap entered promiscuous mode
[   23.981607][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.989784][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.997381][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.005532][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.013751][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.021474][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.029783][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.042627][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.051034][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.059527][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.067953][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.085493][  T283] device veth0_vlan entered promiscuous mode
[   24.098828][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.107322][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.115629][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.123894][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.132320][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.140809][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.149363][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.157731][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.166057][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.173636][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.193667][  T286] request_module fs-gadgetfs succeeded, but still no fs?
[   24.195459][  T283] device veth1_macvtap entered promiscuous mode
[   24.213262][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.221781][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.230517][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.239022][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.247214][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.255318][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.263636][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.273459][  T284] device veth1_macvtap entered promiscuous mode
[   24.283158][  T282] device veth0_vlan entered promiscuous mode
[   24.290633][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.304438][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.312747][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.321686][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.330637][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.362786][  T282] device veth1_macvtap entered promiscuous mode
[   24.370658][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.378405][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.385959][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.395257][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.403914][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.412556][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.421295][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.430231][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.438835][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.447269][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.456254][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.498442][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.511801][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.521246][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.531695][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.552251][  T338] loop4: detected capacity change from 0 to 40427
[   24.651651][  T338] F2FS-fs (loop4): Unrecognized mount option "barrier" or missing value
[   24.722827][  T349] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3'.
[   24.766785][   T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.836792][   T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   24.956717][  T289] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   25.026727][   T26] usb 2-1: Using ep0 maxpacket: 8
[   25.076727][   T39] usb 4-1: Using ep0 maxpacket: 32
[   25.147220][   T26] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[   25.154786][   T26] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   25.166318][   T26] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   25.196756][   T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   25.206937][   T39] usb 4-1: config 0 has no interfaces?
[   25.256751][   T26] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[   25.264280][   T26] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   25.275854][   T26] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   25.366853][   T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   25.376189][   T26] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[   25.383642][   T26] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   25.394996][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.403242][   T39] usb 4-1: Product: syz
[   25.406772][  T289] usb 5-1: unable to get BOS descriptor or descriptor too short
[   25.407442][   T39] usb 4-1: Manufacturer: syz
[   25.419738][   T26] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   25.430522][   T39] usb 4-1: SerialNumber: syz
[   25.436309][   T39] usb 4-1: config 0 descriptor??
[   25.447036][  T289] usb 5-1: not running at top speed; connect to a high speed hub
[   25.550636][  T289] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   25.560953][  T289] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   25.666824][   T26] usb 2-1: string descriptor 0 read error: -22
[   25.673120][   T26] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   25.688319][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.856836][  T289] usb 5-1: string descriptor 0 read error: -22
[   25.863629][  T289] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   25.872595][  T364] Zero length message leads to an empty skb
[   25.879507][  T289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.881034][   T39] usb 4-1: USB disconnect, device number 2
[   25.931742][  T289] usb 5-1: 0:2 : does not exist
[   26.046825][   T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.060835][   T58] usb 2-1: USB disconnect, device number 2
[   26.306712][   T26] usb 1-1: Using ep0 maxpacket: 32
[   26.316801][  T333] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   26.336796][  T289] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[   26.426880][   T26] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[   26.435105][   T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   26.445722][   T26] usb 1-1: config 0 has no interface number 0
[   26.452125][   T26] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0xA has invalid wMaxPacketSize 0
[   26.462115][   T26] usb 1-1: config 0 interface 85 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[   26.475219][   T26] usb 1-1: config 0 interface 85 has no altsetting 0
[   26.549347][  T289] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[   26.589912][  T289] usb 5-1: USB disconnect, device number 2
[   26.592334][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   26.621201][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   26.646938][   T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   26.652723][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   26.671049][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.676837][  T333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   26.697513][  T333] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   26.706744][   T26] usb 1-1: Product: syz
[   26.714868][   T26] usb 1-1: Manufacturer: syz
[   26.719453][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   26.727488][   T26] usb 1-1: SerialNumber: syz
[   26.728327][   T26] usb 1-1: config 0 descriptor??
[   26.737941][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   26.746973][  T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.780781][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   26.783820][  T380] loop1: detected capacity change from 0 to 512
[   26.809864][  T333] usb 3-1: config 0 descriptor??
[   26.823182][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   26.834925][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   26.840008][   T26] usbhid 1-1:0.85: couldn't find an input interrupt endpoint
[   26.936598][  T380] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   26.947843][   T30] kauditd_printk_skb: 40 callbacks suppressed
[   26.947921][   T30] audit: type=1400 audit(1759254506.153:114): avc:  denied  { create } for  pid=384 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   27.012434][   T30] audit: type=1400 audit(1759254506.153:115): avc:  denied  { map } for  pid=384 comm="syz.4.16" path="socket:[15651]" dev="sockfs" ino=15651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   27.013180][  T380] Quota error (device loop1): find_tree_dqentry: Getting block too big (2306 >= 6)
[   27.084949][   T30] audit: type=1400 audit(1759254506.153:116): avc:  denied  { read } for  pid=384 comm="syz.4.16" path="socket:[15651]" dev="sockfs" ino=15651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   27.087430][  T380] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   27.117823][  T380] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.14: Failed to acquire dquot type 0
[   27.129940][   T30] audit: type=1400 audit(1759254506.163:117): avc:  denied  { create } for  pid=384 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   27.162103][   T30] audit: type=1400 audit(1759254506.163:118): avc:  denied  { setopt } for  pid=384 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   27.578224][   T30] audit: type=1400 audit(1759254506.193:119): avc:  denied  { mount } for  pid=378 comm="syz.1.14" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   27.580737][   T26] usb 1-1: USB disconnect, device number 2
[   27.605778][   T30] audit: type=1400 audit(1759254506.223:120): avc:  denied  { write } for  pid=378 comm="syz.1.14" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.628036][   T30] audit: type=1400 audit(1759254506.223:121): avc:  denied  { remove_name } for  pid=378 comm="syz.1.14" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.982924][  T402] tipc: Started in network mode
[   27.988850][  T402] tipc: Node identity 6ad79bab08a, cluster identity 4711
[   27.996454][  T402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   28.010195][  T402] tipc: Resetting bearer <eth:syzkaller0>
[   28.020824][  T401] tipc: Disabling bearer <eth:syzkaller0>
[   28.053742][  T388] loop4: detected capacity change from 0 to 40427
[   28.074585][  T388] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   28.082594][  T388] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   28.119615][  T388] F2FS-fs (loop4): invalid crc value
[   28.151981][  T388] F2FS-fs (loop4): Found nat_bits in checkpoint
[   28.346418][  T388] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   28.354296][  T388] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   28.685243][  T412] loop3: detected capacity change from 0 to 128
[   28.707907][  T412] EXT4-fs (loop3): Ignoring removed nobh option
[   28.735990][  T412] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   28.751871][  T412] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   28.882218][   T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   28.897606][   T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   29.217484][   T20] usb 3-1: USB disconnect, device number 2
[   29.292187][  T420] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   29.414577][  T425] loop1: detected capacity change from 0 to 1024
[   29.424006][  T427] loop2: detected capacity change from 0 to 512
[   29.458619][  T425] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   29.483788][  T427] EXT4-fs (loop2): unsupported inode size: 135
[   29.502176][  T427] EXT4-fs (loop2): blocksize: 4096
[   29.509621][  T425] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   29.538931][  T425] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,delalloc,resuid=0x0000000000000000,abort,dioread_nolock,jqfmt=vfsold,data=ordered,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   30.045686][  T442] loop1: detected capacity change from 0 to 512
[   30.060238][  T442] EXT4-fs warning (device loop1): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   30.075921][  T442] EXT4-fs (loop1): mount failed
[   30.119778][  T442] syz.1.31 (442) used greatest stack depth: 21472 bytes left
[   30.246709][   T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   30.466786][  T458] loop4: detected capacity change from 0 to 1024
[   30.567364][  T458] EXT4-fs (loop4): Ignoring removed orlov option
[   30.578118][  T458] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none.
[   30.607273][  T458] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2755: inode #15: comm syz.4.36: corrupted in-inode xattr
[   30.619895][  T458] EXT4-fs (loop4): Remounting filesystem read-only
[   30.626441][  T458] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   30.647226][   T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.657639][   T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.705679][  T462] loop4: detected capacity change from 0 to 128
[   30.746802][   T26] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   30.756008][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[   30.764522][   T26] usb 1-1: SerialNumber: syz
[   30.766114][  T462] EXT4-fs (loop4): Ignoring removed nobh option
[   30.777015][  T462] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   30.789125][  T462] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   31.151934][   T26] usb 1-1: 0:2 : does not exist
[   31.337380][   T26] usb 1-1: USB disconnect, device number 3
[   32.029493][  T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   32.287201][  T481] loop3: detected capacity change from 0 to 40427
[   32.303878][  T481] F2FS-fs (loop3): fault_injection options not supported
[   32.341835][  T486] loop0: detected capacity change from 0 to 1024
[   32.348842][  T481] F2FS-fs (loop3): invalid crc value
[   32.354250][  T481] F2FS-fs (loop3): Wrong cp_pack_start_sum: 1
[   32.368775][  T481] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[   32.416905][  T486] =======================================================
[   32.416905][  T486] WARNING: The mand mount option has been deprecated and
[   32.416905][  T486]          and is ignored by this kernel. Remove the mand
[   32.416905][  T486]          option from the mount to silence this warning.
[   32.416905][  T486] =======================================================
[   32.534597][  T484] loop1: detected capacity change from 0 to 40427
[   32.542289][  T486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   32.597565][  T484] F2FS-fs (loop1): fault_type options not supported
[   32.612088][   T30] kauditd_printk_skb: 31 callbacks suppressed
[   32.612105][   T30] audit: type=1400 audit(1759254511.823:152): avc:  denied  { read write } for  pid=485 comm="syz.0.44" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   32.647144][  T484] F2FS-fs (loop1): invalid crc value
[   32.668173][  T484] F2FS-fs (loop1): Found nat_bits in checkpoint
[   32.728358][  T484] F2FS-fs (loop1): Start checkpoint disabled!
