last executing test programs:

28.219014665s ago: executing program 3 (id=4):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b9500200002e0f22dab9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x63}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

27.98100977s ago: executing program 3 (id=15):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
mmap(&(0x7f0000333000/0x1000)=nil, 0x1000, 0x0, 0x4110013, r0, 0x7000)

27.727187127s ago: executing program 3 (id=20):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

27.58865122s ago: executing program 3 (id=22):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00')

27.5568662s ago: executing program 3 (id=23):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0x8)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x9803, 0xd5)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$getflags(r0, 0x401)

27.470752693s ago: executing program 3 (id=27):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000})

27.470676902s ago: executing program 32 (id=27):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000})

23.422304451s ago: executing program 5 (id=136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="450f019d0c000000c4a189ec380f01cb8fc8b4a22b000f22dd8f298801de0f015a0b66b839008ed843c1cf2f66baf80cb88fb3938eef66bafc0cec", 0x3b}], 0x1, 0x7, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22.492834663s ago: executing program 5 (id=147):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

21.649800524s ago: executing program 5 (id=172):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

21.625419115s ago: executing program 5 (id=173):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$eJzs3U9rK1UUAPAz+ddUFwniRhEc0IWr8urWTaM8QexKiaBuDL4+kKQUWghYwdpVP4FL8Wu4defabyC4Fdy1i8rIZGaaxCZttP+g/n6b3t57z52TOUOyyskXr+0On+0lcXz6W7TbSdS2YivOkuhGLSrfRSMAgMfjLMvizywimsX/ycqRjdrdZQUA3KXi87/w0LkAAPfj408/+7C3vf30ozRtxyudk3E/iYjdk3G/WO89j69iFDvxJDpxHpFdKMbvf7D9NBpprhtv7h6N++O583t/xPokfjM60V0cv5kWyvh+RP63GS9EGr3nzeqoTry8OP7tBfHRb8Vbb8zkvxGd+PXL2ItRPIs8dhr/7Waavpd9f/rN5/ll8vikFv21yb7SekRWv7eiAAAAAAAAAAAAAAAAAAAAAADw6G2kaVK075n078mnyv479fPJ+kZa6c735yniL/oFF/2Bsihb9Bxl8UPVX+dJmqZZuXEa34hXG35YAAAAAAAAAAAAAAAAAAAAAHIHXx8OB6PRzv6NB/XhYFR1A6i+1v9fD9yamXk9DoeD+vID11a/1my3gTzXKzdHoxG3cFuuH8TP63k+S/b8WOb7709emxb3kzK8KsytvoqX3r3IMC2Xqps8HCTXXatdFe6n2aVWrJxGkszNTGo72tnPJo/EeTZf0/aSm9m6hbuRP6OtFxcu/ZVl2WrnvPN7UaNyJpm02FgtjWY5WPq0tC/X4pflBy59y6jf9D0HAAAAAAAAAAAAAAAAAABYbP6L0/9wfGVo7c6SAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB7Nv39/2rQjoj5mUuDozL4qj3loBX7Bw/8EgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+DsAAP//tERGig==")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)

21.518814157s ago: executing program 5 (id=174):
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x18b)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x16)
flock(r1, 0x1780f9c373410de4)
flock(r0, 0x2)
flock(r2, 0x598a3f5062355775)

21.422982609s ago: executing program 5 (id=177):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x6, 0x80801)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400005, r2})
close_range(r1, r1, 0x0)

21.422883089s ago: executing program 33 (id=177):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x6, 0x80801)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400005, r2})
close_range(r1, r1, 0x0)

5.037108707s ago: executing program 2 (id=340):
r0 = syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf8, 0x0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0xee640842aed3cc28, 0x7}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, 0x0)
ptrace(0x4207, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x12, @string={0x12, 0x3, "b7de7efa09143eea1890d4c029b77ada"}}}, 0x0)

3.364776948s ago: executing program 4 (id=359):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

3.241115341s ago: executing program 4 (id=365):
r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x59, &(0x7f0000000400)=@string={0x59, 0x3, "08d0cdc83c2a76b810d1a96f7a653b4616f199e86e774baea72317c85b203fa7e47dfb0b495dc393f032f0dee4a86935620425b5b0760f6ecb483d900b9636946b00bf34e6993603f161731d629caadc44c10e377c7e18"}}, {0x101, &(0x7f00000002c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1004}}]})
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRES64=r0, @ANYRESOCT=r0]}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c90000001400310005"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0)

2.656107255s ago: executing program 1 (id=381):
r0 = socket$unix(0x1, 0x1, 0x0)
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setreuid(r3, 0x0)

2.585782417s ago: executing program 1 (id=383):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x17fc)

2.43603028s ago: executing program 1 (id=389):
memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000080}, 0x0)

2.423218001s ago: executing program 1 (id=378):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

2.379179992s ago: executing program 1 (id=380):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)

2.319474464s ago: executing program 2 (id=384):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x4})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa0000013})
epoll_pwait(r2, &(0x7f0000004080)=[{}, {}], 0x2, 0xe, 0x0, 0x0)

2.257688395s ago: executing program 2 (id=385):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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")
write(0xffffffffffffffff, &(0x7f0000000000)="ea", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2.117163929s ago: executing program 2 (id=390):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.942745522s ago: executing program 2 (id=394):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x132)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x2000000000006)

1.932782543s ago: executing program 0 (id=395):
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x0, 0x2}, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)

1.879767464s ago: executing program 0 (id=396):
mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1af4 1050 ffff', 0xe)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x7b, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x76aa, 0xfff}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x81, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xfa}}}}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0})

1.842218505s ago: executing program 1 (id=397):
r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0)
syz_usb_connect$uac2(0x2, 0xb9, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2002, 0xa)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.267340139s ago: executing program 4 (id=398):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
truncate(&(0x7f0000000000)='./file3\x00', 0x7)

1.265778089s ago: executing program 2 (id=408):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x80, 0x1c, {0x2, 0x28, 0xe49, 0x80, 0x3fc, 0x2, 0x6, 0x800101, 0x800, 0xd, 0xc, 0x6}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

1.149287472s ago: executing program 4 (id=400):
r0 = epoll_create1(0x80000)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000})
r2 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000002c0)={0x1c})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0xa0000013})

1.083698983s ago: executing program 4 (id=401):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x7259d000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"})
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x40000001, 0x63, 0xff}}, 0x39)

327.787722ms ago: executing program 6 (id=404):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b9500200002e0f22dab9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x63}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

255.526133ms ago: executing program 6 (id=405):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

245.855474ms ago: executing program 6 (id=406):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x3}]}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x11, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@llc={0x4, {@llc={0x7e, 0x0, "ee"}}}}}, 0x0)

225.803984ms ago: executing program 6 (id=407):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x8004745a, 0x0)

207.201684ms ago: executing program 4 (id=409):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)

195.494425ms ago: executing program 6 (id=410):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000240)=@svm={0x103, 0x1, 0x1080, {0x4000}, {"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"}})

103.344778ms ago: executing program 6 (id=411):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="0fb2792e0f2141b9f00a00000f320f804d1e0000660f3a417161000f32660f72d400b917090000b800580000ba000000000f3066b833010f00d865d098521f0000", 0x41}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

102.873498ms ago: executing program 0 (id=421):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10, 0x0, 0x800000001780}]})

60.059928ms ago: executing program 0 (id=412):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000002480)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}}}}}}}, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf)

10.795889ms ago: executing program 0 (id=413):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x381, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

0s ago: executing program 0 (id=414):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x1abb40, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xcc840000)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\xa0\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\x02\xb3\x1d\xfai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000016c0)='\x00\x00\b\x00\x00\x00\x00\x1f\x00x\x85\x1c \xf3<r\xbc\xfe\x00\x00\x00\x04\xbb\xf032\x9c\x1aQ\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xb7\x19\xeb\x91\xc9\x1d\x19`I\xd5\xde\"=\xbd\xce\xa5\x9b\x81j\xdf\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a  \x9a\x9f\xfc\"\xee\xc4\x93Q\x82,\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x00b\x00\x00\x00\x00\x00\x00\x00\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\aOv$\xc8\"\a\xd7T\xfb\xfc\xfa\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xbd\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcf\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\\5y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91O\x9c\xbf\x86\xec\x80TZO\x85\xdd\x9d\x18\x8e\x976\xd9c\xfb`L\x1b\xa7!9\xf3\x94\xd4\xeb\x06\x99M\x9b\xf6#\xf9\xd3\x90D\xf0\x92\xaf\x9ab\xa2\xc9\xe5\xe1\xb4\xb1\xd6\x19I\xcd\x0f\x17\x16\xbcES\x80\x9e\xf9\xb2\x0e\x13\xe6\xdc\xef\xf9\xd8J\x14\x94\x83\xb8\xd6\x995\x83\x11\x19\xb6cA\x1e\xba.\x91\xec\xb2b\x0e\xb5\xd7\xee\xa2\xaf\xcbZ\x05\xf7\x17\xc03\xa7\xb1\x9d\x80\xb6;p\xf6\xa6\x8b$s\xe6\x92\x84\x02emj\x99\x16D\xaeq8>\xee6t\x95\x02K|\xa1\xdc]\xaf\a\xc40(/\a<\x1b[x\xa5/\x86\xf4J!\xed\x1c\'\\I\x9c\xd6\xab\xc6\xbdr\x06Z\x9aFF\x8b\xcc\xf7\xb0Qe\xf2=\xb7\x1d\xce[\xb8[Ec\xf2\x93\xa7j\x1f\xb9&\xb3;s\xbc\x9e\xec\xb2\x91\xb3Y\xdby\xa7\xf5\x1d\xc1\x85\xb3\x83l&\x05t\xdb2\xd0\x99\xe3h\xf1\x8d#\x941e8\xb9\xca8\x021\xb9Yv!l\xcd\x01\x9d\a\br\xa1e\xe6\xd9DZfc\x0f\xb0\xbb\xb2\r\xf5E\x88\x0e\xd9\xbfo\xb0\x81c#!\xf1\aC\x8c\xa5\x10\x17\xf3q\v\xba\xfe\x81\x86\x01\x04\xb2\xcb\xbdU\xab\x1dn\xf1\b\xf6w!\xb6S\xdf\x96\x11\x02\x90\xd6\xd7BQN*\xae\xddP\x1b\\\xf0Nm')

