last executing test programs:

22.53595677s ago: executing program 1 (id=43):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x3, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc)

22.465915551s ago: executing program 1 (id=47):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0xfda7, &(0x7f0000000340)={&(0x7f0000000140)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x410)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000d90400000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x0)

22.465601231s ago: executing program 1 (id=48):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x184c8, &(0x7f00000006c0)=ANY=[], 0x1, 0x262, &(0x7f0000001400)="$eJzs3b9qk1EYB+DXNk1jFzuLwwcuTkGdXINUEANCJINORlqXRoSvS3Qxl+E1eEleRqc6HbGn1lg//9SmPWn6PBDOS34E3rPkkHDe5OWtN7vbb/dep88fo9OpohUxTSliM1ZiNbJrR+vKYd2OWdPvAQBwaQwGo17pHjhfdd0brUXE+i/J8FORhgAAAAAAAAAAADizpvv/cXDK+/9/8WruXQMAZ/F/9///5dRnUdR1b7TROKbp/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQzkFKN9IfHqX7AwDmr/n8vx7OfwBYXqf+/J8+FOkTAJgf3/8DwNXz7PmLJ71+f2tQVZ2I/elkOBnmNeePHve37laHNn+8an8yGa4e5/dyXv2cr8XGUX6/MW/Hnds5/5Y9fNo/ka/H9vlvHwAAAAAAAAAAAAAAAAAAABZCtzrWON/f7f4uz9XM7wOcmN9vxc3WhW0DAAAAAAAAAAAAAAAAAAAALrW9d+93R+PxTq1YmiIeLEQbF11ELEQby1KUfmcCAAAAAAAAAAAAAAAAAICrJ8/6fklZ6W4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoIz8///jnXq+RXv2mYiYpqz0dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAl9jUAAP//eSSiAQ==")
syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

22.206208888s ago: executing program 1 (id=51):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x777, &(0x7f0000000bc0)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVBzsJA2ZNCWToskqxaUuXAgqImg3LkSahdCNaEDwA+jGfgVBVHThQhi5k0ka20kaa+Kx6fPAyZxz37n5vWeGucydAO5bjxd/soi+iBiMiHL7eB4RPa1Zb8TiyvOujSxdKEYWzea5n7PitLg6snRh9X9l7cd90ToljkbEM89m8fCbt+c25hemqvV6bba9HpibvjTQmF84NjldnahN1C4OD588MXZ8aHR0bNv2OjQQr3zzxekXF89c/nzwpZmpot++dm39PrZT1uFYKSJe3omwBLra++ladywrJWwIAIBNFd/zH4qIJ1rf4crRFTe/vJXjxtdJmwMAAAC2RfNQEwAAANjlUv/+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvaHZzKIJAAAA7Gqpf38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODecnVk6cLq+C9zfzoTEf0r+dfaY6VSisXWY290R8Te37IorTsvi4jBbchfvBIRj3baf9bK74/e1urW/DwizibOf3Ub8uF+tlxcf053+vzla9ef6PD5K62c9q+tXv+u3Xb9u5nftcH179IWMz79/oW3N8y/EvFYqVN+tpafbZC/uMX8r54/+MFGteYnEUeic/76rIG56UsDjfmFY5PT1YnaRO3i8PDJE2PHh0ZHxwbGJ+u1wZW/HTM++uytbzfb/96N8rPY9PV/Z4v7P3zg6S8/3iT/6OHN3/9Or3/R09IW83/9bv+fG9WK/PMb7P9O7//yFvOfu372+hafCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALpFHRF9keWVtnueVSsS+iHgk9ub1mcbcU+Mzly+eL2oR/dGdj0/Wa4MRUV5ZZ8V6qDVfXWcx/Ld1vTYSEQci4t3ynta68tpM/XzqzQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBmX0T0RZZXIiKPiN/LeV6ppO4KAAAA2Hb9qRsAAAAAdpz7fwAAANj93P8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwww4cWr6RRcTiqT2tUehp17qTdgbstDx1A0AyXakbAJIppW4ASMY9PpDdod57FxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdp8jB5dvZBGxeGpPaxR62rXupJ0BOy1P3QCQTFfqBoBkSqkbAJJxjw9kd6j33kUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN2nrzWyvBIReWue55VKxIMR0R/d2fhkvTYYEfsj4ody9wPFeih10wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGy7xvzCVLVer83ujsnJ/0cbJiZT1a57+vOV+soEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAKjfmFqWq9XpttpO4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtPIfs4goxpHyk323VnuyP8qtx4h4/cNz771RnZubHSqO/7J2fO799vHhFP0DAAAAt1q9T1+9jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiqxvzCVLVer83u4CT1HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf+avAAAA//8llZ4T")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
chdir(&(0x7f0000000300)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0)

21.950225524s ago: executing program 0 (id=60):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0, &(0x7f0000000140))

21.950047434s ago: executing program 0 (id=61):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffb, 0x9, 0x2010002, 0x0, "05000801000000d510017b00000f3600", 0x1, 0x7ff})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ppoll(&(0x7f0000000080)=[{r1, 0x13}, {r1, 0x1}], 0x2, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xa)

21.940555504s ago: executing program 1 (id=62):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x24806, 0x0, 0xfd, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./sys\x00', 0x380007b, 0x0, 0x1, 0x0, &(0x7f0000000140))
chdir(&(0x7f0000000140)='./file0\x00')
unlink(&(0x7f0000000040)='./file0\x00')

21.895731005s ago: executing program 0 (id=63):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x5297, 0x2, 0x3, 0x255}, 0x0, 0x1, 0x0, 0x0)

21.798180248s ago: executing program 1 (id=64):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014})

21.72017858s ago: executing program 32 (id=64):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014})

21.7144975s ago: executing program 0 (id=66):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon0/bind\x00', 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff70)

21.586824643s ago: executing program 0 (id=68):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

20.47488072s ago: executing program 0 (id=74):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x4, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e851829dbde40dceee78a044c4b3427d7179abfecd82897b70cb1ac2c8700ddb", "924c578daddc36b38d26cb83134a4518", {"2c830afea281f41d6b83e0057baf932f", "fbfa0de2ab927ae62e3313846edfc33b"}}}}}}}, 0x0)

20.384526302s ago: executing program 33 (id=74):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x4, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e851829dbde40dceee78a044c4b3427d7179abfecd82897b70cb1ac2c8700ddb", "924c578daddc36b38d26cb83134a4518", {"2c830afea281f41d6b83e0057baf932f", "fbfa0de2ab927ae62e3313846edfc33b"}}}}}}}, 0x0)

18.537525108s ago: executing program 5 (id=103):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

18.520648937s ago: executing program 5 (id=106):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xf, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

18.43392172s ago: executing program 5 (id=109):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000700)=ANY=[], 0x0)

18.400224171s ago: executing program 5 (id=112):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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")
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000000000)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000040))
chdir(&(0x7f00000003c0)='./bus\x00')
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)

18.158085757s ago: executing program 5 (id=116):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f00000089c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
truncate(&(0x7f0000000200)='./file1\x00', 0x3000000)
fallocate(r0, 0x20, 0x4000, 0x4000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x40042, 0x0)

17.997226011s ago: executing program 5 (id=119):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000640)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x200, 0x8, 0x1, 0x8})

17.896132583s ago: executing program 34 (id=119):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000640)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x200, 0x8, 0x1, 0x8})

8.158175481s ago: executing program 2 (id=289):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)

8.039721453s ago: executing program 2 (id=291):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

7.957861675s ago: executing program 2 (id=293):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
fspick(r1, &(0x7f0000000440)='./dev/ttyS0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f0000000300)=@file={0x1, './dev/ttyS0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054)

7.935006756s ago: executing program 2 (id=294):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000013c0)=ANY=[], 0x1, 0x5514, &(0x7f0000005880)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
rmdir(&(0x7f0000000000)='./bus\x00')

7.237182164s ago: executing program 2 (id=306):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='pids.max\x00', 0x2, 0x0)
preadv2(r1, &(0x7f0000000800)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1, 0x2, 0x3, 0x13)

6.786227464s ago: executing program 2 (id=312):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x3, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x100000}], 0x1}}], 0x2, 0x608d8d0)

6.701950277s ago: executing program 35 (id=312):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x3, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x100000}], 0x1}}], 0x2, 0x608d8d0)

1.945987933s ago: executing program 4 (id=409):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x3}, 0x1c)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000d00)=ANY=[], 0xa0}}], 0x1, 0x24014401)

1.945714742s ago: executing program 4 (id=411):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)=""/1})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

1.715241998s ago: executing program 4 (id=417):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17)
write(r0, &(0x7f0000000000)='3', 0x4e)
pipe2$9p(0x0, 0x0)

1.358325887s ago: executing program 4 (id=418):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x42eb, @mcast2, 0x2}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="f4", 0x34000}], 0x1)

1.358116417s ago: executing program 4 (id=419):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@svm={0x204, 0x1, 0x1080, {0x58000, 0x9}, {"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"}})

1.282194569s ago: executing program 3 (id=421):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100)={[{@rodir}, {@uni_xlate}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@shortname_lower}, {@uni_xlate}]}, 0x81, 0x30e, &(0x7f0000011080)="$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")
timer_create(0x3, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000000c0)='/,0x400000,0x', 0xd)

1.281936539s ago: executing program 3 (id=422):
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)

1.281789989s ago: executing program 3 (id=423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.281576709s ago: executing program 4 (id=424):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x90, 0x81, {0x8, 0xb, 0x2, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x9, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb0, 0x8, 0xff, {0x8, 0x25, 0x1, 0x80, 0x3c, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0xf6, 0x7, {0x8, 0x25, 0x1, 0x0, 0x30, 0x65, 0xcb6}}}}}}}}]}}, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

1.272404919s ago: executing program 3 (id=425):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
write(r0, &(0x7f0000000000)="01", 0x1)

813.93613ms ago: executing program 8 (id=428):
r0 = socket(0x10, 0x3, 0x0)
chdir(&(0x7f0000000480)='./cgroup\x00')
r1 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
close_range(r0, 0xffffffffffffffff, 0x0)

726.200002ms ago: executing program 8 (id=431):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000004640)={0x2020}, 0x2020)

696.344083ms ago: executing program 3 (id=433):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

558.158976ms ago: executing program 8 (id=435):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000200), &(0x7f0000000080)=""/21, 0x2}, 0x20)

557.941427ms ago: executing program 3 (id=436):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

557.585987ms ago: executing program 8 (id=438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

541.436127ms ago: executing program 8 (id=440):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x65, 0x2f, 0x0, @empty, @empty}}}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000001040)={'gre0\x00', 0x0})

466.169569ms ago: executing program 8 (id=441):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0x10, 0x2b, {0xfffffffffffffc94, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

266.014274ms ago: executing program 6 (id=445):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a408, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

247.179054ms ago: executing program 6 (id=446):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x4, 0x6, 0xf, 0x10}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc)

182.159306ms ago: executing program 6 (id=448):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x5}]}, {0x0, [0x30]}}, &(0x7f0000000400)=""/238, 0x27, 0xee, 0x7, 0x5}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

181.972736ms ago: executing program 7 (id=449):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000009, 0x13, r1, 0x2000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

181.845926ms ago: executing program 6 (id=450):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x800401, 0x0)
chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00')
r0 = open(&(0x7f0000000200)='.\x00', 0x8000, 0x0)
getdents64(r0, 0x0, 0x0)

181.731316ms ago: executing program 6 (id=452):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0)

178.692486ms ago: executing program 6 (id=453):
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)

138.367797ms ago: executing program 7 (id=454):
preadv(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/19, 0x13}], 0x3, 0x7, 0x7fffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

126.274497ms ago: executing program 7 (id=455):
creat(&(0x7f0000000280)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000300)='r:t-st/ev_nt1 ./file0:0', 0x17)

54.238079ms ago: executing program 7 (id=456):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()

26.159089ms ago: executing program 7 (id=457):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@fat=@debug}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@sys_immutable}, {@utf8no}, {@utf8}, {@shortname_win95}, {@uni_xlate}], [{@audit}]}, 0x3, 0x279, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsync(r0)

