last executing test programs:

43.901429146s ago: executing program 0 (id=94):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x6, 0x3, 0x200}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)

43.82976515s ago: executing program 0 (id=97):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000740)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

43.794905476s ago: executing program 0 (id=98):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

43.737812297s ago: executing program 0 (id=100):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

43.685590527s ago: executing program 1 (id=101):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg(r0, &(0x7f0000002880)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r2, 0x7, 0xb00}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80)

43.682707587s ago: executing program 0 (id=102):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x5, 0x240250d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)

43.590765134s ago: executing program 0 (id=105):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f0000"], 0xbc}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc)

43.590277575s ago: executing program 1 (id=106):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000400)="0e1224b23bb601c493d3d6163e75963d86dd605112e9000d2f8db0049d90491c3257040000dbb8a10000deefdb9c663e6535480eded7ba6e4eb35ec7950354a55ab249f1a49ab6", 0x47}, {&(0x7f00000002c0)="8bcceb", 0x3}], 0x2)

43.498536222s ago: executing program 32 (id=105):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f0000"], 0xbc}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc)

43.496348922s ago: executing program 1 (id=108):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f964000000000000000000000000000200", [0x800]}})
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000300))

43.233275241s ago: executing program 1 (id=113):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

42.895092085s ago: executing program 1 (id=123):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@bsdgroups}, {@noquota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000023a000/0x1000)=nil)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

42.722404287s ago: executing program 1 (id=127):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000370429bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="8d0c0100000000002c0012800b000100697036746e6c00"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x0)

42.536134202s ago: executing program 33 (id=127):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000370429bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="8d0c0100000000002c0012800b000100697036746e6c00"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x0)

37.868006566s ago: executing program 6 (id=208):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/202, 0xca}], 0x1, 0x28, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)

37.774174954s ago: executing program 6 (id=210):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="10", 0x1}], 0x1}}], 0x1, 0x5081)
sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="a20e25a882", 0x5}], 0x1}}], 0x1, 0x4000)
sendto$inet(r0, &(0x7f0000000280)="01", 0x1, 0x88c1, 0x0, 0x0)

37.731972372s ago: executing program 6 (id=211):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

37.58398876s ago: executing program 6 (id=217):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x86022, &(0x7f0000000340)={[{@noswap}]})

37.542244767s ago: executing program 6 (id=218):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=")
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48)
fchown(r0, 0x0, 0xee01)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0)

37.447331105s ago: executing program 6 (id=221):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = getpid()
socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

37.379439728s ago: executing program 34 (id=221):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = getpid()
socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

15.145131863s ago: executing program 7 (id=641):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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")
r0 = creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfc)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143241, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)

14.647340196s ago: executing program 7 (id=648):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="2e1221b21ab601c494d3ffff0000963d86dd9d90491c0026060004dbb8a13d6d2183499c3a0a9070ec124555", 0x2c}, {&(0x7f0000000240)="79696e926c4299b1004cd7e1da566282cf60d0981edf3b6733fc75059ac8f1efa749", 0x22}], 0x2)

14.567354641s ago: executing program 7 (id=649):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

14.14719745s ago: executing program 7 (id=665):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e6e742c636f6465706167653d313235312c666d61736b3d303030300000000030303030303030303030303004000000646531215a670233c0116275672c756e080000006174653d302c6e6f7e756d7461696c3d302d757466383d312c73686f72746e616d653d6c6f7765722c7511695f786c6174653d302c756e695f786c6174653d312c757466383d312c00"], 0x7f, 0x2bd, &(0x7f0000000240)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082000cb59d654cbb41bbcef549ba197fce47ddfdd753abd950100f20000000200000000000000000000000000000000000000000200", "b7326736181c208220fffff2ff00", [0x6]})
creat(&(0x7f0000004440)='./file0\x00', 0x12)

14.009601736s ago: executing program 7 (id=668):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x48)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0xe, 0x0, 0x0)

13.861477083s ago: executing program 7 (id=672):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
tkill(r0, 0x7)
wait4(r0, 0x0, 0x0, 0x0)
prlimit64(r0, 0xb, 0x0, 0x0)

13.764183552s ago: executing program 35 (id=672):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
tkill(r0, 0x7)
wait4(r0, 0x0, 0x0, 0x0)
prlimit64(r0, 0xb, 0x0, 0x0)

3.029184993s ago: executing program 3 (id=993):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x400448de, 0x0)

2.433872044s ago: executing program 8 (id=1014):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r2, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x3, 0x0, &(0x7f0000000200)="63eced", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0)

2.379352134s ago: executing program 8 (id=1015):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="5d77535d6518db2bf9f8331a62ac0937e49ae2889576c72978d475b5dc37672df32a349ce1f511a18732f1ba2bf3bb657b01a380806ad17ac196224c7e8ef42ef9c64c6f7ecf9114929bac71c523cdf6097e068b95891b17c3bd980a56a82cb4ab57379d904246e59fd39365e1e4025c17e44c7a11b2b3c33a287df897a4fc4d49661546b09199d60d178560bd7c287b4ff94ae0e5f643b1e96f57bc62bbc25fb2493e775757a2911af95d39e5fa36d2db73305fbe455e3563291d45ca6aaed1a0860cc65b411ba4dd8e965e061902aff8ff39d90be41902d454b2c7fdb970e305569ec2004240776f1b233d54d1917a5925dbc4bc0a55f91ff7c2545c9f4fc98f6f77615d979fe3d00b4b7a3e08922dd98ea3af9b246fb5a694b69916527455f9fa690f10fac704e4662dffb0379003eeef17ef386038605c104a84b4b39488de60444c90f9a1764b0247d6d0176a871065867d2cf4db35e7e9d049d4fcbdc3bd0e08023acc8336fa9de646e86a15f2eb17910cdd5888da8b075e19b033a25c019ec21249ed65bb394bdacdf9d6780ae55888f929a42c33c2ff487a17fb7f367e9eb2108c0270e493e80697388bf821fff587c223201acecd71fbd2ec90684aaa61705ab09b95cc78008c0330127e21c9141ccb3c84188474888b6580964dac6a8f1ef9387384f61344020ea30df2a571d748ade6887885d2b34a094a8ece70577919a884ca2bb3fcd84cbf3d2defa4b4d9b44d9bd309ed77e273145b388cd5415ad2be80382abd18555e1aa654e4c2d025fc58f2e146686414e6effc0f6ac2b2fdc1baa886b03f8081ab73acba5262ee7677ddf43aa1720120c765d1741fc7fe64c3ec95081fd42d1a0433f5de33a25ea0969e7802f6fb0a7053c27e4f97081d20b37301eefa0f0c7dc2890d6c981d5ea41f427c1b6727515b98595bee0572d132c707c9bbb8bfcf6f700d9ee5f188b5852a489aa81933a12bf35d406540a478379318046a06b9a260d7dcb7eeed7f2ff7db820c645fcff5f6f824a82c5fc788df5bcd5cd55a269bfae949e2a8129da6b56f04ef7c246d656b0064ca656ca4eeb04e9f05891a937e2fec2f038161aae388d9d7ede3ff8edc1a1d1729ecff902ac1a0108eb777e77b0e41792d5ee885d47b34dda2993afe12ca1d5bd31637ea186fe7fc9b3358b68488523bc08e89c4e88dc17ec5fe7fcf3742d50712fb84e2d266d8d474931e717e4d9a056d63a2f856a2145e1005bdc669e4b41a866a342d9dc7b0a6984006da62386f03fa0e5386f7340febd33a4f561f5701763ca1f4767da3f1b03c1d91b32998326870c57515d757aff4fba4f19fa89fb8450a5ca8af96be8865141dde14d18872dbc756572bbb0a4370718c4492c1007a8710594bee1ef109256f711f981acfc3f2fa2037452011d8857289091c25e375004461df913b59c6fc076060b7556c0339f0c3876c99767372c01f58e7047901d8c06bcb0b0b54e2897282b0788f691d4d29a80dc8a5478ddd94a63bec700773c1107b0b5314f3746d50278f4e4214d8c069c5bca8c1611cce8514b82a6ace929cc98efee13d01354648f0b17ca78302133501a039bb86b373a87e819554f162f63efa38e353286194973bc2d61cc8fe5a6e6a2c0452991fa288dfa96bef48276c1365d10583b9efb8728479d0d8cacaad318f03e2edf580e6eadd8f93d3f0fd03dd8f8d74799b4445fd1a791ebaadd3ae243dff06502d5c01670a18e984244af02b5f5f754b6f7e455f6b9b510f838a87f3a976aa933d348540d79870f3b3281ee1ff9308", 0x500}], 0x1, &(0x7f0000000080)=ANY=[], 0x68}}], 0x3, 0x2401c4c5)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc4)

1.550154289s ago: executing program 8 (id=1029):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x7ffff000)
link(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')

1.131466528s ago: executing program 4 (id=1037):
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc)
listen(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

1.045062424s ago: executing program 5 (id=1041):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)

1.044689694s ago: executing program 5 (id=1042):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

998.779092ms ago: executing program 2 (id=1043):
pipe2(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140))
fcntl$setpipe(r1, 0x407, 0x0)
read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x9, 0x8, 0x0, 0x0, {0x0, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x9, 0x9, 0x0, 0xa000, 0x0, 0x0, r3, 0x3, 0x2}}}, 0x90)

911.326109ms ago: executing program 3 (id=1044):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5524, &(0x7f00000108c0)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close(0x3)

879.770875ms ago: executing program 2 (id=1045):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @multicast2}, 0x4}}, 0x2e)

844.393732ms ago: executing program 2 (id=1046):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0)

778.156634ms ago: executing program 2 (id=1047):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r3=>0x0})
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10)

716.513886ms ago: executing program 2 (id=1048):
ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f00000000c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x8040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c40), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r2, 0x1, 0x70bd2a, 0x4, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x48000)

684.193682ms ago: executing program 2 (id=1049):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_complete(0x0, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f00000000c0)={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x2, 0xa8b, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x120}}}, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_setup_queues(r3, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0xc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x80, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20000, 0x2, 0xffffffff, 0x0, r3}}], 0x1, 0x0, 0x0)

568.735833ms ago: executing program 5 (id=1051):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x104c008, 0x0, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000003c0)='.\x00', 0x109d4e9, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYRES8, @ANYRES16=0x0, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRES16=r0, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES64], 0x1, 0x0, &(0x7f0000000000))

551.971606ms ago: executing program 8 (id=1052):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10080, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1510, &(0x7f0000002e00)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x10)
dup3(r1, r0, 0x0)
io_setup(0x91, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

463.263803ms ago: executing program 5 (id=1053):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

449.626706ms ago: executing program 8 (id=1054):
setrlimit(0x1, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000009}, 0x4000000)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x70b5)

433.449219ms ago: executing program 5 (id=1055):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1004000, 0x0, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

383.353358ms ago: executing program 8 (id=1056):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x60, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48)

383.154818ms ago: executing program 5 (id=1057):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022180000000501150085ff0904a108090182008c0508950129309102c05e84abc8"], 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4)
openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)

322.831619ms ago: executing program 3 (id=1058):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @void}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5)

305.587712ms ago: executing program 3 (id=1059):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0xffffffffffffffff}}], 0x1, 0x100, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

265.57436ms ago: executing program 4 (id=1060):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

232.794676ms ago: executing program 3 (id=1061):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
getresuid(&(0x7f0000015d00), &(0x7f0000015d40), &(0x7f0000015d80))

215.35781ms ago: executing program 4 (id=1062):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
r0 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f00000003c0)={0x1003, 0x0, 0x0, 0x0}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x8, 0x0, 0x0, 0x0}, 0x20)

203.921982ms ago: executing program 3 (id=1063):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x4, @remote}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1f}}}, @IFLA_LINK={0x8}, @IFLA_IFALIASn={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

139.421124ms ago: executing program 4 (id=1064):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

78.936805ms ago: executing program 4 (id=1065):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x1, 0x253, &(0x7f0000000640)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

0s ago: executing program 4 (id=1066):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x6, @local, 0x4e24, 0x0, 'rr\x00', 0x2d, 0x0, 0x3}, {@remote, 0x15, 0x1, 0x7, 0x0, 0x1000}}, 0x44)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf)

kernel console output (not intermixed with test programs):