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   14.298135][   T30] kauditd_printk_skb: 48 callbacks suppressed
[   14.298148][   T30] audit: type=1400 audit(1785851847.585:59): avc:  denied  { transition } for  pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.303408][   T30] audit: type=1400 audit(1785851847.585:60): avc:  denied  { noatsecure } for  pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.307445][   T30] audit: type=1400 audit(1785851847.585:61): avc:  denied  { write } for  pid=223 comm="sh" path="pipe:[13974]" dev="pipefs" ino=13974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   14.311703][   T30] audit: type=1400 audit(1785851847.585:62): avc:  denied  { rlimitinh } for  pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.316997][   T30] audit: type=1400 audit(1785851847.585:63): avc:  denied  { siginh } for  pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts.
[   21.207267][   T30] audit: type=1400 audit(1785851854.495:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.208330][  T277] cgroup: Unknown subsys name 'net'
[   21.229990][   T30] audit: type=1400 audit(1785851854.495:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.257183][   T30] audit: type=1400 audit(1785851854.525:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.257364][  T277] cgroup: Unknown subsys name 'devices'
[   21.366791][  T277] cgroup: Unknown subsys name 'hugetlb'
[   21.372398][  T277] cgroup: Unknown subsys name 'rlimit'
[   21.508782][   T30] audit: type=1400 audit(1785851854.795:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.532035][   T30] audit: type=1400 audit(1785851854.795:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.556773][   T30] audit: type=1400 audit(1785851854.795:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.562554][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   21.588687][   T30] audit: type=1400 audit(1785851854.875:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.614128][   T30] audit: type=1400 audit(1785851854.875:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.648378][   T30] audit: type=1400 audit(1785851854.935:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.673913][   T30] audit: type=1400 audit(1785851854.935:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.673969][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.143913][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.151275][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.158780][  T285] device bridge_slave_0 entered promiscuous mode
[   22.178960][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.186180][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.193462][  T285] device bridge_slave_1 entered promiscuous mode
[   22.243619][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.250697][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.258203][  T286] device bridge_slave_0 entered promiscuous mode
[   22.277244][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.284321][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.291767][  T286] device bridge_slave_1 entered promiscuous mode
[   22.338590][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.345896][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.353221][  T287] device bridge_slave_0 entered promiscuous mode
[   22.365458][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.372593][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.380014][  T287] device bridge_slave_1 entered promiscuous mode
[   22.410782][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.417874][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.425311][  T289] device bridge_slave_0 entered promiscuous mode
[   22.434714][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.441803][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.449268][  T289] device bridge_slave_1 entered promiscuous mode
[   22.497202][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.504270][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.511656][  T288] device bridge_slave_0 entered promiscuous mode
[   22.537819][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.544871][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.552246][  T288] device bridge_slave_1 entered promiscuous mode
[   22.611712][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.618780][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.626369][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.633386][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.652374][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.659462][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.666730][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.673741][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.713565][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.720642][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.727917][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.734932][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.754820][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.762243][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.769580][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.777170][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.784446][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.792237][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.799495][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.827424][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.835776][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.842819][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.860609][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.868103][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.875800][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.884032][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.891063][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.905493][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.912950][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.921152][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.928176][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.935629][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.943729][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.950897][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.967563][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.975162][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.983279][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.990308][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.997796][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.006016][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.013025][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.020498][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.043052][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.051108][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.059310][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.067406][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.091565][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.099798][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.106831][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.114572][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.122920][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.130105][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.137827][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.145859][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.153914][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.162160][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.169210][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.176708][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.184820][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.191867][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.199261][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.207479][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.215269][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.229023][  T285] device veth0_vlan entered promiscuous mode
[   23.240447][  T289] device veth0_vlan entered promiscuous mode
[   23.247306][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.255838][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.264120][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.272226][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.280400][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.288812][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.296842][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.305236][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.313527][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.321653][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.329732][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.337304][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.344707][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.352245][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.368482][  T285] device veth1_macvtap entered promiscuous mode
[   23.378995][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.387135][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.395712][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.403690][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.412204][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.420512][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.428782][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.449543][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.457878][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.466176][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.474430][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.482954][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.491438][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.499857][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.508199][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.516653][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.524469][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.532642][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.540734][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.548879][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.556463][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.564199][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.571798][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.580800][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.589000][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.601275][  T288] device veth0_vlan entered promiscuous mode
[   23.609354][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.617367][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.626316][  T286] device veth0_vlan entered promiscuous mode
[   23.635985][  T289] device veth1_macvtap entered promiscuous mode
[   23.642949][  T287] device veth0_vlan entered promiscuous mode
[   23.649468][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.657085][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.664417][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.671985][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.680444][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.696382][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.704635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.718527][  T288] device veth1_macvtap entered promiscuous mode
[   23.725753][  T285] request_module fs-gadgetfs succeeded, but still no fs?
[   23.738666][  T287] device veth1_macvtap entered promiscuous mode
[   23.746124][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.754294][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.762492][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.770312][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.778692][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.787171][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.795378][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.803428][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.811921][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.820106][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.844158][  T286] device veth1_macvtap entered promiscuous mode
[   23.853695][  T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.872810][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.880863][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.889369][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.897863][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.906501][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.914799][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.923082][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.931435][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.939858][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.976745][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.986709][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.008167][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.024817][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.057563][  T324] input: syz0 as /devices/virtual/input/input4
[   24.140303][  T334] sd 0:0:1:0: device reset
[   24.165447][  T329] kvm [328]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[   24.174536][  T320] kvm [319]: vcpu2, guest rIP: 0x9130 disabled perfctr wrmsr: 0xc1 data 0x5
[   24.174598][  T320] kvm [319]: vcpu2, guest rIP: 0x9130 disabled perfctr wrmsr: 0xc2 data 0x5
[   24.198208][  T329] kvm [328]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[   24.234127][  T329] APIC base relocation is unsupported by KVM
[   24.262193][  T320] kvm [319]: vcpu2, guest rIP: 0x9130 ignored wrmsr: 0x11e data 0x5
[   24.314045][  T320] kvm [319]: vcpu2, guest rIP: 0x9130 disabled perfctr wrmsr: 0x186 data 0x5
[   24.345289][  T320] kvm [319]: vcpu2, guest rIP: 0x9130 disabled perfctr wrmsr: 0x187 data 0x5
[   24.360734][  T320] kvm [319]: vcpu2, guest rIP: 0x9130 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x5, nop
[   24.451354][  T361] loop4: detected capacity change from 0 to 1024
[   24.515342][  T361] =======================================================
[   24.515342][  T361] WARNING: The mand mount option has been deprecated and
[   24.515342][  T361]          and is ignored by this kernel. Remove the mand
[   24.515342][  T361]          option from the mount to silence this warning.
[   24.515342][  T361] =======================================================
[   24.583166][  T361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   24.594235][  T361] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   24.612838][  T361] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: block 3: comm syz.4.19: lblock 3 mapped to illegal pblock 3 (length 3)
[   24.628834][  T361] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   24.641523][  T361] EXT4-fs (loop4): This should not happen!! Data will be lost
[   24.641523][  T361] 
[   24.645018][  T307] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   24.655291][  T361] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: comm syz.4.19: lblock 0 mapped to illegal pblock 0 (length 1)
[   24.681859][   T45] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8)
[   24.700835][   T45] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   24.715997][   T45] EXT4-fs (loop4): This should not happen!! Data will be lost
[   24.715997][   T45] 
[   24.786019][  T286] syz-executor (286) used greatest stack depth: 21688 bytes left
[   24.826143][  T383] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=383 comm=syz.1.28
[   24.877308][  T389] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=389 comm=syz.1.28
[   24.889691][  T389] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=389 comm=syz.1.28
[   24.946151][  T386] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.953242][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.963415][  T386] device bridge_slave_0 entered promiscuous mode
[   24.972695][  T386] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.981793][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.991579][  T386] device bridge_slave_1 entered promiscuous mode
[   25.041543][  T386] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.048625][  T386] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.055926][  T386] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.062958][  T386] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.064988][  T307] usb 1-1: config 0 has no interfaces?
[   25.080327][  T307] usb 1-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca
[   25.091340][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.099034][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.109349][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.111961][  T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.139403][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.155862][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.162275][  T307] usb 1-1: config 0 descriptor??
[   25.167158][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.186893][  T386] device veth0_vlan entered promiscuous mode
[   25.196704][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.215235][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.222742][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.248146][  T386] device veth1_macvtap entered promiscuous mode
[   25.257002][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.279696][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.298871][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.410799][  T420] loop2: detected capacity change from 0 to 512
[   25.426932][   T10] device bridge_slave_1 left promiscuous mode
[   25.433252][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.454344][   T10] device bridge_slave_0 left promiscuous mode
[   25.467091][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.484660][   T10] device veth1_macvtap left promiscuous mode
[   25.500724][  T420] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.42: inode has both inline data and extents flags
[   25.510484][   T10] device veth0_vlan left promiscuous mode
[   25.514503][  T420] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.42: couldn't read orphan inode 15 (err -117)
[   25.522340][    T6] usb 1-1: USB disconnect, device number 2
[   25.532086][  T420] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[   25.624885][  T307] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   25.634570][  T425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.43'.
[   25.668630][  T432] loop1: detected capacity change from 0 to 16
[   25.681728][  T432] erofs: (device loop1): mounted with root inode @ nid 36.
[   25.700406][  T432] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[   25.709537][  T432] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[   25.720151][  T438] loop2: detected capacity change from 0 to 256
[   25.721045][  T432] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[   25.735480][  T432] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[   25.748883][  T441] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   25.761306][  T441] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.768563][  T441] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.776233][  T438] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   25.787784][  T438] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   25.800516][  T438] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   25.866030][  T307] usb 6-1: Using ep0 maxpacket: 32
[   25.950900][  T457] loop2: detected capacity change from 0 to 256
[   25.960476][  T457] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   25.974136][  T457] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   25.985527][  T307] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[   25.999552][  T307] usb 6-1: config 0 has no interface number 0
[   26.040370][  T460] loop2: detected capacity change from 0 to 1024


