last executing test programs:

3m30.520510013s ago: executing program 32 (id=469):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xff)
copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0xff80000000000000, 0x1, 0x0)

3m24.627797076s ago: executing program 33 (id=685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000004000000000000000000002d46000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a7379"], 0x6c}}, 0x0)

2m41.961116319s ago: executing program 34 (id=1926):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x40000042, 0x0, 0x0)

2m37.191324979s ago: executing program 35 (id=1747):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000040)={0xf, {"a2e3ad214fc752f90b5e094f4bf70e0dd038e7ff7fc6e5539b1b4d078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146680400416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb53682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e08d4db9d76864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251aec29b32f8210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ac015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67784f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a700d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

2m34.124515658s ago: executing program 6 (id=2108):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000340)='z', 0x1}], 0x3, 0x6000000, 0x9, 0x0)

2m33.591814062s ago: executing program 6 (id=2122):
unshare(0x6020400)
r0 = socket(0x18, 0x2, 0x2)
connect$unix(r0, &(0x7f0000002740)=@abs={0x0, 0x0, 0x4e24}, 0x6e)

2m33.315789209s ago: executing program 6 (id=2132):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0)
shutdown(r0, 0x2)

2m33.225689898s ago: executing program 6 (id=2137):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c2, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)

2m33.158655175s ago: executing program 6 (id=2141):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
fcntl$setstatus(r0, 0x4, 0x400)

2m33.144499797s ago: executing program 6 (id=2142):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f0000001380)={0x2020}, 0x2020)
vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0)

2m30.82786938s ago: executing program 36 (id=1872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x2}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x44}}, 0x0)

2m25.970804538s ago: executing program 37 (id=2285):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
listen(r0, 0x3841b273)

2m17.283937263s ago: executing program 38 (id=2142):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f0000001380)={0x2020}, 0x2020)
vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0)

2m0.494273972s ago: executing program 8 (id=2907):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x10)

2m0.436489208s ago: executing program 8 (id=2911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c0001801400"], 0xe4}}, 0x0)

2m0.381683024s ago: executing program 8 (id=2913):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = dup(r0)
write$UHID_DESTROY(r1, 0x0, 0x0)

2m0.326719149s ago: executing program 8 (id=2918):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000300)="4e033b08bbb3707d54e4", 0xa}], 0x1, 0x4, 0x0)

2m0.274237664s ago: executing program 8 (id=2919):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x8, 0x8)

2m0.252886737s ago: executing program 8 (id=2920):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, 0x0)

1m45.20679897s ago: executing program 39 (id=2920):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, 0x0)

1m5.2797052s ago: executing program 5 (id=4662):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./bus\x00', 0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="646973636172645f756e69743d626c6f636b2c66617374626f6f742c6e6f646973636172642c6163746976655f6c6f67733d322c0006c38606e6c6d112a3f0abaf096da68d7bf347b460a36d902141afc9592eca70ee9eda45a80fe9238c8b13b489f3fb48c3178b7e8b4ef3c795d788d01fca2a37b3b7170a129c543a4f9ede5f687feac598be72990aab407151f39a98ef5d961d98788797bb9004ede31265fa2e9afc80bbe71bea1cdfddb9aa479350f84cc23423708e1d85903a6d406d40b6dc7c92ca68319bdcc8184b70839d213d08b527037cc2029704ed60fb4c1fefc000"/237], 0x1, 0x105b1, &(0x7f0000010640)="$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")
r0 = open(&(0x7f0000000100)='./file1\x00', 0x141242, 0x1b4)
pwrite64(r0, &(0x7f0000000940), 0x0, 0x8000c61)

1m2.24908404s ago: executing program 5 (id=4667):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x20}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)

1m2.204770774s ago: executing program 5 (id=4671):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000f"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

1m2.119567102s ago: executing program 5 (id=4674):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800)

1m1.83887096s ago: executing program 5 (id=4684):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240))

1m1.824161202s ago: executing program 5 (id=4685):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x1}}, 0x24, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0)

46.79156487s ago: executing program 40 (id=4685):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x1}}, 0x24, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0)

37.804672308s ago: executing program 9 (id=5502):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

37.804470609s ago: executing program 9 (id=5503):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)

37.748055704s ago: executing program 9 (id=5504):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
fstat(r0, &(0x7f0000000240))

37.677705801s ago: executing program 9 (id=5505):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@gid}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@errors_continue}, {@discard}, {@umask={'umask', 0x3d, 0x7}}, {@discard}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1541, &(0x7f0000000840)="$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")
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
stat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340))

37.555604484s ago: executing program 9 (id=5506):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

37.529976376s ago: executing program 9 (id=5507):
unshare(0x22020400)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
accept4(r0, 0x0, 0x0, 0x1800)

37.478521041s ago: executing program 41 (id=5507):
unshare(0x22020400)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
accept4(r0, 0x0, 0x0, 0x1800)

14.775201848s ago: executing program 7 (id=6268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14.736682952s ago: executing program 7 (id=6271):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)='=0Gz', 0x4}], 0x1}}], 0x1, 0x0)

14.689602196s ago: executing program 7 (id=6275):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))

14.661139779s ago: executing program 7 (id=6276):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000200)=ANY=[], 0x1, 0x226, &(0x7f0000000300)="$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")
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_inodes=E'])
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x35c0e2, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@huge_never}]})

14.612470114s ago: executing program 7 (id=6279):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}]}]}, 0x3c}}, 0x0)

14.502740515s ago: executing program 7 (id=6286):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x309}, 0x18}}, 0x0)
r0 = io_uring_setup(0x67bb, &(0x7f0000000280))
io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)

14.447341021s ago: executing program 42 (id=6286):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x309}, 0x18}}, 0x0)
r0 = io_uring_setup(0x67bb, &(0x7f0000000280))
io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)

2.039362408s ago: executing program 3 (id=6609):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "1839f45fc0723889c7f5877caaf7fb7dda5b8190582b216c82c2daaaad417cde7f3157df350dd000"}, 0x38)

1.91969823s ago: executing program 3 (id=6612):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x2000000000000094, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xe52, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.638433688s ago: executing program 0 (id=6621):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000f3000040"])

1.477138384s ago: executing program 0 (id=6622):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r0}, 0xc)

1.462457865s ago: executing program 0 (id=6623):
r0 = io_uring_setup(0x2553, &(0x7f0000000280))
r1 = epoll_create1(0x0)
r2 = dup3(r1, r0, 0x0)
epoll_pwait2(r2, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

1.337616528s ago: executing program 0 (id=6624):
io_setup(0x7, &(0x7f0000000100)=<r0=>0x0)
r1 = eventfd2(0x80007, 0x80800)
r2 = open(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x1b0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x416, r2, &(0x7f0000000040), 0x0, 0x9, 0x0, 0x1, r1}])

1.265069435s ago: executing program 0 (id=6626):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100)
close(r0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

640.957557ms ago: executing program 2 (id=6645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x34, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0)

623.646428ms ago: executing program 4 (id=6646):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x87)
accept4(r0, 0x0, 0x0, 0x400000000000000)

584.364232ms ago: executing program 2 (id=6647):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x0)
io_submit(r0, 0x2034, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r1, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x1000a, 0x0, 0x1, r1}])

570.175914ms ago: executing program 4 (id=6648):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x4, 0x1}, 0x50)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20)

569.809834ms ago: executing program 4 (id=6649):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

529.899258ms ago: executing program 4 (id=6650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x1b)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000e00), &(0x7f0000000e80), 0x4, r0}, 0x38)

529.526258ms ago: executing program 4 (id=6651):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50)

486.877852ms ago: executing program 4 (id=6652):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)

360.410104ms ago: executing program 0 (id=6664):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)

335.487047ms ago: executing program 1 (id=6655):
r0 = io_uring_setup(0x2553, &(0x7f0000000280))
r1 = epoll_create1(0x0)
r2 = dup3(r1, r0, 0x0)
epoll_pwait2(r2, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

322.218978ms ago: executing program 2 (id=6656):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

289.069231ms ago: executing program 2 (id=6657):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18)
ustat(0x10000000801, &(0x7f0000000040))

288.554252ms ago: executing program 1 (id=6658):
unshare(0x62040200)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54)

235.571586ms ago: executing program 2 (id=6659):
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000140)='./file0\x00', 0x1000848, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x1, 0x385, &(0x7f0000006400)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0)

164.276934ms ago: executing program 3 (id=6660):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@flowinfo={{0x14, 0x29, 0xb, 0x4064}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x5c}}}], 0x30}, 0xc4)

156.392065ms ago: executing program 1 (id=6661):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0)

125.303058ms ago: executing program 1 (id=6662):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x1dc, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x18c, 0x1, [@m_ctinfo={0x130, 0x1e, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10001}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xf1, 0x6, "b15e4c649bdae8185ae0bc656a861dbd91e040af5d230a24bc417dfc714b8cd0ba5ab6c80851af1d598dc492dacfbbc642a2f9a648fd61b730ae55be17fce431a1a362e64a41f132e3c3f5de349f81839ce7f0d1d15a819b7e33bf0e3a904a3c78613fa9bc4b178e7f2ef3fea50d80cad47854a3e616933f8838c80bdd43d2eed8ae9d47378d98991bf9ccfd16da4300c47c984e8f0569a621ada430155140835ecf2dda4f5c54e50e643e1a5e5f4490d1f9297216293dda5421e59f594e7d5d58101bdf921ff31a1df8f29a5741eb657f9480fb6198bc15b40f1459fc4587734125aa32ead8e37bfbfbc619d8"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}, @m_connmark={0x58, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x25, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8891}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

124.993058ms ago: executing program 3 (id=6663):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14)
sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000800)

44.903486ms ago: executing program 1 (id=6665):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000080000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

44.738906ms ago: executing program 3 (id=6666):
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='./file0\x00')

24.211448ms ago: executing program 2 (id=6675):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xfffffff7, 0x0, 0x0, 0xfdff, 0xdc, "6ae23ae16f51000009faeeaf000000000400", 0x10})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4)

5.71424ms ago: executing program 3 (id=6667):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 1 (id=6678):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4})

kernel console output (not intermixed with test programs):