[   32.735264][  T484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   33.004736][   T30] audit: type=1400 audit(1759254512.213:153): avc:  denied  { ioctl } for  pid=502 comm="syz.1.47" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   33.029964][  T503] input: syz1 as /devices/virtual/input/input4
[   33.081299][   T30] audit: type=1400 audit(1759254512.253:154): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=620 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.116876][   T30] audit: type=1400 audit(1759254512.253:155): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=620 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.173917][   T30] audit: type=1400 audit(1759254512.253:156): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=620 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.240987][  T501] loop4: detected capacity change from 0 to 40427
[   33.251164][  T501] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   33.259172][  T501] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   33.271956][  T501] F2FS-fs (loop4): invalid crc value
[   33.282172][  T501] F2FS-fs (loop4): Found nat_bits in checkpoint
[   33.301848][  T510] input: syz0 as /devices/virtual/input/input5
[   33.376371][  T501] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   33.383671][  T501] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   33.490633][   T30] audit: type=1400 audit(1759254512.703:157): avc:  denied  { read write } for  pid=500 comm="syz.4.48" path="/9/file0/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.632133][  T501] attempt to access beyond end of device
[   33.632133][  T501] loop4: rw=524288, want=78024, limit=40427
[   33.647256][  T501] attempt to access beyond end of device
[   33.647256][  T501] loop4: rw=0, want=77832, limit=40427
[   33.668715][  T501] attempt to access beyond end of device
[   33.668715][  T501] loop4: rw=0, want=77832, limit=40427
[   33.685365][   T30] audit: type=1400 audit(1759254512.733:158): avc:  denied  { map } for  pid=500 comm="syz.4.48" path="/9/file0/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.690175][  T501] attempt to access beyond end of device
[   33.690175][  T501] loop4: rw=0, want=77832, limit=40427
[   33.850001][   T30] audit: type=1400 audit(1759254512.733:159): avc:  denied  { execute } for  pid=500 comm="syz.4.48" path="/9/file0/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.873133][  T501] attempt to access beyond end of device
[   33.873133][  T501] loop4: rw=0, want=77832, limit=40427
[   33.884694][  T501] attempt to access beyond end of device
[   33.884694][  T501] loop4: rw=16812033, want=77856, limit=40427
[   34.629593][  T501] syz.4.48 (501) used greatest stack depth: 20032 bytes left
[   34.647065][   T45] attempt to access beyond end of device
[   34.647065][   T45] loop4: rw=1, want=45104, limit=40427
[   34.675861][  T525] capability: warning: `syz.1.54' uses 32-bit capabilities (legacy support in use)
[   34.765093][   T30] audit: type=1400 audit(1759254513.973:160): avc:  denied  { read write } for  pid=529 comm="syz.0.57" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   34.814421][   T30] audit: type=1400 audit(1759254513.973:161): avc:  denied  { open } for  pid=529 comm="syz.0.57" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   34.920883][  T541] loop0: detected capacity change from 0 to 256
[   35.076870][  T333] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   35.194131][  T551] loop3: detected capacity change from 0 to 128
[   35.297576][  T551] EXT4-fs (loop3): Ignoring removed nobh option
[   35.305414][  T551] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   35.318065][  T551] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   37.904359][   T30] kauditd_printk_skb: 9 callbacks suppressed
[   37.904377][   T30] audit: type=1400 audit(1759254517.113:171): avc:  denied  { write } for  pid=579 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.067772][  T582] loop3: detected capacity change from 0 to 16
[   38.250505][  T582] erofs: (device loop3): mounted with root inode @ nid 36.
[   38.399550][  T585] loop3: detected capacity change from 0 to 512
[   38.459186][   T30] audit: type=1400 audit(1759254517.473:172): avc:  denied  { mounton } for  pid=579 comm="syz.3.67" path="/11/file0" dev="loop3" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.485808][  T587] loop4: detected capacity change from 0 to 128
[   38.563732][  T585] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   38.593802][   T30] audit: type=1400 audit(1759254517.773:173): avc:  denied  { create } for  pid=591 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.615235][  T585] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.740013][  T599] loop1: detected capacity change from 0 to 128
[   38.779054][   T30] audit: type=1400 audit(1759254517.773:174): avc:  denied  { ioctl } for  pid=591 comm="syz.1.75" path="socket:[16228]" dev="sockfs" ino=16228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.797362][  T599] EXT4-fs (loop1): Ignoring removed nobh option
[   38.803903][   T30] audit: type=1400 audit(1759254517.773:175): avc:  denied  { bind } for  pid=591 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.832218][  T333] usb 2-1: unable to read config index 0 descriptor/start: -71
[   38.839257][  T599] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   38.844875][  T333] usb 2-1: can't read configurations, error -71
[   38.871286][  T599] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   40.657482][  T617] loop4: detected capacity change from 0 to 16
[   40.739260][  T618] loop1: detected capacity change from 0 to 1024
[   40.747833][  T617] erofs: (device loop4): mounted with root inode @ nid 36.
[   40.818167][  T618] EXT4-fs (loop1): Test dummy encryption mode enabled
[   40.956514][  T618] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,resuid=0x0000000000000000,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,usrquota,block_validity,,errors=continue. Quota mode: writeback.
[   41.217729][  T332] Bluetooth: hci0: Frame reassembly failed (-84)
[   41.239874][  T332] Bluetooth: hci0: Frame reassembly failed (-84)
[   41.386045][   T30] audit: type=1400 audit(1759254520.593:176): avc:  denied  { create } for  pid=612 comm="syz.1.80" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   41.393077][  T618] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   41.512806][  T640] loop1: detected capacity change from 0 to 128
[   42.588633][  T369] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   43.197867][  T663] loop1: detected capacity change from 0 to 512
[   43.226312][   T30] audit: type=1400 audit(1759254522.433:177): avc:  denied  { read write } for  pid=664 comm="syz.3.94" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   43.249461][  T569] Bluetooth: hci0: command 0x1003 tx timeout
[   43.255651][  T448] Bluetooth: hci0: sending frame failed (-49)
[   43.314869][  T663] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[   43.347888][   T30] audit: type=1400 audit(1759254522.473:178): avc:  denied  { open } for  pid=664 comm="syz.3.94" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   43.376793][  T663] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.426853][  T369] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   43.449036][   T30] audit: type=1400 audit(1759254522.653:179): avc:  denied  { unmount } for  pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   43.456731][  T369] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   43.490882][  T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.511388][  T369] usb 3-1: config 0 descriptor??
[   43.665108][  T683] loop3: detected capacity change from 0 to 1024
[   43.822956][   T30] audit: type=1400 audit(1759254522.993:180): avc:  denied  { setattr } for  pid=687 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   44.179887][  T690] loop4: detected capacity change from 0 to 128
[   44.218332][  T690] FAT-fs (loop4): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   44.254058][  T683] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[   44.271425][   T30] audit: type=1400 audit(1759254522.993:181): avc:  denied  { read } for  pid=687 comm="syz.4.104" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   44.308039][  T683] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.318774][   T30] audit: type=1400 audit(1759254522.993:182): avc:  denied  { open } for  pid=687 comm="syz.4.104" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   44.383712][  T683] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 3: comm syz.3.102: lblock 3 mapped to illegal pblock 3 (length 3)
[   44.442470][   T30] audit: type=1400 audit(1759254523.653:183): avc:  denied  { map } for  pid=682 comm="syz.3.102" path="/22/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.443779][  T683] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   44.488469][   T30] audit: type=1400 audit(1759254523.673:184): avc:  denied  { execute } for  pid=682 comm="syz.3.102" path="/22/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   44.535836][  T695] device syzkaller0 entered promiscuous mode
[   44.558788][   T30] audit: type=1400 audit(1759254523.693:185): avc:  denied  { write } for  pid=687 comm="syz.4.104" path="socket:[16775]" dev="sockfs" ino=16775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.592570][  T683] EXT4-fs (loop3): This should not happen!! Data will be lost
[   44.592570][  T683] 
[   44.602958][   T30] audit: type=1400 audit(1759254523.743:186): avc:  denied  { ioctl } for  pid=694 comm="syz.4.105" path="socket:[16782]" dev="sockfs" ino=16782 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.637767][  T693] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.102: lblock 3 mapped to illegal pblock 3 (length 1)
[   44.652609][  T693] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.102: lblock 3 mapped to illegal pblock 3 (length 1)
[   44.671121][  T693] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.102: lblock 3 mapped to illegal pblock 3 (length 1)
[   44.695900][  T693] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.102: lblock 3 mapped to illegal pblock 3 (length 1)
[   44.710599][  T693] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.102: lblock 3 mapped to illegal pblock 3 (length 1)
[   44.725313][  T693] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.102: lblock 3 mapped to illegal pblock 3 (length 1)
[   44.774406][  T332] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8)
[   44.789407][  T332] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   44.802064][  T332] EXT4-fs (loop3): This should not happen!! Data will be lost
[   44.802064][  T332] 
[   45.559636][   T26] Bluetooth: hci0: command 0x1001 tx timeout
[   45.567457][  T448] Bluetooth: hci0: sending frame failed (-49)
[   45.594137][   T26] usb 3-1: USB disconnect, device number 3
[   45.683341][  T723] loop3: detected capacity change from 0 to 512
[   46.492479][  T727] loop2: detected capacity change from 0 to 16
[   46.579588][  T727] erofs: (device loop2): mounted with root inode @ nid 36.
[   46.808156][  T735] loop4: detected capacity change from 0 to 128
[   46.829707][  T723] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   46.841975][  T723] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.218658][  T735] FAT-fs (loop4): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   47.372346][  T744] loop2: detected capacity change from 0 to 128
[   47.459465][  T744] EXT4-fs (loop2): Ignoring removed nobh option
[   47.705570][  T569] Bluetooth: hci0: command 0x1009 tx timeout
[   47.739216][  T744] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   47.769025][  T755] loop4: detected capacity change from 0 to 512
[   47.817282][  T744] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   47.853786][  T755] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   48.023197][  T755] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   48.044579][  T764] loop1: detected capacity change from 0 to 128
[   48.052735][  T755] EXT4-fs (loop4): 1 truncate cleaned up
[   48.382244][   T30] kauditd_printk_skb: 8 callbacks suppressed
[   48.382261][   T30] audit: type=1400 audit(1759254527.343:195): avc:  denied  { bind } for  pid=743 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.417518][  T755] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback.
[   49.701391][  T791] loop3: detected capacity change from 0 to 128
[   49.839310][  T791] FAT-fs (loop3): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   49.853648][   T30] audit: type=1400 audit(1759254529.053:196): avc:  denied  { create } for  pid=793 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   49.918105][  T800] loop4: detected capacity change from 0 to 256
[   50.339869][  T800] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   50.388396][  T805] loop1: detected capacity change from 0 to 128
[   50.425798][   T30] audit: type=1400 audit(1759254529.633:197): avc:  denied  { write } for  pid=799 comm="syz.4.138" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   50.486067][   T30] audit: type=1400 audit(1759254529.663:198): avc:  denied  { add_name } for  pid=799 comm="syz.4.138" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   50.622970][   T30] audit: type=1400 audit(1759254529.663:199): avc:  denied  { associate } for  pid=799 comm="syz.4.138" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   50.886145][   T30] audit: type=1400 audit(1759254529.663:200): avc:  denied  { write open } for  pid=799 comm="syz.4.138" path="/33/file1/file0" dev="loop4" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   51.026133][  T822] device syzkaller0 entered promiscuous mode
[   51.120119][   T30] audit: type=1400 audit(1759254529.693:201): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   51.254355][  T829] loop1: detected capacity change from 0 to 512
[   51.377043][  T823] syz.4.146 (823) used greatest stack depth: 19800 bytes left
[   51.388220][  T829] EXT4-fs (loop1): Unrecognized mount option "obj_type=ext4" or missing value
[   51.784072][  T838] loop4: detected capacity change from 0 to 256
[   51.798301][  T840] loop0: detected capacity change from 0 to 128
[   51.865317][  T809] loop3: detected capacity change from 0 to 40427
[   51.960176][  T840] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   51.983071][  T838] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   52.277137][   T30] audit: type=1400 audit(1759254531.493:202): avc:  denied  { mounton } for  pid=808 comm="syz.3.142" path="/32/file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   52.302049][  T809] F2FS-fs (loop3): fault_injection options not supported
[   52.422109][  T809] F2FS-fs (loop3): fault_type options not supported
[   52.444907][  T809] F2FS-fs (loop3): invalid crc value
[   52.466436][  T809] F2FS-fs (loop3): Found nat_bits in checkpoint
[   52.546400][  T809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   52.779498][  T853] loop4: detected capacity change from 0 to 128
[   52.847122][  T857] loop0: detected capacity change from 0 to 16
[   53.009964][  T857] erofs: (device loop0): mounted with root inode @ nid 36.
[   53.448927][  T862] loop1: detected capacity change from 0 to 512
[   53.806760][  T392] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   53.812726][  T862] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   53.857168][  T862] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.634123][   T30] audit: type=1400 audit(1759254533.813:203): avc:  denied  { listen } for  pid=861 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   54.807110][  T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   55.305317][  T392] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00
[   55.315025][  T392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.440301][  T392] usb 3-1: config 0 descriptor??