.
..- binderfs, gadgetfs�
 
ptp_kvme
[   26.077017][  T460] xt_hashlimit: size too large, truncated to 1048576
diskc
 block\

rtc
	char

log
 
stderr
 
stdout
 
stdin

fd
shm
pts[   26.107656][  T470] loop4: detected capacity change from 0 to 256

(cpu_dma_latency
 vsock

snd	
 ashmem
 vhost-vsock
uhid
 mapper
ptp0
rtc0
 uinput� input� raw-gadget� usbmon32� usbmon31� usbmon30�  usbmon29�! usbmon28�" usbmon27�# usbmo[   26.164921][  T307] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
n26�$ usbmon25�% usbmon24�& usbmon23�' usbmon22�[   26.185901][  T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
( usbmon21�[   26.196677][  T307] usb 6-1: Product: syz
) usbmon20�* usbmon19�[   26.206319][  T307] usb 6-1: Manufacturer: syz
+ usbmo[   26.212056][  T307] usb 6-1: SerialNumber: syz
n18�, usbmon17�[   26.221288][  T307] usb 6-1: config 0 descriptor??
- usbmon16�. usbmon15�/ usbmon14�0 usbmon13�1 usbmon12�2 usbmon11�3 usbmon10�4 usbmon9�5 usbmon8�6 usbmon7�7 usbmon6�8 usbmon5�9 usbmon4�: usbmon3�; usbmon2�<bus�= usbmon1�> usbmon0[   26.275280][  T307] smsc95xx v2.0.0
�?ppp�@sda1�Anet�Bsda�Cbsg�D loop31�E loop30�F loop29�G loop28�H loop27�I loop26�J loop25�K loop24�L loop23�M loop22�N loop21�O loop20�P loop19�Q loop18�R loop17�S loop16�T loop15�U loop14�V loop13�W loop12X loop11~Y loop10}Z loop9|[ loop8{\ loop7z] loop6y^ loop5x_ loop4w` loop3va loop2ub loop1tc loop0sd loop-controlr[   26.381517][   T30] kauditd_printk_skb: 106 callbacks suppressed
e ram15[   26.381531][   T30] audit: type=1400 audit(1785854437.664:180): avc:  denied  { mount } for  pid=484 comm="syz.4.69" name="/" dev="configfs" ino=13724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
q[   26.384550][  T485] using random self ethernet address
f ram14[   26.390593][   T30] audit: type=1400 audit(1785854437.664:181): avc:  denied  { search } for  pid=484 comm="syz.4.69" name="/" dev="configfs" ino=13724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
p[   26.413327][  T485] using random host ethernet address
g ram13[   26.449742][   T30] audit: type=1400 audit(1785854437.664:182): avc:  denied  { write } for  pid=484 comm="syz.4.69" name="usb_gadget" dev="configfs" ino=13725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
oh ram12ni ram11mj ram10lkram9kl[   26.484028][   T30] audit: type=1400 audit(1785854437.664:183): avc:  denied  { add_name } for  pid=484 comm="syz.4.69" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
ram8j[   26.505531][   T30] audit: type=1400 audit(1785854437.664:184): avc:  denied  { create } for  pid=484 comm="syz.4.69" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
mram7[   26.526498][   T30] audit: type=1400 audit(1785854437.764:185): avc:  denied  { unlink } for  pid=488 comm="syz.0.70" name="#7" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
in[   26.550006][   T30] audit: type=1400 audit(1785854437.764:186): avc:  denied  { mount } for  pid=488 comm="syz.0.70" name="/" dev="overlay" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
ram6horam5gpram4fqram3erram2dsram1ctram0bu hwrngavhpet[   26.589502][   T30] audit: type=1400 audit(1785854437.764:187): avc:  denied  { remount } for  pid=488 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
`w[   26.609968][   T30] audit: type=1400 audit(1785854437.764:188): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
 ttyS3[   26.630877][   T30] audit: type=1400 audit(1785854437.784:189): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
_x ttyS2^y ttyS1]z ttyS0\{ptmx[|fuseZ} snapshotS~cpuRkvmQ� tty63P� tty62O� tty61N� tty60M� tty59L� tty58K� tty57J� tty56I� tty55[   26.725177][  T307] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   26.745527][  T307] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   26.882554][  T512] loop4: detected capacity change from 0 to 40427
[   26.900235][  T512] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   26.907848][  T512] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   26.918658][  T512] F2FS-fs (loop4): invalid crc value
[   26.926049][  T512] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   26.945379][  T538] loop1: detected capacity change from 0 to 4096
[   26.955784][  T512] F2FS-fs (loop4): Start checkpoint disabled!
[   26.957120][  T538] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   26.968906][  T512] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   26.980823][  T512] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   27.064773][  T308] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   27.074395][  T322] attempt to access beyond end of device
[   27.074395][  T322] loop4: rw=2049, want=45104, limit=40427
[   27.118028][  T548] loop1: detected capacity change from 0 to 512
[   27.148516][  T548] EXT4-fs (loop1): 1 truncate cleaned up
[   27.154198][  T548] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[   27.176335][  T548] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.96: invalid indirect mapped block 234881024 (level 0)
[   27.190551][  T548] EXT4-fs (loop1): Remounting filesystem read-only
[   27.252235][  T553] xt_hashlimit: size too large, truncated to 1048576
[   27.309917][  T308] usb 1-1: Using ep0 maxpacket: 32
[   27.434754][  T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.454731][  T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.454737][  T307] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71
[   27.454819][  T307] smsc95xx: probe of 6-1:0.67 failed with error -71
[   27.474957][  T308] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   27.513340][  T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.514106][  T307] usb 6-1: USB disconnect, device number 2
[   27.522286][  T308] usb 1-1: config 0 descriptor??
[   27.575151][  T308] hub 1-1:0.0: USB hub found
[   27.615603][  T579] exfat: Deprecated parameter 'namecase'
[   27.621525][  T579] exfat: Deprecated parameter 'namecase'
[   27.647207][  T581] SELinux: ebitmap: start bit 0 comes after start bit 0
[   27.656086][  T581] SELinux: failed to load policy
[   27.666179][  T579] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[   27.677872][  T583] capability: warning: `syz.4.110' uses 32-bit capabilities (legacy support in use)
[   27.756300][  T587] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,,errors=continue. Quota mode: none.
[   27.794691][  T308] hub 1-1:0.0: 1 port detected
[   27.824861][   T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   28.065243][   T26] usb 3-1: Using ep0 maxpacket: 8
[   28.344609][   T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   28.357000][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.373729][   T26] usb 3-1: Product: syz
[   28.382411][   T26] usb 3-1: Manufacturer: syz
[   28.387639][   T26] usb 3-1: SerialNumber: syz
[   28.392713][  T628] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   28.401315][  T628] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   28.418351][  T628] F2FS-fs (loop1): invalid crc value
[   28.425244][  T628] F2FS-fs (loop1): Found nat_bits in checkpoint
[   28.457380][  T628] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   28.465050][  T308] hub 1-1:0.0: activate --> -90
[   28.470059][  T628] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   28.505682][  T624] F2FS-fs (loop4): invalid crc value
[   28.512499][  T624] F2FS-fs (loop4): Found nat_bits in checkpoint
[   28.532396][  T624] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   28.556027][   T45] tipc: Subscription rejected, illegal request
[   28.885405][  T307] usb 1-1: USB disconnect, device number 3
[   28.938599][  T652] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.135: iget: bad i_size value: 38620345925642
[   28.952038][  T652] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.135: couldn't read orphan inode 15 (err -117)
[   28.964402][  T652] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   28.981139][  T652] EXT4-fs (loop4): shut down requested (1)
[   29.084568][   T26] usb 3-1: clock source 0 is not valid, cannot use
[   29.304488][   T26] usb 3-1: 1:1: cannot get freq (v2/v3): err -71
[   29.324487][   T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   29.324491][   T26] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   29.364499][   T26] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   29.373136][   T26] usb 3-1: clock source 0 is not valid, cannot use
[   29.394466][   T26] usb 3-1: 2:1: cannot get freq (v2/v3): err -71
[   29.425693][   T26] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   29.449352][   T26] usb 3-1: USB disconnect, device number 2
[   29.515374][  T668] incfs: Unexpected inode type
[   29.560566][  T674] set_capacity_and_notify: 8 callbacks suppressed
[   29.560582][  T674] loop0: detected capacity change from 0 to 256
[   29.694474][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.719951][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.729816][   T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   29.742782][   T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   29.752337][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.763880][   T20] usb 5-1: config 0 descriptor??
[   29.769606][  T307] kernel write not supported for file /input/event2 (pid: 307 comm: kworker/0:3)
[   29.924380][    T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   29.946504][  T701] loop2: detected capacity change from 0 to 128
[   30.020604][  T704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.157'.
[   30.029706][  T704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.157'.
[   30.038997][  T704] Zero length message leads to an empty skb
[   30.076359][  T710] loop2: detected capacity change from 0 to 512
[   30.088904][  T712] futex_wake_op: syz.0.160 tries to shift op by 144; fix this program
[   30.097230][  T710] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   30.105394][  T710] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   30.112763][  T710] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   30.120840][  T714] loop0: detected capacity change from 0 to 2048
[   30.125982][  T710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   30.143760][  T714] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   30.147833][  T710] EXT4-fs (loop2): 1 truncate cleaned up
[   30.151760][  T714] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement.
[   30.157049][  T710] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,mblk_io_submit,init_itable=0x0000000000000081,min_batch_time=0x0000000000001000,barrier,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none.
[   30.188878][    T6] usb 2-1: Using ep0 maxpacket: 16
[   30.230420][  T662] loop4: detected capacity change from 0 to 128
[   30.285639][  T662] EXT4-fs warning (device loop4): ext4_fill_super:4018: metadata_csum and uninit_bg are redundant flags; please run fsck.
[   30.300241][  T662] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   30.308326][  T717] loop0: detected capacity change from 0 to 1024