03 comm="syz.7.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  188.603072][T11085] EXT4-fs (loop9): re-mounted. Quota mode: none.
[  188.647731][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  188.663870][   T28] audit: type=1326 audit(1760743933.213:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.7.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  189.164697][T11132] loop3: detected capacity change from 0 to 40427
[  189.185660][T11132] F2FS-fs (loop3): Invalid log blocks per segment (83886089)
[  189.193531][T11132] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  189.205945][T11154] loop2: detected capacity change from 0 to 7
[  189.222892][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  189.232969][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  189.243582][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  189.243599][T11132] F2FS-fs (loop3): invalid crc value
[  189.243626][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  189.243760][T11154]  loop2: unable to read partition table
[  189.283778][T11132] F2FS-fs (loop3): Found nat_bits in checkpoint
[  189.290427][T11154] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  189.310281][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  189.319541][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  189.327956][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  189.337298][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  189.349799][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  189.359105][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  189.368865][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  189.378135][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  189.390155][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  189.399380][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  189.436471][T11132] F2FS-fs (loop3): Start checkpoint disabled!
[  189.474792][T11132] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  189.487151][T11132] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  189.572978][T11181] syz.0.4906[11181] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  189.573071][T11181] syz.0.4906[11181] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  189.650698][ T1351] kworker/u4:5: attempt to access beyond end of device
[  189.650698][ T1351] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  189.788729][T11204] netlink: 'syz.9.4918': attribute type 10 has an invalid length.
[  190.274662][T11237] netlink: 'syz.3.4932': attribute type 2 has an invalid length.
[  190.807746][T11201] loop7: detected capacity change from 0 to 131072
[  190.821341][T11201] F2FS-fs (loop7): Test dummy encryption mode enabled
[  190.883848][T11201] F2FS-fs (loop7): Found nat_bits in checkpoint
[  190.972618][T11201] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b
[  190.977003][T11301] netlink: 'syz.0.4961': attribute type 3 has an invalid length.
[  191.577066][T11358] binfmt_misc: register: failed to install interpreter file ./file2
[  191.736535][T11374] loop3: detected capacity change from 0 to 512
[  192.803173][T11374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002]
[  193.119953][T11374] System zones: 1-12
[  193.136294][T11374] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.4997: corrupted in-inode xattr
[  193.161334][T11374] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4997: couldn't read orphan inode 15 (err -117)
[  193.192726][T11374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  193.294363][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  193.382799][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  193.382820][   T28] audit: type=1400 audit(1760743937.993:1109): avc:  denied  { getopt } for  pid=11402 comm="syz.7.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  193.463993][   T28] audit: type=1400 audit(1760743938.073:1110): avc:  denied  { map } for  pid=11412 comm="syz.9.5016" path="socket:[55716]" dev="sockfs" ino=55716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  193.527037][   T28] audit: type=1400 audit(1760743938.073:1111): avc:  denied  { read write } for  pid=11412 comm="syz.9.5016" path="socket:[55716]" dev="sockfs" ino=55716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  193.620182][   T28] audit: type=1400 audit(1760743938.213:1112): avc:  denied  { read } for  pid=11429 comm="syz.0.5023" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  193.687066][   T28] audit: type=1400 audit(1760743938.213:1113): avc:  denied  { open } for  pid=11429 comm="syz.0.5023" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  193.801728][T11454] option changes via remount are deprecated (pid=11453 comm=syz.9.5036)
[  193.863745][   T28] audit: type=1400 audit(1760743938.473:1114): avc:  denied  { setopt } for  pid=11463 comm="syz.3.5040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  194.190212][  T289] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  194.271272][T11509] loop3: detected capacity change from 0 to 1024
[  194.298663][T11509] EXT4-fs: Ignoring removed nobh option
[  194.304551][T11509] EXT4-fs: Ignoring removed bh option
[  194.310794][T11509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  194.356454][T11509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  194.380180][  T289] usb 10-1: Using ep0 maxpacket: 8
[  194.387025][  T289] usb 10-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  194.441152][  T289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.460581][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  194.501258][  T289] usb 10-1: config 0 descriptor??
[  194.598593][   T28] audit: type=1400 audit(1760743939.203:1115): avc:  denied  { setopt } for  pid=11532 comm="syz.7.5073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  194.759087][T11542] loop3: detected capacity change from 0 to 256
[  194.770645][T11542] exfat: Deprecated parameter 'namecase'
[  194.786284][T11542] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  194.942001][  T289] magicmouse 0003:05AC:0324.0036: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.9-1/input0
[  194.976157][T11552] xt_hashlimit: size too large, truncated to 1048576
[  195.142491][  T289] usb 10-1: USB disconnect, device number 14
[  195.618435][T11588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  195.625872][T11588] IPv6: NLM_F_CREATE should be set when creating new route
[  195.633279][T11588] IPv6: NLM_F_CREATE should be set when creating new route
[  195.763054][   T28] audit: type=1400 audit(1760743940.373:1116): avc:  denied  { getopt } for  pid=11600 comm="syz.3.5104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  196.090220][ T1422] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  196.195115][T11624] loop9: detected capacity change from 0 to 512
[  196.222312][T11624] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  196.237629][T11624] ext4 filesystem being mounted at /654/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.291276][ T1422] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.301937][ T1422] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  196.313326][   T28] audit: type=1400 audit(1760743940.913:1117): avc:  denied  { rmdir } for  pid=5162 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  196.336415][ T1422] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.346402][   T28] audit: type=1400 audit(1760743940.943:1118): avc:  denied  { rmdir } for  pid=5162 comm="syz-executor" name="work" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  196.347675][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  196.368829][ T1422] usb 4-1: config 0 interface 0 has no altsetting 0
[  196.381325][ T1422] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  196.390741][ T1422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.404169][ T1422] usb 4-1: config 0 descriptor??
[  196.445350][T11628] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5116'.
[  196.470392][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5116'.
[  196.827802][ T1422] kye 0003:0458:5019.0037: unknown main item tag 0x0
[  196.844412][ T1422] kye 0003:0458:5019.0037: unknown main item tag 0x0
[  196.860249][ T1422] kye 0003:0458:5019.0037: unknown main item tag 0x0
[  196.879403][ T1422] kye 0003:0458:5019.0037: unknown main item tag 0x0
[  196.890238][ T1422] kye 0003:0458:5019.0037: unknown main item tag 0x0
[  196.899208][ T1422] kye 0003:0458:5019.0037: hidraw0: USB HID v0.09 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0
[  196.911025][ T1422] kye 0003:0458:5019.0037: tablet-enabling feature report not found
[  196.930549][ T1422] kye 0003:0458:5019.0037: tablet enabling failed
[  197.054338][  T343] usb 4-1: USB disconnect, device number 24
[  197.130005][T11691] loop7: detected capacity change from 0 to 512
[  197.147253][T11691] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  197.171476][T11691] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  197.182628][T11691] ext4 filesystem being mounted at /701/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.206167][T11691] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.5146: corrupted xattr block 19
[  197.235269][T11691] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  197.253284][T11691] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.5146: corrupted xattr block 19
[  197.277310][T11700] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.5146: corrupted xattr block 19
[  197.278476][T11691] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  197.324534][T11700] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  197.340509][T11700] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.5146: corrupted xattr block 19
[  197.370649][T11700] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  197.430353][T11688] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  197.471479][T11688] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2934: inode #15: comm syz.7.5146: corrupted xattr block 19
[  197.490475][T11688] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117)
[  197.536846][ T4540] EXT4-fs (loop7): unmounting filesystem.
[  197.622066][T11731] loop7: detected capacity change from 0 to 256
[  197.866866][    T8] tipc: Disabling bearer <eth:vlan0>
[  197.872448][    T8] tipc: Left network mode
[  197.963402][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5186'.
[  198.055548][T11768] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.073389][T11768] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.081935][T11768] device bridge_slave_0 entered promiscuous mode
[  198.118607][T11768] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.126853][T11768] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.135091][T11768] device bridge_slave_1 entered promiscuous mode
[  198.150229][ T1422] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  198.311685][T11768] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.318902][T11768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.326262][T11768] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.333432][T11768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.358129][ T1422] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  198.376813][ T1422] usb 4-1: config 0 interface 0 has no altsetting 0
[  198.384080][ T1422] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  198.393595][ T1422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.396169][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  198.408361][ T1422] usb 4-1: config 0 descriptor??
[  198.414276][ T1351] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.427813][ T1351] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.435842][T11761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  198.458114][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  198.466985][T11835] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  198.467561][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.481603][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.493392][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  198.502241][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.509351][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.529351][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  198.539328][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  198.556444][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  198.573050][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  198.581688][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  198.589349][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  198.598325][T11768] device veth0_vlan entered promiscuous mode
[  198.613830][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  198.625484][T11768] device veth1_macvtap entered promiscuous mode
[  198.640155][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.640299][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  198.640314][   T28] audit: type=1326 audit(1760743943.252:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f98efc9 code=0x7ffc0000
[  198.652348][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  198.661164][   T28] audit: type=1326 audit(1760743943.272:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f98efc9 code=0x7ffc0000
[  198.711582][   T28] audit: type=1326 audit(1760743943.292:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1e2f98efc9 code=0x7ffc0000
[  198.737480][   T28] audit: type=1326 audit(1760743943.292:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f98efc9 code=0x7ffc0000
[  198.766262][   T28] audit: type=1326 audit(1760743943.292:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f98efc9 code=0x7ffc0000
[  198.790714][   T28] audit: type=1326 audit(1760743943.292:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f1e2f98efc9 code=0x7ffc0000
[  198.821223][    T8] device bridge_slave_1 left promiscuous mode
[  198.827449][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.845913][    T8] device bridge_slave_0 left promiscuous mode
[  198.852908][ T1422] dragonrise 0003:0079:0011.0038: item fetching failed at offset 4/5
[  198.857773][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.872072][ T1422] dragonrise 0003:0079:0011.0038: parse failed
[  198.876264][   T28] audit: type=1326 audit(1760743943.292:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f98efc9 code=0x7ffc0000
[  198.888963][ T1422] dragonrise: probe of 0003:0079:0011.0038 failed with error -22
[  198.909973][   T28] audit: type=1326 audit(1760743943.292:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.0.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f98efc9 code=0x7ffc0000
[  198.920239][    T8] device veth1_macvtap left promiscuous mode
[  198.983044][    T8] device veth0_vlan left promiscuous mode
[  199.080562][  T665] usb 4-1: USB disconnect, device number 25
[  199.221421][   T28] audit: type=1400 audit(1760743943.832:1136): avc:  denied  { map } for  pid=11871 comm="syz.9.5228" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  199.269022][   T28] audit: type=1400 audit(1760743943.872:1137): avc:  denied  { ioctl } for  pid=11877 comm="syz.7.5229" path="socket:[57604]" dev="sockfs" ino=57604 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  199.375769][T11892] loop7: detected capacity change from 0 to 512
[  199.538611][T11919] loop7: detected capacity change from 0 to 256
[  199.551143][T11919] FAT-fs (loop7): Unrecognized mount option "i66" or missing value
[  199.658045][T11934] loop9: detected capacity change from 0 to 512
[  199.670905][T11934] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  199.729166][T11934] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  199.729264][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5262'.
[  199.743178][T11934] ext4 filesystem being mounted at /689/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.765301][T11948] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5262'.
[  199.787532][T11934] EXT4-fs error (device loop9): ext4_xattr_block_get:546: inode #15: comm syz.9.5257: corrupted xattr block 19
[  199.807071][T11934] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  199.816650][T11934] EXT4-fs error (device loop9): ext4_xattr_block_get:546: inode #15: comm syz.9.5257: corrupted xattr block 19
[  199.831227][T11953] bridge0: port 3(veth1_macvtap) entered blocking state
