last executing test programs:

1m11.767932721s ago: executing program 32 (id=22):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

59.320559493s ago: executing program 33 (id=290):
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x220c008, &(0x7f0000000400)=ANY=[], 0x5, 0x105e9, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000011380)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x90001)
r1 = openat(0xffffffffffffff9c, &(0x7f00000113c0)='./file1\x00', 0x42402, 0x14a)
fallocate(r1, 0x8, 0x0, 0x8000)

54.964008207s ago: executing program 34 (id=408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/2, 0x2}], 0x1, 0x10, 0x1)

54.369075362s ago: executing program 35 (id=418):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f)

45.39780614s ago: executing program 5 (id=667):
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

45.39037549s ago: executing program 8 (id=668):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)
mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1)
munlockall()

45.236124164s ago: executing program 8 (id=673):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c)
r1 = openat$incfs(r0, &(0x7f00000004c0)='.log\x00', 0x2080, 0x1b2)
preadv(r1, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000540)=""/101, 0x65}], 0x2, 0x1, 0x1)

45.174080575s ago: executing program 8 (id=675):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, <r0=>0x0}, 0x8)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}}, 0x10)

45.173846395s ago: executing program 8 (id=677):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$eJzs3L9vG1UcAPDvOXFCaCGhlF8tPwIFUSFImrZABwZAIDEUgQQDjFYSqtK0oCZItIpEylAmVCGxI0b+BSZYEGJCYgVmVFGhLG2ZjM53l9iu7eaHY5f685GcfN/d2e997+45z/dyDmBgTaY/kojdEfF7RIxnxcYNJrNf11aXZ6+vLs8mUa2+809S2+7q6vJssWnxvF31hUhif4t6F8+dP1VZWJg/m5enl05/PL147vxzJ09XTsyfmD9z+Nixo0dmXnzh8PPbyG4sIva8lcWlfNkb73/15vEvG/JvyqNLJjutfKpa7XJ1/XVXXTzcx3awOUP58SrX+v94DNUdvfF4/fO1wmd9aiCwY6rVanVX+9UrVeA2lkRjWZeHQVH8oS8+/+a/R+sHAS/v6Aikv668kn0ASvO+lj+yNcNrVwzKTZ9vu2kyIt5b+feb9BEdr0MkO9QCAGDQ/JCOf55NRzvLs+nYY338UYr767a7O58bmoiIeyJiT0TcG2dib0TcF1Hb9oGIeHCT9ddNktSGmVdXR5rGP6XLW05uA9Lx30v53Fbj+K8Y/cXEUK10LitEOfng5ML8oXyfHIzyaFqe6VDHj6/9dqnduvrxX/pI6y/Ggnk7Lg+PNj5nrrJU2XrGja5ciNg33Cr/ZG0mIB15PhQR+1q9QOnmdZx85ruH2627ef4ddGGiqfptxNPZ8V+JpvwLSef5yek7YmH+0HRxVtzol18vvt2u/m3l3wXp8b+z5fm/lv9EUj9fu7j5Oi7+8UXbudXJch5s4vxfqSxVRpJ3a/FIvuzTytLS2ZmIkeR41uj65YfXn1uUi+3T/A8eaN3/98T6ntgfEelJ/EhEPBoRj+XH7vGIeCIiDnTI/+dXn/ywedlYkf8tcPznNnX814ORaFxSarFNGgyd+un7hkon1sM8/+ud3/+O1qKD+ZKNvP/d2IrWwXb3HwAAAPwflCJidySlqbW4VJqayv6Hf2829Z365Mxcdo/ARJRLxZWu8brroTP5x/qsfCEisn8tKNYfiVLtuvHXQ2O18tTsRwtzfc0c2NWm/6f+Gup364Ad54YtGFz6Pwyujv2/3Lt2AL13Q//v2OdHd7QtQG+1+Ps/1o92AL3Xavzv+35gMDT1f9N+MEBc/4fBpf/D4NrAPfzA7WdxLG5+k/xaUI6I5lXFK23g6VsJxiM208LtB8U3I273daLcuzb3I4hSd17nz3x/t1g10v7U+vtSxC2wE1oHyc51h94F/XtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kb/AgAA//8GT9U6")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'trusted.', ',(-)}+.@.\x00'}, 0x0, 0x0, 0x1)
llistxattr(&(0x7f0000000800)='./file0\x00', 0x0, 0xfffffdf3)

45.118998226s ago: executing program 5 (id=678):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000010}}], 0x1, 0x40)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040)
recvmmsg$unix(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)

45.106461077s ago: executing program 8 (id=679):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
syz_mount_image$vfat(&(0x7f0000001880), &(0x7f00000019c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000001ac0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e4386958298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a64a50d11182c411b621206b8c77e89e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x1, 0x2c2, &(0x7f0000001c40)="$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")
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7/file0\x00', 0x0)

45.065347148s ago: executing program 5 (id=681):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x8})
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)

45.064967788s ago: executing program 5 (id=682):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000380)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0)

44.949835831s ago: executing program 5 (id=683):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000080), 0x6)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x98, 0x4)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x12142, 0x0)

44.869630953s ago: executing program 8 (id=684):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x11, 0x80001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0xffffffff)

44.770077605s ago: executing program 36 (id=684):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x11, 0x80001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0xffffffff)

44.56417578s ago: executing program 5 (id=690):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,utf8,iocharset=maccyrillic,errors=continue,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030352c00c7c2461c47ee7b8442c02150e1250ae9ab006b259afeb87ea44bb8594f8d1c4d6bd50fae0177ee0311e746c321089031ea651fcab7ac08560ce3ba062aaac396aca85cd71ef5577063874db803025bf903a1ef39a78abacc397c3349"], 0x1, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

44.506986012s ago: executing program 37 (id=690):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,utf8,iocharset=maccyrillic,errors=continue,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c646d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030352c00c7c2461c47ee7b8442c02150e1250ae9ab006b259afeb87ea44bb8594f8d1c4d6bd50fae0177ee0311e746c321089031ea651fcab7ac08560ce3ba062aaac396aca85cd71ef5577063874db803025bf903a1ef39a78abacc397c3349"], 0x1, 0x1535, &(0x7f0000001380)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

41.090418354s ago: executing program 7 (id=763):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0xc00, 0x4a)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14)

41.040289796s ago: executing program 7 (id=765):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0)}, 0x20)

41.040178496s ago: executing program 7 (id=766):
r0 = socket$inet6(0xa, 0x802, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

40.981308507s ago: executing program 7 (id=769):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$incfs(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0)
rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

40.807839011s ago: executing program 7 (id=771):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000003b00)={@ipv4={'\x00', '\xff\xff', @local}, 0x80, r2})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000003b40)={@loopback, 0x80, r2})

40.703263953s ago: executing program 7 (id=772):
r0 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='dirsync\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

40.624091095s ago: executing program 38 (id=772):
r0 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='dirsync\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

37.245850497s ago: executing program 6 (id=879):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x6, 0x2c7, &(0x7f00000005c0)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180be7dce33e558413724c328fb0d50000000000000000000000000002000000000d0000ed0000000700000000000000000000000d00000000002e305f2e"], 0x0, 0x44}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x189800, 0x131)

37.019297963s ago: executing program 6 (id=873):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)="89", 0x0, 0x1000000}, 0x32)

36.971093154s ago: executing program 6 (id=876):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', 0x143042, 0x80)
r1 = syz_ublk_setup_io_uring(0x987, &(0x7f0000000880)={0x0, 0x1a1c, 0x1, 0x1, 0x3ca}, &(0x7f0000000900)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000980)=<r4=>0x0)
r5 = fcntl$dupfd(r1, 0x406, r1)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f00000009c0)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a40)=@any_dev={0x1, 0x967, 0x0, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0xf0}}}, &(0x7f0000000a80))

36.963198314s ago: executing program 6 (id=877):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000840)='.\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f00000008c0)='.\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000980)='.\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x1005848, 0x0)

36.956941874s ago: executing program 6 (id=878):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@barrier}, {@max_dir_size_kb}, {}, {@nombcache}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x3, 0x439, &(0x7f0000000380)="$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")
lsetxattr$security_ima(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), &(0x7f0000000f40)=@sha1={0x1, "8affff42f431c3d9a322d200008000004000"}, 0xe2f2, 0x0)
lsetxattr$security_ima(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), &(0x7f0000001000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)

36.830118557s ago: executing program 6 (id=883):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0x3)
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)

36.790431508s ago: executing program 39 (id=883):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0x3)
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)

36.787305398s ago: executing program 2 (id=895):
r0 = socket$inet6(0xa, 0x802, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)

36.623810712s ago: executing program 2 (id=897):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='3', 0x1)

36.599533493s ago: executing program 2 (id=888):
r0 = socket(0xa, 0x3, 0x87)
r1 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2})
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000))

36.565079184s ago: executing program 2 (id=901):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000480)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000540))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x4008, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x40, 0x83)
read(r0, 0x0, 0xeffd)

36.483971446s ago: executing program 2 (id=892):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001e80)={'syz1\x00', {0x9, 0x7, 0x5, 0x7}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x9, 0xfffffc01, 0x0, 0x4, 0x1, 0xfffffffb, 0x8e, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x800, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0xffb, 0x4008, 0xc, 0x8, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0xffff, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x97, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x4100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x5, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000002300)=[{&(0x7f0000002340)=""/49, 0x31}], 0x1)
write$input_event(r0, &(0x7f0000002380)={{0x77359400}, 0x15}, 0xfe4f)

35.605514517s ago: executing program 2 (id=902):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0)
mlockall(0x7)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x9})
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)

35.438853691s ago: executing program 40 (id=902):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0)
mlockall(0x7)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x9})
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)

6.280032238s ago: executing program 3 (id=1446):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory0/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='offline\x00', 0x8)
close(r0)

6.279561958s ago: executing program 0 (id=1459):
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0xd, &(0x7f0000001700)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

5.660025353s ago: executing program 0 (id=1463):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000100), 0x0}, 0x20)

5.659585443s ago: executing program 3 (id=1464):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

5.597324374s ago: executing program 4 (id=1454):
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1a10080, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x400, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)

4.440769272s ago: executing program 3 (id=1455):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000001540)='./file0\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
pwrite64(r1, &(0x7f0000000080)="3233a6", 0x3, 0x2)

4.436845742s ago: executing program 0 (id=1470):
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb1/product\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/128, 0x80)

4.436533362s ago: executing program 4 (id=1458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000001200))

4.417528763s ago: executing program 1 (id=1460):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0xb35b, 0x8, 0xf1, 0x50, 0x16, 0xffffffffffffff24, 0x0, 0x29, 0x0, 0xfffffffffffffffb, 0x1, 0xbd6], 0x3ff8, 0x53100})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x43000000, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

4.417138863s ago: executing program 0 (id=1474):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)

4.369096124s ago: executing program 4 (id=1461):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000)
mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1)
munlockall()

4.369006664s ago: executing program 1 (id=1465):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x9, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x10022, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1)

3.888640456s ago: executing program 4 (id=1479):
syz_mount_image$msdos(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x2810400, &(0x7f0000000580)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x21d, &(0x7f0000000600)="$eJzs3D1rW1cYB/AjWaqslhZPhXbpoV3a5bb10qVDS3GhVNDSVqUv0zWWEyFFAl0NkklAc6Z8jhDIEsgW8gX8GbJkMwHjyVNucCRZONixE0dWXn6/RQ/P/56rc3TFQVwJ7Xx/40prM0s2034oLRdC8YcwCvuFsBKKYWoUvrr9z971P//979cfa7W1P8qTfowffXbv/6u3Pr/f/+DvOwedQghhd/Xh9sfbn+w8/utyM4vNLHa6/ZjG9W63n663G3GjmbWSGH9vN9KsEZudrNE7km+2u7OnDo0si2lnGFuNYex3Y783jOmltNmJSZLE5cC51G/u53nYzfM8r4xCnucveoLCfObFRTnn9ecNd7ipx4Pd9NFoUB/Ux4/j/OdfamvfxKdWZqP2BoP60mH+7TiPR/NyeH+Srx6bvxe+/GKcH2Q//VZ7Jq+GjfkvHwAAAAAA3kpJPHTs/f0kOSkfV7PvB8rhaF4Kn5ZmnaW5rwQAAAA4STbcaqXtjXJvXLQbCysqYda5FnrZd3cnUzxt+NcPTj9mTsWHkyK85HmqIYSTjymGhV+UiymmvyOfdKZ3ks42vPSqplF9TV6NabEcjouqYatVOdt5Kud6/yxsSwIAAOZk9qH/zEOKc50QAAAAAAAAAAAAAAAAAAAAvIMu4s/MFr1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDneRIAAP//QjRVhA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x90001)
truncate(&(0x7f0000000900)='./file1\x00', 0xa75)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0)

3.888283226s ago: executing program 3 (id=1468):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x2000000000000004)
ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000700))

3.686218351s ago: executing program 9 (id=1475):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

3.677641421s ago: executing program 4 (id=1476):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

3.672606201s ago: executing program 9 (id=1477):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x6}, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x17)

3.500799505s ago: executing program 1 (id=1478):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./tracing\x00', 0x204858, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000009c0)=""/55, 0x37)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

3.500133135s ago: executing program 9 (id=1489):
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3000010, &(0x7f0000000080)={[{@delalloc}, {@data_journal}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}]}, 0x1, 0x520, &(0x7f0000000700)="$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")
close(0x3)

3.425812437s ago: executing program 9 (id=1480):
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3"], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101b43, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x33)

2.754136703s ago: executing program 0 (id=1481):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

2.753552163s ago: executing program 1 (id=1492):
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3000010, &(0x7f0000000080)={[{@delalloc}, {@data_journal}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}]}, 0x1, 0x520, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLdqtYO1NQ9sIISgXOFUClvsSEm8UrR2vYqdsogpS8R9USCBx4sQFiT8AqeoBcUaVKsEFcUCAQAi2cEACOsjjcUmccRIgibPx7yfN+r2Z8fu+N5GfZ8azMwFMraci4qWImImIZyOiWsxPiynWXo/YHaz3zoNXV/pTEll2689JJMW8YVv9+mxEXI38LTEXEV/5YsTXk4Nxu9s7d5dbreZmUW/02vca3e2dG+vt5bXmWnNjcXHhhaUXl55fupkV9jdQ0uZhasPCD7/w2Tc++Y3f3P7j9W/2m/jMh6ISI/04SYM0K/m2GOpvo83TCDYBM0V/KpNOBACAY+nv478/Ij6W7/9XYybfmxsxM4nMAAAAgJOSfW4+/plEZAAAAMCFlUbEfCRpvbgWYD7S9FJxbuCDcSVtdbq9T9zpbG2s9pdF1KKS3llvNW8W1wrXopL06wvFNbbD+nMj9cWIeCwivlO9nNfrK53W6oTPfQAAAMC0uDpy/P+3apqXj1by/wQAAACA86s2tgIAAABcFA75AQAA4OIbPf5/Y0J5AAAAAKfiSy+/3J+y4fOvV1/Z3rrbeeXGarN7t97eWqmvdDbv1dc6nbX8nn3to9prdTr3PhUbW/cbvWa31+hu79xud7Y2erfX9z0CGwAAADhDj330zV8mEbH76cv5FMV9AAH2+d2kEwBO0sykEwAmxl28YXpVhoVLk80DmJzkiOUu3gEAgIfftQ8f/P1/eCqgMtHMgNPmWh8AmD5+/4fpVXEFIEy1NCLeNyg+Mm6dsb////y4UbIs4q3q3jnOLwIAwNmaz6ckrRfHAfORpvV6xKMRaS0qyZ31VvNmcXzwi2rlkX59IX9ncuQ1wwAAAAAAAAAAAAAAAAAAAAAAAADAQJYlkQEAAAAXWkT6hyS/m3/Eteoz86PnBy4lf6/G74vK92999/5yr7e50J//l/xZXpciove9W5V8/nNjHx8GAAAAnLRkd+yiwXF68bpwplkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXeefDqynA6y7h/+nxE1Mriz8Zc/joXlYi48tckZve8L4mImROIv/taRDxeFj+Jd7MsqxVZlMW/fMrxa/mmKY+fRsTVE4gP0+zN/vjzUtnnL42n8tfyz99sMf2/xo9/aRH58XycKxt/Hj3QWrs0xhNv/7gxNv5rEU/Mlo8/w/E3GRP/6QOt/SPLsoMxvvbVnZ1x8bMfRFwr/f5J9sVq9Nr3Gt3tnRvr7eW15lpzY3Fx4YWlF5eeX7rZuLPeag7+LY/x+kd+8u5h/b9SEv/XvxqMv4f1/5lxjY7419v3H3xgUKyUxb/+dOn371yMiZ8W330fL8r95deG5d1Bea8nf/TWk4f1f3XM9j/q73/9mP1/9svf/u0xVwUAzkB3e+fucqvV3DykMHeMdR7Gwk/nzkUa/2Uh+9bgL3de8vlfC/291f/MGfbqHCS2p5CdWayZOCddfq8w0WEJAAA4BT97b6d/0pkAAAAAAAAAAAAAAAAAAADA9DqL24mNxtydTFcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA717wAAAP//qwbgHQ==")
close(0x3)

189.554765ms ago: executing program 9 (id=1482):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000001540)='./file0\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
pwrite64(r1, &(0x7f0000000080)="3233a6", 0x3, 0x2)

189.019135ms ago: executing program 0 (id=1494):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

188.797545ms ago: executing program 3 (id=1483):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000001200))

188.666485ms ago: executing program 1 (id=1484):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)

188.484675ms ago: executing program 4 (id=1485):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

120.031257ms ago: executing program 1 (id=1486):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009ab94364a020000000904010000020d00000904010102020d0000090582020002000000090503", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x11, 0x10, 0x10, 0x10, 0x10, 0x3, 0x10, 0x10, 0xe}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

119.497887ms ago: executing program 3 (id=1499):
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3"], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101b43, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x33)

0s ago: executing program 9 (id=1487):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/100, 0x64)
close(r0)

kernel console output (not intermixed with test programs):

7fffffff)
[   59.110885][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.121969][  T401] device bridge_slave_1 left promiscuous mode
[   59.128267][  T401] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.136357][  T401] device bridge_slave_0 left promiscuous mode
[   59.142849][  T401] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.151349][  T401] device veth1_macvtap left promiscuous mode
[   59.157507][  T401] device veth0_vlan left promiscuous mode
[   59.158379][ T1989] EXT4-fs (loop9): unmounting filesystem.
[   59.281512][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.298787][ T2212] device veth0_vlan entered promiscuous mode
[   59.302076][ T2273] loop2: detected capacity change from 0 to 512
[   59.305933][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.322776][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.330251][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.345481][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.355013][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.365969][ T2212] device veth1_macvtap entered promiscuous mode
[   59.372546][ T2273] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.799: iget: bad i_size value: 38620345925642
[   59.385972][ T2273] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.799: couldn't read orphan inode 15 (err -117)
[   59.401971][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.410015][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.416619][ T2273] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.799: bg 0: block 5: invalid block bitmap
[   59.418738][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.432036][ T2273] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   59.450917][ T2273] EXT4-fs (loop2): This should not happen!! Data will be lost
[   59.450917][ T2273] 
[   59.462945][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.465841][ T2273] EXT4-fs (loop2): Total free blocks count 0
[   59.472013][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.477449][ T2273] EXT4-fs (loop2): Free/Dirty block details
[   59.491644][ T2273] EXT4-fs (loop2): free_blocks=0
[   59.497114][ T2273] EXT4-fs (loop2): dirty_blocks=1
[   59.502623][ T2273] EXT4-fs (loop2): Block reservation details
[   59.508658][ T2273] EXT4-fs (loop2): i_reserved_data_blocks=1
[   59.577337][ T2291] loop2: detected capacity change from 0 to 512
[   59.604113][ T2291] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.684691][  T401] Bluetooth: hci0: Frame reassembly failed (-84)
[   59.698567][ T2307] input: syz1 as /devices/virtual/input/input8
[   60.362808][ T2318] loop4: detected capacity change from 0 to 512
[   60.373096][ T2318] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.815: iget: bad i_size value: 38620345925642
[   60.386002][ T2318] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.815: couldn't read orphan inode 15 (err -117)
[   60.413103][ T2324] netlink: 48 bytes leftover after parsing attributes in process `syz.0.817'.
[   60.440941][ T2318] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.815: bg 0: block 5: invalid block bitmap
[   60.453626][ T2318] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   60.466075][ T2318] EXT4-fs (loop4): This should not happen!! Data will be lost
[   60.466075][ T2318] 
[   60.476059][ T2318] EXT4-fs (loop4): Total free blocks count 0
[   60.482924][ T2318] EXT4-fs (loop4): Free/Dirty block details
[   60.488857][ T2318] EXT4-fs (loop4): free_blocks=0
[   60.494318][ T2318] EXT4-fs (loop4): dirty_blocks=1
[   60.499450][ T2318] EXT4-fs (loop4): Block reservation details
[   60.505546][ T2318] EXT4-fs (loop4): i_reserved_data_blocks=1
[   60.553399][ T2339] loop4: detected capacity change from 0 to 512
[   60.578877][ T2345] loop2: detected capacity change from 0 to 256
[   60.597738][ T2339] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.622282][ T2351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   60.642437][ T2351] device syz_tun entered promiscuous mode
[   60.651954][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   60.660846][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.680821][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   60.702469][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.712297][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.721659][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.729973][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.739103][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.885331][ T2379] device batadv_slave_1 entered promiscuous mode
[   60.893014][ T2378] device batadv_slave_1 left promiscuous mode
[   61.155133][ T2365] loop2: detected capacity change from 0 to 131072
[   61.162673][ T2365] F2FS-fs (loop2): invalid crc value
[   61.169627][ T2365] F2FS-fs (loop2): Found nat_bits in checkpoint
[   61.203954][ T2365] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   61.338642][ T2398] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.510214][   T28] kauditd_printk_skb: 38 callbacks suppressed
[   61.510233][   T28] audit: type=1400 audit(1700000017.620:508): avc:  denied  { getopt } for  pid=2419 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   61.751455][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   61.760818][  T326] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   61.781383][   T28] audit: type=1326 audit(1700000017.900:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   61.819357][ T2450] netlink: 104 bytes leftover after parsing attributes in process `syz.2.869'.
[   61.845873][   T28] audit: type=1326 audit(1700000017.900:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   61.875362][   T28] audit: type=1326 audit(1700000017.900:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   61.900397][   T28] audit: type=1326 audit(1700000017.900:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   61.925228][   T28] audit: type=1326 audit(1700000017.900:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   61.950015][   T28] audit: type=1326 audit(1700000017.900:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   61.974805][   T28] audit: type=1326 audit(1700000017.900:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   61.999700][   T28] audit: type=1326 audit(1700000017.900:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   62.038387][   T28] audit: type=1326 audit(1700000017.900:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz.4.865" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f959e559 code=0x7ffc0000
[   62.076129][ T2461] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   62.094859][ T2461] EXT4-fs error (device loop2): ext4_get_journal_inode:5749: inode #32: comm syz.2.872: iget: special inode unallocated
[   62.139562][ T2461] EXT4-fs (loop2): no journal found
[   62.147274][ T2461] EXT4-fs (loop2): can't get journal size
[   62.173023][ T2461] EXT4-fs (loop2): filesystem is read-only
[   62.184948][ T2461] EXT4-fs (loop2): shut down requested (0)
[   62.261553][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   62.281855][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   62.300460][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.308950][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   62.321104][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.332170][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.340438][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.348963][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.357161][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.365338][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[   62.373004][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[   62.460767][ T2484] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.469671][ T2498] 9pnet: p9_errstr2errno: server reported unknown error �
[   62.470006][ T2484] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.495048][ T2484] device bridge_slave_0 entered promiscuous mode
[   62.502361][ T2500] veth0_to_bridge: Caught tx_queue_len zero misconfig
[   62.512760][ T2502] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.525384][ T2484] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.532881][ T2484] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.540598][ T2484] device bridge_slave_1 entered promiscuous mode
[   62.544358][ T2504] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.559677][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.576823][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.606673][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.624584][ T2504] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: block 3: comm syz.9.891: lblock 3 mapped to illegal pblock 3 (length 3)
[   62.651000][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.671041][ T2504] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   62.677560][ T2484] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.690435][ T2484] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.697770][ T2484] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.701230][ T2504] EXT4-fs (loop9): This should not happen!! Data will be lost
[   62.701230][ T2504] 
[   62.704839][ T2484] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.723029][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.738125][ T2514] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: block 3: comm syz.9.891: lblock 3 mapped to illegal pblock 3 (length 1)
[   62.751599][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.765580][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.773423][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.773549][ T2504] EXT4-fs error (device loop9): ext4_ext_remove_space:2945: inode #15: comm syz.9.891: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   62.781150][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.808771][ T2504] EXT4-fs error (device loop9) in ext4_setattr:5697: Corrupt filesystem
[   62.813806][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.834452][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.854398][ T2000] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   62.868791][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.898504][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.917024][ T2519] exFAT-fs (loop9): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   62.940760][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.949251][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.958590][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.965683][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.966246][ T2519] exFAT-fs (loop9): hint_cluster is invalid (521)
[   62.975710][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.980738][ T2519] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000208)
[   62.988913][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.997538][ T2518] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.005137][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.015784][ T2519] exFAT-fs (loop9): Filesystem has been set read-only
[   63.022215][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.022900][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.029720][ T2519] exFAT-fs (loop9): error, failed to bmap (inode : ffff88814005ee30 iblock : 9, err : -5)
[   63.051606][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.054643][ T2519] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000208)
[   63.070988][ T2519] syz.9.899: attempt to access beyond end of device
[   63.070988][ T2519] loop9: rw=2049, sector=4281, nr_sectors = 1 limit=256
[   63.071077][ T2525] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000208)
[   63.084549][ T2519] Buffer I/O error on dev loop9, logical block 4281, lost async page write
[   63.092876][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.101526][ T2519] syz.9.899: attempt to access beyond end of device
[   63.101526][ T2519] loop9: rw=2049, sector=4282, nr_sectors = 1 limit=256
[   63.111331][ T2518] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.908: lblock 3 mapped to illegal pblock 3 (length 3)
[   63.123146][ T2519] Buffer I/O error on dev loop9, logical block 4282, lost async page write
[   63.139223][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.146558][ T2519] syz.9.899: attempt to access beyond end of device
[   63.146558][ T2519] loop9: rw=2049, sector=4283, nr_sectors = 1 limit=256
[   63.154868][ T2525] exFAT-fs (loop9): error, failed to bmap (inode : ffff88814005ee30 iblock : 8, err : -5)
[   63.167972][ T2519] Buffer I/O error on dev loop9, logical block 4283, lost async page write
[   63.178879][ T2518] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   63.187871][ T2519] syz.9.899: attempt to access beyond end of device
[   63.187871][ T2519] loop9: rw=2049, sector=4284, nr_sectors = 1 limit=256
[   63.203674][ T2518] EXT4-fs (loop0): This should not happen!! Data will be lost
[   63.203674][ T2518] 
[   63.213876][ T2519] Buffer I/O error on dev loop9, logical block 4284, lost async page write
[   63.223116][ T2527] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: block 3: comm syz.0.908: lblock 3 mapped to illegal pblock 3 (length 1)
[   63.246517][ T2527] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: block 3: comm syz.0.908: lblock 3 mapped to illegal pblock 3 (length 1)
[   63.262319][ T2528] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.908: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   63.262553][ T2525] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000208)
[   63.280858][ T2519] syz.9.899: attempt to access beyond end of device
[   63.280858][ T2519] loop9: rw=2049, sector=4285, nr_sectors = 1 limit=256
[   63.290917][ T2528] EXT4-fs error (device loop0) in ext4_setattr:5697: Corrupt filesystem
[   63.311702][ T2519] Buffer I/O error on dev loop9, logical block 4285, lost async page write
[   63.320746][ T2519] syz.9.899: attempt to access beyond end of device
[   63.320746][ T2519] loop9: rw=2049, sector=4286, nr_sectors = 1 limit=256
[   63.320910][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.349289][ T2519] Buffer I/O error on dev loop9, logical block 4286, lost async page write
[   63.369228][ T2519] syz.9.899: attempt to access beyond end of device
[   63.369228][ T2519] loop9: rw=2049, sector=4287, nr_sectors = 1 limit=256
[   63.377439][ T2530] xt_hashlimit: size too large, truncated to 1048576
[   63.392274][ T2519] Buffer I/O error on dev loop9, logical block 4287, lost async page write
[   63.392939][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.425505][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.441330][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.509581][ T2484] device veth0_vlan entered promiscuous mode
[   63.518689][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.527417][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.542011][    T8] device bridge_slave_1 left promiscuous mode
[   63.548290][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.574002][    T8] device bridge_slave_0 left promiscuous mode
[   63.580317][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.590154][    T8] device veth1_macvtap left promiscuous mode
[   63.597091][    T8] device veth0_vlan left promiscuous mode
[   63.760364][ T2484] device veth1_macvtap entered promiscuous mode
[   63.770974][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.784434][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.798416][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.830902][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.849421][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.861293][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.869709][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.909155][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.916605][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.924409][ T2541] device bridge_slave_0 entered promiscuous mode
[   63.933047][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.940173][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.947662][ T2541] device bridge_slave_1 entered promiscuous mode
[   63.995047][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.002160][ T2541] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.009617][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.016768][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.036465][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.044369][  T401] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.052243][  T401] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.063754][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.072404][  T401] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.079471][  T401] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.087114][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.095289][  T401] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.102329][  T401] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.115522][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.128293][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.143006][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.154611][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.163207][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.170744][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.178768][ T2541] device veth0_vlan entered promiscuous mode
[   64.195819][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.205950][ T2541] device veth1_macvtap entered promiscuous mode
[   64.217693][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.229686][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.261600][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   64.287490][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.296092][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.306576][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.315193][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.416676][ T2576] xt_hashlimit: size too large, truncated to 1048576
[   64.572004][    T8] device bridge_slave_1 left promiscuous mode
[   64.578498][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.586301][    T8] device bridge_slave_0 left promiscuous mode
[   64.592663][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.601111][    T8] device veth1_macvtap left promiscuous mode
[   64.607211][    T8] device veth0_vlan left promiscuous mode
[   64.651101][  T294] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   64.716954][ T2593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'.
[   64.780056][ T2600] veth0_to_hsr: Caught tx_queue_len zero misconfig
[   64.807306][ T2602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   64.832099][  T294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.851856][  T294] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   64.870910][  T294] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[   64.884236][  T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.901861][  T294] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[   65.103247][ T2635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'.
[   65.187925][ T2637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'.
[   65.253587][ T2643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   65.306461][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   65.321142][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.329830][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   65.338746][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.347558][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.357185][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.372231][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.380994][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.419047][  T221] smpboot: CPU 1 is now offline
[   65.426644][ T2645] x86: Booting SMP configuration:
[   65.445543][ T2647] set_capacity_and_notify: 8 callbacks suppressed
[   65.445558][ T2647] loop0: detected capacity change from 0 to 512
[   65.464321][ T2645] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   65.489782][ T2647] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.959: iget: bad i_size value: 38620345925642
[   65.508221][ T2647] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.959: couldn't read orphan inode 15 (err -117)
[   65.527716][ T2647] EXT4-fs mount: 20 callbacks suppressed
[   65.527735][ T2647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   65.572990][    T8] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap
[   65.588386][    T8] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   65.601914][    T8] EXT4-fs (loop0): This should not happen!! Data will be lost
[   65.601914][    T8] 
[   65.612724][    T8] EXT4-fs (loop0): Total free blocks count 0
[   65.619247][    T8] EXT4-fs (loop0): Free/Dirty block details
[   65.625766][    T8] EXT4-fs (loop0): free_blocks=0
[   65.640300][    T8] EXT4-fs (loop0): dirty_blocks=1
[   65.652730][    T8] EXT4-fs (loop0): Block reservation details
[   65.660394][ T2666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.956'.
[   65.674787][    T8] EXT4-fs (loop0): i_reserved_data_blocks=1
[   65.682072][  T290] EXT4-fs (loop0): unmounting filesystem.
[   65.704503][  T294] usb 4-1: 1:1: cannot get freq (v2/v3): err -71
[   65.727779][ T2671] loop4: detected capacity change from 0 to 512
[   65.748157][  T294] usb 4-1: USB disconnect, device number 4
[   65.794926][ T2671] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.968: iget: bad i_size value: 38620345925642
[   65.876332][ T2671] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.968: couldn't read orphan inode 15 (err -117)
[   65.938230][ T2671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   66.035569][    T8] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap
[   66.061248][    T8] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   66.083953][    T8] EXT4-fs (loop4): This should not happen!! Data will be lost
[   66.083953][    T8] 
[   66.103573][  T221] smpboot: CPU 1 is now offline
[   66.116895][ T2691] x86: Booting SMP configuration:
[   66.140807][    T8] EXT4-fs (loop4): Total free blocks count 0
[   66.147483][ T2691] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   66.159481][    T8] EXT4-fs (loop4): Free/Dirty block details
[   66.179382][    T8] EXT4-fs (loop4): free_blocks=0
[   66.195205][    T8] EXT4-fs (loop4): dirty_blocks=1
[   66.206701][    T8] EXT4-fs (loop4): Block reservation details
[   66.220177][    T8] EXT4-fs (loop4): i_reserved_data_blocks=1
[   66.234471][ T2212] EXT4-fs (loop4): unmounting filesystem.
[   66.291714][ T2709] loop1: detected capacity change from 0 to 512
[   66.326845][ T2709] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.973: missing EA_INODE flag
[   66.346193][ T2709] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.973: error while reading EA inode 2 err=-117
[   66.378247][ T2709] EXT4-fs (loop1): 1 orphan inode deleted
[   66.404146][ T2709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   66.449500][ T2484] EXT4-fs (loop1): unmounting filesystem.
[   66.522470][ T2726] loop1: detected capacity change from 0 to 1024
[   66.534043][ T2727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'.
[   66.548669][ T2726] EXT4-fs: Ignoring removed oldalloc option
[   66.566264][ T2726] EXT4-fs: Ignoring removed oldalloc option
[   66.572615][ T2726] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   66.588325][  T221] smpboot: CPU 1 is now offline
[   66.597544][ T2729] x86: Booting SMP configuration:
[   66.603351][ T2729] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   66.616501][ T2726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   66.638123][ T2734] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000004
[   66.638240][ T2737] loop0: detected capacity change from 0 to 256
[   66.752368][ T2745] device vlan0 entered promiscuous mode
[   66.761640][ T2484] EXT4-fs (loop1): unmounting filesystem.
[   66.901520][  T294] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   66.909516][  T420] smpboot: CPU 1 is now offline
[   66.922608][ T2757] x86: Booting SMP configuration:
[   66.958522][ T2757] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   66.994592][ T2765] xt_hashlimit: size too large, truncated to 1048576
[   67.048070][ T2771] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000004
[   67.098240][ T2775] loop9: detected capacity change from 0 to 256
[   67.113529][  T294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.142448][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   67.149798][  T294] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   67.161264][  T294] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[   67.174166][  T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.216828][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   67.226880][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.227135][  T294] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor
[   67.247372][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   67.255700][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.270703][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.279480][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.288168][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.296975][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.337702][ T2789] device vlan0 entered promiscuous mode
[   67.390202][  T221] smpboot: CPU 1 is now offline
[   67.401963][ T2796] x86: Booting SMP configuration:
[   67.431099][ T2796] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   67.487902][ T2804] loop1: detected capacity change from 0 to 1024
[   67.523042][ T2804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   67.546787][ T2484] EXT4-fs (loop1): unmounting filesystem.
[   67.583506][ T2811] loop0: detected capacity change from 0 to 1024
[   67.591747][ T2811] EXT4-fs: Ignoring removed oldalloc option
[   67.603224][ T2811] EXT4-fs: Ignoring removed oldalloc option
[   67.609550][ T2811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.636729][ T2815] loop1: detected capacity change from 0 to 256
[   67.644329][ T2811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   67.649426][ T2815] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   67.700236][ T2815] syz.1.1015: attempt to access beyond end of device
[   67.700236][ T2815] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[   67.720546][ T2815] syz.1.1015: attempt to access beyond end of device
[   67.720546][ T2815] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   67.727530][  T290] EXT4-fs (loop0): unmounting filesystem.
[   67.747500][ T2815] syz.1.1015: attempt to access beyond end of device
[   67.747500][ T2815] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   67.764915][ T2815] syz.1.1015: attempt to access beyond end of device
[   67.764915][ T2815] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   67.779361][ T2815] syz.1.1015: attempt to access beyond end of device
[   67.779361][ T2815] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   67.800335][ T2825] loop0: detected capacity change from 0 to 1024
[   67.800929][ T2823] exFAT-fs (loop1): hint_cluster is invalid (1)
[   67.819153][ T2825] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   67.829420][ T2823] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   67.842186][ T2825] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.855870][ T2823] exFAT-fs (loop1): Filesystem has been set read-only
[   67.858106][ T2825] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.1018: lblock 3 mapped to illegal pblock 3 (length 3)
[   67.866051][ T2823] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 9, err : -5)
[   67.877860][ T2825] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   67.900133][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   67.909534][ T2825] EXT4-fs (loop0): This should not happen!! Data will be lost
[   67.909534][ T2825] 
[   67.911601][ T2815] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 0, err : -5)
[   67.922547][ T2829] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.1018: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   67.929530][ T2823] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   67.956448][ T2823] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 8, err : -5)
[   67.966623][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   67.982507][ T2815] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 0, err : -5)
[   67.992672][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.001425][ T2815] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 1, err : -5)
[   68.003064][ T2829] EXT4-fs error (device loop0) in ext4_setattr:5697: Corrupt filesystem
[   68.011919][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.028917][ T2815] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 2, err : -5)
[   68.041034][  T294] usb 5-1: 1:1: cannot get freq (v2/v3): err -71
[   68.047468][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.056577][ T2815] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 3, err : -5)
[   68.066686][  T294] usb 5-1: USB disconnect, device number 4
[   68.085269][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.101324][ T2815] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 4, err : -5)
[   68.141182][  T290] EXT4-fs (loop0): unmounting filesystem.
[   68.149178][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.170790][ T2815] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 5, err : -5)
[   68.182045][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.203822][  T221] smpboot: CPU 1 is now offline
[   68.211677][ T2833] x86: Booting SMP configuration:
[   68.216864][ T2833] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   68.224918][ T2815] exFAT-fs (loop1): error, failed to bmap (inode : ffff88813301c0d0 iblock : 6, err : -5)
[   68.240904][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.261022][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.272149][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.290115][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.300223][ T2835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   68.309354][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.309844][ T2835] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.330516][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.354898][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.370826][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.394817][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.394828][ T2831] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   68.394853][ T2831] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   68.403730][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.428701][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.437942][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.438688][  T290] EXT4-fs (loop0): unmounting filesystem.
[   68.447218][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.461748][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.465231][ T2831] F2FS-fs (loop3): invalid crc value
[   68.470551][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.484497][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.493336][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.503644][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.513283][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.517812][ T2831] F2FS-fs (loop3): Found nat_bits in checkpoint
[   68.522632][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.538020][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.552090][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.559825][ T2831] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   68.560968][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.576961][ T2831] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   68.584617][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.607984][ T2815] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000)
[   68.631948][ T2852] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[   68.665943][ T1989] EXT4-fs (loop9): unmounting filesystem.
[   68.698858][ T2863] EXT4-fs: Ignoring removed bh option
[   68.722173][ T2863] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   68.745314][ T1989] EXT4-fs (loop9): unmounting filesystem.
[   68.777206][    T6] smpboot: CPU 1 is now offline
[   68.789091][ T2869] x86: Booting SMP configuration:
[   68.807746][ T2869] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   68.888577][ T2881] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   68.891476][ T2879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   68.898939][ T2881] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.912212][ T2879] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.957181][ T2879] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.1036: lblock 3 mapped to illegal pblock 3 (length 3)
[   68.972816][ T1989] EXT4-fs (loop9): unmounting filesystem.
[   68.978828][ T2879] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   68.991517][ T2879] EXT4-fs (loop3): This should not happen!! Data will be lost
[   68.991517][ T2879] 
[   69.005902][ T2879] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.1036: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   69.024675][ T2879] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem
[   69.043622][ T2541] EXT4-fs (loop3): unmounting filesystem.
[   69.087742][ T2892] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   69.120396][ T2892] syz.3.1040: attempt to access beyond end of device
[   69.120396][ T2892] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[   69.135194][ T2892] syz.3.1040: attempt to access beyond end of device
[   69.135194][ T2892] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   69.149812][ T2892] syz.3.1040: attempt to access beyond end of device
[   69.149812][ T2892] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   69.164772][ T2892] syz.3.1040: attempt to access beyond end of device
[   69.164772][ T2892] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   69.178801][ T2892] syz.3.1040: attempt to access beyond end of device
[   69.178801][ T2892] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   69.192921][ T2892] syz.3.1040: attempt to access beyond end of device
[   69.192921][ T2892] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   69.193909][ T2896] exFAT-fs (loop3): hint_cluster is invalid (1)
[   69.213804][ T2896] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.222805][ T2896] exFAT-fs (loop3): Filesystem has been set read-only
[   69.229808][ T2896] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 9, err : -5)
[   69.239951][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.248798][ T2892] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 0, err : -5)
[   69.259103][ T2896] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.268081][ T2896] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 8, err : -5)
[   69.278495][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.287386][ T2892] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 0, err : -5)
[   69.297520][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.306673][ T2892] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 1, err : -5)
[   69.318482][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.328007][ T2892] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 2, err : -5)
[   69.338029][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.347075][    T6] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   69.355473][ T2892] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 3, err : -5)
[   69.367155][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.376017][ T2892] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 4, err : -5)
[   69.386053][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.394918][ T2892] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 5, err : -5)
[   69.405249][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.414092][ T2892] exFAT-fs (loop3): error, failed to bmap (inode : ffff88814005f670 iblock : 6, err : -5)
[   69.424189][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.433522][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.442520][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.451455][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.460171][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.469092][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.477952][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.486814][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.496084][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.512640][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.521659][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.528598][ T2908] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d)
[   69.530428][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.551971][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.561074][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.572367][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.583629][    T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   69.594679][    T6] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   69.595629][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.605865][    T6] usb 10-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[   69.629221][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.633069][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.639492][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.656116][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.666995][    T6] usb 10-1: 1:1 : no or invalid class specific endpoint descriptor
[   69.675590][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.691089][ T2923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1054'.
[   69.695726][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.717370][ T2925] FAULT_INJECTION: forcing a failure.
[   69.717370][ T2925] name failslab, interval 1, probability 0, space 0, times 0
[   69.730188][ T2925] CPU: 1 PID: 2925 Comm: syz.4.1055 Not tainted syzkaller #0
[   69.737595][ T2925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   69.739704][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.747756][ T2925] Call Trace:
[   69.747768][ T2925]  <TASK>
[   69.747775][ T2925]  __dump_stack+0x21/0x24
[   69.747810][ T2925]  dump_stack_lvl+0x110/0x170
[   69.772118][ T2925]  ? __cfi_dump_stack_lvl+0x8/0x8
[   69.777287][ T2925]  dump_stack+0x15/0x24
[   69.781502][ T2925]  should_fail_ex+0x3bf/0x510
[   69.783184][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.786217][ T2925]  __should_failslab+0xac/0xf0
[   69.786250][ T2925]  should_failslab+0x9/0x20
[   69.804282][ T2925]  __kmem_cache_alloc_node+0x3d/0x2d0
[   69.805220][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.809695][ T2925]  ? assoc_array_insert+0x8f/0x3340
[   69.823768][ T2925]  ? assoc_array_insert+0x8f/0x3340
[   69.829004][ T2925]  kmalloc_trace+0x29/0xb0
[   69.832416][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.833888][ T2925]  assoc_array_insert+0x8f/0x3340
[   69.847704][ T2925]  ? rwsem_read_trylock+0x2af/0x640
[   69.852818][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.853380][ T2925]  ? __kasan_check_write+0x14/0x20
[   69.853408][ T2925]  ? mutex_lock+0x93/0x1b0
[   69.872116][ T2925]  __key_link_begin+0xe1/0x210
[   69.872731][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.876908][ T2925]  key_create_or_update+0x4e2/0x9f0
[   69.876933][ T2925]  ? __cfi_key_create_or_update+0x10/0x10
[   69.888561][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.890826][ T2925]  ? __cfi_lookup_user_key+0x10/0x10
[   69.890861][ T2925]  ? __kasan_check_write+0x14/0x20
[   69.890883][ T2925]  __se_sys_add_key+0x34b/0x410
[   69.897107][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.905442][ T2925]  ? __x64_sys_add_key+0xd0/0xd0
[   69.905469][ T2925]  ? xfd_validate_state+0x70/0x150
[   69.905493][ T2925]  ? __kasan_check_write+0x14/0x20
[   69.916079][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.916105][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.920939][ T2925]  ? fpregs_restore_userregs+0x128/0x260
[   69.920977][ T2925]  __x64_sys_add_key+0xbf/0xd0
[   69.920999][ T2925]  x64_sys_call+0x6aa/0x9a0
[   69.930372][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.934874][ T2925]  do_syscall_64+0x4c/0xa0
[   69.934896][ T2925]  ? clear_bhb_loop+0x30/0x80
[   69.934917][ T2925]  ? clear_bhb_loop+0x30/0x80
[   69.934937][ T2925]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   69.934965][ T2925] RIP: 0033:0x7f24f959e559
[   69.934982][ T2925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.934999][ T2925] RSP: 002b:00007f24fa3c5028 EFLAGS: 00000246
[   69.940570][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.945403][ T2925]  ORIG_RAX: 00000000000000f8
[   69.945414][ T2925] RAX: ffffffffffffffda RBX: 00007f24f9825fa0 RCX: 00007f24f959e559
[   69.945429][ T2925] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000200000000540
[   69.945441][ T2925] RBP: 00007f24f96358b0 R08: fffffffffffffffe R09: 0000000000000000
[   69.945454][ T2925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.945474][ T2925] R13: 00007f24f9826038 R14: 00007f24f9825fa0 R15: 00007ffc8c8d9338
[   69.954716][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   69.962964][ T2925]  </TASK>
[   70.105487][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   70.117429][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   70.126638][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   70.136089][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   70.145228][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   70.154123][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   70.163100][ T2892] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   70.174758][ T2936] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d)
[   70.269768][ T2949] EXT4-fs: Ignoring removed bh option
[   70.286403][ T2949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   70.307686][ T2541] EXT4-fs (loop3): unmounting filesystem.
[   70.433221][ T2967] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   70.454669][ T2967] syz.0.1071: attempt to access beyond end of device
[   70.454669][ T2967] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[   70.469483][ T2967] syz.0.1071: attempt to access beyond end of device
[   70.469483][ T2967] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   70.485317][ T2967] syz.0.1071: attempt to access beyond end of device
[   70.485317][ T2967] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   70.499715][ T2967] syz.0.1071: attempt to access beyond end of device
[   70.499715][ T2967] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   70.521056][ T2974] set_capacity_and_notify: 13 callbacks suppressed
[   70.521074][ T2974] loop3: detected capacity change from 0 to 128
[   70.536315][    T6] usb 10-1: 1:1: cannot get freq (v2/v3): err -71
[   70.546160][ T2972] exFAT-fs (loop0): hint_cluster is invalid (1)
[   70.557176][    T6] usb 10-1: USB disconnect, device number 2
[   70.572451][ T2972] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.582799][ T2974] Buffer I/O error on dev loop3, logical block 71, lost async page write
[   70.588869][ T2972] exFAT-fs (loop0): Filesystem has been set read-only
[   70.598554][ T2972] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 9, err : -5)
[   70.609088][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.618103][ T2967] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 0, err : -5)
[   70.628651][ T2972] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.637772][ T2972] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 8, err : -5)
[   70.648236][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.657608][ T2967] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 0, err : -5)
[   70.667635][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.676447][ T2967] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 1, err : -5)
[   70.686780][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.696033][ T2967] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 2, err : -5)
[   70.706341][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.715239][ T2967] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 3, err : -5)
[   70.725471][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.735947][ T2967] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 4, err : -5)
[   70.743330][ T2984] loop3: detected capacity change from 0 to 256
[   70.750835][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.761893][ T2967] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 5, err : -5)
[   70.772095][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.781706][ T2967] exFAT-fs (loop0): error, failed to bmap (inode : ffff88813301cd30 iblock : 6, err : -5)
[   70.801732][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.815702][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.825089][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.834886][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.843822][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.854608][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.855332][ T2989] loop3: detected capacity change from 0 to 128
[   70.863667][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.878814][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.887842][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.897108][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.906135][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.916375][ T2989] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   70.921811][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.936933][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.947241][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.957159][ T2989] FAT-fs (loop3): error, parent dir link count too low (2)
[   70.957605][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.974498][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.979586][ T2989] FAT-fs (loop3): Filesystem has been set read-only
[   70.985246][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   70.999977][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.019471][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.028865][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.039275][ T2541] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   71.048981][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.051055][ T2987] loop1: detected capacity change from 0 to 40427
[   71.058665][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.073183][ T2987] F2FS-fs (loop1): Unrecognized mount option "resg)d=q¢*á£ÊcÿúpÙ§!d" or missing value
[   71.082933][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.098674][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.108163][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.117343][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.126413][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.135765][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.144885][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.153970][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.163440][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.172508][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.181742][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.190616][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.199915][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.209022][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.228302][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.247047][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.264556][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.274744][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.283698][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.293299][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.302812][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.316731][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.325897][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.335706][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.345070][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.354147][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.363294][ T2967] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   71.606125][ T3032] FAULT_INJECTION: forcing a failure.
[   71.606125][ T3032] name failslab, interval 1, probability 0, space 0, times 0
[   71.619092][ T3032] CPU: 1 PID: 3032 Comm: syz.9.1101 Not tainted syzkaller #0
[   71.626772][ T3032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   71.636950][ T3032] Call Trace:
[   71.640245][ T3032]  <TASK>
[   71.643526][ T3032]  __dump_stack+0x21/0x24
[   71.647964][ T3032]  dump_stack_lvl+0x110/0x170
[   71.652857][ T3032]  ? __cfi_dump_stack_lvl+0x8/0x8
[   71.658003][ T3032]  dump_stack+0x15/0x24
[   71.662288][ T3032]  should_fail_ex+0x3bf/0x510
[   71.666990][ T3032]  __should_failslab+0xac/0xf0
[   71.671756][ T3032]  should_failslab+0x9/0x20
[   71.676272][ T3032]  __kmem_cache_alloc_node+0x3d/0x2d0
[   71.681652][ T3032]  ? selinux_key_alloc+0x56/0x190
[   71.686678][ T3032]  ? selinux_key_alloc+0x56/0x190
[   71.691756][ T3032]  kmalloc_trace+0x29/0xb0
[   71.696179][ T3032]  selinux_key_alloc+0x56/0x190
[   71.701042][ T3032]  security_key_alloc+0x85/0xc0
[   71.706094][ T3032]  key_alloc+0x73e/0xf00
[   71.710435][ T3032]  keyring_alloc+0x47/0xb0
[   71.714844][ T3032]  lookup_user_key+0x4ed/0x1150
[   71.719691][ T3032]  ? __cfi_lookup_user_key+0x10/0x10
[   71.725006][ T3032]  ? __cfi_lookup_user_key_possessed+0x10/0x10
[   71.731266][ T3032]  ? __kasan_check_write+0x14/0x20
[   71.736749][ T3032]  __se_sys_add_key+0x311/0x410
[   71.741696][ T3032]  ? __x64_sys_add_key+0xd0/0xd0
[   71.746633][ T3032]  ? ksys_write+0x1fa/0x260
[   71.751158][ T3032]  ? __kasan_check_write+0x14/0x20
[   71.756268][ T3032]  ? fpregs_restore_userregs+0x128/0x260
[   71.761937][ T3032]  __x64_sys_add_key+0xbf/0xd0
[   71.766803][ T3032]  x64_sys_call+0x6aa/0x9a0
[   71.771311][ T3032]  do_syscall_64+0x4c/0xa0
[   71.775748][ T3032]  ? clear_bhb_loop+0x30/0x80
[   71.780544][ T3032]  ? clear_bhb_loop+0x30/0x80
[   71.785247][ T3032]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.791151][ T3032] RIP: 0033:0x7f41a5f9e559
[   71.795654][ T3032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.815354][ T3032] RSP: 002b:00007f41a6e5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   71.823775][ T3032] RAX: ffffffffffffffda RBX: 00007f41a6225fa0 RCX: 00007f41a5f9e559
[   71.831858][ T3032] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000200000000540
[   71.839892][ T3032] RBP: 00007f41a60358b0 R08: fffffffffffffffe R09: 0000000000000000
[   71.848064][ T3032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.856172][ T3032] R13: 00007f41a6226038 R14: 00007f41a6225fa0 R15: 00007fff736896e8
[   71.864155][ T3032]  </TASK>
[   71.867247][  T420] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   72.070776][  T420] usb 2-1: Using ep0 maxpacket: 16
[   72.077206][  T420] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[   72.087783][  T420] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   72.096901][  T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.104952][  T420] usb 2-1: Product: syz
[   72.109168][  T420] usb 2-1: Manufacturer: syz
[   72.113823][  T420] usb 2-1: SerialNumber: syz
[   72.118945][  T420] usb 2-1: config 0 descriptor??
[   72.124925][  T420] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   72.132762][  T420] usb 2-1: Detected FT232R
[   72.169978][ T3039] loop9: detected capacity change from 0 to 512
[   72.180056][ T3039] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   72.325794][  T420] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   72.490743][  T402] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   72.536098][  T420] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   72.575474][ T3055] loop0: detected capacity change from 0 to 128
[   72.600346][ T3035] loop4: detected capacity change from 0 to 131072
[   72.607939][ T3035] F2FS-fs (loop4): Test dummy encryption mode enabled
[   72.615591][ T3035] F2FS-fs (loop4): invalid crc value
[   72.632213][ T3035] F2FS-fs (loop4): Found nat_bits in checkpoint
[   72.647306][ T3055] Buffer I/O error on dev loop0, logical block 71, lost async page write