0s ago: executing program 7 (id=458):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0})
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts.
[   20.644723][   T28] audit: type=1400 audit(1791249530.015:64): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.650232][  T279] cgroup: Unknown subsys name 'net'
[   20.667700][   T28] audit: type=1400 audit(1791249530.015:65): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.694953][   T28] audit: type=1400 audit(1791249530.045:66): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.695375][  T279] cgroup: Unknown subsys name 'devices'
[   20.838347][  T279] cgroup: Unknown subsys name 'hugetlb'
[   20.843997][  T279] cgroup: Unknown subsys name 'rlimit'
[   20.949335][   T28] audit: type=1400 audit(1791249530.325:67): avc:  denied  { setattr } for  pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.972558][   T28] audit: type=1400 audit(1791249530.325:68): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   20.997312][   T28] audit: type=1400 audit(1791249530.325:69): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.023563][  T281] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   21.032752][   T28] audit: type=1400 audit(1791249530.415:70): avc:  denied  { relabelto } for  pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.058194][   T28] audit: type=1400 audit(1791249530.415:71): avc:  denied  { write } for  pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.072555][  T279] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.084538][   T28] audit: type=1400 audit(1791249530.445:72): avc:  denied  { read } for  pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.117965][   T28] audit: type=1400 audit(1791249530.445:73): avc:  denied  { open } for  pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.923367][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.930508][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.938105][  T287] device bridge_slave_0 entered promiscuous mode
[   21.957586][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.964660][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.972113][  T287] device bridge_slave_1 entered promiscuous mode
[   22.016655][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.023721][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.031237][  T290] device bridge_slave_0 entered promiscuous mode
[   22.038281][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.045356][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.052875][  T289] device bridge_slave_0 entered promiscuous mode
[   22.062745][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.069812][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.077315][  T289] device bridge_slave_1 entered promiscuous mode
[   22.087163][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.094243][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.101702][  T290] device bridge_slave_1 entered promiscuous mode
[   22.108269][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.115315][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.122870][  T288] device bridge_slave_0 entered promiscuous mode
[   22.132915][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.140018][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.147487][  T288] device bridge_slave_1 entered promiscuous mode
[   22.230956][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.238079][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.245531][  T291] device bridge_slave_0 entered promiscuous mode
[   22.255360][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.262454][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.269997][  T291] device bridge_slave_1 entered promiscuous mode
[   22.375642][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.382751][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.390119][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.397183][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.412339][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.419430][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.426748][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.433783][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.489054][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.496168][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.503517][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.510596][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.536456][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.543737][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.551191][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.559054][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.566374][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.573555][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.582633][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.590075][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.617113][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.624889][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.633726][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.642202][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.649291][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.666065][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.674377][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.681422][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.698639][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.707113][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.714155][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.721626][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.729986][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.737073][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.760607][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.769055][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.777253][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.785178][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.793528][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.800631][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.808450][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.816706][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.823749][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.847692][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.857392][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.864792][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.873215][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.880311][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.887783][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.895741][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   22.920158][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.929263][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.940342][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.949620][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.957685][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.965629][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.974061][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.981152][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.000554][  T287] device veth0_vlan entered promiscuous mode
[   23.007388][  T290] device veth0_vlan entered promiscuous mode
[   23.013555][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.022139][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.030412][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.038596][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.048043][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.055502][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.063103][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.070667][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.081913][  T289] device veth0_vlan entered promiscuous mode
[   23.096500][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.104388][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.112630][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.120877][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.129017][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.137406][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.145338][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.152907][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.170918][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.178530][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.185982][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.194393][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.202731][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.209813][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.217412][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.225722][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.234032][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.241092][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.248653][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.256953][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.265091][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.273337][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.281542][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.289601][  T289] device veth1_macvtap entered promiscuous mode
[   23.298510][  T287] device veth1_macvtap entered promiscuous mode
[   23.310317][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.318052][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.325653][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.333973][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.347585][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.355822][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.364211][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.372585][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.385338][  T290] device veth1_macvtap entered promiscuous mode
[   23.397568][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.405882][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.414290][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.423445][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.432002][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.440269][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.448624][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.456529][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.464557][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.493371][  T288] device veth0_vlan entered promiscuous mode
[   23.502603][  T289] request_module fs-gadgetfs succeeded, but still no fs?
[   23.513114][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.523221][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.531962][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.540785][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.549277][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.557750][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.566020][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.574086][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.582261][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.590840][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.599671][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.607309][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.622546][  T291] device veth0_vlan entered promiscuous mode
[   23.644407][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.654471][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.663334][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.670923][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.683044][  T288] device veth1_macvtap entered promiscuous mode
[   23.698516][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.715387][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.726759][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.732782][  T315] loop1: detected capacity change from 0 to 4096
[   23.736911][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.749197][  T315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   23.762268][  T315] EXT4-fs (loop1): Test dummy encryption mode enabled
[   23.776458][  T291] device veth1_macvtap entered promiscuous mode
[   23.782830][  T315] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   23.795405][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.805530][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.815658][  T315] System zones: 0-5
[   23.820315][  T321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.839218][  T324] loop0: detected capacity change from 0 to 512
[   23.845908][  T324] EXT4-fs: Ignoring removed bh option
[   23.857661][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.865959][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.877157][  T315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   23.879779][  T324] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.8: corrupted in-inode xattr
[   23.904141][  T324] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.8: couldn't read orphan inode 15 (err -117)
[   23.931656][  T324] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   23.934533][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.951207][  T315] fs-verity: sha512 using implementation "sha512-avx2"
[   23.961376][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.970895][  T289] EXT4-fs (loop0): unmounting filesystem.
[   23.977091][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.005517][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.073878][   T19] smpboot: CPU 1 is now offline
[   24.087878][  T334] x86: Booting SMP configuration:
[   24.118724][  T334] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   24.285077][  T330] loop0: detected capacity change from 0 to 40427
[   24.312959][  T330] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   24.331656][  T330] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   24.343510][  T330] F2FS-fs (loop0): fault_type options not supported
[   24.350255][  T330] F2FS-fs (loop0): fault_injection options not supported
[   24.365243][  T330] F2FS-fs (loop0): Image doesn't support compression
[   24.372228][  T352] user requested TSC rate below hardware speed
[   24.383718][  T330] F2FS-fs (loop0): invalid crc value
[   24.400803][  T330] F2FS-fs (loop0): Found nat_bits in checkpoint
[   24.482460][  T330] F2FS-fs (loop0): Start checkpoint disabled!
[   24.493776][  T330] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   24.503660][  T330] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   24.511220][  T330] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   24.598217][  T315] fs-verity (loop1, inode 13): Error -4 building Merkle tree
[   24.720375][  T380] netlink: 64 bytes leftover after parsing attributes in process `syz.3.28'.
[   24.734874][  T308] kworker/u4:3: attempt to access beyond end of device
[   24.734874][  T308] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   24.747183][  T287] EXT4-fs (loop1): unmounting filesystem.
[   24.868522][  T396] loop1: detected capacity change from 0 to 512
[   24.888777][  T398] loop0: detected capacity change from 0 to 256
[   24.908905][  T396] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   24.925336][  T398] overlayfs: filesystem on './file0' not supported
[   24.932032][  T396] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   24.951147][  T396] capability: warning: `syz.1.34' uses 32-bit capabilities (legacy support in use)
[   25.017418][  T287] EXT4-fs (loop1): unmounting filesystem.
[   25.073760][  T392] loop2: detected capacity change from 0 to 40427
[   25.085017][  T392] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[   25.086408][  T309] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.093978][  T392] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   25.108211][  T392] F2FS-fs (loop2): Image doesn't support compression
[   25.114984][  T392] F2FS-fs (loop2): Image doesn't support compression
[   25.122533][  T392] F2FS-fs (loop2): invalid crc value