[  199.831977][T11934] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  199.847206][T11953] bridge0: port 3(veth1_macvtap) entered disabled state
[  199.847993][T11956] EXT4-fs error (device loop9): ext4_xattr_block_get:546: inode #15: comm syz.9.5257: corrupted xattr block 19
[  199.868269][T11956] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  199.879409][T11956] EXT4-fs error (device loop9): ext4_xattr_block_get:546: inode #15: comm syz.9.5257: corrupted xattr block 19
[  199.891870][T11956] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  199.911700][T11933] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  199.926879][T11933] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2934: inode #15: comm syz.9.5257: corrupted xattr block 19
[  199.939895][T11933] EXT4-fs warning (device loop9): ext4_evict_inode:299: xattr delete (err -117)
[  199.957363][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  199.983810][T11966] loop9: detected capacity change from 0 to 512
[  200.001609][T11966] EXT4-fs warning (device loop9): ext4_xattr_inode_get:495: inode #11: comm syz.9.5270: ea_inode file size=4 entry size=6
[  200.015094][T11966] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #15: comm syz.9.5270: corrupted inode contents
[  200.027436][T11966] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #15: comm syz.9.5270: mark_inode_dirty error
[  200.039191][T11966] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #15: comm syz.9.5270: corrupted inode contents
[  200.051468][T11966] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2963: inode #15: comm syz.9.5270: mark_inode_dirty error
[  200.064255][T11966] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2966: inode #15: comm syz.9.5270: mark inode dirty (error -117)
[  200.083048][T11966] EXT4-fs warning (device loop9): ext4_evict_inode:299: xattr delete (err -117)
[  200.092493][T11966] EXT4-fs (loop9): 1 orphan inode deleted
[  200.098411][T11966] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  200.141554][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  200.187095][T11977] loop9: detected capacity change from 0 to 4096
[  200.202263][T11977] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  200.222005][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  200.758923][T11991] loop3: detected capacity change from 0 to 512
[  200.769032][T11991] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  200.785587][T11991] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  200.795389][T11991] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.811509][T11997] loop9: detected capacity change from 0 to 512
[  200.820064][T11991] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.5281: corrupted xattr block 19
[  200.833138][T11991] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  200.843248][T11991] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.5281: corrupted xattr block 19
[  200.845198][T11997] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  200.855531][T11991] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  200.865512][T11997] ext4 filesystem being mounted at /698/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.875439][T11991] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  200.899978][T11991] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2934: inode #15: comm syz.3.5281: corrupted xattr block 19
[  200.912728][T11991] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117)
[  200.925491][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  200.957867][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  201.149724][T12006] loop3: detected capacity change from 0 to 40427
[  201.171625][T12006] F2FS-fs (loop3): fault_injection options not supported
[  201.179211][T12006] F2FS-fs (loop3): fault_type options not supported
[  201.199138][T12006] F2FS-fs (loop3): invalid crc value
[  201.228417][T12006] F2FS-fs (loop3): Found nat_bits in checkpoint
[  201.236115][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5299'.
[  201.309946][T12006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  201.341164][T12045] loop9: detected capacity change from 0 to 256
[  201.362098][T12045] FAT-fs (loop9): Directory bread(block 64) failed
[  201.377914][T12045] FAT-fs (loop9): Directory bread(block 65) failed
[  201.385233][T12045] FAT-fs (loop9): Directory bread(block 66) failed
[  201.392139][T12045] FAT-fs (loop9): Directory bread(block 67) failed
[  201.400059][T12045] FAT-fs (loop9): Directory bread(block 68) failed
[  201.406689][T12045] FAT-fs (loop9): Directory bread(block 69) failed
[  201.414424][T12045] FAT-fs (loop9): Directory bread(block 70) failed
[  201.421294][T12045] FAT-fs (loop9): Directory bread(block 71) failed
[  201.422069][ T7819] syz-executor: attempt to access beyond end of device
[  201.422069][ T7819] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.427994][T12045] FAT-fs (loop9): Directory bread(block 72) failed
[  201.448961][T12045] FAT-fs (loop9): Directory bread(block 73) failed
[  201.628397][T12068] loop9: detected capacity change from 0 to 256
[  201.666332][T12068] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.699814][T12068] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  201.717095][T12068] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d)
[  201.736172][T12081] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5322'.
[  201.745651][T12081] netlink: 'syz.1.5322': attribute type 6 has an invalid length.
[  201.763261][T12081] netlink: 'syz.1.5322': attribute type 5 has an invalid length.
[  201.771259][T12081] netlink: 'syz.1.5322': attribute type 4 has an invalid length.
[  201.814441][T12087] loop1: detected capacity change from 0 to 512
[  201.830438][T12090] loop9: detected capacity change from 0 to 512
[  201.842220][T12090] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  201.853417][T12087] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  201.864328][T12090] EXT4-fs (loop9): 1 truncate cleaned up
[  201.874125][T12090] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  201.890735][T12090] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.5326: corrupted in-inode xattr
[  201.903667][T12090] EXT4-fs warning (device loop9): ext4_xattr_set_entry:1732: inode #15: comm syz.9.5326: unable to update i_inline_off
[  201.916614][T12090] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.5326: corrupted in-inode xattr
[  201.930193][T12087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  201.939466][T12087] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.966068][T12087] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.5325: corrupted xattr block 19
[  201.979985][T12087] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  201.985690][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  201.998143][T12087] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.5325: corrupted xattr block 19
[  202.020445][T12107] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.5325: corrupted xattr block 19
[  202.036275][T12087] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  202.054979][T12107] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  202.070045][T12107] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.5325: corrupted xattr block 19
[  202.091204][T12107] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  202.112592][T12086] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  202.139243][T12086] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2934: inode #15: comm syz.1.5325: corrupted xattr block 19
[  202.153481][T12086] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117)
[  202.191016][T11768] EXT4-fs (loop1): unmounting filesystem.
[  202.447147][T12165] loop9: detected capacity change from 0 to 256
[  202.523235][T12171] loop9: detected capacity change from 0 to 512
[  202.586986][T12171] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  202.596768][T12171] ext4 filesystem being mounted at /727/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  202.644550][T12171] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #2: comm syz.9.5365: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  202.678210][T12171] EXT4-fs (loop9): Remounting filesystem read-only
[  202.693947][T12189] loop0: detected capacity change from 0 to 128
[  202.734848][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  202.743951][T12189] EXT4-fs: Ignoring removed nobh option
[  202.756223][T12191] raw_sendmsg: syz.7.5373 forgot to set AF_INET. Fix it!
[  202.792933][T12189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  202.796401][T12189] ext4 filesystem being mounted at /641/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  202.858452][T12189] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full
[  202.888671][ T5349] EXT4-fs (loop0): unmounting filesystem.
[  203.070240][T12229] netlink: 519 bytes leftover after parsing attributes in process `syz.9.5389'.
[  203.087071][T12188] loop3: detected capacity change from 0 to 40427
[  203.120237][T12188] F2FS-fs (loop3): fault_injection options not supported
[  203.141191][T12240] loop7: detected capacity change from 0 to 16
[  203.150665][T12240] erofs: (device loop7): mounted with root inode @ nid 36.
[  203.170733][T12188] F2FS-fs (loop3): invalid crc value
[  203.179187][T12243] loop9: detected capacity change from 0 to 512
[  203.200580][T12188] F2FS-fs (loop3): Found nat_bits in checkpoint
[  203.233626][T12243] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.5398: bad orphan inode 11
[  203.272791][T12188] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  203.281321][T12243] ext4_test_bit(bit=10, block=4) = 1
[  203.287357][T12243] is_bad_inode(inode)=0
[  203.294577][T12258] loop7: detected capacity change from 0 to 512
[  203.299773][T12243] NEXT_ORPHAN(inode)=2080374784
[  203.306138][T12258] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  203.335053][T12243] max_ino=32
[  203.342942][T12243] i_nlink=0
[  203.353458][T12243] EXT4-fs (loop9): 1 truncate cleaned up
[  203.359262][T12258] EXT4-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended
[  203.369379][T12243] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  203.369404][ T7819] syz-executor: attempt to access beyond end of device
[  203.369404][ T7819] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.385515][T12258] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.5401: inode #15: comm syz.7.5401: iget: illegal inode #
[  203.407741][T12258] EXT4-fs (loop7): Remounting filesystem read-only
[  203.414744][T12258] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5401: couldn't read orphan inode 15 (err -117)
[  203.429673][T12258] EXT4-fs (loop7): Remounting filesystem read-only
[  203.432896][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  203.437243][T12258] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  203.476160][T12265] loop9: detected capacity change from 0 to 256
[  203.493665][ T4540] EXT4-fs (loop7): unmounting filesystem.
[  203.508157][T12265] exfat: Deprecated parameter 'utf8'
[  203.526890][T12265] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb6e35f66, utbl_chksum : 0xe619d30d)
[  203.621719][T12273] device macsec0 entered promiscuous mode
[  203.717276][T12287] loop9: detected capacity change from 0 to 256
[  203.738241][T12287] exfat: Deprecated parameter 'utf8'
[  203.762596][T12287] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  203.875056][T12299] device sit0 entered promiscuous mode
[  203.886698][T12299] netlink: 'syz.9.5422': attribute type 1 has an invalid length.
[  203.899182][T12299] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5422'.
[  204.063265][T12283] loop7: detected capacity change from 0 to 40427
[  204.084631][T12283] F2FS-fs (loop7): invalid crc value
[  204.119873][T12283] F2FS-fs (loop7): Found nat_bits in checkpoint
[  204.127275][T12314] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5429'.
[  204.199213][T12283] F2FS-fs (loop7): Start checkpoint disabled!
[  204.223280][T12289] loop1: detected capacity change from 0 to 40427
[  204.239639][T12283] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  204.253924][T12289] F2FS-fs (loop1): fault_injection options not supported
[  204.280003][T12289] F2FS-fs (loop1): invalid crc value
[  204.310193][T12289] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  204.405324][T12289] F2FS-fs (loop1): Start checkpoint disabled!
[  204.425100][T12289] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  204.464806][   T28] kauditd_printk_skb: 21 callbacks suppressed
[  204.464826][   T28] audit: type=1326 audit(1760743949.073:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12333 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  204.495739][   T28] audit: type=1326 audit(1760743949.073:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12333 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  204.520407][   T28] audit: type=1326 audit(1760743949.103:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12333 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  204.552648][   T28] audit: type=1326 audit(1760743949.103:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12333 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  204.577094][   T28] audit: type=1326 audit(1760743949.103:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12333 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  204.760951][T12354] loop7: detected capacity change from 0 to 128
[  204.799954][T12354] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  204.820023][T12354] ext4 filesystem being mounted at /752/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  204.871793][T12365] usb usb8: usbfs: process 12365 (syz.1.5451) did not claim interface 9 before use
[  204.915973][ T4540] EXT4-fs (loop7): unmounting filesystem.
[  204.948278][T12367] loop3: detected capacity change from 0 to 512
[  204.990798][T12367] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  205.022371][T12379] futex_wake_op: syz.1.5455 tries to shift op by 144; fix this program
[  205.031633][T12367] EXT4-fs (loop3): orphan cleanup on readonly fs
[  205.038237][T12367] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.5453: Block bitmap for bg 0 marked uninitialized
[  205.052236][T12367] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  205.064486][T12367] EXT4-fs (loop3): 1 orphan inode deleted
[  205.071916][T12367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  205.091823][T12367] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  205.106242][T12381] device macsec0 entered promiscuous mode
[  205.109898][T12367] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  205.126107][T12367] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.5453: Block bitmap for bg 0 marked uninitialized
[  205.148172][T12367] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.5453: Block bitmap for bg 0 marked uninitialized
[  205.165028][T12387] loop1: detected capacity change from 0 to 512
[  205.169710][T12367] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.5453: Block bitmap for bg 0 marked uninitialized
[  205.185707][T12389] loop7: detected capacity change from 0 to 512
[  205.208786][T12389] EXT4-fs (loop7): 1 truncate cleaned up
[  205.213695][T12387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  205.215365][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  205.229845][T12387] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.245733][T12389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  205.253789][T12394] loop9: detected capacity change from 0 to 256
[  205.276145][T12394] exFAT-fs (loop9): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[  205.287508][T12394] exFAT-fs (loop9): failed to load upcase table
[  205.302315][T11768] EXT4-fs (loop1): unmounting filesystem.
[  205.303896][T12394] exFAT-fs (loop9): failed to recognize exfat type
[  205.323040][ T4540] EXT4-fs (loop7): unmounting filesystem.
[  205.365829][T12402] netlink: 'syz.7.5465': attribute type 2 has an invalid length.
[  205.397387][T12406] binder: BINDER_SET_CONTEXT_MGR already set
[  205.414506][T12406] binder: 12405:12406 ioctl 40046207 0 returned -16
[  205.682165][T12457] loop1: detected capacity change from 0 to 128