[   30.317313][  T662] EXT4-fs (loop4): Encoding requested by superblock is unknown
[   30.336274][  T717] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   30.354554][    T6] usb 2-1: unable to get BOS descriptor or descriptor too short
[   30.367652][  T717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[   30.378148][  T717] System zones: 0-1, 3-12
[   30.382904][  T717] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,dioread_nolock,min_batch_time=0x0000000000000002,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,init_itable,errors=remount-ro,acl,auto_da_alloc=0x0000000000000340,debug,barrier=0x0000000000000007. Quota mode: none.
[   30.425696][   T20] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   30.438786][   T20] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   30.451343][    T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.462813][    T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   30.473654][    T6] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[   30.554071][  T739] netlink: 240 bytes leftover after parsing attributes in process `syz.0.171'.
[   30.644349][    T6] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   30.654145][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.662444][    T6] usb 2-1: Manufacturer: 퀈죍⨼롶턐澩敺䘻睮깋⎧젗⁛ꜿ緤௻嵉鏃㋰꣤㕩Ѣ딥皰渏䣋逽阋鐶k㒿駦̶懱ᵳ鱢셄㜎繼
[   30.664627][  T744] loop5: detected capacity change from 0 to 256
[   30.677640][    T6] usb 2-1: SerialNumber: င
[   30.750410][  T744] incfs: ino conflict with backing FS 1
[   30.762181][  T386] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   30.773272][  T386] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   30.938409][  T753] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.946223][  T753] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.953674][  T753] device bridge_slave_0 entered promiscuous mode
[   30.963218][  T753] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.970603][  T753] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.979405][  T753] device bridge_slave_1 entered promiscuous mode
[   30.986234][  T676] netlink: 'syz.1.145': attribute type 49 has an invalid length.
[   31.016714][  T676] device ip6gretap0 entered promiscuous mode
[   31.066210][    T6] usb 2-1: Audio class v2/v3 interfaces need an interface association
[   31.074713][    T6] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   31.107216][    T6] usb 2-1: USB disconnect, device number 2
[   31.207762][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   31.215480][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   31.237186][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   31.246822][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   31.255560][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.262613][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.270868][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   31.279794][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   31.288230][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.295294][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.303032][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   31.311634][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   31.319934][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   31.336846][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.345941][  T468] udevd[468]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   31.362862][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   31.380792][  T753] device veth0_vlan entered promiscuous mode
[   31.388049][   T45] device bridge_slave_1 left promiscuous mode
[   31.394438][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.402041][   T45] device bridge_slave_0 left promiscuous mode
[   31.409134][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.418252][   T45] device veth1_macvtap left promiscuous mode
[   31.424532][   T45] device veth0_vlan left promiscuous mode
[   31.527962][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.541741][  T753] device veth1_macvtap entered promiscuous mode
[   31.549358][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.558163][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.565815][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.572821][  T676] syz.1.145 (676) used greatest stack depth: 21472 bytes left
[   31.578971][  T777] loop2: detected capacity change from 0 to 131072
[   31.594788][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.606178][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.615177][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.623277][  T777] F2FS-fs (loop2): invalid crc value
[   31.629636][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.641236][  T753] EXT4-fs error (device sda1): __ext4_new_inode:1292: comm syz-executor: failed to insert inode 105: doubly allocated?
[   31.650173][  T777] F2FS-fs (loop2): Found nat_bits in checkpoint
[   31.679126][  T777] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   31.707386][  T777] syz.2.187 (pid 777) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   31.744174][    C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1
[   31.858863][  T791] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.866204][  T791] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.874054][  T791] device bridge_slave_0 entered promiscuous mode
[   31.881294][  T791] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.888623][  T791] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.896461][  T791] device bridge_slave_1 entered promiscuous mode
[   31.946264][   T30] kauditd_printk_skb: 59 callbacks suppressed
[   31.946277][   T30] audit: type=1400 audit(1785854443.235:249): avc:  denied  { ioctl } for  pid=795 comm="syz.2.191" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   31.988998][  T798] loop2: detected capacity change from 0 to 16
[   31.995374][  T791] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.002427][  T791] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.009716][  T791] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.016752][  T791] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.040782][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.050734][  T798] erofs: (device loop2): mounted with root inode @ nid 36.
[   32.061983][   T30] audit: type=1400 audit(1785854443.345:250): avc:  denied  { write } for  pid=797 comm="syz.2.192" name="file3" dev="overlay" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   32.062633][   T49] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   32.102223][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.112506][  T798] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[   32.118668][   T30] audit: type=1400 audit(1785854443.345:251): avc:  denied  { open } for  pid=797 comm="syz.2.192" name="file3" dev="overlay" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   32.148861][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.183095][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.196076][   T30] audit: type=1400 audit(1785854443.485:252): avc:  denied  { getopt } for  pid=800 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   32.197758][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.222256][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.237246][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.246124][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.253188][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.263169][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.281614][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.300156][  T810] loop2: detected capacity change from 0 to 512
[   32.313920][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.324463][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.333065][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.347753][  T791] device veth0_vlan entered promiscuous mode
[   32.365056][  T813] process 'syz.0.198' launched './file0' with NULL argv: empty string added
[   32.366713][  T810] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback.
[   32.384409][   T30] audit: type=1400 audit(1785854443.675:253): avc:  denied  { execute } for  pid=812 comm="syz.0.198" name="file0" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   32.390597][  T810] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   32.423453][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.440616][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.452196][   T30] audit: type=1400 audit(1785854443.705:254): avc:  denied  { execute_no_trans } for  pid=812 comm="syz.0.198" path="/37/file0" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   32.465099][  T791] device veth1_macvtap entered promiscuous mode
[   32.481986][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.489318][   T30] audit: type=1400 audit(1785854443.765:255): avc:  denied  { search } for  pid=815 comm="syz.0.200" name="/" dev="configfs" ino=13724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   32.497606][  T816] using random self ethernet address
[   32.511740][   T30] audit: type=1400 audit(1785854443.765:256): avc:  denied  { write } for  pid=815 comm="syz.0.200" name="usb_gadget" dev="configfs" ino=13725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   32.536182][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.552957][   T30] audit: type=1400 audit(1785854443.765:257): avc:  denied  { add_name } for  pid=815 comm="syz.0.200" name="g_syz" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   32.553227][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.573575][  T816] using random host ethernet address
[   32.586720][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.586933][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.595538][  T817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[   32.604070][  T810] EXT4-fs (loop2): shut down requested (1)
[   32.610285][  T644] usb 5-1: USB disconnect, device number 2
[   32.622632][  T817] System zones: 0-1, 3-12
[   32.628608][  T819] device team_slave_0 entered promiscuous mode
[   32.640644][  T817] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,errors=continue,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback.
[   32.648572][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.674489][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.683265][  T818] device team_slave_0 left promiscuous mode
[   32.727758][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.745259][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.757767][   T30] audit: type=1400 audit(1785854444.045:258): avc:  denied  { mounton } for  pid=791 comm="syz-executor" path="/root/syzkaller.bkbPF5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   32.802945][  T817] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   32.888050][  T846] Illegal XDP return value 2799326602, expect packet loss!