[   25.132285][  T392] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   25.162024][  T392] F2FS-fs (loop2): Start checkpoint disabled!
[   25.168747][  T392] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   25.176496][  T392] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   25.183572][  T392] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   25.203264][  T392] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   25.224303][  T386] kworker/u4:4: attempt to access beyond end of device
[   25.224303][  T386] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   25.288824][  T309] usb 4-1: unable to get BOS descriptor or descriptor too short
[   25.297404][  T309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   25.307609][  T309] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   25.316607][  T309] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   25.330733][  T309] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   25.339873][  T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   25.352226][  T309] usb 4-1: Product: syz
[   25.356467][  T309] usb 4-1: Manufacturer: syz
[   25.362580][  T309] usb 4-1: Found UVC 1.00 device syz (8086:0ad2)
[   25.562626][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1).
[   25.572299][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1).
[   25.581530][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1).
[   25.590649][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1).
[   25.599814][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1).
[   25.609882][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1).
[   25.619214][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1).
[   25.628867][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1).
[   25.637996][  T309] usb 4-1: No streaming interface found for terminal 2.
[   25.646540][  T309] usb 4-1: USB disconnect, device number 2
[   26.085096][  T413] device batadv_slave_0 entered promiscuous mode
[   26.104236][  T406] device batadv_slave_0 left promiscuous mode
[   26.125753][   T28] kauditd_printk_skb: 95 callbacks suppressed
[   26.125767][   T28] audit: type=1400 audit(1791249535.495:169): avc:  denied  { create } for  pid=419 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   26.160256][  T416] loop3: detected capacity change from 0 to 4096
[   26.168804][   T28] audit: type=1400 audit(1791249535.535:170): avc:  denied  { connect } for  pid=419 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   26.189863][  T423] netlink: 136 bytes leftover after parsing attributes in process `syz.4.41'.
[   26.193961][  T416] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   26.209958][  T423] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   26.242962][  T425] loop0: detected capacity change from 0 to 1024
[   26.246072][  T416] EXT4-fs (loop3): Test dummy encryption mode enabled
[   26.257641][   T28] audit: type=1400 audit(1791249535.535:171): avc:  denied  { shutdown } for  pid=419 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   26.280654][  T425] =======================================================
[   26.280654][  T425] WARNING: The mand mount option has been deprecated and
[   26.280654][  T425]          and is ignored by this kernel. Remove the mand
[   26.280654][  T425]          option from the mount to silence this warning.
[   26.280654][  T425] =======================================================
[   26.323179][   T28] audit: type=1400 audit(1791249535.535:172): avc:  denied  { create } for  pid=422 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.348439][  T416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   26.378514][  T416] System zones: 0-5
[   26.386787][   T28] audit: type=1400 audit(1791249535.745:173): avc:  denied  { create } for  pid=429 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.406043][  T416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   26.407058][   T28] audit: type=1400 audit(1791249535.745:174): avc:  denied  { ioctl } for  pid=429 comm="syz.1.47" path="socket:[16356]" dev="sockfs" ino=16356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.419219][  T425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   26.440052][   T28] audit: type=1400 audit(1791249535.745:175): avc:  denied  { connect } for  pid=429 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.468797][  T437] loop1: detected capacity change from 0 to 512
[   26.476316][  T425] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   26.499274][  T425] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.42: lblock 0 mapped to illegal pblock 0 (length 1)
[   26.522534][   T28] audit: type=1400 audit(1791249535.745:176): avc:  denied  { write } for  pid=429 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.543103][  T425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   26.572089][  T425] EXT4-fs (loop0): This should not happen!! Data will be lost
[   26.572089][  T425] 
[   26.585134][   T28] audit: type=1400 audit(1791249535.875:177): avc:  denied  { map } for  pid=424 comm="syz.0.42" path="/6/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   26.633789][  T289] EXT4-fs (loop0): unmounting filesystem.
[   26.690642][  T445] loop1: detected capacity change from 0 to 2048
[   26.716244][   T28] audit: type=1400 audit(1791249536.085:178): avc:  denied  { bind } for  pid=447 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   26.738327][  T418] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   26.749823][  T451] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   26.759371][  T418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   26.770563][  T445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   26.778356][  T418] F2FS-fs (loop2): fault_type options not supported
[   26.798767][  T418] F2FS-fs (loop2): fault_injection options not supported
[   26.805995][  T445] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   26.818113][  T418] F2FS-fs (loop2): Image doesn't support compression
[   26.836956][  T418] F2FS-fs (loop2): invalid crc value
[   26.855124][  T445] overlayfs: failed to set xattr on upper
[   26.878337][  T418] F2FS-fs (loop2): Found nat_bits in checkpoint
[   26.879605][  T445] overlayfs: ...falling back to index=off,metacopy=off.
[   26.955793][  T418] F2FS-fs (loop2): Start checkpoint disabled!
[   26.972943][  T418] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   26.998734][  T418] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   27.006444][  T287] EXT4-fs (loop1): unmounting filesystem.
[   27.023619][  T418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   27.106232][  T416] fs-verity (loop3, inode 13): Error -4 building Merkle tree
[   27.181438][  T464] F2FS-fs (loop4): invalid crc value
[   27.187408][  T478] EXT4-fs: Ignoring removed bh option
[   27.217551][  T464] F2FS-fs (loop4): Found nat_bits in checkpoint
[   27.239634][  T478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   27.273326][  T288] EXT4-fs (loop3): unmounting filesystem.
[   27.306370][  T464] F2FS-fs (loop4): Start checkpoint disabled!
[   27.312775][  T289] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   27.326693][  T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   27.337093][  T464] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   27.365179][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.399563][  T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   27.422962][   T43] kworker/u4:2: attempt to access beyond end of device
[   27.422962][   T43] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   27.450349][  T464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   27.455668][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.474730][  T289] EXT4-fs error (device loop0): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   27.498680][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.507975][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   27.525024][  T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   27.558530][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.580606][  T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   27.602905][  T486] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.611933][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.618790][  T289] EXT4-fs error (device loop0): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   27.636260][  T486] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.639395][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.647557][  T486] device bridge_slave_0 entered promiscuous mode
[   27.652607][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   27.672822][  T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   27.695189][    T8] device bridge_slave_1 left promiscuous mode
[   27.705199][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.712012][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.714112][  T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   27.741652][    T8] device bridge_slave_0 left promiscuous mode
[   27.744251][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.748503][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.755283][  T289] EXT4-fs error (device loop0): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   27.781514][  T289] EXT4-fs (loop0): Remounting filesystem read-only
[   27.789222][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   27.803824][    T8] device veth1_macvtap left promiscuous mode
[   27.809946][    T8] device veth0_vlan left promiscuous mode
[   27.821179][  T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   27.855738][   T43] kworker/u4:2: attempt to access beyond end of device
[   27.855738][   T43] loop4: rw=1, sector=53248, nr_sectors = 8 limit=40427
[   27.885945][   T43] kworker/u4:2: attempt to access beyond end of device
[   27.885945][   T43] loop4: rw=1, sector=53256, nr_sectors = 4088 limit=40427
[   27.899587][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   27.905123][   T43] kworker/u4:2: attempt to access beyond end of device
[   27.905123][   T43] loop4: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   27.933044][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   27.951124][   T43] kworker/u4:2: attempt to access beyond end of device
[   27.951124][   T43] loop4: rw=1, sector=49160, nr_sectors = 4088 limit=40427
[   27.966029][  T497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   27.967944][   T43] kworker/u4:2: attempt to access beyond end of device
[   27.967944][   T43] loop4: rw=1, sector=57344, nr_sectors = 8 limit=40427
[   27.988255][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   28.007733][  T497] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.008196][   T43] kworker/u4:2: attempt to access beyond end of device
[   28.008196][   T43] loop4: rw=1, sector=57352, nr_sectors = 4064 limit=40427
[   28.033991][   T43] kworker/u4:2: attempt to access beyond end of device
[   28.033991][   T43] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   28.041916][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   28.065825][  T497] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.71: Freeing blocks not in datazone - block = 0, count = 16
[   28.076275][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   28.099960][  T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   28.116005][   T43] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set
[   28.131038][   T43] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   28.144139][   T43] EXT4-fs (loop3): This should not happen!! Data will be lost
[   28.144139][   T43] 
[   28.158942][  T486] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.166295][  T486] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.168027][   T43] EXT4-fs (loop3): Total free blocks count 0
[   28.174902][  T486] device bridge_slave_1 entered promiscuous mode
[   28.179772][   T43] EXT4-fs (loop3): Free/Dirty block details
[   28.179787][   T43] EXT4-fs (loop3): free_blocks=0
[   28.179801][   T43] EXT4-fs (loop3): dirty_blocks=16
[   28.179813][   T43] EXT4-fs (loop3): Block reservation details
[   28.179824][   T43] EXT4-fs (loop3): i_reserved_data_blocks=1
[   28.181426][  T288] EXT4-fs (loop3): unmounting filesystem.
[   28.349399][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   28.357603][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.370457][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   28.379849][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.388604][  T386] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.395667][  T386] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.420212][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   28.445048][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.462112][  T386] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.469251][  T386] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.477163][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   28.497555][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.519022][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.537196][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.557072][  T486] device veth0_vlan entered promiscuous mode
[   28.568574][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.577102][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.584628][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.602034][  T486] device veth1_macvtap entered promiscuous mode
[   28.609195][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.622238][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.642871][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.753611][  T527] set_capacity_and_notify: 4 callbacks suppressed
[   28.753627][  T527] loop5: detected capacity change from 0 to 4096
[   28.780986][  T527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   28.789887][  T527] EXT4-fs (loop5): Test dummy encryption mode enabled
[   28.800574][  T523] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.817843][  T527] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   28.818635][  T523] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.834308][  T527] System zones: 0-5
[   28.847050][  T527] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   28.859511][  T523] device bridge_slave_0 entered promiscuous mode
[   28.892135][  T523] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.912448][  T537] input: syz1 as /devices/virtual/input/input4
[   28.919635][  T523] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.939912][  T523] device bridge_slave_1 entered promiscuous mode
[   28.961761][  T539] input: syz0 as /devices/virtual/input/input5
[   28.979396][  T525] loop4: detected capacity change from 0 to 40427
[   28.996649][  T525] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   29.014819][  T541] loop3: detected capacity change from 0 to 512
[   29.021558][  T525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   29.034892][  T525] F2FS-fs (loop4): fault_type options not supported
[   29.046887][  T525] F2FS-fs (loop4): fault_injection options not supported
[   29.066291][  T525] F2FS-fs (loop4): Image doesn't support compression
[   29.073999][  T541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   29.085229][  T541] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.096066][  T525] F2FS-fs (loop4): invalid crc value
[   29.106062][  T525] F2FS-fs (loop4): Found nat_bits in checkpoint
[   29.112534][  T541] EXT4-fs error (device loop3): ext4_get_first_dir_block:3583: inode #12: comm syz.3.83: Directory hole found for htree leaf block 0
[   29.155330][  T541] EXT4-fs (loop3): Remounting filesystem read-only
[   29.180396][  T525] F2FS-fs (loop4): Start checkpoint disabled!
[   29.187393][    T8] device bridge_slave_1 left promiscuous mode
[   29.193716][  T525] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   29.195644][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.210275][  T288] EXT4-fs (loop3): unmounting filesystem.
[   29.216371][  T525] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   29.223517][  T525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   29.233040][    T8] device bridge_slave_0 left promiscuous mode