[  205.859345][  T665] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  206.009293][  T289] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  206.040597][  T665] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  206.052123][  T665] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  206.063191][  T665] usb 4-1: config 0 interface 0 has no altsetting 0
[  206.070248][  T665] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  206.079619][  T665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.088399][  T665] usb 4-1: config 0 descriptor??
[  206.094169][T12440] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  206.200571][  T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  206.211814][  T289] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  206.220926][  T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.230320][  T289] usb 2-1: config 0 descriptor??
[  206.235702][T12463] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  206.506697][  T665] logitech 0003:046D:C24F.0039: global environment stack underflow
[  206.514832][  T665] logitech 0003:046D:C24F.0039: item 0 4 1 11 parsing failed
[  206.526142][  T665] logitech 0003:046D:C24F.0039: parse failed
[  206.532724][  T665] logitech: probe of 0003:046D:C24F.0039 failed with error -22
[  206.572167][T12476] loop9: detected capacity change from 0 to 512
[  206.579037][T12476] EXT4-fs: Ignoring removed i_version option
[  206.585455][T12476] EXT4-fs: Ignoring removed bh option
[  206.601251][T12476] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  206.611444][T12476] ext4 filesystem being mounted at /765/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  206.627347][T12476] EXT4-fs error (device loop9): ext4_resize_begin:62: comm syz.9.5503: resize_inode disabled but reserved GDT blocks non-zero
[  206.646867][  T289] wacom 0003:056A:0029.003A: Unknown device_type for 'HID 056a:0029'. Assuming pen.
[  206.657341][ T5162] EXT4-fs (loop9): unmounting filesystem.
[  206.663456][  T289] wacom 0003:056A:0029.003A: hidraw0: USB HID v1.01 Device [HID 056a:0029] on usb-dummy_hcd.1-1/input0
[  206.675732][  T289] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0029.003A/input/input38
[  206.726581][  T665] usb 4-1: USB disconnect, device number 26
[  206.729078][T12484] loop9: detected capacity change from 0 to 256
[  206.747552][T12484] exfat: Deprecated parameter 'utf8'
[  206.756006][T12484] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d)
[  206.771394][   T28] audit: type=1400 audit(1760743951.383:1164): avc:  denied  { mounton } for  pid=12483 comm="syz.9.5505" path="/767/file0/file0" dev="loop9" ino=1048906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  206.849228][  T289] usb 2-1: USB disconnect, device number 12
[  207.048258][T12488] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.055797][T12488] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.064781][T12488] device bridge_slave_0 entered promiscuous mode
[  207.072604][T12488] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.080094][T12488] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.087713][T12488] device bridge_slave_1 entered promiscuous mode
[  207.190394][T12506] loop0: detected capacity change from 0 to 512
[  207.213572][T12506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  207.213751][T12488] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.229830][T12488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.237243][T12488] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.239337][T12506] ext4 filesystem being mounted at /654/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.244487][T12488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.274957][T12506] EXT4-fs error (device loop0): ext4_get_first_dir_block:3583: inode #12: comm syz.0.5516: Directory hole found for htree leaf block 0
[  207.289021][   T28] audit: type=1400 audit(1760743951.883:1165): avc:  denied  { unlink } for  pid=12505 comm="syz.0.5516" name="file5" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  207.335975][ T5349] EXT4-fs (loop0): unmounting filesystem.
[  207.336809][   T28] audit: type=1400 audit(1760743951.883:1166): avc:  denied  { rename } for  pid=12505 comm="syz.0.5516" name="file5" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  207.373580][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  207.388891][T10568] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.402490][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.410436][T10568] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.418152][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.426640][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.430798][   T42] device bridge_slave_1 left promiscuous mode
[  207.445445][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.453481][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.461321][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.468926][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.476734][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.484451][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.492414][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.500129][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.507678][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.515472][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.523555][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.531525][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.539403][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.546864][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.554904][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.562856][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.570756][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.578336][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.586499][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.594102][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.601625][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.609153][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.616741][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.624431][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.632064][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.639532][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.646962][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.654452][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.661945][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.669497][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.676924][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.684417][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.691986][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.699536][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.706962][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.714505][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.722079][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.729660][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.737272][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.744913][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.752506][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.760029][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.767589][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.775052][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.782735][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.790230][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.797831][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.805311][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.812756][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.820299][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.827823][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.835491][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.843097][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.850633][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.858112][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.865767][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.873471][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.881500][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.889547][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.897344][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.906045][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.913781][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.921536][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.929543][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.937448][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.945122][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.953211][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.961225][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.968758][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.976712][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.984289][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.991980][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  207.999931][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.007998][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.015742][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.023735][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.031834][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.039874][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.047342][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.054945][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.062838][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.070977][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.078675][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.086288][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.094146][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.102215][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.109865][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.117813][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.125416][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.133023][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.140486][  T343] hid-generic 0000:0000:0080.003B: unknown main item tag 0x0
[  208.149155][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.149279][  T343] hid-generic 0000:0000:0080.003B: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  208.189315][   T42] device veth1_macvtap left promiscuous mode
[  208.195970][   T42] device veth0_vlan left promiscuous mode
[  208.200695][T12531] fido_id[12531]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  208.281995][   T28] audit: type=1400 audit(1760743952.893:1167): avc:  denied  { setcurrent } for  pid=12540 comm="syz.3.5528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  208.382418][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  208.391017][T10568] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.398311][T10568] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.428532][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  208.437692][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  208.446694][T10568] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.454465][T10568] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.464287][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.473470][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.482364][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.495807][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.649092][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.659292][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  208.672100][T12488] device veth0_vlan entered promiscuous mode
[  208.703213][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  208.718034][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  208.735511][T12488] device veth1_macvtap entered promiscuous mode
[  208.747567][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  208.755948][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  208.848991][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  208.857850][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  208.934032][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  209.656190][T12553] loop1: detected capacity change from 0 to 256
[  209.656430][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.673811][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.689080][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  209.700320][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  209.701587][T12553] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d)
[  209.741836][T12557] loop7: detected capacity change from 0 to 256
[  209.773555][T12557] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  209.853647][   T28] audit: type=1400 audit(1760743954.463:1168): avc:  denied  { ioctl } for  pid=12556 comm="syz.7.5535" path="/766/file0/hugetlb.2MB.usage_in_bytes" dev="loop7" ino=1048918 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  209.918657][T12575] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5542'.
[  209.939111][T12575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5542'.
[  209.955316][T12575] tipc: Started in network mode
[  209.968502][T12575] tipc: Node identity fffffe01, cluster identity 64
[  209.975915][T12575] tipc: Node number set to 4294966785
[  209.985294][T12575] tipc: Cannot configure node identity twice
[  209.991443][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5545'.
[  210.272768][T12609] netlink: 'syz.1.5559': attribute type 11 has an invalid length.
[  210.512752][T12624] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  210.556812][   T28] audit: type=1400 audit(1760743955.164:1169): avc:  denied  { mounton } for  pid=12625 comm="syz.3.5568" path="/syzcgroup/net/syz3/cgroup.procs" dev="cgroup" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  210.948571][T12643] loop4: detected capacity change from 0 to 512
[  210.985151][T12643] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  211.010284][T12643] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  211.039014][T12643] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  211.063705][T12643] System zones: 0-2, 18-18, 34-34
[  211.089566][T12643] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.5575: inode #15: comm syz.4.5575: iget: illegal inode #
[  211.123408][T12643] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.5575: couldn't read orphan inode 15 (err -117)
[  211.146662][T12643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  211.223563][T12488] EXT4-fs (loop4): unmounting filesystem.
[  211.276260][T12651] loop0: detected capacity change from 0 to 512
[  211.308806][T12652] loop4: detected capacity change from 0 to 512
[  211.319664][T12652] EXT4-fs: Ignoring removed i_version option
[  211.326317][T12652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  211.330083][T12651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  211.362213][T12651] ext4 filesystem being mounted at /657/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.400371][T12652] EXT4-fs (loop4): 1 truncate cleaned up
[  211.406116][T12652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  211.510443][ T5349] EXT4-fs (loop0): unmounting filesystem.
[  211.590181][T12488] EXT4-fs (loop4): unmounting filesystem.
[  211.593509][T12659] loop1: detected capacity change from 0 to 512
[  211.603132][T12659] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  211.635827][T12668] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  211.745299][T12683] loop1: detected capacity change from 0 to 256
[  211.796876][T12690] device syz_tun entered promiscuous mode
[  211.824124][T12690] device syz_tun left promiscuous mode
[  211.852358][T12693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5597'.
[  211.899815][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5599'.
[  211.927549][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5599'.
[  211.997552][T12708] can0: slcan on ptm0.
[  212.059402][T12706] can0 (unregistered): slcan off ptm0.
[  212.100780][T12725] overlayfs: workdir and upperdir must be separate subtrees
[  212.187093][T12739] loop3: detected capacity change from 0 to 128
[  212.231009][T12739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  212.268614][T12739] ext4 filesystem being mounted at /417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  212.320438][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  212.423826][T12765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5624'.
[  212.561673][T12784] loop3: detected capacity change from 0 to 1024
[  212.619247][T12784] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  212.669501][   T28] audit: type=1400 audit(1760743957.284:1170): avc:  denied  { setattr } for  pid=12783 comm="syz.3.5631" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  214.322721][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  214.536175][   T28] audit: type=1400 audit(1760743959.144:1171): avc:  denied  { bind } for  pid=12829 comm="syz.1.5649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  214.643014][T12807] loop3: detected capacity change from 0 to 40427
[  214.666651][T12807] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  214.684983][T12807] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  214.712737][   T28] audit: type=1326 audit(1760743959.324:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.4.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  214.738808][T12807] F2FS-fs (loop3): invalid crc value
[  214.751556][   T28] audit: type=1326 audit(1760743959.324:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.4.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  214.792419][   T28] audit: type=1326 audit(1760743959.324:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.4.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  214.835380][   T28] audit: type=1326 audit(1760743959.324:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.4.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  214.859278][   T28] audit: type=1326 audit(1760743959.324:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.4.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  214.870035][T12807] F2FS-fs (loop3): Found nat_bits in checkpoint
[  214.896383][T12867] loop4: detected capacity change from 0 to 1024
[  214.910761][T12867] EXT4-fs: Ignoring removed oldalloc option
[  214.917680][T12867] EXT4-fs: Ignoring removed bh option
[  214.928382][T12867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  214.934069][   T28] audit: type=1400 audit(1760743959.534:1177): avc:  denied  { getopt } for  pid=12869 comm="syz.7.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  214.990847][T12879] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5670'.
[  215.008758][T12867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  215.044662][T12488] EXT4-fs (loop4): unmounting filesystem.
[  215.055499][T12807] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  215.065473][T12807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  215.325181][T12920] loop0: detected capacity change from 0 to 512
[  215.389679][T12920] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.5690: bad orphan inode 11
[  215.422794][T12920] ext4_test_bit(bit=10, block=4) = 1
[  215.430696][T12920] is_bad_inode(inode)=0
[  215.435103][T12920] NEXT_ORPHAN(inode)=2080374784
[  215.448149][T12920] max_ino=32
[  215.451454][T12920] i_nlink=0
[  215.469085][T12920] EXT4-fs (loop0): 1 truncate cleaned up
[  215.478516][T12920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  215.505337][T12937] loop7: detected capacity change from 0 to 512
[  215.566564][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5703'.
[  215.588663][T12937] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  215.606492][ T5349] EXT4-fs (loop0): unmounting filesystem.
[  215.609545][T12937] ext4 filesystem being mounted at /787/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.633838][   T28] audit: type=1400 audit(1760743960.234:1178): avc:  denied  { read } for  pid=12947 comm="syz.4.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  215.711841][ T4540] EXT4-fs (loop7): unmounting filesystem.
[  215.774510][T12975] loop7: detected capacity change from 0 to 128
[  215.859567][T12984] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_0
[  215.878675][T12989] netlink: 5264 bytes leftover after parsing attributes in process `syz.4.5721'.
[  215.897749][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5722'.
[  215.976900][T13007] loop0: detected capacity change from 0 to 16
[  215.985631][T13007] erofs: (device loop0): mounted with root inode @ nid 36.
[  216.105300][T13025] syz.4.5738[13025] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  216.105398][T13025] syz.4.5738[13025] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  216.143746][T13029] SELinux: failed to load policy
[  216.174312][   T28] audit: type=1400 audit(1760743960.784:1179): avc:  denied  { shutdown } for  pid=13022 comm="syz.0.5739" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  216.203009][T13032] loop1: detected capacity change from 0 to 16
[  216.232328][T13032] erofs: (device loop1): mounted with root inode @ nid 36.
[  216.406295][T13028] loop3: detected capacity change from 0 to 40427
[  216.426748][T13028] F2FS-fs (loop3): invalid crc value
[  216.476155][T13056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5754'.
[  216.493787][T13028] F2FS-fs (loop3): Found nat_bits in checkpoint
[  216.608079][T13028] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  216.818253][T13102] loop4: detected capacity change from 0 to 256
[  216.900932][   T28] audit: type=1400 audit(1760743961.514:1180): avc:  denied  { lock } for  pid=13110 comm="syz.7.5780" path="socket:[61677]" dev="sockfs" ino=61677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  217.038425][   T28] audit: type=1326 audit(1760743961.654:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.7.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  217.096381][T13071] loop0: detected capacity change from 0 to 40427
[  217.111590][   T28] audit: type=1326 audit(1760743961.684:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.7.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  217.139429][T13071] F2FS-fs (loop0): fault_injection options not supported
[  217.148712][T13138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5793'.
[  217.159007][T13144] netlink: 'syz.4.5796': attribute type 8 has an invalid length.
[  217.167148][T13138] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5793'.
[  217.170326][T13071] F2FS-fs (loop0): invalid crc value
[  217.181618][   T28] audit: type=1326 audit(1760743961.694:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.7.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  217.181655][   T28] audit: type=1326 audit(1760743961.694:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.7.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  217.181691][   T28] audit: type=1326 audit(1760743961.694:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.7.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  217.369213][T13071] F2FS-fs (loop0): Found nat_bits in checkpoint
[  217.454992][T13180] loop1: detected capacity change from 0 to 128
[  217.465584][T13071] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  217.476761][T13180] incfs: Can't find or create .index dir in ./file0
[  217.494160][T13180] incfs: mount failed -22
[  217.609541][T13197] loop3: detected capacity change from 0 to 256
[  217.642297][T13199] loop4: detected capacity change from 0 to 256
[  217.648866][T13197] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  217.687899][T13199] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  217.823626][ T5349] syz-executor: attempt to access beyond end of device
[  217.823626][ T5349] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  217.940655][T13217] loop1: detected capacity change from 0 to 8192
[  218.117098][T13238] loop1: detected capacity change from 0 to 256
[  218.144921][T13238] FAT-fs (loop1): Directory bread(block 64) failed
[  218.175282][T13238] FAT-fs (loop1): Directory bread(block 65) failed
[  218.176978][T13249] loop0: detected capacity change from 0 to 512
[  218.192219][T13238] FAT-fs (loop1): Directory bread(block 66) failed
[  218.204296][T13238] FAT-fs (loop1): Directory bread(block 67) failed
[  218.218582][T13238] FAT-fs (loop1): Directory bread(block 68) failed
[  218.239732][T13249] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  218.249274][T13238] FAT-fs (loop1): Directory bread(block 69) failed
[  218.266128][T13249] ext4 filesystem being mounted at /689/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.267834][T13238] FAT-fs (loop1): Directory bread(block 70) failed
[  218.284160][T13258] loop3: detected capacity change from 0 to 1024
[  218.291329][T13258] EXT4-fs: Ignoring removed orlov option
[  218.297383][T13258] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  218.320757][ T5349] EXT4-fs (loop0): unmounting filesystem.
[  218.325109][T13238] FAT-fs (loop1): Directory bread(block 71) failed
[  218.333782][T13238] FAT-fs (loop1): Directory bread(block 72) failed
[  218.342396][T13238] FAT-fs (loop1): Directory bread(block 73) failed
[  218.367577][T13258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  218.440705][T13264] netlink: 'syz.4.5851': attribute type 25 has an invalid length.
[  218.450400][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  218.578089][T13279] netlink: 91 bytes leftover after parsing attributes in process `syz.1.5857'.
[  218.612497][T13283] device vlan2 entered promiscuous mode
[  218.646093][T13283] device syz_tun entered promiscuous mode
[  218.682129][T13295] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5865'.
[  218.697755][T13295] netlink: 15 bytes leftover after parsing attributes in process `syz.3.5865'.
[  218.715543][T13295] netlink: 'syz.3.5865': attribute type 6 has an invalid length.
[  218.861756][T13317] device bridge1 entered promiscuous mode
[  218.868350][T13321] SELinux:  Context system_u:object_r:fsadm_ex is not valid (left unmapped).
[  218.953717][T13330] netlink: 'syz.4.5882': attribute type 1 has an invalid length.
[  218.981710][T13336] netlink: 'syz.3.5883': attribute type 11 has an invalid length.
[  219.121971][T13353] loop3: detected capacity change from 0 to 1024
[  219.127539][T13351] loop1: detected capacity change from 0 to 512
[  219.133348][T13353] EXT4-fs: Ignoring removed i_version option
[  219.143196][T13353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  219.143455][T13351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  219.173945][T13353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  219.180809][T13351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  219.194750][T13351] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.398868][T13384] loop3: detected capacity change from 0 to 512
[  219.419694][T13384] ext4 filesystem being mounted at /482/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.836111][T13393] loop3: detected capacity change from 0 to 131072
[  219.847130][T13393] F2FS-fs (loop3): invalid crc value
[  219.854529][T13393] F2FS-fs (loop3): Found nat_bits in checkpoint
[  219.914518][T13393] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  219.931821][T13393] F2FS-fs (loop3): access invalid blkaddr:1062915
[  219.940100][T13393] CPU: 0 PID: 13393 Comm: syz.3.5910 Tainted: G        W          syzkaller #0
[  219.949787][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  219.960208][T13393] Call Trace:
[  219.963615][T13393]  <TASK>
[  219.966612][T13393]  __dump_stack+0x21/0x24
[  219.972036][T13393]  dump_stack_lvl+0xee/0x150
[  219.976879][T13393]  ? __cfi_dump_stack_lvl+0x8/0x8
[  219.982105][T13393]  ? f2fs_map_lock+0xbe/0x270
[  219.986810][T13393]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[  219.992716][T13393]  dump_stack+0x15/0x24
[  219.997315][T13393]  __f2fs_is_valid_blkaddr+0xda6/0x1460
[  220.002999][T13393]  f2fs_is_valid_blkaddr+0x23/0x30
[  220.008335][T13393]  f2fs_map_blocks+0xc93/0x3a50
[  220.013398][T13393]  ? __cfi_f2fs_map_blocks+0x10/0x10
[  220.018711][T13393]  ? __file_update_time+0x24e/0x260
[  220.024117][T13393]  ? file_modified_flags+0x385/0x430
[  220.029986][T13393]  ? fault_in_iov_iter_readable+0x1d5/0x320
[  220.036173][T13393]  ? f2fs_file_write_iter+0xa08/0x2550
[  220.041656][T13393]  f2fs_file_write_iter+0x11c4/0x2550
[  220.047061][T13393]  ? __cfi_f2fs_file_write_iter+0x10/0x10
[  220.052837][T13393]  ? kasan_set_track+0x60/0x70
[  220.057657][T13393]  ? kasan_set_track+0x4b/0x70
[  220.062459][T13393]  ? kasan_save_alloc_info+0x25/0x30
[  220.067758][T13393]  ? __kasan_kmalloc+0x95/0xb0
[  220.072630][T13393]  ? __kmalloc+0xb1/0x1e0
[  220.076989][T13393]  ? iter_file_splice_write+0x17c/0xc50
[  220.082575][T13393]  ? direct_splice_actor+0xf7/0x130
[  220.087877][T13393]  ? splice_direct_to_actor+0x4a2/0xb10
[  220.093434][T13393]  ? do_splice_direct+0x1b3/0x2c0
[  220.098472][T13393]  ? avc_policy_seqno+0x1b/0x70
[  220.103433][T13393]  ? fsnotify_perm+0x67/0x5b0
[  220.108380][T13393]  ? security_file_permission+0x8a/0xb0
[  220.113942][T13393]  do_iter_write+0x650/0xb10
[  220.118640][T13393]  ? vfs_iter_write+0xa0/0xa0
[  220.123329][T13393]  vfs_iter_write+0x7d/0xa0
[  220.127837][T13393]  iter_file_splice_write+0x662/0xc50
[  220.133226][T13393]  ? __cfi_iter_file_splice_write+0x10/0x10
[  220.139151][T13393]  ? generic_file_splice_read+0x264/0x500
[  220.144976][T13393]  ? __cfi_generic_file_splice_read+0x10/0x10
[  220.151089][T13393]  ? __kasan_check_read+0x11/0x20
[  220.156247][T13393]  ? fsnotify_perm+0x269/0x5b0
[  220.161022][T13393]  ? __cfi_iter_file_splice_write+0x10/0x10
[  220.166927][T13393]  direct_splice_actor+0xf7/0x130
[  220.171969][T13393]  splice_direct_to_actor+0x4a2/0xb10
[  220.177351][T13393]  ? __kasan_check_read+0x11/0x20
[  220.182492][T13393]  ? __cfi_direct_splice_actor+0x10/0x10
[  220.188169][T13393]  ? __cfi_splice_direct_to_actor+0x10/0x10
[  220.194129][T13393]  ? security_file_permission+0x94/0xb0
[  220.199897][T13393]  ? rw_verify_area+0xa7/0x1c0
[  220.204701][T13393]  do_splice_direct+0x1b3/0x2c0
[  220.209621][T13393]  ? avc_policy_seqno+0x1b/0x70
[  220.214635][T13393]  ? __cfi_do_splice_direct+0x10/0x10
[  220.220233][T13393]  ? security_file_permission+0x94/0xb0
[  220.226056][T13393]  do_sendfile+0x5c6/0xeb0
[  220.230562][T13393]  ? do_preadv+0x330/0x330
[  220.235038][T13393]  ? __se_sys_futex+0x273/0x2e0
[  220.240047][T13393]  __x64_sys_sendfile64+0x18f/0x1f0
[  220.245299][T13393]  ? __cfi___x64_sys_sendfile64+0x10/0x10
[  220.251222][T13393]  ? fpregs_restore_userregs+0x128/0x260
[  220.256977][T13393]  ? switch_fpu_return+0xe/0x10
[  220.262022][T13393]  x64_sys_call+0x62c/0x9a0
[  220.266542][T13393]  do_syscall_64+0x4c/0xa0
[  220.270968][T13393]  ? clear_bhb_loop+0x30/0x80
[  220.275848][T13393]  ? clear_bhb_loop+0x30/0x80
[  220.280551][T13393]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  220.286475][T13393] RIP: 0033:0x7f453318efc9
[  220.290918][T13393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.310746][T13393] RSP: 002b:00007f4534104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  220.319185][T13393] RAX: ffffffffffffffda RBX: 00007f45333e5fa0 RCX: 00007f453318efc9
[  220.327321][T13393] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  220.335420][T13393] RBP: 00007f4533211f91 R08: 0000000000000000 R09: 0000000000000000
[  220.343512][T13393] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000
[  220.351508][T13393] R13: 00007f45333e6038 R14: 00007f45333e5fa0 R15: 00007ffe7c812588
[  220.359514][T13393]  </TASK>
[  220.421892][T13417] loop1: detected capacity change from 0 to 128
[  220.478086][T13417] FAT-fs (loop1): Directory bread(block 414) failed
[  220.492154][T13417] FAT-fs (loop1): Directory bread(block 415) failed
[  220.515602][T13417] FAT-fs (loop1): Directory bread(block 416) failed
[  220.523984][T13417] FAT-fs (loop1): Directory bread(block 417) failed
[  220.537283][T13417] FAT-fs (loop1): Directory bread(block 418) failed
[  220.559126][T13417] FAT-fs (loop1): Directory bread(block 419) failed
[  220.566499][T13417] FAT-fs (loop1): Directory bread(block 420) failed
[  220.573882][T13417] FAT-fs (loop1): Directory bread(block 421) failed
[  220.612610][T13417] syz.1.5919: attempt to access beyond end of device
[  220.612610][T13417] loop1: rw=3, sector=462, nr_sectors = 2 limit=128
[  220.633382][T13417] syz.1.5919: attempt to access beyond end of device
[  220.633382][T13417] loop1: rw=2051, sector=464, nr_sectors = 6 limit=128
[  220.649719][T13434] overlayfs: workdir and upperdir must be separate subtrees
[  220.750783][T13445] loop0: detected capacity change from 0 to 512
[  220.761988][T13445] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  220.784137][T13447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5934'.
[  220.808267][T13445] EXT4-fs (loop0): orphan cleanup on readonly fs
[  220.820038][T13445] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.5933: Block bitmap for bg 0 marked uninitialized
[  220.834694][T13445] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  220.844253][T13445] EXT4-fs (loop0): 1 orphan inode deleted
[  221.107968][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5957'.
[  221.182978][T13506] loop7: detected capacity change from 0 to 256
[  221.215847][T13506] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d)
[  221.296675][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5967'.
[  221.373664][T13527] loop3: detected capacity change from 0 to 256
[  221.376600][T13523] loop0: detected capacity change from 0 to 4096
[  221.440436][T13536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5976'.
[  221.500894][T13545] binder: 13542:13545 ioctl c0306201 0 returned -14
[  221.537440][    T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  221.581195][T13558] loop7: detected capacity change from 0 to 512
[  221.606780][T13558] EXT4-fs warning (device loop7): dx_probe:893: inode #2: comm syz.7.5987: dx entry: limit 0 != root limit 125
[  221.622147][T13558] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5987: Corrupt directory, running e2fsck is recommended
[  221.636436][T13558] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  221.645016][T13558] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.5987: corrupted in-inode xattr
[  221.658478][T13558] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5987: couldn't read orphan inode 15 (err -117)
[  221.723931][T13565] loop3: detected capacity change from 0 to 128
[  221.737486][    T6] usb 2-1: Using ep0 maxpacket: 8
[  221.745424][T13565] ext4 filesystem being mounted at /502/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  221.762241][    T6] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  221.777351][    T6] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  221.794359][    T6] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  221.813841][    T6] usb 2-1: config 250 has no interface number 0
[  221.823974][    T6] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  221.844069][    T6] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  221.863490][    T6] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024
[  221.880245][    T6] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024
[  221.891910][    T6] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  221.902409][T13584] loop3: detected capacity change from 0 to 512
[  221.918315][    T6] usb 2-1: config 250 interface 228 has no altsetting 0
[  221.926925][T13584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  221.941963][    T6] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  221.951663][    T6] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  221.962134][T13584] EXT4-fs (loop3): 1 truncate cleaned up
[  221.967878][    T6] usb 2-1: Product: syz
[  221.972466][    T6] usb 2-1: SerialNumber: syz
[  221.982497][    T6] hub 2-1:250.228: bad descriptor, ignoring hub
[  221.989045][    T6] hub: probe of 2-1:250.228 failed with error -5
[  222.108645][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6008'.
[  222.121205][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6008'.
[  222.184781][    T6] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  222.204003][T13623] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6016'.
[  222.240752][T13625] loop7: detected capacity change from 0 to 1024
[  222.255053][T13625] EXT4-fs: Ignoring removed oldalloc option
[  222.267448][T13625] EXT4-fs: Ignoring removed bh option
[  222.284333][T13625] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  222.373266][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  222.373287][   T28] audit: type=1326 audit(1760743966.985:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  222.420016][T13652] loop7: detected capacity change from 0 to 512
[  222.429915][   T28] audit: type=1326 audit(1760743966.985:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  222.436203][T13652] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  222.457237][   T28] audit: type=1326 audit(1760743966.985:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  222.497660][    C1] usblp0: nonzero read bulk status received: -71
[  222.520679][   T28] audit: type=1326 audit(1760743966.985:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  222.545298][   T39] usb 2-1: USB disconnect, device number 13
[  222.551616][   T28] audit: type=1326 audit(1760743966.985:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.7.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db9f8efc9 code=0x7ffc0000
[  222.576733][   T39] usblp0: removed
[  222.582186][   T28] audit: type=1400 audit(1760743967.005:1202): avc:  denied  { read write } for  pid=13512 comm="syz.1.5966" name="lp0" dev="devtmpfs" ino=1693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  222.606719][   T28] audit: type=1400 audit(1760743967.005:1203): avc:  denied  { open } for  pid=13512 comm="syz.1.5966" path="/dev/usb/lp0" dev="devtmpfs" ino=1693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  222.677850][T13662] can0: slcan on ptm0.
[  222.718933][T13661] can0 (unregistered): slcan off ptm0.
[  223.062653][T13723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6061'.
[  223.129697][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6055'.
[  224.009884][T13762] netem: change failed
[  224.087998][T13768] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6071'.
[  224.104604][T13768] netlink: 'syz.7.6071': attribute type 6 has an invalid length.
[  224.112422][T13768] netlink: 'syz.7.6071': attribute type 5 has an invalid length.
[  224.120174][T13768] netlink: 'syz.7.6071': attribute type 4 has an invalid length.
[  224.288992][T13780] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_0
[  224.387277][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  224.470554][T13801] SELinux: failed to load policy
[  224.631701][T13826] loop7: detected capacity change from 0 to 1024
[  224.662455][T13826] EXT4-fs: Ignoring removed i_version option
[  224.676429][T13826] EXT4-fs (loop7): Test dummy encryption mode enabled
[  224.705482][T13826] EXT4-fs mount: 16 callbacks suppressed
[  224.705508][T13826] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  224.773160][ T4540] EXT4-fs (loop7): unmounting filesystem.
[  224.797757][   T28] audit: type=1400 audit(1760743969.405:1204): avc:  denied  { bind } for  pid=13839 comm="syz.3.6109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  224.809252][T13842] loop1: detected capacity change from 0 to 128
[  225.047672][T13873] loop3: detected capacity change from 0 to 16
[  225.081855][T13873] erofs: (device loop3): mounted with root inode @ nid 36.
[  225.348466][T13866] loop0: detected capacity change from 0 to 40427
[  225.375125][T13866] F2FS-fs (loop0): heap/no_heap options were deprecated
[  225.382377][   T39] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  225.402644][T13866] F2FS-fs (loop0): fault_injection options not supported
[  225.410882][T13866] F2FS-fs (loop0): fault_type options not supported
[  225.428140][T13866] F2FS-fs (loop0): invalid crc value
[  225.455050][T13866] F2FS-fs (loop0): Found nat_bits in checkpoint
[  225.535512][T13866] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  225.566873][   T39] usb 2-1: Using ep0 maxpacket: 16
[  225.573671][   T39] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  225.587444][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.610405][   T39] usb 2-1: config 0 descriptor??
[  226.021864][   T39] nti 0003:0757:0A00.003C: unknown main item tag 0x0
[  226.034267][   T39] nti 0003:0757:0A00.003C: unknown main item tag 0x0
[  226.044228][   T39] nti 0003:0757:0A00.003C: unknown main item tag 0x0
[  226.051809][   T39] nti 0003:0757:0A00.003C: unknown main item tag 0x0
[  226.079895][   T39] nti 0003:0757:0A00.003C: unknown main item tag 0x0
[  226.100470][   T39] nti 0003:0757:0A00.003C: hidraw0: USB HID v0.05 Device [HID 0757:0a00] on usb-dummy_hcd.1-1/input0
[  226.227846][   T39] usb 2-1: USB disconnect, device number 14
[  226.489584][T13968] loop3: detected capacity change from 0 to 512
[  226.520859][T13968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  226.563485][T13968] EXT4-fs (loop3): 1 truncate cleaned up
[  226.569483][T13968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  226.731747][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  226.815160][T13986] loop3: detected capacity change from 0 to 1024
[  226.846343][   T28] audit: type=1326 audit(1760743971.456:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12c18efc9 code=0x7ffc0000
[  226.919462][   T28] audit: type=1326 audit(1760743971.456:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12c18efc9 code=0x7ffc0000
[  226.948363][T13986] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  227.042298][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  227.192339][T14019] loop1: detected capacity change from 0 to 256
[  227.201271][T14010] loop0: detected capacity change from 0 to 8192
[  227.263622][T14019] exfat: Deprecated parameter 'namecase'
[  227.298772][T14019] exfat: Deprecated parameter 'utf8'
[  227.335148][T14019] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d)
[  227.404349][T14033] IPv6: NLM_F_CREATE should be specified when creating new route
[  227.417230][T14033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  227.424524][T14033] IPv6: NLM_F_CREATE should be set when creating new route
[  227.432225][T14033] IPv6: NLM_F_CREATE should be set when creating new route
[  227.493248][T14038] loop3: detected capacity change from 0 to 256
[  227.523068][T14038] FAT-fs (loop3): Directory bread(block 64) failed
[  227.539390][T14038] FAT-fs (loop3): Directory bread(block 65) failed
[  227.565235][T14038] FAT-fs (loop3): Directory bread(block 66) failed
[  227.586379][T14038] FAT-fs (loop3): Directory bread(block 67) failed
[  227.607565][T14038] FAT-fs (loop3): Directory bread(block 68) failed
[  227.614334][T14038] FAT-fs (loop3): Directory bread(block 69) failed
[  227.626606][T14038] FAT-fs (loop3): Directory bread(block 70) failed
[  227.633625][T14038] FAT-fs (loop3): Directory bread(block 71) failed
[  227.640883][T14038] FAT-fs (loop3): Directory bread(block 72) failed
[  227.660071][T14038] FAT-fs (loop3): Directory bread(block 73) failed
[  227.930050][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  227.930071][   T28] audit: type=1400 audit(1760743972.546:1210): avc:  denied  { getopt } for  pid=14064 comm="syz.1.6212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  228.027459][T14071] loop1: detected capacity change from 0 to 256
[  228.043814][T14073] __nla_validate_parse: 5 callbacks suppressed
[  228.043841][T14073] netlink: 91 bytes leftover after parsing attributes in process `syz.4.6217'.
[  228.106635][    T6] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  228.129677][T14057] loop0: detected capacity change from 0 to 40427
[  228.143141][T14057] F2FS-fs (loop0): Image doesn't support compression
[  228.161876][T14057] F2FS-fs (loop0): invalid crc value
[  228.190853][   T28] audit: type=1400 audit(1760743972.806:1211): avc:  denied  { write } for  pid=14086 comm="syz.4.6223" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  228.217834][   T28] audit: type=1326 audit(1760743972.826:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  228.250553][T14057] F2FS-fs (loop0): Found nat_bits in checkpoint
[  228.265608][   T28] audit: type=1326 audit(1760743972.826:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  228.290108][   T28] audit: type=1326 audit(1760743972.826:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  228.311107][T14057] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  228.314858][   T28] audit: type=1326 audit(1760743972.826:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  228.321410][    T6] usb 4-1: Using ep0 maxpacket: 32
[  228.346615][   T28] audit: type=1400 audit(1760743972.826:1216): avc:  denied  { write } for  pid=14089 comm="syz.4.6225" name="file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  228.402625][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.405276][   T28] audit: type=1326 audit(1760743972.826:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.4.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9cd8efc9 code=0x7ffc0000
[  228.442298][T14057] syz.0.6208: attempt to access beyond end of device
[  228.442298][T14057] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  228.464845][    T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  228.483429][    T6] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  228.514336][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.523763][ T5349] syz-executor: attempt to access beyond end of device
[  228.523763][ T5349] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  228.537525][    T6] usb 4-1: config 0 descriptor??
[  228.724916][T14125] xt_hashlimit: size too large, truncated to 1048576
[  228.784000][T14130] loop1: detected capacity change from 0 to 512
[  228.828663][T14130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  228.848144][T14130] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.882373][T11768] EXT4-fs (loop1): unmounting filesystem.
[  228.948606][    T6] wacom 0003:056A:002A.003D: Unknown device_type for 'HID 056a:002a'. Assuming pen.
[  228.962976][    T6] wacom 0003:056A:002A.003D: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0
[  228.976491][    T6] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.003D/input/input44
[  229.183347][    T6] usb 4-1: USB disconnect, device number 27
[  229.227172][T14162] loop1: detected capacity change from 0 to 512
[  229.234287][T14156] loop0: detected capacity change from 0 to 1024
[  229.266011][T14162] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  229.274917][T14156] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[  229.274963][T14156] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  229.274982][T14156] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.6252: Failed to acquire dquot type 0
[  229.275842][T14156] EXT4-fs error (device loop0): mb_free_blocks:1810: group 0, 
[  229.285261][T14162] ext4 filesystem being mounted at /279/wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.294020][T14156] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  229.294285][T14156] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6252: corrupted inode contents
[  229.331695][T14162] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 32: comm syz.1.6253: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  229.365266][T14156] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #13: comm syz.0.6252: mark_inode_dirty error
[  229.385314][T14156] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6252: corrupted inode contents
[  229.398066][T14156] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.6252: mark_inode_dirty error
[  229.426754][T14156] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6252: corrupted inode contents
[  229.443148][T14156] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  229.452655][T11768] EXT4-fs (loop1): unmounting filesystem.
[  229.458337][T14156] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6252: corrupted inode contents
[  229.473995][T14156] EXT4-fs error (device loop0): ext4_truncate:4314: inode #13: comm syz.0.6252: mark_inode_dirty error
[  229.501245][T14156] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  229.535205][T14156] EXT4-fs (loop0): 1 truncate cleaned up
[  229.541411][T14156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  229.598157][T14156] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  229.647165][ T5349] EXT4-fs (loop0): unmounting filesystem.
[  229.750080][T14211] loop7: detected capacity change from 0 to 256
[  229.761135][T14211] tmpfs: Cannot retroactively limit inodes
[  229.830181][T14219] overlayfs: workdir and upperdir must be separate subtrees
[  230.308072][T14251] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.315300][T14251] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.323200][T14251] device bridge_slave_0 entered promiscuous mode
[  230.330471][T14251] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.338175][T14251] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.346151][T14251] device bridge_slave_1 entered promiscuous mode
[  230.437189][T14251] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.444355][T14251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.451976][T14251] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.459137][T14251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.477160][T10568] device bridge_slave_1 left promiscuous mode
[  230.483371][T10568] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.491400][T10568] device bridge_slave_0 left promiscuous mode
[  230.498106][T10568] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.506283][   T19] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  230.514263][T10568] device veth1_macvtap left promiscuous mode
[  230.520394][T10568] device veth0_vlan left promiscuous mode
[  230.556284][    T6] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  230.614306][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  230.622151][ T1351] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.629676][ T1351] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.639481][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  230.649506][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.656655][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.666100][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  230.674722][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.682331][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.691459][   T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.702648][   T19] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  230.712122][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.721298][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  230.725711][   T19] usb 2-1: config 0 descriptor??
[  230.735642][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  230.747464][    T6] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[  230.751701][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.764851][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.772703][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  230.781682][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  230.785913][    T6] usb 4-1: config 0 descriptor??
[  230.790292][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  230.803427][T14251] device veth0_vlan entered promiscuous mode
[  230.817235][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  230.827409][T14251] device veth1_macvtap entered promiscuous mode
[  230.845229][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  230.853793][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  230.862717][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  230.871622][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  231.140586][   T19] pyra 0003:1E7D:2C24.003E: unknown main item tag 0x0
[  231.154271][   T19] pyra 0003:1E7D:2C24.003E: unknown main item tag 0x0
[  231.162465][   T19] pyra 0003:1E7D:2C24.003E: unknown main item tag 0x0
[  231.169454][   T19] pyra 0003:1E7D:2C24.003E: unknown main item tag 0x0
[  231.179229][   T19] pyra 0003:1E7D:2C24.003E: unknown main item tag 0x0
[  231.187705][   T19] pyra 0003:1E7D:2C24.003E: unknown main item tag 0x0
[  231.199003][   T19] pyra 0003:1E7D:2C24.003E: unknown main item tag 0x0
[  231.207459][   T19] pyra 0003:1E7D:2C24.003E: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0
[  231.231930][    T6] apple 0003:05AC:029F.003F: unbalanced delimiter at end of report description
[  231.250449][    T6] apple 0003:05AC:029F.003F: parse failed
[  231.266338][    T6] apple: probe of 0003:05AC:029F.003F failed with error -22
[  231.349414][    T6] usb 2-1: USB disconnect, device number 15
[  231.448740][  T289] usb 4-1: USB disconnect, device number 28
[  231.448993][T14319] loop0: detected capacity change from 0 to 40427
[  231.463653][T14319] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  231.481402][T14319] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  231.580935][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6334'.
[  231.770913][T14345] loop2: detected capacity change from 0 to 40427
[  231.783695][T14345] F2FS-fs (loop2): Found nat_bits in checkpoint
[  231.817832][T14345] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  231.830590][T14345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  231.866527][T14251] syz-executor: attempt to access beyond end of device
[  231.866527][T14251] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  232.232796][T14379] loop3: detected capacity change from 0 to 512
[  232.248544][T14379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  232.257955][T14379] ext4 filesystem being mounted at /597/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.281157][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  232.296748][T14384] loop3: detected capacity change from 0 to 256
[  232.597739][T14404] loop0: detected capacity change from 0 to 256
[  233.044163][T14444] loop1: detected capacity change from 0 to 1024
[  233.057471][T14444] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  233.118758][T14444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  233.213206][T11768] EXT4-fs (loop1): unmounting filesystem.
[  233.239801][T14455] loop2: detected capacity change from 0 to 1024
[  233.269600][T14455] EXT4-fs: Ignoring removed oldalloc option
[  233.276981][T14455] EXT4-fs: Ignoring removed bh option
[  233.296547][T14455] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  233.355587][T14455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  233.392507][T14251] EXT4-fs (loop2): unmounting filesystem.
[  233.469881][T14479] device syz_tun entered promiscuous mode
[  236.146117][T14479] device syz_tun left promiscuous mode
[  236.194377][T14496] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6404'.
[  236.255259][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6407'.
[  236.364985][T14520] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  236.367199][T14520] 
@0Ù: renamed from bond_slave_1
[  236.490143][T14522] vxcan1: tun_chr_ioctl cmd 1074025677
[  236.508697][T14522] vxcan1: linktype set to 778
[  236.674575][T14551] loop2: detected capacity change from 0 to 1024
[  236.687186][T14551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  236.726140][T14555] loop3: detected capacity change from 0 to 1024
[  236.734893][T14251] EXT4-fs (loop2): unmounting filesystem.
[  236.749098][T14555] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  236.804016][T14555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  236.908292][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  236.989021][T14581] loop3: detected capacity change from 0 to 512
[  237.007127][T14583] loop2: detected capacity change from 0 to 1024
[  237.023119][T14583] EXT4-fs: Ignoring removed i_version option
[  237.035772][T14583] EXT4-fs (loop2): Test dummy encryption mode enabled
[  237.051491][T14583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  237.080464][T14581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  237.092664][T14581] ext4 filesystem being mounted at /616/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.093629][T14251] EXT4-fs (loop2): unmounting filesystem.
[  237.207479][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  237.217846][T14605] device syz_tun entered promiscuous mode
[  237.236908][T14605] device syz_tun left promiscuous mode
[  237.429134][T14631] loop1: detected capacity change from 0 to 512
[  237.485072][T14642] loop4: detected capacity change from 0 to 128
[  237.518131][T14642] incfs: Can't find or create .index dir in ./file0
[  237.530080][T14631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  237.539537][T14631] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.550785][T14642] incfs: mount failed -22
[  237.606689][T11768] EXT4-fs (loop1): unmounting filesystem.
[  237.866662][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  237.866683][   T28] audit: type=1326 audit(1760743982.477:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  237.910840][T14695] loop1: detected capacity change from 0 to 512
[  237.917568][   T28] audit: type=1326 audit(1760743982.517:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  237.934192][T14695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  237.944008][   T28] audit: type=1326 audit(1760743982.517:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  237.992307][   T28] audit: type=1326 audit(1760743982.517:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  237.995346][T14695] EXT4-fs (loop1): 1 truncate cleaned up
[  238.021443][   T28] audit: type=1326 audit(1760743982.517:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  238.049410][   T28] audit: type=1326 audit(1760743982.517:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14698 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe89d1c1885 code=0x7ffc0000
[  238.055834][T14703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6498'.
[  238.073936][   T28] audit: type=1326 audit(1760743982.557:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  238.111519][   T28] audit: type=1326 audit(1760743982.557:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  238.135744][   T28] audit: type=1326 audit(1760743982.557:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  238.153387][T14695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  238.161876][   T28] audit: type=1326 audit(1760743982.587:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.2.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fe89d18efc9 code=0x7ffc0000
[  238.256659][T14714] IPv6: NLM_F_CREATE should be specified when creating new route
[  238.286845][T11768] EXT4-fs (loop1): unmounting filesystem.
[  238.294036][T14714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  238.301471][T14714] IPv6: NLM_F_CREATE should be set when creating new route
[  238.308761][T14714] IPv6: NLM_F_CREATE should be set when creating new route
[  238.626695][T14715] loop3: detected capacity change from 0 to 40427
[  238.640820][T14715] F2FS-fs (loop3): fault_injection options not supported
[  238.649135][T14715] F2FS-fs (loop3): fault_type options not supported
[  238.660056][T14715] F2FS-fs (loop3): invalid crc value
[  238.666973][T14715] F2FS-fs (loop3): Found nat_bits in checkpoint
[  238.699396][T14715] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  239.721844][T14789] xt_hashlimit: size too large, truncated to 1048576
[  239.935840][T14817] tun0: tun_chr_ioctl cmd 1074025676
[  239.948060][T14817] tun0: owner set to 0
[  240.284294][T14825] loop2: detected capacity change from 0 to 40427
[  240.304679][T14825] F2FS-fs (loop2): Image doesn't support compression
[  240.314088][T14825] F2FS-fs (loop2): invalid crc value
[  240.340030][T14825] F2FS-fs (loop2): Found nat_bits in checkpoint
[  240.384434][T14825] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  240.427013][T14825] syz.2.6551: attempt to access beyond end of device
[  240.427013][T14825] loop2: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  240.452546][T14251] syz-executor: attempt to access beyond end of device
[  240.452546][T14251] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.490130][T14854] netlink: 'syz.0.6573': attribute type 11 has an invalid length.
[  240.528192][T14854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6573'.
[  240.716816][T14871] loop0: detected capacity change from 0 to 512
[  240.719967][T14873] loop2: detected capacity change from 0 to 256
[  240.759714][T14871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  240.768981][T14871] ext4 filesystem being mounted at /830/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  240.810530][ T5349] EXT4-fs (loop0): unmounting filesystem.
[  240.885838][T14894] loop0: detected capacity change from 0 to 512
[  240.894312][T14894] EXT4-fs: Ignoring removed i_version option
[  240.904077][T14894] EXT4-fs: Ignoring removed bh option
[  240.917078][T14894] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  240.926533][T14894] ext4 filesystem being mounted at /834/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  240.941339][T14894] EXT4-fs error (device loop0): ext4_resize_begin:62: comm syz.0.6581: resize_inode disabled but reserved GDT blocks non-zero
[  240.962657][ T5349] EXT4-fs (loop0): unmounting filesystem.
[  241.015038][  T665] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  241.196121][  T665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.198220][T14910] loop2: detected capacity change from 0 to 512
[  241.216195][  T665] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  241.240552][  T665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.240566][T14910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  241.240650][T14910] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  241.271218][  T665] usb 2-1: config 0 descriptor??
[  241.288417][T14251] EXT4-fs (loop2): unmounting filesystem.
[  241.388211][T14927] netlink: 'syz.0.6595': attribute type 1 has an invalid length.
[  241.513257][T14925] loop2: detected capacity change from 0 to 40427
[  241.523167][T14925] F2FS-fs (loop2): fault_injection options not supported
[  241.530633][T14925] F2FS-fs (loop2): fault_type options not supported
[  241.537782][T14925] F2FS-fs (loop2): Image doesn't support compression
[  241.545729][T14925] F2FS-fs (loop2): invalid crc value
[  241.552559][T14925] F2FS-fs (loop2): Found nat_bits in checkpoint
[  241.585349][T14925] F2FS-fs (loop2): Start checkpoint disabled!
[  241.592527][T14925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  241.683344][  T665] cherry 0003:046A:0023.0040: unbalanced delimiter at end of report description
[  241.692896][  T665] cherry: probe of 0003:046A:0023.0040 failed with error -22
[  241.743034][T14939] loop2: detected capacity change from 0 to 256
[  241.763315][T14939] tmpfs: Cannot retroactively limit inodes
[  241.888504][  T665] usb 2-1: USB disconnect, device number 16
[  242.005520][T14947] loop3: detected capacity change from 0 to 512
[  242.073253][T14947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  242.094922][T14947] ext4 filesystem being mounted at /640/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  242.116987][ T7819] EXT4-fs (loop3): unmounting filesystem.
[  242.231943][T14946] loop0: detected capacity change from 0 to 40427
[  242.239219][T14950] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.247213][T14950] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.256108][T14950] device bridge_slave_0 entered promiscuous mode
[  242.267481][T14950] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.275877][T14946] F2FS-fs (loop0): Found nat_bits in checkpoint
[  242.284898][T14950] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.302716][T14950] device bridge_slave_1 entered promiscuous mode
[  242.325911][T14946] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  242.347427][T10568] device bridge_slave_1 left promiscuous mode
[  242.353754][T14946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  242.354189][T10568] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.371402][T10568] device bridge_slave_0 left promiscuous mode
[  242.377955][T10568] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.403218][T10568] device veth1_macvtap left promiscuous mode
[  242.409977][T10568] device veth0_vlan left promiscuous mode
[  242.432624][T14965] SELinux: failed to load policy
[  242.453589][ T5349] syz-executor: attempt to access beyond end of device
[  242.453589][ T5349] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  242.640787][T14950] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.647950][T14950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.655515][T14950] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.662584][T14950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.711501][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  242.723935][ T1351] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.732091][ T1351] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.764866][   T19] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  242.773486][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  242.782396][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.789516][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.798695][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  242.807627][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.814879][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.831628][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  242.839986][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  242.848901][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  242.857714][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  242.869017][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  242.877642][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  242.889494][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  242.898508][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  242.907656][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  242.921889][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  242.931617][T14950] device veth0_vlan entered promiscuous mode
[  242.950519][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  242.959254][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  242.964857][T14283] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  242.970806][T14950] device veth1_macvtap entered promiscuous mode
[  242.975055][   T19] usb 4-1: Using ep0 maxpacket: 32
[  242.987353][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  242.988203][   T19] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.996220][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  243.006654][   T19] usb 4-1: config 0 interface 0 has no altsetting 0
[  243.015758][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  243.021523][   T19] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00
[  243.039101][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.042002][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  243.062245][   T19] usb 4-1: config 0 descriptor??
[  243.070159][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  243.120998][T15008] syzkaller0: tun_chr_ioctl cmd 1074025677
[  243.128369][T15008] syzkaller0: linktype set to 768
[  243.174782][T14283] usb 2-1: Using ep0 maxpacket: 16
[  243.182749][T14283] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  243.192481][T14283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.200640][T14283] usb 2-1: Product: syz
[  243.211089][T14283] usb 2-1: Manufacturer: syz
[  243.215855][T14283] usb 2-1: SerialNumber: syz
[  243.226160][T14283] usb 2-1: config 0 descriptor??
[  243.232622][T14283] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  243.241103][T14283] usb 2-1: Detected FT232H
[  243.440243][T14283] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  243.449904][T15022] syzkaller0: tun_chr_ioctl cmd 1074025692
[  243.456870][T14283] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  243.465260][T14283] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  243.475624][   T19] wacom 0003:056A:00F4.0041: item fetching failed at offset 0/1
[  243.484410][   T19] wacom 0003:056A:00F4.0041: parse failed
[  243.493139][   T19] wacom: probe of 0003:056A:00F4.0041 failed with error -22
[  243.501135][T14283] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  243.510518][T14283] usb 2-1: USB disconnect, device number 17
[  243.521030][T14283] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  243.546578][T14283] ftdi_sio 2-1:0.0: device disconnected
[  243.708955][   T19] usb 4-1: USB disconnect, device number 29
[  243.782595][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  243.782615][   T28] audit: type=1400 audit(1760743988.388:1244): avc:  denied  { listen } for  pid=15050 comm="syz.4.6646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  243.829216][   T28] audit: type=1400 audit(1760743988.388:1245): avc:  denied  { accept } for  pid=15050 comm="syz.4.6646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  243.970468][T15067] loop1: detected capacity change from 0 to 2048
[  243.977901][T15067] EXT4-fs: Ignoring removed mblk_io_submit option
[  243.993791][T15067] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  244.123836][T15081] loop2: detected capacity change from 0 to 256
[  244.142367][T15081] FAT-fs (loop2): Directory bread(block 64) failed
[  244.153809][T15080] loop1: detected capacity change from 0 to 128
[  244.157892][T15081] FAT-fs (loop2): Directory bread(block 65) failed
[  244.167318][T15081] FAT-fs (loop2): Directory bread(block 66) failed
[  244.174117][T15081] FAT-fs (loop2): Directory bread(block 67) failed
[  244.181097][T15081] FAT-fs (loop2): Directory bread(block 68) failed
[  244.187997][T15081] FAT-fs (loop2): Directory bread(block 69) failed
[  244.194859][T15081] FAT-fs (loop2): Directory bread(block 70) failed
[  244.195548][ T8549] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  244.201478][T15081] FAT-fs (loop2): Directory bread(block 71) failed
[  244.217875][T15081] FAT-fs (loop2): Directory bread(block 72) failed
[  244.224451][T15081] FAT-fs (loop2): Directory bread(block 73) failed
[  244.288893][   T28] audit: type=1400 audit(1760743988.898:1246): avc:  denied  { bind } for  pid=15088 comm="syz.3.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  244.327519][   T28] audit: type=1400 audit(1760743988.898:1247): avc:  denied  { connect } for  pid=15088 comm="syz.3.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  244.348342][   T28] audit: type=1400 audit(1760743988.898:1248): avc:  denied  { write } for  pid=15088 comm="syz.3.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  244.387966][ T7819] ------------[ cut here ]------------
[  244.393533][ T7819] WARNING: CPU: 0 PID: 7819 at fs/inode.c:335 drop_nlink+0xc5/0x110
[  244.393580][ T7819] Modules linked in:
[  244.393609][ T7819] CPU: 0 PID: 7819 Comm: syz-executor Tainted: G        W          syzkaller #0
[  244.393631][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  244.393644][ T7819] RIP: 0010:drop_nlink+0xc5/0x110
[  244.393667][ T7819] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[  244.393686][ T7819] RSP: 0018:ffffc90004347c38 EFLAGS: 00010293
[  244.393705][ T7819] RAX: ffffffff81c3ab85 RBX: ffff88811cd4a650 RCX: ffff88811bff8000
[  244.393723][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  244.393737][ T7819] RBP: ffffc90004347c60 R08: 0000000000000004 R09: 0000000000000003
[  244.393752][ T7819] R10: fffff52000868f78 R11: 1ffff92000868f78 R12: dffffc0000000000
[  244.393767][ T7819] R13: 1ffff110239a94d3 R14: ffff88811cd4a698 R15: 0000000000000000
[  244.393782][ T7819] FS:  000055557b02f500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  244.393801][ T7819] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  244.393816][ T7819] CR2: 000055557b0524e8 CR3: 0000000126348000 CR4: 00000000003506b0
[  244.393835][ T7819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  244.393848][ T7819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  244.393862][ T7819] Call Trace:
[  244.393868][ T7819]  <TASK>
[  244.393878][ T7819]  shmem_rmdir+0x5b/0x90
[  244.393910][ T7819]  vfs_rmdir+0x393/0x500
[  244.393936][ T7819]  incfs_kill_sb+0x105/0x220
[  244.393966][ T7819]  deactivate_locked_super+0xb5/0x120
[  244.393994][ T7819]  deactivate_super+0xaf/0xe0
[  244.394020][ T7819]  cleanup_mnt+0x45f/0x4e0
[  244.394041][ T7819]  __cleanup_mnt+0x19/0x20
[  244.394060][ T7819]  task_work_run+0x1db/0x240
[  244.394086][ T7819]  ? __cfi_task_work_run+0x10/0x10
[  244.394112][ T7819]  ? __x64_sys_umount+0x125/0x160
[  244.394139][ T7819]  ? __cfi___x64_sys_umount+0x10/0x10
[  244.394167][ T7819]  exit_to_user_mode_loop+0x9b/0xb0
[  244.394190][ T7819]  exit_to_user_mode_prepare+0x5a/0xa0
[  244.394213][ T7819]  syscall_exit_to_user_mode+0x1a/0x30
[  244.394244][ T7819]  do_syscall_64+0x58/0xa0
[  244.394265][ T7819]  ? clear_bhb_loop+0x30/0x80
[  244.394292][ T7819]  ? clear_bhb_loop+0x30/0x80
[  244.394319][ T7819]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.394345][ T7819] RIP: 0033:0x7f45331902f7
[  244.394364][ T7819] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  244.394383][ T7819] RSP: 002b:00007ffe7c811818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  244.394404][ T7819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f45331902f7
[  244.394418][ T7819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7c8118d0
[  244.394432][ T7819] RBP: 00007ffe7c8118d0 R08: 0000000000000000 R09: 0000000000000000
[  244.394446][ T7819] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7c812960
[  244.394460][ T7819] R13: 00007f4533211d7d R14: 000000000003ba86 R15: 00007ffe7c8129a0
[  244.394480][ T7819]  </TASK>
[  244.394486][ T7819] ---[ end trace 0000000000000000 ]---
[  244.397228][ T7819] ==================================================================
[  244.723785][ T7819] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60
[  244.723817][ T7819] Write of size 4 at addr 0000000000000170 by task syz-executor/7819
[  244.723834][ T7819] 
[  244.723841][ T7819] CPU: 0 PID: 7819 Comm: syz-executor Tainted: G        W          syzkaller #0
[  244.723861][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  244.723872][ T7819] Call Trace:
[  244.723880][ T7819]  <TASK>
[  244.723890][ T7819]  __dump_stack+0x21/0x24
[  244.723911][ T7819]  dump_stack_lvl+0xee/0x150
[  244.723929][ T7819]  ? __cfi_dump_stack_lvl+0x8/0x8
[  244.723948][ T7819]  ? ihold+0x20/0x60
[  244.723965][ T7819]  ? ihold+0x20/0x60
[  244.723981][ T7819]  print_report+0x3d/0x60
[  244.724007][ T7819]  kasan_report+0x122/0x150
[  244.724030][ T7819]  ? ihold+0x20/0x60
[  244.724048][ T7819]  kasan_check_range+0x280/0x290
[  244.724070][ T7819]  __kasan_check_write+0x14/0x20
[  244.724087][ T7819]  ihold+0x20/0x60
[  244.724103][ T7819]  vfs_rmdir+0x25f/0x500
[  244.724125][ T7819]  incfs_kill_sb+0x105/0x220
[  244.724148][ T7819]  deactivate_locked_super+0xb5/0x120
[  244.724171][ T7819]  deactivate_super+0xaf/0xe0
[  244.724192][ T7819]  cleanup_mnt+0x45f/0x4e0
[  244.724210][ T7819]  __cleanup_mnt+0x19/0x20
[  244.724225][ T7819]  task_work_run+0x1db/0x240
[  244.724247][ T7819]  ? __cfi_task_work_run+0x10/0x10
[  244.724268][ T7819]  ? __x64_sys_umount+0x125/0x160
[  244.724291][ T7819]  ? __cfi___x64_sys_umount+0x10/0x10
[  244.724314][ T7819]  exit_to_user_mode_loop+0x9b/0xb0
[  244.724335][ T7819]  exit_to_user_mode_prepare+0x5a/0xa0
[  244.724353][ T7819]  syscall_exit_to_user_mode+0x1a/0x30
[  244.724378][ T7819]  do_syscall_64+0x58/0xa0
[  244.724396][ T7819]  ? clear_bhb_loop+0x30/0x80
[  244.724421][ T7819]  ? clear_bhb_loop+0x30/0x80
[  244.724444][ T7819]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.724466][ T7819] RIP: 0033:0x7f45331902f7
[  244.724485][ T7819] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  244.724644][ T7819] RSP: 002b:00007ffe7c811818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  244.724667][ T7819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f45331902f7
[  244.724680][ T7819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7c8118d0
[  244.724693][ T7819] RBP: 00007ffe7c8118d0 R08: 0000000000000000 R09: 0000000000000000
[  244.724705][ T7819] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7c812960
[  244.724718][ T7819] R13: 00007f4533211d7d R14: 000000000003ba86 R15: 00007ffe7c8129a0
[  244.724737][ T7819]  </TASK>
[  244.724745][ T7819] ==================================================================
[  244.746497][ T7819] Disabling lock debugging due to kernel taint
[  244.746531][ T7819] BUG: kernel NULL pointer dereference, address: 0000000000000170
[  244.746545][ T7819] #PF: supervisor write access in kernel mode
[  244.746557][ T7819] #PF: error_code(0x0002) - not-present page
[  244.746573][ T7819] PGD 109334067 P4D 109334067 PUD 0 
[  244.746602][ T7819] Oops: 0002 [#1] PREEMPT SMP KASAN
[  244.746622][ T7819] CPU: 1 PID: 7819 Comm: syz-executor Tainted: G    B   W          syzkaller #0
[  244.746642][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  244.746655][ T7819] RIP: 0010:ihold+0x26/0x60
[  244.746684][ T7819] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1
[  244.746704][ T7819] RSP: 0018:ffffc90004347c78 EFLAGS: 00010246
[  244.746723][ T7819] RAX: ffff88811bff8000 RBX: 0000000000000000 RCX: ffff88811bff8000
[  244.746737][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  244.746750][ T7819] RBP: ffffc90004347c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd
[  244.746765][ T7819] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88811cd4a65c
[  245.117140][ T7819] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  245.117160][ T7819] FS:  000055557b02f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  245.117178][ T7819] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  245.117192][ T7819] CR2: 0000000000000170 CR3: 0000000126348000 CR4: 00000000003526a0
[  245.117208][ T7819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  245.117219][ T7819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  245.117232][ T7819] Call Trace:
[  245.117238][ T7819]  <TASK>
[  245.117247][ T7819]  vfs_rmdir+0x25f/0x500
[  245.117276][ T7819]  incfs_kill_sb+0x105/0x220
[  245.117300][ T7819]  deactivate_locked_super+0xb5/0x120
[  245.117325][ T7819]  deactivate_super+0xaf/0xe0
[  245.117346][ T7819]  cleanup_mnt+0x45f/0x4e0
[  245.117364][ T7819]  __cleanup_mnt+0x19/0x20
[  245.117379][ T7819]  task_work_run+0x1db/0x240
[  245.117411][ T7819]  ? __cfi_task_work_run+0x10/0x10
[  245.117433][ T7819]  ? __x64_sys_umount+0x125/0x160
[  245.117456][ T7819]  ? __cfi___x64_sys_umount+0x10/0x10
[  245.117480][ T7819]  exit_to_user_mode_loop+0x9b/0xb0
[  245.117499][ T7819]  exit_to_user_mode_prepare+0x5a/0xa0
[  245.117519][ T7819]  syscall_exit_to_user_mode+0x1a/0x30
[  245.117546][ T7819]  do_syscall_64+0x58/0xa0
[  245.117563][ T7819]  ? clear_bhb_loop+0x30/0x80
[  245.117588][ T7819]  ? clear_bhb_loop+0x30/0x80
[  245.117610][ T7819]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.117632][ T7819] RIP: 0033:0x7f45331902f7
[  245.117649][ T7819] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  245.117665][ T7819] RSP: 002b:00007ffe7c811818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  245.117686][ T7819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f45331902f7
[  245.117699][ T7819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7c8118d0
[  245.117711][ T7819] RBP: 00007ffe7c8118d0 R08: 0000000000000000 R09: 0000000000000000
[  245.117723][ T7819] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7c812960
[  245.117735][ T7819] R13: 00007f4533211d7d R14: 000000000003ba86 R15: 00007ffe7c8129a0
[  245.117752][ T7819]  </TASK>
[  245.117757][ T7819] Modules linked in:
[  245.117785][ T7819] CR2: 0000000000000170
[  245.117799][ T7819] ---[ end trace 0000000000000000 ]---
[  245.117807][ T7819] RIP: 0010:ihold+0x26/0x60
[  245.117826][ T7819] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1
[  245.117840][ T7819] RSP: 0018:ffffc90004347c78 EFLAGS: 00010246
[  245.117855][ T7819] RAX: ffff88811bff8000 RBX: 0000000000000000 RCX: ffff88811bff8000
[  245.117867][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  245.117878][ T7819] RBP: ffffc90004347c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd
[  245.117891][ T7819] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88811cd4a65c
[  245.117904][ T7819] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  245.117916][ T7819] FS:  000055557b02f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  245.117932][ T7819] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  245.117945][ T7819] CR2: 0000000000000170 CR3: 0000000126348000 CR4: 00000000003526a0
[  245.117959][ T7819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  245.117970][ T7819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  245.117982][ T7819] Kernel panic - not syncing: Fatal exception
[  245.118312][ T7819] Kernel Offset: disabled
[  245.466451][ T7819] Rebooting in 86400 seconds..