[   32.945776][   T45] device bridge_slave_1 left promiscuous mode
[   32.951934][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.966499][   T45] device bridge_slave_0 left promiscuous mode
[   32.972881][  T841] syz.1.208 (841) used greatest stack depth: 21224 bytes left
[   32.978181][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.997840][   T45] device veth1_macvtap left promiscuous mode
[   33.009282][   T45] device veth0_vlan left promiscuous mode
[   33.217928][  T857] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   33.234039][  T857] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   33.253064][  T857] F2FS-fs (loop4): invalid crc value
[   33.284427][  T857] F2FS-fs (loop4): Found nat_bits in checkpoint
[   33.345779][  T857] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   33.357837][  T857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   33.366467][  T891] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[   33.379629][  T891] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.485742][  T906] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   33.675198][  T917] erofs: (device loop6): mounted with root inode @ nid 36.
[   33.684514][  T918] syz.0.235 uses obsolete (PF_INET,SOCK_PACKET)
[   33.704259][   T48] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   33.722976][  T917] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[   33.748086][  T915] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   33.756491][  T915] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   33.793246][  T911] F2FS-fs (loop1): invalid crc value
[   33.797215][  T915] F2FS-fs (loop4): Found nat_bits in checkpoint
[   33.809418][  T911] F2FS-fs (loop1): Found nat_bits in checkpoint
[   33.835031][  T915] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   33.842253][  T915] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   33.864217][  T911] F2FS-fs (loop1): Start checkpoint disabled!
[   33.888652][  T911] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   33.895270][  T915] attempt to access beyond end of device
[   33.895270][  T915] loop4: rw=2049, want=45104, limit=40427
[   33.926198][  T915] attempt to access beyond end of device
[   33.926198][  T915] loop4: rw=2049, want=40976, limit=40427
[   33.957888][    T8] attempt to access beyond end of device
[   33.957888][    T8] loop1: rw=2049, want=40984, limit=40427
[   34.153915][  T308] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   34.184252][  T945] kvm: apic: phys broadcast and lowest prio
[   34.273437][  T962] input input5: cannot allocate more than FF_MAX_EFFECTS effects
[   34.354669][  T972] Mass Storage Function, version: 2009/09/11
[   34.369338][  T972] LUN: removable file: (no medium)
[   34.403843][  T308] usb 7-1: Using ep0 maxpacket: 32
[   34.478269][  T977] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value
[   34.523892][  T308] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[   34.533663][  T308] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   34.646996][  T308] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   34.670877][  T987] binder: 986:987 ioctl c0306201 0 returned -14
[   34.683814][  T308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   34.691829][  T308] usb 7-1: SerialNumber: syz
[   34.733852][  T928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   34.853906][   T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   34.955438][  T928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   35.178233][  T989] set_capacity_and_notify: 9 callbacks suppressed
[   35.178249][  T989] loop2: detected capacity change from 0 to 131072
[   35.223767][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.237303][  T989] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[   35.246108][  T989] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   35.254398][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.264705][   T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   35.277742][  T989] F2FS-fs (loop2): invalid crc value
[   35.283149][   T20] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   35.292500][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.301177][   T20] usb 2-1: config 0 descriptor??
[   35.311146][  T989] F2FS-fs (loop2): Found nat_bits in checkpoint
[   35.346348][  T989] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   35.353548][  T989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   35.425437][  T308] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42
[   35.521300][ T1004] xt_hashlimit: size too large, truncated to 1048576
[   35.774847][   T20] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   35.794091][   T20] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   35.832431][   T20] usb 7-1: USB disconnect, device number 2
[   36.333975][   T20] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device
[   36.417739][ T1034] loop0: detected capacity change from 0 to 1024
[   36.463396][ T1034] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   36.474908][ T1034] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.502123][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.515574][  T307] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   36.516715][ T1034] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   36.535475][ T1034] EXT4-fs (loop0): This should not happen!! Data will be lost
[   36.535475][ T1034] 
[   36.555992][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.569473][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.583149][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.596606][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.610037][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.611698][ T1061] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.628290][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.661819][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.675779][ T1034] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #15: comm syz.0.272: lblock 0 mapped to illegal pblock 0 (length 1)
[   36.747224][ T1064] usb usb7: usbfs: process 1064 (syz.6.275) did not claim interface 0 before use
[   36.763528][    T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   36.933564][  T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.944557][  T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.954472][  T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   36.967579][  T307] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   36.976777][  T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.985704][  T307] usb 5-1: config 0 descriptor??
[   37.013502][    T6] usb 3-1: Using ep0 maxpacket: 8
[   37.133531][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.143762][    T6] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   37.152984][    T6] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   37.313599][    T6] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   37.322872][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.330936][    T6] usb 3-1: Product: syz
[   37.335272][    T6] usb 3-1: Manufacturer: syz
[   37.339974][    T6] usb 3-1: SerialNumber: syz
[   37.390290][ T1073] loop0: detected capacity change from 0 to 2048
[   37.444604][ T1073] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   37.454416][  T307] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[   37.462795][ T1073] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.464005][  T307] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   37.482138][  T307] plantronics 0003:047F:FFFF.0003: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   37.498077][ T1073] fs-verity: sha512 using implementation "sha512-avx2"
[   37.526748][ T1073] syz.0.278 (1073) used greatest stack depth: 21000 bytes left
[   37.604019][ T1087] kvm: apic: phys broadcast and lowest prio
[   37.745417][  T308] usb 5-1: USB disconnect, device number 3
[   37.888128][ T1090] loop0: detected capacity change from 0 to 131072
[   37.935289][ T1090] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   37.944467][ T1090] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   37.953299][ T1090] F2FS-fs (loop0): invalid crc value
[   37.960217][ T1090] F2FS-fs (loop0): Found nat_bits in checkpoint
[   37.982733][ T1090] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   37.990164][ T1090] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   38.033435][    T6] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   38.042089][    T6] usb 3-1: clock source 0 is not valid, cannot use
[   38.083395][    T6] usb 3-1: 1:1: cannot get freq (v2/v3): err -32
[   38.198791][ T1118] loop0: detected capacity change from 0 to 16
[   38.226377][ T1118] erofs: (device loop0): mounted with root inode @ nid 36.
[   38.238181][   T30] kauditd_printk_skb: 40 callbacks suppressed
[   38.238193][   T30] audit: type=1400 audit(1785854449.525:299): avc:  denied  { rename } for  pid=1117 comm="syz.0.294" name="file2" dev="overlay" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.266741][  T424] usb 2-1: reset high-speed USB device number 3 using dummy_hcd
[   38.274596][   T30] audit: type=1400 audit(1785854449.525:300): avc:  denied  { unlink } for  pid=1117 comm="syz.0.294" name="file3" dev="overlay" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.297581][   T30] audit: type=1400 audit(1785854449.525:301): avc:  denied  { setattr } for  pid=1117 comm="syz.0.294" name="#377" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.320487][   T30] audit: type=1400 audit(1785854449.525:302): avc:  denied  { link } for  pid=1117 comm="syz.0.294" name="#377" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.339283][  T308] usb 3-1: USB disconnect, device number 3
[   38.342698][  T424] usb 2-1: device reset changed ep0 maxpacket size!
[   38.355344][   T20] usb 2-1: USB disconnect, device number 3
[   38.417335][ T1126] loop0: detected capacity change from 0 to 16
[   38.503798][ T1126] erofs: (device loop0): mounted with root inode @ nid 36.
[   38.521349][   T30] audit: type=1400 audit(1785854449.805:303): avc:  denied  { watch } for  pid=1125 comm="syz.0.298" path="/67/bus" dev="loop0" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.527547][ T1128] input: syz1 as /devices/virtual/input/input8
[   38.543990][ T1126] attempt to access beyond end of device
[   38.543990][ T1126] loop0: rw=0, want=34359738368, limit=16
[   38.561145][   T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   38.569335][ T1126] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   38.598167][ T1130] loop6: detected capacity change from 0 to 1024
[   38.605441][ T1130] EXT4-fs (loop6): Ignoring removed bh option
[   38.614432][ T1130] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none.