[   29.245844][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.265217][    T8] device veth1_macvtap left promiscuous mode
[   29.277935][    T8] device veth0_vlan left promiscuous mode
[   29.459485][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   29.473076][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   29.488684][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   29.502575][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   29.517460][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.524604][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.547682][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   29.563337][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   29.576111][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   29.590290][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.597382][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.610151][  T554] loop4: detected capacity change from 0 to 256
[   29.622036][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   29.632405][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   29.646353][  T554] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   29.660805][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   29.679460][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   29.687164][  T527] fs-verity (loop5, inode 13): Error -4 building Merkle tree
[   29.714360][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   29.726174][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   29.740296][  T523] device veth0_vlan entered promiscuous mode
[   29.746843][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   29.754996][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   29.766510][  T495] Bluetooth: hci0: command 0x1003 tx timeout
[   29.769499][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   29.783335][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   29.791083][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   29.798883][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   29.807127][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   29.815746][  T523] device veth1_macvtap entered promiscuous mode
[   29.826023][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   29.834240][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.843157][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.856473][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.864824][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.890846][  T486] EXT4-fs (loop5): unmounting filesystem.
[   29.995155][  T575] loop5: detected capacity change from 0 to 2048
[   30.010576][  T575] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   30.019915][  T575] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.051745][  T486] EXT4-fs (loop5): unmounting filesystem.
[   30.153321][  T576] loop6: detected capacity change from 0 to 40427
[   30.164039][  T576] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   30.174548][  T576] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   30.182990][  T576] F2FS-fs (loop6): fault_type options not supported
[   30.189728][  T576] F2FS-fs (loop6): fault_injection options not supported
[   30.197345][  T576] F2FS-fs (loop6): Image doesn't support compression
[   30.204463][  T576] F2FS-fs (loop6): invalid crc value
[   30.211546][  T576] F2FS-fs (loop6): Found nat_bits in checkpoint
[   30.244882][  T576] F2FS-fs (loop6): Start checkpoint disabled!
[   30.251675][  T576] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[   30.259629][  T576] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   30.266804][  T576] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   30.378068][  T308] bio_check_eod: 1 callbacks suppressed
[   30.378083][  T308] kworker/u4:3: attempt to access beyond end of device
[   30.378083][  T308] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   30.462335][  T600] Illegal XDP return value 4294967274 on prog  (id 15) dev syz_tun, expect packet loss!
[   30.513257][  T606] loop5: detected capacity change from 0 to 4096
[   30.520961][  T606] EXT4-fs (loop5): Test dummy encryption mode enabled
[   30.540086][  T610] loop6: detected capacity change from 0 to 4096
[   30.551526][  T606] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   30.569728][  T610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   30.579806][  T610] EXT4-fs (loop6): Test dummy encryption mode enabled
[   30.596716][  T610] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   30.610877][  T606] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   30.635885][  T610] System zones: 0-5
[   30.637341][  T621] binder: 619:621 ioctl c0306201 200000000380 returned -14
[   30.647384][  T610] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   30.661287][  T606] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   30.849153][  T620] EXT4-fs (loop5): unmounting filesystem.
[   30.867616][  T626] xt_hashlimit: size too large, truncated to 1048576
[   31.225927][  T629] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.236554][  T629] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.247738][  T627] syz.4.118 (627) used greatest stack depth: 22024 bytes left
[   31.255772][  T629] device bridge_slave_0 entered promiscuous mode
[   31.265921][  T629] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.277319][  T629] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.290319][  T629] device bridge_slave_1 entered promiscuous mode
[   31.311172][  T634] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   31.312048][  T634] 
@0�: renamed from bond_slave_1
[   31.418144][   T10] device bridge_slave_1 left promiscuous mode
[   31.424724][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.446528][   T10] device bridge_slave_0 left promiscuous mode
[   31.457979][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.476532][   T10] device veth1_macvtap left promiscuous mode
[   31.485436][   T10] device veth0_vlan left promiscuous mode
[   31.503365][  T610] fs-verity (loop6, inode 13): Error -4 building Merkle tree
[   31.615342][  T523] EXT4-fs (loop6): unmounting filesystem.
[   31.640852][  T641] loop6: detected capacity change from 0 to 2048
[   31.694739][  T641] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[   31.724076][  T641] FAT-fs (loop6): Filesystem has been set read-only
[   31.743083][  T629] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.750194][  T629] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.757522][  T629] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.764571][  T629] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.779043][  T638] loop3: detected capacity change from 0 to 40427
[   31.793999][  T638] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   31.807008][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   31.816361][  T638] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   31.824637][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.833086][  T638] F2FS-fs (loop3): invalid crc value
[   31.842715][  T641] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.853372][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.864152][  T641] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   31.875239][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   31.884139][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   31.884467][  T638] F2FS-fs (loop3): Found nat_bits in checkpoint
[   31.896158][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.905552][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.913167][  T641] EXT4-fs (loop6): 1 truncate cleaned up
[   31.921807][  T641] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   31.931975][  T641] EXT4-fs warning (device loop6): ext4_group_add:1743: No reserved GDT blocks, can't resize
[   31.942505][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   31.956623][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   31.965378][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.969244][  T638] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   31.972518][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.980028][  T638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   31.994247][   T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   32.002847][  T523] EXT4-fs (loop6): unmounting filesystem.
[   32.008762][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.024976][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.033962][  T638] syz.3.123: attempt to access beyond end of device
[   32.033962][  T638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   32.056631][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.064916][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.073349][  T638] syz.3.123: attempt to access beyond end of device
[   32.073349][  T638] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   32.095628][  T629] device veth0_vlan entered promiscuous mode
[   32.102010][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.110721][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.119579][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.127460][  T638] syz.3.123: attempt to access beyond end of device
[   32.127460][  T638] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   32.128792][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.150204][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.157936][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.162961][  T638] syz.3.123: attempt to access beyond end of device
[   32.162961][  T638] loop3: rw=2049, sector=45112, nr_sectors = 32 limit=40427
[   32.179412][  T638] syz.3.123: attempt to access beyond end of device
[   32.179412][  T638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   32.196921][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.205344][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.208194][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.220482][  T629] device veth1_macvtap entered promiscuous mode
[   32.233867][  T657] EXT4-fs: Ignoring removed orlov option
[   32.240023][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.249281][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.257855][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.266310][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.275681][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.284821][  T657] EXT4-fs (loop6): Test dummy encryption mode enabled
[   32.289271][   T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   32.293119][  T657] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (50907!=55237)
[   32.305540][   T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   32.317088][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.323970][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.343106][   T39] usb 5-1: config 0 descriptor??
[   32.351369][  T657] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   32.359715][   T43] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   32.377733][  T523] EXT4-fs (loop6): unmounting filesystem.
[   32.383994][   T43] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   32.406392][  T494] Bluetooth: hci0: command 0x1003 tx timeout
[   32.412442][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   32.467968][  T667] futex_wake_op: syz.6.132 tries to shift op by 32; fix this program
[   32.477872][  T664]  loop2: p1 < > p3
[   32.482711][  T664] loop2: p3 size 134217728 extends beyond EOD, truncated
[   32.620772][   T28] kauditd_printk_skb: 58 callbacks suppressed
[   32.620790][   T28] audit: type=1400 audit(1791249541.995:237): avc:  denied  { read write } for  pid=679 comm="syz.3.137" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   32.652379][  T233] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0
[   32.660403][  T233] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0
[   32.669580][  T671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   32.678474][  T233] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0
[   32.686022][  T671] EXT4-fs (loop7): Test dummy encryption mode enabled
[   32.693561][  T233] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0
[   32.701555][  T233] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0
[   32.709255][   T28] audit: type=1400 audit(1791249541.995:238): avc:  denied  { open } for  pid=679 comm="syz.3.137" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   32.711471][  T671] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   32.740749][  T233] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0
[   32.746709][  T671] System zones: 0-5
[   32.754077][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.761710][  T233] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0
[   32.769258][  T671] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   32.769987][  T684] EXT4-fs (loop2): Test dummy encryption mode enabled
[   32.785013][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.792628][  T233] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0
[   32.800476][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.811213][   T28] audit: type=1400 audit(1791249542.195:239): avc:  denied  { write } for  pid=688 comm="syz.6.140" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   32.817450][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.841380][  T233] hid-generic 0000:0000:0001.0001: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[   32.841915][   T28] audit: type=1400 audit(1791249542.215:240): avc:  denied  { ioctl } for  pid=688 comm="syz.6.140" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   32.868874][  T684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   32.884351][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.892468][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.900041][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.907750][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.915190][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.922774][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.930336][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.938659][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.946076][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.953610][   T39] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   32.961550][   T39] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   32.973984][   T39] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   32.981125][  T684] fscrypt: AES-256-XTS using blk-crypto-fallback
[   32.990780][   T39] usb 5-1: USB disconnect, device number 2
[   33.014688][  T691] fido_id[691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   33.061101][  T291] EXT4-fs (loop2): unmounting filesystem.
[   33.085764][  T699] fido_id[699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   33.155674][   T28] audit: type=1400 audit(1791249542.525:241): avc:  denied  { mounton } for  pid=707 comm="syz.2.145" path="/20/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   33.198470][   T28] audit: type=1400 audit(1791249542.575:242): avc:  denied  { unlink } for  pid=523 comm="syz-executor" name="file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   33.244285][   T28] audit: type=1400 audit(1791249542.615:243): avc:  denied  { bind } for  pid=713 comm="syz.6.148" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.281774][   T28] audit: type=1400 audit(1791249542.615:244): avc:  denied  { node_bind } for  pid=713 comm="syz.6.148" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   33.324784][   T28] audit: type=1400 audit(1791249542.645:245): avc:  denied  { name_bind } for  pid=715 comm="syz.6.149" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   33.346287][  T649] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   33.353916][   T28] audit: type=1400 audit(1791249542.645:246): avc:  denied  { node_bind } for  pid=715 comm="syz.6.149" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   33.413138][  T671] fs-verity (loop7, inode 13): Error -4 building Merkle tree
[   33.470052][  T629] EXT4-fs (loop7): unmounting filesystem.
[   33.525646][  T718] F2FS-fs (loop6): Invalid SB checksum offset: 0
[   33.545303][  T718] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[   33.553790][  T730] overlayfs: upper fs does not support file handles, falling back to index=off.