=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   27.395404][   T39] usb 5-1: USB disconnect, device number 2
[   27.410233][  T406] loop1: detected capacity change from 0 to 512
[   27.447323][  T406] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.33: iget: bad i_size value: 38620345925642
[   27.465534][  T409] loop0: detected capacity change from 0 to 256
[   27.472186][  T409] =======================================================
[   27.472186][  T409] WARNING: The mand mount option has been deprecated and
[   27.472186][  T409]          and is ignored by this kernel. Remove the mand
[   27.472186][  T409]          option from the mount to silence this warning.
[   27.472186][  T409] =======================================================
[   27.515414][  T409] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   27.531902][  T406] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.33: couldn't read orphan inode 15 (err -117)
[   27.544213][  T406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   27.557644][   T28] audit: type=1400 audit(1790708234.428:144): avc:  denied  { read } for  pid=405 comm="syz.1.33" path="/10/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   27.587849][  T406] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.33: bg 0: block 5: invalid block bitmap
[   27.600246][   T28] audit: type=1400 audit(1790708234.428:145): avc:  denied  { write } for  pid=408 comm="syz.0.34" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.621696][  T406] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 30 with max blocks 484 with error 28
[   27.634591][  T406] EXT4-fs (loop1): This should not happen!! Data will be lost
[   27.634591][  T406] 
[   27.644603][  T406] EXT4-fs (loop1): Total free blocks count 0
[   27.650661][  T406] EXT4-fs (loop1): Free/Dirty block details
[   27.656845][   T28] audit: type=1400 audit(1790708234.428:146): avc:  denied  { add_name } for  pid=408 comm="syz.0.34" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.677286][  T406] EXT4-fs (loop1): free_blocks=0
[   27.682433][  T406] EXT4-fs (loop1): dirty_blocks=485
[   27.682894][  T409] syz.0.34: attempt to access beyond end of device
[   27.682894][  T409] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   27.688386][  T406] EXT4-fs (loop1): Block reservation details
[   27.707598][   T28] audit: type=1400 audit(1790708234.428:147): avc:  denied  { associate } for  pid=408 comm="syz.0.34" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   27.729635][  T406] EXT4-fs (loop1): i_reserved_data_blocks=485
[   27.736190][  T413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'.
[   27.775835][  T406] syz.1.33 (406) used greatest stack depth: 21824 bytes left
[   27.789928][  T308] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[   27.844382][  T309] kernel write not supported for file /vcs (pid: 309 comm: kworker/0:3)
[   27.882423][  T419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.39'.
[   27.907382][  T423] loop0: detected capacity change from 0 to 512
[   27.969919][  T431] ip_tables: iptables: counters copy to user failed while replacing table
[   27.995684][  T423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   28.010304][  T439] netlink: 7 bytes leftover after parsing attributes in process `syz.1.46'.
[   28.023675][  T423] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.059808][  T448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.50'.
[   28.070473][  T448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.50'.
[   28.108746][  T286] EXT4-fs (loop0): unmounting filesystem.
[   28.186960][  T462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.56'.
[   28.203529][  T464] loop2: detected capacity change from 0 to 128
[   28.274690][  T477] xt_hashlimit: size too large, truncated to 1048576
[   28.289957][  T480] loop1: detected capacity change from 0 to 128
[   28.324461][  T480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   28.333681][  T480] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.703570][  T288] EXT4-fs (loop1): unmounting filesystem.
[   28.965989][  T506] loop2: detected capacity change from 0 to 40427
[   28.980689][  T506] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   28.997489][  T506] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   29.018791][  T506] F2FS-fs (loop2): invalid crc value
[   29.033662][  T506] F2FS-fs (loop2): Found nat_bits in checkpoint
[   29.074529][  T506] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   29.081705][  T506] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   29.253411][  T489] loop4: detected capacity change from 0 to 131072
[   29.261314][  T489] F2FS-fs (loop4): invalid crc value
[   29.277698][  T489] F2FS-fs (loop4): Found nat_bits in checkpoint
[   29.331634][  T489] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   29.377234][  T489] F2FS-fs (loop4): Corrupted max_depth of 3: 16842753
[   29.452940][  T536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'.
[   29.464190][  T536] netlink: 165 bytes leftover after parsing attributes in process `syz.0.82'.
[   29.507780][  T538] loop3: detected capacity change from 0 to 128
[   29.523450][  T540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   29.540085][  T538] syz.3.83: attempt to access beyond end of device
[   29.540085][  T538] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[   29.587494][  T538] syz.3.83: attempt to access beyond end of device
[   29.587494][  T538] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128
[   29.655571][  T538] Buffer I/O error on dev loop3, logical block 100, lost async page write
[   29.684540][  T542] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.691942][  T542] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.733251][  T506] syz.2.74: attempt to access beyond end of device
[   29.733251][  T506] loop2: rw=2049, sector=40424, nr_sectors = 8 limit=40427
[   29.785988][  T506] syz.2.74 (506) used greatest stack depth: 21664 bytes left
[   30.128786][  T584] loop2: detected capacity change from 0 to 256
[   30.150948][  T584] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   30.181406][  T584] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   30.202161][  T584] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   30.235425][  T594] device gretap1 entered promiscuous mode
[   30.253381][  T596] loop4: detected capacity change from 0 to 128
[   30.272653][  T596] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   30.354334][  T596] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[   30.363066][  T596] FAT-fs (loop4): Filesystem has been set read-only
[   30.385833][  T287] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   30.415919][  T607] FAULT_INJECTION: forcing a failure.
[   30.415919][  T607] name failslab, interval 1, probability 0, space 0, times 0
[   30.433170][  T607] CPU: 0 PID: 607 Comm: syz.3.110 Not tainted syzkaller #0
[   30.440412][  T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   30.450512][  T607] Call Trace:
[   30.453824][  T607]  <TASK>
[   30.456775][  T607]  __dump_stack+0x21/0x24
[   30.461356][  T607]  dump_stack_lvl+0x110/0x170
[   30.466078][  T607]  ? __cfi_dump_stack_lvl+0x8/0x8
[   30.471132][  T607]  dump_stack+0x15/0x24
[   30.475320][  T607]  should_fail_ex+0x3bf/0x510
[   30.480034][  T607]  __should_failslab+0xac/0xf0
[   30.484842][  T607]  should_failslab+0x9/0x20
[   30.489372][  T607]  __kmem_cache_alloc_node+0x3d/0x2d0
[   30.494777][  T607]  ? security_prepare_creds+0x4e/0x150
[   30.500269][  T607]  ? security_prepare_creds+0x4e/0x150
[   30.505762][  T607]  __kmalloc+0xa4/0x1e0
[   30.509940][  T607]  security_prepare_creds+0x4e/0x150
[   30.515244][  T607]  prepare_creds+0x428/0x610
[   30.519863][  T607]  __se_sys_capset+0x34e/0x780
[   30.524750][  T607]  ? __se_sys_futex+0x136/0x310
[   30.529636][  T607]  ? __x64_sys_capset+0x70/0x70
[   30.534523][  T607]  ? __this_cpu_preempt_check+0x13/0x20
[   30.540104][  T607]  ? xfd_validate_state+0x70/0x150
[   30.545255][  T607]  ? fpregs_restore_userregs+0x128/0x260
[   30.550908][  T607]  __x64_sys_capset+0x5b/0x70
[   30.555612][  T607]  x64_sys_call+0x48f/0x9a0
[   30.560142][  T607]  do_syscall_64+0x4c/0xa0
[   30.564593][  T607]  ? clear_bhb_loop+0x30/0x80
[   30.569297][  T607]  ? clear_bhb_loop+0x30/0x80
[   30.574005][  T607]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   30.579918][  T607] RIP: 0033:0x7eff5e39e159
[   30.584349][  T607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   30.603969][  T607] RSP: 002b:00007eff5f1b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e
[   30.612407][  T607] RAX: ffffffffffffffda RBX: 00007eff5e625fa0 RCX: 00007eff5e39e159
[   30.620433][  T607] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040
[   30.628431][  T607] RBP: 00007eff5e43506b R08: 0000000000000000 R09: 0000000000000000
[   30.636447][  T607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   30.644452][  T607] R13: 00007eff5e626038 R14: 00007eff5e625fa0 R15: 00007ffc53890a18
[   30.652455][  T607]  </TASK>
[   30.699548][  T618] loop1: detected capacity change from 0 to 1024
[   30.713364][  T618] EXT4-fs: Ignoring removed bh option
[   30.757461][  T618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   30.864287][  T623] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.873140][  T618] loop1: detected capacity change from 1024 to 64
[   30.899555][  T636] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   30.912643][  T623] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.935579][  T623] device bridge_slave_0 entered promiscuous mode
[   30.946536][  T623] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.953697][  T623] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.957682][  T642] input: syz1 as /devices/virtual/input/input4
[   30.962212][  T623] device bridge_slave_1 entered promiscuous mode
[   31.050200][  T649] loop2: detected capacity change from 0 to 1024
[   31.058287][  T288] EXT4-fs (loop1): unmounting filesystem.
[   31.065621][  T649] EXT4-fs: Ignoring removed bh option
[   31.086653][  T628] kmmpd-loop1: attempt to access beyond end of device
[   31.086653][  T628] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64
[   31.113855][  T628] Buffer I/O error on dev loop1, logical block 64, lost sync page write
[   31.148973][  T649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   31.160174][  T649] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.174458][  T623] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.176825][  T649] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.124: lblock 3 mapped to illegal pblock 3 (length 3)
[   31.181526][  T623] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.181613][  T623] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.181629][  T623] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.227028][  T649] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   31.240303][  T649] EXT4-fs (loop2): This should not happen!! Data will be lost
[   31.240303][  T649] 
[   31.255288][  T649] EXT4-fs error (device loop2): ext4_ext_remove_space:2945: inode #15: comm syz.2.124: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   31.258117][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.274170][  T649] EXT4-fs error (device loop2) in ext4_setattr:5697: Corrupt filesystem
[   31.292081][  T649] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.124: lblock 0 mapped to illegal pblock 0 (length 1)
[   31.305482][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.313585][  T649] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   31.325933][  T649] EXT4-fs (loop2): This should not happen!! Data will be lost
[   31.325933][  T649] 
[   31.337490][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   31.348078][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   31.349460][  T290] EXT4-fs (loop2): unmounting filesystem.
[   31.367664][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   31.383847][  T661] ip_tables: iptables: counters copy to user failed while replacing table
[   31.393387][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   31.401645][  T370] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.408727][  T370] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.424360][  T532] device bridge_slave_1 left promiscuous mode
[   31.430610][  T532] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.449662][  T532] device bridge_slave_0 left promiscuous mode
[   31.458864][  T532] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.474549][  T532] device veth1_macvtap left promiscuous mode
[   31.480617][  T532] device veth0_vlan left promiscuous mode
[   31.607429][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   31.616064][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   31.624578][  T370] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.631626][  T370] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.653099][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   31.661404][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   31.669922][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   31.678882][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   31.702258][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   31.714717][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.725724][  T623] device veth0_vlan entered promiscuous mode
[   31.744320][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   31.752552][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.768464][  T623] device veth1_macvtap entered promiscuous mode
[   31.774865][    T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   31.789064][   T28] kauditd_printk_skb: 74 callbacks suppressed
[   31.789075][   T28] audit: type=1400 audit(1790708238.648:222): avc:  denied  { search } for  pid=682 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   31.817008][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.824544][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.832149][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.841220][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.849780][   T28] audit: type=1400 audit(1790708238.698:223): avc:  denied  { read write } for  pid=682 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   31.873145][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.884330][   T28] audit: type=1400 audit(1790708238.698:224): avc:  denied  { open } for  pid=682 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[   31.906955][   T28] audit: type=1400 audit(1790708238.698:225): avc:  denied  { lock } for  pid=682 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1

syzkaller
syzkaller login: [   31.949581][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.962524][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.972637][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.989758][    T6] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   32.003147][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.011502][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.019933][    T6] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[   32.029562][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.042992][   T28] audit: type=1400 audit(1790708238.898:226): avc:  denied  { mounton } for  pid=623 comm="syz-executor" path="/root/syzkaller.nAT1Jk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   32.079678][  T673] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.094582][  T673] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.108919][  T673] device bridge_slave_0 entered promiscuous mode
[   32.117921][  T673] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.125032][  T673] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.132627][  T673] device bridge_slave_1 entered promiscuous mode
[   32.146464][   T28] audit: type=1400 audit(1790708239.008:227): avc:  denied  { mounton } for  pid=695 comm="syz.2.141" path="/33/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   32.189769][   T28] audit: type=1400 audit(1790708239.048:228): avc:  denied  { unlink } for  pid=699 comm="syz.2.142" name="#1" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   32.254338][   T28] audit: type=1400 audit(1790708239.118:229): avc:  denied  { create } for  pid=705 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.278551][   T28] audit: type=1400 audit(1790708239.148:230): avc:  denied  { write } for  pid=705 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.326908][  T545] usb 4-1: USB disconnect, device number 2
[   32.416631][  T728] loop3: detected capacity change from 0 to 512
[   32.427401][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.439963][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.454227][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.482899][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.505193][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.507462][  T733] loop5: detected capacity change from 0 to 256
[   32.512338][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.550371][  T733] exfat: Deprecated parameter 'utf8'
[   32.556161][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.562592][  T733] exfat: Deprecated parameter 'utf8'
[   32.579043][  T733] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   32.591056][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.591635][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.645717][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.652801][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.662626][   T28] audit: type=1400 audit(1790708239.518:231): avc:  denied  { read } for  pid=737 comm="syz.5.155" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   32.705352][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.726537][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.764411][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.809743][  T673] device veth0_vlan entered promiscuous mode
[   32.823476][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.833586][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.853436][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.877779][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.887403][  T673] device veth1_macvtap entered promiscuous mode
[   32.919212][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.946822][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.974445][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.985014][  T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.068621][  T751] FAULT_INJECTION: forcing a failure.
[   33.068621][  T751] name failslab, interval 1, probability 0, space 0, times 0
[   33.081715][  T751] CPU: 0 PID: 751 Comm: syz.6.159 Not tainted syzkaller #0
[   33.088951][  T751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   33.099030][  T751] Call Trace:
[   33.102327][  T751]  <TASK>
[   33.105278][  T751]  __dump_stack+0x21/0x24
[   33.109638][  T751]  dump_stack_lvl+0x110/0x170
[   33.114380][  T751]  ? __cfi_dump_stack_lvl+0x8/0x8
[   33.119443][  T751]  ? __cfi_avc_has_perm+0x10/0x10
[   33.124524][  T751]  dump_stack+0x15/0x24
[   33.128715][  T751]  should_fail_ex+0x3bf/0x510
[   33.133417][  T751]  __should_failslab+0xac/0xf0
[   33.138220][  T751]  should_failslab+0x9/0x20
[   33.142760][  T751]  __kmem_cache_alloc_node+0x3d/0x2d0
[   33.148165][  T751]  ? proc_thread_self_get_link+0x100/0x1a0
[   33.153995][  T751]  ? proc_thread_self_get_link+0x100/0x1a0
[   33.159829][  T751]  kmalloc_trace+0x29/0xb0
[   33.164283][  T751]  proc_thread_self_get_link+0x100/0x1a0
[   33.169940][  T751]  ? __cfi_proc_thread_self_get_link+0x10/0x10
[   33.176150][  T751]  pick_link+0x728/0xe30
[   33.180486][  T751]  step_into+0xc27/0xf00
[   33.184766][  T751]  ? __d_lookup_rcu+0x37b/0x400
[   33.189649][  T751]  ? set_root+0x400/0x400
[   33.194020][  T751]  ? lookup_fast+0x15f/0x520
[   33.198633][  T751]  ? inode_permission+0xef/0x4b0
[   33.203593][  T751]  link_path_walk+0x744/0xeb0
[   33.208316][  T751]  ? handle_lookup_down+0x130/0x130
[   33.213557][  T751]  __filename_parentat+0x22d/0x650
[   33.218714][  T751]  ? vfs_path_parent_lookup+0x60/0x60
[   33.224131][  T751]  filename_create+0xd5/0x440
[   33.228852][  T751]  ? kasan_save_alloc_info+0x1f/0x30
[   33.234175][  T751]  ? kern_path_create+0x1b0/0x1b0
[   33.239241][  T751]  ? __check_object_size+0x45a/0x600
[   33.240500][  T747] loop5: detected capacity change from 0 to 8192
[   33.244593][  T751]  do_linkat+0x137/0x750
[   33.244631][  T751]  __x64_sys_link+0x86/0x90
[   33.259707][  T751]  x64_sys_call+0x266/0x9a0
[   33.264244][  T751]  do_syscall_64+0x4c/0xa0
[   33.268707][  T751]  ? clear_bhb_loop+0x30/0x80
[   33.273411][  T751]  ? clear_bhb_loop+0x30/0x80
[   33.278126][  T751]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   33.284063][  T751] RIP: 0033:0x7fc22119e159
[   33.288512][  T751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.308187][  T751] RSP: 002b:00007fc21fbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[   33.316676][  T751] RAX: ffffffffffffffda RBX: 00007fc221425fa0 RCX: 00007fc22119e159
[   33.324692][  T751] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000040
[   33.332691][  T751] RBP: 00007fc22123506b R08: 0000000000000000 R09: 0000000000000000
[   33.340686][  T751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.348686][  T751] R13: 00007fc221426038 R14: 00007fc221425fa0 R15: 00007fffd1417d68
[   33.356694][  T751]  </TASK>
[   33.364953][  T532] device bridge_slave_1 left promiscuous mode
[   33.371123][  T532] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.415867][  T532] device bridge_slave_0 left promiscuous mode
[   33.424177][  T532] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.536350][  T745] loop4: detected capacity change from 0 to 40427
[   33.557466][  T745] F2FS-fs (loop4): invalid crc value
[   33.594433][  T745] F2FS-fs (loop4): Found nat_bits in checkpoint
[   33.666784][  T745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   33.693233][  T753] loop6: detected capacity change from 0 to 40427
[   33.708572][  T745] syz.4.157: attempt to access beyond end of device
[   33.708572][  T745] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   33.725728][  T753] F2FS-fs (loop6): fault_injection options not supported
[   33.732844][  T753] F2FS-fs (loop6): fault_type options not supported
[   33.734709][  T712] F2FS-fs (loop2): invalid crc value
[   33.750995][  T287] syz-executor: attempt to access beyond end of device
[   33.750995][  T287] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   33.777858][  T712] F2FS-fs (loop2): Found nat_bits in checkpoint
[   33.803861][  T753] F2FS-fs (loop6): invalid crc value
[   33.819684][  T753] F2FS-fs (loop6): Found nat_bits in checkpoint
[   33.853067][  T712] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   33.889735][  T753] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   34.007574][  T766] SELinux: failed to load policy
[   34.099410][  T770] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.164: Unimplemented hash flags: 0x0001
[   34.121167][  T770] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.164: Corrupt directory, running e2fsck is recommended
[   34.143431][  T770] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   34.163387][  T770] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.164: corrupted in-inode xattr
[   34.194424][  T770] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.164: couldn't read orphan inode 15 (err -117)
[   34.224539][  T770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   34.253613][  T770] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.164: Unimplemented hash flags: 0x0001
[   34.273314][  T770] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.164: Corrupt directory, running e2fsck is recommended
[   34.288593][  T770] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.164: path /27/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[   34.309475][  T770] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 2: comm syz.4.164: path /27/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[   34.331557][  T770] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 8: comm syz.4.164: path /27/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0
[   34.389990][  T287] EXT4-fs (loop4): unmounting filesystem.
[   34.453113][  T559] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   34.511906][  T813] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   34.528354][  T813] EXT4-fs (loop6): Test dummy encryption mode enabled
[   34.541857][  T820] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   34.561950][  T813] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[   34.575170][  T813] System zones: 0-5
[   34.575204][  T820] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[   34.584806][  T813] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   34.603500][  T813] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[   34.607673][  T820] System zones: 1-12
[   34.623054][  T673] EXT4-fs (loop6): unmounting filesystem.
[   34.624493][  T820] EXT4-fs (loop2): orphan cleanup on readonly fs
[   34.636324][  T820] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.181: attempt to clear invalid blocks 1024 len 1
[   34.649895][  T820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.181: bg 0: block 361: padding at end of block bitmap is not set
[   34.664344][  T559] usb 4-1: Using ep0 maxpacket: 32
[   34.670262][  T828] device batadv_slave_1 entered promiscuous mode
[   34.677615][  T559] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   34.687665][  T827] device batadv_slave_1 left promiscuous mode
[   34.691360][  T559] usb 4-1: config 0 has no interface number 0
[   34.700109][  T820] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   34.709081][  T559] usb 4-1: config 0 interface 184 has no altsetting 0
[   34.716408][  T820] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.181: invalid indirect mapped block 1811939328 (level 0)
[   34.727562][  T559] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   34.740324][  T559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.745934][  T820] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.181: invalid indirect mapped block 2 (level 2)
[   34.748810][  T559] usb 4-1: Product: syz
[   34.765733][  T559] usb 4-1: Manufacturer: syz
[   34.770505][  T820] EXT4-fs (loop2): 1 truncate cleaned up
[   34.773709][  T559] usb 4-1: SerialNumber: syz
[   34.777396][  T820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   34.790569][  T559] usb 4-1: config 0 descriptor??
[   34.798874][  T559] smsc75xx v1.0.0
[   34.803331][  T832] device batadv_slave_0 entered promiscuous mode
[   34.810466][  T832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.185'.
[   34.819406][  T832] netlink: 15 bytes leftover after parsing attributes in process `syz.5.185'.
[   34.833012][  T290] EXT4-fs (loop2): unmounting filesystem.
[   34.907607][  T831] device batadv_slave_0 left promiscuous mode
[   35.004252][  T845] erofs: (device loop5): mounted with root inode @ nid 36.
[   35.795925][  T878] set_capacity_and_notify: 5 callbacks suppressed
[   35.795945][  T878] loop4: detected capacity change from 0 to 512
[   35.833230][  T878] EXT4-fs (loop4): orphan cleanup on readonly fs
[   35.839830][  T878] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   35.854542][  T878] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   35.861784][  T878] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.203: bad orphan inode 14
[   35.873490][  T878] ext4_test_bit(bit=13, block=18) = 1
[   35.878949][  T878] is_bad_inode(inode)=0
[   35.883166][  T878] NEXT_ORPHAN(inode)=0
[   35.887309][  T878] max_ino=32
[   35.890521][  T878] i_nlink=1
[   35.893717][  T878] EXT4-fs (loop4): 1 truncate cleaned up
[   35.899371][  T878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   35.919522][  T872] loop2: detected capacity change from 0 to 40427
[   35.932366][  T872] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[   35.939817][  T872] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   35.948258][  T872] F2FS-fs (loop2): Image doesn't support compression
[   35.955059][  T872] F2FS-fs (loop2): Image doesn't support compression
[   35.963668][  T872] F2FS-fs (loop2): invalid crc value
[   35.981466][  T287] EXT4-fs (loop4): unmounting filesystem.
[   35.988188][  T872] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   36.009378][  T559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[   36.040455][  T559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[   36.063693][  T896] netlink: 'syz.4.209': attribute type 4 has an invalid length.
[   36.071237][  T559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   36.072029][  T896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.209'.
[   36.087125][  T559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   36.103311][  T559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   36.110265][  T872] F2FS-fs (loop2): Start checkpoint disabled!
[   36.114075][  T559] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   36.129576][  T559] smsc75xx: probe of 4-1:0.184 failed with error -71
[   36.138155][  T872] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   36.144038][  T559] usb 4-1: USB disconnect, device number 3
[   36.155861][  T872] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   36.177043][  T872] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   36.185955][  T903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   36.209302][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   36.232639][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   36.245265][  T909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.214'.
[   36.254157][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   36.254884][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   36.270797][  T782] kworker/u4:14: attempt to access beyond end of device
[   36.270797][  T782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   36.285362][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   36.293654][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   36.302121][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   36.318091][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   36.329215][  T910] netlink: 40 bytes leftover after parsing attributes in process `syz.5.213'.
[   36.459462][  T923] loop2: detected capacity change from 0 to 256
[   36.483558][  T923] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   36.666650][  T933] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.679984][  T933] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.688633][  T933] device bridge_slave_0 entered promiscuous mode
[   36.703117][  T933] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.712463][  T933] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.723703][  T933] device bridge_slave_1 entered promiscuous mode
[   36.881121][  T933] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.888230][  T933] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.895917][  T933] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.899944][  T950] loop4: detected capacity change from 0 to 1024
[   36.902988][  T933] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.934125][  T777] device bridge_slave_1 left promiscuous mode
[   36.941491][  T777] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.962125][  T777] device bridge_slave_0 left promiscuous mode
[   36.972834][  T950] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   36.976340][  T777] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.996431][  T950] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   37.005091][  T777] device veth1_macvtap left promiscuous mode
[   37.011081][  T950] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   37.020193][  T777] device veth0_vlan left promiscuous mode
[   37.048721][   T28] kauditd_printk_skb: 33 callbacks suppressed
[   37.048736][   T28] audit: type=1400 audit(1790708243.908:264): avc:  denied  { write } for  pid=949 comm="syz.4.231" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   37.105783][   T28] audit: type=1400 audit(1790708243.948:265): avc:  denied  { add_name } for  pid=949 comm="syz.4.231" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   37.111787][  T287] EXT4-fs (loop4): unmounting filesystem.
[   37.217947][  T532] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.230636][  T532] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.263552][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.272722][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.297056][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   37.306049][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   37.316884][  T532] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.323970][  T532] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.332120][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   37.341461][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   37.373401][  T532] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.380590][  T532] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.388580][   T28] audit: type=1400 audit(1790708244.258:266): avc:  denied  { write } for  pid=966 comm="syz.4.237" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   37.408791][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   37.439656][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   37.453063][   T28] audit: type=1400 audit(1790708244.288:267): avc:  denied  { map } for  pid=966 comm="syz.4.237" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   37.458558][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   37.490950][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   37.523430][  T974] netlink: 27 bytes leftover after parsing attributes in process `syz.3.239'.
[   37.546732][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   37.563338][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   37.587067][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   37.597362][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   37.606513][  T980] loop3: detected capacity change from 0 to 256
[   37.614169][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   37.639849][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   37.652812][  T933] device veth0_vlan entered promiscuous mode
[   37.658832][  T980] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   37.682151][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   37.696718][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   37.712791][  T933] device veth1_macvtap entered promiscuous mode
[   37.733886][  T980] syz.3.242: attempt to access beyond end of device
[   37.733886][  T980] loop3: rw=0, sector=98487, nr_sectors = 1 limit=256
[   37.734837][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   37.773374][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   37.795766][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   37.826554][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   37.843717][  T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   37.983321][   T28] audit: type=1400 audit(1790708244.848:268): avc:  denied  { ioctl } for  pid=1004 comm="syz.4.249" path="socket:[19398]" dev="sockfs" ino=19398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.057700][   T28] audit: type=1400 audit(1790708244.888:269): avc:  denied  { write } for  pid=1006 comm="syz.5.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   38.117638][   T28] audit: type=1400 audit(1790708244.968:270): avc:  denied  { execute } for  pid=1010 comm="syz.4.253" path="/53/cgroup.kill" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   38.160290][ T1021] loop4: detected capacity change from 0 to 128
[   38.194949][ T1021] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   38.218112][ T1023] loop2: detected capacity change from 0 to 128
[   38.224726][ T1021] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   38.259451][ T1021] xt_hashlimit: size too large, truncated to 1048576
[   38.633094][    T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   38.646310][ T1040] loop4: detected capacity change from 0 to 512
[   38.681930][ T1040] EXT4-fs (loop4): 1 truncate cleaned up
[   38.693108][ T1040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   38.725908][   T28] audit: type=1400 audit(1790708245.588:271): avc:  denied  { remove_name } for  pid=1038 comm="syz.4.265" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.728268][ T1040] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.265: bg 0: block 465: padding at end of block bitmap is not set
[   38.763294][   T28] audit: type=1400 audit(1790708245.588:272): avc:  denied  { rename } for  pid=1038 comm="syz.4.265" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.803206][ T1040] EXT4-fs (loop4): Remounting filesystem read-only
[   38.808356][   T28] audit: type=1400 audit(1790708245.588:273): avc:  denied  { unlink } for  pid=1038 comm="syz.4.265" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.813196][ T1040] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   38.840800][    T6] usb 3-1: Using ep0 maxpacket: 32
[   38.847679][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.853650][ T1040] EXT4-fs (loop4): Remounting filesystem read-only
[   38.869021][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.870741][ T1040] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.265: invalid indirect mapped block 234881024 (level 0)
[   38.889395][    T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   38.911978][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.915012][ T1040] EXT4-fs (loop4): Remounting filesystem read-only
[   38.942839][    T6] usb 3-1: config 0 descriptor??
[   38.949044][    T6] hub 3-1:0.0: USB hub found
[   38.983556][  T287] EXT4-fs (loop4): unmounting filesystem.
[   39.150263][    T6] hub 3-1:0.0: 1 port detected
[   39.366328][ T1060] loop7: detected capacity change from 0 to 1024
[   39.373366][ T1060] EXT4-fs: Ignoring removed orlov option
[   39.398508][ T1060] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   39.500674][ T1068] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4294967295.2863333375.2863311530), cmd(3)
[   39.723636][  T933] EXT4-fs (loop7): unmounting filesystem.
[   39.756962][    T6] hub 3-1:0.0: activate --> -90
[   39.815351][ T1096] netlink: 20 bytes leftover after parsing attributes in process `syz.5.289'.
[   39.824474][ T1096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   39.831686][ T1096] IPv6: NLM_F_CREATE should be set when creating new route
[   39.838941][ T1096] IPv6: NLM_F_CREATE should be set when creating new route
[   39.846552][ T1096] Zero length message leads to an empty skb
[   39.914939][ T1083] loop3: detected capacity change from 0 to 40427
[   39.932394][ T1106] overlayfs: failed to clone upperpath
[   39.932420][ T1083] F2FS-fs (loop3): invalid crc value
[   39.943708][ T1106] overlayfs: failed to clone upperpath
[   39.950194][ T1083] F2FS-fs (loop3): Found nat_bits in checkpoint
[   39.979981][ T1111] ./dev/sda1: Can't open blockdev
[   39.999580][ T1083] F2FS-fs (loop3): Start checkpoint disabled!
[   40.006308][ T1083] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   40.013794][ T1083] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   40.053032][  T545] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   40.171752][  T550] usb 3-1: USB disconnect, device number 2
[   40.177690][    T6] usb 3-1-port1: config error
[   40.244165][  T545] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.254324][  T545] usb 8-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00
[   40.263901][  T545] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.283576][  T545] usb 8-1: config 0 descriptor??
[   40.583755][  T532] kworker/u4:5: attempt to access beyond end of device
[   40.583755][  T532] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   40.692426][  T545] wacom 0003:056A:0303.0002: Unknown device_type for 'HID 056a:0303'. Assuming pen.
[   40.716403][  T545] wacom 0003:056A:0303.0002: hidraw0: USB HID v0.00 Device [HID 056a:0303] on usb-dummy_hcd.7-1/input0
[   40.738928][  T545] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0303.0002/input/input5
[   40.866299][ T1148] netlink: 36 bytes leftover after parsing attributes in process `syz.4.311'.
[   40.901657][ T1152] ip_tables: iptables: counters copy to user failed while replacing table
[   40.905565][  T550] usb 8-1: USB disconnect, device number 2
[   40.925179][ T1154] loop3: detected capacity change from 0 to 512
[   40.938378][ T1156] loop4: detected capacity change from 0 to 256
[   40.955929][ T1154] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   40.983887][ T1156] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   41.059371][ T1156] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264)
[   41.067605][ T1156] FAT-fs (loop4): Filesystem has been set read-only
[   41.074478][ T1156] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[   41.082472][ T1156] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[   43.242955][    C0] sched: RT throttling activated
[   44.265050][ T1181] ./dev/sda1: Can't open blockdev
[   44.296311][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   44.296325][   T28] audit: type=1326 audit(1790708251.158:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fd19e159 code=0x7ffc0000
[   44.363220][   T28] audit: type=1326 audit(1790708251.198:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fd19e159 code=0x7ffc0000
[   44.413092][   T28] audit: type=1326 audit(1790708251.198:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fd19e159 code=0x7ffc0000
[   44.439729][ T1198] xt_hashlimit: size too large, truncated to 1048576
[   44.484688][   T28] audit: type=1326 audit(1790708251.198:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76fd19e159 code=0x7ffc0000
[   44.801500][   T28] audit: type=1326 audit(1790708251.258:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fd19e159 code=0x7ffc0000
[   44.836761][ T1212] tipc: Started in network mode
[   44.846480][ T1212] tipc: Node identity 7f000001, cluster identity 4711
[   44.863432][ T1212] tipc: Enabled bearer <udp:syz2>, priority 10
[   44.873144][   T28] audit: type=1326 audit(1790708251.258:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76fd19dec2 code=0x7ffc0000
[   44.903329][ T1212] tipc: Can't add remote ip to TIPC UDP multicast bearer
[   44.952750][   T28] audit: type=1326 audit(1790708251.348:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f76fd19df57 code=0x7ffc0000
[   45.001256][   T28] audit: type=1326 audit(1790708251.348:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f76fd15ae51 code=0x7ffc0000
[   45.059167][   T28] audit: type=1326 audit(1790708251.348:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f76fd19ef49 code=0x7ffc0000
[   45.110039][   T28] audit: type=1326 audit(1790708251.348:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1187 comm="syz.5.328" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f76fd15aebb code=0x7ffc0000
[   45.162539][ T1208] loop2: detected capacity change from 0 to 40427
[   45.188402][ T1208] F2FS-fs (loop2): invalid crc value
[   45.207214][  T550] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   45.217400][ T1208] F2FS-fs (loop2): Found nat_bits in checkpoint
[   45.258370][ T1233] loop3: detected capacity change from 0 to 256
[   45.278593][ T1233] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d)
[   45.291369][ T1233] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   45.342267][ T1208] F2FS-fs (loop2): Start checkpoint disabled!
[   45.350241][ T1208] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   45.383062][ T1208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   45.405643][  T550] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[   45.423917][  T550] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.524805][ T1252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'.
[   45.556350][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   45.575397][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   45.629074][ T1258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'.
[   45.649701][  T550] cdc_acm 8-1:1.0: ttyACM0: USB ACM device
[   45.893049][  T550] tipc: Node number set to 2130706433
[   45.906883][  T559] usb 8-1: USB disconnect, device number 3
[   45.953054][  T561] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   46.134480][ T1193] loop4: detected capacity change from 0 to 262144
[   46.144511][ T1193] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9)
[   46.152832][ T1193] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   46.161297][  T561] usb 4-1: Using ep0 maxpacket: 32
[   46.167443][ T1193] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root and reserve_node
[   46.178038][  T561] usb 4-1: unable to get BOS descriptor or descriptor too short
[   46.198769][ T1193] F2FS-fs (loop4): Found nat_bits in checkpoint
[   46.208332][  T561] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   46.221010][  T561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.233846][  T561] usb 4-1: Product: syz
[   46.238048][  T561] usb 4-1: Manufacturer: syz
[   46.242809][  T561] usb 4-1: SerialNumber: syz
[   46.259822][ T1193] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   46.266981][ T1193] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   46.413663][ T1318] device veth2 entered promiscuous mode
[   46.454559][ T1268] loop3: detected capacity change from 0 to 256
[   46.488663][  T561] usb 4-1: unit 4 not found!
[   46.493847][  T561] usb 4-1: unit 0 not found!
[   46.633569][ T1323] netlink: 160 bytes leftover after parsing attributes in process `syz.7.387'.
[   46.894564][  T561] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[   46.905766][ T1353] loop7: detected capacity change from 0 to 256
[   46.913472][  T561] usb 4-1: unit 4 not found!
[   46.919281][  T561] usb 4-1: unit 0 not found!
[   46.938399][ T1353] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   46.941902][  T561] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[   46.979079][  T561] usb 4-1: unit 4 not found!
[   46.984927][  T561] usb 4-1: unit 0 not found!
[   47.005713][  T561] snd-usb-audio: probe of 4-1:1.2 failed with error -22
[   47.020629][ T1359] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[   47.028850][ T1188] udevd[1188]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   47.044569][ T1359] FAT-fs (loop7): Filesystem has been set read-only
[   47.044600][ T1359] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[   47.066609][  T561] usb 4-1: USB disconnect, device number 4
[   47.149617][ T1350] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[   47.157920][ T1350] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[   47.495964][ T1391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'.
[   47.534776][ T1393] loop3: detected capacity change from 0 to 256
[   48.145380][ T1413] loop3: detected capacity change from 0 to 256
[   48.217621][ T1416] netlink: 'syz.4.427': attribute type 4 has an invalid length.
[   48.261318][ T1416] netlink: 'syz.4.427': attribute type 4 has an invalid length.
[   48.375771][ T1430] kvm [1429]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[   48.414087][ T1430] kvm [1429]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x8000000000000
[   48.513164][ T1440] device batadv_slave_1 entered promiscuous mode
[   48.545052][ T1445] netlink: 96 bytes leftover after parsing attributes in process `syz.7.437'.
[   48.569481][ T1439] device batadv_slave_1 left promiscuous mode
[   48.774450][ T1468] FAULT_INJECTION: forcing a failure.
[   48.774450][ T1468] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   48.803017][ T1468] CPU: 1 PID: 1468 Comm: syz.7.446 Not tainted syzkaller #0
[   48.810372][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.820453][ T1468] Call Trace:
[   48.823792][ T1468]  <TASK>
[   48.826774][ T1468]  __dump_stack+0x21/0x24
[   48.831140][ T1468]  dump_stack_lvl+0x110/0x170
[   48.835884][ T1468]  ? __cfi_dump_stack_lvl+0x8/0x8
[   48.840952][ T1468]  ? page_add_file_rmap+0x49f/0x650
[   48.846220][ T1468]  ? next_uptodate_page+0x89e/0x8d0
[   48.851448][ T1468]  dump_stack+0x15/0x24
[   48.855641][ T1468]  should_fail_ex+0x3bf/0x510
[   48.860409][ T1468]  should_fail_alloc_page+0x61/0x90
[   48.865653][ T1468]  prepare_alloc_pages+0x131/0x570
[   48.870801][ T1468]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   48.876039][ T1468]  ? __cfi_filemap_map_pages+0x10/0x10
[   48.881544][ T1468]  __alloc_pages+0x15b/0x610
[   48.886176][ T1468]  ? __cfi___alloc_pages+0x10/0x10
[   48.891341][ T1468]  ? do_fault+0x1b23/0x1e30
[   48.895865][ T1468]  ? memcg_rstat_updated+0x56/0x110
[   48.901094][ T1468]  __folio_alloc+0x12/0x40
[   48.905557][ T1468]  handle_mm_fault+0x1989/0x26b0
[   48.910511][ T1468]  ? __cfi_handle_mm_fault+0x10/0x10
[   48.915808][ T1468]  ? lock_vma_under_rcu+0x3f8/0x4f0
[   48.921023][ T1468]  do_user_addr_fault+0x900/0x1030
[   48.926162][ T1468]  ? debug_smp_processor_id+0x17/0x20
[   48.931556][ T1468]  exc_page_fault+0x51/0xb0
[   48.936089][ T1468]  asm_exc_page_fault+0x27/0x30
[   48.940956][ T1468] RIP: 0033:0x7f89a1e5f6cb
[   48.945388][ T1468] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b
[   48.965006][ T1468] RSP: 002b:00007f89a2ef3fa0 EFLAGS: 00010206
[   48.971094][ T1468] RAX: 0000000000000000 RBX: 00007f89a2225fa0 RCX: 0000000000000000
[   48.979087][ T1468] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000
[   48.987070][ T1468] RBP: 00007f89a203506b R08: 0000000000000000 R09: 0000000000000000
[   48.995061][ T1468] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[   49.003047][ T1468] R13: 00007f89a2226038 R14: 00007f89a2225fa0 R15: 00007ffebc699298
[   49.011057][ T1468]  </TASK>
[   49.150449][ T1468] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   49.458873][   T28] kauditd_printk_skb: 39 callbacks suppressed
[   49.458891][   T28] audit: type=1400 audit(1790708256.318:336): avc:  denied  { map } for  pid=1512 comm="syz.7.465" path="socket:[21842]" dev="sockfs" ino=21842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   49.524896][   T28] audit: type=1400 audit(1790708256.358:337): avc:  denied  { mount } for  pid=1514 comm="syz.5.466" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   49.619864][ T1451] loop4: detected capacity change from 0 to 131072
[   49.642321][ T1451] F2FS-fs (loop4): invalid crc value
[   49.685778][ T1451] F2FS-fs (loop4): Found nat_bits in checkpoint
[   49.761863][ T1451] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   49.792521][ T1451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   50.087586][ T1539] FAULT_INJECTION: forcing a failure.
[   50.087586][ T1539] name failslab, interval 1, probability 0, space 0, times 0
[   50.100591][ T1539] CPU: 1 PID: 1539 Comm: syz.3.475 Not tainted syzkaller #0
[   50.107919][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   50.117998][ T1539] Call Trace:
[   50.121299][ T1539]  <TASK>
[   50.124282][ T1539]  __dump_stack+0x21/0x24
[   50.128662][ T1539]  dump_stack_lvl+0x110/0x170
[   50.133477][ T1539]  ? __cfi_dump_stack_lvl+0x8/0x8
[   50.138548][ T1539]  ? kasan_set_track+0x60/0x70
[   50.143360][ T1539]  ? kasan_set_track+0x4b/0x70
[   50.148176][ T1539]  ? kasan_save_alloc_info+0x1f/0x30
[   50.153524][ T1539]  ? __kasan_kmalloc+0x95/0xb0
[   50.158344][ T1539]  dump_stack+0x15/0x24
[   50.162546][ T1539]  should_fail_ex+0x3bf/0x510
[   50.167271][ T1539]  __should_failslab+0xac/0xf0
[   50.172085][ T1539]  should_failslab+0x9/0x20
[   50.176631][ T1539]  kmem_cache_alloc_node+0x42/0x330
[   50.181905][ T1539]  ? alloc_vmap_area+0x184/0x18c0
[   50.186953][ T1539]  alloc_vmap_area+0x184/0x18c0
[   50.191836][ T1539]  ? vm_map_ram+0x930/0x930
[   50.196369][ T1539]  ? __kasan_kmalloc+0x95/0xb0
[   50.201164][ T1539]  ? kmalloc_node_trace+0x3d/0xb0
[   50.206198][ T1539]  __get_vm_area_node+0x160/0x360
[   50.211252][ T1539]  __vmalloc_node_range+0x326/0x1440
[   50.216574][ T1539]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   50.222134][ T1539]  ? avc_has_perm_noaudit+0x390/0x490
[   50.227532][ T1539]  ? __x64_sys_seccomp+0x7b/0x90
[   50.232492][ T1539]  ? __cfi___vmalloc_node_range+0x10/0x10
[   50.238358][ T1539]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   50.243970][ T1539]  __vmalloc+0x79/0x90
[   50.248051][ T1539]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   50.253607][ T1539]  bpf_prog_alloc_no_stats+0x3e/0x3f0
[   50.258996][ T1539]  bpf_prog_alloc+0x21/0x1c0
[   50.263598][ T1539]  bpf_prog_create_from_user+0xa7/0x420
[   50.269155][ T1539]  ? __cfi_seccomp_check_filter+0x10/0x10
[   50.274884][ T1539]  do_seccomp+0x801/0xec0
[   50.279236][ T1539]  ? prctl_set_seccomp+0x60/0x60
[   50.284195][ T1539]  ? __this_cpu_preempt_check+0x13/0x20
[   50.289756][ T1539]  ? xfd_validate_state+0x70/0x150
[   50.294890][ T1539]  ? fpregs_restore_userregs+0x128/0x260
[   50.300540][ T1539]  __x64_sys_seccomp+0x7b/0x90
[   50.305315][ T1539]  x64_sys_call+0x721/0x9a0
[   50.309853][ T1539]  do_syscall_64+0x4c/0xa0
[   50.314304][ T1539]  ? clear_bhb_loop+0x30/0x80
[   50.319015][ T1539]  ? clear_bhb_loop+0x30/0x80
[   50.323705][ T1539]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   50.329609][ T1539] RIP: 0033:0x7eff5e39e159
[   50.334028][ T1539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.353648][ T1539] RSP: 002b:00007eff5f1b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   50.362110][ T1539] RAX: ffffffffffffffda RBX: 00007eff5e625fa0 RCX: 00007eff5e39e159
[   50.370126][ T1539] RDX: 0000200000000040 RSI: 000000000000001f RDI: 0000000000000001
[   50.378132][ T1539] RBP: 00007eff5e43506b R08: 0000000000000000 R09: 0000000000000000
[   50.386137][ T1539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.394178][ T1539] R13: 00007eff5e626038 R14: 00007eff5e625fa0 R15: 00007ffc53890a18
[   50.402186][ T1539]  </TASK>
[   50.409024][ T1539] syz.3.475: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0
[   50.432432][ T1539] CPU: 1 PID: 1539 Comm: syz.3.475 Not tainted syzkaller #0
[   50.439780][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   50.449891][ T1539] Call Trace:
[   50.453200][ T1539]  <TASK>
[   50.456158][ T1539]  __dump_stack+0x21/0x24
[   50.460534][ T1539]  dump_stack_lvl+0x110/0x170
[   50.465262][ T1539]  ? __cfi_dump_stack_lvl+0x8/0x8
[   50.470332][ T1539]  ? pr_cont_kernfs_name+0x133/0x160
[   50.475652][ T1539]  dump_stack+0x15/0x24
[   50.479980][ T1539]  warn_alloc+0x1dc/0x200
[   50.483528][  T545] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   50.484375][ T1539]  ? __cfi_warn_alloc+0x10/0x10
[   50.496704][ T1539]  ? __get_vm_area_node+0x175/0x360
[   50.501946][ T1539]  __vmalloc_node_range+0x34b/0x1440
[   50.507362][ T1539]  ? avc_has_perm_noaudit+0x390/0x490
[   50.512771][ T1539]  ? __x64_sys_seccomp+0x7b/0x90
[   50.517741][ T1539]  ? __cfi___vmalloc_node_range+0x10/0x10
[   50.523497][ T1539]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   50.529081][ T1539]  __vmalloc+0x79/0x90
[   50.533183][ T1539]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   50.538762][ T1539]  bpf_prog_alloc_no_stats+0x3e/0x3f0
[   50.544189][ T1539]  bpf_prog_alloc+0x21/0x1c0
[   50.548820][ T1539]  bpf_prog_create_from_user+0xa7/0x420
[   50.554400][ T1539]  ? __cfi_seccomp_check_filter+0x10/0x10
[   50.560159][ T1539]  do_seccomp+0x801/0xec0
[   50.564519][ T1539]  ? prctl_set_seccomp+0x60/0x60
[   50.569495][ T1539]  ? __this_cpu_preempt_check+0x13/0x20
[   50.575074][ T1539]  ? xfd_validate_state+0x70/0x150
[   50.580226][ T1539]  ? fpregs_restore_userregs+0x128/0x260
[   50.586064][ T1539]  __x64_sys_seccomp+0x7b/0x90
[   50.590876][ T1539]  x64_sys_call+0x721/0x9a0
[   50.595418][ T1539]  do_syscall_64+0x4c/0xa0
[   50.599883][ T1539]  ? clear_bhb_loop+0x30/0x80
[   50.604596][ T1539]  ? clear_bhb_loop+0x30/0x80
[   50.609362][ T1539]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   50.615288][ T1539] RIP: 0033:0x7eff5e39e159
[   50.619734][ T1539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.623344][ T1549] loop7: detected capacity change from 0 to 256
[   50.639369][ T1539] RSP: 002b:00007eff5f1b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   50.639397][ T1539] RAX: ffffffffffffffda RBX: 00007eff5e625fa0 RCX: 00007eff5e39e159
[   50.639413][ T1539] RDX: 0000200000000040 RSI: 000000000000001f RDI: 0000000000000001
[   50.639428][ T1539] RBP: 00007eff5e43506b R08: 0000000000000000 R09: 0000000000000000
[   50.639442][ T1539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.639455][ T1539] R13: 00007eff5e626038 R14: 00007eff5e625fa0 R15: 00007ffc53890a18
[   50.639475][ T1539]  </TASK>
[   50.678832][ T1539] Mem-Info:
[   50.713083][  T545] usb 5-1: Using ep0 maxpacket: 16
[   50.719878][  T545] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.731309][ T1539] active_anon:9307 inactive_anon:0 isolated_anon:0
[   50.731309][ T1539]  active_file:19054 inactive_file:2308 isolated_file:0
[   50.731309][ T1539]  unevictable:0 dirty:472 writeback:0
[   50.731309][ T1539]  slab_reclaimable:9410 slab_unreclaimable:72261
[   50.731309][ T1539]  mapped:32225 shmem:3076 pagetables:629
[   50.731309][ T1539]  sec_pagetables:0 bounce:0
[   50.731309][ T1539]  kernel_misc_reclaimable:0
[   50.731309][ T1539]  free:1514041 free_pcp:7579 free_cma:0
[   50.752376][  T545] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.781667][ T1539] Node 0 active_anon:37228kB inactive_anon:0kB active_file:76216kB inactive_file:9232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128900kB dirty:1888kB writeback:0kB shmem:12304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4992kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no
[   50.827536][ T1539] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971864kB mlocked:0kB bounce:0kB free_pcp:5380kB local_pcp:0kB free_cma:0kB
[   50.835155][  T545] usb 5-1: config 0 interface 0 has no altsetting 0
[   50.856429][ T1539] lowmem_reserve[]: 0 3932 3932 3932
[   50.869475][ T1539] Normal free:3089680kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:37428kB inactive_anon:0kB active_file:76216kB inactive_file:9232kB unevictable:0kB writepending:1888kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:24344kB local_pcp:10792kB free_cma:0kB
[   50.889302][  T545] usb 5-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00
[   50.914200][  T545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.923140][ T1539] lowmem_reserve[]: 0 0 0 0
[   50.929050][ T1539] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB
[   50.944861][ T1539] Normal: 1751*4kB (UME) 1020*8kB (UME) 759*16kB (UME) 502*32kB (UME) 338*64kB (UME) 191*128kB (UME) 72*256kB (UM) 36*512kB (UM) 28*1024kB (UM) 17*2048kB (UME) 708*4096kB (UM) = 3089772kB
[   50.963879][ T1539] 24436 total pagecache pages
[   50.964508][  T545] usb 5-1: config 0 descriptor??
[   50.968602][ T1539] 0 pages in swap cache
[   50.978344][ T1539] Free swap  = 124728kB
[   50.982521][ T1539] Total swap = 124996kB
[   50.988381][ T1539] 2097051 pages RAM
[   50.992285][ T1539] 0 pages HighMem/MovableOnly
[   51.003050][ T1539] 347485 pages reserved
[   51.019098][ T1539] 0 pages cma reserved
[   51.072637][ T1561] FAULT_INJECTION: forcing a failure.
[   51.072637][ T1561] name failslab, interval 1, probability 0, space 0, times 0
[   51.085278][ T1561] CPU: 1 PID: 1561 Comm: syz.3.484 Not tainted syzkaller #0
[   51.092624][ T1561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   51.102704][ T1561] Call Trace:
[   51.105998][ T1561]  <TASK>
[   51.108951][ T1561]  __dump_stack+0x21/0x24
[   51.113318][ T1561]  dump_stack_lvl+0x110/0x170
[   51.118023][ T1561]  ? __cfi_dump_stack_lvl+0x8/0x8
[   51.123086][ T1561]  dump_stack+0x15/0x24
[   51.127274][ T1561]  should_fail_ex+0x3bf/0x510
[   51.131976][ T1561]  ? __sigqueue_alloc+0x13f/0x210
[   51.137032][ T1561]  __should_failslab+0xac/0xf0
[   51.141822][ T1561]  should_failslab+0x9/0x20
[   51.146349][ T1561]  kmem_cache_alloc+0x3b/0x320
[   51.151152][ T1561]  __sigqueue_alloc+0x13f/0x210
[   51.156124][ T1561]  __send_signal_locked+0x19d/0xb70
[   51.161366][ T1561]  send_signal_locked+0x416/0x580
[   51.166421][ T1561]  force_sig_info_to_task+0x2e5/0x3b0
[   51.171825][ T1561]  force_sig_fault+0xd9/0x130
[   51.176536][ T1561]  ? __cfi_force_sig_fault+0x10/0x10
[   51.181857][ T1561]  ? page_fault_oops+0x8b0/0x8b0
[   51.186833][ T1561]  ? down_read_trylock+0x27f/0x660
[   51.191984][ T1561]  ? find_vma+0x89/0xd0
[   51.196195][ T1561]  __bad_area_nosemaphore+0x303/0x630
[   51.201621][ T1561]  bad_area_nosemaphore+0x2d/0x40
[   51.206688][ T1561]  do_user_addr_fault+0xd10/0x1030
[   51.211841][ T1561]  ? debug_smp_processor_id+0x17/0x20
[   51.217252][ T1561]  exc_page_fault+0x51/0xb0
[   51.221779][ T1561]  asm_exc_page_fault+0x27/0x30
[   51.226669][ T1561] RIP: 0033:0x7eff5e388fe1
[   51.231116][ T1561] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 <c5> fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0
[   51.250781][ T1561] RSP: 002b:00007eff5f1b6f48 EFLAGS: 00010283
[   51.256879][ T1561] RAX: 0000000000000000 RBX: 00007eff5f1b7014 RCX: 0000000000000000
[   51.264877][ T1561] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000
[   51.272906][ T1561] RBP: 0000000000000003 R08: 000000000000000f R09: 0000000000000000
[   51.280901][ T1561] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[   51.288899][ T1561] R13: 00007eff5f1b6fb0 R14: 00007eff5e625fa0 R15: 0000000000000000
[   51.296896][ T1561]  </TASK>
[   51.343710][   T28] audit: type=1400 audit(1790708258.208:338): avc:  denied  { write } for  pid=1564 comm="syz.7.486" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   51.395858][  T545] input: HID 045e:00dc as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:00DC.0003/input/input8
[   51.402865][ T1568] kvm [1567]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[   51.439104][ T1568] kvm [1567]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x8000000000000
[   51.496309][  T545] microsoft 0003:045E:00DC.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.4-1/input0
[   51.631922][  T545] usb 5-1: USB disconnect, device number 3
[   51.979804][ T1608] overlayfs: failed to clone upperpath
[   52.057701][ T1615] raw_sendmsg: syz.5.516 forgot to set AF_INET. Fix it!
[   52.203061][   T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   52.369407][ T1626] loop7: detected capacity change from 0 to 40427
[   52.378874][ T1626] F2FS-fs (loop7): Invalid log blocks per segment (1)
[   52.385985][   T39] usb 4-1: Using ep0 maxpacket: 16
[   52.391220][ T1626] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   52.400095][ T1626] F2FS-fs (loop7): fault_type options not supported
[   52.408749][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.419902][ T1626] F2FS-fs (loop7): fault_injection options not supported
[   52.427170][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.437265][ T1626] F2FS-fs (loop7): Image doesn't support compression
[   52.444157][   T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   52.457126][ T1626] F2FS-fs (loop7): invalid crc value
[   52.457561][   T39] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   52.465987][ T1626] F2FS-fs (loop7): Found nat_bits in checkpoint
[   52.471913][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.487377][   T39] usb 4-1: config 0 descriptor??
[   52.519791][ T1626] F2FS-fs (loop7): Start checkpoint disabled!
[   52.526481][ T1626] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[   52.536070][ T1626] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   52.543185][ T1626] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[   52.557312][   T28] audit: type=1400 audit(1790708259.418:339): avc:  denied  { setattr } for  pid=1625 comm="syz.7.509" name=".pending_reads" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   52.558567][ T1626] syz.7.509: attempt to access beyond end of device
[   52.558567][ T1626] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   52.606396][ T1639] loop4: detected capacity change from 0 to 16
[   52.613405][ T1639] erofs: (device loop4): mounted with root inode @ nid 36.
[   52.623891][   T28] audit: type=1400 audit(1790708259.488:340): avc:  denied  { read write } for  pid=1637 comm="syz.4.515" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.661878][   T28] audit: type=1400 audit(1790708259.508:341): avc:  denied  { open } for  pid=1637 comm="syz.4.515" path="/90/bus/file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.701503][  T778] kworker/u4:13: attempt to access beyond end of device
[   52.701503][  T778] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   52.715934][   T28] audit: type=1400 audit(1790708259.508:342): avc:  denied  { setattr } for  pid=1637 comm="syz.4.515" name="#503" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.744309][   T28] audit: type=1400 audit(1790708259.508:343): avc:  denied  { link } for  pid=1637 comm="syz.4.515" name="#503" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.810270][   T28] audit: type=1400 audit(1790708259.518:344): avc:  denied  { unlink } for  pid=287 comm="syz-executor" name="file1" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.895565][   T39] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max
[   52.905410][   T39] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max
[   53.095510][   T39] microsoft 0003:045E:07DA.0004: No inputs registered, leaving
[   53.104400][   T39] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   53.115852][   T39] microsoft 0003:045E:07DA.0004: no inputs found
[   53.122202][   T39] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[   53.142119][   T39] usb 4-1: USB disconnect, device number 5
[   53.165784][ T1651] fido_id[1651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   53.255017][ T1650] loop7: detected capacity change from 0 to 131072
[   53.262428][ T1650] F2FS-fs (loop7): invalid crc value
[   53.270380][ T1650] F2FS-fs (loop7): Found nat_bits in checkpoint
[   53.302358][ T1650] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   53.316671][ T1650] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[   53.635766][ T1665] FAULT_INJECTION: forcing a failure.
[   53.635766][ T1665] name failslab, interval 1, probability 0, space 0, times 0
[   53.673003][ T1665] CPU: 0 PID: 1665 Comm: syz.7.534 Not tainted syzkaller #0
[   53.680354][ T1665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   53.691325][ T1665] Call Trace:
[   53.695728][ T1665]  <TASK>
[   53.699764][ T1665]  __dump_stack+0x21/0x24
[   53.705657][ T1665]  dump_stack_lvl+0x110/0x170
[   53.711354][ T1665]  ? __cfi_dump_stack_lvl+0x8/0x8
[   53.716433][ T1665]  dump_stack+0x15/0x24
[   53.720632][ T1665]  should_fail_ex+0x3bf/0x510
[   53.725340][ T1665]  __should_failslab+0xac/0xf0
[   53.730152][ T1665]  should_failslab+0x9/0x20
[   53.734690][ T1665]  __kmem_cache_alloc_node+0x3d/0x2d0
[   53.740096][ T1665]  ? __get_vm_area_node+0x12c/0x360
[   53.745327][ T1665]  ? unwind_get_return_address+0x4d/0x90
[   53.751015][ T1665]  ? __get_vm_area_node+0x12c/0x360
[   53.756360][ T1665]  kmalloc_node_trace+0x26/0xb0
[   53.761246][ T1665]  __get_vm_area_node+0x12c/0x360
[   53.766323][ T1665]  __vmalloc_node_range+0x326/0x1440
[   53.771642][ T1665]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   53.777231][ T1665]  ? avc_has_perm_noaudit+0x390/0x490
[   53.782646][ T1665]  ? __x64_sys_seccomp+0x7b/0x90
[   53.787625][ T1665]  ? __cfi___vmalloc_node_range+0x10/0x10
[   53.793394][ T1665]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   53.798983][ T1665]  __vmalloc+0x79/0x90
[   53.803094][ T1665]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   53.808688][ T1665]  bpf_prog_alloc_no_stats+0x3e/0x3f0
[   53.814101][ T1665]  bpf_prog_alloc+0x21/0x1c0
[   53.818729][ T1665]  bpf_prog_create_from_user+0xa7/0x420
[   53.824309][ T1665]  ? __cfi_seccomp_check_filter+0x10/0x10
[   53.830070][ T1665]  do_seccomp+0x801/0xec0
[   53.834436][ T1665]  ? prctl_set_seccomp+0x60/0x60
[   53.839488][ T1665]  ? __this_cpu_preempt_check+0x13/0x20
[   53.845076][ T1665]  ? xfd_validate_state+0x70/0x150
[   53.850233][ T1665]  ? fpregs_restore_userregs+0x128/0x260
[   53.855899][ T1665]  __x64_sys_seccomp+0x7b/0x90
[   53.860695][ T1665]  x64_sys_call+0x721/0x9a0
[   53.865237][ T1665]  do_syscall_64+0x4c/0xa0
[   53.869682][ T1665]  ? clear_bhb_loop+0x30/0x80
[   53.874378][ T1665]  ? clear_bhb_loop+0x30/0x80
[   53.879081][ T1665]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   53.884988][ T1665] RIP: 0033:0x7f89a1f9e159
[   53.889418][ T1665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.909047][ T1665] RSP: 002b:00007f89a2ef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   53.917579][ T1665] RAX: ffffffffffffffda RBX: 00007f89a2225fa0 RCX: 00007f89a1f9e159
[   53.925594][ T1665] RDX: 0000200000000040 RSI: 000000000000001f RDI: 0000000000000001
[   53.933588][ T1665] RBP: 00007f89a203506b R08: 0000000000000000 R09: 0000000000000000
[   53.941576][ T1665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.949589][ T1665] R13: 00007f89a2226038 R14: 00007f89a2225fa0 R15: 00007ffebc699298
[   53.957602][ T1665]  </TASK>
[   54.067762][ T1681] overlayfs: failed to clone upperpath
[   54.080656][ T1683] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[   54.109332][ T1683] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   54.414427][ T1710] FAULT_INJECTION: forcing a failure.
[   54.414427][ T1710] name failslab, interval 1, probability 0, space 0, times 0
[   54.437193][ T1710] CPU: 0 PID: 1710 Comm: syz.4.544 Not tainted syzkaller #0
[   54.444576][ T1710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   54.454754][ T1710] Call Trace:
[   54.456636][ T1713] overlayfs: failed to clone upperpath
[   54.458056][ T1710]  <TASK>
[   54.458066][ T1710]  __dump_stack+0x21/0x24
[   54.470827][ T1710]  dump_stack_lvl+0x110/0x170
[   54.475524][ T1710]  ? __cfi_dump_stack_lvl+0x8/0x8
[   54.480612][ T1710]  ? kasan_set_track+0x60/0x70
[   54.485397][ T1710]  ? kasan_set_track+0x4b/0x70
[   54.490201][ T1710]  ? kasan_save_alloc_info+0x1f/0x30
[   54.495550][ T1710]  ? __kasan_kmalloc+0x95/0xb0
[   54.500333][ T1710]  dump_stack+0x15/0x24
[   54.504525][ T1710]  should_fail_ex+0x3bf/0x510
[   54.509209][ T1710]  __should_failslab+0xac/0xf0
[   54.514022][ T1710]  should_failslab+0x9/0x20
[   54.518555][ T1710]  kmem_cache_alloc_node+0x42/0x330
[   54.523801][ T1710]  ? alloc_vmap_area+0x184/0x18c0
[   54.528830][ T1710]  alloc_vmap_area+0x184/0x18c0
[   54.533700][ T1710]  ? vm_map_ram+0x930/0x930
[   54.538210][ T1710]  ? __kasan_kmalloc+0x95/0xb0
[   54.542988][ T1710]  ? kmalloc_node_trace+0x3d/0xb0
[   54.548037][ T1710]  __get_vm_area_node+0x160/0x360
[   54.553105][ T1710]  __vmalloc_node_range+0x326/0x1440
[   54.558412][ T1710]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   54.563968][ T1710]  ? avc_has_perm_noaudit+0x390/0x490
[   54.569349][ T1710]  ? __x64_sys_seccomp+0x7b/0x90
[   54.574300][ T1710]  ? __cfi___vmalloc_node_range+0x10/0x10
[   54.580029][ T1710]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   54.585849][ T1710]  __vmalloc+0x79/0x90
[   54.589936][ T1710]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[   54.595500][ T1710]  bpf_prog_alloc_no_stats+0x3e/0x3f0
[   54.600895][ T1710]  bpf_prog_alloc+0x21/0x1c0
[   54.605503][ T1710]  bpf_prog_create_from_user+0xa7/0x420
[   54.611091][ T1710]  ? __cfi_seccomp_check_filter+0x10/0x10
[   54.616829][ T1710]  do_seccomp+0x801/0xec0
[   54.621165][ T1710]  ? prctl_set_seccomp+0x60/0x60
[   54.626137][ T1710]  ? __this_cpu_preempt_check+0x13/0x20
[   54.631693][ T1710]  ? xfd_validate_state+0x70/0x150
[   54.636826][ T1710]  ? fpregs_restore_userregs+0x128/0x260
[   54.642466][ T1710]  __x64_sys_seccomp+0x7b/0x90
[   54.647243][ T1710]  x64_sys_call+0x721/0x9a0
[   54.651755][ T1710]  do_syscall_64+0x4c/0xa0
[   54.656189][ T1710]  ? clear_bhb_loop+0x30/0x80
[   54.660896][ T1710]  ? clear_bhb_loop+0x30/0x80
[   54.665581][ T1710]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   54.671490][ T1710] RIP: 0033:0x7fb87359e159
[   54.675938][ T1710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.695578][ T1710] RSP: 002b:00007fb8743cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[   54.704003][ T1710] RAX: ffffffffffffffda RBX: 00007fb873825fa0 RCX: 00007fb87359e159
[   54.711982][ T1710] RDX: 0000200000000040 RSI: 000000000000001f RDI: 0000000000000001
[   54.719976][ T1710] RBP: 00007fb87363506b R08: 0000000000000000 R09: 0000000000000000
[   54.727953][ T1710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   54.736362][ T1710] R13: 00007fb873826038 R14: 00007fb873825fa0 R15: 00007fff92bc5a88
[   54.744366][ T1710]  </TASK>
[   55.060858][ T1757] loop3: detected capacity change from 0 to 16
[   55.072677][ T1757] erofs: (device loop3): mounted with root inode @ nid 36.
[   55.202432][ T1771] FAULT_INJECTION: forcing a failure.
[   55.202432][ T1771] name failslab, interval 1, probability 0, space 0, times 0
[   55.232077][ T1771] CPU: 0 PID: 1771 Comm: syz.4.569 Not tainted syzkaller #0
[   55.239429][ T1771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   55.249523][ T1771] Call Trace:
[   55.252832][ T1771]  <TASK>
[   55.255791][ T1771]  __dump_stack+0x21/0x24
[   55.260154][ T1771]  dump_stack_lvl+0x110/0x170
[   55.264850][ T1771]  ? __cfi_dump_stack_lvl+0x8/0x8
[   55.269893][ T1771]  ? x64_sys_call+0x767/0x9a0
[   55.274593][ T1771]  dump_stack+0x15/0x24
[   55.278773][ T1771]  should_fail_ex+0x3bf/0x510
[   55.283475][ T1771]  __should_failslab+0xac/0xf0
[   55.288259][ T1771]  should_failslab+0x9/0x20
[   55.292781][ T1771]  __kmem_cache_alloc_node+0x3d/0x2d0
[   55.298172][ T1771]  ? selinux_sk_alloc_security+0x7e/0x1a0
[   55.303920][ T1771]  ? selinux_sk_alloc_security+0x7e/0x1a0
[   55.309658][ T1771]  kmalloc_trace+0x29/0xb0
[   55.314088][ T1771]  selinux_sk_alloc_security+0x7e/0x1a0
[   55.319738][ T1771]  security_sk_alloc+0x83/0xb0
[   55.324524][ T1771]  sk_prot_alloc+0x108/0x320
[   55.329132][ T1771]  sk_alloc+0x3b/0x460
[   55.333220][ T1771]  ? sock_create_lite+0x2f1/0x4f0
[   55.338265][ T1771]  __netlink_kernel_create+0x18c/0x930
[   55.343740][ T1771]  ? __cfi___netlink_kernel_create+0x10/0x10
[   55.349735][ T1771]  ? memcpy+0x56/0x70
[   55.353740][ T1771]  rtnetlink_net_init+0xb0/0x140
[   55.358712][ T1771]  ? __cfi_rtnetlink_net_init+0x10/0x10
[   55.364268][ T1771]  ? __cfi_rtnetlink_rcv+0x10/0x10
[   55.369400][ T1771]  ? __cfi_rtnetlink_bind+0x10/0x10
[   55.374637][ T1771]  ? memset+0x35/0x40
[   55.378636][ T1771]  ? __mutex_init+0xcd/0x1a0
[   55.383249][ T1771]  ops_init+0x2ce/0x470
[   55.387420][ T1771]  setup_net+0x4b4/0xcd0
[   55.391691][ T1771]  ? copy_net_ns+0x5c0/0x5c0
[   55.396297][ T1771]  ? __kasan_kmalloc+0x95/0xb0
[   55.401081][ T1771]  ? copy_net_ns+0x185/0x5c0
[   55.405696][ T1771]  copy_net_ns+0x355/0x5c0
[   55.410133][ T1771]  create_new_namespaces+0x3a8/0x660
[   55.415459][ T1771]  unshare_nsproxy_namespaces+0x120/0x170
[   55.421196][ T1771]  ksys_unshare+0x4d5/0x850
[   55.425718][ T1771]  ? __cfi_ksys_unshare+0x10/0x10
[   55.430764][ T1771]  ? fpregs_restore_userregs+0x128/0x260
[   55.436415][ T1771]  __x64_sys_unshare+0x38/0x40
[   55.441211][ T1771]  x64_sys_call+0x767/0x9a0
[   55.445729][ T1771]  do_syscall_64+0x4c/0xa0
[   55.450183][ T1771]  ? clear_bhb_loop+0x30/0x80
[   55.454972][ T1771]  ? clear_bhb_loop+0x30/0x80
[   55.459662][ T1771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   55.465566][ T1771] RIP: 0033:0x7fb87359e159
[   55.469985][ T1771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.490033][ T1771] RSP: 002b:00007fb8743cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   55.498468][ T1771] RAX: ffffffffffffffda RBX: 00007fb873825fa0 RCX: 00007fb87359e159
[   55.506451][ T1771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   55.514437][ T1771] RBP: 00007fb87363506b R08: 0000000000000000 R09: 0000000000000000
[   55.522430][ T1771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.530431][ T1771] R13: 00007fb873826038 R14: 00007fb873825fa0 R15: 00007fff92bc5a88
[   55.538425][ T1771]  </TASK>
[   55.613525][   T28] audit: type=1400 audit(1790708262.478:345): avc:  denied  { accept } for  pid=1780 comm="syz.5.575" path="socket:[22811]" dev="sockfs" ino=22811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   55.650523][ T1777] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[   55.734889][ T1794] bridge0: port 3(vlan2) entered blocking state
[   55.741206][ T1794] bridge0: port 3(vlan2) entered disabled state
[   55.750429][ T1794] device vlan2 entered promiscuous mode
[   55.756747][ T1794] device syz_tun entered promiscuous mode
[   55.762804][ T1794] bridge0: port 3(vlan2) entered blocking state
[   55.769094][ T1794] bridge0: port 3(vlan2) entered forwarding state
[   55.943042][   T39] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   56.123028][   T39] usb 8-1: Using ep0 maxpacket: 16
[   56.129247][   T39] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.140404][   T39] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   56.153221][   T39] usb 8-1: config 0 interface 0 has no altsetting 0
[   56.159826][   T39] usb 8-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00
[   56.168886][   T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.177666][   T39] usb 8-1: config 0 descriptor??
[   56.589568][   T39] input: HID 045e:00dc as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:00DC.0005/input/input10
[   56.665233][   T39] microsoft 0003:045E:00DC.0005: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.7-1/input0
[   56.795053][   T39] usb 8-1: USB disconnect, device number 4
[   57.326565][ T1805] FAULT_INJECTION: forcing a failure.
[   57.326565][ T1805] name failslab, interval 1, probability 0, space 0, times 0
[   57.345356][ T1808] loop7: detected capacity change from 0 to 16
[   57.351219][ T1805] CPU: 0 PID: 1805 Comm: syz.3.583 Not tainted syzkaller #0
[   57.358873][ T1805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   57.362784][ T1808] erofs: (device loop7): mounted with root inode @ nid 36.
[   57.369131][ T1805] Call Trace:
[   57.369139][ T1805]  <TASK>
[   57.369146][ T1805]  __dump_stack+0x21/0x24
[   57.387006][ T1805]  dump_stack_lvl+0x110/0x170
[   57.391740][ T1805]  ? __cfi_dump_stack_lvl+0x8/0x8
[   57.396813][ T1805]  ? __cfi_do_futex+0x10/0x10
[   57.401532][ T1805]  dump_stack+0x15/0x24
[   57.405740][ T1805]  should_fail_ex+0x3bf/0x510
[   57.410630][ T1805]  __should_failslab+0xac/0xf0
[   57.415440][ T1805]  should_failslab+0x9/0x20
[   57.419983][ T1805]  __kmem_cache_alloc_node+0x3d/0x2d0
[   57.425403][ T1805]  ? do_epoll_create+0x109/0x350
[   57.430382][ T1805]  ? do_epoll_create+0x109/0x350
[   57.435366][ T1805]  kmalloc_trace+0x29/0xb0
[   57.439816][ T1805]  do_epoll_create+0x109/0x350
[   57.444621][ T1805]  __x64_sys_epoll_create1+0x37/0x40
[   57.449952][ T1805]  x64_sys_call+0x346/0x9a0
[   57.454501][ T1805]  do_syscall_64+0x4c/0xa0
[   57.458967][ T1805]  ? clear_bhb_loop+0x30/0x80
[   57.463690][ T1805]  ? clear_bhb_loop+0x30/0x80
[   57.465857][ T1811] tipc: Started in network mode
[   57.468400][ T1805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   57.468429][ T1805] RIP: 0033:0x7eff5e39e159
[   57.473598][ T1811] tipc: Node identity 1001001, cluster identity 4711
[   57.479269][ T1805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.479291][ T1805] RSP: 002b:00007eff5f1b8028 EFLAGS: 00000246
[   57.486481][ T1811] tipc: Node number set to 16781313
[   57.490387][ T1805]  ORIG_RAX: 0000000000000123
[   57.490398][ T1805] RAX: ffffffffffffffda RBX: 00007eff5e625fa0 RCX: 00007eff5e39e159
[   57.516887][ T1811] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   57.521286][ T1805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[   57.521303][ T1805] RBP: 00007eff5e43506b R08: 0000000000000000 R09: 0000000000000000
[   57.556392][ T1805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.564391][ T1805] R13: 00007eff5e626038 R14: 00007eff5e625fa0 R15: 00007ffc53890a18
[   57.572400][ T1805]  </TASK>
[   57.589834][   T28] audit: type=1400 audit(1790708264.448:346): avc:  denied  { getopt } for  pid=1814 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   57.632665][ T1826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'.
[   57.650286][ T1826] netlink: 165 bytes leftover after parsing attributes in process `syz.2.595'.
[   57.696590][ T1832] netlink: 76 bytes leftover after parsing attributes in process `syz.2.597'.
[   57.706797][ T1832] netlink: 76 bytes leftover after parsing attributes in process `syz.2.597'.
[   57.782595][   T28] audit: type=1326 audit(1790708264.638:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295d9e159 code=0x7ffc0000
[   57.814403][ T1841] SELinux: failed to load policy
[   57.814922][   T28] audit: type=1326 audit(1790708264.638:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295d9e159 code=0x7ffc0000
[   57.845018][   T28] audit: type=1326 audit(1790708264.668:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295d9e159 code=0x7ffc0000
[   57.883546][ T1853] loop3: detected capacity change from 0 to 128
[   57.899006][   T28] audit: type=1326 audit(1790708264.668:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295d9e159 code=0x7ffc0000
[   57.928513][   T28] audit: type=1326 audit(1790708264.668:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8295d9e159 code=0x7ffc0000
[   57.971954][   T28] audit: type=1326 audit(1790708264.668:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295d9e159 code=0x7ffc0000
[   57.975704][ T1853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   58.013901][ T1853] System zones: 1-3, 19-19, 35-36
[   58.019322][   T28] audit: type=1326 audit(1790708264.668:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295d9e159 code=0x7ffc0000
[   58.044410][ T1853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   58.053592][   T28] audit: type=1326 audit(1790708264.668:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.606" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8295d9e159 code=0x7ffc0000
[   58.053858][ T1853] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   58.202223][  T289] EXT4-fs (loop3): unmounting filesystem.
[   58.226842][ T1884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'.
[   58.266764][ T1884] netlink: 165 bytes leftover after parsing attributes in process `syz.3.620'.
[   58.495072][ T1913] loop4: detected capacity change from 0 to 256
[   58.524101][ T1913] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   58.542978][ T1913] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   58.582870][ T1913] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   58.603428][ T1906] loop3: detected capacity change from 0 to 40427
[   58.630108][ T1906] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   58.645903][ T1906] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   58.659192][ T1906] F2FS-fs (loop3): invalid crc value
[   58.681167][ T1906] F2FS-fs (loop3): Found nat_bits in checkpoint
[   58.743053][ T1927] FAULT_INJECTION: forcing a failure.
[   58.743053][ T1927] name failslab, interval 1, probability 0, space 0, times 0
[   58.762561][ T1933] loop7: detected capacity change from 0 to 128
[   58.770263][ T1927] CPU: 1 PID: 1927 Comm: syz.4.638 Not tainted syzkaller #0
[   58.777590][ T1927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   58.787701][ T1927] Call Trace:
[   58.791002][ T1927]  <TASK>
[   58.794030][ T1927]  __dump_stack+0x21/0x24
[   58.798405][ T1927]  dump_stack_lvl+0x110/0x170
[   58.803108][ T1927]  ? __cfi_dump_stack_lvl+0x8/0x8
[   58.808168][ T1927]  dump_stack+0x15/0x24
[   58.812346][ T1927]  should_fail_ex+0x3bf/0x510
[   58.817040][ T1927]  __should_failslab+0xac/0xf0
[   58.821865][ T1927]  should_failslab+0x9/0x20
[   58.826392][ T1927]  __kmem_cache_alloc_node+0x3d/0x2d0
[   58.831789][ T1927]  ? security_prepare_creds+0x4e/0x150
[   58.837286][ T1927]  ? security_prepare_creds+0x4e/0x150
[   58.842779][ T1927]  __kmalloc+0xa4/0x1e0
[   58.846953][ T1927]  security_prepare_creds+0x4e/0x150
[   58.852260][ T1927]  prepare_creds+0x428/0x610
[   58.856868][ T1927]  __se_sys_capset+0x34e/0x780
[   58.861648][ T1927]  ? __se_sys_futex+0x136/0x310
[   58.866518][ T1927]  ? __x64_sys_capset+0x70/0x70
[   58.871422][ T1927]  ? __this_cpu_preempt_check+0x13/0x20
[   58.877005][ T1927]  ? xfd_validate_state+0x70/0x150
[   58.882154][ T1927]  ? fpregs_restore_userregs+0x128/0x260
[   58.887806][ T1927]  __x64_sys_capset+0x5b/0x70
[   58.892511][ T1927]  x64_sys_call+0x48f/0x9a0
[   58.897204][ T1927]  do_syscall_64+0x4c/0xa0
[   58.901648][ T1927]  ? clear_bhb_loop+0x30/0x80
[   58.906349][ T1927]  ? clear_bhb_loop+0x30/0x80
[   58.911076][ T1927]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   58.916996][ T1927] RIP: 0033:0x7fb87359e159
[   58.921448][ T1927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.941075][ T1927] RSP: 002b:00007fb8743cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e
[   58.949508][ T1927] RAX: ffffffffffffffda RBX: 00007fb873825fa0 RCX: 00007fb87359e159
[   58.957489][ T1927] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040
[   58.965537][ T1927] RBP: 00007fb87363506b R08: 0000000000000000 R09: 0000000000000000
[   58.973573][ T1927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.981568][ T1927] R13: 00007fb873826038 R14: 00007fb873825fa0 R15: 00007fff92bc5a88
[   58.989563][ T1927]  </TASK>
[   59.000207][ T1933] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   59.021479][ T1906] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   59.032892][ T1939] input: syz1 as /devices/virtual/input/input11
[   59.040367][ T1906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   59.144222][ T1933] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[   59.163013][ T1933] FAT-fs (loop7): Filesystem has been set read-only
[   59.243269][  T933] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   59.406501][ T1967] ip_tables: iptables: counters copy to user failed while replacing table
[   59.429938][ T1969] fuse: Bad value for 'fd'
[   59.503952][ T1975] overlayfs: failed to clone upperpath
[   59.705253][ T2008] ip_tables: iptables: counters copy to user failed while replacing table
[   59.760663][ T2014] loop7: detected capacity change from 0 to 256
[   59.813021][ T2014] loop7: detected capacity change from 256 to 0
[   59.826442][    C0] I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.835969][ T2014] FAT-fs (loop7): Directory bread(block 3) failed
[   59.842509][    C0] I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.851990][ T2014] FAT-fs (loop7): Directory bread(block 3) failed
[   59.858600][    C1] I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.867895][ T2014] FAT-fs (loop7): Directory bread(block 3) failed
[   59.892013][    C0] I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.903114][  T933] FAT-fs (loop7): Directory bread(block 3) failed
[   59.941613][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   59.956325][  T933] FAT-fs (loop7): unable to read boot sector to mark fs as dirty
[   59.967392][ T2029] netlink: 'syz.2.671': attribute type 4 has an invalid length.
[   59.993004][ T2029] netlink: 'syz.2.671': attribute type 4 has an invalid length.
[   60.025550][  T771] tipc: Disabling bearer <udp:syz2>
[   60.033151][  T771] tipc: Left network mode
[   60.428316][ T2038] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.442725][ T2038] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.465086][ T2038] device bridge_slave_0 entered promiscuous mode
[   60.490412][ T2038] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.515732][ T2038] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.547328][ T2038] device bridge_slave_1 entered promiscuous mode
[   60.558850][  T771] device bridge_slave_1 left promiscuous mode
[   60.567301][  T771] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.583606][  T771] device bridge_slave_0 left promiscuous mode
[   60.590171][  T771] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.603326][  T771] device veth1_macvtap left promiscuous mode
[   60.611153][  T771] device veth0_vlan left promiscuous mode
[   60.749899][ T2061] device batadv_slave_0 entered promiscuous mode
[   60.756588][ T2063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'.
[   60.765855][ T2063] netlink: 15 bytes leftover after parsing attributes in process `syz.4.688'.
[   60.875382][ T2060] device batadv_slave_0 left promiscuous mode
[   60.929094][ T2038] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.936196][ T2038] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.943495][ T2038] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.950533][ T2038] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.000673][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.011333][  T782] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.019519][  T782] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.051727][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.073730][  T782] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.080797][  T782] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.113142][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.121399][  T782] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.128473][  T782] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.163693][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.183098][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.201100][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.217261][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.225869][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.233701][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.241400][ T2038] device veth0_vlan entered promiscuous mode
[   61.259075][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.275522][ T2038] device veth1_macvtap entered promiscuous mode
[   61.291986][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.307142][  T782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.376895][ T2107] SELinux: failed to load policy
[   61.596992][ T2120] netlink: 40 bytes leftover after parsing attributes in process `syz.8.708'.
[   61.668686][ T2091] loop4: detected capacity change from 0 to 131072
[   61.699484][ T2091] F2FS-fs (loop4): Test dummy encryption mode enabled
[   61.714474][ T2091] F2FS-fs (loop4): invalid crc value
[   61.748291][ T2091] F2FS-fs (loop4): Found nat_bits in checkpoint
[   61.817514][ T2091] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   61.875749][ T2155] loop3: detected capacity change from 0 to 512
[   61.910970][ T2153] tipc: Resetting bearer <eth:syz_tun>
[   61.918540][ T2155] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.723: iget: bad i_size value: 38620345925642
[   61.949890][ T2155] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.723: couldn't read orphan inode 15 (err -117)
[   61.970993][ T2091] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   61.979904][ T2155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   61.988982][ T2153] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.996233][ T2153] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.036507][ T2091] syz.4.700 (2091) used greatest stack depth: 21216 bytes left
[   62.065745][ T2155] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.723: bg 0: block 5: invalid block bitmap
[   62.086249][ T2155] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 30 with max blocks 484 with error 28
[   62.098956][ T2155] EXT4-fs (loop3): This should not happen!! Data will be lost
[   62.098956][ T2155] 
[   62.108788][ T2155] EXT4-fs (loop3): Total free blocks count 0
[   62.125071][ T2155] EXT4-fs (loop3): Free/Dirty block details
[   62.136667][ T2155] EXT4-fs (loop3): free_blocks=0
[   62.143233][ T2171] netlink: 27 bytes leftover after parsing attributes in process `syz.5.731'.
[   62.157831][ T2155] EXT4-fs (loop3): dirty_blocks=485
[   62.167943][ T2155] EXT4-fs (loop3): Block reservation details
[   62.192721][ T2155] EXT4-fs (loop3): i_reserved_data_blocks=485
[   62.270096][  T771] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[   62.284485][ T2177] overlayfs: failed to clone upperpath
[   62.375772][ T2186] loop3: detected capacity change from 0 to 256
[   62.417952][ T2186] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   62.443015][ T2186] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   62.463349][ T2186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   62.791241][ T2226] loop3: detected capacity change from 0 to 512
[   62.832532][ T2226] EXT4-fs (loop3): 1 truncate cleaned up
[   62.852833][ T2226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   62.874943][ T2226] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.756: bg 0: block 465: padding at end of block bitmap is not set
[   62.910981][ T2226] EXT4-fs (loop3): Remounting filesystem read-only
[   62.917780][ T2226] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   62.933188][ T2226] EXT4-fs (loop3): Remounting filesystem read-only
[   62.947578][ T2226] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.756: invalid indirect mapped block 234881024 (level 0)
[   62.979076][ T2226] EXT4-fs (loop3): Remounting filesystem read-only
[   63.029421][  T289] EXT4-fs (loop3): unmounting filesystem.
[   63.274643][ T2255] loop4: detected capacity change from 0 to 512
[   63.282734][ T2255] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   63.323025][    T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   63.513023][    T6] usb 4-1: Using ep0 maxpacket: 32
[   63.519441][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.530487][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.546707][    T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   63.556755][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.575923][    T6] usb 4-1: config 0 descriptor??
[   63.592130][    T6] hub 4-1:0.0: USB hub found
[   63.783017][    T6] hub 4-1:0.0: 1 port detected
[   64.009895][ T2289] ./dev/sda1: Can't open blockdev
[   64.388665][    T6] hub 4-1:0.0: activate --> -90
[   64.748790][ T2309] loop4: detected capacity change from 0 to 131072
[   64.763885][ T2309] F2FS-fs (loop4): invalid crc value
[   64.793966][    T6] usb 4-1-port1: config error
[   64.798426][  T561] usb 4-1: USB disconnect, device number 6
[   64.806681][ T2309] F2FS-fs (loop4): Found nat_bits in checkpoint
[   64.850097][ T2309] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   65.212247][ T2326] tipc: Started in network mode
[   65.219964][ T2326] tipc: Node identity 1, cluster identity 4711
[   65.231951][ T2326] tipc: Node number set to 1
[   65.256788][ T2326] tipc: New replicast peer: 127.0.0.2
[   65.264096][ T2326] tipc: Enabled bearer <udp:syz0>, priority 10
[   65.275784][ T2326] tipc: Disabling bearer <udp:syz0>
[   65.295640][ T2334] loop4: detected capacity change from 0 to 16
[   65.343456][ T2334] erofs: (device loop4): mounted with root inode @ nid 36.
[   65.368478][ T2334] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[   65.387683][ T2334] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[   65.403912][ T2334] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[   65.420759][ T2334] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[   65.430217][   T28] kauditd_printk_skb: 54 callbacks suppressed
[   65.430231][   T28] audit: type=1400 audit(1790708272.298:409): avc:  denied  { rmdir } for  pid=2333 comm="syz.4.800" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.491990][ T2357] loop4: detected capacity change from 0 to 512
[   65.535517][ T2357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   65.545831][ T2357] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.560983][ T2357] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   65.576812][ T2357] EXT4-fs (loop4): Remounting filesystem read-only
[   65.592597][  T287] EXT4-fs (loop4): unmounting filesystem.
[   65.660364][   T28] audit: type=1400 audit(1790708272.518:410): avc:  denied  { read } for  pid=2371 comm="syz.3.818" path="socket:[25839]" dev="sockfs" ino=25839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   65.711550][   T28] audit: type=1400 audit(1790708272.568:411): avc:  denied  { shutdown } for  pid=2371 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   65.809545][ T2380] 9pnet: p9_errstr2errno: server reported unknown error 0x0
[   65.844099][ T2396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.827'.
[   65.879546][ T2408] loop4: detected capacity change from 0 to 16
[   65.890060][ T2408] erofs: (device loop4): mounted with root inode @ nid 36.
[   65.898504][ T2410] overlayfs: failed to clone upperpath
[   65.901462][ T2408] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89
[   65.913466][ T2408] syz.4.832: attempt to access beyond end of device
[   65.913466][ T2408] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[   65.931721][ T2408] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89
[   65.941493][   T28] audit: type=1400 audit(1790708272.788:412): avc:  denied  { execute } for  pid=2407 comm="syz.4.832" path="/152/file0/file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   65.965076][ T2408] erofs: (device loop4): z_erofs_readahead: readahead error at page 17 @ nid 89
[   65.974185][ T2408] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89
[   65.984001][ T2408] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 89
[   65.993186][ T2408] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89
[   66.002309][ T2408] syz.4.832: attempt to access beyond end of device
[   66.002309][ T2408] loop4: rw=524288, sector=96, nr_sectors = 40 limit=16
[   66.015846][ T2408] syz.4.832: attempt to access beyond end of device
[   66.015846][ T2408] loop4: rw=524288, sector=16, nr_sectors = 72 limit=16
[   66.029698][ T2408] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   66.038268][ T2408] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   66.046731][ T2408] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   66.055192][ T2408] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   66.113804][ T2428] device veth2 entered promiscuous mode
[   66.142933][ T2426] loop3: detected capacity change from 0 to 8192
[   66.150456][ T2426] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.294093][ T2443] netlink: 160 bytes leftover after parsing attributes in process `syz.3.849'.
[   66.316444][   T28] audit: type=1400 audit(1790708273.178:413): avc:  denied  { mount } for  pid=2444 comm="syz.3.850" name="/" dev="ramfs" ino=25943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   66.423128][  T561] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   66.614321][  T561] usb 5-1: unable to get BOS descriptor or descriptor too short
[   66.622841][  T561] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   66.635554][  T561] usb 5-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40
[   66.644635][  T561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.652739][  T561] usb 5-1: Product: syz
[   66.656945][  T561] usb 5-1: Manufacturer: syz
[   66.661573][  T561] usb 5-1: SerialNumber: syz
[   66.722987][    T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   66.871535][  T561] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[   66.883928][  T561] snd-usb-audio: probe of 5-1:1.1 failed with error -2
[   66.904318][  T561] snd-usb-audio: probe of 5-1:1.2 failed with error -2
[   66.912287][  T561] usb 5-1: USB disconnect, device number 4
[   66.919147][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.940177][    T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.963246][    T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   66.982070][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.000413][    T6] usb 4-1: Product: syz
[   67.004878][    T6] usb 4-1: Manufacturer: syz
[   67.009495][    T6] usb 4-1: SerialNumber: syz
[   67.031357][    T6] cdc_mbim 4-1:1.0: skipping garbage
[   67.060400][ T2476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'.
[   67.089683][ T2480] overlayfs: failed to clone lowerpath
[   67.096939][ T2480] fuse: Bad value for 'fd'
[   67.123456][ T1188] udevd[1188]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   67.464541][ T2519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'.
[   67.474718][ T2519] netlink: 240 bytes leftover after parsing attributes in process `syz.2.884'.
[   67.588947][ T2536] tipc: Started in network mode
[   67.593902][ T2536] tipc: Node identity 1000001, cluster identity 4711
[   67.600594][ T2536] tipc: Node number set to 16777217
[   67.622193][   T28] audit: type=1400 audit(1790708274.478:414): avc:  denied  { bind } for  pid=2540 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   67.653420][   T28] audit: type=1400 audit(1790708274.508:415): avc:  denied  { listen } for  pid=2540 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   67.757401][ T2554] loop4: detected capacity change from 0 to 512
[   67.763203][ T2556] bridge0: port 3(vlan2) entered blocking state
[   67.771472][ T2556] bridge0: port 3(vlan2) entered disabled state
[   67.779007][ T2556] device vlan2 entered promiscuous mode
[   67.785013][ T2556] device syz_tun entered promiscuous mode
[   67.790952][ T2556] bridge0: port 3(vlan2) entered blocking state
[   67.797274][ T2556] bridge0: port 3(vlan2) entered forwarding state
[   67.805215][ T2554] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.901: Invalid block bitmap block 0 in block_group 0
[   67.825331][ T2554] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   67.834604][ T2554] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.901: attempt to clear invalid blocks 983261 len 1
[   67.849212][ T2554] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.901: invalid indirect mapped block 2683928664 (level 0)
[   67.863462][ T2554] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.901: Invalid inode table block 0 in block_group 0
[   67.876866][ T2554] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   67.886931][ T2554] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   67.895967][ T2554] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.901: Invalid inode table block 0 in block_group 0
[   67.908931][ T2554] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   67.918769][ T2554] EXT4-fs error (device loop4): ext4_truncate:4327: inode #13: comm syz.4.901: mark_inode_dirty error
[   67.930196][ T2554] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   67.939439][ T2554] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.901: Invalid inode table block 0 in block_group 0
[   67.952624][ T2554] EXT4-fs (loop4): 1 truncate cleaned up
[   67.958480][ T2554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   67.978022][  T287] EXT4-fs (loop4): unmounting filesystem.
[   67.998914][   T28] audit: type=1400 audit(1790708274.858:416): avc:  denied  { read write } for  pid=2564 comm="syz.4.904" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   68.034836][  T561] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   68.047397][   T28] audit: type=1400 audit(1790708274.888:417): avc:  denied  { open } for  pid=2564 comm="syz.4.904" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   68.057923][  T561] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   68.071549][    T6] cdc_mbim 4-1:1.0: bind() failure
[   68.092107][    T6] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   68.099214][    T6] cdc_ncm 4-1:1.1: bind() failure
[   68.321450][    T6] usb 4-1: USB disconnect, device number 7
[   68.329858][ T2574] loop4: detected capacity change from 0 to 256
[   68.337497][ T2575] netlink: 'syz.8.907': attribute type 4 has an invalid length.
[   68.348907][ T2575] netlink: 'syz.8.907': attribute type 4 has an invalid length.
[   68.361713][ T2574] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   68.394486][ T2574] syz.4.908: attempt to access beyond end of device
[   68.394486][ T2574] loop4: rw=0, sector=98487, nr_sectors = 1 limit=256
[   68.484823][ T2590] loop4: detected capacity change from 0 to 2048
[   68.539332][ T2590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   68.563640][ T2590] EXT4-fs (loop4): shut down requested (2)
[   68.569962][   T28] audit: type=1400 audit(1790708275.428:418): avc:  denied  { read } for  pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   68.598801][  T287] EXT4-fs (loop4): unmounting filesystem.
[   69.217168][ T2653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'.
[   69.227110][ T2653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'.
[   69.360234][ T2657] syz.3.937 (2657) used greatest stack depth: 21096 bytes left
[   69.582061][ T2688] loop3: detected capacity change from 0 to 40427
[   69.596990][ T2688] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   69.608834][ T2688] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   69.617896][ T2688] F2FS-fs (loop3): invalid crc value
[   69.636754][ T2688] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   69.653272][ T2715] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   69.690373][ T2688] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   69.697518][ T2688] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   69.723184][ T2726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.957'.
[   69.825429][ T2731] overlayfs: failed to clone upperpath
[   69.841701][ T2733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.960'.
[   70.003005][   T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   70.182981][   T39] usb 5-1: Using ep0 maxpacket: 32
[   70.189325][   T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.200804][   T39] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   70.214275][   T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   70.223717][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.239106][  T289] syz-executor: attempt to access beyond end of device
[   70.239106][  T289] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   70.243512][   T39] usb 5-1: config 0 descriptor??
[   70.265111][ T2758] xt_hashlimit: size too large, truncated to 1048576
[   70.273468][   T39] hub 5-1:0.0: bad descriptor, ignoring hub
[   70.283911][   T39] hub: probe of 5-1:0.0 failed with error -5
[   70.291879][   T39] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   70.457827][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   70.457843][   T28] audit: type=1400 audit(1790708277.318:427): avc:  denied  { listen } for  pid=2764 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.511576][   T28] audit: type=1400 audit(1790708277.348:428): avc:  denied  { connect } for  pid=2764 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.676016][ T2782] fuse: Bad value for 'fd'
[   70.700882][ T2786] input: syz1 as /devices/virtual/input/input12
[   70.739195][ T2791] overlayfs: failed to resolve './file0': -2
[   70.878683][   T28] audit: type=1400 audit(1790708277.738:429): avc:  denied  { ioctl } for  pid=2814 comm="syz.3.993" path="socket:[25571]" dev="sockfs" ino=25571 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   70.904453][ T2684] Bluetooth: hci0: Frame reassembly failed (-84)
[   70.984999][ T2826] netlink: 'syz.8.997': attribute type 1 has an invalid length.
[   71.486629][   T28] audit: type=1326 audit(1790708278.348:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.8.1015" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f449639e159 code=0x0
[   71.929807][ T2883] overlayfs: failed to clone upperpath
[   71.954905][ T2887] tipc: New replicast peer: 127.0.0.2
[   71.960504][ T2887] tipc: Enabled bearer <udp:syz0>, priority 10
[   71.967751][ T2887] tipc: Disabling bearer <udp:syz0>
[   71.988388][ T2891] device gretap1 entered promiscuous mode
[   72.774310][ T2928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'.
[   72.798239][ T2928] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   72.863094][  T550] usb 5-1: USB disconnect, device number 5
[   72.912994][ T2816] Bluetooth: hci0: command 0x1003 tx timeout
[   72.913006][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   72.925825][ T2815] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   73.144136][   T28] audit: type=1400 audit(1790708280.008:431): avc:  denied  { ioctl } for  pid=2951 comm="syz.2.1047" path="socket:[27788]" dev="sockfs" ino=27788 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.196878][ T2944] loop3: detected capacity change from 0 to 40427
[   73.216140][ T2944] F2FS-fs (loop3): invalid crc value
[   73.228478][ T2944] F2FS-fs (loop3): Found nat_bits in checkpoint
[   73.298035][ T2944] F2FS-fs (loop3): Start checkpoint disabled!
[   73.304763][ T2944] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   73.316534][ T2944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   73.365717][   T28] audit: type=1400 audit(1790708280.228:432): avc:  denied  { remount } for  pid=2960 comm="syz.5.1051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   73.709116][ T2988] device batadv_slave_0 entered promiscuous mode
[   73.737039][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   73.768762][ T2988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1063'.
[   73.781105][ T2988] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1063'.
[   73.835484][ T2992] loop4: detected capacity change from 0 to 16
[   73.856143][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   73.862476][ T2992] erofs: (device loop4): mounted with root inode @ nid 36.
[   73.871340][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.892799][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   73.915850][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.933710][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.949661][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.961602][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.974524][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.988255][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[   73.999646][  T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[   74.011829][  T550] ==================================================================
[   74.019938][  T550] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[   74.027034][  T550] Write of size 8 at addr ffff8881304d4a00 by task kworker/0:7/550
[   74.034941][  T550] 
[   74.037284][  T550] CPU: 0 PID: 550 Comm: kworker/0:7 Not tainted syzkaller #0
[   74.044672][  T550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   74.054778][  T550] Workqueue: ipv6_addrconf addrconf_dad_work
[   74.060818][  T550] Call Trace:
[   74.064114][  T550]  <TASK>
[   74.067064][  T550]  __dump_stack+0x21/0x24
[   74.071418][  T550]  dump_stack_lvl+0x110/0x170
[   74.076128][  T550]  ? __cfi_dump_stack_lvl+0x8/0x8
[   74.081188][  T550]  ? __cfi__printk+0x8/0x8
[   74.085626][  T550]  ? enqueue_timer+0xae/0x480
[   74.090330][  T550]  print_address_description+0x71/0x200
[   74.095913][  T550]  print_report+0x4a/0x60
[   74.100260][  T550]  kasan_report+0x122/0x150
[   74.104785][  T550]  ? enqueue_timer+0xae/0x480
[   74.109494][  T550]  __asan_report_store8_noabort+0x17/0x20
[   74.115245][  T550]  enqueue_timer+0xae/0x480
[   74.119796][  T550]  ? detach_if_pending+0xf5/0x300
[   74.124852][  T550]  __mod_timer+0x859/0xc00
[   74.129296][  T550]  ? memset+0x35/0x40
[   74.133317][  T550]  add_timer+0x68/0x80
[   74.137410][  T550]  __queue_delayed_work+0x173/0x200
[   74.142633][  T550]  mod_delayed_work_on+0x74/0xe0
[   74.147593][  T550]  addrconf_mod_dad_work+0x7d/0x120
[   74.152814][  T550]  addrconf_dad_kick+0x278/0x370
[   74.157788][  T550]  ? __kasan_check_write+0x14/0x20
[   74.162928][  T550]  ? addrconf_dad_completed+0xe80/0xe80
[   74.168504][  T550]  addrconf_dad_work+0xb54/0x14a0
[   74.173565][  T550]  ? __cfi_addrconf_dad_work+0x10/0x10
[   74.179054][  T550]  ? pwq_activate_inactive_work+0x2ea/0x3f0
[   74.184991][  T550]  process_one_work+0x717/0xc30
[   74.189873][  T550]  worker_thread+0xa4d/0x11d0
[   74.194590][  T550]  kthread+0x281/0x320
[   74.198688][  T550]  ? __cfi_worker_thread+0x10/0x10
[   74.203829][  T550]  ? __cfi_kthread+0x10/0x10
[   74.208446][  T550]  ret_from_fork+0x1f/0x30
[   74.212897][  T550]  </TASK>
[   74.215955][  T550] 
[   74.218300][  T550] Allocated by task 2815:
[   74.222634][  T550]  kasan_set_track+0x4b/0x70
[   74.227252][  T550]  kasan_save_alloc_info+0x1f/0x30
[   74.232393][  T550]  __kasan_kmalloc+0x95/0xb0
[   74.237024][  T550]  __kmalloc+0xb4/0x1e0
[   74.241196][  T550]  hci_alloc_dev_priv+0x27/0x1bd0
[   74.246263][  T550]  hci_uart_tty_ioctl+0x3c4/0xa70
[   74.251309][  T550]  tty_ioctl+0x8ef/0xc60
[   74.255670][  T550]  __se_sys_ioctl+0x12f/0x1b0
[   74.260370][  T550]  __x64_sys_ioctl+0x7b/0x90
[   74.264988][  T550]  x64_sys_call+0x58b/0x9a0
[   74.269521][  T550]  do_syscall_64+0x4c/0xa0
[   74.273960][  T550]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   74.279884][  T550] 
[   74.282221][  T550] Freed by task 2815:
[   74.286222][  T550]  kasan_set_track+0x4b/0x70
[   74.290844][  T550]  kasan_save_free_info+0x2b/0x40
[   74.295895][  T550]  ____kasan_slab_free+0x132/0x180
[   74.301040][  T550]  __kasan_slab_free+0x11/0x20
[   74.305839][  T550]  slab_free_freelist_hook+0xc2/0x190
[   74.311232][  T550]  __kmem_cache_free+0xb7/0x1b0
[   74.316120][  T550]  kfree+0x6f/0xf0
[   74.319867][  T550]  hci_release_dev+0x12a3/0x13b0
[   74.324829][  T550]  bt_host_release+0x82/0x90
[   74.329440][  T550]  device_release+0xa4/0x1d0
[   74.334055][  T550]  kobject_put+0x19d/0x280
[   74.338499][  T550]  put_device+0x1f/0x30
[   74.342694][  T550]  hci_dev_cmd+0x279/0x740
[   74.347144][  T550]  hci_sock_ioctl+0x41e/0x7f0
[   74.351859][  T550]  sock_do_ioctl+0x114/0x330
[   74.356474][  T550]  sock_ioctl+0x475/0x700
[   74.360817][  T550]  __se_sys_ioctl+0x12f/0x1b0
[   74.365506][  T550]  __x64_sys_ioctl+0x7b/0x90
[   74.370118][  T550]  x64_sys_call+0x58b/0x9a0
[   74.374633][  T550]  do_syscall_64+0x4c/0xa0
[   74.379083][  T550]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   74.384995][  T550] 
[   74.387335][  T550] Last potentially related work creation:
[   74.393064][  T550]  kasan_save_stack+0x3a/0x60
[   74.397767][  T550]  __kasan_record_aux_stack+0xb6/0xc0
[   74.403156][  T550]  kasan_record_aux_stack_noalloc+0xb/0x10
[   74.408986][  T550]  insert_work+0x51/0x300
[   74.413351][  T550]  __queue_work+0x9d0/0xd50
[   74.417876][  T550]  queue_work_on+0xde/0x150
[   74.422399][  T550]  __hci_cmd_sync_sk+0xaa8/0xd80
[   74.427359][  T550]  hci_cmd_sync_status+0x53/0x120
[   74.432408][  T550]  hci_dev_cmd+0x642/0x740
[   74.436856][  T550]  hci_sock_ioctl+0x41e/0x7f0
[   74.441559][  T550]  sock_do_ioctl+0x114/0x330
[   74.446270][  T550]  sock_ioctl+0x475/0x700
[   74.450642][  T550]  __se_sys_ioctl+0x12f/0x1b0
[   74.455343][  T550]  __x64_sys_ioctl+0x7b/0x90
[   74.459967][  T550]  x64_sys_call+0x58b/0x9a0
[   74.460458][ T2994] SELinux: failed to load policy
[   74.464487][  T550]  do_syscall_64+0x4c/0xa0
[   74.464525][  T550]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   74.464545][  T550] 
[   74.464548][  T550] Second to last potentially related work creation:
[   74.464555][  T550]  kasan_save_stack+0x3a/0x60
[   74.464579][  T550]  __kasan_record_aux_stack+0xb6/0xc0
[   74.498870][  T550]  kasan_record_aux_stack_noalloc+0xb/0x10
[   74.504693][  T550]  insert_work+0x51/0x300
[   74.509049][  T550]  __queue_work+0x9d0/0xd50
[   74.513577][  T550]  queue_work_on+0xde/0x150
[   74.518131][  T550]  hci_cmd_timeout+0x191/0x200
[   74.522924][  T550]  process_one_work+0x717/0xc30
[   74.527795][  T550]  worker_thread+0xa4d/0x11d0
[   74.532494][  T550]  kthread+0x281/0x320
[   74.536590][  T550]  ret_from_fork+0x1f/0x30
[   74.541026][  T550] 
[   74.543358][  T550] The buggy address belongs to the object at ffff8881304d4000
[   74.543358][  T550]  which belongs to the cache kmalloc-8k of size 8192
[   74.557424][  T550] The buggy address is located 2560 bytes inside of
[   74.557424][  T550]  8192-byte region [ffff8881304d4000, ffff8881304d6000)
[   74.570992][  T550] 
[   74.573335][  T550] The buggy address belongs to the physical page:
[   74.579760][  T550] page:ffffea0004c13400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1304d0
[   74.590021][  T550] head:ffffea0004c13400 order:3 compound_mapcount:0 compound_pincount:0
[   74.598360][  T550] flags: 0x4000000000010200(slab|head|zone=1)
[   74.604460][  T550] raw: 4000000000010200 ffffea00043f5e00 dead000000000003 ffff888100043500
[   74.613084][  T550] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[   74.621685][  T550] page dumped because: kasan: bad access detected
[   74.628137][  T550] page_owner tracks the page as allocated
[   74.633866][  T550] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, tgid 286 (syz-executor), ts 23369474134, free_ts 0
[   74.656033][  T550]  post_alloc_hook+0x1f5/0x210
[   74.660841][  T550]  prep_new_page+0x1c/0x110
[   74.665382][  T550]  get_page_from_freelist+0x2ca9/0x2d20
[   74.670951][  T550]  __alloc_pages+0x1fa/0x610
[   74.675560][  T550]  alloc_slab_page+0x6e/0xf0
[   74.680161][  T550]  new_slab+0x98/0x3e0
[   74.684232][  T550]  ___slab_alloc+0x70f/0xb70
[   74.688836][  T550]  __slab_alloc+0x5e/0xa0
[   74.693178][  T550]  __kmem_cache_alloc_node+0x204/0x2d0
[   74.698652][  T550]  __kmalloc_node+0xa2/0x1e0
[   74.703260][  T550]  kvmalloc_node+0x28a/0x460
[   74.707855][  T550]  alloc_netdev_mqs+0x8d/0xfb0
[   74.712628][  T550]  rtnl_create_link+0x304/0xaf0
[   74.717489][  T550]  rtnl_newlink+0x13e1/0x20d0
[   74.722270][  T550]  rtnetlink_rcv_msg+0xb28/0xde0
[   74.727300][  T550]  netlink_rcv_skb+0x200/0x450
[   74.732073][  T550] page_owner free stack trace missing
[   74.737441][  T550] 
[   74.739773][  T550] Memory state around the buggy address:
[   74.745406][  T550]  ffff8881304d4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.753477][  T550]  ffff8881304d4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.761542][  T550] >ffff8881304d4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.769601][  T550]                    ^
[   74.773668][  T550]  ffff8881304d4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.781752][  T550]  ffff8881304d4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.789927][  T550] ==================================================================
[   74.798027][  T550] Disabling lock debugging due to kernel taint
[   74.842855][ T2987] device batadv_slave_0 left promiscuous mode
[   74.993061][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[   75.004833][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   75.013289][    C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B              syzkaller #0
[   75.021818][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   75.031892][    C0] RIP: 0010:__queue_work+0x582/0xd50
[   75.037213][    C0] Code: b4 00 00 00 e8 7f 56 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 7d 6a b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 70 e1 6e 00 49 8b 3e e8 18 66 b9 03
[   75.056854][    C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
[   75.062943][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff8701c680
[   75.070934][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   75.078930][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb
[   75.086920][    C0] R10: dffffc0000000000 R11: ffffed102609a939 R12: ffff8881304d49c8
[   75.095078][    C0] R13: ffff88811951d000 R14: 0000000000000000 R15: 000000007fffffff
[   75.103089][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   75.112045][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.118665][    C0] CR2: 00002000002e5000 CR3: 0000000115335000 CR4: 00000000003506b0
[   75.126662][    C0] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000
[   75.134656][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   75.142672][    C0] Call Trace:
[   75.145959][    C0]  <IRQ>
[   75.148859][    C0]  delayed_work_timer_fn+0x61/0x80
[   75.154008][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   75.159861][    C0]  call_timer_fn+0x46/0x2a0
[   75.164412][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   75.170259][    C0]  __run_timers+0x672/0x9b0
[   75.174793][    C0]  ? calc_index+0x200/0x200
[   75.179294][    C0]  ? kvm_sched_clock_read+0x18/0x40
[   75.184492][    C0]  run_timer_softirq+0x6a/0xf0
[   75.189250][    C0]  handle_softirqs+0x1d7/0x600
[   75.194102][    C0]  __irq_exit_rcu+0x52/0xf0
[   75.198612][    C0]  irq_exit_rcu+0x9/0x10
[   75.202853][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   75.208496][    C0]  </IRQ>
[   75.211423][    C0]  <TASK>
[   75.214349][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   75.220328][    C0] RIP: 0010:default_idle+0xf/0x20
[   75.225369][    C0] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 03 d9 64 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[   75.244980][    C0] RSP: 0018:ffffffff87007d58 EFLAGS: 00000257
[   75.251041][    C0] RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: 802861975bcba300
[   75.259018][    C0] RDX: 0000000000000001 RSI: ffffffff85ca6e00 RDI: ffffffff85ca6dc0
[   75.266986][    C0] RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916
[   75.274948][    C0] R10: 0000000000000000 R11: ffffffff85015710 R12: dffffc0000000000
[   75.283055][    C0] R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000
[   75.291042][    C0]  ? __cfi_default_idle+0x10/0x10
[   75.296069][    C0]  arch_cpu_idle+0x1c/0x20
[   75.300479][    C0]  default_idle_call+0x71/0x1d0
[   75.305337][    C0]  do_idle+0x354/0x640
[   75.309424][    C0]  ? ct_irq_exit+0x9/0x10
[   75.313757][    C0]  ? irqentry_exit+0x30/0x40
[   75.318363][    C0]  ? idle_inject_timer_fn+0x60/0x60
[   75.323587][    C0]  cpu_startup_entry+0x43/0x60
[   75.328380][    C0]  rest_init+0x10a/0x130
[   75.332642][    C0]  ? __cfi_x86_late_time_init+0x8/0x8
[   75.338026][    C0]  arch_call_rest_init+0xe/0x10
[   75.342890][    C0]  start_kernel+0x483/0x4f1
[   75.347407][    C0]  x86_64_start_reservations+0x2a/0x2c
[   75.352872][    C0]  x86_64_start_kernel+0x7c/0x81
[   75.357824][    C0]  secondary_startup_64_no_verify+0xce/0xdb
[   75.363744][    C0]  </TASK>
[   75.366783][    C0] Modules linked in:
[   75.370704][    C0] ---[ end trace 0000000000000000 ]---
[   75.376165][    C0] RIP: 0010:__queue_work+0x582/0xd50
[   75.381477][    C0] Code: b4 00 00 00 e8 7f 56 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 7d 6a b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 70 e1 6e 00 49 8b 3e e8 18 66 b9 03
[   75.401186][    C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
[   75.407274][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff8701c680
[   75.415258][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   75.423235][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb
[   75.431222][    C0] R10: dffffc0000000000 R11: ffffed102609a939 R12: ffff8881304d49c8
[   75.439214][    C0] R13: ffff88811951d000 R14: 0000000000000000 R15: 000000007fffffff
[   75.447195][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   75.456141][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.462746][    C0] CR2: 00002000002e5000 CR3: 0000000115335000 CR4: 00000000003506b0
[   75.470739][    C0] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000
[   75.478726][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   75.486714][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[   75.494054][    C0] Kernel Offset: disabled
[   75.498378][    C0] Rebooting in 86400 seconds..