[   38.631743][ T1130] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.644165][   T30] audit: type=1400 audit(1785854449.925:304): avc:  denied  { set_context_mgr } for  pid=1134 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   38.653329][  T644] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   38.687755][ T1130] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #15: block 3: comm syz.6.300: lblock 3 mapped to illegal pblock 3 (length 3)
[   38.701961][ T1130] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   38.714475][ T1130] EXT4-fs (loop6): This should not happen!! Data will be lost
[   38.714475][ T1130] 
[   38.729065][ T1130] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: block 3: comm syz.6.300: lblock 3 mapped to illegal pblock 3 (length 1)
[   38.743419][ T1130] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: block 3: comm syz.6.300: lblock 3 mapped to illegal pblock 3 (length 1)
[   38.757671][ T1130] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: block 3: comm syz.6.300: lblock 3 mapped to illegal pblock 3 (length 1)
[   38.758082][   T30] audit: type=1400 audit(1785854450.045:305): avc:  denied  { read } for  pid=1140 comm="syz.0.304" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   38.772102][ T1130] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: block 3: comm syz.6.300: lblock 3 mapped to illegal pblock 3 (length 1)
[   38.798614][ T1141] deleting an unspecified loop device is not supported.
[   38.809916][ T1130] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: block 3: comm syz.6.300: lblock 3 mapped to illegal pblock 3 (length 1)
[   38.817087][   T30] audit: type=1400 audit(1785854450.085:306): avc:  denied  { open } for  pid=1140 comm="syz.0.304" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   38.855576][   T30] audit: type=1400 audit(1785854450.085:307): avc:  denied  { ioctl } for  pid=1140 comm="syz.0.304" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   38.882499][ T1142] EXT4-fs error (device loop6): ext4_ext_remove_space:2944: inode #15: comm syz.6.300: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   38.891876][   T20] usb 2-1: Using ep0 maxpacket: 8
[   38.905533][ T1142] EXT4-fs error (device loop6) in ext4_setattr:5676: Corrupt filesystem
[   38.907753][ T1130] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: block 3: comm syz.6.300: lblock 3 mapped to illegal pblock 3 (length 1)
[   38.928852][ T1130] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: block 3: comm syz.6.300: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.063317][  T644] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.083292][   T20] usb 2-1: unable to get BOS descriptor or descriptor too short
[   39.089059][  T644] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   39.173283][   T20] usb 2-1: config 1 interface 0 altsetting 123 bulk endpoint 0x82 has invalid maxpacket 1023
[   39.194891][   T20] usb 2-1: config 1 interface 0 has no altsetting 0
[   39.263297][  T644] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   39.310921][  T644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.349426][  T644] usb 5-1: Product: syz
[   39.353841][  T644] usb 5-1: Manufacturer: syz
[   39.358441][  T644] usb 5-1: SerialNumber: syz
[   39.383850][   T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   39.393882][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.413684][  T644] cdc_mbim 5-1:1.0: skipping garbage
[   39.416996][   T20] usb 2-1: Product: syz
[   39.444921][ T1146] loop0: detected capacity change from 0 to 131072
[   39.452189][   T20] usb 2-1: Manufacturer: syz
[   39.456942][   T20] usb 2-1: SerialNumber: syz
[   39.493688][ T1104] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   39.517283][ T1146] F2FS-fs (loop0): Test dummy encryption mode enabled
[   39.535508][ T1146] F2FS-fs (loop0): invalid crc value
[   39.540837][   T30] audit: type=1400 audit(1785854450.825:308): avc:  denied  { create } for  pid=1148 comm="syz.6.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.542136][ T1149] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary
[   39.582505][ T1146] F2FS-fs (loop0): Found nat_bits in checkpoint
[   39.614361][ T1124] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   39.639223][ T1146] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   39.688712][ T1144] loop2: detected capacity change from 0 to 131072
[   39.691443][ T1146] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   39.704805][ T1144] F2FS-fs (loop2): invalid crc value
[   39.715407][ T1144] F2FS-fs (loop2): Found nat_bits in checkpoint
[   39.747532][ T1144] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   39.754513][ T1144] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   39.783242][   T20] cdc_ether: probe of 2-1:1.0 failed with error -71
[   39.791757][   T20] usb 2-1: USB disconnect, device number 4
[   40.043199][ T1164] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   40.179906][ T1187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'.
[   40.273681][ T1124] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   40.291026][ T1207] loop0: detected capacity change from 0 to 512
[   40.293232][  T644] cdc_mbim 5-1:1.0: setting tx_max = 16384
[   40.310008][  T644] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[   40.324717][ T1207] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   40.335583][  T644] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, e2:16:6c:48:d4:cb
[   40.356367][ T1207] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.322: bad orphan inode 131083
[   40.368582][ T1207] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,nodioread_nolock,i_version,,errors=continue. Quota mode: none.
[   40.392946][ T1207] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.322: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   40.413824][ T1207] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem
[   40.465528][ T1217] loop0: detected capacity change from 0 to 1024
[   40.480916][  T140] 8021q: adding VLAN 0 to HW filter on device wwan0
[   40.499296][ T1221] loop2: detected capacity change from 0 to 1024
[   40.532954][ T1217] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.323: Failed to acquire dquot type 0
[   40.549827][   T26] usb 5-1: USB disconnect, device number 4
[   40.554686][ T1226] loop1: detected capacity change from 0 to 2048
[   40.556058][   T26] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[   40.562579][ T1217] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   40.585427][ T1217] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #13: comm syz.0.323: corrupted inode contents
[   40.597475][ T1217] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #13: comm syz.0.323: mark_inode_dirty error
[   40.601891][ T1221] EXT4-fs (loop2): Ignoring removed bh option
[   40.611188][ T1217] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #13: comm syz.0.323: corrupted inode contents
[   40.639532][ T1217] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #13: comm syz.0.323: mark_inode_dirty error
[   40.661405][ T1217] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #13: comm syz.0.323: corrupted inode contents
[   40.681514][ T1217] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   40.693473][ T1217] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #13: comm syz.0.323: corrupted inode contents
[   40.717032][ T1221] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none.
[   40.723243][ T1217] EXT4-fs error (device loop0): ext4_truncate:4317: inode #13: comm syz.0.323: mark_inode_dirty error
[   40.738077][ T1221] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.754144][ T1226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   40.793253][ T1217] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   40.812433][ T1217] EXT4-fs (loop0): 1 truncate cleaned up
[   40.826599][ T1221] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 3: comm syz.2.324: lblock 3 mapped to illegal pblock 3 (length 3)
[   40.828286][ T1217] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   40.852142][ T1221] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   40.881473][ T1221] EXT4-fs (loop2): This should not happen!! Data will be lost
[   40.881473][ T1221] 
[   40.894391][ T1227] loop6: detected capacity change from 0 to 40427
[   40.901483][ T1242] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.324: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.916531][ T1242] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.324: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.930872][ T1242] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.324: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.946297][ T1242] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.324: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.964899][ T1221] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.324: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   40.993314][ T1221] EXT4-fs error (device loop2) in ext4_setattr:5676: Corrupt filesystem
[   41.004069][ T1242] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.324: lblock 3 mapped to illegal pblock 3 (length 1)
[   41.019355][ T1227] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   41.036444][ T1227] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   41.045315][   T45] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   41.067824][   T45] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   41.074436][ T1244] loop0: detected capacity change from 0 to 8192
[   41.080564][ T1227] F2FS-fs (loop6): invalid crc value
[   41.092518][   T45] EXT4-fs (loop1): This should not happen!! Data will be lost
[   41.092518][   T45] 
[   41.092665][ T1242] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.324: lblock 3 mapped to illegal pblock 3 (length 1)
[   41.121604][   T45] EXT4-fs (loop1): Total free blocks count 0
[   41.124931][ T1242] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.324: lblock 3 mapped to illegal pblock 3 (length 1)
[   41.136406][   T45] EXT4-fs (loop1): Free/Dirty block details
[   41.143418][ T1227] F2FS-fs (loop6): Found nat_bits in checkpoint
[   41.149242][   T45] EXT4-fs (loop1): free_blocks=4096
[   41.159516][ T1244] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   41.173321][   T45] EXT4-fs (loop1): dirty_blocks=32
[   41.190245][   T45] EXT4-fs (loop1): Block reservation details
[   41.201079][   T45] EXT4-fs (loop1): i_reserved_data_blocks=2
[   41.207195][ T1227] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   41.215041][ T1227] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   41.232215][   T45] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   41.293809][   T45] EXT4-fs (loop1): This should not happen!! Data will be lost
[   41.293809][   T45] 
[   47.162378][ T1282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.332'.
[   47.186896][ T1282] syz_tun: refused to change device tx_queue_len
[   47.542240][  T644] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   47.695471][ T1300] loop0: detected capacity change from 0 to 131072