[   55.501187][  T858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.578147][   T30] audit: type=1400 audit(1759254534.793:204): avc:  denied  { create } for  pid=884 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   55.616724][   T30] audit: type=1400 audit(1759254534.823:205): avc:  denied  { watch watch_reads } for  pid=884 comm="syz.1.165" path="/50/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.717976][  T891] loop1: detected capacity change from 0 to 1024
[   55.836494][  T896] device syzkaller0 entered promiscuous mode
[   55.868928][  T891] EXT4-fs (loop1): Mount option "journal_checksum" incompatible with ext3
[   56.133376][  T392] isku 0003:1E7D:3264.0001: hidraw0: USB HID v0.08 Device [HID 1e7d:3264] on usb-dummy_hcd.2-1/input0
[   56.252970][  T901] loop0: detected capacity change from 0 to 128
[   56.360839][  T901] EXT4-fs (loop0): Ignoring removed nobh option
[   56.484713][  T392] usb 3-1: USB disconnect, device number 4
[   56.514948][  T901] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   56.538410][  T900] fido_id[900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   56.574644][  T901] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   58.384028][  T917] loop3: detected capacity change from 0 to 512
[   58.678039][  T917] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   58.692073][  T917] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.751218][  T931] loop4: detected capacity change from 0 to 128
[   58.818343][  T931] FAT-fs (loop4): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   59.547578][  T942] device syzkaller0 entered promiscuous mode
[   59.611990][  T951] loop0: detected capacity change from 0 to 512
[   59.709921][  T953] loop4: detected capacity change from 0 to 1024
[   59.801508][  T953] EXT4-fs (loop4): Mount option "journal_checksum" incompatible with ext3
[   59.906370][  T951] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   59.936835][  T951] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   61.302018][  T982] loop0: detected capacity change from 0 to 512
[   61.308423][   T30] audit: type=1400 audit(1759254540.513:206): avc:  denied  { create } for  pid=973 comm="syz.1.187" dev="anon_inodefs" ino=18120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   61.358450][   T30] audit: type=1400 audit(1759254540.543:207): avc:  denied  { ioctl } for  pid=973 comm="syz.1.187" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18120 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   61.401334][  T982] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   61.416838][  T982] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   61.497791][  T988] loop2: detected capacity change from 0 to 128
[   61.541624][  T988] FAT-fs (loop2): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   62.925126][ T1018] loop2: detected capacity change from 0 to 512
[   63.153181][ T1018] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   63.207804][ T1018] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.233415][ T1034] loop1: detected capacity change from 0 to 512
[   63.278886][ T1036] loop0: detected capacity change from 0 to 128
[   63.333796][ T1040] loop3: detected capacity change from 0 to 1024
[   63.348332][ T1036] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   63.362145][ T1034] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   63.381579][ T1034] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.407568][ T1040] EXT4-fs (loop3): Mount option "journal_checksum" incompatible with ext3
[   65.355869][   T30] audit: type=1400 audit(1759254544.563:208): avc:  denied  { create } for  pid=1065 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   65.421471][   T30] audit: type=1400 audit(1759254544.583:209): avc:  denied  { connect } for  pid=1065 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   65.431528][ T1082] loop4: detected capacity change from 0 to 512
[   65.441097][   T30] audit: type=1400 audit(1759254544.583:210): avc:  denied  { write } for  pid=1065 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   65.557863][ T1082] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   65.581200][ T1082] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.870555][ T1090] loop3: detected capacity change from 0 to 512
[   65.941823][ T1099] loop0: detected capacity change from 0 to 128
[   65.949921][ T1090] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   65.964070][ T1098] loop4: detected capacity change from 0 to 256
[   65.994178][ T1098] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   66.046802][ T1090] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   66.150227][ T1099] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   68.194686][ T1131] loop3: detected capacity change from 0 to 512
[   68.364949][ T1131] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   68.429618][ T1131] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   68.449454][ T1144] device syzkaller0 entered promiscuous mode
[   68.972664][ T1155] loop3: detected capacity change from 0 to 512
[   69.428776][ T1155] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   69.450391][ T1172] loop0: detected capacity change from 0 to 128
[   69.468957][ T1155] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   69.570929][ T1172] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   71.022773][ T1187] loop1: detected capacity change from 0 to 16
[   71.130498][ T1187] erofs: (device loop1): mounted with root inode @ nid 36.
[   71.281354][ T1191] loop4: detected capacity change from 0 to 512
[   71.424404][ T1191] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   71.651300][ T1191] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   72.780693][ T1226] loop1: detected capacity change from 0 to 4096
[   72.831276][ T1237] loop3: detected capacity change from 0 to 128
[   72.846301][ T1226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   72.866314][ T1237] FAT-fs (loop3): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   73.212835][ T1246] loop4: detected capacity change from 0 to 1024
[   73.298063][ T1246] EXT4-fs (loop4): Mount option "journal_checksum" incompatible with ext3
[   73.910712][ T1268] loop3: detected capacity change from 0 to 256
[   73.995397][ T1267] loop2: detected capacity change from 0 to 128
[   74.050174][ T1268] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   74.862311][ T1287] loop3: detected capacity change from 0 to 128
[   75.017976][ T1287] FAT-fs (loop3): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   76.048371][ T1305] loop2: detected capacity change from 0 to 16
[   76.179642][ T1305] erofs: (device loop2): mounted with root inode @ nid 36.
[   76.353960][ T1310] loop1: detected capacity change from 0 to 256
[   76.475000][ T1310] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   76.512394][ T1319] loop3: detected capacity change from 0 to 128
[   76.791000][ T1330] loop4: detected capacity change from 0 to 128
[   77.377902][ T1330] EXT4-fs (loop4): Ignoring removed nobh option
[   77.397053][ T1330] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   77.432931][ T1330] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   77.940961][ T1351] loop3: detected capacity change from 0 to 512
[   78.080144][ T1362] loop2: detected capacity change from 0 to 256
[   78.092041][ T1363] loop0: detected capacity change from 0 to 128
[   78.148164][ T1351] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   78.162297][ T1363] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   78.205886][ T1362] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   78.247218][ T1351] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   78.669586][ T1374] loop2: detected capacity change from 0 to 128
[   78.720657][ T1379] device syzkaller0 entered promiscuous mode
[   80.537965][ T1406] loop2: detected capacity change from 0 to 256
[   80.602394][ T1406] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   80.697720][ T1411] loop4: detected capacity change from 0 to 128
[   80.827384][ T1411] FAT-fs (loop4): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   80.848025][ T1413] loop2: detected capacity change from 0 to 1024
[   80.877787][ T1413] EXT4-fs (loop2): Mount option "journal_checksum" incompatible with ext3
[   80.957883][ T1415] loop1: detected capacity change from 0 to 512
[   81.028317][ T1415] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   81.056011][ T1415] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.610194][ T1426] loop3: detected capacity change from 0 to 128
[   82.102211][ T1431] device syzkaller0 entered promiscuous mode
[   82.698273][ T1446] loop1: detected capacity change from 0 to 256
[   82.766464][ T1446] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   82.886727][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   83.015829][ T1459] loop0: detected capacity change from 0 to 512
[   83.098287][  T392] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.156796][ T1108] usb 4-1: Using ep0 maxpacket: 32
[   83.233882][ T1459] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   83.249845][ T1459] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.287014][ T1108] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[   83.296572][ T1108] usb 4-1: config 0 has no interface number 0
[   83.303653][ T1108] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   83.367712][ T1108] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[   83.537201][ T1108] usb 4-1: config 0 interface 85 has no altsetting 0
[   83.747331][  T392] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   83.826738][  T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.834873][  T392] usb 3-1: Product: syz
[   84.210676][  T392] usb 3-1: Manufacturer: syz
[   84.215334][  T392] usb 3-1: SerialNumber: syz
[   84.221009][  T392] usb 3-1: config 0 descriptor??
[   84.325742][ T1475] device syzkaller0 entered promiscuous mode
[   84.717002][ T1108] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   84.752003][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.844649][ T1108] usb 4-1: Product: syz
[   84.850994][ T1108] usb 4-1: Manufacturer: syz
[   84.855652][ T1108] usb 4-1: SerialNumber: syz
[   84.870045][ T1108] usb 4-1: config 0 descriptor??
[   84.950629][ T1487] loop1: detected capacity change from 0 to 256
[   85.007166][ T1487] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   85.112560][ T1496] loop1: detected capacity change from 0 to 512
[   85.139562][ T1496] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   85.152241][ T1108] usb 4-1: USB disconnect, device number 3
[   85.152833][ T1496] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   85.641771][ T1513] device syzkaller0 entered promiscuous mode
[   85.822889][  T373] usb 3-1: USB disconnect, device number 5
[   86.456832][  T367] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   86.640543][ T1547] device syzkaller0 entered promiscuous mode
[   86.808288][ T1559] loop3: detected capacity change from 0 to 128
[   86.843399][ T1559] FAT-fs (loop3): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   87.026747][  T367] usb 1-1: unable to get BOS descriptor or descriptor too short
[   87.106737][  T367] usb 1-1: config 2 has an invalid interface number: 48 but max is 0
[   87.115127][  T367] usb 1-1: config 2 has no interface number 0
[   87.121464][  T367] usb 1-1: config 2 interface 48 has no altsetting 0
[   87.286868][  T367] usb 1-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=ce.1d
[   87.296056][  T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.323090][  T367] usb 1-1: Product: syz
[   87.334097][  T367] usb 1-1: Manufacturer: syz
[   87.345548][  T367] usb 1-1: SerialNumber: syz
[   88.768193][  T367] usb 1-1: USB disconnect, device number 4
[   88.841474][ T1589] device syzkaller0 entered promiscuous mode
[   88.977933][ T1591] loop2: detected capacity change from 0 to 128
[   88.996728][ T1585] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   89.291509][ T1601] loop3: detected capacity change from 0 to 16
[   89.378376][ T1601] erofs: (device loop3): mounted with root inode @ nid 36.
[   89.507337][ T1585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   89.609876][ T1585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.654528][ T1585] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   89.684189][ T1585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.715743][ T1585] usb 5-1: config 0 descriptor??
[   89.874712][ T1617] loop3: detected capacity change from 0 to 128
[   90.047348][ T1617] FAT-fs (loop3): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   90.200318][ T1623] loop1: detected capacity change from 0 to 512
[   90.303803][ T1623] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   90.307822][ T1585] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[   90.323811][ T1585] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[   90.329496][ T1623] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   90.331035][ T1585] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[   90.348717][ T1585] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[   90.355594][ T1585] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[   90.362896][ T1585] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[   90.370906][ T1585] isku 0003:1E7D:319C.0002: unknown main item tag 0x0
[   90.381197][ T1585] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[   90.547007][ T1585] isku 0003:1E7D:319C.0002: couldn't init struct isku_device
[   90.556326][ T1585] isku 0003:1E7D:319C.0002: couldn't install keyboard
[   90.591376][ T1585] isku: probe of 0003:1E7D:319C.0002 failed with error -71
[   90.706768][ T1585] usb 5-1: USB disconnect, device number 3
[   90.736332][ T1638] loop3: detected capacity change from 0 to 128
[   90.740083][ T1634] fido_id[1634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   90.793877][ T1643] loop2: detected capacity change from 0 to 256
[   90.837942][ T1643] exfat: Unknown parameter 'keep_last_dots'
[   90.974384][ T1654] loop0: detected capacity change from 0 to 256
[   91.016152][ T1658] loop3: detected capacity change from 0 to 512
[   91.113992][ T1658] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   91.129372][ T1658] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   91.141352][   T30] audit: type=1400 audit(1759254570.353:211): avc:  denied  { mount } for  pid=1653 comm="syz.0.399" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   91.181080][   T30] audit: type=1400 audit(1759254570.393:212): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   91.335540][ T1674] loop3: detected capacity change from 0 to 128
[   91.377167][ T1674] FAT-fs (loop3): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   91.549351][ T1679] loop1: detected capacity change from 0 to 128
[   91.987560][ T1692] loop3: detected capacity change from 0 to 512
[   92.082170][ T1692] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   92.095587][ T1692] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.244437][ T1705] loop1: detected capacity change from 0 to 128
[   92.273705][ T1707] loop0: detected capacity change from 0 to 512
[   92.288796][ T1705] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.367040][   T30] audit: type=1400 audit(1759254571.573:213): avc:  denied  { remount } for  pid=1703 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   92.388492][  T332] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.411451][ T1707] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   92.465867][ T1707] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.780940][ T1584] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   93.811635][ T1741] loop4: detected capacity change from 0 to 256
[   93.824031][ T1741] FAT-fs (loop4): Directory bread(block 64) failed
[   93.830849][ T1741] FAT-fs (loop4): Directory bread(block 65) failed
[   93.837436][ T1741] FAT-fs (loop4): Directory bread(block 66) failed
[   93.844085][ T1741] FAT-fs (loop4): Directory bread(block 67) failed
[   93.850717][ T1741] FAT-fs (loop4): Directory bread(block 68) failed
[   93.857781][ T1741] FAT-fs (loop4): Directory bread(block 69) failed
[   93.874367][ T1741] FAT-fs (loop4): Directory bread(block 70) failed
[   93.881243][ T1741] FAT-fs (loop4): Directory bread(block 71) failed
[   93.888226][ T1741] FAT-fs (loop4): Directory bread(block 72) failed
[   93.894835][ T1741] FAT-fs (loop4): Directory bread(block 73) failed
[   94.079061][ T1584] usb 4-1: Using ep0 maxpacket: 32
[   94.092227][ T1755] 9pnet: Insufficient options for proto=fd
[   94.099060][   T30] audit: type=1400 audit(1759254573.313:214): avc:  denied  { watch watch_reads } for  pid=1754 comm="syz.0.432" path="/65/file0" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   94.112335][ T1759] loop2: detected capacity change from 0 to 512
[   94.196157][ T1760] hub 2-0:1.0: USB hub found
[   94.201643][ T1760] hub 2-0:1.0: 1 port detected
[   94.572027][ T1759] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   94.634308][ T1759] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   94.913471][ T1771] loop0: detected capacity change from 0 to 128
[   94.923070][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'.
[   94.956783][   T30] audit: type=1400 audit(1759254574.113:215): avc:  denied  { connect } for  pid=1768 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.047084][ T1771] EXT4-fs (loop0): Ignoring removed nobh option
[   95.177383][ T1771] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   95.384460][ T1771] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.410691][ T1778] loop2: detected capacity change from 0 to 128
[   95.450259][ T1780] device syzkaller0 entered promiscuous mode
[   95.456784][ T1584] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[   95.460783][ T1778] EXT4-fs (loop2): Ignoring removed nobh option
[   95.464902][ T1584] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.496703][ T1584] usb 4-1: config 0 has no interface number 0
[   95.513090][ T1584] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0xA has invalid wMaxPacketSize 0
[   95.523248][ T1584] usb 4-1: config 0 interface 85 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[   95.543050][ T1584] usb 4-1: config 0 interface 85 has no altsetting 0
[   95.577545][ T1778] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   95.606745][ T1778] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.776808][ T1584] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   95.790571][ T1584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.806802][ T1584] usb 4-1: Product: syz
[   95.811135][ T1584] usb 4-1: Manufacturer: syz
[   95.818132][ T1584] usb 4-1: SerialNumber: syz
[   95.850918][ T1584] usb 4-1: config 0 descriptor??
[   95.917261][ T1584] usbhid 4-1:0.85: couldn't find an input interrupt endpoint
[   96.454341][    T6] usb 4-1: USB disconnect, device number 4
[   97.228472][ T1811] loop2: detected capacity change from 0 to 512
[   97.290696][ T1811] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[   97.365758][ T1811] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.409388][ T1813] loop4: detected capacity change from 0 to 512
[   97.470383][ T1811] EXT4-fs (loop2): shut down requested (0)
[   97.483847][ T1813] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   97.500374][   T30] audit: type=1400 audit(1759254576.713:216): avc:  denied  { setattr } for  pid=1810 comm="syz.2.448" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   97.522239][   T30] audit: type=1400 audit(1759254576.723:217): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   97.544302][   T30] audit: type=1400 audit(1759254576.723:218): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.565909][   T30] audit: type=1400 audit(1759254576.723:219): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.565936][ T1813] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.587598][   T30] audit: type=1400 audit(1759254576.723:220): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.618076][   T30] audit: type=1400 audit(1759254576.723:221): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.638612][   T30] audit: type=1400 audit(1759254576.723:222): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.710926][   T30] audit: type=1400 audit(1759254576.723:223): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   98.040833][ T1822] loop2: detected capacity change from 0 to 16
[   98.077884][ T1822] erofs: (device loop2): mounted with root inode @ nid 36.
[   98.226730][   T30] audit: type=1400 audit(1759254577.413:224): avc:  denied  { write } for  pid=1825 comm="syz.3.453" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   98.309937][ T1830] loop3: detected capacity change from 0 to 128
[   98.358638][ T1830] EXT4-fs (loop3): Ignoring removed nobh option
[   98.417651][ T1830] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   98.437287][ T1830] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   98.830704][ T1852] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[   98.858505][   T30] audit: type=1400 audit(1759254578.073:225): avc:  denied  { read write } for  pid=1853 comm="syz.2.460" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   98.894260][ T1852] device syzkaller0 entered promiscuous mode
[   99.052752][ T1863] loop4: detected capacity change from 0 to 128
[   99.077480][ T1866] loop3: detected capacity change from 0 to 512
[   99.091806][ T1863] FAT-fs (loop4): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP Õ�ÍLøIœ•7È’¼’O‹ëu»Ó�صf÷½O¥£�Æ�¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value
[   99.140521][ T1866] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   99.168650][ T1866] EXT4-fs (loop3): fragment/cluster size (16777216) != block size (4096)
[   99.336879][   T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   99.736705][  T392] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   99.787278][   T26] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   99.803672][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.839131][   T26] usb 2-1: config 0 descriptor??
[   99.999045][ T1877] loop0: detected capacity change from 0 to 512
[  100.060742][ T1879] loop3: detected capacity change from 0 to 128
[  100.078807][ T1877] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  100.092155][ T1877] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.106704][  T392] usb 5-1: Using ep0 maxpacket: 8
[  100.177170][ T1879] EXT4-fs (loop3): Ignoring removed nobh option
[  100.249695][ T1879] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[  100.262736][ T1879] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.273788][  T392] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  100.306735][  T392] usb 5-1: config 2 has no interface number 0
[  100.313399][  T392] usb 5-1: config 2 interface 31 has no altsetting 0
[  100.634046][  T392] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  100.643356][  T392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.662480][  T392] usb 5-1: Product: syz
[  100.666905][  T392] usb 5-1: Manufacturer: syz
[  100.671669][  T392] usb 5-1: SerialNumber: syz
[  100.946685][  T333] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  101.396740][  T333] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  101.405114][  T333] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.415324][  T333] usb 1-1: config 0 has no interface number 0
[  101.421481][  T333] usb 1-1: config 0 interface 52 has no altsetting 0
[  101.506754][  T333] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  101.515907][  T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  101.524169][  T333] usb 1-1: SerialNumber: syz
[  101.529810][  T333] usb 1-1: config 0 descriptor??
[  101.971078][ T1924] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  102.071180][  T392] usb 2-1: USB disconnect, device number 5
[  102.476833][  T392] usb 5-1: USB disconnect, device number 4
[  103.707461][  T367] usb 1-1: USB disconnect, device number 5
[  103.766728][  T392] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  103.807649][  T333] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  104.216753][  T392] usb 2-1: Using ep0 maxpacket: 8
[  104.316876][  T333] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  104.338300][  T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.387597][  T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.417419][  T333] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  104.527209][  T333] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  104.536980][  T392] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  104.542047][  T333] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  104.564726][  T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.636312][  T392] usb 2-1: Product: syz
[  104.659699][  T392] usb 2-1: Manufacturer: syz
[  104.689651][  T392] usb 2-1: SerialNumber: syz
[  104.731461][  T392] usb 2-1: config 0 descriptor??
[  104.747895][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  104.747922][   T30] audit: type=1400 audit(1759254583.963:232): avc:  denied  { mount } for  pid=1996 comm="syz.0.506" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  104.843735][  T333] usb 4-1: Product: syz
[  104.857306][  T333] usb 4-1: config 0 descriptor??
[  104.935505][   T30] audit: type=1400 audit(1759254584.143:233): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  105.038295][   T30] audit: type=1400 audit(1759254584.253:234): avc:  denied  { create } for  pid=2000 comm="syz.4.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  105.059265][   T30] audit: type=1400 audit(1759254584.253:235): avc:  denied  { ioctl } for  pid=2000 comm="syz.4.507" path="socket:[22357]" dev="sockfs" ino=22357 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  105.128676][ T2014] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  105.147738][ T2014] device syzkaller0 entered promiscuous mode
[  105.196811][  T333] usbhid 4-1:0.0: can't add hid device: -71
[  105.203411][  T333] usbhid: probe of 4-1:0.0 failed with error -71
[  105.221508][  T333] usb 4-1: USB disconnect, device number 5
[  106.004577][ T2031] loop3: detected capacity change from 0 to 16
[  106.067178][ T2031] erofs: (device loop3): mounted with root inode @ nid 36.
[  106.259728][ T2038] loop3: detected capacity change from 0 to 512
[  106.553219][ T2038] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  106.925133][ T2038] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.208867][  T369] usb 2-1: USB disconnect, device number 6
[  107.326090][ T2050] loop1: detected capacity change from 0 to 512
[  107.377255][ T2050] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  107.394673][ T2050] EXT4-fs (loop1): Test dummy encryption mode enabled
[  107.417704][ T2050] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  107.425173][ T2050] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  107.446662][   T30] audit: type=1400 audit(1759254586.653:236): avc:  denied  { create } for  pid=2055 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  107.491368][ T2050] EXT4-fs (loop1): 1 truncate cleaned up
[  107.499738][ T2050] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,abort,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  107.568555][   T30] audit: type=1400 audit(1759254586.783:237): avc:  denied  { write } for  pid=2049 comm="syz.1.521" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  107.617114][ T2050] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  107.685909][   T30] audit: type=1400 audit(1759254586.803:238): avc:  denied  { add_name } for  pid=2049 comm="syz.1.521" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  107.736727][  T283] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /123/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  107.743267][   T30] audit: type=1400 audit(1759254586.803:239): avc:  denied  { setattr } for  pid=2049 comm="syz.1.521" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  107.794832][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  107.826941][  T283] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  107.876866][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  107.906709][  T283] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /123/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  107.938386][   T30] audit: type=1400 audit(1759254586.873:240): avc:  denied  { remove_name } for  pid=2049 comm="syz.1.521" name="#3" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  107.991833][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  108.040150][  T283] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  108.060328][   T30] audit: type=1400 audit(1759254586.873:241): avc:  denied  { rename } for  pid=2049 comm="syz.1.521" name="#3" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  108.115919][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  108.169532][  T283] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /123/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  108.347559][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  108.364967][  T283] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  109.321330][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  109.329779][  T283] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /123/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  109.351760][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  109.359317][  T283] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  109.391681][ T2078] loop3: detected capacity change from 0 to 256
[  109.433330][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  109.458006][  T283] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /123/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  109.518004][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  109.625493][  T283] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  109.727179][  T283] EXT4-fs (loop1): Remounting filesystem read-only
[  110.158089][ T2085] loop4: detected capacity change from 0 to 512
[  110.681840][ T2089] loop3: detected capacity change from 0 to 16
[  110.709554][  T332] tipc: Left network mode
[  110.721639][ T2089] erofs: (device loop3): mounted with root inode @ nid 36.
[  110.787877][ T2085] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  110.815612][ T2085] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  111.252796][ T2098] input: syz1 as /devices/virtual/input/input27
[  111.347763][  T332] device bridge_slave_1 left promiscuous mode
[  111.364191][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.391767][ T2093] loop3: detected capacity change from 0 to 40427
[  111.415009][ T2093] F2FS-fs (loop3): fault_injection options not supported
[  111.423081][  T332] device bridge_slave_0 left promiscuous mode
[  111.430529][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  111.430546][   T30] audit: type=1400 audit(1759254590.643:246): avc:  denied  { mounton } for  pid=2104 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  111.464614][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.472363][ T2093] F2FS-fs (loop3): fault_type options not supported
[  111.488796][ T2093] F2FS-fs (loop3): invalid crc value
[  111.488815][  T332] device veth1_macvtap left promiscuous mode
[  111.488854][  T332] device veth0_vlan left promiscuous mode
[  111.521517][ T2093] F2FS-fs (loop3): Found nat_bits in checkpoint
[  111.642721][ T2093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  111.696691][   T30] audit: type=1400 audit(1759254590.883:247): avc:  denied  { setattr } for  pid=2092 comm="syz.3.535" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  111.731315][  T284] attempt to access beyond end of device
[  111.731315][  T284] loop3: rw=2049, want=45104, limit=40427
[  112.315410][ T2104] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.357370][ T2104] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.382175][ T2131] loop4: detected capacity change from 0 to 512
[  112.397322][ T2104] device bridge_slave_0 entered promiscuous mode
[  112.412013][ T2104] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.419460][ T2104] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.427089][ T2104] device bridge_slave_1 entered promiscuous mode
[  112.463493][ T2131] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  112.500244][ T2131] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  112.600894][ T2142] kvm: pic: non byte read
[  112.608822][ T2142] kvm: pic: level sensitive irq not supported
[  112.608878][ T2142] kvm: pic: non byte read
[  112.619916][ T2142] kvm: pic: level sensitive irq not supported
[  112.619978][ T2142] kvm: pic: non byte read
[  112.630782][ T2142] kvm: pic: level sensitive irq not supported
[  112.630835][ T2142] kvm: pic: non byte read
[  112.642242][ T2142] kvm: pic: level sensitive irq not supported
[  112.642293][ T2142] kvm: pic: non byte read
[  112.653358][ T2142] kvm: pic: level sensitive irq not supported
[  112.653407][ T2142] kvm: pic: non byte read
[  112.664475][ T2142] kvm: pic: level sensitive irq not supported
[  112.664529][ T2142] kvm: pic: non byte read
[  112.675599][ T2142] kvm: pic: level sensitive irq not supported
[  112.675649][ T2142] kvm: pic: non byte read
[  112.706866][ T2142] kvm: pic: level sensitive irq not supported
[  112.706923][ T2142] kvm: pic: non byte read
[  112.714876][ T2104] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.720646][ T2156] loop0: detected capacity change from 0 to 128
[  112.724607][ T2104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.738183][ T2104] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.745261][ T2104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.758183][ T2158] loop4: detected capacity change from 0 to 512
[  112.770099][ T2156] EXT4-fs (loop0): Ignoring removed nobh option
[  112.782202][ T2156] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[  112.794401][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  112.797669][ T2156] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.802995][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  112.850462][ T2158] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.553: casefold flag without casefold feature
[  112.864159][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.871833][ T2158] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.553: couldn't read orphan inode 15 (err -117)
[  112.884519][ T2158] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  112.887434][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.923475][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  112.931661][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  112.945381][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  112.958090][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  112.966438][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  112.974626][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.046329][ T2104] device veth0_vlan entered promiscuous mode
[  113.052430][  T569] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  113.109162][ T2104] device veth1_macvtap entered promiscuous mode
[  113.116837][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.132630][ T2170] netlink: 'syz.0.554': attribute type 8 has an invalid length.
[  113.171360][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  113.188069][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  113.322488][   T30] audit: type=1400 audit(1759254592.533:248): avc:  denied  { mounton } for  pid=2104 comm="syz-executor" path="/root/syzkaller.96wI2I/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  113.434994][ T2182] loop5: detected capacity change from 0 to 1024
[  113.465177][ T2182] EXT4-fs (loop5): Mount option "journal_checksum" incompatible with ext3
[  113.476737][  T569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.492178][  T569] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  113.506710][  T569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.523982][  T569] usb 4-1: config 0 descriptor??
[  113.612771][ T2184] loop4: detected capacity change from 0 to 512
[  113.909041][ T2184] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback.
[  113.949396][ T2184] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.226680][  T569] hid-generic 0003:1532:010E.0003: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0
[  114.290074][   T30] audit: type=1400 audit(1759254593.503:249): avc:  denied  { remount } for  pid=2179 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  114.417794][ T2195] loop4: detected capacity change from 0 to 4096
[  114.463130][ T2195] EXT4-fs (loop4): Test dummy encryption mode enabled
[  114.504520][ T2195] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000400,noauto_da_alloc,inlinecrypt,test_dummy_encryption,bsdgroups,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  114.644537][ T2201] loop5: detected capacity change from 0 to 512
[  114.736670][  T333] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  114.784890][ T2201] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  114.799619][ T2201] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.848838][ T2208] overlayfs: unrecognized mount option "lowerdir=" or missing value
[  115.466830][  T333] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  115.476067][  T333] usb 1-1: config 0 has no interface number 0
[  115.482244][   T30] audit: type=1400 audit(1759254594.683:250): avc:  denied  { create } for  pid=2225 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  115.504882][  T333] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  115.520302][  T333] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  115.534377][  T333] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  115.546829][  T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.605596][  T333] usb 1-1: config 0 descriptor??
[  115.615726][ T2233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'.
[  115.630100][ T2233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'.
[  115.639197][ T2197] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  115.736688][    T6] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  115.780558][ T1584] usb 4-1: USB disconnect, device number 6
[  115.863806][  T333] usb 1-1: USB disconnect, device number 6
[  115.876448][ T2250] loop3: detected capacity change from 0 to 512
[  115.940387][ T2250] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  115.960790][ T2250] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.587: iget: bogus i_mode (5)
[  115.976661][  T367] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  115.987016][ T2250] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.587: couldn't read orphan inode 15 (err -117)
[  116.006870][ T2250] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  116.026770][ T2250] ext2 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.096743][    T6] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.116677][    T6] usb 6-1: config 0 interface 0 has no altsetting 0
[  116.123422][    T6] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  116.151087][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.174720][    T6] usb 6-1: config 0 descriptor??
[  116.201569][ T2258] loop3: detected capacity change from 0 to 512
[  116.328260][ T2258] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  116.336724][  T367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.346754][ T2258] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.358210][  T367] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  116.379004][  T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.523145][  T367] usb 5-1: config 0 descriptor??
[  116.690307][    T6] hid-generic 0003:07B5:0312.0004: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.5-1/input0
[  116.714796][ T2273] kvm: pic: non byte read
[  116.860101][   T30] audit: type=1400 audit(1759254596.073:251): avc:  denied  { create } for  pid=2276 comm="syz.2.594" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.891106][    T6] usb 6-1: USB disconnect, device number 2
[  116.911773][   T30] audit: type=1400 audit(1759254596.123:252): avc:  denied  { link } for  pid=2276 comm="syz.2.594" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.981750][   T30] audit: type=1400 audit(1759254596.173:253): avc:  denied  { unlink } for  pid=282 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  117.446690][ T1585] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  117.696654][ T1585] usb 4-1: Using ep0 maxpacket: 32
[  117.816738][ T1585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.827733][ T1585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.837564][ T1585] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  117.846686][ T1585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.855848][ T1585] usb 4-1: config 0 descriptor??
[  117.939875][ T1584] usb 5-1: USB disconnect, device number 5
[  117.963979][ T2307] loop4: detected capacity change from 0 to 128
[  118.006503][   T30] audit: type=1400 audit(1759254597.213:254): avc:  denied  { unlink } for  pid=2310 comm="syz.4.606" name="#5" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  118.009943][ T2311] overlayfs: failed to get index nlink (file0/file2, err=-61)
[  118.369242][ T1585] savu 0003:1E7D:2D5A.0005: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  119.279421][    T6] usb 4-1: USB disconnect, device number 7
[  119.359276][ T2341] loop0: detected capacity change from 0 to 128
[  119.469868][ T2345] loop0: detected capacity change from 0 to 512
[  119.535867][ T2336] loop4: detected capacity change from 0 to 40427
[  119.574513][ T2336] F2FS-fs (loop4): invalid crc value
[  119.589705][ T2345] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  119.601527][ T2336] F2FS-fs (loop4): Found nat_bits in checkpoint
[  119.603618][ T2345] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.739313][ T2336] F2FS-fs (loop4): Start checkpoint disabled!
[  119.753097][ T2336] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  119.911079][   T30] audit: type=1400 audit(1759254599.123:255): avc:  denied  { ioctl } for  pid=2353 comm="syz.3.618" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  119.936690][   T30] audit: type=1400 audit(1759254599.123:256): avc:  denied  { set_context_mgr } for  pid=2353 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  119.940202][ T2354] binder: BINDER_SET_CONTEXT_MGR already set
[  119.963407][ T2354] binder: 2353:2354 ioctl 4018620d 200000004a80 returned -16
[  119.980701][   T30] audit: type=1400 audit(1759254599.153:257): avc:  denied  { map } for  pid=2353 comm="syz.3.618" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  120.038167][  T332] attempt to access beyond end of device
[  120.038167][  T332] loop4: rw=2049, want=40976, limit=40427
[  120.089474][ T2360] loop0: detected capacity change from 0 to 512
[  120.104964][ T2360] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  120.157882][ T2360] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.621: iget: bogus i_mode (5)
[  120.184791][ T2360] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.621: couldn't read orphan inode 15 (err -117)
[  120.218657][ T2360] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  120.232673][ T2360] ext2 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.370480][ T2387] loop3: detected capacity change from 0 to 256
[  121.449158][ T2389] loop0: detected capacity change from 0 to 512
[  121.477147][ T2368] loop4: detected capacity change from 0 to 131072
[  121.478121][ T2387] exfat: Deprecated parameter 'utf8'
[  121.499853][ T2387] exfat: Unknown parameter 'keep_last_dots'
[  121.513575][ T2368] F2FS-fs (loop4): Test dummy encryption mode enabled
[  121.532070][   T30] audit: type=1400 audit(1759254600.743:258): avc:  denied  { create } for  pid=2384 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  121.574901][   T30] audit: type=1400 audit(1759254600.763:259): avc:  denied  { bind } for  pid=2384 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  121.596050][ T2368] F2FS-fs (loop4): invalid crc value
[  121.608246][ T2368] F2FS-fs (loop4): Found nat_bits in checkpoint
[  121.659356][ T2389] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  121.685437][ T2389] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.764455][   T30] audit: type=1400 audit(1759254600.973:260): avc:  denied  { bind } for  pid=2384 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  122.233485][ T2407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2407 comm=syz.5.634
[  122.247656][ T2368] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  122.338505][ T2368] F2FS-fs (loop4): Failed to read root inode
[  122.407380][ T2407] loop5: detected capacity change from 0 to 40427
[  122.438961][ T2407] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  122.446848][ T2407] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  122.457601][ T2407] F2FS-fs (loop5): invalid crc value
[  122.612186][ T2416] hub 2-0:1.0: USB hub found
[  122.622552][ T2416] hub 2-0:1.0: 1 port detected
[  122.825393][ T2407] F2FS-fs (loop5): Found nat_bits in checkpoint
[  122.903279][ T2407] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  122.910659][ T2407] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  122.988424][ T2422] picdev_read: 86 callbacks suppressed
[  122.988447][ T2422] kvm: pic: non byte read
[  122.998820][ T2422] kvm: pic: non byte read
[  123.003418][ T2422] kvm: pic: non byte read
[  123.008222][   T30] audit: type=1400 audit(1759254602.223:261): avc:  denied  { accept } for  pid=2406 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  123.056991][ T2422] kvm: pic: non byte read
[  123.070849][ T2422] kvm: pic: non byte read
[  123.108656][ T2422] kvm: pic: non byte read
[  123.144477][ T2422] kvm: pic: non byte read
[  123.180265][ T2422] kvm: pic: non byte read
[  123.232557][ T2422] kvm: pic: non byte read
[  123.326724][ T2422] kvm: pic: non byte read
[  123.488064][    T8] attempt to access beyond end of device
[  123.488064][    T8] loop5: rw=1, want=80136, limit=40427
[  123.529621][    T8] attempt to access beyond end of device
[  123.529621][    T8] loop5: rw=1, want=81920, limit=40427
[  124.282975][ T2442] loop5: detected capacity change from 0 to 4096
[  124.374909][ T2442] EXT4-fs (loop5): Test dummy encryption mode enabled
[  124.427145][ T2442] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  124.490386][ T2451] loop3: detected capacity change from 0 to 512
[  124.668163][ T2451] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  124.837002][ T2451] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.146726][  T391] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  125.303993][ T2461] loop4: detected capacity change from 0 to 40427
[  125.321074][ T2461] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value
[  125.391254][ T2440] loop0: detected capacity change from 0 to 131072
[  125.406704][  T391] usb 6-1: Using ep0 maxpacket: 16
[  125.414573][ T2440] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 150994945)
[  125.432938][ T2440] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  125.442468][ T2440] F2FS-fs (loop0): invalid crc value
[  125.450156][ T2440] F2FS-fs (loop0): Found nat_bits in checkpoint
[  125.517211][ T2440] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  125.526789][  T391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.547018][  T391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.547078][ T2440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  125.557299][  T391] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.596861][  T391] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  125.605957][  T391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.617330][    T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  125.623356][   T30] audit: type=1400 audit(1759254604.833:262): avc:  denied  { link } for  pid=2439 comm="syz.0.643" name="file1" dev="loop0" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  125.633753][  T391] usb 6-1: config 0 descriptor??
[  125.793063][ T2477] loop4: detected capacity change from 0 to 40427
[  125.847832][ T2477] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  125.855812][ T2477] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  125.876071][    T6] usb 4-1: Using ep0 maxpacket: 16
[  125.891119][ T2477] F2FS-fs (loop4): Found nat_bits in checkpoint
[  125.932176][ T2477] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  125.939341][ T2477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  125.957682][ T2489] loop0: detected capacity change from 0 to 1024
[  126.006858][    T6] usb 4-1: config 0 has too many interfaces: 64, using maximum allowed: 32
[  126.015628][    T6] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 64
[  126.028440][ T2489] EXT4-fs (loop0): Mount option "journal_checksum" incompatible with ext3
[  126.149508][  T391] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[  126.157212][    T6] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.08
[  126.178412][  T391] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[  126.185995][    T6] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  126.602589][    T6] usb 4-1: Product: syz
[  126.652847][  T391] microsoft 0003:045E:07DA.0006: report_id 12451851 is invalid
[  126.815977][    T6] usb 4-1: SerialNumber: syz
[  126.979637][  T391] microsoft 0003:045E:07DA.0006: item 0 4 1 8 parsing failed
[  127.191774][    T6] usb 4-1: config 0 descriptor??
[  127.197102][  T391] microsoft 0003:045E:07DA.0006: parse failed
[  127.203307][  T391] microsoft: probe of 0003:045E:07DA.0006 failed with error -22
[  127.213174][  T391] usb 6-1: USB disconnect, device number 3
[  127.237815][    T6] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  127.303049][ T2511] loop4: detected capacity change from 0 to 16
[  127.434735][ T2511] erofs: (device loop4): mounted with root inode @ nid 36.
[  127.589978][ T2516] loop0: detected capacity change from 0 to 256
[  127.645576][ T2516] FAT-fs (loop0): Directory bread(block 64) failed
[  127.666723][ T2516] FAT-fs (loop0): Directory bread(block 65) failed
[  127.687804][ T2516] FAT-fs (loop0): Directory bread(block 66) failed
[  127.720146][ T2516] FAT-fs (loop0): Directory bread(block 67) failed
[  127.745847][ T2516] FAT-fs (loop0): Directory bread(block 68) failed
[  127.759948][ T2518] loop4: detected capacity change from 0 to 8192
[  127.766834][ T2516] FAT-fs (loop0): Directory bread(block 69) failed
[  127.874545][ T2516] FAT-fs (loop0): Directory bread(block 70) failed
[  127.928108][ T2516] FAT-fs (loop0): Directory bread(block 71) failed
[  128.009508][ T2516] FAT-fs (loop0): Directory bread(block 72) failed
[  128.010133][    T6] usb 4-1: Detected FT8U232AM
[  128.021785][    T6] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  128.034608][    T6] usb 4-1: USB disconnect, device number 8
[  128.040664][ T2516] FAT-fs (loop0): Directory bread(block 73) failed
[  128.050991][    T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  128.069268][    T6] ftdi_sio 4-1:0.0: device disconnected
[  128.120541][ T2528] kvm: pic: non byte write
[  128.127066][ T2528] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns
[  128.358444][ T2546] loop3: detected capacity change from 0 to 512
[  128.525848][ T2546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  128.614816][ T2546] EXT4-fs (loop3): 1 truncate cleaned up
[  128.666946][ T2546] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,discard,journal_ioprio=0x0000000000000006,errors=remount-ro,lazytime,minixdf,noquota,minixdf,journal_ioprio=0x0000000000000004,. Quota mode: none.
[  128.985222][ T2562] loop5: detected capacity change from 0 to 128
[  129.031296][ T2562] EXT4-fs (loop5): Ignoring removed nobh option
[  129.052467][ T2562] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[  129.070555][ T2562] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  129.291767][ T2581] picdev_read: 77 callbacks suppressed
[  129.291828][ T2581] kvm: pic: non byte read
[  129.303653][ T2581] kvm: pic: non byte read
[  129.319257][ T2581] kvm: pic: non byte read
[  129.330192][ T2581] kvm: pic: non byte read
[  129.428185][ T2581] kvm: pic: non byte read
[  129.440120][ T2581] kvm: pic: non byte read
[  129.453207][ T2581] kvm: pic: non byte read
[  129.469151][ T2581] kvm: pic: non byte read
[  129.638598][ T2581] kvm: pic: non byte read
[  129.730201][ T2581] kvm: pic: non byte read
[  129.873789][ T2589] loop4: detected capacity change from 0 to 512
[  129.992066][ T2589] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  130.013774][ T2589] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.057302][ T2602] loop3: detected capacity change from 0 to 256
[  130.065660][ T2103] Bluetooth: hci0: Frame reassembly failed (-84)
[  130.116109][ T2610] loop3: detected capacity change from 0 to 256
[  130.133563][ T2610] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  130.293488][ T2612] loop4: detected capacity change from 0 to 40427
[  130.403251][ T2616] hub 2-0:1.0: USB hub found
[  130.408643][ T2616] hub 2-0:1.0: 1 port detected
[  130.530610][ T2612] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  130.560333][ T2612] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  130.635865][ T2612] F2FS-fs (loop4): invalid crc value
[  130.651528][ T2612] F2FS-fs (loop4): Found nat_bits in checkpoint
[  130.693292][ T2612] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  130.700605][ T2612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  130.741269][   T30] audit: type=1400 audit(1759254609.953:263): avc:  denied  { create } for  pid=2611 comm="syz.4.697" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  130.761963][   T30] audit: type=1400 audit(1759254609.953:264): avc:  denied  { rename } for  pid=2611 comm="syz.4.697" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  130.786384][   T30] audit: type=1400 audit(1759254609.953:265): avc:  denied  { rename } for  pid=2611 comm="syz.4.697" name="file0" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  130.809443][   T30] audit: type=1400 audit(1759254609.953:266): avc:  denied  { unlink } for  pid=2611 comm="syz.4.697" name=2E02 dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  131.377485][ T2630] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  131.385713][ T2630] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  132.048214][ T2650] mmap: syz.2.709 (2650) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  132.163881][  T369] Bluetooth: hci0: command 0x1003 tx timeout
[  132.170057][  T448] Bluetooth: hci0: sending frame failed (-49)
[  132.191964][ T2658] loop3: detected capacity change from 0 to 256
[  132.229122][ T2658] FAT-fs (loop3): Directory bread(block 64) failed
[  132.249914][ T2658] FAT-fs (loop3): Directory bread(block 65) failed
[  132.264304][ T2658] FAT-fs (loop3): Directory bread(block 66) failed
[  132.279076][ T2658] FAT-fs (loop3): Directory bread(block 67) failed
[  132.286205][ T2658] FAT-fs (loop3): Directory bread(block 68) failed
[  132.293353][ T2658] FAT-fs (loop3): Directory bread(block 69) failed
[  132.300095][ T2658] FAT-fs (loop3): Directory bread(block 70) failed
[  132.306691][ T2658] FAT-fs (loop3): Directory bread(block 71) failed
[  132.306694][ T1584] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  132.320845][ T2658] FAT-fs (loop3): Directory bread(block 72) failed
[  132.327621][ T2658] FAT-fs (loop3): Directory bread(block 73) failed
[  132.458821][ T2663] loop3: detected capacity change from 0 to 128
[  132.546824][ T1584] usb 6-1: Using ep0 maxpacket: 16
[  132.666897][ T1584] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.690267][ T1584] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  132.716277][ T1584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.765473][ T1584] usb 6-1: config 0 descriptor??
[  132.984062][ T2673] loop4: detected capacity change from 0 to 128
[  133.021162][ T2673] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.038236][ T2669] loop3: detected capacity change from 0 to 40427
[  133.049929][ T2673] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.067124][ T2669] F2FS-fs (loop3): invalid crc value
[  133.074001][ T2673] syz.4.719 (pid 2673) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  133.085309][ T2669] F2FS-fs (loop3): Found nat_bits in checkpoint
[  133.094957][ T2673] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)"
[  133.134831][ T2669] F2FS-fs (loop3): Start checkpoint disabled!
[  133.141697][ T2669] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  133.256973][ T1584] hid (null): unknown global tag 0xc
[  133.599391][ T1584] logitech-djreceiver 0003:046D:C71B.0007: unknown global tag 0xc
[  133.612789][ T1584] logitech-djreceiver 0003:046D:C71B.0007: item 0 2 1 12 parsing failed
[  133.621467][ T1584] logitech-djreceiver 0003:046D:C71B.0007: logi_dj_probe: parse failed
[  133.629850][ T1584] logitech-djreceiver: probe of 0003:046D:C71B.0007 failed with error -22
[  133.642276][ T2695] loop4: detected capacity change from 0 to 128
[  133.646046][ T1584] usb 6-1: USB disconnect, device number 4
[  133.707972][ T2697] attempt to access beyond end of device
[  133.707972][ T2697] loop3: rw=10241, want=45104, limit=40427
[  134.186732][ T1585] Bluetooth: hci0: command 0x1001 tx timeout
[  134.193369][  T448] Bluetooth: hci0: sending frame failed (-49)
[  134.632697][ T2103] attempt to access beyond end of device
[  134.632697][ T2103] loop3: rw=1, want=45160, limit=40427
[  134.645608][ T2103] attempt to access beyond end of device
[  134.645608][ T2103] loop3: rw=1, want=45104, limit=40427
[  134.657220][ T2103] attempt to access beyond end of device
[  134.657220][ T2103] loop3: rw=2049, want=40976, limit=40427
[  134.680121][ T2723] loop5: detected capacity change from 0 to 128
[  135.628385][ T2757] loop4: detected capacity change from 0 to 128
[  137.135141][ T1585] Bluetooth: hci0: command 0x1009 tx timeout
[  137.330395][ T2786] loop4: detected capacity change from 0 to 128
[  138.056653][  T519] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  138.296691][  T519] usb 5-1: Using ep0 maxpacket: 32
[  138.416696][  T519] usb 5-1: config 4 has an invalid interface number: 145 but max is 0
[  138.425109][  T519] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  138.435331][  T519] usb 5-1: config 4 has no interface number 0
[  138.441470][  T519] usb 5-1: config 4 interface 145 has no altsetting 0
[  138.606748][  T519] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=8e.d0
[  138.616020][  T519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.624051][  T519] usb 5-1: Product: syz
[  138.628266][  T519] usb 5-1: Manufacturer: syz
[  138.632870][  T519] usb 5-1: SerialNumber: syz
[  138.957483][  T519] usb 5-1: USB disconnect, device number 6
[  139.071213][ T2814] loop5: detected capacity change from 0 to 40427
[  139.139753][ T2814] F2FS-fs (loop5): invalid crc value
[  139.146392][ T2814] F2FS-fs (loop5): Found nat_bits in checkpoint
[  139.185692][ T2814] F2FS-fs (loop5): Start checkpoint disabled!
[  139.192587][ T2814] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  139.215995][   T30] audit: type=1400 audit(1759254618.423:267): avc:  denied  { ioctl } for  pid=2813 comm="syz.5.769" path="/36/file0/pids.current" dev="loop5" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  139.252237][    T8] attempt to access beyond end of device
[  139.252237][    T8] loop5: rw=2049, want=40976, limit=40427
[  139.395539][ T2827] loop4: detected capacity change from 0 to 512
[  139.447821][ T2827] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  139.485043][ T2827] EXT4-fs (loop4): 1 truncate cleaned up
[  139.497774][ T2827] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback.
[  140.437294][ T2853] picdev_read: 77 callbacks suppressed
[  140.437316][ T2853] kvm: pic: non byte read
[  140.460736][ T2852] loop5: detected capacity change from 0 to 128
[  140.477005][ T2853] kvm: pic: non byte read
[  140.481566][ T2853] kvm: pic: non byte read
[  140.486003][ T2853] kvm: pic: non byte read
[  140.567073][ T2853] kvm: pic: non byte read
[  140.582936][ T2853] kvm: pic: non byte read
[  140.637804][ T2853] kvm: pic: non byte read
[  140.672722][ T2853] kvm: pic: non byte read
[  140.682002][   T30] audit: type=1400 audit(1759254619.893:268): avc:  denied  { read } for  pid=2855 comm="syz.5.782" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  140.696799][ T2853] kvm: pic: non byte read
[  140.734137][ T2853] kvm: pic: non byte read
[  140.735680][   T30] audit: type=1400 audit(1759254619.913:269): avc:  denied  { open } for  pid=2855 comm="syz.5.782" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  140.888390][ T2865] loop0: detected capacity change from 0 to 16
[  141.168718][ T2865] erofs: (device loop0): mounted with root inode @ nid 36.
[  141.199231][ T2871] loop4: detected capacity change from 0 to 512
[  141.218203][  T379] udevd[379]: incorrect ext4 checksum on /dev/loop4
[  141.225563][ T2871] EXT4-fs warning (device loop4): ext4_fill_super:3971: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  141.247799][ T2871] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  141.493764][ T2878] loop5: detected capacity change from 0 to 512
[  141.520475][ T2878] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  141.528878][ T2878] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  141.543349][ T2878] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.789: attempt to clear invalid blocks 2 len 1
[  141.558295][ T2878] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  141.573521][ T2878] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.789: invalid indirect mapped block 1819239214 (level 0)
[  141.588097][ T2878] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.789: invalid indirect mapped block 1819239214 (level 1)
[  141.593606][   T30] audit: type=1400 audit(1759254620.803:270): avc:  denied  { create } for  pid=2870 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  141.603607][ T2878] EXT4-fs (loop5): 1 truncate cleaned up
[  141.627424][ T2878] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback.
[  141.696731][  T369] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  141.739944][   T30] audit: type=1400 audit(1759254620.943:271): avc:  denied  { quotaon } for  pid=2877 comm="syz.5.789" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.947804][ T2887] loop5: detected capacity change from 0 to 128
[  142.061276][ T2892] kvm: pic: non byte write
[  142.157901][ T2900] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2900 comm=syz.4.793
[  142.170427][ T2900] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2900 comm=syz.4.793
[  142.184839][   T30] audit: type=1400 audit(1759254621.393:272): avc:  denied  { audit_write } for  pid=2888 comm="syz.4.793" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  142.386737][  T369] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  142.397957][  T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.406844][  T369] usb 1-1: Product: syz
[  142.411095][  T369] usb 1-1: Manufacturer: syz
[  142.415783][  T369] usb 1-1: SerialNumber: syz
[  142.421407][  T369] usb 1-1: config 0 descriptor??
[  142.723136][   T30] audit: type=1400 audit(1759254621.933:273): avc:  denied  { read } for  pid=2912 comm="syz.2.802" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  142.900299][ T2917] loop4: detected capacity change from 0 to 128
[  142.961656][ T2919] loop4: detected capacity change from 0 to 1024
[  143.008133][ T2919] EXT4-fs (loop4): Ignoring removed orlov option
[  143.065910][ T2919] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000000003,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,mb_optimize_scan=0x0000000000000001,orlov,user_xattr,nodioread_nolock,i_version,,errors=continue. Quota mode: none.
[  143.164096][ T2929] loop5: detected capacity change from 0 to 128
[  143.184742][ T2929] syz.5.807[2929] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.184840][ T2929] syz.5.807[2929] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.432794][ T2929] loop5: detected capacity change from 0 to 40427
[  143.540682][ T2929] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  143.548321][ T2929] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  143.558803][ T2929] F2FS-fs (loop5): fault_injection options not supported
[  143.565979][ T2929] F2FS-fs (loop5): fault_type options not supported
[  143.582049][ T2929] F2FS-fs (loop5): invalid crc value
[  143.592361][ T2929] F2FS-fs (loop5): Found nat_bits in checkpoint
[  143.649866][ T2929] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  143.657306][ T2929] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  143.782370][   T30] audit: type=1400 audit(1759254622.993:274): avc:  denied  { rename } for  pid=2928 comm="syz.5.807" name="file7" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  143.793084][ T1585] usb 1-1: USB disconnect, device number 7
[  143.832599][ T2104] attempt to access beyond end of device
[  143.832599][ T2104] loop5: rw=2049, want=45104, limit=40427
[  143.853928][   T30] audit: type=1400 audit(1759254623.063:275): avc:  denied  { mounton } for  pid=2944 comm="syz.0.811" path="/bus" dev="ramfs" ino=27241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  143.854076][ T2945] overlayfs: failed to clone upperpath
[  144.168468][ T2957] netlink: 92 bytes leftover after parsing attributes in process `syz.5.816'.
[  144.199730][ T2957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.816'.
[  144.256158][ T2957] netlink: 40 bytes leftover after parsing attributes in process `syz.5.816'.
[  144.282672][ T2957] netlink: 40 bytes leftover after parsing attributes in process `syz.5.816'.
[  144.553363][ T2970] loop5: detected capacity change from 0 to 16
[  144.668467][ T2970] erofs: (device loop5): mounted with root inode @ nid 36.
[  144.784730][   T30] audit: type=1400 audit(1759254623.993:276): avc:  denied  { connect } for  pid=2974 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  145.203342][ T2991] hub 2-0:1.0: USB hub found
[  145.208583][ T2991] hub 2-0:1.0: 1 port detected
[  145.356004][ T2951] loop0: detected capacity change from 0 to 131072
[  145.402009][ T2951] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  145.415471][ T2951] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  145.463246][ T2951] F2FS-fs (loop0): invalid crc value
[  145.470468][ T2951] F2FS-fs (loop0): Found nat_bits in checkpoint
[  145.500383][ T2951] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  145.507772][ T2951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  145.615007][ T2997] loop4: detected capacity change from 0 to 1024
[  145.625864][ T2997] EXT4-fs (loop4): Mount option "journal_checksum" incompatible with ext3
[  146.569457][ T3015] loop4: detected capacity change from 0 to 16
[  146.635932][ T3015] erofs: (device loop4): mounted with root inode @ nid 36.
[  147.029254][ T3032] loop3: detected capacity change from 0 to 512
[  147.042357][ T3034] loop4: detected capacity change from 0 to 256
[  147.068351][ T3032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  147.078583][ T3034] exfat: Deprecated parameter 'utf8'
[  147.099635][ T3034] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  147.117037][ T3032] EXT4-fs (loop3): 1 truncate cleaned up
[  147.126524][ T3032] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback.
[  147.686267][ T3044] hub 2-0:1.0: USB hub found
[  147.725340][ T3044] hub 2-0:1.0: 1 port detected
[  148.779128][ T3072] loop5: detected capacity change from 0 to 512
[  148.788915][ T3072] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  148.815157][ T3072] EXT4-fs (loop5): 1 truncate cleaned up
[  148.824196][ T3072] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback.
[  148.952636][ T1584] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  149.206675][ T1584] usb 5-1: Using ep0 maxpacket: 8
[  149.213493][ T3082] loop0: detected capacity change from 0 to 40427
[  149.273810][ T3082] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  149.289337][ T3082] F2FS-fs (loop0): invalid crc value
[  149.314438][ T3082] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.316756][ T3092] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.329902][ T1584] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  149.338138][ T1584] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.362374][ T1584] usb 5-1: config 0 has no interface number 0
[  149.378089][ T1584] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  149.400124][ T1584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.422875][ T1584] usb 5-1: config 0 descriptor??
[  149.478620][ T3082] F2FS-fs (loop0): recover fsync data on readonly fs
[  149.486182][ T3082] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  149.493562][ T3082] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  149.501377][ T3082] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.799427][ T3082] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[  149.810366][   T30] audit: type=1400 audit(1759254629.003:277): avc:  denied  { remount } for  pid=3080 comm="syz.0.858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  149.833889][  T369] usb 5-1: USB disconnect, device number 7
[  149.862606][ T3082] ==================================================================
[  149.870751][ T3082] BUG: KASAN: null-ptr-deref in f2fs_issue_flush+0x14c/0x890
[  149.878161][ T3082] Write of size 4 at addr 0000000000000024 by task syz.0.858/3082
[  149.885996][ T3082] 
[  149.888336][ T3082] CPU: 1 PID: 3082 Comm: syz.0.858 Not tainted syzkaller #0
[  149.895625][ T3082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  149.905688][ T3082] Call Trace:
[  149.908976][ T3082]  <TASK>
[  149.911914][ T3082]  __dump_stack+0x21/0x30
[  149.916258][ T3082]  dump_stack_lvl+0xee/0x150
[  149.920856][ T3082]  ? show_regs_print_info+0x20/0x20
[  149.926226][ T3082]  ? f2fs_issue_flush+0x14c/0x890
[  149.931262][ T3082]  kasan_report+0xe7/0x140
[  149.935685][ T3082]  ? down_read_trylock+0x341/0x660
[  149.940888][ T3082]  ? f2fs_issue_flush+0x14c/0x890
[  149.945915][ T3082]  kasan_check_range+0x280/0x290
[  149.950858][ T3082]  __kasan_check_write+0x14/0x20
[  149.955801][ T3082]  f2fs_issue_flush+0x14c/0x890
[  149.960660][ T3082]  ? is_inflight_io+0x480/0x480
[  149.965526][ T3082]  ? radix_tree_lookup+0x276/0x290
[  149.970646][ T3082]  ? __remove_ino_entry+0x14c/0x220
[  149.975862][ T3082]  ? f2fs_wait_on_node_pages_writeback+0x30a/0x370
[  149.982376][ T3082]  f2fs_do_sync_file+0x1040/0x19e0
[  149.987495][ T3082]  ? __kasan_check_read+0x11/0x20
[  149.992519][ T3082]  ? f2fs_sync_file+0x150/0x150
[  149.997377][ T3082]  __f2fs_ioctl+0x30d0/0xb140
[  150.002097][ T3082]  ? avc_flush+0x2b0/0x2b0
[  150.006519][ T3082]  ? do_futex+0xc91/0x2620
[  150.010937][ T3082]  ? kasan_set_free_info+0x23/0x40
[  150.016058][ T3082]  ? do_vfs_ioctl+0x1558/0x1d00
[  150.020922][ T3082]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  150.026563][ T3082]  ? futex_exit_release+0x1d0/0x1d0
[  150.031772][ T3082]  ? f2fs_ioctl+0x240/0x240
[  150.036286][ T3082]  ? ioctl_has_perm+0x394/0x4d0
[  150.041141][ T3082]  ? debug_smp_processor_id+0x17/0x20
[  150.046520][ T3082]  ? has_cap_mac_admin+0x330/0x330
[  150.051635][ T3082]  ? slab_free_freelist_hook+0xc2/0x190
[  150.057189][ T3082]  ? putname+0x111/0x160
[  150.061449][ T3082]  ? selinux_file_ioctl+0x377/0x480
[  150.066649][ T3082]  ? selinux_file_alloc_security+0x120/0x120
[  150.072638][ T3082]  ? __fget_files+0x2c4/0x320
[  150.077324][ T3082]  f2fs_ioctl+0x149/0x240
[  150.081654][ T3082]  ? f2fs_precache_extents+0x260/0x260
[  150.087145][ T3082]  __se_sys_ioctl+0x121/0x1a0
[  150.091833][ T3082]  __x64_sys_ioctl+0x7b/0x90
[  150.096424][ T3082]  x64_sys_call+0x2f/0x9a0
[  150.100845][ T3082]  do_syscall_64+0x4c/0xa0
[  150.105482][ T3082]  ? clear_bhb_loop+0x50/0xa0
[  150.110193][ T3082]  ? clear_bhb_loop+0x50/0xa0
[  150.114878][ T3082]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  150.120792][ T3082] RIP: 0033:0x7f354051fec9
[  150.125214][ T3082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.144823][ T3082] RSP: 002b:00007f353ef88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.153244][ T3082] RAX: ffffffffffffffda RBX: 00007f3540776fa0 RCX: 00007f354051fec9
[  150.161307][ T3082] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000005
[  150.169280][ T3082] RBP: 00007f35405a2f91 R08: 0000000000000000 R09: 0000000000000000
[  150.177246][ T3082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.185215][ T3082] R13: 00007f3540777038 R14: 00007f3540776fa0 R15: 00007ffd7cc31b28
[  150.193190][ T3082]  </TASK>
[  150.196208][ T3082] ==================================================================
[  150.204258][ T3082] Disabling lock debugging due to kernel taint
[  150.215289][ T3082] BUG: kernel NULL pointer dereference, address: 0000000000000024
[  150.223375][ T3082] #PF: supervisor write access in kernel mode
[  150.229449][ T3082] #PF: error_code(0x0002) - not-present page
[  150.235444][ T3082] PGD 13d202067 P4D 13d202067 PUD 0 
[  150.240747][ T3082] Oops: 0002 [#1] PREEMPT SMP KASAN
[  150.245945][ T3082] CPU: 0 PID: 3082 Comm: syz.0.858 Tainted: G    B             syzkaller #0
[  150.254618][ T3082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  150.264670][ T3082] RIP: 0010:f2fs_issue_flush+0x15d/0x890
[  150.270329][ T3082] Code: 6a 54 ff 4c 89 64 24 28 49 83 c4 24 4c 89 e7 be 04 00 00 00 e8 f4 e7 92 ff 81 e3 00 04 00 00 0f 85 52 01 00 00 4c 89 64 24 08 <f0> 41 ff 04 24 4c 8b 74 24 20 4d 8d ae 3c 0c 00 00 4d 89 ec 49 c1
[  150.289945][ T3082] RSP: 0018:ffffc90000cf76c0 EFLAGS: 00010246
[  150.296027][ T3082] RAX: ffff88813d551300 RBX: 0000000000000000 RCX: 0000000000080000
[  150.304010][ T3082] RDX: ffffc9000170c000 RSI: 0000000000054fdc RDI: 0000000000054fdd
[  150.311986][ T3082] RBP: ffffc90000cf77d0 R08: 0000000000000004 R09: 0000000000000003
[  150.319990][ T3082] R10: fffffbfff0e1824c R11: 1ffffffff0e1824c R12: 0000000000000024
[  150.327967][ T3082] R13: ffffc90000cf7720 R14: 0000000000000000 R15: 1ffff9200019eee0
[  150.335942][ T3082] FS:  00007f353ef886c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  150.344875][ T3082] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.351473][ T3082] CR2: 0000000000000024 CR3: 000000011dd32000 CR4: 00000000003526b0
[  150.359465][ T3082] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  150.367445][ T3082] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  150.375415][ T3082] Call Trace:
[  150.378699][ T3082]  <TASK>
[  150.381627][ T3082]  ? is_inflight_io+0x480/0x480
[  150.386487][ T3082]  ? radix_tree_lookup+0x276/0x290
[  150.391605][ T3082]  ? __remove_ino_entry+0x14c/0x220
[  150.396807][ T3082]  ? f2fs_wait_on_node_pages_writeback+0x30a/0x370
[  150.403309][ T3082]  f2fs_do_sync_file+0x1040/0x19e0
[  150.408424][ T3082]  ? __kasan_check_read+0x11/0x20
[  150.413458][ T3082]  ? f2fs_sync_file+0x150/0x150
[  150.418321][ T3082]  __f2fs_ioctl+0x30d0/0xb140
[  150.423001][ T3082]  ? avc_flush+0x2b0/0x2b0
[  150.427414][ T3082]  ? do_futex+0xc91/0x2620
[  150.431835][ T3082]  ? kasan_set_free_info+0x23/0x40
[  150.436955][ T3082]  ? do_vfs_ioctl+0x1558/0x1d00
[  150.441839][ T3082]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  150.447499][ T3082]  ? futex_exit_release+0x1d0/0x1d0
[  150.452707][ T3082]  ? f2fs_ioctl+0x240/0x240
[  150.457222][ T3082]  ? ioctl_has_perm+0x394/0x4d0
[  150.462077][ T3082]  ? debug_smp_processor_id+0x17/0x20
[  150.467448][ T3082]  ? has_cap_mac_admin+0x330/0x330
[  150.472561][ T3082]  ? slab_free_freelist_hook+0xc2/0x190
[  150.478127][ T3082]  ? putname+0x111/0x160
[  150.482391][ T3082]  ? selinux_file_ioctl+0x377/0x480
[  150.487607][ T3082]  ? selinux_file_alloc_security+0x120/0x120
[  150.493608][ T3082]  ? __fget_files+0x2c4/0x320
[  150.498290][ T3082]  f2fs_ioctl+0x149/0x240
[  150.502623][ T3082]  ? f2fs_precache_extents+0x260/0x260
[  150.508086][ T3082]  __se_sys_ioctl+0x121/0x1a0
[  150.512766][ T3082]  __x64_sys_ioctl+0x7b/0x90
[  150.517364][ T3082]  x64_sys_call+0x2f/0x9a0
[  150.521783][ T3082]  do_syscall_64+0x4c/0xa0
[  150.526203][ T3082]  ? clear_bhb_loop+0x50/0xa0
[  150.530882][ T3082]  ? clear_bhb_loop+0x50/0xa0
[  150.535566][ T3082]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  150.541474][ T3082] RIP: 0033:0x7f354051fec9
[  150.545895][ T3082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.565504][ T3082] RSP: 002b:00007f353ef88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.573924][ T3082] RAX: ffffffffffffffda RBX: 00007f3540776fa0 RCX: 00007f354051fec9
[  150.581898][ T3082] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000005
[  150.589869][ T3082] RBP: 00007f35405a2f91 R08: 0000000000000000 R09: 0000000000000000
[  150.597930][ T3082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.605901][ T3082] R13: 00007f3540777038 R14: 00007f3540776fa0 R15: 00007ffd7cc31b28
[  150.613881][ T3082]  </TASK>
[  150.616908][ T3082] Modules linked in:
[  150.620805][ T3082] CR2: 0000000000000024
[  150.624961][ T3082] ---[ end trace a28f1ced06577126 ]---
[  150.630415][ T3082] RIP: 0010:f2fs_issue_flush+0x15d/0x890
[  150.636062][ T3082] Code: 6a 54 ff 4c 89 64 24 28 49 83 c4 24 4c 89 e7 be 04 00 00 00 e8 f4 e7 92 ff 81 e3 00 04 00 00 0f 85 52 01 00 00 4c 89 64 24 08 <f0> 41 ff 04 24 4c 8b 74 24 20 4d 8d ae 3c 0c 00 00 4d 89 ec 49 c1
[  150.655693][ T3082] RSP: 0018:ffffc90000cf76c0 EFLAGS: 00010246
[  150.661765][ T3082] RAX: ffff88813d551300 RBX: 0000000000000000 RCX: 0000000000080000
[  150.669734][ T3082] RDX: ffffc9000170c000 RSI: 0000000000054fdc RDI: 0000000000054fdd
[  150.677708][ T3082] RBP: ffffc90000cf77d0 R08: 0000000000000004 R09: 0000000000000003
[  150.685678][ T3082] R10: fffffbfff0e1824c R11: 1ffffffff0e1824c R12: 0000000000000024
[  150.693665][ T3082] R13: ffffc90000cf7720 R14: 0000000000000000 R15: 1ffff9200019eee0
[  150.701647][ T3082] FS:  00007f353ef886c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  150.710581][ T3082] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.717167][ T3082] CR2: 0000000000000024 CR3: 000000011dd32000 CR4: 00000000003526b0
[  150.725142][ T3082] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  150.733111][ T3082] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  150.741086][ T3082] Kernel panic - not syncing: Fatal exception
[  150.747470][ T3082] Kernel Offset: disabled
[  150.751791][ T3082] Rebooting in 86400 seconds..