[   72.672131][  T402] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   72.682089][  T402] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   72.691241][ T3066] FAULT_INJECTION: forcing a failure.
[   72.691241][ T3066] name failslab, interval 1, probability 0, space 0, times 0
[   72.692178][  T402] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.704746][ T3035] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   72.718220][ T3066] CPU: 1 PID: 3066 Comm: syz.3.1112 Not tainted syzkaller #0
[   72.733137][ T3066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   72.737054][  T420] usb 2-1: USB disconnect, device number 3
[   72.743301][ T3066] Call Trace:
[   72.743314][ T3066]  <TASK>
[   72.743321][ T3066]  __dump_stack+0x21/0x24
[   72.743356][ T3066]  dump_stack_lvl+0x110/0x170
[   72.743382][ T3066]  ? __cfi_dump_stack_lvl+0x8/0x8
[   72.764055][  T420] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   72.764612][ T3066]  dump_stack+0x15/0x24
[   72.771478][  T420] ftdi_sio 2-1:0.0: device disconnected
[   72.779253][ T3066]  should_fail_ex+0x3bf/0x510
[   72.794070][ T3066]  __should_failslab+0xac/0xf0
[   72.798942][ T3066]  should_failslab+0x9/0x20
[   72.803454][ T3066]  __kmem_cache_alloc_node+0x3d/0x2d0
[   72.808824][ T3066]  ? assoc_array_insert+0x8f/0x3340
[   72.814109][ T3066]  ? assoc_array_insert+0x8f/0x3340
[   72.819407][ T3066]  kmalloc_trace+0x29/0xb0
[   72.823820][ T3066]  assoc_array_insert+0x8f/0x3340
[   72.828905][ T3066]  ? rwsem_read_trylock+0x2af/0x640
[   72.834126][ T3066]  ? __kasan_check_write+0x14/0x20
[   72.839255][ T3066]  ? mutex_lock+0x93/0x1b0
[   72.843695][ T3066]  __key_link_begin+0xe1/0x210
[   72.848475][ T3066]  key_create_or_update+0x4e2/0x9f0
[   72.853695][ T3066]  ? __cfi_key_create_or_update+0x10/0x10
[   72.859404][ T3066]  ? __cfi_lookup_user_key+0x10/0x10
[   72.864688][ T3066]  ? __kasan_check_write+0x14/0x20
[   72.869797][ T3066]  __se_sys_add_key+0x34b/0x410
[   72.874639][ T3066]  ? __x64_sys_add_key+0xd0/0xd0
[   72.879574][ T3066]  ? xfd_validate_state+0x70/0x150
[   72.884735][ T3066]  ? __kasan_check_write+0x14/0x20
[   72.889862][ T3066]  ? fpregs_restore_userregs+0x128/0x260
[   72.895605][ T3066]  __x64_sys_add_key+0xbf/0xd0
[   72.900470][ T3066]  x64_sys_call+0x6aa/0x9a0
[   72.905325][ T3066]  do_syscall_64+0x4c/0xa0
[   72.917760][ T3066]  ? clear_bhb_loop+0x30/0x80
[   72.922970][ T3066]  ? clear_bhb_loop+0x30/0x80
[   72.927829][ T3066]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   72.933716][ T3066] RIP: 0033:0x7f88a499e559
[   72.938222][ T3066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.957930][ T3066] RSP: 002b:00007f88a590b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   72.966493][ T3066] RAX: ffffffffffffffda RBX: 00007f88a4c25fa0 RCX: 00007f88a499e559
[   72.974576][ T3066] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000200000000540
[   72.982646][ T3066] RBP: 00007f88a4a358b0 R08: fffffffffffffffe R09: 0000000000000000
[   72.990614][ T3066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.998757][ T3066] R13: 00007f88a4c26038 R14: 00007f88a4c25fa0 R15: 00007ffc0b2f5c58
[   73.006735][ T3066]  </TASK>
[   73.010780][   T28] kauditd_printk_skb: 17 callbacks suppressed
[   73.010794][   T28] audit: type=1400 audit(1700000029.130:535): avc:  denied  { ioctl } for  pid=3040 comm="syz.9.1105" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   73.017434][  T402] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   73.070757][  T402] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   73.079183][  T402] usb 10-1: Product: syz
[   73.095398][  T402] usb 10-1: Manufacturer: syz
[   73.100130][  T402] usb 10-1: SerialNumber: syz
[   73.252409][   T28] audit: type=1400 audit(1700000029.370:536): avc:  denied  { relabelfrom } for  pid=3083 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   73.272854][   T28] audit: type=1400 audit(1700000029.370:537): avc:  denied  { relabelto } for  pid=3083 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   73.318672][  T402] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   73.422876][   T28] audit: type=1400 audit(1700000029.540:538): avc:  denied  { unmount } for  pid=2484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   73.543692][    T6] usb 10-1: USB disconnect, device number 3
[   73.554753][    T6] usblp0: removed
[   73.951560][ T3131] fuse: Invalid group_id
[   74.031569][   T28] audit: type=1400 audit(1700000030.150:539): avc:  denied  { read write } for  pid=3141 comm="syz.0.1155" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   74.064105][   T28] audit: type=1400 audit(1700000030.150:540): avc:  denied  { open } for  pid=3141 comm="syz.0.1155" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   74.093585][ T3152] loop1: detected capacity change from 0 to 1024
[   74.101873][ T3152] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   74.122212][ T3152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   74.132766][ T3152] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   74.148967][ T2484] EXT4-fs (loop1): unmounting filesystem.
[   74.213339][ T3169] x_tables: duplicate entry at hook 4
[   74.219612][ T3169] ext2: Unexpected value for 'acl'
[   74.262816][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[   74.320728][  T294] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   74.460759][  T402] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   74.512001][  T294] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.522755][  T294] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   74.532434][  T294] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   74.542273][  T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   74.550268][  T294] usb 1-1: SerialNumber: syz
[   74.641847][  T402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   74.653407][  T402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.663704][  T402] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   74.672902][  T402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.682207][  T402] usb 2-1: config 0 descriptor??
[   74.759753][ T3142] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   74.766641][   T10] Bluetooth: hci1: Frame reassembly failed (-84)
[   75.021693][ T3188] ptp ptp0: only physical clock in use now
[   75.210549][ T3200] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1171'.
[   75.220544][ T3200] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1171'.
[   75.291277][  T402] usb 2-1: string descriptor 0 read error: -22
[   75.491353][  T402] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71
[   75.500248][  T402] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71
[   75.508460][  T402] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71
[   75.517332][  T402] uclogic 0003:256C:006D.0004: failed probing parameters: -71
[   75.524962][  T402] uclogic: probe of 0003:256C:006D.0004 failed with error -71
[   75.534020][  T402] usb 2-1: USB disconnect, device number 4
[   75.854779][ T3234] loop3: detected capacity change from 0 to 512
[   75.872462][ T3234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   75.881966][ T3234] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.904907][ T2541] EXT4-fs (loop3): unmounting filesystem.
[   75.931135][ T3240] loop3: detected capacity change from 0 to 128
[   75.942838][ T3240] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   76.073172][ T3256] loop1: detected capacity change from 0 to 256
[   76.092993][ T3256] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   76.171269][ T3248] loop3: detected capacity change from 0 to 40427
[   76.191992][ T3248] F2FS-fs (loop3): invalid crc value
[   76.217016][ T3248] F2FS-fs (loop3): Found nat_bits in checkpoint
[   76.285102][ T3248] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   76.310277][ T3269] loop9: detected capacity change from 0 to 256
[   76.316861][ T3176] Bluetooth: hci0: command 0x1003 tx timeout
[   76.320867][  T326] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   76.339816][ T3273] loop1: detected capacity change from 0 to 512
[   76.357467][ T3275] loop4: detected capacity change from 0 to 512
[   76.371039][ T2541] bio_check_eod: 188 callbacks suppressed
[   76.371058][ T2541] syz-executor: attempt to access beyond end of device
[   76.371058][ T2541] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   76.375734][ T3269] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   76.381616][ T3275] EXT4-fs: Ignoring removed mblk_io_submit option
[   76.425974][ T3273] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   76.434976][ T3273] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.1203: corrupted in-inode xattr
[   76.455317][ T3275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.465139][ T3273] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1203: couldn't read orphan inode 15 (err -117)
[   76.488367][ T3273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   76.532402][ T3275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   76.542325][ T2484] EXT4-fs (loop1): unmounting filesystem.
[   76.548259][ T3275] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.610638][ T3284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1205'.
[   76.672046][ T3278] loop9: detected capacity change from 0 to 40427
[   76.683093][ T3278] F2FS-fs (loop9): fault_injection options not supported
[   76.690627][ T3278] F2FS-fs (loop9): fault_type options not supported
[   76.703052][ T3278] F2FS-fs (loop9): invalid crc value
[   76.709261][ T2212] EXT4-fs (loop4): unmounting filesystem.
[   76.717272][ T3290] loop3: detected capacity change from 0 to 256
[   76.725296][ T3278] F2FS-fs (loop9): Found nat_bits in checkpoint
[   76.790714][  T326] Bluetooth: hci1: command 0x1003 tx timeout
[   76.790743][   T45] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   76.806745][  T294] usb 1-1: 0:2 : does not exist
[   76.814447][  T294] usb 1-1: USB disconnect, device number 5
[   76.833078][ T3278] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   76.939690][ T3298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'.
[   76.965704][ T3298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'.
[   76.976971][ T3298] netlink: 'syz.1.1211': attribute type 15 has an invalid length.
[   77.043459][  T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   77.196134][ T3296] loop3: detected capacity change from 0 to 40427
[   77.212324][ T3296] F2FS-fs (loop3): invalid crc value
[   77.242404][ T3296] F2FS-fs (loop3): Found nat_bits in checkpoint
[   77.315732][ T3296] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   77.379999][ T3317] wg0: Caught tx_queue_len zero misconfig
[   77.415514][ T3296] syz.3.1210: attempt to access beyond end of device
[   77.415514][ T3296] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   77.455603][ T3305] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[   77.475395][ T3305] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   77.490893][ T3305] F2FS-fs (loop9): invalid crc value
[   77.511934][ T3321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   77.558526][ T3305] F2FS-fs (loop9): Found nat_bits in checkpoint
[   77.614066][  T290] EXT4-fs (loop0): unmounting filesystem.
[   77.625898][ T3305] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[   77.634743][ T3305] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   77.697467][ T3331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   77.720878][ T3331] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.754135][ T2212] EXT4-fs (loop4): unmounting filesystem.
[   77.821750][ T3346] veth1_to_bond: Caught tx_queue_len zero misconfig
[   77.988985][ T3366] FAULT_INJECTION: forcing a failure.
[   77.988985][ T3366] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   78.005480][ T3364] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[   78.029817][ T3364] EXT4-fs (loop9): invalid journal inode
[   78.031047][ T3366] CPU: 0 PID: 3366 Comm: syz.3.1236 Not tainted syzkaller #0
[   78.041842][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   78.042872][ T3366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   78.042887][ T3366] Call Trace:
[   78.050220][ T3364] EXT4-fs (loop9): can't get journal size
[   78.060135][ T3366]  <TASK>
[   78.060150][ T3366]  __dump_stack+0x21/0x24
[   78.060186][ T3366]  dump_stack_lvl+0x110/0x170
[   78.060210][ T3366]  ? __cfi_dump_stack_lvl+0x8/0x8
[   78.086394][ T3366]  ? vfs_write+0xa51/0xd00
[   78.088593][ T3370] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x5a
[   78.090933][ T3366]  dump_stack+0x15/0x24
[   78.090969][ T3366]  should_fail_ex+0x3bf/0x510
[   78.090991][ T3366]  should_fail+0xb/0x10
[   78.110303][ T3366]  should_fail_usercopy+0x1a/0x20
[   78.115381][ T3366]  strncpy_from_user+0x24/0x2c0
[   78.120366][ T3366]  __se_sys_add_key+0xd8/0x410
[   78.121904][ T3364] EXT4-fs error (device loop9): ext4_protect_reserved_inode:182: inode #2: comm syz.9.1224: blocks 4-4 from inode overlap system zone
[   78.125173][ T3366]  ? __x64_sys_add_key+0xd0/0xd0
[   78.139402][ T3364] EXT4-fs (loop9): Remounting filesystem read-only
[   78.144035][ T3366]  ? xfd_validate_state+0x70/0x150
[   78.144070][ T3366]  ? __kasan_check_write+0x14/0x20
[   78.144090][ T3366]  ? fpregs_restore_userregs+0x128/0x260
[   78.166617][ T3366]  __x64_sys_add_key+0xbf/0xd0
[   78.171492][ T3366]  x64_sys_call+0x6aa/0x9a0
[   78.176090][ T3366]  do_syscall_64+0x4c/0xa0
[   78.180504][ T3366]  ? clear_bhb_loop+0x30/0x80
[   78.185183][ T3366]  ? clear_bhb_loop+0x30/0x80
[   78.189988][ T3366]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   78.195913][ T3366] RIP: 0033:0x7f88a499e559
[   78.200328][ T3366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.220287][ T3366] RSP: 002b:00007f88a590b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   78.228993][ T3366] RAX: ffffffffffffffda RBX: 00007f88a4c25fa0 RCX: 00007f88a499e559
[   78.236975][ T3366] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[   78.246008][ T3366] RBP: 00007f88a4a358b0 R08: ffffffffffffffff R09: 0000000000000000
[   78.254167][ T3366] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000
[   78.262429][ T3366] R13: 00007f88a4c26038 R14: 00007f88a4c25fa0 R15: 00007ffc0b2f5c58
[   78.270582][ T3366]  </TASK>
[   78.274899][  T402] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   78.276749][ T3364] EXT4-fs (loop9): failed to initialize system zone (-117)
[   78.291003][ T3364] EXT4-fs (loop9): mount failed
[   78.316005][ T3373] ext4: Unknown parameter 'hash'
[   78.444894][ T3394] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   78.480738][  T402] usb 2-1: Using ep0 maxpacket: 16
[   78.487392][  T402] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.499477][  T402] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.520113][  T402] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   78.536293][  T402] usb 2-1: config 0 interface 0 has no altsetting 0
[   78.543468][  T402] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   78.552999][  T402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.572225][  T402] usb 2-1: config 0 descriptor??
[   78.726492][ T3429] input: syz0 as /devices/virtual/input/input10
[   78.763179][ T3433] 
[   78.782808][ T3358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.794691][ T3358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.810823][  T420] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   78.993019][  T420] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   79.017139][  T420] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   79.020741][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   79.036618][  T420] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[   79.049998][  T420] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   79.059753][  T420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.068000][  T420] usb 4-1: Product: syz
[   79.072428][  T420] usb 4-1: Manufacturer: syz
[   79.077188][  T420] usb 4-1: SerialNumber: syz
[   79.091448][  T420] cdc_ncm 4-1:1.0: skipping garbage
[   79.130715][  T294] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   79.221774][   T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.238417][  T402] usb 2-1: USB disconnect, device number 5
[   79.246579][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   79.258854][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   79.271661][   T24] usb 5-1: Product: syz
[   79.275932][   T24] usb 5-1: Manufacturer: syz
[   79.281011][   T24] usb 5-1: SerialNumber: syz
[   79.287559][ T3401] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   79.310728][  T294] usb 1-1: Using ep0 maxpacket: 32
[   79.317852][  T294] usb 1-1: config 0 interface 0 altsetting 132 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   79.329980][  T294] usb 1-1: config 0 interface 0 altsetting 132 endpoint 0x2 has an invalid bInterval 157, changing to 11
[   79.341756][  T294] usb 1-1: config 0 interface 0 altsetting 132 endpoint 0x2 has invalid wMaxPacketSize 0
[   79.352501][  T294] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.359403][  T294] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[   79.369026][  T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.382119][  T294] usb 1-1: config 0 descriptor??
[   79.503435][   T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   79.526048][   T24] usb 5-1: USB disconnect, device number 5
[   79.534955][   T24] usblp0: removed
[   79.795309][  T294] usbhid 1-1:0.0: can't add hid device: -71
[   79.805464][  T294] usbhid: probe of 1-1:0.0 failed with error -71
[   79.821774][  T294] usb 1-1: USB disconnect, device number 6
[   79.829400][ T1279] Bluetooth: hci0: Frame reassembly failed (-84)
[   79.918747][ T3401] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   80.128645][  T420] cdc_ncm 4-1:1.0: bind() failure
[   80.135938][  T420] cdc_ncm: probe of 4-1:1.1 failed with error -71
[   80.142962][  T420] cdc_mbim: probe of 4-1:1.1 failed with error -71
[   80.151402][  T420] usb 4-1: USB disconnect, device number 5
[   80.320775][  T294] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   80.489695][ T3465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   80.500478][ T3465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[   80.508812][ T3465] System zones: 1-12
[   80.513432][ T3465] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1281: bad orphan inode 131072
[   80.521861][  T294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.524398][ T3465] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   80.535249][  T294] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.555318][  T294] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[   80.560609][ T3465] overlayfs: upper fs needs to support d_type.
[   80.570921][  T294] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   80.585503][  T294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.593034][  T290] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /284/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   80.594344][  T294] usb 5-1: Product: syz
[   80.624141][  T294] usb 5-1: Manufacturer: syz
[   80.628840][  T294] usb 5-1: SerialNumber: syz
[   80.683422][ T2026] EXT4-fs (loop0): unmounting filesystem.
[   81.141232][  T401] device bridge_slave_1 left promiscuous mode
[   81.147504][  T401] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.155080][  T401] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.163138][  T401] device veth1_macvtap left promiscuous mode
[   81.169356][  T401] device veth0_vlan left promiscuous mode
[   81.233982][ T3469] set_capacity_and_notify: 7 callbacks suppressed
[   81.234004][ T3469] loop9: detected capacity change from 0 to 256
[   81.248955][ T3474] loop3: detected capacity change from 0 to 256
[   81.314959][ T3476] loop9: detected capacity change from 0 to 512
[   81.359741][ T3476] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   81.379043][ T3476] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.415464][ T1989] EXT4-fs (loop9): unmounting filesystem.
[   81.425397][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.432921][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.441430][ T3477] device bridge_slave_0 entered promiscuous mode
[   81.449076][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.456667][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.465108][ T3477] device bridge_slave_1 entered promiscuous mode
[   81.535140][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.542321][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.549708][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.556767][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.597179][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.605428][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.613052][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.631907][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.640419][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.647570][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.655494][  T294] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed
[   81.661480][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.670048][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.677252][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.685250][  T294] cdc_ncm 5-1:1.0: bind() failure
[   81.691685][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.699686][  T294] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   81.706548][  T294] cdc_ncm 5-1:1.1: bind() failure
[   81.714625][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.722655][  T294] usb 5-1: USB disconnect, device number 6
[   81.729842][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.758855][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.771446][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.795234][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.811381][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.824222][ T3477] device veth0_vlan entered promiscuous mode
[   81.830739][  T495] Bluetooth: hci0: command 0x1003 tx timeout
[   81.830733][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   81.843596][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.843604][ T3447] Bluetooth: hci0: Opcode 0x080f failed: -22
[   81.851511][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.875347][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.888058][ T3487] loop9: detected capacity change from 0 to 1024
[   81.891358][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.921886][ T3477] device veth1_macvtap entered promiscuous mode
[   81.933742][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.951797][ T3487] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[   81.960842][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.980932][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.011155][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.024015][ T1989] EXT4-fs (loop9): unmounting filesystem.
[   82.040236][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.082877][ T3481] loop3: detected capacity change from 0 to 131072
[   82.089719][ T3489] loop1: detected capacity change from 0 to 40427
[   82.104219][ T3481] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[   82.113818][ T3489] F2FS-fs (loop1): fault_injection options not supported
[   82.124813][ T3481] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   82.130318][ T3489] F2FS-fs (loop1): fault_type options not supported
[   82.140431][ T3481] F2FS-fs (loop3): Unrecognized mount option "f2fs" or missing value
[   82.155592][ T3489] F2FS-fs (loop1): invalid crc value
[   82.163339][ T3489] F2FS-fs (loop1): Found nat_bits in checkpoint
[   82.190865][ T3489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   82.245573][ T3503] loop0: detected capacity change from 0 to 256
[   82.284462][ T3503] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   82.352244][ T3509] loop0: detected capacity change from 0 to 256
[   82.510778][  T294] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   82.568091][ T3518] loop3: detected capacity change from 0 to 512
[   82.632361][ T3518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   82.650899][ T3518] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.702294][  T294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.722951][ T2541] EXT4-fs (loop3): unmounting filesystem.
[   82.729442][  T294] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.750636][ T3514] loop0: detected capacity change from 0 to 40427
[   82.759727][  T294] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   82.767199][ T3514] F2FS-fs (loop0): fault_injection options not supported
[   82.787070][  T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   82.807747][ T3514] F2FS-fs (loop0): fault_type options not supported
[   82.814608][ T3516] F2FS-fs (loop1): invalid crc value
[   82.830220][  T294] usb 5-1: SerialNumber: syz
[   82.835746][ T3514] F2FS-fs (loop0): invalid crc value
[   82.858180][ T3514] F2FS-fs (loop0): Found nat_bits in checkpoint
[   82.865232][ T3516] F2FS-fs (loop1): Found nat_bits in checkpoint
[   82.895206][ T3514] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   82.920990][ T3516] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   83.022248][ T3516] syz.1.1297: attempt to access beyond end of device
[   83.022248][ T3516] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   83.041362][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   83.058002][ T3505] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   83.080725][    T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   83.090014][ T3524] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   83.105670][ T3524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   83.125257][ T3524] F2FS-fs (loop3): invalid crc value
[   83.132117][ T3524] F2FS-fs (loop3): Found nat_bits in checkpoint
[   83.176082][ T3524] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   83.183885][ T3524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   83.280827][    T6] usb 10-1: Using ep0 maxpacket: 32
[   83.287793][    T6] usb 10-1: config 0 interface 0 altsetting 132 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   83.308198][ T3543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   83.320935][ T3543] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.342857][    T6] usb 10-1: config 0 interface 0 altsetting 132 endpoint 0x2 has an invalid bInterval 157, changing to 11
[   83.381054][    T6] usb 10-1: config 0 interface 0 altsetting 132 endpoint 0x2 has invalid wMaxPacketSize 0
[   83.412591][    T6] usb 10-1: config 0 interface 0 has no altsetting 0
[   83.423235][    T6] usb 10-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[   83.441458][ T3539] F2FS-fs (loop1): invalid crc value
[   83.448686][ T3477] EXT4-fs (loop0): unmounting filesystem.
[   83.458750][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.466552][ T3539] F2FS-fs (loop1): Found nat_bits in checkpoint
[   83.472701][    T6] usb 10-1: config 0 descriptor??
[   83.496382][ T3553] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1309'.
[   83.507849][ T3539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   83.581358][ T2484] syz-executor: attempt to access beyond end of device
[   83.581358][ T2484] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   83.819404][ T3561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   83.860777][ T3561] ext4 filesystem being mounted at /90/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.885630][    T6] usbhid 10-1:0.0: can't add hid device: -71
[   83.894232][    T6] usbhid: probe of 10-1:0.0 failed with error -71
[   83.907151][    T6] usb 10-1: USB disconnect, device number 4
[   83.924811][ T2484] EXT4-fs (loop1): unmounting filesystem.
[   84.201094][ T3556] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[   84.209927][ T3556] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   84.222798][ T3556] F2FS-fs (loop3): invalid crc value
[   84.229845][ T3556] F2FS-fs (loop3): Found nat_bits in checkpoint
[   84.268421][ T3556] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   84.275659][ T3556] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   85.110759][  T495] Bluetooth: hci0: command 0x1003 tx timeout
[   85.110756][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   85.125036][  T294] usb 5-1: 0:2 : does not exist
[   85.134012][  T294] usb 5-1: USB disconnect, device number 7
[   85.897005][ T3584] ip_tables: iptables: counters copy to user failed while replacing table
[   85.910847][    T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   85.930826][   T24] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[   85.941805][ T3586] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   85.958047][ T3586] EXT4-fs (loop4): invalid journal inode
[   85.963851][ T3586] EXT4-fs (loop4): can't get journal size
[   85.970287][ T3586] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.1319: blocks 4-4 from inode overlap system zone
[   85.984561][ T3586] EXT4-fs (loop4): Remounting filesystem read-only
[   85.991901][ T3586] EXT4-fs (loop4): failed to initialize system zone (-117)
[   85.999279][ T3586] EXT4-fs (loop4): mount failed
[   86.121910][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.133259][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.143139][   T24] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   86.150776][    T6] usb 4-1: Using ep0 maxpacket: 16
[   86.152383][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.153456][   T24] usb 10-1: config 0 descriptor??
[   86.162105][    T6] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.182088][    T6] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.192344][    T6] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   86.205482][    T6] usb 4-1: config 0 interface 0 has no altsetting 0
[   86.212412][    T6] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   86.221552][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.230203][    T6] usb 4-1: config 0 descriptor??
[   86.280723][  T420] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   86.437775][ T3569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.446544][ T3569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.460737][  T420] usb 2-1: Using ep0 maxpacket: 32
[   86.467006][  T420] usb 2-1: config 0 interface 0 altsetting 132 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   86.479131][  T420] usb 2-1: config 0 interface 0 altsetting 132 endpoint 0x2 has an invalid bInterval 157, changing to 11
[   86.490527][  T420] usb 2-1: config 0 interface 0 altsetting 132 endpoint 0x2 has invalid wMaxPacketSize 0
[   86.500474][  T420] usb 2-1: config 0 interface 0 has no altsetting 0
[   86.507128][  T420] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[   86.516289][  T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.525277][  T420] usb 2-1: config 0 descriptor??
[   86.769111][   T24] usb 10-1: string descriptor 0 read error: -22
[   86.870983][    T6] usb 4-1: USB disconnect, device number 6
[   86.932788][  T420] usbhid 2-1:0.0: can't add hid device: -71
[   86.938874][  T420] usbhid: probe of 2-1:0.0 failed with error -71
[   86.949547][  T420] usb 2-1: USB disconnect, device number 6
[   86.970930][   T24] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71
[   86.979839][   T24] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71
[   86.988062][   T24] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71
[   86.996501][   T24] uclogic 0003:256C:006D.0006: failed probing parameters: -71
[   87.004030][   T24] uclogic: probe of 0003:256C:006D.0006 failed with error -71
[   87.012711][   T24] usb 10-1: USB disconnect, device number 5
[   87.745362][  T394] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   87.759010][ T3625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'.
[   87.776701][ T3626] set_capacity_and_notify: 7 callbacks suppressed
[   87.776720][ T3626] loop3: detected capacity change from 0 to 512
[   87.783383][ T3625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'.
[   87.808683][ T3628] FAULT_INJECTION: forcing a failure.
[   87.808683][ T3628] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   87.816784][ T3625] netlink: 'syz.0.1348': attribute type 15 has an invalid length.
[   87.832170][ T3628] CPU: 0 PID: 3628 Comm: syz.4.1338 Not tainted syzkaller #0
[   87.839683][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   87.849764][ T3628] Call Trace:
[   87.853336][ T3628]  <TASK>
[   87.856468][ T3628]  __dump_stack+0x21/0x24
[   87.860849][ T3628]  dump_stack_lvl+0x110/0x170
[   87.865749][ T3628]  ? __cfi_dump_stack_lvl+0x8/0x8
[   87.870817][ T3628]  ? vfs_write+0xa51/0xd00
[   87.875274][ T3628]  dump_stack+0x15/0x24
[   87.879643][ T3628]  should_fail_ex+0x3bf/0x510
[   87.884441][ T3628]  should_fail+0xb/0x10
[   87.888630][ T3628]  should_fail_usercopy+0x1a/0x20
[   87.893687][ T3628]  strncpy_from_user+0x24/0x2c0
[   87.895181][ T3626] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   87.898573][ T3628]  __se_sys_add_key+0xd8/0x410
[   87.898606][ T3628]  ? __x64_sys_add_key+0xd0/0xd0
[   87.916834][ T3628]  ? xfd_validate_state+0x70/0x150
[   87.921991][ T3628]  ? __kasan_check_write+0x14/0x20
[   87.926705][ T3626] EXT4-fs (loop3): invalid journal inode
[   87.927132][ T3628]  ? fpregs_restore_userregs+0x128/0x260
[   87.933328][ T3626] EXT4-fs (loop3): can't get journal size
[   87.938593][ T3628]  __x64_sys_add_key+0xbf/0xd0
[   87.947223][ T3635] wg0: Caught tx_queue_len zero misconfig
[   87.949208][ T3628]  x64_sys_call+0x6aa/0x9a0
[   87.955549][ T3626] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.1337: blocks 4-4 from inode overlap system zone
[   87.959522][ T3628]  do_syscall_64+0x4c/0xa0
[   87.973909][ T3626] EXT4-fs (loop3): Remounting filesystem read-only
[   87.977840][ T3628]  ? clear_bhb_loop+0x30/0x80
[   87.984742][ T3626] EXT4-fs (loop3): failed to initialize system zone (-117)
[   87.989090][ T3628]  ? clear_bhb_loop+0x30/0x80
[   87.996714][ T3626] EXT4-fs (loop3): mount failed
[   88.001031][ T3628]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   88.001057][ T3628] RIP: 0033:0x7f24f959e559
[   88.001074][ T3628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.001089][ T3628] RSP: 002b:00007f24fa3c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   88.044468][ T3628] RAX: ffffffffffffffda RBX: 00007f24f9825fa0 RCX: 00007f24f959e559
[   88.052527][ T3628] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[   88.060496][ T3628] RBP: 00007f24f96358b0 R08: ffffffffffffffff R09: 0000000000000000
[   88.068554][ T3628] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000
[   88.076520][ T3628] R13: 00007f24f9826038 R14: 00007f24f9825fa0 R15: 00007ffc8c8d9338
[   88.084501][ T3628]  </TASK>
[   88.098018][  T394] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.120741][  T394] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.142323][  T394] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   88.156067][  T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   88.164796][  T394] usb 2-1: SerialNumber: syz
[   88.252810][ T3654] loop3: detected capacity change from 0 to 512
[   88.273446][ T3654] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   88.281920][ T3654] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.1350: corrupted in-inode xattr
[   88.294763][ T3654] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1350: couldn't read orphan inode 15 (err -117)
[   88.307291][ T3654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   88.342051][ T2541] EXT4-fs (loop3): unmounting filesystem.
[   88.384146][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   88.393500][ T3611] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   88.624341][ T3676] loop3: detected capacity change from 0 to 1024
[   88.629516][ T3678] FAULT_INJECTION: forcing a failure.
[   88.629516][ T3678] name failslab, interval 1, probability 0, space 0, times 0
[   88.643697][ T3678] CPU: 1 PID: 3678 Comm: syz.0.1360 Not tainted syzkaller #0
[   88.649278][ T3676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   88.651107][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   88.651122][ T3678] Call Trace:
[   88.651128][ T3678]  <TASK>
[   88.651135][ T3678]  __dump_stack+0x21/0x24
[   88.651170][ T3678]  dump_stack_lvl+0x110/0x170
[   88.659810][ T3676] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.669654][ T3678]  ? __cfi_dump_stack_lvl+0x8/0x8
[   88.669696][ T3678]  ? futex_wake+0x5fa/0x8e0
[   88.669722][ T3678]  dump_stack+0x15/0x24
[   88.669749][ T3678]  should_fail_ex+0x3bf/0x510
[   88.669769][ T3678]  __should_failslab+0xac/0xf0
[   88.718582][ T3678]  should_failslab+0x9/0x20
[   88.723183][ T3678]  __kmem_cache_alloc_node+0x3d/0x2d0
[   88.728826][ T3678]  ? kvmalloc_node+0x28a/0x460
[   88.733594][ T3678]  ? kvmalloc_node+0x28a/0x460
[   88.738364][ T3678]  __kmalloc_node+0xa2/0x1e0
[   88.742992][ T3678]  kvmalloc_node+0x28a/0x460
[   88.747587][ T3678]  ? __cfi_kvmalloc_node+0x10/0x10
[   88.752895][ T3678]  __se_sys_add_key+0x27b/0x410
[   88.758282][ T3678]  ? __x64_sys_add_key+0xd0/0xd0
[   88.763241][ T3678]  ? xfd_validate_state+0x70/0x150
[   88.768359][ T3678]  ? __kasan_check_write+0x14/0x20
[   88.773473][ T3678]  ? fpregs_restore_userregs+0x128/0x260
[   88.779285][ T3678]  __x64_sys_add_key+0xbf/0xd0
[   88.784146][ T3678]  x64_sys_call+0x6aa/0x9a0
[   88.788764][ T3678]  do_syscall_64+0x4c/0xa0
[   88.793289][ T3678]  ? clear_bhb_loop+0x30/0x80
[   88.798238][ T3678]  ? clear_bhb_loop+0x30/0x80
[   88.802936][ T3678]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   88.808852][ T3678] RIP: 0033:0x7f716159e559
[   88.813264][ T3678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.833502][ T3678] RSP: 002b:00007f71624c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   88.841919][ T3678] RAX: ffffffffffffffda RBX: 00007f7161825fa0 RCX: 00007f716159e559
[   88.849907][ T3678] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[   88.857888][ T3678] RBP: 00007f71616358b0 R08: ffffffffffffffff R09: 0000000000000000
[   88.865871][ T3678] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000
[   88.873853][ T3678] R13: 00007f7161826038 R14: 00007f7161825fa0 R15: 00007ffdf47d9cd8
[   88.881832][ T3678]  </TASK>
[   88.910080][ T3676] EXT4-fs (loop3): shut down requested (0)
[   88.931126][   T28] audit: type=1400 audit(1700000045.050:541): avc:  denied  { search } for  pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.959997][ T2541] EXT4-fs (loop3): unmounting filesystem.
[   89.189951][ T3705] xt_hashlimit: size too large, truncated to 1048576
[   89.271623][ T3712] lo: Caught tx_queue_len zero misconfig
[   89.277452][ T3712] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   89.292835][ T3712] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1373'.
[   89.508479][ T3721] FAULT_INJECTION: forcing a failure.
[   89.508479][ T3721] name failslab, interval 1, probability 0, space 0, times 0
[   89.522502][ T3721] CPU: 0 PID: 3721 Comm: syz.9.1376 Not tainted syzkaller #0
[   89.530089][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   89.540170][ T3721] Call Trace:
[   89.543503][ T3721]  <TASK>
[   89.546458][ T3721]  __dump_stack+0x21/0x24
[   89.550834][ T3721]  dump_stack_lvl+0x110/0x170
[   89.556050][ T3721]  ? __cfi_dump_stack_lvl+0x8/0x8
[   89.561129][ T3721]  ? futex_wake+0x5fa/0x8e0
[   89.565937][ T3721]  dump_stack+0x15/0x24
[   89.570136][ T3721]  should_fail_ex+0x3bf/0x510
[   89.574851][ T3721]  __should_failslab+0xac/0xf0
[   89.579654][ T3721]  should_failslab+0x9/0x20
[   89.584192][ T3721]  __kmem_cache_alloc_node+0x3d/0x2d0
[   89.589613][ T3721]  ? kvmalloc_node+0x28a/0x460
[   89.594501][ T3721]  ? kvmalloc_node+0x28a/0x460
[   89.599385][ T3721]  __kmalloc_node+0xa2/0x1e0
[   89.604018][ T3721]  kvmalloc_node+0x28a/0x460
[   89.608649][ T3721]  ? __cfi_kvmalloc_node+0x10/0x10
[   89.613888][ T3721]  __se_sys_add_key+0x27b/0x410
[   89.618789][ T3721]  ? __x64_sys_add_key+0xd0/0xd0
[   89.623854][ T3721]  ? xfd_validate_state+0x70/0x150
[   89.629303][ T3721]  ? __kasan_check_write+0x14/0x20
[   89.634634][ T3721]  ? fpregs_restore_userregs+0x128/0x260
[   89.640309][ T3721]  __x64_sys_add_key+0xbf/0xd0
[   89.645204][ T3721]  x64_sys_call+0x6aa/0x9a0
[   89.649748][ T3721]  do_syscall_64+0x4c/0xa0
[   89.654200][ T3721]  ? clear_bhb_loop+0x30/0x80
[   89.658914][ T3721]  ? clear_bhb_loop+0x30/0x80
[   89.663713][ T3721]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   89.669650][ T3721] RIP: 0033:0x7f41a5f9e559
[   89.674179][ T3721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.693810][ T3721] RSP: 002b:00007f41a6e5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   89.702240][ T3721] RAX: ffffffffffffffda RBX: 00007f41a6225fa0 RCX: 00007f41a5f9e559
[   89.710389][ T3721] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[   89.718358][ T3721] RBP: 00007f41a60358b0 R08: ffffffffffffffff R09: 0000000000000000
[   89.726332][ T3721] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000
[   89.734313][ T3721] R13: 00007f41a6226038 R14: 00007f41a6225fa0 R15: 00007fff736896e8
[   89.742320][ T3721]  </TASK>
[   89.814182][ T3724] netlink: 'syz.4.1379': attribute type 4 has an invalid length.
[   89.863814][ T3730] loop9: detected capacity change from 0 to 128
[   89.873322][ T3730] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   89.913102][ T3736] loop9: detected capacity change from 0 to 256
[   89.935679][ T3736] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[   90.043800][ T3749] FAULT_INJECTION: forcing a failure.
[   90.043800][ T3749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.058073][ T3749] CPU: 0 PID: 3749 Comm: syz.9.1390 Not tainted syzkaller #0
[   90.065500][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   90.075588][ T3749] Call Trace:
[   90.078980][ T3749]  <TASK>
[   90.081937][ T3749]  __dump_stack+0x21/0x24
[   90.086346][ T3749]  dump_stack_lvl+0x110/0x170
[   90.091303][ T3749]  ? __cfi_dump_stack_lvl+0x8/0x8
[   90.096381][ T3749]  ? vfs_write+0xa51/0xd00
[   90.100902][ T3749]  dump_stack+0x15/0x24
[   90.105104][ T3749]  should_fail_ex+0x3bf/0x510
[   90.109834][ T3749]  should_fail+0xb/0x10
[   90.114030][ T3749]  should_fail_usercopy+0x1a/0x20
[   90.119090][ T3749]  strncpy_from_user+0x24/0x2c0
[   90.123983][ T3749]  __se_sys_add_key+0xd8/0x410
[   90.128885][ T3749]  ? __x64_sys_add_key+0xd0/0xd0
[   90.134045][ T3749]  ? xfd_validate_state+0x70/0x150
[   90.139206][ T3749]  ? __kasan_check_write+0x14/0x20
[   90.144357][ T3749]  ? fpregs_restore_userregs+0x128/0x260
[   90.150216][ T3749]  __x64_sys_add_key+0xbf/0xd0
[   90.155033][ T3749]  x64_sys_call+0x6aa/0x9a0
[   90.159678][ T3749]  do_syscall_64+0x4c/0xa0
[   90.164485][ T3749]  ? clear_bhb_loop+0x30/0x80
[   90.169288][ T3749]  ? clear_bhb_loop+0x30/0x80
[   90.174085][ T3749]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.180000][ T3749] RIP: 0033:0x7f41a5f9e559
[   90.184447][ T3749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.204528][ T3749] RSP: 002b:00007f41a6e5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   90.212990][ T3749] RAX: ffffffffffffffda RBX: 00007f41a6225fa0 RCX: 00007f41a5f9e559
[   90.221096][ T3749] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[   90.229203][ T3749] RBP: 00007f41a60358b0 R08: ffffffffffffffff R09: 0000000000000000
[   90.237294][ T3749] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000
[   90.245464][ T3749] R13: 00007f41a6226038 R14: 00007f41a6225fa0 R15: 00007fff736896e8
[   90.253484][ T3749]  </TASK>
[   90.390729][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   90.390773][  T495] Bluetooth: hci0: command 0x1003 tx timeout
[   90.407395][  T394] usb 2-1: 0:2 : does not exist
[   90.432997][  T394] usb 2-1: USB disconnect, device number 7
[   90.652609][ T3784] FAULT_INJECTION: forcing a failure.
[   90.652609][ T3784] name failslab, interval 1, probability 0, space 0, times 0
[   90.670635][ T3784] CPU: 1 PID: 3784 Comm: syz.0.1403 Not tainted syzkaller #0
[   90.678074][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   90.688155][ T3784] Call Trace:
[   90.691465][ T3784]  <TASK>
[   90.694423][ T3784]  __dump_stack+0x21/0x24
[   90.698800][ T3784]  dump_stack_lvl+0x110/0x170
[   90.703553][ T3784]  ? __cfi_dump_stack_lvl+0x8/0x8
[   90.708620][ T3784]  ? futex_wake+0x5fa/0x8e0
[   90.713169][ T3784]  dump_stack+0x15/0x24
[   90.717365][ T3784]  should_fail_ex+0x3bf/0x510
[   90.722074][ T3784]  __should_failslab+0xac/0xf0
[   90.727155][ T3784]  should_failslab+0x9/0x20
[   90.731658][ T3784]  __kmem_cache_alloc_node+0x3d/0x2d0
[   90.737076][ T3784]  ? kvmalloc_node+0x28a/0x460
[   90.741836][ T3784]  ? kvmalloc_node+0x28a/0x460
[   90.746679][ T3784]  __kmalloc_node+0xa2/0x1e0
[   90.751288][ T3784]  kvmalloc_node+0x28a/0x460
[   90.755867][ T3784]  ? __cfi_kvmalloc_node+0x10/0x10
[   90.761057][ T3784]  __se_sys_add_key+0x27b/0x410
[   90.765915][ T3784]  ? __x64_sys_add_key+0xd0/0xd0
[   90.770841][ T3784]  ? xfd_validate_state+0x70/0x150
[   90.775963][ T3784]  ? __kasan_check_write+0x14/0x20
[   90.781066][ T3784]  ? fpregs_restore_userregs+0x128/0x260
[   90.786780][ T3784]  __x64_sys_add_key+0xbf/0xd0
[   90.791534][ T3784]  x64_sys_call+0x6aa/0x9a0
[   90.796046][ T3784]  do_syscall_64+0x4c/0xa0
[   90.800452][ T3784]  ? clear_bhb_loop+0x30/0x80
[   90.805119][ T3784]  ? clear_bhb_loop+0x30/0x80
[   90.809796][ T3784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.815690][ T3784] RIP: 0033:0x7f716159e559
[   90.820124][ T3784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.839918][ T3784] RSP: 002b:00007f71624c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   90.848522][ T3784] RAX: ffffffffffffffda RBX: 00007f7161825fa0 RCX: 00007f716159e559
[   90.856582][ T3784] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[   90.864564][ T3784] RBP: 00007f71616358b0 R08: ffffffffffffffff R09: 0000000000000000
[   90.872544][ T3784] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000
[   90.880520][ T3784] R13: 00007f7161826038 R14: 00007f7161825fa0 R15: 00007ffdf47d9cd8
[   90.888678][ T3784]  </TASK>
[   91.145380][ T3803] loop9: detected capacity change from 0 to 256
[   91.156736][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'.
[   91.186365][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'.
[   91.242818][ T3814] loop9: detected capacity change from 0 to 512
[   91.295617][ T3814] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   91.304730][ T3814] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.330819][ T1989] EXT4-fs (loop9): unmounting filesystem.
[   91.620754][   T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[   91.783165][ T3833] ptp ptp0: only physical clock in use now
[   91.811774][   T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.830082][   T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.861118][   T24] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   91.870455][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   91.878854][   T24] usb 10-1: SerialNumber: syz
[   92.018007][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'.
[   92.029891][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'.
[   92.050347][ T3850] input: syz0 as /devices/virtual/input/input11
[   92.094459][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   92.100960][ T3823] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   92.255295][ T3864] input: syz0 as /devices/virtual/input/input12
[   92.294930][ T3871] loop0: detected capacity change from 0 to 256
[   92.313387][ T3871] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   92.330832][  T394] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   92.507365][ T3876] loop4: detected capacity change from 0 to 256
[   92.517555][ T3876] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   92.542615][  T394] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.579865][  T394] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   92.600268][  T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   92.608548][  T394] usb 2-1: Product: syz
[   92.621211][  T394] usb 2-1: Manufacturer: syz
[   92.626006][  T394] usb 2-1: SerialNumber: syz
[   92.721009][ T3887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'.
[   92.730967][ T3887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'.
[   92.850281][  T394] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   92.862599][  T394] usb 2-1: USB disconnect, device number 8
[   92.869197][  T394] usblp0: removed
[   93.640754][  T420] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   93.821921][  T420] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.836262][  T420] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   93.845902][  T420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   93.854104][  T420] usb 4-1: Product: syz
[   93.858555][  T420] usb 4-1: Manufacturer: syz
[   93.863185][  T420] usb 4-1: SerialNumber: syz
[   94.073934][  T420] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   94.085656][  T420] usb 4-1: USB disconnect, device number 7
[   94.092400][  T420] usblp0: removed
[   94.151300][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   94.153011][  T495] Bluetooth: hci0: command 0x1003 tx timeout
[   94.165460][   T24] usb 10-1: 0:2 : does not exist
[   94.178882][   T24] usb 10-1: USB disconnect, device number 6
[   94.599768][ T3918] loop3: detected capacity change from 0 to 256
[   94.627682][ T3918] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   94.880699][  T420] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   95.046397][ T3928] loop9: detected capacity change from 0 to 131072
[   95.055126][ T3928] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945)
[   95.063787][ T3928] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   95.071766][  T420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   95.072083][ T3928] F2FS-fs (loop9): Unrecognized mount option "f2fs" or missing value
[   95.102281][  T420] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   95.111618][  T420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.145920][ T3933] loop4: detected capacity change from 0 to 128
[   95.156492][  T401] Bluetooth: hci0: Frame reassembly failed (-84)
[   95.171207][ T3933] syz.4.1479: attempt to access beyond end of device
[   95.171207][ T3933] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128
[   95.185490][ T3935] veth1_to_bond: Caught tx_queue_len zero misconfig
[   95.203224][ T3933] syz.4.1479: attempt to access beyond end of device
[   95.203224][ T3933] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128
[   95.222481][ T3933] Buffer I/O error on dev loop4, logical block 71, lost async page write
[   95.368050][  T401] Bluetooth: hci1: Frame reassembly failed (-84)
[   95.526707][  T420] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0
[   95.532350][ T3952] loop1: detected capacity change from 0 to 512
[   95.547919][ T3954] loop9: detected capacity change from 0 to 512
[   95.548410][ T3952] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   95.570539][ T3954] ext4: Unknown parameter 'hash'
[   95.725359][  T420] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71
[   95.733570][  T420] lg-g15: probe of 0003:046D:C222.0008 failed with error -71
[   95.743992][  T420] usb 1-1: USB disconnect, device number 7
[   95.760083][ T3957] fido_id[3957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   95.870740][  T402] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[   96.051868][  T402] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.062260][  T402] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.072441][  T402] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   96.081677][  T402] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   96.089886][  T402] usb 10-1: SerialNumber: syz
[   96.280814][ T3961] loop1: detected capacity change from 0 to 512
[   96.287821][ T3961] ext4: Unknown parameter 'hash'
[   96.300502][ T3956] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   96.309546][  T401] Bluetooth: hci2: Frame reassembly failed (-84)
[   96.500715][  T420] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   96.681861][  T420] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   96.696493][  T420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   96.705741][  T420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   96.714626][  T420] usb 1-1: Product: syz
[   96.718916][  T420] usb 1-1: Manufacturer: syz
[   96.723684][  T420] usb 1-1: SerialNumber: syz
[   96.932889][  T420] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   96.944662][  T420] usb 1-1: USB disconnect, device number 8
[   96.951740][  T420] usblp0: removed
[   97.190731][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   97.190972][ T3176] Bluetooth: hci0: command 0x1003 tx timeout
[   97.203343][ T3932] Bluetooth: hci0: Opcode 0x080f failed: -22
[   97.430758][  T495] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   97.430767][ T3963] Bluetooth: hci1: command 0x1003 tx timeout
[   98.310727][  T495] Bluetooth: hci2: command 0x1003 tx timeout
[   98.310727][  T326] Bluetooth: hci2: Opcode 0x1003 failed: -110
[   98.325244][  T402] usb 10-1: 0:2 : does not exist
[   98.332055][  T402] usb 10-1: USB disconnect, device number 7
[   98.541359][  T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   98.848084][  T401] Bluetooth: hci0: Frame reassembly failed (-84)
[   98.860310][ T3973] loop9: detected capacity change from 0 to 256
[   98.867948][ T3968] veth1_to_bond: Caught tx_queue_len zero misconfig
[   98.886768][ T3973] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   99.180716][  T402] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   99.188509][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   99.270677][    C0] ==================================================================
[   99.278880][    C0] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0
[   99.285922][    C0] Write of size 8 at addr ffff88810fc74a00 by task syz.4.1485/3971
[   99.294341][    C0] 
[   99.296843][    C0] CPU: 0 PID: 3971 Comm: syz.4.1485 Not tainted syzkaller #0
[   99.304446][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   99.315133][    C0] Call Trace:
[   99.318417][    C0]  <IRQ>
[   99.321374][    C0]  __dump_stack+0x21/0x24
[   99.325979][    C0]  dump_stack_lvl+0x110/0x170
[   99.330964][    C0]  ? __cfi_dump_stack_lvl+0x8/0x8
[   99.336119][    C0]  ? __cfi_trigger_load_balance+0x10/0x10
[   99.341861][    C0]  ? __run_timers+0x341/0x9b0
[   99.346548][    C0]  print_address_description+0x71/0x200
[   99.352179][    C0]  print_report+0x4a/0x60
[   99.356601][    C0]  kasan_report+0x122/0x150
[   99.361109][    C0]  ? __run_timers+0x341/0x9b0
[   99.365816][    C0]  __asan_report_store8_noabort+0x17/0x20
[   99.371728][    C0]  __run_timers+0x341/0x9b0
[   99.376404][    C0]  ? sched_clock_cpu+0x6e/0x260
[   99.381286][    C0]  ? calc_index+0x200/0x200
[   99.385881][    C0]  ? kvm_sched_clock_read+0x18/0x40
[   99.391160][    C0]  run_timer_softirq+0x6a/0xf0
[   99.395940][    C0]  handle_softirqs+0x1d7/0x600
[   99.400734][    C0]  __irq_exit_rcu+0x52/0xf0
[   99.405257][    C0]  irq_exit_rcu+0x9/0x10
[   99.409496][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   99.415475][    C0]  </IRQ>
[   99.418425][    C0]  <TASK>
[   99.421385][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   99.427871][    C0] RIP: 0010:bpf_map_delete_elem+0x0/0x80
[   99.433624][    C0] Code: fc 74 02 0f 0b 41 ff d3 48 98 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 90 b8 a9 09 47 9e <55> 48 89 e5 41 57 41 56 41 54 53 48 89 f3 49 89 fe 49 bc 00 00 00
[   99.441936][  T402] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.453787][    C0] RSP: 0018:ffffc9000d0bfa98 EFLAGS: 00000297
[   99.453817][    C0] RAX: 0000000000000000 RBX: ffffc9000d085050 RCX: dffffc0000000000
[   99.453831][    C0] RDX: 1ffffffff0f6ea00 RSI: ffffc9000d0bfaa0 RDI: ffff88810fe8c000
[   99.453843][    C0] RBP: ffffc9000d0bfaa8 R08: ffffffff87b75008 R09: ffffffff87b75018
[   99.453857][    C0] R10: ffffffff87b75003 R11: 1ffffffff0f6ea00 R12: 000000171cd9f1a1
[   99.453871][    C0] R13: ffffc9000d085000 R14: ffffc9000d0bfbe0 R15: ffffc9000d0bfba0
[   99.464215][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   99.470172][    C0]  ? kvm_sched_clock_read+0x18/0x40
[   99.478391][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11
[   99.486167][    C0]  ? bpf_prog_2479e0cb13be8c84+0x42/0x44
[   99.486195][    C0]  bpf_flow_dissect+0x32a/0x3f0
[   99.486216][    C0]  ? bpf_test_timer_continue+0x147/0x4a0
[   99.495184][  T402] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.503183][    C0]  bpf_prog_test_run_flow_dissector+0x431/0x640
[   99.503218][    C0]  ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10
[   99.503242][    C0]  ? __kasan_check_write+0x14/0x20
[   99.511505][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[   99.524195][    C0]  ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10
[   99.524233][    C0]  bpf_prog_test_run+0x3b4/0x5c0
[   99.524254][    C0]  ? bpf_prog_query+0x270/0x270
[   99.524273][    C0]  ? selinux_bpf+0xce/0xf0
[   99.532432][  T402] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   99.540594][    C0]  ? security_bpf+0x93/0xb0
[   99.540634][    C0]  __sys_bpf+0x5ee/0x850
[   99.540654][    C0]  ? bpf_link_show_fdinfo+0x330/0x330
[   99.540675][    C0]  ? fpregs_restore_userregs+0x128/0x260
[   99.540697][    C0]  __x64_sys_bpf+0x7c/0x90
[   99.650128][    C0]  x64_sys_call+0x488/0x9a0
[   99.654735][    C0]  do_syscall_64+0x4c/0xa0
[   99.659406][    C0]  ? clear_bhb_loop+0x30/0x80
[   99.664447][    C0]  ? clear_bhb_loop+0x30/0x80
[   99.669546][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.675448][    C0] RIP: 0033:0x7f24f959e559
[   99.680083][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.699716][    C0] RSP: 002b:00007f24fa3c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   99.708398][    C0] RAX: ffffffffffffffda RBX: 00007f24f9825fa0 RCX: 00007f24f959e559
[   99.716827][    C0] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 000000000000000a
[   99.724805][    C0] RBP: 00007f24f96358b0 R08: 0000000000000000 R09: 0000000000000000
[   99.733123][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.741177][    C0] R13: 00007f24f9826038 R14: 00007f24f9825fa0 R15: 00007ffc8c8d9338
[   99.749154][    C0]  </TASK>
[   99.752172][    C0] 
[   99.754494][    C0] Allocated by task 3932:
[   99.758854][    C0]  kasan_set_track+0x4b/0x70
[   99.763455][    C0]  kasan_save_alloc_info+0x1f/0x30
[   99.768569][    C0]  __kasan_kmalloc+0x95/0xb0
[   99.773175][    C0]  __kmalloc+0xb4/0x1e0
[   99.777417][    C0]  hci_alloc_dev_priv+0x27/0x1bd0
[   99.782444][    C0]  hci_uart_tty_ioctl+0x3c4/0xa70
[   99.787567][    C0]  tty_ioctl+0x8ef/0xc60
[   99.791814][    C0]  __se_sys_ioctl+0x12f/0x1b0
[   99.796498][    C0]  __x64_sys_ioctl+0x7b/0x90
[   99.801173][    C0]  x64_sys_call+0x58b/0x9a0
[   99.805679][    C0]  do_syscall_64+0x4c/0xa0
[   99.810443][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.816422][    C0] 
[   99.818748][    C0] Freed by task 3932:
[   99.822717][    C0]  kasan_set_track+0x4b/0x70
[   99.827304][    C0]  kasan_save_free_info+0x2b/0x40
[   99.832412][    C0]  ____kasan_slab_free+0x132/0x180
[   99.837615][    C0]  __kasan_slab_free+0x11/0x20
[   99.842387][    C0]  slab_free_freelist_hook+0xc2/0x190
[   99.847906][    C0]  __kmem_cache_free+0xb7/0x1b0
[   99.852946][    C0]  kfree+0x6f/0xf0
[   99.856669][    C0]  hci_release_dev+0x12a3/0x13b0
[   99.861952][    C0]  bt_host_release+0x82/0x90
[   99.866554][    C0]  device_release+0xa4/0x1d0
[   99.871150][    C0]  kobject_put+0x19d/0x280
[   99.875656][    C0]  put_device+0x1f/0x30
[   99.879815][    C0]  hci_dev_cmd+0x279/0x740
[   99.884408][    C0]  hci_sock_ioctl+0x41e/0x7f0
[   99.889256][    C0]  sock_do_ioctl+0x114/0x330
[   99.893938][    C0]  sock_ioctl+0x475/0x700
[   99.898284][    C0]  __se_sys_ioctl+0x12f/0x1b0
[   99.903005][    C0]  __x64_sys_ioctl+0x7b/0x90
[   99.907691][    C0]  x64_sys_call+0x58b/0x9a0
[   99.912205][    C0]  do_syscall_64+0x4c/0xa0
[   99.916878][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.923033][    C0] 
[   99.925446][    C0] Last potentially related work creation:
[   99.931352][    C0]  kasan_save_stack+0x3a/0x60
[   99.936029][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[   99.941396][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[   99.947200][    C0]  insert_work+0x51/0x300
[   99.951526][    C0]  __queue_work+0x9d0/0xd50
[   99.956035][    C0]  queue_work_on+0xde/0x150
[   99.960652][    C0]  __hci_cmd_sync_sk+0xaa8/0xd80
[   99.965602][    C0]  hci_cmd_sync_status+0x53/0x120
[   99.971060][    C0]  hci_dev_cmd+0x642/0x740
[   99.975481][    C0]  hci_sock_ioctl+0x41e/0x7f0
[   99.980159][    C0]  sock_do_ioctl+0x114/0x330
[   99.984760][    C0]  sock_ioctl+0x475/0x700
[   99.989115][    C0]  __se_sys_ioctl+0x12f/0x1b0
[   99.993805][    C0]  __x64_sys_ioctl+0x7b/0x90
[   99.998412][    C0]  x64_sys_call+0x58b/0x9a0
[  100.002944][    C0]  do_syscall_64+0x4c/0xa0
[  100.007648][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  100.013718][    C0] 
[  100.016070][    C0] Second to last potentially related work creation:
[  100.022659][    C0]  kasan_save_stack+0x3a/0x60
[  100.027339][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  100.032800][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  100.038697][    C0]  insert_work+0x51/0x300
[  100.043117][    C0]  __queue_work+0x9d0/0xd50
[  100.047652][    C0]  queue_work_on+0xde/0x150
[  100.052174][    C0]  hci_cmd_timeout+0x191/0x200
[  100.056935][    C0]  process_one_work+0x717/0xc30
[  100.062219][    C0]  worker_thread+0xa4d/0x11d0
[  100.067029][    C0]  kthread+0x281/0x320
[  100.071627][    C0]  ret_from_fork+0x1f/0x30
[  100.076118][    C0] 
[  100.078443][    C0] The buggy address belongs to the object at ffff88810fc74000
[  100.078443][    C0]  which belongs to the cache kmalloc-8k of size 8192
[  100.093016][    C0] The buggy address is located 2560 bytes inside of
[  100.093016][    C0]  8192-byte region [ffff88810fc74000, ffff88810fc76000)
[  100.106548][    C0] 
[  100.108868][    C0] The buggy address belongs to the physical page:
[  100.115444][    C0] page:ffffea00043f1c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fc70
[  100.125847][    C0] head:ffffea00043f1c00 order:3 compound_mapcount:0 compound_pincount:0
[  100.134162][    C0] flags: 0x4000000000010200(slab|head|zone=1)
[  100.140403][    C0] raw: 4000000000010200 ffffea0004d29400 dead000000000003 ffff888100043500
[  100.149019][    C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  100.157895][    C0] page dumped because: kasan: bad access detected
[  100.164346][    C0] page_owner tracks the page as allocated
[  100.170064][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2443, tgid 2443 (syz.4.865), ts 61782487297, free_ts 61676413437
[  100.192728][    C0]  post_alloc_hook+0x1f5/0x210
[  100.197563][    C0]  prep_new_page+0x1c/0x110
[  100.202251][    C0]  get_page_from_freelist+0x2ca9/0x2d20
[  100.207798][    C0]  __alloc_pages+0x1fa/0x610
[  100.212388][    C0]  alloc_slab_page+0x6e/0xf0
[  100.216976][    C0]  new_slab+0x98/0x3e0
[  100.221088][    C0]  ___slab_alloc+0x70f/0xb70
[  100.225774][    C0]  __slab_alloc+0x5e/0xa0
[  100.230211][    C0]  __kmem_cache_alloc_node+0x204/0x2d0
[  100.235671][    C0]  kmalloc_trace+0x29/0xb0
[  100.240174][    C0]  audit_log_d_path+0xc6/0x240
[  100.245063][    C0]  audit_log_d_path_exe+0x42/0x70
[  100.250357][    C0]  audit_log_task+0x214/0x300
[  100.255136][    C0]  audit_seccomp+0x7f/0x160
[  100.259665][    C0]  __seccomp_filter+0xb08/0x1a50
[  100.264698][    C0]  __secure_computing+0xea/0x290
[  100.269639][    C0] page last free stack trace:
[  100.274304][    C0]  free_unref_page_prepare+0x81b/0x820
[  100.279769][    C0]  free_unref_page+0x93/0x530
[  100.284450][    C0]  __free_pages+0x67/0x100
[  100.288901][    C0]  __free_slab+0xc7/0x1a0
[  100.293834][    C0]  __unfreeze_partials+0x15a/0x190
[  100.299034][    C0]  put_cpu_partial+0xa9/0x100
[  100.303886][    C0]  __slab_free+0x1c4/0x280
[  100.308304][    C0]  ___cache_free+0xbf/0xd0
[  100.312724][    C0]  qlist_free_all+0xc6/0x140
[  100.317668][    C0]  kasan_quarantine_reduce+0x14a/0x170
[  100.323681][    C0]  __kasan_slab_alloc+0x24/0x80
[  100.328576][    C0]  slab_post_alloc_hook+0x4f/0x2d0
[  100.333717][    C0]  __kmem_cache_alloc_node+0x194/0x2d0
[  100.339272][    C0]  kmalloc_trace+0x29/0xb0
[  100.344280][    C0]  process_notifier+0x271/0x720
[  100.349234][    C0]  blocking_notifier_call_chain+0xcb/0x150
[  100.355568][    C0] 
[  100.357929][    C0] Memory state around the buggy address:
[  100.364073][    C0]  ffff88810fc74900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.372131][    C0]  ffff88810fc74980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.380272][    C0] >ffff88810fc74a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.388472][    C0]                    ^
[  100.392802][    C0]  ffff88810fc74a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.400862][    C0]  ffff88810fc74b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.409014][    C0] ==================================================================
[  100.418027][    C0] Disabling lock debugging due to kernel taint
[  100.424712][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  100.437223][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  100.437750][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  100.445822][    C0] CPU: 0 PID: 3971 Comm: syz.4.1485 Tainted: G    B              syzkaller #0
[  100.445849][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  100.445859][    C0] RIP: 0010:__queue_work+0x582/0xd50
[  100.445887][    C0] Code: b4 00 00 00 e8 7f 56 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 7d da b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 20 f0 6e 00 49 8b 3e e8 18 d6 b9 03
[  100.445904][    C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
[  100.456209][  T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  100.464381][    C0] 
[  100.464393][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888117246540
[  100.464411][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  100.464424][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb
[  100.464437][    C0] R10: dffffc0000000000 R11: ffffed1021f8e939 R12: ffff88810fc749c8
[  100.464450][    C0] R13: ffff888132a5d000 R14: 0000000000000000 R15: 000000007fffffff
[  100.464462][    C0] FS:  00007f24fa3c56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  100.484160][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.499695][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  100.499719][    C0] CR2: 0000555577dd8908 CR3: 000000011daa8000 CR4: 00000000003506b0
[  100.499738][    C0] DR0: 0000000000010002 DR1: 0000000000000000 DR2: 0001000000000000
[  100.499750][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  100.499763][    C0] Call Trace:
[  100.499770][    C0]  <IRQ>
[  100.499781][    C0]  delayed_work_timer_fn+0x61/0x80
[  100.508126][  T402] usb 4-1: SerialNumber: syz
[  100.514095][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  100.514129][    C0]  call_timer_fn+0x46/0x2a0
[  100.514153][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  100.526997][   T24] usb 2-1: Product: syz
[  100.532602][    C0]  __run_timers+0x672/0x9b0
[  100.532637][    C0]  ? calc_index+0x200/0x200
[  100.532660][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  100.541172][   T24] usb 2-1: Manufacturer: syz
[  100.548799][    C0]  run_timer_softirq+0x6a/0xf0
[  100.557147][   T24] usb 2-1: SerialNumber: syz
[  100.566139][    C0]  handle_softirqs+0x1d7/0x600
[  100.566168][    C0]  __irq_exit_rcu+0x52/0xf0
[  100.679147][    C0]  irq_exit_rcu+0x9/0x10
[  100.683401][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  100.689126][    C0]  </IRQ>
[  100.692057][    C0]  <TASK>
[  100.695006][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  100.700997][    C0] RIP: 0010:bpf_map_delete_elem+0x0/0x80
[  100.706640][    C0] Code: fc 74 02 0f 0b 41 ff d3 48 98 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 90 b8 a9 09 47 9e <55> 48 89 e5 41 57 41 56 41 54 53 48 89 f3 49 89 fe 49 bc 00 00 00
[  100.726641][    C0] RSP: 0018:ffffc9000d0bfa98 EFLAGS: 00000297
[  100.732793][    C0] RAX: 0000000000000000 RBX: ffffc9000d085050 RCX: dffffc0000000000
[  100.740859][    C0] RDX: 1ffffffff0f6ea00 RSI: ffffc9000d0bfaa0 RDI: ffff88810fe8c000
[  100.748915][    C0] RBP: ffffc9000d0bfaa8 R08: ffffffff87b75008 R09: ffffffff87b75018
[  100.756883][    C0] R10: ffffffff87b75003 R11: 1ffffffff0f6ea00 R12: 000000171cd9f1a1
[  100.764861][    C0] R13: ffffc9000d085000 R14: ffffc9000d0bfbe0 R15: ffffc9000d0bfba0
[  100.772937][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  100.778225][    C0]  ? bpf_prog_2479e0cb13be8c84+0x42/0x44
[  100.783868][    C0]  bpf_flow_dissect+0x32a/0x3f0
[  100.788903][    C0]  ? bpf_test_timer_continue+0x147/0x4a0
[  100.794715][    C0]  bpf_prog_test_run_flow_dissector+0x431/0x640
[  100.801039][    C0]  ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10
[  100.807800][    C0]  ? __kasan_check_write+0x14/0x20
[  100.812904][    C0]  ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10
[  100.819750][    C0]  bpf_prog_test_run+0x3b4/0x5c0
[  100.824687][    C0]  ? bpf_prog_query+0x270/0x270
[  100.829619][    C0]  ? selinux_bpf+0xce/0xf0
[  100.834059][    C0]  ? security_bpf+0x93/0xb0
[  100.838574][    C0]  __sys_bpf+0x5ee/0x850
[  100.842897][    C0]  ? bpf_link_show_fdinfo+0x330/0x330
[  100.848269][    C0]  ? fpregs_restore_userregs+0x128/0x260
[  100.854076][    C0]  __x64_sys_bpf+0x7c/0x90
[  100.858552][    C0]  x64_sys_call+0x488/0x9a0
[  100.863244][    C0]  do_syscall_64+0x4c/0xa0
[  100.867767][    C0]  ? clear_bhb_loop+0x30/0x80
[  100.872453][    C0]  ? clear_bhb_loop+0x30/0x80
[  100.877149][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  100.883042][    C0] RIP: 0033:0x7f24f959e559
[  100.887544][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.907512][    C0] RSP: 002b:00007f24fa3c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  100.916620][    C0] RAX: ffffffffffffffda RBX: 00007f24f9825fa0 RCX: 00007f24f959e559
[  100.924793][    C0] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 000000000000000a
[  100.933161][    C0] RBP: 00007f24f96358b0 R08: 0000000000000000 R09: 0000000000000000
[  100.941227][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.949270][    C0] R13: 00007f24f9826038 R14: 00007f24f9825fa0 R15: 00007ffc8c8d9338
[  100.957360][    C0]  </TASK>
[  100.960466][    C0] Modules linked in:
[  100.964446][    C0] ---[ end trace 0000000000000000 ]---
[  100.969898][    C0] RIP: 0010:__queue_work+0x582/0xd50
[  100.975298][    C0] Code: b4 00 00 00 e8 7f 56 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 7d da b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 20 f0 6e 00 49 8b 3e e8 18 d6 b9 03
[  100.994900][    C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
[  101.000985][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888117246540
[  101.008981][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  101.017129][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb
[  101.025225][    C0] R10: dffffc0000000000 R11: ffffed1021f8e939 R12: ffff88810fc749c8
[  101.033292][    C0] R13: ffff888132a5d000 R14: 0000000000000000 R15: 000000007fffffff
[  101.041280][    C0] FS:  00007f24fa3c56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  101.050230][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.056813][    C0] CR2: 0000555577dd8908 CR3: 000000011daa8000 CR4: 00000000003506b0
[  101.064781][    C0] DR0: 0000000000010002 DR1: 0000000000000000 DR2: 0001000000000000
[  101.072749][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  101.080737][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  101.088120][    C0] Kernel Offset: disabled
[  101.092537][    C0] Rebooting in 86400 seconds..