[   47.705989][ T1307] loop1: detected capacity change from 0 to 131072
[   47.752823][ T1307] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   47.760592][ T1307] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   47.769329][ T1307] F2FS-fs (loop1): invalid crc value
[   47.776414][ T1307] F2FS-fs (loop1): Found nat_bits in checkpoint
[   47.788790][ T1300] F2FS-fs (loop0): Test dummy encryption mode enabled
[   47.801349][ T1300] F2FS-fs (loop0): invalid crc value
[   47.822938][ T1300] F2FS-fs (loop0): Found nat_bits in checkpoint
[   47.841684][ T1307] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   47.848823][ T1307] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   47.872236][  T644] usb 3-1: not running at top speed; connect to a high speed hub
[   47.883801][ T1300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   48.030177][   T30] kauditd_printk_skb: 18 callbacks suppressed
[   48.030190][   T30] audit: type=1400 audit(1785854459.316:325): avc:  denied  { read } for  pid=1323 comm="syz.4.346" path="socket:[21085]" dev="sockfs" ino=21085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.142495][  T644] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   48.155923][ T1326] loop1: detected capacity change from 0 to 128
[   48.157661][  T644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.183631][ T1326] EXT4-fs (loop1): Test dummy encryption mode enabled
[   48.190945][  T644] usb 3-1: Product: syz
[   48.203859][   T30] audit: type=1400 audit(1785854459.496:326): avc:  denied  { ioctl } for  pid=1327 comm="syz.6.347" path="socket:[22138]" dev="sockfs" ino=22138 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.208279][  T644] usb 3-1: Manufacturer: syz
[   48.243441][  T644] usb 3-1: SerialNumber: syz
[   48.252262][ T1326] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   48.282221][ T1326] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   48.319486][ T1326] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   48.343826][   T30] audit: type=1400 audit(1785854459.637:327): avc:  denied  { link } for  pid=1325 comm="syz.1.344" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   48.417495][   T30] audit: type=1400 audit(1785854459.707:328): avc:  denied  { name_bind } for  pid=1340 comm="syz.1.350" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   48.443855][   T30] audit: type=1400 audit(1785854459.737:329): avc:  denied  { map } for  pid=1336 comm="syz.6.349" path="socket:[21168]" dev="sockfs" ino=21168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   48.580638][ T1351] loop6: detected capacity change from 0 to 512
[   48.603096][ T1349] 9pnet: p9_errstr2errno: server reported unknown error 
[   48.641294][ T1354] loop1: detected capacity change from 0 to 256
[   48.653229][ T1351] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[   48.669077][ T1354] exfat: Deprecated parameter 'utf8'
[   48.674850][ T1354] exfat: Deprecated parameter 'namecase'
[   48.681142][ T1351] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.715306][ T1354] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x01ce8137, utbl_chksum : 0xe619d30d)
[   48.731841][   T30] audit: type=1400 audit(1785854460.017:330): avc:  denied  { append } for  pid=1350 comm="syz.6.354" path="/25/file1/blkio.bfq.group_wait_time" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   48.763510][   T30] audit: type=1400 audit(1785854460.057:331): avc:  denied  { map } for  pid=1350 comm="syz.6.354" path="/25/file1/blkio.bfq.group_wait_time" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   48.894491][ T1361] loop9: detected capacity change from 0 to 8
[   48.991876][ T1377] loop1: detected capacity change from 0 to 512
[   49.092513][ T1377] EXT4-fs (loop1): Ignoring removed oldalloc option
[   49.102195][ T1377] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   49.133362][ T1377] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,quota,quota,usrjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   49.152177][  T644] usb 3-1: MIDIStreaming interface descriptor not found
[   49.153969][ T1377] ext4 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.253097][ T1386] kvm [1385]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[   49.259652][ T1380] loop6: detected capacity change from 0 to 40427
[   49.272224][ T1386] kvm [1385]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[   49.282422][ T1380] F2FS-fs (loop6): invalid crc value
[   49.305548][ T1380] F2FS-fs (loop6): Found nat_bits in checkpoint
[   49.322144][  T644] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   49.346810][ T1380] F2FS-fs (loop6): Start checkpoint disabled!
[   49.360515][ T1380] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   49.361902][ T1390] loop1: detected capacity change from 0 to 512
[   49.400745][   T30] audit: type=1400 audit(1785854460.687:332): avc:  denied  { ioctl } for  pid=1379 comm="syz.6.364" path="/29/file0/file0" dev="loop6" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.425265][  T308] usb 3-1: USB disconnect, device number 4
[   49.435224][ T1393] loop0: detected capacity change from 0 to 256
[   49.475067][ T1390] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[   49.487171][ T1390] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.508282][  T411] attempt to access beyond end of device
[   49.508282][  T411] loop6: rw=2049, want=45104, limit=40427
[   49.513582][ T1393] exfat: Deprecated parameter 'utf8'
[   49.527352][ T1393] exfat: Deprecated parameter 'namecase'
[   49.569049][ T1393] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x01ce8137, utbl_chksum : 0xe619d30d)
[   49.591991][  T644] usb 5-1: Using ep0 maxpacket: 16
[   49.682492][ T1400] 9pnet: p9_errstr2errno: server reported unknown error 
[   49.756770][   T30] audit: type=1400 audit(1785854461.047:333): avc:  denied  { load_policy } for  pid=1406 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   49.757872][ T1407] SELinux: ebitmap start bit (-1431655766) is not a multiple of the map unit size (64)
[   49.786615][  T644] usb 5-1: unable to get BOS descriptor or descriptor too short
[   49.789097][ T1407] SELinux: failed to load policy
[   49.802429][ T1417] exfat: Deprecated parameter 'namecase'
[   49.808566][ T1417] exfat: Deprecated parameter 'namecase'
[   49.859060][ T1417] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[   49.891994][  T644] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.911937][  T644] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   49.922817][  T644] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[   49.944553][ T1428] erofs: (device loop0): mounted with root inode @ nid 36.
[   49.974322][   T48] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   50.001997][ T1428] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[   50.072704][ T1438] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   50.099944][ T1438] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   50.111965][  T644] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   50.128575][  T644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.144942][  T644] usb 5-1: Manufacturer: 퀈죍⨼롶턐澩敺䘻睮깋⎧젗⁛ꜿ緤௻嵉鏃㋰꣤㕩Ѣ딥皰渏䣋逽阋鐶k㒿駦̶懱ᵳ鱢셄㜎繼
[   50.191914][  T644] usb 5-1: SerialNumber: င
[   50.222812][ T1430] F2FS-fs (loop1): invalid crc value
[   50.228203][   T30] audit: type=1326 audit(1785854461.517:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1449 comm="syz.6.392" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f103c490019 code=0x0
[   50.243388][ T1430] F2FS-fs (loop1): Found nat_bits in checkpoint
[   50.291961][ T1430] F2FS-fs (loop1): Start checkpoint disabled!
[   50.309518][ T1430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   50.441669][  T411] attempt to access beyond end of device
[   50.441669][  T411] loop1: rw=2049, want=45104, limit=40427
[   50.493205][ T1382] netlink: 'syz.4.365': attribute type 49 has an invalid length.
[   50.542581][  T644] usb 5-1: Audio class v2/v3 interfaces need an interface association
[   50.550833][  T644] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[   50.576001][  T644] usb 5-1: USB disconnect, device number 5
[   50.671871][  T308] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   50.801848][    T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   50.911815][  T308] usb 1-1: Using ep0 maxpacket: 8
[   51.052678][ T1472] erofs: (device loop4): mounted with root inode @ nid 36.
[   51.064637][   T49] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   51.071797][    T6] usb 2-1: Using ep0 maxpacket: 8
[   51.087771][  T308] usb 1-1: unable to get BOS descriptor or descriptor too short
[   51.087802][ T1472] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[   51.171896][  T308] usb 1-1: config 1 interface 0 altsetting 123 bulk endpoint 0x82 has invalid maxpacket 1023
[   51.182959][  T308] usb 1-1: config 1 interface 0 has no altsetting 0
[   51.206991][   T20] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   51.221906][   T20] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   51.291825][  T424] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   51.341844][  T308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   51.350973][  T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.358973][  T308] usb 1-1: Product: syz
[   51.363201][  T308] usb 1-1: Manufacturer: syz
[   51.367776][  T308] usb 1-1: SerialNumber: syz
[   51.381839][    T6] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   51.391052][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.391933][ T1467] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   51.399331][    T6] usb 2-1: Product: syz
[   51.410268][    T6] usb 2-1: Manufacturer: syz
[   51.414987][    T6] usb 2-1: SerialNumber: syz
[   51.681818][  T424] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.691834][  T308] cdc_ether: probe of 1-1:1.0 failed with error -71
[   51.692842][  T424] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   51.708020][  T308] usb 1-1: USB disconnect, device number 4
[   51.822340][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   51.861812][  T424] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   51.870959][  T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.879101][  T424] usb 3-1: Product: syz
[   51.885873][  T424] usb 3-1: Manufacturer: syz
[   51.890768][  T424] usb 3-1: SerialNumber: syz
[   51.899029][ T1485] input: syz1 as /devices/virtual/input/input9
[   51.932143][  T424] cdc_mbim 3-1:1.0: skipping garbage
[   51.981449][ T1490] kvm [1489]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[   51.991017][ T1490] kvm [1489]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[   52.101767][    T6] usb 2-1: clock source 0 is not valid, cannot use
[   52.133302][ T1473] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   52.247565][ T1498] ==================================================================
[   52.251233][ T1511] SELinux: failed to load policy