[   33.563137][  T718] F2FS-fs (loop6): invalid crc value
[   33.568255][  T649] usb 4-1: unable to get BOS descriptor or descriptor too short
[   33.579524][  T649] usb 4-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40
[   33.591617][  T718] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   33.595786][  T649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.627853][  T649] usb 4-1: Product: syz
[   33.632055][  T649] usb 4-1: Manufacturer: syz
[   33.637109][  T649] usb 4-1: SerialNumber: syz
[   33.646716][  T737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   33.655770][  T737] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.671971][  T718] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[   33.681476][  T718] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   33.690533][  T290] EXT4-fs (loop4): unmounting filesystem.
[   33.713832][  T523] syz-executor: attempt to access beyond end of device
[   33.713832][  T523] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   33.822913][  T732] set_capacity_and_notify: 7 callbacks suppressed
[   33.822933][  T732] loop7: detected capacity change from 0 to 40427
[   33.844308][  T732] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   33.855463][  T732] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   33.864729][  T649] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   33.875787][  T649] usb 4-1: USB disconnect, device number 3
[   33.919358][  T753] loop5: detected capacity change from 0 to 7
[   33.925993][  T732] F2FS-fs (loop7): Found nat_bits in checkpoint
[   33.948678][  T752] loop4: detected capacity change from 0 to 4096
[   33.966281][  T752] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   33.975012][  T752] EXT4-fs (loop4): Test dummy encryption mode enabled
[   33.996550][  T752] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   34.011270][  T752] System zones: 0-5
[   34.015474][  T732] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   34.022606][  T732] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   34.028483][  T752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   34.116524][  T629] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[   34.116546][  T629] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[   34.132967][  T629] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[   34.148218][  T629] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[   34.171374][  T629] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[   34.192448][  T629] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[   34.208865][  T629] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[   34.270863][  T777] loop6: detected capacity change from 0 to 512
[   34.324268][  T777] EXT4-fs: Ignoring removed bh option
[   34.336323][  T768] syz.2.169 (768) used greatest stack depth: 20648 bytes left
[   34.353974][  T777] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   34.429523][  T777] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   34.450985][  T777] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.465567][  T790] user requested TSC rate below hardware speed
[   34.520198][  T523] EXT4-fs (loop6): unmounting filesystem.
[   34.570887][  T795] loop2: detected capacity change from 0 to 128
[   34.612514][  T795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   34.631070][  T802] capability: warning: `syz.6.183' uses deprecated v2 capabilities in a way that may be insecure
[   34.633440][  T795] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   34.687421][  T291] EXT4-fs (loop2): unmounting filesystem.
[   34.799735][  T815] loop6: detected capacity change from 0 to 256
[   34.837505][  T819] overlayfs: failed to verify origin (/syz7, ino=185, err=-116)
[   34.845605][  T782] loop3: detected capacity change from 0 to 40427
[   34.865837][  T819] overlayfs: failed to verify upper root origin
[   34.876250][  T782] F2FS-fs (loop3): invalid crc value
[   34.887924][  T752] fs-verity (loop4, inode 13): Error -4 building Merkle tree
[   34.889433][  T815] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   34.909524][  T821] process 'syz.2.192' launched './file0' with NULL argv: empty string added
[   34.936178][  T821] Invalid argument reading file caps for ./file0
[   34.943471][  T782] F2FS-fs (loop3): Found nat_bits in checkpoint
[   34.977345][  T815] 9pnet: p9_errstr2errno: server reported unknown error 0000000000000000000000000000000000000000007,uid=0x0000000000000000,dm
[   35.033268][  T782] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   35.083657][  T288] syz-executor: attempt to access beyond end of device
[   35.083657][  T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   35.130752][  T290] EXT4-fs (loop4): unmounting filesystem.
[   35.223879][  T852] device-mapper: ioctl: Invalid ioctl structure: name my, dev fc00
[   35.262094][  T856] loop4: detected capacity change from 0 to 512
[   35.318133][  T856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   35.332477][  T856] System zones: 1-12
[   35.337373][  T856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.206: missing EA_INODE flag
[   35.353154][  T856] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.206: error while reading EA inode 12 err=-117
[   35.365721][  T856] EXT4-fs (loop4): 1 orphan inode deleted
[   35.373254][  T856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   35.414508][  T877] loop6: detected capacity change from 0 to 512
[   35.420911][  T290] EXT4-fs (loop4): unmounting filesystem.
[   35.435164][  T879] loop7: detected capacity change from 0 to 512
[   35.443138][  T879] EXT4-fs (loop7): Test dummy encryption mode enabled
[   35.473187][  T879] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.216: inode has both inline data and extents flags
[   35.489836][  T877] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   35.499713][  T877] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.502486][  T879] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.216: couldn't read orphan inode 15 (err -117)
[   35.517687][  T877] EXT4-fs error (device loop6): ext4_get_first_dir_block:3605: inode #12: comm syz.6.215: directory missing '..'
[   35.528186][  T879] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   35.557211][  T523] EXT4-fs (loop6): unmounting filesystem.
[   35.589368][  T629] EXT4-fs (loop7): unmounting filesystem.
[   37.266182][    C0] sched: RT throttling activated
[   38.362409][  T922] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.232: inode has both inline data and extents flags
[   38.376013][  T922] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.232: couldn't read orphan inode 15 (err -117)
[   38.388153][  T922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   38.420947][  T291] EXT4-fs (loop2): unmounting filesystem.
[   38.539059][   T28] kauditd_printk_skb: 44 callbacks suppressed
[   38.539075][   T28] audit: type=1400 audit(1791249547.915:291): avc:  denied  { relabelfrom } for  pid=949 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   38.566384][   T28] audit: type=1400 audit(1791249547.915:292): avc:  denied  { relabelto } for  pid=949 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   38.586585][  T952] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   38.596838][  T952] EXT4-fs (loop2): 1 truncate cleaned up
[   38.602522][  T952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   38.620342][  T952] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.245: invalid indirect mapped block 4294967295 (level 1)
[   38.634619][  T952] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.245: invalid indirect mapped block 65535 (level 2)
[   38.666397][  T291] EXT4-fs (loop2): unmounting filesystem.
[   38.688171][   T28] audit: type=1400 audit(1791249548.065:293): avc:  denied  { append } for  pid=962 comm="syz.2.249" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.692873][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.720827][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.726738][  T307] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   38.731086][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.745285][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.753206][  T963]  loop3: unable to read partition table
[   38.759391][  T963] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[   38.772000][   T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   38.796343][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.805548][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.813607][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.822778][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.830671][  T325]  loop3: unable to read partition table
[   38.836871][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.846128][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.854163][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.863398][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.871626][  T964]  loop3: unable to read partition table
[   38.878052][  T964] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[   38.886788][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.899656][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.907806][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.917019][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.925118][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.934321][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.942878][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.947983][  T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.952102][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[   38.967521][  T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.988203][  T973] set_capacity_and_notify: 5 callbacks suppressed
[   38.988222][  T973] loop4: detected capacity change from 0 to 256
[   38.996386][   T39] usb 4-1: Using ep0 maxpacket: 32
[   39.010856][  T307] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   39.024010][   T39] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   39.025989][  T307] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   39.043067][  T973] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   39.052673][   T39] usb 4-1: config 0 has no interface number 0
[   39.059097][  T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.069235][  T307] usb 7-1: config 0 descriptor??
[   39.074741][   T39] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.091897][   T39] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.094226][   T28] audit: type=1400 audit(1791249548.465:294): avc:  denied  { write } for  pid=972 comm="syz.4.253" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   39.102522][   T39] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   39.133414][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.141803][   T28] audit: type=1400 audit(1791249548.515:295): avc:  denied  { add_name } for  pid=972 comm="syz.4.253" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   39.157870][   T39] usb 4-1: config 0 descriptor??
[   39.166816][   T28] audit: type=1400 audit(1791249548.515:296): avc:  denied  { associate } for  pid=972 comm="syz.4.253" name="memory.events.local" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   39.198289][   T28] audit: type=1400 audit(1791249548.515:297): avc:  denied  { read append open } for  pid=972 comm="syz.4.253" path="/47/file1/memory.events.local" dev="loop4" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.227122][   T28] audit: type=1400 audit(1791249548.525:298): avc:  denied  { write } for  pid=972 comm="syz.4.253" name="memory.events.local" dev="loop4" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.267190][  T984] loop4: detected capacity change from 0 to 512
[   39.284026][  T984] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   39.293396][  T984] EXT4-fs (loop4): invalid journal inode
[   39.299229][  T984] EXT4-fs (loop4): can't get journal size
[   39.306525][  T984] EXT4-fs (loop4): 1 truncate cleaned up
[   39.312237][  T984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   39.325595][   T28] audit: type=1400 audit(1791249548.705:299): avc:  denied  { ioctl } for  pid=983 comm="syz.4.257" path="/49/file1/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.358103][  T290] EXT4-fs (loop4): unmounting filesystem.
[   39.375299][   T19] kernel write not supported for file /rfkill (pid: 19 comm: kworker/0:1)
[   39.476249][  T307] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   39.496392][  T307] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[   39.556321][   T19] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   39.600809][  T995] loop4: detected capacity change from 0 to 40427
[   39.608890][  T995] F2FS-fs (loop4): invalid crc value
[   39.615584][  T995] F2FS-fs (loop4): Found nat_bits in checkpoint
[   39.651436][  T995] F2FS-fs (loop4): Start checkpoint disabled!
[   39.658093][  T995] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   39.665564][  T995] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   39.686853][  T995] syz.4.262: attempt to access beyond end of device
[   39.686853][  T995] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   39.725292][    T8] kworker/u4:0: attempt to access beyond end of device
[   39.725292][    T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   39.745887][   T19] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   39.756309][   T19] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   39.758194][  T649] usb 7-1: USB disconnect, device number 2
[   39.772350][   T19] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   39.786244][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.789260][   T39] uclogic 0003:28BD:0094.0004: pen parameters not found
[   39.801410][   T19] usb 3-1: Product: syz
[   39.810591][   T39] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring
[   39.815997][   T19] usb 3-1: Manufacturer: syz
[   39.822931][   T19] usb 3-1: SerialNumber: syz
[   39.829905][  T986] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   39.839443][  T986] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   39.849088][   T39] usb 4-1: USB disconnect, device number 4
[   39.855453][   T19] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   39.868758][   T19] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   39.880002][   T19] usbserial_generic 3-1:1.0: generic converter detected
[   39.907743][   T19] usb 3-1: generic converter now attached to ttyUSB0
[   40.058249][   T28] audit: type=1400 audit(1791249549.435:300): avc:  denied  { getopt } for  pid=1020 comm="syz.7.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   40.086463][    C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[   40.107934][   T19] usb 3-1: USB disconnect, device number 2
[   40.118527][   T19] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   40.129873][   T19] usbserial_generic 3-1:1.0: device disconnected
[   40.139997][ T1026] loop7: detected capacity change from 0 to 512
[   40.167863][ T1026] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   40.176960][ T1026] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.207903][  T629] EXT4-fs (loop7): unmounting filesystem.
[   40.351887][ T1044] loop6: detected capacity change from 0 to 128
[   40.393595][ T1044] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   40.438912][ T1044] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   40.488865][   T10] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   40.789152][ T1048] loop7: detected capacity change from 0 to 40427
[   40.817501][ T1048] F2FS-fs (loop7): Invalid SB checksum offset: 0
[   40.860911][ T1048] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   40.897057][ T1073] loop2: detected capacity change from 0 to 512
[   40.903718][ T1048] F2FS-fs (loop7): invalid crc value
[   40.987029][ T1048] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   41.019655][ T1081] loop4: detected capacity change from 0 to 512
[   41.033251][ T1083] loop6: detected capacity change from 0 to 1024
[   41.067789][ T1081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   41.086595][ T1081] ext4 filesystem being mounted at /59/dev supports timestamps until 2038-01-19 (0x7fffffff)
[   41.097062][ T1048] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[   41.106362][ T1048] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   41.109739][ T1083] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   41.128618][ T1083] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.139135][    T8] kworker/u4:0: attempt to access beyond end of device
[   41.139135][    T8] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   41.167108][ T1083] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.296: Freeing blocks not in datazone - block = 0, count = 16
[   41.186968][ T1048] VFS:Filesystem freeze failed
[   41.192789][ T1081] EXT4-fs (loop4): unmounting filesystem.
[   41.237141][    T8] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set
[   41.271418][    T8] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   41.326311][ T1095] mmap: syz.4.300 (1095): VmData 35328000 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   41.346206][    T8] EXT4-fs (loop6): This should not happen!! Data will be lost
[   41.346206][    T8] 
[   41.373728][  T523] EXT4-fs (loop6): unmounting filesystem.
[   41.402567][ T1098] xt_hashlimit: size too large, truncated to 1048576
[   41.418400][ T1079] loop2: detected capacity change from 0 to 40427
[   41.441432][ T1079] F2FS-fs (loop2): invalid crc value
[   41.501006][ T1079] F2FS-fs (loop2): Found nat_bits in checkpoint
[   41.587607][ T1079] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   41.644574][  T291] syz-executor: attempt to access beyond end of device
[   41.644574][  T291] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   41.663118][ T1093] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   41.677534][ T1093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   41.691682][ T1093] F2FS-fs (loop3): invalid crc value
[   41.700297][  T291] syz-executor: attempt to access beyond end of device
[   41.700297][  T291] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   41.715134][ T1093] F2FS-fs (loop3): Found nat_bits in checkpoint
[   41.760803][    T8] kworker/u4:0: attempt to access beyond end of device
[   41.760803][    T8] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   41.806463][ T1093] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   41.815569][ T1093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   41.937790][  T308] kworker/u4:3: attempt to access beyond end of device
[   41.937790][  T308] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   42.025648][ T1127] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff
[   42.321347][ T1155] FAULT_INJECTION: forcing a failure.
[   42.321347][ T1155] name failslab, interval 1, probability 0, space 0, times 1
[   42.340965][ T1155] CPU: 0 PID: 1155 Comm: syz.6.325 Not tainted syzkaller #0
[   42.348403][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   42.358521][ T1155] Call Trace:
[   42.361836][ T1155]  <TASK>
[   42.364794][ T1155]  __dump_stack+0x21/0x24
[   42.369229][ T1155]  dump_stack_lvl+0x110/0x170
[   42.373959][ T1155]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.379027][ T1155]  dump_stack+0x15/0x24
[   42.383229][ T1155]  should_fail_ex+0x3bf/0x510
[   42.387951][ T1155]  __should_failslab+0xac/0xf0
[   42.392762][ T1155]  should_failslab+0x9/0x20
[   42.397325][ T1155]  __kmem_cache_alloc_node+0x3d/0x2d0
[   42.402737][ T1155]  ? __request_module+0x2c3/0x910
[   42.407778][ T1155]  ? __request_module+0x2c3/0x910
[   42.412822][ T1155]  __kmalloc_node_track_caller+0xa1/0x1e0
[   42.418559][ T1155]  ? __kasan_kmalloc+0x95/0xb0
[   42.423351][ T1155]  kstrdup+0x3b/0x80
[   42.427261][ T1155]  __request_module+0x2c3/0x910
[   42.432136][ T1155]  ? __cfi___request_module+0x10/0x10
[   42.437525][ T1155]  ? kasan_save_alloc_info+0x1f/0x30
[   42.442827][ T1155]  ? __kasan_slab_alloc+0x72/0x80
[   42.447887][ T1155]  ? security_inode_alloc+0x33/0x120
[   42.453212][ T1155]  ? __kasan_check_write+0x14/0x20
[   42.458348][ T1155]  ? _raw_spin_lock+0x94/0xf0
[   42.463057][ T1155]  ? __cfi__raw_spin_lock+0x10/0x10
[   42.468289][ T1155]  inet_create+0x348/0xef0
[   42.472728][ T1155]  __sock_create+0x39e/0x7c0
[   42.477355][ T1155]  __sys_socket+0xcd/0x1a0
[   42.481791][ T1155]  __x64_sys_socket+0x7a/0x90
[   42.486510][ T1155]  x64_sys_call+0x449/0x9a0
[   42.491049][ T1155]  do_syscall_64+0x4c/0xa0
[   42.495488][ T1155]  ? clear_bhb_loop+0x30/0x80
[   42.500193][ T1155]  ? clear_bhb_loop+0x30/0x80
[   42.504887][ T1155]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.510796][ T1155] RIP: 0033:0x7fe256f9e199
[   42.515239][ T1155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.534869][ T1155] RSP: 002b:00007fe257dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   42.543299][ T1155] RAX: ffffffffffffffda RBX: 00007fe257225fa0 RCX: 00007fe256f9e199
[   42.551283][ T1155] RDX: 0000000000000106 RSI: 0000000000000002 RDI: 0000000000000002
[   42.559274][ T1155] RBP: 00007fe2570358e0 R08: 0000000000000000 R09: 0000000000000000
[   42.567260][ T1155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   42.575249][ T1155] R13: 00007fe257226038 R14: 00007fe257225fa0 R15: 00007ffd92bae118
[   42.583240][ T1155]  </TASK>
[   42.607767][ T1162] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=1162 comm=syz.4.327
[   42.620406][ T1162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.327'.
[   42.669241][ T1168] xt_hashlimit: size too large, truncated to 1048576
[   42.678587][    T8] device bridge_slave_1 left promiscuous mode
[   42.684763][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.699206][    T8] device bridge_slave_0 left promiscuous mode
[   42.705397][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.738885][    T8] device veth1_macvtap left promiscuous mode
[   42.757484][    T8] device veth0_vlan left promiscuous mode
[   42.806483][ T1159] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   42.819819][ T1159] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   42.835797][ T1159] F2FS-fs (loop6): invalid crc value
[   42.851784][ T1159] F2FS-fs (loop6): Found nat_bits in checkpoint
[   42.897769][ T1159] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   42.909321][ T1159] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   43.038654][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.057885][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.073011][ T1151] device bridge_slave_0 entered promiscuous mode
[   43.088652][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.104351][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.119494][ T1151] device bridge_slave_1 entered promiscuous mode
[   43.213412][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.220551][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.283010][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.293540][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   43.319690][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.338303][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   43.356540][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.376454][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.383552][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.406298][   T19] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   43.416442][ T1182] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   43.431293][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.432979][ T1182] EXT4-fs error (device loop7): ext4_get_journal_inode:5749: inode #32: comm syz.7.334: iget: special inode unallocated
[   43.446934][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.452476][ T1182] EXT4-fs (loop7): no journal found
[   43.458945][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.479600][ T1178] F2FS-fs (loop6): invalid crc value
[   43.479878][ T1182] EXT4-fs (loop7): can't get journal size
[   43.497585][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.506125][ T1178] F2FS-fs (loop6): Found nat_bits in checkpoint
[   43.512627][ T1182] EXT4-fs (loop7): filesystem is read-only
[   43.513373][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.526385][ T1182] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   43.543579][  T629] EXT4-fs (loop7): unmounting filesystem.
[   43.562059][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   43.562073][   T28] audit: type=1400 audit(1791249552.935:314): avc:  denied  { watch watch_reads } for  pid=1185 comm="syz.7.335" path="/47" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   43.611939][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.620512][   T19] usb 4-1: Using ep0 maxpacket: 32
[   43.629058][   T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.645073][ T1151] device veth0_vlan entered promiscuous mode
[   43.651286][   T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.662287][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.670761][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.678597][   T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   43.688169][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.695523][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.704658][ T1178] F2FS-fs (loop6): Start checkpoint disabled!
[   43.717884][ T1151] device veth1_macvtap entered promiscuous mode
[   43.721657][ T1178] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[   43.732580][   T19] usb 4-1: config 0 descriptor??
[   43.738272][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.751856][ T1178] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   43.757447][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.769475][   T19] hub 4-1:0.0: USB hub found
[   43.775119][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.791052][   T28] audit: type=1400 audit(1791249553.165:315): avc:  denied  { mount } for  pid=1151 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   43.835228][   T28] audit: type=1400 audit(1791249553.195:316): avc:  denied  { mounton } for  pid=1151 comm="syz-executor" path="/root/syzkaller.7OCTHk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   43.903082][ T1178] F2FS-fs (loop6): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   43.969900][   T19] hub 4-1:0.0: 1 port detected
[   43.987080][   T43] kworker/u4:2: attempt to access beyond end of device
[   43.987080][   T43] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   44.162337][ T1171] set_capacity_and_notify: 6 callbacks suppressed
[   44.162357][ T1171] loop4: detected capacity change from 0 to 131072
[   44.179081][   T19] hub 4-1:0.0: hub_hub_status failed (err = -71)
[   44.185473][   T19] hub 4-1:0.0: config failed, can't get hub status (err -71)
[   44.220958][   T19] usbhid 4-1:0.0: can't add hid device: -71
[   44.236284][   T19] usbhid: probe of 4-1:0.0 failed with error -71
[   44.254445][ T1171] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[   44.280617][ T1190] loop7: detected capacity change from 0 to 131072
[   44.285997][ T1171] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   44.296266][ T1190] F2FS-fs (loop7): invalid crc value
[   44.318704][ T1190] F2FS-fs (loop7): Found nat_bits in checkpoint
[   44.327084][   T19] usb 4-1: USB disconnect, device number 5
[   44.334768][ T1171] F2FS-fs (loop4): invalid crc value
[   44.361776][ T1211] loop8: detected capacity change from 0 to 512
[   44.370033][ T1190] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[   44.406375][ T1171] F2FS-fs (loop4): Found nat_bits in checkpoint
[   44.493461][   T28] audit: type=1400 audit(1791249553.865:317): avc:  denied  { mount } for  pid=1228 comm="syz.6.350" name="/" dev="configfs" ino=13968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   44.546940][   T28] audit: type=1400 audit(1791249553.905:318): avc:  denied  { search } for  pid=1228 comm="syz.6.350" name="/" dev="configfs" ino=13968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.571742][ T1171] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   44.578997][ T1171] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   44.587427][   T28] audit: type=1400 audit(1791249553.905:319): avc:  denied  { read } for  pid=1228 comm="syz.6.350" name="/" dev="configfs" ino=13968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.609795][   T28] audit: type=1400 audit(1791249553.905:320): avc:  denied  { open } for  pid=1228 comm="syz.6.350" path="/" dev="configfs" ino=13968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.642207][   T28] audit: type=1400 audit(1791249553.925:321): avc:  denied  { write } for  pid=1230 comm="syz.6.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   44.697628][ T1236] loop8: detected capacity change from 0 to 1024
[   44.743656][ T1234] Zero length message leads to an empty skb
[   44.769402][ T1236] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   44.839200][ T1151] EXT4-fs (loop8): unmounting filesystem.
[   44.849788][ T1242] loop3: detected capacity change from 0 to 8192
[   44.919598][   T28] audit: type=1400 audit(1791249554.295:322): avc:  denied  { map } for  pid=1249 comm="syz.7.346" path="socket:[21510]" dev="sockfs" ino=21510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   44.971225][ T1253] loop7: detected capacity change from 0 to 256
[   44.991242][ T1253] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   45.014929][ T1253] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[   45.031797][ T1253] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   45.056138][   T28] audit: type=1400 audit(1791249554.425:323): avc:  denied  { mounton } for  pid=1252 comm="syz.7.359" path="/51/bus/file0/bus" dev="loop7" ino=1048719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.127940][ T1257] SELinux:  Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped).
[   45.218174][ T1262] loop3: detected capacity change from 0 to 256
[   45.241521][ T1262] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[   45.276277][   T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   45.351530][ T1274] loop7: detected capacity change from 0 to 512
[   45.367224][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   45.385771][ T1274] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   45.398511][ T1274] System zones: 1-12
[   45.415542][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   45.426938][ T1274] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.368: missing EA_INODE flag
[   45.442467][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   45.457111][ T1274] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.368: error while reading EA inode 12 err=-117
[   45.470213][   T19] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.472878][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   45.481185][   T19] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   45.481217][   T19] usb 5-1: config 0 interface 0 has no altsetting 0
[   45.481244][   T19] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   45.481269][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.483856][   T19] usb 5-1: config 0 descriptor??
[   45.525363][ T1274] EXT4-fs (loop7): 1 orphan inode deleted
[   45.533897][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   45.546097][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   45.554454][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   45.562818][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   45.568082][ T1274] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   45.572778][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   45.698885][  T629] EXT4-fs (loop7): unmounting filesystem.
[   45.739654][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[   45.749027][   T19] usbhid 5-1:0.0: can't add hid device: -71
[   45.755025][   T19] usbhid: probe of 5-1:0.0 failed with error -71
[   45.777247][   T19] usb 5-1: USB disconnect, device number 3
[   45.986282][  T233] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   46.177424][  T233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.188420][  T233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.204113][  T233] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   46.213360][  T233] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   46.221448][  T233] usb 7-1: Manufacturer: syz
[   46.227225][  T233] usb 7-1: config 0 descriptor??
[   46.229972][ T1293] file system registered
[   46.264176][ T1299] x_tables: duplicate entry at hook 4
[   46.276795][ T1299] ext2: Unexpected value for 'acl'
[   46.289485][ T1302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.381'.
[   46.300330][ T1302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.381'.
[   46.479744][ T1326] loop4: detected capacity change from 0 to 4096
[   46.494362][ T1326] EXT4-fs: Ignoring removed mblk_io_submit option
[   46.509672][ T1326] EXT4-fs (loop4): Test dummy encryption mode enabled
[   46.518597][ T1326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   46.546037][  T290] EXT4-fs (loop4): unmounting filesystem.
[   46.572696][ T1321] loop3: detected capacity change from 0 to 40427
[   46.584164][ T1321] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   46.592239][ T1321] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   46.601307][ T1321] F2FS-fs (loop3): invalid crc value
[   46.625260][ T1321] F2FS-fs (loop3): Found nat_bits in checkpoint
[   46.695280][ T1321] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   46.702799][ T1321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   46.717991][ T1348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'.
[   47.038556][  T233] input: syz Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0005/input/input6
[   47.052085][  T233] input: syz Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0005/input/input7
[   47.065076][  T233] input: syz Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0005/input/input8
[   47.078455][  T233] input: syz Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0005/input/input9
[   47.092265][  T233] uclogic 0003:256C:006D.0005: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.6-1/input0
[   47.200035][ T1385] FAULT_INJECTION: forcing a failure.
[   47.200035][ T1385] name failslab, interval 1, probability 0, space 0, times 0
[   47.233052][ T1385] CPU: 0 PID: 1385 Comm: syz.4.417 Not tainted syzkaller #0
[   47.240409][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   47.250512][ T1385] Call Trace:
[   47.253820][ T1385]  <TASK>
[   47.256783][ T1385]  __dump_stack+0x21/0x24
[   47.261193][ T1385]  dump_stack_lvl+0x110/0x170
[   47.265932][ T1385]  ? __cfi_dump_stack_lvl+0x8/0x8
[   47.271037][ T1385]  ? __cfi_futex_wait+0x10/0x10
[   47.275931][ T1385]  dump_stack+0x15/0x24
[   47.280163][ T1385]  should_fail_ex+0x3bf/0x510
[   47.284900][ T1385]  __should_failslab+0xac/0xf0
[   47.289733][ T1385]  should_failslab+0x9/0x20
[   47.294285][ T1385]  slab_pre_alloc_hook+0x30/0x1d0
[   47.299357][ T1385]  ? vfs_write+0xa51/0xd00
[   47.303806][ T1385]  kmem_cache_alloc_lru+0x49/0x280
[   47.308999][ T1385]  ? new_inode_pseudo+0x8f/0x1f0
[   47.313997][ T1385]  new_inode_pseudo+0x8f/0x1f0
[   47.318812][ T1385]  create_pipe_files+0x4f/0x6c0
[   47.323718][ T1385]  __do_pipe_flags+0x4f/0x200
[   47.328441][ T1385]  do_pipe2+0xa7/0x190
[   47.332540][ T1385]  ? __this_cpu_preempt_check+0x13/0x20
[   47.338140][ T1385]  ? pipe_fcntl+0x510/0x510
[   47.342688][ T1385]  ? fpregs_restore_userregs+0x128/0x260
[   47.348365][ T1385]  __x64_sys_pipe2+0x5a/0x70
[   47.353006][ T1385]  x64_sys_call+0x258/0x9a0
[   47.357555][ T1385]  do_syscall_64+0x4c/0xa0
[   47.362013][ T1385]  ? clear_bhb_loop+0x30/0x80
[   47.366737][ T1385]  ? clear_bhb_loop+0x30/0x80
[   47.371450][ T1385]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   47.377378][ T1385] RIP: 0033:0x7fdd3959e199
[   47.381821][ T1385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.401474][ T1385] RSP: 002b:00007fdd3a500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[   47.409930][ T1385] RAX: ffffffffffffffda RBX: 00007fdd39825fa0 RCX: 00007fdd3959e199
[   47.417939][ T1385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   47.425947][ T1385] RBP: 00007fdd396358e0 R08: 0000000000000000 R09: 0000000000000000
[   47.433987][ T1385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   47.442024][ T1385] R13: 00007fdd39826038 R14: 00007fdd39825fa0 R15: 00007ffe8a20a758
[   47.450034][ T1385]  </TASK>
[   47.468121][  T309] usb 7-1: USB disconnect, device number 3
[   47.616440][ T1354] F2FS-fs (loop7): Test dummy encryption mode enabled
[   47.623974][ T1405] ------------[ cut here ]------------
[   47.629606][ T1405] skb_assert_len
[   47.634302][ T1405] WARNING: CPU: 0 PID: 1405 at include/linux/skbuff.h:2589 __dev_queue_xmit+0x1da8/0x3540
[   47.640858][ T1354] F2FS-fs (loop7): invalid crc value
[   47.644396][ T1405] Modules linked in:
[   47.653504][ T1405] CPU: 0 PID: 1405 Comm: syz.3.425 Not tainted syzkaller #0
[   47.660842][ T1405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   47.670959][ T1405] RIP: 0010:__dev_queue_xmit+0x1da8/0x3540
[   47.676859][ T1405] Code: 08 4c 8b 6c 24 48 e9 6e ea ff ff e8 52 15 7e fd c6 05 40 4f 9c 03 01 48 c7 c7 60 a4 fc 85 48 c7 c6 28 9e 69 86 e8 78 98 4e fd <0f> 0b e9 2e e4 ff ff e8 2c 15 7e fd c6 05 1b 4f 9c 03 01 48 c7 c7
[   47.696564][ T1405] RSP: 0018:ffffc9000bb6f5e0 EFLAGS: 00010246
[   47.702670][ T1405] RAX: 873ae9df9b279e00 RBX: ffff8881196330e0 RCX: 0000000000080000
[   47.710701][ T1405] RDX: ffffc9000270e000 RSI: 00000000000018f4 RDI: 00000000000018f5
[   47.718724][ T1405] RBP: ffffc9000bb6f818 R08: ffffc9000bb6f1c7 R09: 1ffff9200176de38
[   47.726765][ T1405] R10: dffffc0000000000 R11: fffff5200176de39 R12: 0000000000000000
[   47.734770][ T1405] R13: 1ffff110232c6602 R14: 0000000000000000 R15: dffffc0000000000
[   47.742817][ T1405] FS:  00007ff68188f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   47.751820][ T1405] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   47.758467][ T1405] CR2: 000000110c2cda1d CR3: 0000000124afb000 CR4: 00000000003506b0
[   47.763062][ T1354] F2FS-fs (loop7): Found nat_bits in checkpoint
[   47.766508][ T1405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   47.766526][ T1405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   47.766542][ T1405] Call Trace:
[   47.766547][ T1405]  <TASK>
[   47.766560][ T1405]  ? __cfi___dev_queue_xmit+0x10/0x10
[   47.766590][ T1405]  ? packet_parse_headers+0x7d8/0xae0
[   47.766619][ T1405]  ? packet_parse_headers+0x86b/0xae0
[   47.773540][  T495] Bluetooth: hci0: command 0x1003 tx timeout
[   47.780902][ T1405]  ? __cfi_sock_alloc_send_pskb+0x10/0x10
[   47.791009][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   47.792208][ T1405]  ? skb_setup_tx_timestamp+0x200/0x200
[   47.834727][ T1405]  dev_queue_xmit+0x17/0x20
[   47.839311][ T1405]  packet_sendmsg+0x2416/0x51b0
[   47.844211][ T1405]  ? __cfi_packet_sendmsg+0x10/0x10
[   47.849494][ T1405]  ? try_to_wake_up+0x6c6/0x1250
[   47.854466][ T1405]  ? security_socket_sendmsg+0x93/0xb0
[   47.859989][ T1405]  sock_write_iter+0x2ea/0x3f0
[   47.864793][ T1405]  ? __cfi_sock_write_iter+0x10/0x10
[   47.866512][ T1288] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   47.870175][ T1405]  ? fsnotify_perm+0x67/0x5b0
[   47.880906][ T1405]  ? security_file_permission+0x8a/0xb0
[   47.886523][ T1405]  vfs_write+0x5ef/0xd00
[   47.890802][ T1405]  ? __cfi_vfs_write+0x10/0x10
[   47.895600][ T1405]  ? __fget_files+0x2d1/0x330
[   47.900341][ T1405]  ? __fdget_pos+0x1f2/0x380
[   47.904967][ T1405]  ? ksys_write+0x70/0x260
[   47.909448][ T1405]  ksys_write+0x14a/0x260
[   47.913808][ T1405]  ? __cfi_ksys_write+0x10/0x10
[   47.918723][ T1405]  ? fpregs_restore_userregs+0x128/0x260
[   47.924406][ T1405]  __x64_sys_write+0x7b/0x90
[   47.929075][ T1405]  x64_sys_call+0x27b/0x9a0
[   47.933624][ T1405]  do_syscall_64+0x4c/0xa0
[   47.938126][ T1405]  ? clear_bhb_loop+0x30/0x80
[   47.942873][ T1405]  ? clear_bhb_loop+0x30/0x80
[   47.946285][  T233] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   47.947633][ T1405]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   47.961010][ T1405] RIP: 0033:0x7ff68099e199
[   47.965458][ T1405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.985149][ T1405] RSP: 002b:00007ff68188f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   47.993658][ T1405] RAX: ffffffffffffffda RBX: 00007ff680c25fa0 RCX: 00007ff68099e199
[   48.001689][ T1405] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[   48.009747][ T1405] RBP: 00007ff680a358e0 R08: 0000000000000000 R09: 0000000000000000
[   48.017775][ T1405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   48.024484][ T1354] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   48.025772][ T1405] R13: 00007ff680c26038 R14: 00007ff680c25fa0 R15: 00007ffd2c017138
[   48.025799][ T1405]  </TASK>
[   48.044334][ T1405] ---[ end trace 0000000000000000 ]---
[   48.051770][ T1405] skb len=0 headroom=128 headlen=0 tailroom=512
[   48.051770][ T1405] mac=(128,0) net=(128,-1) trans=-1
[   48.051770][ T1405] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0))
[   48.051770][ T1405] csum(0x0 ip_summed=0 complete_sw=0 valid=0 level=0)
[   48.051770][ T1405] hash(0x0 sw=0 l4=0) proto=0x0000 pkttype=0 iif=0
[   48.118963][ T1419] ip_tables: iptables: counters copy to user failed while replacing table
[   48.142009][ T1405] dev name=tunl0 feat=0x00000006401d7869
[   48.148016][ T1405] sk family=17 type=3 proto=0
[   48.203918][ T1425] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   48.219877][  T233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   48.242785][  T233] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00
[   48.262038][  T233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.282722][  T233] usb 5-1: config 0 descriptor??
[   48.461794][ T1445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   48.471071][ T1445] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.492150][ T1447] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   48.501513][ T1447] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.502185][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.518835][  T523] EXT4-fs (loop6): unmounting filesystem.
[   48.523767][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.545974][  T233] usbhid 5-1:0.0: can't add hid device: -71
[   48.557394][  T629] EXT4-fs (loop7): unmounting filesystem.
[   48.563726][  T233] usbhid: probe of 5-1:0.0 failed with error -71
[   48.574619][  T233] usb 5-1: USB disconnect, device number 4
[   48.587494][   T28] kauditd_printk_skb: 25 callbacks suppressed
[   48.587508][   T28] audit: type=1400 audit(1791249557.965:349): avc:  denied  { unmount } for  pid=523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   48.624316][   T28] audit: type=1400 audit(1791249557.995:350): avc:  denied  { getopt } for  pid=1454 comm="syz.7.443" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   48.676234][  T309] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   48.759411][   T28] audit: type=1400 audit(1791249558.135:351): avc:  denied  { append } for  pid=1475 comm="syz.7.455" name="uprobe_events" dev="tracefs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   48.867338][  T309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.879684][  T309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.897153][  T309] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   48.906577][  T309] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   48.915316][  T309] usb 9-1: Manufacturer: syz
[   48.916698][ T1483] ==================================================================
[   48.923189][  T309] usb 9-1: config 0 descriptor??
[   48.928018][ T1483] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[   48.928057][ T1483] Write of size 8 at addr ffff888117fd4a00 by task syz.7.458/1483
[   48.928077][ T1483] 
[   48.950218][ T1483] CPU: 1 PID: 1483 Comm: syz.7.458 Tainted: G        W          syzkaller #0
[   48.958982][ T1483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   48.969041][ T1483] Call Trace:
[   48.972340][ T1483]  <TASK>
[   48.975272][ T1483]  __dump_stack+0x21/0x24
[   48.979617][ T1483]  dump_stack_lvl+0x110/0x170
[   48.984317][ T1483]  ? __cfi_dump_stack_lvl+0x8/0x8
[   48.989351][ T1483]  ? enqueue_timer+0xae/0x480
[   48.994034][ T1483]  print_address_description+0x71/0x200
[   48.999593][ T1483]  print_report+0x4a/0x60
[   49.003956][ T1483]  kasan_report+0x122/0x150
[   49.008483][ T1483]  ? enqueue_timer+0xae/0x480
[   49.013178][ T1483]  ? tracing_record_taskinfo_sched_switch+0x80/0x3a0
[   49.019883][ T1483]  __asan_report_store8_noabort+0x17/0x20
[   49.025611][ T1483]  enqueue_timer+0xae/0x480
[   49.030129][ T1483]  ? detach_if_pending+0xf5/0x300
[   49.035169][ T1483]  __mod_timer+0x859/0xc00
[   49.039594][ T1483]  ? ttwu_do_activate+0x179/0x2a0
[   49.044633][ T1483]  schedule_timeout+0x154/0x340
[   49.049491][ T1483]  ? __cfi_schedule_timeout+0x10/0x10
[   49.054869][ T1483]  ? __cfi_process_timeout+0x10/0x10
[   49.060166][ T1483]  ? __cfi__raw_spin_lock+0x10/0x10
[   49.065372][ T1483]  ? _raw_spin_lock+0x94/0xf0
[   49.070057][ T1483]  wait_for_common+0x364/0x640
[   49.074818][ T1483]  ? __tasklet_schedule+0x15/0x20
[   49.079850][ T1483]  ? wait_for_completion+0x20/0x20
[   49.084961][ T1483]  ? usb_submit_urb+0x1091/0x1740
[   49.089994][ T1483]  wait_for_completion_timeout+0xe/0x10
[   49.095535][ T1483]  usb_start_wait_urb+0x1c8/0x380
[   49.100581][ T1483]  ? usb_api_blocking_completion+0xb0/0xb0
[   49.106396][ T1483]  ? __kasan_check_write+0x14/0x20
[   49.111507][ T1483]  usb_control_msg+0x243/0x3f0
[   49.116274][ T1483]  hub_ext_port_status+0xf2/0x6a0
[   49.121301][ T1483]  hub_activate+0x856/0x1a30
[   49.125896][ T1483]  hub_resume+0x98/0x340
[   49.130142][ T1483]  ? __cfi_hub_resume+0x10/0x10
[   49.134994][ T1483]  ? usbfs_notify_resume+0xd0/0xe0
[   49.140114][ T1483]  usb_resume_both+0x748/0xd70
[   49.144882][ T1483]  ? usb_resume+0xa0/0xa0
[   49.149215][ T1483]  ? __stack_depot_save+0x36/0x490
[   49.154327][ T1483]  usb_runtime_resume+0x21/0x30
[   49.159185][ T1483]  ? __cfi_usb_runtime_resume+0x10/0x10
[   49.164737][ T1483]  __rpm_callback+0x319/0x770
[   49.169421][ T1483]  ? __cfi_usb_runtime_resume+0x10/0x10
[   49.174973][ T1483]  ? dev_pm_disable_wake_irq_check+0xb7/0x160
[   49.181045][ T1483]  ? __cfi_usb_runtime_resume+0x10/0x10
[   49.186592][ T1483]  rpm_resume+0xf9f/0x1610
[   49.191019][ T1483]  ? __kasan_check_write+0x14/0x20
[   49.196141][ T1483]  ? __pm_runtime_resume+0x90/0x90
[   49.201247][ T1483]  ? _raw_spin_lock_irqsave+0xc2/0x130
[   49.206712][ T1483]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   49.212625][ T1483]  ? klist_iter_exit+0xdc/0x110
[   49.217483][ T1483]  ? __kasan_check_write+0x14/0x20
[   49.222592][ T1483]  ? mutex_lock+0x93/0x1b0
[   49.227014][ T1483]  __pm_runtime_resume+0x69/0x90
[   49.231949][ T1483]  usb_autoresume_device+0x23/0x60
[   49.237063][ T1483]  usbdev_open+0x18b/0x770
[   49.241489][ T1483]  ? __kasan_check_write+0x14/0x20
[   49.246609][ T1483]  ? __cfi_usbdev_open+0x10/0x10
[   49.251566][ T1483]  chrdev_open+0x593/0x600
[   49.255982][ T1483]  ? __cfi_chrdev_open+0x10/0x10
[   49.260931][ T1483]  ? fsnotify_perm+0x3e9/0x5b0
[   49.265704][ T1483]  do_dentry_open+0x885/0x11f0
[   49.270474][ T1483]  ? __cfi_chrdev_open+0x10/0x10
[   49.275430][ T1483]  vfs_open+0x73/0x80
[   49.279427][ T1483]  path_openat+0x2699/0x2f30
[   49.284021][ T1483]  ? slab_post_alloc_hook+0x4f/0x2d0
[   49.289314][ T1483]  ? kmem_cache_alloc+0x166/0x320
[   49.294345][ T1483]  ? getname_flags+0xba/0x510
[   49.299020][ T1483]  ? do_sys_openat2+0xeb/0x820
[   49.303788][ T1483]  ? do_filp_open+0x420/0x420
[   49.308483][ T1483]  do_filp_open+0x1ee/0x420
[   49.312993][ T1483]  ? __cfi_do_filp_open+0x10/0x10
[   49.318023][ T1483]  ? alloc_fd+0x4c1/0x570
[   49.322368][ T1483]  do_sys_openat2+0x15e/0x820
[   49.327064][ T1483]  ? do_sys_open+0xe0/0xe0
[   49.331754][ T1483]  ? do_user_addr_fault+0x9a5/0x1030
[   49.337070][ T1483]  __x64_sys_openat+0x136/0x160
[   49.341969][ T1483]  x64_sys_call+0x783/0x9a0
[   49.346485][ T1483]  do_syscall_64+0x4c/0xa0
[   49.350934][ T1483]  ? clear_bhb_loop+0x30/0x80
[   49.355650][ T1483]  ? clear_bhb_loop+0x30/0x80
[   49.360356][ T1483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.366259][ T1483] RIP: 0033:0x7fb5dff5e9ce
[   49.370696][ T1483] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   49.390332][ T1483] RSP: 002b:00007fb5e0db9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   49.398763][ T1483] RAX: ffffffffffffffda RBX: 00007fb5e0dba6c0 RCX: 00007fb5dff5e9ce
[   49.406738][ T1483] RDX: 0000000000160301 RSI: 00007fb5e0db9c00 RDI: ffffffffffffff9c
[   49.414714][ T1483] RBP: 00007fb5e0db9c00 R08: 0000000000000000 R09: 0000000000000000
[   49.422691][ T1483] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   49.430670][ T1483] R13: 00007fb5e0226038 R14: 00007fb5e0225fa0 R15: 00007fffe22ca348
[   49.438666][ T1483]  </TASK>
[   49.441701][ T1483] 
[   49.444022][ T1483] Allocated by task 1288:
[   49.448368][ T1483]  kasan_set_track+0x4b/0x70
[   49.452979][ T1483]  kasan_save_alloc_info+0x1f/0x30
[   49.458094][ T1483]  __kasan_kmalloc+0x95/0xb0
[   49.462692][ T1483]  __kmalloc+0xb4/0x1e0
[   49.466846][ T1483]  hci_alloc_dev_priv+0x27/0x1bd0
[   49.471925][ T1483]  hci_uart_tty_ioctl+0x3c4/0xa70
[   49.476955][ T1483]  tty_ioctl+0x8ef/0xc60
[   49.481233][ T1483]  __se_sys_ioctl+0x12f/0x1b0
[   49.485918][ T1483]  __x64_sys_ioctl+0x7b/0x90
[   49.490511][ T1483]  x64_sys_call+0x58b/0x9a0
[   49.495016][ T1483]  do_syscall_64+0x4c/0xa0
[   49.499441][ T1483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.505337][ T1483] 
[   49.507657][ T1483] Freed by task 1288:
[   49.511627][ T1483]  kasan_set_track+0x4b/0x70
[   49.516220][ T1483]  kasan_save_free_info+0x2b/0x40
[   49.521240][ T1483]  ____kasan_slab_free+0x132/0x180
[   49.526354][ T1483]  __kasan_slab_free+0x11/0x20
[   49.531133][ T1483]  slab_free_freelist_hook+0xc2/0x190
[   49.536509][ T1483]  __kmem_cache_free+0xb7/0x1b0
[   49.541366][ T1483]  kfree+0x6f/0xf0
[   49.545102][ T1483]  hci_release_dev+0x12a3/0x13b0
[   49.550036][ T1483]  bt_host_release+0x82/0x90
[   49.554638][ T1483]  device_release+0xa4/0x1d0
[   49.559232][ T1483]  kobject_put+0x19d/0x280
[   49.563660][ T1483]  put_device+0x1f/0x30
[   49.567813][ T1483]  hci_dev_cmd+0x279/0x740
[   49.572231][ T1483]  hci_sock_ioctl+0x41e/0x7f0
[   49.576902][ T1483]  sock_do_ioctl+0x114/0x330
[   49.581489][ T1483]  sock_ioctl+0x475/0x700
[   49.585817][ T1483]  __se_sys_ioctl+0x12f/0x1b0
[   49.590493][ T1483]  __x64_sys_ioctl+0x7b/0x90
[   49.595105][ T1483]  x64_sys_call+0x58b/0x9a0
[   49.599633][ T1483]  do_syscall_64+0x4c/0xa0
[   49.604184][ T1483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.610085][ T1483] 
[   49.612413][ T1483] Last potentially related work creation:
[   49.618144][ T1483]  kasan_save_stack+0x3a/0x60
[   49.622847][ T1483]  __kasan_record_aux_stack+0xb6/0xc0
[   49.628248][ T1483]  kasan_record_aux_stack_noalloc+0xb/0x10
[   49.634071][ T1483]  insert_work+0x51/0x300
[   49.638403][ T1483]  __queue_work+0x9d0/0xd50
[   49.642908][ T1483]  queue_work_on+0xde/0x150
[   49.647430][ T1483]  __hci_cmd_sync_sk+0xaa8/0xd80
[   49.652372][ T1483]  hci_cmd_sync_status+0x53/0x120
[   49.657404][ T1483]  hci_dev_cmd+0x357/0x740
[   49.661824][ T1483]  hci_sock_ioctl+0x41e/0x7f0
[   49.666508][ T1483]  sock_do_ioctl+0x114/0x330
[   49.671110][ T1483]  sock_ioctl+0x475/0x700
[   49.675435][ T1483]  __se_sys_ioctl+0x12f/0x1b0
[   49.680116][ T1483]  __x64_sys_ioctl+0x7b/0x90
[   49.684716][ T1483]  x64_sys_call+0x58b/0x9a0
[   49.689238][ T1483]  do_syscall_64+0x4c/0xa0
[   49.693664][ T1483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   49.699589][ T1483] 
[   49.701977][ T1483] Second to last potentially related work creation:
[   49.708569][ T1483]  kasan_save_stack+0x3a/0x60
[   49.713256][ T1483]  __kasan_record_aux_stack+0xb6/0xc0
[   49.718633][ T1483]  kasan_record_aux_stack_noalloc+0xb/0x10
[   49.724439][ T1483]  insert_work+0x51/0x300
[   49.728772][ T1483]  __queue_work+0x9d0/0xd50
[   49.733281][ T1483]  queue_work_on+0xde/0x150
[   49.737793][ T1483]  hci_cmd_timeout+0x191/0x200
[   49.742559][ T1483]  process_one_work+0x717/0xc30
[   49.747411][ T1483]  worker_thread+0xa4d/0x11d0
[   49.752089][ T1483]  kthread+0x281/0x320
[   49.756156][ T1483]  ret_from_fork+0x1f/0x30
[   49.760577][ T1483] 
[   49.762911][ T1483] The buggy address belongs to the object at ffff888117fd4000
[   49.762911][ T1483]  which belongs to the cache kmalloc-8k of size 8192
[   49.776964][ T1483] The buggy address is located 2560 bytes inside of
[   49.776964][ T1483]  8192-byte region [ffff888117fd4000, ffff888117fd6000)
[   49.790410][ T1483] 
[   49.792731][ T1483] The buggy address belongs to the physical page:
[   49.799148][ T1483] page:ffffea00045ff400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117fd0
[   49.809396][ T1483] head:ffffea00045ff400 order:3 compound_mapcount:0 compound_pincount:0
[   49.817713][ T1483] flags: 0x4000000000010200(slab|head|zone=1)
[   49.823802][ T1483] raw: 4000000000010200 ffffea0004a89600 dead000000000002 ffff888100043500
[   49.832381][ T1483] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[   49.840954][ T1483] page dumped because: kasan: bad access detected
[   49.847364][ T1483] page_owner tracks the page as allocated
[   49.853070][ T1483] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 486, tgid 486 (syz-executor), ts 27469018632, free_ts 27467799500
[   49.875638][ T1483]  post_alloc_hook+0x1f5/0x210
[   49.880418][ T1483]  prep_new_page+0x1c/0x110
[   49.884945][ T1483]  get_page_from_freelist+0x2ca9/0x2d20
[   49.890511][ T1483]  __alloc_pages+0x1fa/0x610
[   49.895110][ T1483]  alloc_slab_page+0x6e/0xf0
[   49.899705][ T1483]  new_slab+0x98/0x3e0
[   49.903772][ T1483]  ___slab_alloc+0x70f/0xb70
[   49.908381][ T1483]  __slab_alloc+0x5e/0xa0
[   49.912753][ T1483]  __kmem_cache_alloc_node+0x204/0x2d0
[   49.918230][ T1483]  __kmalloc_node+0xa2/0x1e0
[   49.922824][ T1483]  kvmalloc_node+0x28a/0x460
[   49.927441][ T1483]  pfifo_fast_init+0x257/0x7a0
[   49.932218][ T1483]  qdisc_create_dflt+0x150/0x3a0
[   49.937170][ T1483]  dev_activate+0x30e/0x1110
[   49.941773][ T1483]  __dev_open+0x40d/0x520
[   49.946109][ T1483]  __dev_change_flags+0x1f2/0x6b0
[   49.951158][ T1483] page last free stack trace:
[   49.955842][ T1483]  free_unref_page_prepare+0x81b/0x820
[   49.961327][ T1483]  free_unref_page+0x93/0x530
[   49.966038][ T1483]  __free_pages+0x67/0x100
[   49.970493][ T1483]  __free_slab+0xc7/0x1a0
[   49.974829][ T1483]  __unfreeze_partials+0x15a/0x190
[   49.979942][ T1483]  put_cpu_partial+0xa9/0x100
[   49.984703][ T1483]  __slab_free+0x1c4/0x280
[   49.989141][ T1483]  ___cache_free+0xbf/0xd0
[   49.993573][ T1483]  qlist_free_all+0xc6/0x140
[   49.998164][ T1483]  kasan_quarantine_reduce+0x14a/0x170
[   50.003627][ T1483]  __kasan_slab_alloc+0x24/0x80
[   50.008494][ T1483]  slab_post_alloc_hook+0x4f/0x2d0
[   50.013609][ T1483]  kmem_cache_alloc_node+0x179/0x330
[   50.018904][ T1483]  __alloc_skb+0xe8/0x4a0
[   50.023237][ T1483]  netlink_ack+0x373/0x1160
[   50.027742][ T1483]  netlink_rcv_skb+0x27e/0x450
[   50.032511][ T1483] 
[   50.034833][ T1483] Memory state around the buggy address:
[   50.040456][ T1483]  ffff888117fd4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.048515][ T1483]  ffff888117fd4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.056578][ T1483] >ffff888117fd4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.064655][ T1483]                    ^
[   50.068734][ T1483]  ffff888117fd4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.076823][ T1483]  ffff888117fd4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.084900][ T1483] ==================================================================
[   50.092957][ T1483] Disabling lock debugging due to kernel taint
[   50.099908][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[   50.111658][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   50.115940][  T307] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   50.120091][    C1] CPU: 1 PID: 1483 Comm: syz.7.458 Tainted: G    B   W          syzkaller #0
[   50.120115][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   50.120126][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   50.151757][    C1] Code: b4 00 00 00 e8 7f 56 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 7d 6a b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 e2 6e 00 49 8b 3e e8 18 66 b9 03
[   50.171403][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[   50.177514][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888108ff9440
[   50.185520][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   50.193510][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[   50.201495][    C1] R10: dffffc0000000000 R11: ffffed1022ffa939 R12: ffff888117fd49c8
[   50.209482][    C1] R13: ffff888132bac400 R14: 0000000000000000 R15: 000000007fffffff
[   50.217471][    C1] FS:  00007fb5e0dba6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   50.226429][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.233028][    C1] CR2: 00007fb5dff87300 CR3: 0000000124a7c000 CR4: 00000000003506a0
[   50.241030][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.249028][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.257020][    C1] Call Trace:
[   50.260313][    C1]  <IRQ>
[   50.263177][    C1]  delayed_work_timer_fn+0x61/0x80
[   50.268315][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   50.274164][    C1]  call_timer_fn+0x46/0x2a0
[   50.278690][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   50.284516][    C1]  __run_timers+0x672/0x9b0
[   50.289039][    C1]  ? calc_index+0x200/0x200
[   50.293567][    C1]  ? asm_common_interrupt+0x27/0x40
[   50.298783][    C1]  run_timer_softirq+0x6a/0xf0
[   50.303561][    C1]  handle_softirqs+0x1d7/0x600
[   50.308345][    C1]  __irq_exit_rcu+0x52/0xf0
[   50.312888][    C1]  irq_exit_rcu+0x9/0x10
[   50.317170][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   50.322840][    C1]  </IRQ>
[   50.325822][    C1]  <TASK>
[   50.328774][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   50.334781][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[   50.341230][    C1] Code: c0 db 0d 87 e8 ec 76 b5 fc 4c 89 f7 48 83 3d b1 58 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b6 13 4b fc 65 8b 05 97 ea 00 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[   50.360858][    C1] RSP: 0018:ffffc9000dcaecb8 EFLAGS: 00000206
[   50.366952][    C1] RAX: 0000000000000000 RBX: 0000000000000a06 RCX: dffffc0000000000
[   50.374949][    C1] RDX: ffffc90001309000 RSI: 0000000000000a06 RDI: 0000000000000001
[   50.382956][    C1] RBP: ffffc9000dcaecc8 R08: ffff8881f6f27c77 R09: 1ffff1103ede4f8e
[   50.390954][    C1] R10: dffffc0000000000 R11: ffffed103ede4f8f R12: dffffc0000000000
[   50.398938][    C1] R13: 00000000ffffffff R14: ffff8881f6f27c40 R15: 0000000000000000
[   50.406934][    C1]  ? _raw_spin_unlock_irqrestore+0x46/0x80
[   50.412776][    C1]  __mod_timer+0x865/0xc00
[   50.417303][    C1]  ? ttwu_do_activate+0x179/0x2a0
[   50.422351][    C1]  schedule_timeout+0x154/0x340
[   50.427222][    C1]  ? __cfi_schedule_timeout+0x10/0x10
[   50.432640][    C1]  ? __cfi_process_timeout+0x10/0x10
[   50.437941][    C1]  ? __cfi__raw_spin_lock+0x10/0x10
[   50.443173][    C1]  ? _raw_spin_lock+0x94/0xf0
[   50.447892][    C1]  wait_for_common+0x364/0x640
[   50.452671][    C1]  ? __tasklet_schedule+0x15/0x20
[   50.457716][    C1]  ? wait_for_completion+0x20/0x20
[   50.462841][    C1]  ? usb_submit_urb+0x1091/0x1740
[   50.467885][    C1]  wait_for_completion_timeout+0xe/0x10
[   50.473446][    C1]  usb_start_wait_urb+0x1c8/0x380
[   50.478486][    C1]  ? usb_api_blocking_completion+0xb0/0xb0
[   50.484312][    C1]  ? __kasan_check_write+0x14/0x20
[   50.489461][    C1]  usb_control_msg+0x243/0x3f0
[   50.494245][    C1]  hub_ext_port_status+0xf2/0x6a0
[   50.499344][    C1]  hub_activate+0x856/0x1a30
[   50.503984][    C1]  hub_resume+0x98/0x340
[   50.508255][    C1]  ? __cfi_hub_resume+0x10/0x10
[   50.513136][    C1]  ? usbfs_notify_resume+0xd0/0xe0
[   50.518264][    C1]  usb_resume_both+0x748/0xd70
[   50.523046][    C1]  ? usb_resume+0xa0/0xa0
[   50.527396][    C1]  ? __stack_depot_save+0x36/0x490
[   50.532534][    C1]  usb_runtime_resume+0x21/0x30
[   50.537416][    C1]  ? __cfi_usb_runtime_resume+0x10/0x10
[   50.542987][    C1]  __rpm_callback+0x319/0x770
[   50.547686][    C1]  ? __cfi_usb_runtime_resume+0x10/0x10
[   50.553271][    C1]  ? dev_pm_disable_wake_irq_check+0xb7/0x160
[   50.559353][    C1]  ? __cfi_usb_runtime_resume+0x10/0x10
[   50.564928][    C1]  rpm_resume+0xf9f/0x1610
[   50.569356][    C1]  ? __kasan_check_write+0x14/0x20
[   50.574482][    C1]  ? __pm_runtime_resume+0x90/0x90
[   50.579638][    C1]  ? _raw_spin_lock_irqsave+0xc2/0x130
[   50.585116][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   50.591031][    C1]  ? klist_iter_exit+0xdc/0x110
[   50.595902][    C1]  ? __kasan_check_write+0x14/0x20
[   50.601028][    C1]  ? mutex_lock+0x93/0x1b0
[   50.605461][    C1]  __pm_runtime_resume+0x69/0x90
[   50.610414][    C1]  usb_autoresume_device+0x23/0x60
[   50.615564][    C1]  usbdev_open+0x18b/0x770
[   50.620004][    C1]  ? __kasan_check_write+0x14/0x20
[   50.625132][    C1]  ? __cfi_usbdev_open+0x10/0x10
[   50.630093][    C1]  chrdev_open+0x593/0x600
[   50.634611][    C1]  ? __cfi_chrdev_open+0x10/0x10
[   50.639564][    C1]  ? fsnotify_perm+0x3e9/0x5b0
[   50.644364][    C1]  do_dentry_open+0x885/0x11f0
[   50.649160][    C1]  ? __cfi_chrdev_open+0x10/0x10
[   50.654126][    C1]  vfs_open+0x73/0x80
[   50.658158][    C1]  path_openat+0x2699/0x2f30
[   50.662773][    C1]  ? slab_post_alloc_hook+0x4f/0x2d0
[   50.668083][    C1]  ? kmem_cache_alloc+0x166/0x320
[   50.673130][    C1]  ? getname_flags+0xba/0x510
[   50.677823][    C1]  ? do_sys_openat2+0xeb/0x820
[   50.682624][    C1]  ? do_filp_open+0x420/0x420
[   50.687319][    C1]  do_filp_open+0x1ee/0x420
[   50.691843][    C1]  ? __cfi_do_filp_open+0x10/0x10
[   50.696897][    C1]  ? alloc_fd+0x4c1/0x570
[   50.701242][    C1]  do_sys_openat2+0x15e/0x820
[   50.705943][    C1]  ? do_sys_open+0xe0/0xe0
[   50.710384][    C1]  ? do_user_addr_fault+0x9a5/0x1030
[   50.715693][    C1]  __x64_sys_openat+0x136/0x160
[   50.720561][    C1]  x64_sys_call+0x783/0x9a0
[   50.725079][    C1]  do_syscall_64+0x4c/0xa0
[   50.729511][    C1]  ? clear_bhb_loop+0x30/0x80
[   50.734203][    C1]  ? clear_bhb_loop+0x30/0x80
[   50.738899][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   50.744809][    C1] RIP: 0033:0x7fb5dff5e9ce
[   50.749252][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   50.768887][    C1] RSP: 002b:00007fb5e0db9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   50.777320][    C1] RAX: ffffffffffffffda RBX: 00007fb5e0dba6c0 RCX: 00007fb5dff5e9ce
[   50.785307][    C1] RDX: 0000000000160301 RSI: 00007fb5e0db9c00 RDI: ffffffffffffff9c
[   50.793289][    C1] RBP: 00007fb5e0db9c00 R08: 0000000000000000 R09: 0000000000000000
[   50.801277][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   50.809282][    C1] R13: 00007fb5e0226038 R14: 00007fb5e0225fa0 R15: 00007fffe22ca348
[   50.817276][    C1]  </TASK>
[   50.820326][    C1] Modules linked in:
[   50.824232][    C1] ---[ end trace 0000000000000000 ]---
[   50.829698][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   50.835023][    C1] Code: b4 00 00 00 e8 7f 56 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 7d 6a b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 e2 6e 00 49 8b 3e e8 18 66 b9 03
[   50.854641][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[   50.860723][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888108ff9440
[   50.868709][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   50.876703][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[   50.884708][    C1] R10: dffffc0000000000 R11: ffffed1022ffa939 R12: ffff888117fd49c8
[   50.892714][    C1] R13: ffff888132bac400 R14: 0000000000000000 R15: 000000007fffffff
[   50.900706][    C1] FS:  00007fb5e0dba6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   50.909659][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.916256][    C1] CR2: 00007fb5dff87300 CR3: 0000000124a7c000 CR4: 00000000003506a0
[   50.924246][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.932232][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.940228][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[   50.947991][    C1] Kernel Offset: disabled
[   50.952325][    C1] Rebooting in 86400 seconds..