[   52.255668][ T1498] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[   52.255710][ T1498] Read of size 4 at addr ffff88812c94dc00 by task syz.6.407/1498
[   52.255725][ T1498] 
[   52.255730][ T1498] CPU: 0 PID: 1498 Comm: syz.6.407 Not tainted syzkaller #0
[   52.285959][ T1498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.296030][ T1498] Call Trace:
[   52.299301][ T1498]  <TASK>
[   52.302220][ T1498]  __dump_stack+0x21/0x30
[   52.306544][ T1498]  dump_stack_lvl+0x110/0x170
[   52.311226][ T1498]  ? show_regs_print_info+0x20/0x20
[   52.316405][ T1498]  ? load_image+0x3f0/0x3f0
[   52.320889][ T1498]  ? __local_bh_enable_ip+0x58/0x80
[   52.326073][ T1498]  print_address_description+0x7f/0x2c0
[   52.331627][ T1498]  ? pppol2tp_sock_to_session+0x1a0/0x1b0
[   52.337347][ T1498]  kasan_report+0x10f/0x150
[   52.341838][ T1498]  ? pppol2tp_sock_to_session+0x1a0/0x1b0
[   52.347545][ T1498]  __asan_report_load4_noabort+0x14/0x20
[   52.353172][ T1498]  pppol2tp_sock_to_session+0x1a0/0x1b0
[   52.358707][ T1498]  pppol2tp_release+0x150/0x2b0
[   52.363539][ T1498]  sock_close+0xb8/0x200
[   52.367768][ T1498]  ? sock_mmap+0xa0/0xa0
[   52.372008][ T1498]  __fput+0x22b/0x900
[   52.375983][ T1498]  ____fput+0x15/0x20
[   52.379955][ T1498]  task_work_run+0x127/0x190
[   52.384531][ T1498]  do_exit+0xb70/0x29a0
[   52.388681][ T1498]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[   52.394380][ T1498]  ? put_task_struct+0x90/0x90
[   52.399137][ T1498]  ? __kasan_check_write+0x14/0x20
[   52.404231][ T1498]  __x64_sys_exit+0x40/0x40
[   52.408715][ T1498]  x64_sys_call+0x44/0x9a0
[   52.413111][ T1498]  do_syscall_64+0x4c/0xa0
[   52.417511][ T1498]  ? clear_bhb_loop+0x50/0xa0
[   52.422166][ T1498]  ? clear_bhb_loop+0x50/0xa0
[   52.426821][ T1498]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   52.432700][ T1498] RIP: 0033:0x7f103c490019
[   52.437096][ T1498] Code: Unable to access opcode bytes at RIP 0x7f103c48ffef.
[   52.444443][ T1498] RSP: 002b:00007f103aee8ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[   52.452834][ T1498] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f103c490019
[   52.460791][ T1498] RDX: 00007f103aee99c8 RSI: 0000000000000000 RDI: 0000000000000000
[   52.468759][ T1498] RBP: 00007f103c52700c R08: 0000000000000000 R09: 0000000000000058
[   52.476725][ T1498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   52.484684][ T1498] R13: 00007f103c718038 R14: 00007f103c717fa0 R15: 00007ffd449c8388
[   52.492665][ T1498]  </TASK>
[   52.495674][ T1498] 
[   52.497979][ T1498] Allocated by task 1497:
[   52.502288][ T1498]  __kasan_kmalloc+0xd4/0x100
[   52.506953][ T1498]  __kmalloc+0x13d/0x2c0
[   52.511176][ T1498]  l2tp_session_create+0x39/0xb60
[   52.516183][ T1498]  pppol2tp_connect+0xbf5/0x1640
[   52.521112][ T1498]  __sys_connect+0x3cb/0x450
[   52.525681][ T1498]  __x64_sys_connect+0x7a/0x90
[   52.530439][ T1498]  x64_sys_call+0x7c/0x9a0
[   52.534832][ T1498]  do_syscall_64+0x4c/0xa0
[   52.539225][ T1498]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   52.545109][ T1498] 
[   52.547441][ T1498] Freed by task 411:
[   52.551310][ T1498]  kasan_set_track+0x4a/0x70
[   52.555881][ T1498]  kasan_set_free_info+0x23/0x40
[   52.560826][ T1498]  ____kasan_slab_free+0x125/0x160
[   52.565916][ T1498]  __kasan_slab_free+0x11/0x20
[   52.570657][ T1498]  slab_free_freelist_hook+0xc2/0x190
[   52.576005][ T1498]  kfree+0xc4/0x270
[   52.579800][ T1498]  l2tp_session_put+0xaf/0x1a0
[   52.584554][ T1498]  l2tp_session_delete+0x3a9/0x4a0
[   52.589647][ T1498]  l2tp_tunnel_del_work+0x180/0x3d0
[   52.594829][ T1498]  process_one_work+0x6c8/0xbb0
[   52.599665][ T1498]  worker_thread+0xaa0/0x1250
[   52.604324][ T1498]  kthread+0x3f5/0x4f0
[   52.608377][ T1498]  ret_from_fork+0x1f/0x30
[   52.612774][ T1498] 
[   52.615079][ T1498] The buggy address belongs to the object at ffff88812c94dc00
[   52.615079][ T1498]  which belongs to the cache kmalloc-512 of size 512
[   52.629111][ T1498] The buggy address is located 0 bytes inside of
[   52.629111][ T1498]  512-byte region [ffff88812c94dc00, ffff88812c94de00)
[   52.642197][ T1498] The buggy address belongs to the page:
[   52.647813][ T1498] page:ffffea0004b25300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c94c
[   52.658028][ T1498] head:ffffea0004b25300 order:2 compound_mapcount:0 compound_pincount:0
[   52.666328][ T1498] flags: 0x4000000000010200(slab|head|zone=1)
[   52.672377][ T1498] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00
[   52.680936][ T1498] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   52.689490][ T1498] page dumped because: kasan: bad access detected
[   52.695875][ T1498] page_owner tracks the page as allocated
[   52.701564][ T1498] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 60, ts 25028427241, free_ts 0
[   52.720386][ T1498]  post_alloc_hook+0x192/0x1b0
[   52.725137][ T1498]  prep_new_page+0x1c/0x110
[   52.729625][ T1498]  get_page_from_freelist+0x2c3a/0x2cd0
[   52.735153][ T1498]  __alloc_pages+0x1a2/0x460
[   52.739740][ T1498]  new_slab+0xa0/0x4d0
[   52.743877][ T1498]  ___slab_alloc+0x3ac/0x840
[   52.748445][ T1498]  __slab_alloc+0x49/0x90
[   52.752757][ T1498]  __kmalloc_track_caller+0x169/0x2c0
[   52.758109][ T1498]  __alloc_skb+0x210/0x730
[   52.762505][ T1498]  ndisc_send_rs+0x310/0x960
[   52.767074][ T1498]  addrconf_dad_completed+0x936/0xe20
[   52.772430][ T1498]  addrconf_dad_work+0xc4c/0x1510
[   52.777437][ T1498]  process_one_work+0x6c8/0xbb0
[   52.782269][ T1498]  worker_thread+0xaa0/0x1250
[   52.786925][ T1498]  kthread+0x3f5/0x4f0
[   52.790971][ T1498]  ret_from_fork+0x1f/0x30
[   52.795366][ T1498] page_owner free stack trace missing
[   52.800707][ T1498] 
[   52.803008][ T1498] Memory state around the buggy address:
[   52.808616][ T1498]  ffff88812c94db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   52.816671][ T1498]  ffff88812c94db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   52.824707][ T1498] >ffff88812c94dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.832739][ T1498]                    ^
[   52.836787][ T1498]  ffff88812c94dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.844824][ T1498]  ffff88812c94dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.852859][ T1498] ==================================================================
[   52.860892][ T1498] Disabling lock debugging due to kernel taint
[   52.868903][ T1498] ------------[ cut here ]------------
[   52.881752][    T6] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[   52.884611][ T1498] WARNING: CPU: 1 PID: 1498 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[   52.900486][ T1498] Modules linked in:
[   52.902023][    T6] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   52.904796][ T1500] F2FS-fs (loop4): invalid crc value
[   52.919521][ T1498] CPU: 1 PID: 1498 Comm: syz.6.407 Tainted: G    B             syzkaller #0
[   52.928472][ T1498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.938682][ T1498] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[   52.945316][ T1498] Code: 5d c3 e8 9c 83 0b fd be 02 00 00 00 eb 0a e8 90 83 0b fd be 01 00 00 00 4c 89 f7 e8 33 02 f2 fd e9 0f ff ff ff e8 79 83 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 83 0b fd 4c 89 f7 be 03
[   52.965221][ T1500] F2FS-fs (loop4): Found nat_bits in checkpoint
[   52.966215][ T1498] RSP: 0018:ffffc90000ef7bf0 EFLAGS: 00010293
[   52.977762][ T1498] RAX: ffffffff845e3367 RBX: ffff88810e111000 RCX: ffff88811ba43b40
[   52.985944][    T6] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   52.994655][ T1498] RDX: 0000000000000000 RSI: 000000000cabe6e0 RDI: 000000000c04eb7d
[   53.002810][    T6] usb 2-1: clock source 0 is not valid, cannot use
[   53.009639][ T1498] RBP: ffffc90000ef7c10 R08: 0000000000000003 R09: 0000000000000004
[   53.017895][ T1498] R10: dffffc0000000000 R11: fffffbfff0e18e4c R12: dffffc0000000000
[   53.026214][    T6] usb 2-1: 2:1: cannot get freq (v2/v3): err -71
[   53.032705][ T1500] F2FS-fs (loop4): Start checkpoint disabled!
[   53.038966][ T1498] R13: dffffc0000000000 R14: 000000000cabe6e0 R15: ffff88812c94dc00
[   53.047323][ T1498] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   53.056541][    T6] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   53.066115][ T1498] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.069325][ T1500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   53.073394][ T1498] CR2: 0000001b2e815ff8 CR3: 000000012bf24000 CR4: 00000000003526b0
[   53.103256][    T6] usb 2-1: USB disconnect, device number 5
[   53.123277][ T1498] Call Trace:
[   53.127019][ T1498]  <TASK>
[   53.130251][ T1498]  pppol2tp_release+0x150/0x2b0
[   53.149984][ T1498]  sock_close+0xb8/0x200
[   53.154411][ T1498]  ? sock_mmap+0xa0/0xa0
[   53.158750][ T1498]  __fput+0x22b/0x900
[   53.163077][ T1498]  ____fput+0x15/0x20
[   53.167083][ T1498]  task_work_run+0x127/0x190
[   53.171849][ T1498]  do_exit+0xb70/0x29a0
[   53.176060][ T1498]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[   53.182323][ T1498]  ? put_task_struct+0x90/0x90
[   53.187163][ T1498]  ? __kasan_check_write+0x14/0x20
[   53.192445][ T1498]  __x64_sys_exit+0x40/0x40
[   53.196969][ T1498]  x64_sys_call+0x44/0x9a0
[   53.201439][ T1498]  do_syscall_64+0x4c/0xa0
[   53.206069][ T1498]  ? clear_bhb_loop+0x50/0xa0
[   53.210776][ T1498]  ? clear_bhb_loop+0x50/0xa0
[   53.211279][   T10] attempt to access beyond end of device
[   53.211279][   T10] loop4: rw=2049, want=45104, limit=40427
[   53.215677][ T1498]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   53.232932][ T1498] RIP: 0033:0x7f103c490019
[   53.237388][ T1498] Code: Unable to access opcode bytes at RIP 0x7f103c48ffef.
[   53.244941][ T1498] RSP: 002b:00007f103aee8ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[   53.253525][ T1498] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f103c490019
[   53.261701][ T1498] RDX: 00007f103aee99c8 RSI: 0000000000000000 RDI: 0000000000000000
[   53.269681][ T1498] RBP: 00007f103c52700c R08: 0000000000000000 R09: 0000000000000058
[   53.277747][ T1498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.285827][ T1498] R13: 00007f103c718038 R14: 00007f103c717fa0 R15: 00007ffd449c8388
[   53.293858][ T1498]  </TASK>
[   53.296869][ T1498] ---[ end trace b03383dd84f2ac68 ]---
[   53.302778][ T1473] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   53.321648][  T424] cdc_mbim 3-1:1.0: setting tx_max = 16384
[   53.332372][  T424] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[   53.332858][ T1289] udevd[1289]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   53.340341][  T424] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 76:ea:54:cd:51:67
[   53.436043][  T140] 8021q: adding VLAN 0 to HW filter on device wwan0
[   53.551566][  T644] usb 3-1: USB disconnect, device number 5
[   53.557564][  T644] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM