last executing test programs:

27.586011153s ago: executing program 4 (id=1571):
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x70bd2d}, 0x14}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x5, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000640)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/10, 0x2}, 0x20)

27.51624335s ago: executing program 4 (id=1574):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@loopback, @in6=@local, 0x0, 0x8002, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@mcast1, {0x0, 0x4, 0xfffffffffffffffd, 0x8, 0x1, 0x1, 0x1, 0x2000000543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffe}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60}]}, 0x150}}, 0x48080)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x5, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20040840)

27.503045841s ago: executing program 4 (id=1577):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000dc0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

27.440302568s ago: executing program 4 (id=1580):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f00000000c0), 0x3, 0x45c, &(0x7f0000000280)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B")
syz_mount_image$ext4(0x0, &(0x7f0000000c00)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x8, &(0x7f0000000d00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

27.369160264s ago: executing program 4 (id=1586):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000002800)=0x6a, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0x1, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000002880))

27.320380229s ago: executing program 4 (id=1590):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='1c'], 0x31)

27.260213595s ago: executing program 32 (id=1590):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='1c'], 0x31)

19.788614745s ago: executing program 5 (id=1784):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)

19.788334015s ago: executing program 5 (id=1785):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1f, 0xc, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

19.788163615s ago: executing program 5 (id=1786):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000))
syz_emit_ethernet(0x46, &(0x7f00000006c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x67, 0x7f2, 0x48, 0x1, 0xffe0, @rand_addr=0x64010102, @private=0xa010102}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)

19.773508977s ago: executing program 5 (id=1789):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2800000, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})

19.056632908s ago: executing program 5 (id=1809):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0x40, 0x6, 0x0, 0xffffffffffffffff, 0x8000caff}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@tcp, 0x1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6, 0x2}, 0x20)

18.707012693s ago: executing program 5 (id=1828):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xdc, 0x65, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xb0, 0x2, [@TCA_BPF_ACT={0xac, 0x1, [@m_bpf={0xa8, 0x11, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x599, 0x20000000, 0x93e9, 0x1}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xbd, 0x1, 0x9}]}]}, {0x4d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

18.624847102s ago: executing program 33 (id=1828):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xdc, 0x65, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xb0, 0x2, [@TCA_BPF_ACT={0xac, 0x1, [@m_bpf={0xa8, 0x11, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x599, 0x20000000, 0x93e9, 0x1}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xbd, 0x1, 0x9}]}]}, {0x4d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.718423587s ago: executing program 0 (id=2046):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2200002, &(0x7f00000002c0)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000980)='a', 0x200000c1, 0x9000)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000c00)={0x0, 0xfffffffffffffffa, 0x3, 0x2})

1.608394098s ago: executing program 6 (id=2049):
r0 = syz_io_uring_setup(0x315b, &(0x7f00000009c0)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000b00)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000b40)={0xffff, r0, 0x1, {0x1, 0x7}, 0x1}, 0x1)

1.550960084s ago: executing program 6 (id=2051):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x6, 0x3, 0x7ffcfff9}]})
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)=':\x00')
sendfile(r0, r0, 0x0, 0x4)

1.474256432s ago: executing program 6 (id=2052):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x1f, 0xaa, 0xc8, r2}, [@IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

1.370043482s ago: executing program 6 (id=2055):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f00000004c0)='./file0\x00', 0x8180d8, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000a00)="$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")
mkdir(&(0x7f0000000c80)='./bus\x00', 0x0)
chdir(&(0x7f0000000cc0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./dev\x00', 0x1ff)

1.369820602s ago: executing program 0 (id=2056):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2208810, &(0x7f00000007c0), 0xfe, 0x572, &(0x7f0000000d80)="$eJzs3V9rm9UfAPDvk6bdn26/dTDGTy+ksAsnc+na+meCF/NSdDjQ+xnarIymy2jSsdaB24W78UaGIOJAfAHeezl8A76KgQ6GjqIX3lSe9EmXNUmbtpnpzOcDac95npOcc/I85+R78iQkgIE1nv7JRbwUEV8lEcea9uUj2zm+Xm71ya2Z9JbE2trHvyeRZNsa5ZPs/2iW+X9E/PxFxJlca73V5ZX5YrlcWszyE7WF6xPV5ZWzVxeKc6W50rWp6enzb05PvfP2Wz3r62uX/vr2owfvn//y1Oo3Pz46fi+JC3Ek29fcjz243ZwZj/HsORmOC5sKTvagsv0k6XcD2JWhbJwPRzoHHIuhbNQD/32fR8QaMKAS4x8GVCMOaKzte7QOfmE8fm99AdTa//z6eyNxsL42OryaPLMySte7Yz2oP63jp9/u30tv0bv3IQC2dftORJzL51vnvySb/3bvXBdlNtexw/lvbYdNApo8SOOf19vFP5WsxMH6383xz2ibsbsb24//3KMeVNNRGv+92zb+3bhoNTaU5Y7WY77h5MrVcimd2/4XEadj+ECa3+p6zvnVhx3nqafx30g9Bkzrb8SCWTse5Q88e5/ZYq24lz43e3wn4uW28W+yEf8mbY5/+nxc6rKOk6X7r3Ta1xz/tu//87X2Q8Sr2fG//cya6OkVrWTr65MT9fNhonFWtPrz7slfOtXfuf9Hn0NvW6XH/3Db83+j/2NJ8/Xa6s7r+P7g36VO+7Y//u3P/5Hkk3p6JNt2s1irLU5GjCQftm6fenrfRr5RPu3/6VPtx/9W5/+hiPi0y/7fPXG3Y9F+n/9p/2d3dPx3nnj4wWffdaq/u+P/Rj11OtvSzfzXbQP38twBAAAAAADAfpOLiCOR5Aob6VyuUFj/fMeJOJwrV6q1M1cqS9dmo/5d2bEYzjWudI82fR5iMvs8bCM/tSk/HRHHI+LroUP1fGGmUp7td+cBAAAAAAAAAAAAAAAAAABgnxjt8P3/1K9D/W4d8Nz5yW8YXNuO/1780hOwL3n9h8Fl/MPgMv5hcBn/MLjySb9bAPSL138YXMY/DC7jHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq0sWL6W1t9cmtmTQ/e2N5ab5y4+xsqTpfWFiaKcxUFq8X5ho/ELKw5YMlf0S5Urk+ORVLNydqpWptorq8cnmhsnStdvnqQnGudLk0/G90CgAAAAAAAAAAAAAAAAAAAF4w1eWV+WK5XFqUkNhVIr8/miGxnmgM7D0/YH/nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9k8AAAD//24dNcY=")
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='.\x00', 0x800, 0x63)
getdents64(r0, &(0x7f0000001380)=""/61, 0x3d)

1.174460612s ago: executing program 6 (id=2061):
setns(0xc9, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000600)=0x64, 0x4)
sendto$inet(r0, &(0x7f0000000700)='\x00'/102, 0x66, 0x0, &(0x7f0000000800)={0x2, 0x1234, @rand_addr=0x64010101}, 0x10)

1.09677971s ago: executing program 6 (id=2064):
syz_mount_image$f2fs(&(0x7f0000005440), &(0x7f0000005480)='./file1\x00', 0x0, &(0x7f00000054c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r0, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./file7\x00', 0x1000)

1.09607032s ago: executing program 0 (id=2068):
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r0, 0x0, 0x15)
r1 = dup(r0)
write$P9_RREAD(r1, 0x0, 0xb)

1.006663268s ago: executing program 0 (id=2072):
ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, 0x0)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x4, &(0x7f0000000380)=ANY=[], 0x5, 0x208, &(0x7f0000000800)="$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")

931.980906ms ago: executing program 3 (id=2074):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = timerfd_create(0x9, 0x0)
timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

913.705068ms ago: executing program 3 (id=2076):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f00000001c0), 0x2000011a)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0x1, 0x4)

770.822422ms ago: executing program 0 (id=2081):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x40000097}]})

724.603537ms ago: executing program 1 (id=2082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001640)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000140)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x5, 0x1, 0x4, 0x3, 0x7}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)

688.105121ms ago: executing program 3 (id=2084):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000001440)={0x79, 0x0, 0x971})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000014c0)={0x2, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffffe, 0x62e98893, 0x9, 0xfffffbff, 0x5}}, {0xd, 0x1, 0x1, 0x0, @irqchip={0x8, 0x6}}]})

678.460381ms ago: executing program 1 (id=2085):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000380), &(0x7f00000003c0)=@udp=r0}, 0x20)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40)

588.5478ms ago: executing program 0 (id=2086):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200841a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x5540, &(0x7f00000067c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0x200c17a)

588.25689ms ago: executing program 1 (id=2087):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

587.93313ms ago: executing program 3 (id=2088):
syz_mount_image$exfat(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='iocharset=maccyrillic,namecase=1,utf8,gid=', @ANYRESHEX=0xee01, @ANYBLOB="000000006f624bf0a3519eea8a3f6953bfaa2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',keep_last_dots,discard,namecase=1,namecase=1,keep_last_dots,discard,keep_last_dots,errors=remount-ro,time_offset=0x0000000000000008,zero_size_dir,errors=remount-ro,rootcontext=system_u,\x00'], 0x1, 0x1542, &(0x7f0000002440)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1c0)
socket$inet6_tcp(0xa, 0x1, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x200)

544.083765ms ago: executing program 1 (id=2090):
setuid(0xee01)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)

470.269582ms ago: executing program 1 (id=2092):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0xfe, 0x59c, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0xc42, 0x65)
pwrite64(r0, &(0x7f0000000980)='2', 0xfdef, 0xc00)
ftruncate(r0, 0x3)

470.080212ms ago: executing program 2 (id=2093):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000001e00)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x2, 0x6, 0x7}}, {0x3, 0x4, 0x0, 0x0, @msi={0x27d, 0x7, 0x10000b, 0x8}}]})

405.901189ms ago: executing program 2 (id=2094):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001d00)={0x8, {{0xa, 0x4e24, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001dc0)={0x9, {{0xa, 0x4e1f, 0x3ff, @mcast2, 0x3ff}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001e80)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff"], 0x90)

363.065573ms ago: executing program 2 (id=2095):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000640)={r2, r1}, 0xc)

271.447853ms ago: executing program 2 (id=2096):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv4_newroute={0x2c, 0x18, 0xed60e250ba39e68f, 0x70bd26, 0x25dfdbfe, {0x2, 0x20, 0x30, 0x8, 0xff, 0x1, 0x0, 0x1, 0x5a20}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x2c}}, 0x2)

271.117233ms ago: executing program 3 (id=2097):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x6b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94)

270.939073ms ago: executing program 2 (id=2098):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x5, 0x10000})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x80000000})

257.131563ms ago: executing program 3 (id=2099):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

217.711947ms ago: executing program 2 (id=2100):
syz_open_dev$tty1(0xc, 0x4, 0x1)
io_setup(0x81, &(0x7f0000000340)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}])

0s ago: executing program 1 (id=2101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001002bbd700002d4df2500000000", @ANYRES32=r2, @ANYBLOB="985e0600c16a01002400128011000100627269646765000000007665000700000c000580"], 0x44}, 0x1, 0x0, 0x0, 0x2400c844}, 0x200088c2)

kernel console output (not intermixed with test programs):

.4.774: attempt to access beyond end of device
[   58.522409][ T2400] loop4: rw=2049, sector=69656, nr_sectors = 8 limit=40427
[   58.539239][ T2400] syz.4.774: attempt to access beyond end of device
[   58.539239][ T2400] loop4: rw=2049, sector=69664, nr_sectors = 8 limit=40427
[   58.569958][ T2470] loop2: detected capacity change from 0 to 512
[   58.577658][  T761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.604588][  T761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.623253][  T761] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   58.634227][ T2470] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.656338][  T761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.670630][  T761] usb 2-1: config 0 descriptor??
[   58.685817][ T2479] loop3: detected capacity change from 0 to 256
[   58.713364][ T2481] loop0: detected capacity change from 0 to 1024
[   58.721174][ T2470] EXT4-fs: Cannot change journaled quota options when quota turned on
[   58.767360][ T2481] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #3: block 1: comm syz.0.805: lblock 1 mapped to illegal pblock 1 (length 1)
[   58.792352][ T2481] __quota_error: 20 callbacks suppressed
[   58.792370][ T2481] Quota error (device loop0): write_blk: dquota write failed
[   58.818894][ T2486] loop2: detected capacity change from 0 to 4096
[   58.829880][ T2481] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   58.840241][ T2481] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.805: Failed to acquire dquot type 0
[   58.844971][ T2486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   58.906185][ T2481] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.805: Freeing blocks not in datazone - block = 0, count = 4096
[   58.919542][ T2486] EXT4-fs (loop2): Test dummy encryption mode enabled
[   58.926753][ T2481] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.805: Invalid inode bitmap blk 0 in block_group 0
[   58.950370][   T43] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   58.967836][ T2481] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[   58.981852][   T43] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   58.995269][ T2481] EXT4-fs (loop0): 1 orphan inode deleted
[   59.004912][   T43] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0
[   59.085355][  T761] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0
[   59.102157][  T761] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0
[   59.109808][  T761] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0
[   59.117388][  T761] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0
[   59.124967][  T761] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0
[   59.133531][  T761] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[   59.155821][ T2491] loop3: detected capacity change from 0 to 40427
[   59.172266][ T2491] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   59.214504][ T2491] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   59.235355][ T2491] F2FS-fs (loop3): Image doesn't support compression
[   59.247421][ T2491] F2FS-fs (loop3): Image doesn't support compression
[   59.257368][ T2491] F2FS-fs (loop3): invalid crc value
[   59.263674][ T2491] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   59.313638][ T2510] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   59.340735][ T2510] EXT4-fs (loop2): Test dummy encryption mode enabled
[   59.351947][  T761] usb 2-1: USB disconnect, device number 3
[   59.365850][ T2524] netlink: 9 bytes leftover after parsing attributes in process `syz.0.822'.
[   59.368141][ T2491] F2FS-fs (loop3): checkpoint=disable on readonly fs
[   59.381875][ T2524] device gretap0 entered promiscuous mode
[   59.397933][ T2524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.822'.
[   59.407820][ T2524] 0ªî{X¹¦: renamed from gretap0
[   59.413687][ T2524] device 
30ªî{X¹¦ left promiscuous mode
[   59.420699][ T2524] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   59.473377][ T2527] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 1: comm syz.4.825: lblock 1 mapped to illegal pblock 1 (length 1)
[   59.489920][ T2527] Quota error (device loop4): write_blk: dquota write failed
[   59.498047][ T2527] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   59.518646][ T2527] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.825: Failed to acquire dquot type 0
[   59.530228][ T2527] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.825: Freeing blocks not in datazone - block = 0, count = 4096
[   59.544525][ T2527] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.825: Invalid inode bitmap blk 0 in block_group 0
[   59.557435][   T43] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   59.571894][ T2527] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[   59.572166][   T43] Quota error (device loop4): remove_tree: Can't read quota data block 1
[   59.589203][   T43] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0
[   59.589236][ T2527] EXT4-fs (loop4): 1 orphan inode deleted
[   59.719274][ T2547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   59.737026][ T2547] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.832: invalid indirect mapped block 32768 (level 2)
[   59.754608][ T2547] EXT4-fs (loop0): 1 orphan inode deleted
[   59.769557][ T2547] EXT4-fs (loop0): 1 truncate cleaned up
[   59.837347][ T2553] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.853719][ T2560] netlink: 9 bytes leftover after parsing attributes in process `syz.1.837'.
[   59.869343][ T2560] device gretap0 entered promiscuous mode
[   59.890421][ T2560] netlink: 5 bytes leftover after parsing attributes in process `syz.1.837'.
[   59.912273][   T28] audit: type=1400 audit(1794327191.695:729): avc:  denied  { mounton } for  pid=2550 comm="syz.4.836" path="/19/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   59.913421][ T2560] 0ªî{X¹¦: renamed from gretap0
[   59.939811][   T28] audit: type=1400 audit(1794327191.695:730): avc:  denied  { setattr } for  pid=2550 comm="syz.4.836" name="work" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   59.963522][ T2564] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   59.963674][ T2560] device 
30ªî{X¹¦ left promiscuous mode
[   59.979169][ T2560] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   60.006938][ T2564] EXT4-fs (loop0): Test dummy encryption mode enabled
[   60.043982][ T2566] EXT4-fs (loop3): 1 truncate cleaned up
[   60.089187][ T2566] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.841: bg 0: block 465: padding at end of block bitmap is not set
[   60.142403][ T2566] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   60.165359][ T2566] EXT4-fs (loop3): This should not happen!! Data will be lost
[   60.165359][ T2566] 
[   60.219878][ T1733] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28
[   60.263026][ T1733] EXT4-fs (loop3): This should not happen!! Data will be lost
[   60.263026][ T1733] 
[   60.279063][ T1733] EXT4-fs (loop3): Total free blocks count 0
[   60.291560][ T1733] EXT4-fs (loop3): Free/Dirty block details
[   60.310031][ T1733] EXT4-fs (loop3): free_blocks=0
[   60.325224][ T1733] EXT4-fs (loop3): dirty_blocks=64
[   60.347547][ T1733] EXT4-fs (loop3): Block reservation details
[   60.353602][ T1733] EXT4-fs (loop3): i_reserved_data_blocks=64
[   60.551570][ T2612] netlink: 'syz.4.860': attribute type 8 has an invalid length.
[   60.696334][ T2628] exfat: Deprecated parameter 'utf8'
[   60.725165][ T2628] exfat: Deprecated parameter 'namecase'
[   60.738792][ T2628] exfat: Deprecated parameter 'utf8'
[   60.761237][ T2628] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   60.832909][ T2594] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[   60.861992][ T2594] F2FS-fs (loop3): invalid crc value
[   60.865610][ T2640] netem: unknown loss type 0
[   60.874361][ T2640] netem: change failed
[   60.883939][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[   60.899804][ T2594] F2FS-fs (loop3): Found nat_bits in checkpoint
[   60.972596][ T2647] EXT4-fs (loop0): 1 truncate cleaned up
[   61.010762][ T2647] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.876: bg 0: block 465: padding at end of block bitmap is not set
[   61.037616][ T2594] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   61.078691][ T2647] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   61.144241][ T2647] EXT4-fs (loop0): This should not happen!! Data will be lost
[   61.144241][ T2647] 
[   61.158433][ T2594] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0
[   61.167613][ T2647] EXT4-fs (loop0): Total free blocks count 0
[   61.183849][ T2647] EXT4-fs (loop0): Free/Dirty block details
[   61.194092][ T2651] bio_check_eod: 1515 callbacks suppressed
[   61.194111][ T2651] f2fs_ckpt-7:3: attempt to access beyond end of device
[   61.194111][ T2651] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   61.203254][ T2647] EXT4-fs (loop0): free_blocks=0
[   61.239092][ T2647] EXT4-fs (loop0): dirty_blocks=65
[   61.244933][ T2647] EXT4-fs (loop0): Block reservation details
[   61.279806][ T2647] EXT4-fs (loop0): i_reserved_data_blocks=65
[   61.343408][   T43] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28
[   61.371350][   T43] EXT4-fs (loop0): This should not happen!! Data will be lost
[   61.371350][   T43] 
[   61.408791][ T2645] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   61.434575][ T2645] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   61.486506][ T2645] F2FS-fs (loop4): Found nat_bits in checkpoint
[   61.550338][ T2645] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   61.559955][ T2645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   61.676051][ T2667] netlink: 9 bytes leftover after parsing attributes in process `syz.3.878'.
[   61.708590][ T2667] device gretap0 entered promiscuous mode
[   61.735370][ T2665] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   61.755029][ T2667] netlink: 5 bytes leftover after parsing attributes in process `syz.3.878'.
[   61.755985][ T2645] syz.4.875: attempt to access beyond end of device
[   61.755985][ T2645] loop4: rw=2049, sector=77824, nr_sectors = 2064 limit=40427
[   61.764302][ T2667] 0ªî{X¹¦: renamed from gretap0
[   61.792353][ T2665] EXT4-fs (loop1): Test dummy encryption mode enabled
[   61.806659][ T2665] EXT4-fs mount: 24 callbacks suppressed
[   61.806679][ T2665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   61.823113][ T2645] syz.4.875: attempt to access beyond end of device
[   61.823113][ T2645] loop4: rw=2049, sector=79888, nr_sectors = 2032 limit=40427
[   61.840213][ T2667] device 
30ªî{X¹¦ left promiscuous mode
[   61.870951][ T2645] syz.4.875: attempt to access beyond end of device
[   61.870951][ T2645] loop4: rw=2049, sector=49152, nr_sectors = 2064 limit=40427
[   61.895763][ T2667] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   61.909474][ T2645] syz.4.875: attempt to access beyond end of device
[   61.909474][ T2645] loop4: rw=2049, sector=51216, nr_sectors = 2032 limit=40427
[   61.934271][ T2645] syz.4.875: attempt to access beyond end of device
[   61.934271][ T2645] loop4: rw=2049, sector=57344, nr_sectors = 3024 limit=40427
[   61.975683][ T2645] syz.4.875: attempt to access beyond end of device
[   61.975683][ T2645] loop4: rw=2049, sector=60368, nr_sectors = 9264 limit=40427
[   61.995138][ T2645] syz.4.875: attempt to access beyond end of device
[   61.995138][ T2645] loop4: rw=2049, sector=69632, nr_sectors = 8 limit=40427
[   62.009459][ T2645] syz.4.875: attempt to access beyond end of device
[   62.009459][ T2645] loop4: rw=2049, sector=69640, nr_sectors = 8 limit=40427
[   62.029128][ T2645] syz.4.875: attempt to access beyond end of device
[   62.029128][ T2645] loop4: rw=2049, sector=69648, nr_sectors = 8 limit=40427
[   62.053447][  T725] EXT4-fs (loop1): unmounting filesystem.
[   62.286397][  T292] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   62.447523][ T2691] netlink: 27 bytes leftover after parsing attributes in process `syz.4.887'.
[   62.465953][  T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.476959][  T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.493677][ T2693] set_capacity_and_notify: 12 callbacks suppressed
[   62.493695][ T2693] loop1: detected capacity change from 0 to 1024
[   62.510898][  T292] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   62.520612][  T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.534244][  T292] usb 3-1: config 0 descriptor??
[   62.549215][ T2693] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 1: comm syz.1.886: lblock 1 mapped to illegal pblock 1 (length 1)
[   62.597998][ T2693] Quota error (device loop1): write_blk: dquota write failed
[   62.633017][ T2693] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   62.652784][ T2693] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.886: Failed to acquire dquot type 0
[   62.671916][ T2693] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.886: Freeing blocks not in datazone - block = 0, count = 4096
[   62.697819][ T2693] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.886: Invalid inode bitmap blk 0 in block_group 0
[   62.713907][ T2709] loop3: detected capacity change from 0 to 4096
[   62.720397][ T1733] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[   62.737645][ T2693] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[   62.750609][ T2709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   62.759985][ T2693] EXT4-fs (loop1): 1 orphan inode deleted
[   62.762011][ T1733] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:10: Failed to release dquot type 0
[   62.765875][ T2693] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   62.786212][ T2709] EXT4-fs (loop3): Test dummy encryption mode enabled
[   62.796561][ T2709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   62.856123][  T725] EXT4-fs (loop1): unmounting filesystem.
[   62.910433][ T2149] EXT4-fs (loop3): unmounting filesystem.
[   62.926698][  T292] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   62.957329][  T292] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   62.967950][  T292] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   62.982603][  T292] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   62.998025][ T2728] netlink: 27 bytes leftover after parsing attributes in process `syz.1.905'.
[   63.000886][  T292] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0
[   63.039045][  T292] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[   63.230106][   T60] usb 3-1: USB disconnect, device number 4
[   63.341648][ T2748] loop3: detected capacity change from 0 to 1024
[   63.356436][ T2748] EXT4-fs: Ignoring removed bh option
[   63.365708][ T2752] loop0: detected capacity change from 0 to 128
[   63.378909][ T2754] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   63.394541][ T2752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   63.406267][ T2752] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.421911][ T2748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   63.454326][ T2149] EXT4-fs (loop3): unmounting filesystem.
[   63.462225][  T287] EXT4-fs (loop0): unmounting filesystem.
[   63.914792][ T2799] loop4: detected capacity change from 0 to 512
[   63.930368][ T2799] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   63.943918][ T2799] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.932: invalid indirect mapped block 32768 (level 2)
[   63.965571][ T2799] EXT4-fs (loop4): 1 orphan inode deleted
[   63.971476][ T2799] EXT4-fs (loop4): 1 truncate cleaned up
[   63.978126][ T2799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   64.026534][ T2266] EXT4-fs (loop4): unmounting filesystem.
[   64.339086][ T2849] xt_hashlimit: size too large, truncated to 1048576
[   64.346206][ T2847] loop0: detected capacity change from 0 to 512
[   64.377742][ T2847] EXT4-fs (loop0): Test dummy encryption mode enabled
[   64.389895][ T2847] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   64.423420][ T2847] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.963: bad orphan inode 131083
[   64.439143][ T2847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   64.472880][ T2847] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.963: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   64.531486][  T292] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   64.532888][ T2847] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem
[   64.570316][ T2856] loop2: detected capacity change from 0 to 512
[   64.590005][ T2856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   64.602752][  T287] EXT4-fs (loop0): unmounting filesystem.
[   64.624066][  T291] EXT4-fs (loop2): unmounting filesystem.
[   64.691918][ T2865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.953'.
[   64.711063][  T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.734431][  T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.759760][  T292] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   64.769979][  T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.779530][  T292] usb 4-1: config 0 descriptor??
[   64.815143][ T2884] loop4: detected capacity change from 0 to 512
[   64.848451][ T2884] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   64.869283][ T2896] xt_hashlimit: size too large, truncated to 1048576
[   64.886367][ T2266] EXT4-fs (loop4): unmounting filesystem.
[   65.019676][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   65.019692][   T28] audit: type=1400 audit(1794327453.170:731): avc:  denied  { mounton } for  pid=2901 comm="syz.4.984" path="/59/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   65.048857][ T2903] loop2: detected capacity change from 0 to 512
[   65.067427][ T2903] EXT4-fs (loop2): Test dummy encryption mode enabled
[   65.075115][ T2903] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   65.093958][ T2910] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   65.097459][ T2903] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.974: bad orphan inode 131083
[   65.123376][ T2903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   65.157717][ T2903] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.974: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   65.165183][  T292] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   65.195221][  T292] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   65.203707][  T292] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   65.211257][  T292] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   65.219057][  T292] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   65.227453][  T292] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[   65.243454][ T2903] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem
[   65.271641][  T291] EXT4-fs (loop2): unmounting filesystem.
[   65.485752][   T60] usb 4-1: USB disconnect, device number 4
[   65.619539][ T2966] SELinux: ebitmap: truncated map
[   65.626260][ T2966] SELinux: failed to load policy
[   65.931489][ T2983] loop4: detected capacity change from 0 to 512
[   65.971395][ T2983] EXT4-fs (loop4): Test dummy encryption mode enabled
[   65.988282][ T2983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   66.000037][ T2983] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.1010: bad orphan inode 131083
[   66.011113][ T2983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   66.027962][ T2983] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.1010: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   66.098783][ T2983] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem
[   66.162540][ T2266] EXT4-fs (loop4): unmounting filesystem.
[   66.181075][ T2964] F2FS-fs (loop1): invalid crc value
[   66.226826][ T2964] F2FS-fs (loop1): Found nat_bits in checkpoint
[   66.284965][ T2964] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   66.339660][   T28] audit: type=1326 audit(1794327454.586:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.377801][   T28] audit: type=1326 audit(1794327454.586:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.414990][   T28] audit: type=1326 audit(1794327454.586:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.440851][   T28] audit: type=1326 audit(1794327454.586:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.466857][   T28] audit: type=1326 audit(1794327454.597:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.536317][   T28] audit: type=1326 audit(1794327454.597:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.562638][ T3019] SELinux: ebitmap: truncated map
[   66.571880][ T3019] SELinux: failed to load policy
[   66.578549][   T28] audit: type=1326 audit(1794327454.597:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.617587][   T28] audit: type=1326 audit(1794327454.597:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.626909][ T3029] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.647144][   T28] audit: type=1326 audit(1794327454.597:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3008 comm="syz.0.1032" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253ba8f19 code=0x7ffc0000
[   66.654504][  T292] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   66.853258][ T3039] EXT4-fs (loop3): Test dummy encryption mode enabled
[   66.879684][ T3039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   66.882318][  T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.919800][ T3039] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1031: bad orphan inode 131083
[   66.937218][  T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.956920][  T292] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   66.966349][ T3039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   66.972945][  T292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.989951][ T3039] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1031: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   67.010782][  T292] usb 5-1: config 0 descriptor??
[   67.017014][ T3039] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[   67.059211][ T2149] EXT4-fs (loop3): unmounting filesystem.
[   67.087413][ T3056] 9pnet_fd: p9_fd_create_unix (3056): problem connecting socket: éq‰Y’3aK: -111
[   67.344075][ T3054] set_capacity_and_notify: 3 callbacks suppressed
[   67.344094][ T3054] loop2: detected capacity change from 0 to 40427
[   67.404111][  T864] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   67.407085][  T292] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[   67.430540][  T292] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[   67.449408][ T3066] loop3: detected capacity change from 0 to 2048
[   67.455977][  T292] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[   67.463624][  T292] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[   67.472153][  T292] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0
[   67.480946][  T292] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[   67.507811][ T3066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   67.523118][ T3066] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.557867][ T3066] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1048: bg 0: block 345: padding at end of block bitmap is not set
[   67.591821][ T3066] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 2 with error 28
[   67.640985][ T3066] EXT4-fs (loop3): This should not happen!! Data will be lost
[   67.640985][ T3066] 
[   67.653214][ T3054] device-mapper: table: 252:2: snapshot-origin: Cannot get target device (-ENODEV)
[   67.671271][ T3054] device-mapper: ioctl: error adding target to table
[   67.685962][ T3066] EXT4-fs (loop3): Total free blocks count 0
[   67.697270][ T3066] EXT4-fs (loop3): Free/Dirty block details
[   67.707667][ T3087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1055'.
[   67.708936][ T3066] EXT4-fs (loop3): free_blocks=0
[   67.740479][   T60] usb 5-1: USB disconnect, device number 2
[   67.748464][ T3066] EXT4-fs (loop3): dirty_blocks=16
[   67.775602][ T3066] EXT4-fs (loop3): Block reservation details
[   67.782058][ T3066] EXT4-fs (loop3): i_reserved_data_blocks=1
[   67.819680][ T2149] EXT4-fs (loop3): unmounting filesystem.
[   67.954980][ T3088] loop0: detected capacity change from 0 to 40427
[   67.969307][ T3088] device-mapper: table: 252:3: snapshot-origin: Cannot get target device (-ENODEV)
[   68.001283][ T3088] device-mapper: ioctl: error adding target to table
[   68.088898][ T3120] loop0: detected capacity change from 0 to 2048
[   68.140373][ T3120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   68.150260][ T3120] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.166325][ T3120] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1070: bg 0: block 345: padding at end of block bitmap is not set
[   68.181331][ T3120] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 2 with error 28
[   68.193901][ T3120] EXT4-fs (loop0): This should not happen!! Data will be lost
[   68.193901][ T3120] 
[   68.204269][ T3120] EXT4-fs (loop0): Total free blocks count 0
[   68.224873][ T3120] EXT4-fs (loop0): Free/Dirty block details
[   68.230868][ T3120] EXT4-fs (loop0): free_blocks=0
[   68.242876][ T3120] EXT4-fs (loop0): dirty_blocks=16
[   68.249801][ T3120] EXT4-fs (loop0): Block reservation details
[   68.252425][ T3136] loop1: detected capacity change from 0 to 512
[   68.256464][ T3120] EXT4-fs (loop0): i_reserved_data_blocks=1
[   68.280398][ T3136] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   68.308630][ T3136] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1075: invalid indirect mapped block 32768 (level 2)
[   68.339248][  T287] EXT4-fs (loop0): unmounting filesystem.
[   68.341075][ T3136] EXT4-fs (loop1): 1 orphan inode deleted
[   68.351593][ T3136] EXT4-fs (loop1): 1 truncate cleaned up
[   68.357887][ T3136] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   68.404124][ T3148] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   68.415077][  T725] EXT4-fs (loop1): unmounting filesystem.
[   68.425803][ T3150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'.
[   69.173655][  T292] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   69.286671][ T3214] netlink: 'syz.1.1111': attribute type 12 has an invalid length.
[   69.296866][ T3214] netlink: 'syz.1.1111': attribute type 29 has an invalid length.
[   69.304934][ T3214] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1111'.
[   69.314448][ T3214] netlink: 'syz.1.1111': attribute type 1 has an invalid length.
[   69.322469][ T3214] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1111'.
[   69.345598][ T3222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'.
[   69.351752][  T292] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   69.366684][  T292] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   69.376083][  T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.767830][  T292] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0
[   69.956756][  T292] lg-g15 0003:046D:C222.0007: Error getting LED brightness: -71
[   69.975393][  T292] lg-g15: probe of 0003:046D:C222.0007 failed with error -71
[   69.993957][  T292] usb 1-1: USB disconnect, device number 4
[   70.237825][ T3251] ip_tables: iptables: counters copy to user failed while replacing table
[   70.252377][ T3251] xt_connbytes: Forcing CT accounting to be enabled
[   71.317406][   T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   71.496004][   T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   71.516504][   T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   71.544981][   T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.942832][   T60] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0
[   72.127705][   T60] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71
[   72.146532][   T60] lg-g15: probe of 0003:046D:C222.0008 failed with error -71
[   72.167230][   T60] usb 2-1: USB disconnect, device number 4
[   72.192497][ T3324] fido_id[3324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   72.215247][ T3325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.255419][ T3306] loop0: detected capacity change from 0 to 131072
[   72.277903][ T3306] F2FS-fs (loop0): Test dummy encryption mode enabled
[   72.296945][ T3306] F2FS-fs (loop0): invalid crc value
[   72.325228][ T3306] F2FS-fs (loop0): Found nat_bits in checkpoint
[   72.362454][ T3337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'.
[   72.384454][ T3306] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   72.753372][ T3353] loop1: detected capacity change from 0 to 512
[   72.781679][ T3346] loop4: detected capacity change from 0 to 40427
[   72.811146][ T3346] F2FS-fs (loop4): invalid crc value
[   72.838614][ T3353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   72.848161][ T3346] F2FS-fs (loop4): Found nat_bits in checkpoint
[   72.874591][ T3353] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   72.920283][ T3346] F2FS-fs (loop4): Start checkpoint disabled!
[   72.928474][ T3346] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   72.952538][ T3370] loop7: detected capacity change from 0 to 7
[   72.958762][ T3346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   72.982246][ T3353] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 18: comm syz.1.1183: lblock 23 mapped to illegal pblock 18 (length 1)
[   73.025533][   T28] kauditd_printk_skb: 42 callbacks suppressed
[   73.025550][   T28] audit: type=1400 audit(1794327461.764:783): avc:  denied  { block_suspend } for  pid=3376 comm="syz.0.1179" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   73.044411][ T3353] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1183: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   73.093369][ T1733] bio_check_eod: 1517 callbacks suppressed
[   73.093387][ T1733] kworker/u4:10: attempt to access beyond end of device
[   73.093387][ T1733] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   73.118159][ T3353] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.1183: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   73.178517][ T3353] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.1183: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   73.228924][ T3353] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.1183: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   73.253612][ T3353] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 15: comm syz.1.1183: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   73.274536][ T3353] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.1183: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   73.299911][ T3353] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.1183: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   73.322590][ T3353] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 18: comm syz.1.1183: lblock 23 mapped to illegal pblock 18 (length 1)
[   73.339245][ T3353] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 19: comm syz.1.1183: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   73.395386][   T28] audit: type=1326 audit(1794327462.150:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3387 comm="syz.2.1181" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14379a8f19 code=0x0
[   73.594417][  T725] EXT4-fs (loop1): unmounting filesystem.
[   73.620994][ T3403] loop4: detected capacity change from 0 to 512
[   73.658419][ T3403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   73.667849][ T3403] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   73.706530][ T3403] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 18: comm syz.4.1199: lblock 23 mapped to illegal pblock 18 (length 1)
[   73.733025][ T3403] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1199: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   73.772858][ T3403] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.1199: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   73.815850][ T3403] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.1199: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   73.852156][ T3403] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 14: comm syz.4.1199: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   73.877735][ T3403] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 15: comm syz.4.1199: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   73.903070][ T3403] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.1199: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   73.905142][ T3415] loop7: detected capacity change from 0 to 7
[   73.928897][ T3403] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 17: comm syz.4.1199: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   73.956789][ T3403] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 18: comm syz.4.1199: lblock 23 mapped to illegal pblock 18 (length 1)
[   73.971573][ T3403] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 19: comm syz.4.1199: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   74.005279][   T28] audit: type=1400 audit(1794327462.815:785): avc:  denied  { shutdown } for  pid=3417 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.506054][ T2266] EXT4-fs (loop4): unmounting filesystem.
[   74.904339][ T3430] loop1: detected capacity change from 0 to 131072
[   74.920650][ T3430] F2FS-fs (loop1): Test dummy encryption mode enabled
[   74.938095][ T3430] F2FS-fs (loop1): invalid crc value
[   74.968769][ T3430] F2FS-fs (loop1): Found nat_bits in checkpoint
[   74.975166][   T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   75.027330][ T3430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   75.113017][ T3457] loop7: detected capacity change from 0 to 7
[   75.160415][   T60] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[   75.183858][   T60] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[   75.218807][   T60] usb 5-1: config 1 interface 0 has no altsetting 0
[   75.233423][   T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   75.252165][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   75.269780][   T60] usb 5-1: SerialNumber: syz
[   75.280243][ T3435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   75.373308][ T3456] loop3: detected capacity change from 0 to 40427
[   75.381271][ T3456] F2FS-fs (loop3): invalid crc value
[   75.399848][ T3456] F2FS-fs (loop3): Found nat_bits in checkpoint
[   75.450927][ T3456] F2FS-fs (loop3): Start checkpoint disabled!
[   75.457801][ T3456] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   75.474359][ T3456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   75.484495][ T3435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   75.521506][   T28] audit: type=1326 audit(1794327464.446:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.1.1213" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f817f7a8f19 code=0x0
[   75.566027][    T8] kworker/u4:0: attempt to access beyond end of device
[   75.566027][    T8] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   75.715382][ T3496] rtc_cmos 00:00: Alarms can be up to one day in the future
[   75.745874][ T3502] loop2: detected capacity change from 0 to 128
[   75.784819][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.807366][ T3512] device-mapper: table: 252:4: verity: Data device is too small (-EINVAL)
[   75.816310][ T3512] device-mapper: ioctl: error adding target to table
[   75.839167][ T3510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   75.848435][ T3510] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.869532][   T60] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[   75.882601][  T291] EXT4-fs (loop2): unmounting filesystem.
[   76.018157][ T3523] F2FS-fs (loop0): invalid crc value
[   76.031142][ T3523] F2FS-fs (loop0): Found nat_bits in checkpoint
[   76.064218][ T3523] F2FS-fs (loop0): Start checkpoint disabled!
[   76.070805][ T3523] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   76.077014][   T39] usb 5-1: USB disconnect, device number 3
[   76.084612][ T3523] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   76.085123][   T39] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
[   76.155397][    T8] kworker/u4:0: attempt to access beyond end of device
[   76.155397][    T8] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   76.414842][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.501437][ T3583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   76.510147][ T3583] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.528602][  T725] EXT4-fs (loop1): unmounting filesystem.
[   76.607097][ T3601] rtc_cmos 00:00: Alarms can be up to one day in the future
[   76.683061][  T770] smpboot: CPU 1 is now offline
[   76.760189][ T3592] F2FS-fs (loop1): invalid crc value
[   76.785472][ T3592] F2FS-fs (loop1): Found nat_bits in checkpoint
[   76.829801][ T3592] F2FS-fs (loop1): Start checkpoint disabled!
[   76.843752][ T3592] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   76.861899][ T3592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   76.941208][   T43] kworker/u4:2: attempt to access beyond end of device
[   76.941208][   T43] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   77.332772][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.386096][ T3620] set_capacity_and_notify: 5 callbacks suppressed
[   77.386111][ T3620] loop1: detected capacity change from 0 to 2048
[   77.497616][ T3620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   77.529463][ T3620] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.597232][  T725] EXT4-fs (loop1): unmounting filesystem.
[   78.409510][ T3631] loop2: detected capacity change from 0 to 131072
[   84.291646][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.444046][   T28] audit: type=1400 audit(1794327474.016:787): avc:  denied  { write } for  pid=3671 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   84.586397][ T3689] loop7: detected capacity change from 0 to 7
[   84.632183][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   84.645182][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   84.654433][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   84.663944][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   84.673294][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   84.683625][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   84.693328][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   84.701351][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[   84.715164][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   84.726669][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   84.735317][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   84.744589][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   84.815986][ T3704] loop4: detected capacity change from 0 to 256
[   84.873345][ T3704] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[   84.903376][ T3710] loop2: detected capacity change from 0 to 16
[   84.945892][ T3710] erofs: (device loop2): mounted with root inode @ nid 36.
[   84.973782][   T28] audit: type=1400 audit(1794327474.585:788): avc:  denied  { ioctl } for  pid=3702 comm="syz.4.1303" path="/123/file2/bus" dev="loop4" ino=1048761 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   85.179779][ T3725] loop0: detected capacity change from 0 to 2048
[   85.191159][ T3724] loop4: detected capacity change from 0 to 4096
[   85.232665][ T3724] EXT4-fs (loop4): Test dummy encryption mode enabled
[   85.252326][ T3725] EXT4-fs: Mount option(s) incompatible with ext2
[   85.286622][ T3724] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c01c, mo2=0002]
[   85.321607][ T3724] System zones: 0-5
[   85.355117][ T3724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   85.409667][ T2266] EXT4-fs (loop4): unmounting filesystem.
[   85.546110][ T3755] netlink: 'syz.0.1324': attribute type 1 has an invalid length.
[   85.586857][ T3755] netlink: 8960 bytes leftover after parsing attributes in process `syz.0.1324'.
[   85.672724][   T28] audit: type=1400 audit(1794327475.336:789): avc:  denied  { write } for  pid=3760 comm="syz.0.1327" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   85.697787][ T3762] random: crng reseeded on system resumption
[   85.765498][ T3770] device hsr0 entered promiscuous mode
[   85.775415][   T28] audit: type=1400 audit(1794327475.358:790): avc:  denied  { open } for  pid=3760 comm="syz.0.1327" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   85.811342][ T3772] Zero length message leads to an empty skb
[   85.874920][   T28] audit: type=1400 audit(1794327475.368:791): avc:  denied  { read write } for  pid=3761 comm="syz.1.1328" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   85.979185][ T3785] netlink: 'syz.4.1338': attribute type 2 has an invalid length.
[   85.987735][   T28] audit: type=1400 audit(1794327475.368:792): avc:  denied  { open } for  pid=3761 comm="syz.1.1328" path="/232/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   86.066178][ T3790] loop1: detected capacity change from 0 to 256
[   86.097667][   T28] audit: type=1400 audit(1794327475.787:793): avc:  denied  { mount } for  pid=3789 comm="syz.1.1340" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   86.192189][ T3800] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1345'.
[   86.234148][   T28] audit: type=1400 audit(1794327475.840:794): avc:  denied  { unmount } for  pid=725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   86.255945][ T3802] loop1: detected capacity change from 0 to 256
[   86.303777][ T3802] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[   86.348731][   T28] audit: type=1400 audit(1794327476.034:795): avc:  denied  { write } for  pid=3806 comm="syz.0.1347" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   86.383371][ T3701] loop3: detected capacity change from 0 to 131072
[   86.416471][ T3811] loop2: detected capacity change from 0 to 4096
[   86.442586][ T3701] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[   86.487150][ T3811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   86.512878][   T28] audit: type=1400 audit(1794327476.034:796): avc:  denied  { map } for  pid=3806 comm="syz.0.1347" path="socket:[29226]" dev="sockfs" ino=29226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   86.539263][ T3701] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   86.559577][ T3821] sch_fq: defrate 0 ignored.
[   86.567697][ T3811] EXT4-fs (loop2): Test dummy encryption mode enabled
[   86.581362][ T3701] F2FS-fs (loop3): invalid crc value
[   86.590818][ T3811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   86.615537][ T3701] F2FS-fs (loop3): Found nat_bits in checkpoint
[   86.660876][  T291] EXT4-fs (loop2): unmounting filesystem.
[   86.698740][ T3701] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   86.707460][ T3836] loop2: detected capacity change from 0 to 1024
[   86.716760][ T3701] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   86.732232][ T3836] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[   86.762267][ T3836] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[   86.770464][ T3836] System zones: 0-1, 3-36
[   86.795025][ T3836] EXT4-fs (loop2): orphan cleanup on readonly fs
[   86.809297][ T3836] EXT4-fs (loop2): 1 orphan inode deleted
[   86.818428][  T770] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   86.860512][ T3836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   86.877383][ T3815] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[   86.915134][ T3836] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[   86.933430][ T3815] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   86.951561][ T3836] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   86.978321][ T3836] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.1360: Block bitmap for bg 0 marked uninitialized
[   86.992524][ T3815] F2FS-fs (loop0): Found nat_bits in checkpoint
[   87.023505][  T770] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.053264][  T291] EXT4-fs (loop2): unmounting filesystem.
[   87.069471][  T770] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.104111][  T770] usb 5-1: config 0 interface 0 has no altsetting 0
[   87.111268][ T3815] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   87.134833][  T770] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   87.149526][ T3815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   87.167042][  T770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.199885][  T770] usb 5-1: config 0 descriptor??
[   87.293590][ T3815] syz.0.1352: attempt to access beyond end of device
[   87.293590][ T3815] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   87.372073][  T287] syz-executor: attempt to access beyond end of device
[   87.372073][  T287] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   87.434679][ T3857] netlink: 'syz.2.1368': attribute type 1 has an invalid length.
[   87.469440][ T3857] netlink: 8960 bytes leftover after parsing attributes in process `syz.2.1368'.
[   87.594588][  T770] hid-thrustmaster 0003:044F:B65D.0009: item fetching failed at offset 23/24
[   87.628372][  T770] hid-thrustmaster 0003:044F:B65D.0009: parse failed with error -22
[   87.667287][  T770] hid-thrustmaster: probe of 0003:044F:B65D.0009 failed with error -22
[   87.800277][ T3840] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0)
[   87.819885][  T770] usb 5-1: USB disconnect, device number 4
[   87.850974][ T3840] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   87.888901][ T3840] F2FS-fs (loop1): Test dummy encryption mode enabled
[   87.911411][ T3840] F2FS-fs (loop1): invalid crc value
[   87.930863][ T3840] F2FS-fs (loop1): Found nat_bits in checkpoint
[   87.969621][ T3885] netlink: 'syz.3.1379': attribute type 1 has an invalid length.
[   87.985255][ T3840] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   87.992513][ T3885] netlink: 8960 bytes leftover after parsing attributes in process `syz.3.1379'.
[   88.001985][ T3840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   88.235023][ T3906] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1389'.
[   88.477962][ T3937] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1402'.
[   88.499696][ T3940] random: crng reseeded on system resumption
[   88.562281][ T3945] device hsr0 entered promiscuous mode
[   88.620453][ T3940] Restarting kernel threads ... done.
[   88.850339][ T3969] netlink: 'syz.1.1418': attribute type 2 has an invalid length.
[   88.922627][ T3975] device hsr0 entered promiscuous mode
[   88.934515][ T3977] random: crng reseeded on system resumption
[   89.058582][ T3977] Restarting kernel threads ... done.
[   89.207247][ T4005] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[   89.297458][ T4013] set_capacity_and_notify: 5 callbacks suppressed
[   89.297473][ T4013] loop3: detected capacity change from 0 to 4096
[   89.373025][ T4013] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   89.419951][ T4013] EXT4-fs (loop3): Test dummy encryption mode enabled
[   89.448297][ T4013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   89.503782][ T2149] EXT4-fs (loop3): unmounting filesystem.
[   89.512667][ T4010] loop4: detected capacity change from 0 to 40427
[   89.540223][ T4010] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[   89.557901][ T3922] loop2: detected capacity change from 0 to 131072
[   89.566747][ T4010] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   89.583734][ T3922] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0)
[   89.606683][ T4010] F2FS-fs (loop4): Found nat_bits in checkpoint
[   89.626202][ T3922] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   89.651449][ T4025] random: crng reseeded on system resumption
[   89.658018][ T3922] F2FS-fs (loop2): Test dummy encryption mode enabled
[   89.675515][ T4023] loop0: detected capacity change from 0 to 4096
[   89.687829][ T4010] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   89.705347][ T4010] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   89.713214][ T3922] F2FS-fs (loop2): invalid crc value
[   89.726235][ T4023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   89.749075][ T3922] F2FS-fs (loop2): Found nat_bits in checkpoint
[   89.757671][ T4025] Restarting kernel threads ... done.
[   89.779565][ T4023] EXT4-fs (loop0): Test dummy encryption mode enabled
[   89.795555][ T4010] syz.4.1441: attempt to access beyond end of device
[   89.795555][ T4010] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   89.819850][ T4023] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   89.829841][ T3922] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   89.836970][ T3922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   89.849699][ T2266] syz-executor: attempt to access beyond end of device
[   89.849699][ T2266] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   89.895817][  T287] EXT4-fs (loop0): unmounting filesystem.
[   89.978787][ T4041] sch_fq: defrate 0 ignored.
[   90.018750][ T4044] netlink: 'syz.0.1445': attribute type 2 has an invalid length.
[   90.103536][ T4050] loop4: detected capacity change from 0 to 256
[   90.138159][ T4050] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[   90.249859][ T4056] loop4: detected capacity change from 0 to 2048
[   90.272002][ T4059] loop3: detected capacity change from 0 to 4096
[   90.295645][ T4056] EXT4-fs: Mount option(s) incompatible with ext2
[   90.332336][ T4059] EXT4-fs (loop3): Test dummy encryption mode enabled
[   90.363796][ T4068] random: crng reseeded on system resumption
[   90.381364][ T4059] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c01c, mo2=0002]
[   90.433097][ T4059] System zones: 0-5
[   90.453195][ T4059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   90.479992][ T4068] Restarting kernel threads ... done.
[   90.528411][ T2149] EXT4-fs (loop3): unmounting filesystem.
[   90.649877][ T4090] sch_fq: defrate 0 ignored.
[   90.685420][  T770] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   90.698651][ T4071] loop1: detected capacity change from 0 to 40427
[   90.715108][ T4071] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   90.735868][ T4071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   90.764408][ T4096] loop2: detected capacity change from 0 to 2048
[   90.771416][ T4071] F2FS-fs (loop1): Found nat_bits in checkpoint
[   90.793647][ T4096] EXT4-fs: Mount option(s) incompatible with ext2
[   90.825384][ T4071] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   90.848771][ T4071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   90.872803][  T770] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.908715][  T770] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   90.942158][ T4113] loop2: detected capacity change from 0 to 4096
[   90.953169][ T4071] syz.1.1457: attempt to access beyond end of device
[   90.953169][ T4071] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   90.970544][  T770] usb 1-1: config 0 interface 0 has no altsetting 0
[   90.987500][ T4113] EXT4-fs (loop2): Test dummy encryption mode enabled
[   91.002309][  T770] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   91.019517][ T4113] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c01c, mo2=0002]
[   91.034021][  T725] syz-executor: attempt to access beyond end of device
[   91.034021][  T725] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   91.049116][  T770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.060528][ T4113] System zones: 0-5
[   91.068128][ T4113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   91.079412][  T770] usb 1-1: config 0 descriptor??
[   91.117815][  T291] EXT4-fs (loop2): unmounting filesystem.
[   91.399425][ T4119] erofs: (device loop1): mounted with root inode @ nid 36.
[   91.413478][ T4124] sch_fq: defrate 0 ignored.
[   91.460227][  T770] hid-thrustmaster 0003:044F:B65D.000A: item fetching failed at offset 23/24
[   91.495108][  T770] hid-thrustmaster 0003:044F:B65D.000A: parse failed with error -22
[   91.512946][ T4129] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[   91.534452][  T770] hid-thrustmaster: probe of 0003:044F:B65D.000A failed with error -22
[   91.684037][  T770] usb 1-1: USB disconnect, device number 5
[   91.769844][ T4122] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[   91.793082][ T4122] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   91.837227][ T4122] F2FS-fs (loop2): Found nat_bits in checkpoint
[   91.904869][ T4122] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   91.919697][ T4122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   91.975963][ T4122] syz.2.1493: attempt to access beyond end of device
[   91.975963][ T4122] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   92.017112][  T291] syz-executor: attempt to access beyond end of device
[   92.017112][  T291] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   92.207553][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   92.223728][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.233045][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.241236][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[   92.254630][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.264076][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.272550][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.282043][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.291160][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.300414][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.308843][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.318369][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.343016][ T4162] erofs: (device loop0): mounted with root inode @ nid 36.
[   92.369875][ T4166] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[   92.389665][ T4135] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[   92.428497][ T4135] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   92.459624][ T4135] F2FS-fs (loop4): invalid crc value
[   92.494955][ T4135] F2FS-fs (loop4): Found nat_bits in checkpoint
[   92.556280][ T4135] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   92.563951][ T4135] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   92.596166][  T770] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   92.635351][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   92.652502][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.661672][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.669597][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[   92.683228][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.691888][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.701335][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.710445][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   92.786662][ T4197] EXT4-fs: Ignoring removed mblk_io_submit option
[   92.794333][  T770] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.813821][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   92.813833][   T28] audit: type=1400 audit(1794327482.997:798): avc:  denied  { mounton } for  pid=4200 comm="syz.3.1516" path="/157/file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   92.854881][ T4197] EXT4-fs (loop2): Test dummy encryption mode enabled
[   92.865988][  T770] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.894557][ T4197] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   92.912439][  T770] usb 2-1: config 0 interface 0 has no altsetting 0
[   92.931332][   T28] audit: type=1400 audit(1794327483.115:799): avc:  denied  { getopt } for  pid=4198 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   92.957534][  T770] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   92.978571][  T291] EXT4-fs (loop2): unmounting filesystem.
[   92.993142][  T770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.019581][  T770] usb 2-1: config 0 descriptor??
[   93.034826][    T6] kernel write not supported for file [eventfd] (pid: 6 comm: kworker/0:0)
[   93.135036][    T6] kernel write not supported for file [eventfd] (pid: 6 comm: kworker/0:0)
[   93.258318][   T28] audit: type=1400 audit(1794327483.469:800): avc:  denied  { bind } for  pid=4228 comm="syz.3.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   93.314341][   T28] audit: type=1400 audit(1794327483.501:801): avc:  denied  { name_bind } for  pid=4228 comm="syz.3.1526" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   93.373680][   T28] audit: type=1400 audit(1794327483.501:802): avc:  denied  { node_bind } for  pid=4228 comm="syz.3.1526" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   93.422425][  T770] hid-thrustmaster 0003:044F:B65D.000B: item fetching failed at offset 23/24
[   93.437915][  T770] hid-thrustmaster 0003:044F:B65D.000B: parse failed with error -22
[   93.453623][  T770] hid-thrustmaster: probe of 0003:044F:B65D.000B failed with error -22
[   93.637793][    T6] usb 2-1: USB disconnect, device number 5
[   93.685539][  T770] kernel write not supported for file [eventfd] (pid: 770 comm: kworker/0:3)
[   93.797360][ T4227] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[   93.823192][ T4257] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1540'.
[   93.854527][ T4227] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   93.877333][ T4227] F2FS-fs (loop2): invalid crc value
[   93.915138][ T4227] F2FS-fs (loop2): Found nat_bits in checkpoint
[   93.984593][ T4271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   94.003193][ T4227] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   94.013019][ T4271] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.033434][ T4227] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   94.060696][   T28] audit: type=1400 audit(1794327484.332:803): avc:  denied  { setattr } for  pid=4270 comm="syz.4.1545" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.093333][ T2266] EXT4-fs (loop4): unmounting filesystem.
[   94.148784][ T4288] set_capacity_and_notify: 11 callbacks suppressed
[   94.148797][ T4288] loop1: detected capacity change from 0 to 512
[   94.179133][   T28] audit: type=1400 audit(1794327484.418:804): avc:  denied  { read write } for  pid=4284 comm="syz.0.1551" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   94.210152][ T4293] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.1555'.
[   94.275841][ T4288] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1553: bg 0: block 5: invalid block bitmap
[   94.336546][   T28] audit: type=1400 audit(1794327484.418:805): avc:  denied  { open } for  pid=4284 comm="syz.0.1551" path="/313/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   94.361523][ T4288] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   94.377604][ T4308] tipc: Started in network mode
[   94.382488][ T4308] tipc: Node identity 4, cluster identity 4711
[   94.404714][ T4288] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1553: invalid indirect mapped block 3 (level 2)
[   94.432904][ T4308] tipc: Node number set to 4
[   94.441876][   T28] audit: type=1400 audit(1794327484.611:806): avc:  denied  { ioctl } for  pid=4304 comm="syz.4.1562" path="socket:[31262]" dev="sockfs" ino=31262 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   94.468352][ T4288] EXT4-fs (loop1): 1 orphan inode deleted
[   94.504213][ T4288] EXT4-fs (loop1): 1 truncate cleaned up
[   94.525888][ T4288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   94.537467][ T4315] loop0: detected capacity change from 0 to 1024
[   94.600000][  T725] EXT4-fs (loop1): unmounting filesystem.
[   94.606935][ T4315] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   94.662935][ T4318] loop1: detected capacity change from 0 to 128
[   94.684653][ T4315] EXT4-fs (loop0): barriers disabled
[   94.701051][ T4318] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   94.734407][ T4315] JBD2: no valid journal superblock found
[   94.740256][ T4315] EXT4-fs (loop0): error loading journal
[   94.756853][ T4324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1557'.
[   94.768109][ T4318] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   94.818231][ T1733] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   94.889337][ T4342] ip_tables: iptables: counters copy to user failed while replacing table
[   94.920085][   T28] audit: type=1400 audit(1794327485.255:807): avc:  denied  { connect } for  pid=4345 comm="syz.3.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.925331][ T4351] loop4: detected capacity change from 0 to 512
[   94.940343][ T4351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   94.945699][ T4351] EXT4-fs (loop4): 1 truncate cleaned up
[   94.945718][ T4351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   94.973081][ T2266] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   95.019062][ T4365] loop1: detected capacity change from 0 to 256
[   95.031812][ T4365] exfat: Deprecated parameter 'utf8'
[   95.036445][ T4365] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[   95.040245][ T2266] EXT4-fs (loop4): unmounting filesystem.
[   95.135184][    T6] input: syz0 as /devices/virtual/misc/uhid/0005:0B05:8502.000C/input/input7
[   95.136242][    T6] hid-generic 0005:0B05:8502.000C: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[   95.202123][ T4373] fido_id[4373]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   95.411409][    T8] device bridge_slave_1 left promiscuous mode
[   95.412171][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.412500][    T8] device bridge_slave_0 left promiscuous mode
[   95.412534][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.413113][    T8] device veth1_macvtap left promiscuous mode
[   95.413143][    T8] device veth0_vlan left promiscuous mode
[   95.548708][ T4380] loop1: detected capacity change from 0 to 40427
[   95.567407][ T4380] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   95.567423][ T4380] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   95.568854][ T4380] F2FS-fs (loop1): invalid crc value
[   95.581247][ T4380] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   95.620920][ T4380] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   95.620940][ T4380] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   95.625336][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.625360][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.625600][ T4386] device bridge_slave_0 entered promiscuous mode
[   95.629276][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.629290][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.629550][ T4386] device bridge_slave_1 entered promiscuous mode
[   95.638192][  T725] syz-executor: attempt to access beyond end of device
[   95.638192][  T725] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   95.728203][   T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   95.753040][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.753058][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.753104][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.753113][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.772975][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.773222][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.773353][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.776883][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.776997][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.777006][ T1733] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.778034][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.778140][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.778149][ T1733] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.782599][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.783673][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.796217][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   95.799019][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   95.799249][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.799396][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.800215][ T4386] device veth0_vlan entered promiscuous mode
[   95.810865][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.813436][ T4386] device veth1_macvtap entered promiscuous mode
[   95.826806][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.828573][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.897155][   T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.897175][   T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.897812][   T19] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   95.897827][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[   95.897839][   T19] usb 3-1: SerialNumber: syz
[   95.907080][ T4425] loop1: detected capacity change from 0 to 256
[   95.912045][ T4425] exfat: Deprecated parameter 'utf8'
[   95.912075][ T4425] exfat: Deprecated parameter 'namecase'
[   95.912103][ T4425] exfat: Deprecated parameter 'namecase'
[   95.916154][ T4425] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   96.001722][ T4432] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1614'.
[   96.002177][ T4432] device bridge_slave_0 left promiscuous mode
[   96.002217][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.003849][ T4432] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   96.093953][   T19] usb 3-1: 0:2 : does not exist
[   96.096631][   T19] usb 3-1: USB disconnect, device number 5
[   96.173774][ T4437] loop5: detected capacity change from 0 to 40427
[   96.179125][ T4437] F2FS-fs (loop5): invalid crc value
[   96.183985][ T4437] F2FS-fs (loop5): Found nat_bits in checkpoint
[   96.210744][ T4437] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   96.216169][ T4440] f2fs_ckpt-7:5: attempt to access beyond end of device
[   96.216169][ T4440] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   96.293551][ T3683] udevd[3683]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   96.394907][ T4457] xt_hashlimit: size too large, truncated to 1048576
[   96.580783][ T4476] loop2: detected capacity change from 0 to 16
[   96.596322][ T4476] erofs: (device loop2): mounted with root inode @ nid 36.
[   96.598312][ T4476] syz.2.1632: attempt to access beyond end of device
[   96.598312][ T4476] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16
[   96.598347][ T4476] syz.2.1632: attempt to access beyond end of device
[   96.598347][ T4476] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16
[   96.598587][ T4476] syz.2.1632: attempt to access beyond end of device
[   96.598587][ T4476] loop2: rw=0, sector=8, nr_sectors = 32 limit=16
[   96.870360][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   96.890066][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   96.890264][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   96.890410][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   96.890547][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   96.890674][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   96.890806][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   96.890937][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   96.891060][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.279817][ T4532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'.
[   97.514097][   T28] kauditd_printk_skb: 15 callbacks suppressed
[   97.514110][   T28] audit: type=1400 audit(1794327744.040:823): avc:  denied  { write } for  pid=4538 comm="syz.2.1661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   97.778763][ T4568] loop3: detected capacity change from 0 to 16
[   97.792224][ T4568] erofs: (device loop3): mounted with root inode @ nid 36.
[   97.792970][ T4568] syz.3.1673: attempt to access beyond end of device
[   97.792970][ T4568] loop3: rw=0, sector=1936876908, nr_sectors = 1 limit=16
[   97.796449][ T4568] syz.3.1673: attempt to access beyond end of device
[   97.796449][ T4568] loop3: rw=0, sector=3955228672, nr_sectors = 1 limit=16
[   97.951365][ T4555] F2FS-fs (loop1): invalid crc value
[   97.977205][ T4555] F2FS-fs (loop1): Found nat_bits in checkpoint
[   98.058726][ T4555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   98.068021][ T4555] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SIT and SSA
[   98.143733][ T4529] F2FS-fs (loop5): Test dummy encryption mode enabled
[   98.144993][ T4529] F2FS-fs (loop5): invalid crc value
[   98.172821][ T4529] F2FS-fs (loop5): Found nat_bits in checkpoint
[   98.235337][ T4529] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   98.431202][ T4568] syz.3.1673: attempt to access beyond end of device
[   98.431202][ T4568] loop3: rw=0, sector=1936876908, nr_sectors = 1 limit=16
[   98.431232][ T4568] syz.3.1673: attempt to access beyond end of device
[   98.431232][ T4568] loop3: rw=0, sector=3955228672, nr_sectors = 1 limit=16
[   98.619381][ T4603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   98.620327][ T4603] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[   98.628346][  T725] EXT4-fs (loop1): unmounting filesystem.
[   98.792605][ T4616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   98.804119][ T4616] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   98.804214][ T4616] EXT4-fs (loop5): 1 truncate cleaned up
[   98.804227][ T4616] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   98.815213][ T4386] EXT4-fs (loop5): unmounting filesystem.
[   98.839563][   T28] audit: type=1400 audit(1794327745.457:824): avc:  denied  { getopt } for  pid=4619 comm="syz.1.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   98.865593][ T4624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1693'.
[   98.966622][ T4639] set_capacity_and_notify: 6 callbacks suppressed
[   98.966636][ T4639] loop5: detected capacity change from 0 to 1024
[   98.989608][ T4639] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   98.991395][ T4639] EXT4-fs (loop5): shut down requested (2)
[   98.991580][ T4639] EXT4-fs (loop5): re-mounted. Quota mode: none.
[   98.998679][ T4386] EXT4-fs (loop5): unmounting filesystem.
[   99.109055][ T4657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1707'.
[   99.378788][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'.
[   99.425129][ T4679] xt_hashlimit: size too large, truncated to 1048576
[   99.476735][ T4680] xt_hashlimit: size too large, truncated to 1048576
[   99.590672][ T4600] loop2: detected capacity change from 0 to 131072
[   99.598247][ T4600] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[   99.598274][ T4600] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   99.599108][ T4600] F2FS-fs (loop2): invalid crc value
[   99.610380][ T4600] F2FS-fs (loop2): Found nat_bits in checkpoint
[   99.671792][ T4600] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   99.671811][ T4600] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   99.762379][ T4600] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[   99.763822][ T4600] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[   99.763924][ T4685] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[   99.763968][ T4685] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[   99.828012][ T4687] loop3: detected capacity change from 0 to 16
[   99.845856][ T4687] erofs: (device loop3): mounted with root inode @ nid 36.
[   99.846231][ T4687] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[   99.846246][ T4687] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[   99.846257][ T4687] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[   99.846266][ T4687] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[   99.846274][ T4687] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  100.039553][ T4663] loop5: detected capacity change from 0 to 131072
[  100.047996][ T4663] F2FS-fs (loop5): Invalid log sectorsize (0)
[  100.048013][ T4663] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  100.050145][ T4663] F2FS-fs (loop5): invalid crc value
[  100.057714][ T4663] F2FS-fs (loop5): Found nat_bits in checkpoint
[  100.094647][   T28] audit: type=1400 audit(1794327746.808:825): avc:  denied  { bind } for  pid=4702 comm="syz.3.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  100.116675][ T4663] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  100.116693][ T4663] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  100.127673][   T28] audit: type=1400 audit(1794327746.841:826): avc:  denied  { setattr } for  pid=4662 comm="syz.5.1710" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  100.223606][ T4710] loop3: detected capacity change from 0 to 256
[  100.286356][ T4714] loop2: detected capacity change from 0 to 128
[  100.294360][ T4714] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  100.297083][ T4714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  100.297181][ T4714] ext2 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.315505][  T291] EXT4-fs (loop2): unmounting filesystem.
[  100.442794][ T4724] loop2: detected capacity change from 0 to 1024
[  100.460355][ T4724] EXT4-fs: Ignoring removed oldalloc option
[  100.482338][ T4724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  100.482879][ T4724] EXT4-fs: Cannot specify journal on remount
[  100.486649][  T291] EXT4-fs (loop2): unmounting filesystem.
[  100.819532][   T28] audit: type=1400 audit(1794327747.581:827): avc:  denied  { mount } for  pid=4738 comm="syz.2.1739" name="/" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  100.819868][   T28] audit: type=1400 audit(1794327747.581:828): avc:  denied  { search } for  pid=4738 comm="syz.2.1739" name="/" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  100.826604][   T28] audit: type=1400 audit(1794327747.592:829): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  100.931782][ T4744] loop2: detected capacity change from 0 to 128
[  100.939037][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  100.939144][ T4744] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.947950][  T291] EXT4-fs (loop2): unmounting filesystem.
[  101.145346][ T4716] loop3: detected capacity change from 0 to 131072
[  101.149715][ T4716] F2FS-fs (loop3): Test dummy encryption mode enabled
[  101.150792][ T4716] F2FS-fs (loop3): invalid crc value
[  101.156054][ T4716] F2FS-fs (loop3): Found nat_bits in checkpoint
[  101.190763][ T4716] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  101.401280][ T4766] synth uevent: /bus/virtio/drivers/virtio_net: unknown uevent action string
[  101.478528][ T4776] loop3: detected capacity change from 0 to 2048
[  101.504547][ T4776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  101.505566][   T28] audit: type=1400 audit(1794327748.321:830): avc:  denied  { read } for  pid=4775 comm="syz.3.1747" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  101.506003][   T28] audit: type=1400 audit(1794327748.321:831): avc:  denied  { mounton } for  pid=4775 comm="syz.3.1747" path=2F3232392F66696C65312F02 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  101.511088][ T2149] EXT4-fs (loop3): unmounting filesystem.
[  101.603694][ T4785] erofs: (device loop5): mounted with root inode @ nid 36.
[  101.671389][ T4792] sch_tbf: burst 4 is lower than device veth0_vlan mtu (1514) !
[  101.912681][ T4808] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  101.912719][ T4808] System zones: 1-12
[  101.913114][ T4808] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1766: missing EA_INODE flag
[  101.913196][ T4808] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1766: error while reading EA inode 12 err=-117
[  101.913269][ T4808] EXT4-fs (loop5): 1 orphan inode deleted
[  101.913282][ T4808] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  101.919350][ T4386] EXT4-fs (loop5): unmounting filesystem.
[  101.983442][ T4811] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  101.998659][ T4386] EXT4-fs (loop5): unmounting filesystem.
[  102.015686][ T4815] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  102.015705][ T4815] FAT-fs (loop5): Filesystem has been set read-only
[  102.020568][ T4386] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196)
[  102.415489][ T4842] SELinux: ebitmap: truncated map
[  102.416386][ T4842] SELinux: failed to load policy
[  102.532610][ T4315] tty tty20: ldisc open failed (-12), clearing slot 19
[  102.553410][ T4628] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  102.567323][ T4755] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  102.588414][ T4781] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  102.603653][ T4859] capability: warning: `syz.0.1787' uses 32-bit capabilities (legacy support in use)
[  102.637961][   T28] audit: type=1400 audit(1794327749.534:832): avc:  denied  { getopt } for  pid=4863 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  102.663871][ T4864] EXT4-fs: Ignoring removed nobh option
[  102.699150][ T4864] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  102.737736][ T4864] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1790: attempt to clear invalid blocks 1 len 1
[  102.750824][   T28] audit: type=1400 audit(1794327749.619:833): avc:  denied  { unlink } for  pid=4854 comm="syz.0.1787" name="#7" dev="tmpfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.805721][ T4864] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  102.843509][   T28] audit: type=1400 audit(1794327749.630:834): avc:  denied  { mounton } for  pid=4873 comm="syz.1.1794" path="/321/file0" dev="tmpfs" ino=1709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  102.884488][ T4864] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1790: invalid indirect mapped block 1819239214 (level 0)
[  102.939017][ T4864] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1790: invalid indirect mapped block 1819239214 (level 1)
[  102.954594][   T28] audit: type=1400 audit(1794327749.856:835): avc:  denied  { create } for  pid=4888 comm="syz.3.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  103.012851][ T4862] F2FS-fs (loop5): invalid crc value
[  103.030744][ T4864] EXT4-fs (loop2): 1 truncate cleaned up
[  103.047074][ T4862] F2FS-fs (loop5): Found nat_bits in checkpoint
[  103.053908][   T28] audit: type=1400 audit(1794327749.856:836): avc:  denied  { write } for  pid=4888 comm="syz.3.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  103.078482][ T4864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  103.116458][ T4864] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  103.138413][ T4862] F2FS-fs (loop5): Start checkpoint disabled!
[  103.146755][   T28] audit: type=1400 audit(1794327749.856:837): avc:  denied  { nlmsg_write } for  pid=4888 comm="syz.3.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  103.180094][  T291] EXT4-fs (loop2): unmounting filesystem.
[  103.187180][ T4862] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  103.215564][ T4862] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  103.238702][ T4905] EXT4-fs: Ignoring removed i_version option
[  103.275066][ T4905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  103.284373][ T4386] syz-executor: attempt to access beyond end of device
[  103.284373][ T4386] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  103.321231][  T291] EXT4-fs (loop2): unmounting filesystem.
[  103.331398][ T4386] syz-executor: attempt to access beyond end of device
[  103.331398][ T4386] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  103.350161][ T4912] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  103.410003][ T1733] kworker/u4:10: attempt to access beyond end of device
[  103.410003][ T1733] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  103.426452][ T4917] netlink: 'syz.2.1813': attribute type 11 has an invalid length.
[  103.444108][ T4917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1813'.
[  103.513588][ T4921] ext4: Unknown parameter 'fowner<00000000000000000000'
[  103.627326][ T4939] xt_hashlimit: size too large, truncated to 1048576
[  103.655099][ T4945] set_capacity_and_notify: 8 callbacks suppressed
[  103.655113][ T4945] loop2: detected capacity change from 0 to 256
[  103.735877][ T4945] FAT-fs (loop2): codepage cp8 not found
[  103.753939][ T1733] device bridge_slave_1 left promiscuous mode
[  103.771436][ T3683] blk_print_req_error: 4 callbacks suppressed
[  103.771448][ T3683] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  103.789329][ T4945] raw_sendmsg: syz.2.1826 forgot to set AF_INET. Fix it!
[  103.806369][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.833596][ T1733] device veth1_macvtap left promiscuous mode
[  103.866417][ T1733] device veth0_vlan left promiscuous mode
[  104.086632][   T28] audit: type=1400 audit(1794327751.089:838): avc:  denied  { getopt } for  pid=4967 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  104.121743][ T4970] kvm [4968]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000006f)
[  104.153881][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.175403][ T4980] loop1: detected capacity change from 0 to 512
[  104.183106][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.198231][ T4980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  104.214585][ T4960] device bridge_slave_0 entered promiscuous mode
[  104.233467][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.254722][ T4980] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  104.265591][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.275519][ T4986] loop3: detected capacity change from 0 to 1024
[  104.286426][ T4980] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.1839: corrupted in-inode xattr
[  104.300893][ T4960] device bridge_slave_1 entered promiscuous mode
[  104.315067][ T4986] EXT4-fs: dax option not supported
[  104.325985][ T4990] loop2: detected capacity change from 0 to 512
[  104.336882][ T4980] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1839: couldn't read orphan inode 15 (err -117)
[  104.356508][ T4990] EXT4-fs: Ignoring removed nobh option
[  104.386077][ T4990] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  104.398936][ T4980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  104.419937][ T4990] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[  104.437237][   T28] audit: type=1400 audit(1794327751.465:839): avc:  denied  { sys_module } for  pid=4979 comm="syz.1.1839" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  104.460128][ T4995] loop3: detected capacity change from 0 to 512
[  104.466817][ T4980] Invalid ELF header magic: != ELF
[  104.476268][ T4990] EXT4-fs (loop2): orphan cleanup on readonly fs
[  104.483561][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.490755][ T4960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.498114][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.505293][ T4960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.520723][ T4995] EXT4-fs: Ignoring removed bh option
[  104.528755][  T725] EXT4-fs (loop1): unmounting filesystem.
[  104.534816][ T4990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1843: bg 0: block 15: invalid block bitmap
[  104.554697][   T28] audit: type=1400 audit(1794327751.497:840): avc:  denied  { module_load } for  pid=4979 comm="syz.1.1839" path="/326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1
[  104.619628][ T4990] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  104.647789][ T4990] EXT4-fs (loop2): 1 truncate cleaned up
[  104.674961][ T4990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.692214][ T5008] loop1: detected capacity change from 0 to 512
[  104.699900][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.713666][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.721932][ T4990] EXT4-fs warning (device loop2): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  104.753905][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.762788][ T5008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  104.776986][   T28] audit: type=1400 audit(1794327751.701:841): avc:  denied  { bind } for  pid=5002 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  104.807064][ T5008] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.824317][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.833279][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.846307][  T291] EXT4-fs (loop2): unmounting filesystem.
[  104.857061][  T725] EXT4-fs (loop1): unmounting filesystem.
[  104.863216][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.870339][ T1733] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.922295][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.940454][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.976073][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.983264][ T1733] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.022353][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.070478][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.092793][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.108786][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.132077][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.160386][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.182375][ T4960] device veth0_vlan entered promiscuous mode
[  105.197579][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.214323][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.240145][ T4960] device veth1_macvtap entered promiscuous mode
[  105.248081][ T5048] ip_tables: iptables: counters copy to user failed while replacing table
[  105.263005][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.277902][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.299851][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.321120][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.335895][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.359629][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.375111][ T5054] loop7: detected capacity change from 0 to 7
[  105.384108][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.415249][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  105.440080][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.160825][ T5085] loop2: detected capacity change from 0 to 512
[  116.181124][ T5081] loop1: detected capacity change from 0 to 4096
[  116.207731][ T5085] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  116.240576][ T5081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  116.268335][   T28] audit: type=1400 audit(1794327764.157:842): avc:  denied  { nlmsg_read } for  pid=5093 comm="syz.0.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  116.320299][ T5085] EXT4-fs (loop2): 1 truncate cleaned up
[  116.351596][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  116.363482][  T725] EXT4-fs (loop1): unmounting filesystem.
[  116.397285][ T5065] loop6: detected capacity change from 0 to 40427
[  116.414646][   T28] audit: type=1400 audit(1794327764.318:843): avc:  denied  { watch } for  pid=5107 comm="syz.3.1894" path="/265/file0" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  116.446313][  T291] EXT4-fs (loop2): unmounting filesystem.
[  116.464303][ T5065] F2FS-fs (loop6): invalid crc value
[  116.505677][ T5065] F2FS-fs (loop6): Found nat_bits in checkpoint
[  116.533766][ T5129] sch_fq: defrate 0 ignored.
[  116.540750][ T5125] user requested TSC rate below hardware speed
[  116.548587][   T28] audit: type=1400 audit(1794327764.340:844): avc:  denied  { watch_reads } for  pid=5107 comm="syz.3.1894" path="/265/file0" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  116.607337][ T5065] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  116.636892][   T28] audit: type=1400 audit(1794327764.383:845): avc:  denied  { setopt } for  pid=5115 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.672828][ T4960] syz-executor: attempt to access beyond end of device
[  116.672828][ T4960] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  116.846547][ T5165] loop6: detected capacity change from 0 to 256
[  116.864884][ T5167] loop1: detected capacity change from 0 to 1024
[  116.876971][ T5165] exfat: Deprecated parameter 'utf8'
[  116.892229][ T5165] exfat: Deprecated parameter 'namecase'
[  116.903559][ T5167] EXT4-fs: Ignoring removed bh option
[  116.916803][ T5167] ext2: Unknown parameter 'mask'
[  116.923297][ T5165] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  116.941400][   T19] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.957073][   T28] audit: type=1400 audit(1794327764.898:846): avc:  denied  { append } for  pid=5164 comm="syz.6.1909" name="file0" dev="loop6" ino=1048802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.098868][ T5158] loop2: detected capacity change from 0 to 40427
[  117.119414][   T19] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.138977][ T5158] F2FS-fs (loop2): invalid crc value
[  117.161338][   T19] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  117.179229][ T5158] F2FS-fs (loop2): Found nat_bits in checkpoint
[  117.203707][   T19] usb 4-1: config 0 interface 0 has no altsetting 0
[  117.224385][   T19] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  117.241890][ T5158] F2FS-fs (loop2): Start checkpoint disabled!
[  117.253410][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.263840][ T5158] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  117.279947][   T19] usb 4-1: config 0 descriptor??
[  117.286028][ T5158] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  117.353872][ T1733] kworker/u4:10: attempt to access beyond end of device
[  117.353872][ T1733] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  117.496940][ T5210] loop6: detected capacity change from 0 to 512
[  117.529406][ T5210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  117.575485][ T5210] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  117.623490][ T5210] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  117.669998][   T19] hid (null): report_id 1987694355 is invalid
[  117.691886][ T5210] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1936: bg 0: block 248: padding at end of block bitmap is not set
[  117.708838][   T19] wacom 0003:056A:003F.000D: report_id 1987694355 is invalid
[  117.735420][   T19] wacom 0003:056A:003F.000D: item 0 4 1 8 parsing failed
[  117.742958][   T19] wacom 0003:056A:003F.000D: parse failed
[  117.764827][ T5210] Quota error (device loop6): write_blk: dquota write failed
[  117.791364][ T5210] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  117.802110][   T19] wacom: probe of 0003:056A:003F.000D failed with error -22
[  117.838462][ T5210] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.1936: Failed to acquire dquot type 1
[  117.857981][ T4395] usb 4-1: USB disconnect, device number 5
[  117.892672][ T5210] EXT4-fs (loop6): 1 truncate cleaned up
[  117.908315][ T5210] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  117.935672][ T5210] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.1936: deleted inode referenced: 12
[  117.979232][ T4960] EXT4-fs (loop6): unmounting filesystem.
[  118.039100][ T5247] loop6: detected capacity change from 0 to 512
[  118.064148][ T5247] EXT4-fs (loop6): Test dummy encryption mode enabled
[  118.090739][ T5247] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1951: inode has both inline data and extents flags
[  118.126250][ T5247] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1951: couldn't read orphan inode 15 (err -117)
[  118.161652][ T5247] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  118.206015][ T4960] EXT4-fs (loop6): unmounting filesystem.
[  118.467753][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'.
[  118.553910][ T5282] loop1: detected capacity change from 0 to 512
[  118.577353][ T5284] loop3: detected capacity change from 0 to 256
[  118.606810][ T5282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  118.626038][ T5284] exfat: Deprecated parameter 'utf8'
[  118.656755][ T5284] exfat: Deprecated parameter 'namecase'
[  118.682463][ T5227] F2FS-fs (loop2): invalid crc value
[  118.694509][  T725] EXT4-fs (loop1): unmounting filesystem.
[  118.712494][ T5284] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  118.741074][ T5227] F2FS-fs (loop2): Found nat_bits in checkpoint
[  118.783939][   T28] audit: type=1400 audit(1794327766.850:847): avc:  denied  { lock } for  pid=5283 comm="syz.3.1966" path=2F3237362FE91F7189591E9233614B2F66696C6531 dev="loop3" ino=1048803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  118.851740][ T5227] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  118.936850][   T28] audit: type=1400 audit(1794327766.893:848): avc:  denied  { unlink } for  pid=5283 comm="syz.3.1966" name="file1" dev="loop3" ino=1048803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  119.069662][   T28] audit: type=1400 audit(1794327766.979:849): avc:  denied  { rename } for  pid=5226 comm="syz.2.1941" name="file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  119.298210][ T5342] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  119.341704][ T5342] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  119.373668][ T5342] FAT-fs (loop1): Filesystem has been set read-only
[  119.473597][ T5314] F2FS-fs (loop0): invalid crc value
[  119.526848][ T5314] F2FS-fs (loop0): Found nat_bits in checkpoint
[  119.646099][ T5314] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  119.681474][ T5347] F2FS-fs (loop2): invalid crc value
[  119.711492][ T5347] F2FS-fs (loop2): Found nat_bits in checkpoint
[  119.724008][  T287] syz-executor: attempt to access beyond end of device
[  119.724008][  T287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.789850][ T5347] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  119.874955][  T291] syz-executor: attempt to access beyond end of device
[  119.874955][  T291] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  119.898089][ T5385] tap0: tun_chr_ioctl cmd 1074025677
[  119.919621][ T5385] tap0: linktype set to 6
[  119.991525][ T5392] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  120.037629][ T4960] EXT4-fs (loop6): unmounting filesystem.
[  120.107138][ T5405] EXT4-fs: Ignoring removed oldalloc option
[  120.132273][ T5407] device-mapper: verity: sha512 using implementation "sha512-avx2"
[  120.165704][ T5405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  120.184447][ T5405] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.222397][ T5405] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2017: bg 0: block 3: invalid block bitmap
[  120.258206][ T5405] EXT4-fs (loop1): Remounting filesystem read-only
[  120.297149][  T725] EXT4-fs (loop1): unmounting filesystem.
[  120.422985][ T5448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  120.434497][ T5407] device-mapper: table: 252:5: verity: Hash device is too small (-E2BIG)
[  120.481193][ T5407] device-mapper: ioctl: error adding target to table
[  120.488668][  T725] EXT4-fs (loop1): unmounting filesystem.
[  120.595493][ T5468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  120.623490][ T5468] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.647470][ T5482] input: syz1 as /devices/virtual/input/input8
[  120.690533][ T5485] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  120.730559][ T5488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2040: bg 0: block 345: padding at end of block bitmap is not set
[  120.772801][ T5485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  120.802321][ T5488] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117
[  120.880861][ T5488] EXT4-fs (loop2): This should not happen!! Data will be lost
[  120.880861][ T5488] 
[  120.943394][ T5468] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28
[  120.999342][  T287] EXT4-fs (loop0): unmounting filesystem.
[  121.007354][ T5468] EXT4-fs (loop2): This should not happen!! Data will be lost
[  121.007354][ T5468] 
[  121.023379][ T5509] set_capacity_and_notify: 10 callbacks suppressed
[  121.023394][ T5509] loop6: detected capacity change from 0 to 512
[  121.062390][ T5468] EXT4-fs (loop2): Total free blocks count 0
[  121.084943][ T5468] EXT4-fs (loop2): Free/Dirty block details
[  121.099081][ T5516] loop0: detected capacity change from 0 to 1024
[  121.112872][ T5518] ip_tables: iptables: counters copy to user failed while replacing table
[  121.121696][ T5468] EXT4-fs (loop2): free_blocks=0
[  121.156998][ T5468] EXT4-fs (loop2): dirty_blocks=480
[  121.175006][ T5516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  121.187730][ T5468] EXT4-fs (loop2): Block reservation details
[  121.279734][  T287] EXT4-fs (loop0): unmounting filesystem.
[  121.293596][ T5538] loop2: detected capacity change from 0 to 128
[  121.329731][ T5538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  121.369929][ T5538] ext4 filesystem being mounted at /393/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.400700][ T5551] loop0: detected capacity change from 0 to 16
[  121.415171][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  121.415181][   T28] audit: type=1400 audit(1794327769.672:867): avc:  denied  { wake_alarm } for  pid=5553 comm="syz.3.2074" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  121.480857][ T5551] erofs: (device loop0): erofs_read_inode: unsupported chunk format ffff of nid 36
[  121.499873][  T291] EXT4-fs (loop2): unmounting filesystem.
[  121.576967][   T28] audit: type=1400 audit(1794327769.726:868): avc:  denied  { execute } for  pid=5533 comm="syz.2.2065" path="/393/bus" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  121.632447][ T5574] netem: change failed
[  121.670998][ T5577] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  121.720649][   T28] audit: type=1400 audit(1794327769.908:869): avc:  denied  { execute_no_trans } for  pid=5569 comm="syz.2.2080" path="/395/file0" dev="tmpfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  121.799480][ T5588] loop3: detected capacity change from 0 to 256
[  121.839264][ T5588] exfat: Deprecated parameter 'namecase'
[  121.884849][ T5588] exfat: Deprecated parameter 'utf8'
[  121.898739][ T5598] loop1: detected capacity change from 0 to 1024
[  121.918085][ T5588] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  121.978135][ T5588] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  121.995270][ T5598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  122.017902][ T5598] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.090915][ T5598] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.2092: Freeing blocks not in datazone - block = 0, count = 16
[  122.108203][ T5539] loop6: detected capacity change from 0 to 40427
[  122.146711][ T5539] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  215.366688][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  215.373664][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5614
[  215.380953][    C0] 	(detected by 0, t=10002 jiffies, g=25993, q=676 ncpus=1)
[  215.388225][    C0] task:syz.3.2099      state:R  running task     stack:26184 pid:5614  ppid:2149   flags:0x00004000
[  215.399115][    C0] Call Trace:
[  215.402426][    C0]  <IRQ>
[  215.405277][    C0]  sched_show_task+0x391/0x550
[  215.410139][    C0]  ? __kasan_check_write+0x14/0x20
[  215.415271][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  215.421325][    C0]  ? __cfi_sched_show_task+0x10/0x10
[  215.426608][    C0]  ? wq_watchdog_touch+0x100/0x190
[  215.431743][    C0]  print_other_cpu_stall+0xd8d/0x10c0
[  215.437103][    C0]  ? print_cpu_stall+0x590/0x590
[  215.442037][    C0]  ? cpufreq_acct_update_power+0xc0/0x450
[  215.447746][    C0]  ? __kasan_check_read+0x11/0x20
[  215.452761][    C0]  rcu_sched_clock_irq+0x7bc/0x1310
[  215.457996][    C0]  ? __cfi_rcu_sched_clock_irq+0x10/0x10
[  215.463737][    C0]  ? debug_smp_processor_id+0x17/0x20
[  215.469102][    C0]  ? hrtimer_run_queues+0x166/0x420
[  215.474405][    C0]  update_process_times+0x148/0x1b0
[  215.479900][    C0]  tick_sched_timer+0x17c/0x240
[  215.484763][    C0]  ? __cfi_tick_sched_timer+0x10/0x10
[  215.490128][    C0]  __hrtimer_run_queues+0x398/0x8a0
[  215.495320][    C0]  ? hrtimer_interrupt+0x8c0/0x8c0
[  215.500467][    C0]  ? ktime_get_update_offsets_now+0x30c/0x320
[  215.506638][    C0]  hrtimer_interrupt+0x3ad/0x8c0
[  215.511580][    C0]  __sysvec_apic_timer_interrupt+0x11e/0x440
[  215.517653][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  215.523375][    C0]  </IRQ>
[  215.526318][    C0]  <TASK>
[  215.529324][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  215.535414][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60
[  215.541505][    C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 5c 90 21 06 48 89 de e8 64 e6 44 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d 90 fb 90 7e 65 8b 15 91 fb 90
[  215.561137][    C0] RSP: 0018:ffffc90000977988 EFLAGS: 00000286
[  215.567206][    C0] RAX: 0000000000000000 RBX: ffffc90000977a88 RCX: ffffc90000977a84
[  215.575274][    C0] RDX: 00000000fffffffe RSI: 0000000000000001 RDI: ffffc90000977a88
[  215.583282][    C0] RBP: ffffc900009779d0 R08: ffffc90000977c58 R09: ffffffff87b75018
[  215.591274][    C0] R10: ffffffff87b75003 R11: 1ffffffff0f6ea00 R12: dffffc0000000000
[  215.599341][    C0] R13: 00000000fffffffe R14: dffffc0000000000 R15: 0000000000000001
[  215.607327][    C0]  ? bpf_test_timer_continue+0x31/0x4a0
[  215.612869][    C0]  bpf_test_run+0x456/0x940
[  215.617452][    C0]  ? dst_hold+0xc0/0xc0
[  215.621602][    C0]  ? __cfi_eth_type_trans+0x10/0x10
[  215.626962][    C0]  ? convert___skb_to_skb+0x40/0x5b0
[  215.632441][    C0]  bpf_prog_test_run_skb+0xd64/0x18a0
[  215.637821][    C0]  ? __cfi_bpf_prog_test_run_skb+0x10/0x10
[  215.643654][    C0]  bpf_prog_test_run+0x3b4/0x5c0
[  215.648793][    C0]  ? bpf_prog_query+0x270/0x270
[  215.653751][    C0]  ? selinux_bpf+0xce/0xf0
[  215.658196][    C0]  ? security_bpf+0x93/0xb0
[  215.662791][    C0]  __sys_bpf+0x5ee/0x850
[  215.667040][    C0]  ? bpf_link_show_fdinfo+0x330/0x330
[  215.672607][    C0]  ? fpregs_restore_userregs+0x128/0x260
[  215.678347][    C0]  __x64_sys_bpf+0x7c/0x90
[  215.682778][    C0]  x64_sys_call+0x488/0x9a0
[  215.687299][    C0]  do_syscall_64+0x4c/0xa0
[  215.691744][    C0]  ? clear_bhb_loop+0x30/0x80
[  215.696435][    C0]  ? clear_bhb_loop+0x30/0x80
[  215.701101][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.706979][    C0] RIP: 0033:0x7f3b36fa8f19
[  215.711382][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.731242][    C0] RSP: 002b:00007f3b37d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  215.740773][    C0] RAX: ffffffffffffffda RBX: 00007f3b37225fa0 RCX: 00007f3b36fa8f19
[  215.748931][    C0] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  215.757161][    C0] RBP: 00007f3b37037f6d R08: 0000000000000000 R09: 0000000000000000
[  215.765501][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.773732][    C0] R13: 00007f3b37226038 R14: 00007f3b37225fa0 R15: 00007ffde14bedc8
[  215.781801][    C0]  </TASK>
[  215.784821][    C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g25993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  215.796204][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  215.806187][    C0] rcu: RCU grace-period kthread stack dump:
[  215.812256][    C0] task:rcu_preempt     state:R  running task     stack:28384 pid:14    ppid:2      flags:0x00004000
[  215.823042][    C0] Call Trace:
[  215.826324][    C0]  <TASK>
[  215.829248][    C0]  __schedule+0xcb3/0x1700
[  215.833751][    C0]  ? release_firmware_map_entry+0x190/0x190
[  215.840234][    C0]  ? __mod_timer+0x865/0xc00
[  215.844920][    C0]  schedule+0xbd/0x170
[  215.848999][    C0]  schedule_timeout+0x159/0x340
[  215.854031][    C0]  ? __cfi_schedule_timeout+0x10/0x10
[  215.859438][    C0]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  215.864912][    C0]  ? __cfi_process_timeout+0x10/0x10
[  215.870220][    C0]  ? prepare_to_swait_event+0x30f/0x330
[  215.875761][    C0]  rcu_gp_fqs_loop+0x2ed/0x1100
[  215.880603][    C0]  ? __cfi_dyntick_save_progress_counter+0x10/0x10
[  215.887108][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  215.893014][    C0]  ? rcu_gp_init+0xf30/0xf30
[  215.897593][    C0]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  215.903404][    C0]  ? finish_swait+0x185/0x1c0
[  215.908079][    C0]  rcu_gp_kthread+0x99/0x390
[  215.912740][    C0]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  215.918303][    C0]  ? try_to_wake_up+0x622/0x1250
[  215.923541][    C0]  ? __kasan_check_read+0x11/0x20
[  215.928693][    C0]  ? __kthread_parkme+0x13a/0x180
[  215.933731][    C0]  kthread+0x281/0x320
[  215.937896][    C0]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  215.943192][    C0]  ? __cfi_kthread+0x10/0x10
[  215.947912][    C0]  ret_from_fork+0x1f/0x30
[  215.952458][    C0]  </TASK>
[  215.955473][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  215.961897][    C0] CPU: 0 PID: 5614 Comm: syz.3.2099 Not tainted syzkaller #0
[  215.969269][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  215.979410][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60
[  215.985488][    C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 5c 90 21 06 48 89 de e8 64 e6 44 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d 90 fb 90 7e 65 8b 15 91 fb 90
[  216.005502][    C0] RSP: 0018:ffffc90000977988 EFLAGS: 00000286
[  216.011578][    C0] RAX: 0000000000000000 RBX: ffffc90000977a88 RCX: ffffc90000977a84
[  216.019794][    C0] RDX: 00000000fffffffe RSI: 0000000000000001 RDI: ffffc90000977a88
[  216.028029][    C0] RBP: ffffc900009779d0 R08: ffffc90000977c58 R09: ffffffff87b75018
[  216.036264][    C0] R10: ffffffff87b75003 R11: 1ffffffff0f6ea00 R12: dffffc0000000000
[  216.044418][    C0] R13: 00000000fffffffe R14: dffffc0000000000 R15: 0000000000000001
[  216.052570][    C0] FS:  00007f3b37d866c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  216.061874][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.068457][    C0] CR2: 000055556cff4908 CR3: 00000001360df000 CR4: 00000000003506b0
[  216.076599][    C0] Call Trace:
[  216.079908][    C0]  <TASK>
[  216.082829][    C0]  ? bpf_test_timer_continue+0x31/0x4a0
[  216.088372][    C0]  bpf_test_run+0x456/0x940
[  216.093009][    C0]  ? dst_hold+0xc0/0xc0
[  216.097290][    C0]  ? __cfi_eth_type_trans+0x10/0x10
[  216.102517][    C0]  ? convert___skb_to_skb+0x40/0x5b0
[  216.107891][    C0]  bpf_prog_test_run_skb+0xd64/0x18a0
[  216.113389][    C0]  ? __cfi_bpf_prog_test_run_skb+0x10/0x10
[  216.119203][    C0]  bpf_prog_test_run+0x3b4/0x5c0
[  216.124323][    C0]  ? bpf_prog_query+0x270/0x270
[  216.129268][    C0]  ? selinux_bpf+0xce/0xf0
[  216.133696][    C0]  ? security_bpf+0x93/0xb0
[  216.138255][    C0]  __sys_bpf+0x5ee/0x850
[  216.142509][    C0]  ? bpf_link_show_fdinfo+0x330/0x330
[  216.147969][    C0]  ? fpregs_restore_userregs+0x128/0x260
[  216.153625][    C0]  __x64_sys_bpf+0x7c/0x90
[  216.158136][    C0]  x64_sys_call+0x488/0x9a0
[  216.162795][    C0]  do_syscall_64+0x4c/0xa0
[  216.167306][    C0]  ? clear_bhb_loop+0x30/0x80
[  216.172011][    C0]  ? clear_bhb_loop+0x30/0x80
[  216.176688][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.182599][    C0] RIP: 0033:0x7f3b36fa8f19
[  216.187272][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.207233][    C0] RSP: 002b:00007f3b37d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  216.215749][    C0] RAX: ffffffffffffffda RBX: 00007f3b37225fa0 RCX: 00007f3b36fa8f19
[  216.223819][    C0] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  216.232259][    C0] RBP: 00007f3b37037f6d R08: 0000000000000000 R09: 0000000000000000
[  216.240511][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.248939][    C0] R13: 00007f3b37226038 R14: 00007f3b37225fa0 R15: 00007ffde14bedc8
[  216.256923][    C0]  </TASK>
[  216.260140][    C0] sched: RT throttling activated
[  401.423242][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 299s!
[  401.432371][    C0] Showing busy workqueues and worker pools:
[  401.438305][    C0] workqueue events: flags=0x0
[  401.442991][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=11/256 refcnt=12
[  401.443023][    C0]     pending: vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, jump_label_update_timeout
[  401.443298][    C0] workqueue events_long: flags=0x0
[  401.479533][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=12/256 refcnt=13
[  401.479570][    C0]     pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup
[  401.479799][    C0] workqueue events_unbound: flags=0x2
[  401.517404][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4
[  401.517435][    C0]     pending: toggle_allocation_gate, flush_memcg_stats_dwork
[  401.517534][    C0] workqueue events_power_efficient: flags=0x80
[  401.539067][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8
[  401.539097][    C0]     pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker, check_lifetime
[  401.539281][    C0] workqueue mm_percpu_wq: flags=0x8
[  401.567639][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.567672][    C0]     pending: vmstat_update
[  401.567698][    C0] workqueue writeback: flags=0x4a
[  401.585475][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=7/256 refcnt=9
[  401.585497][    C0]     pending: wb_update_bandwidth_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn
[  401.585619][    C0] workqueue kblockd: flags=0x18
[  401.609374][    C0]   pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=6/256 refcnt=7
[  401.609409][    C0]     pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work
[  401.609549][    C0] workqueue dm_bufio_cache: flags=0x8
[  401.636995][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.637028][    C0]     pending: work_fn
[  401.637099][    C0] workqueue ipv6_addrconf: flags=0x40008
[  401.654595][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=8
[  401.654619][    C0]     pending: addrconf_verify_work
[  401.654667][    C0]     inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
[  401.654737][    C0] workqueue wg-kex-wg0: flags=0x6
[  401.687862][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.687893][    C0]     pending: wg_packet_handshake_send_worker
[  401.687964][    C0] workqueue wg-crypt-wg0: flags=0x28
[  401.706956][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.706980][    C0]     pending: wg_packet_encrypt_worker
[  401.706998][    C0] workqueue wg-kex-wg1: flags=0x6
[  401.725258][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.725279][    C0]     pending: wg_packet_handshake_send_worker
[  401.725298][    C0] workqueue wg-crypt-wg1: flags=0x28
[  401.743882][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.743905][    C0]     pending: wg_packet_encrypt_worker
[  401.743920][    C0] workqueue wg-kex-wg2: flags=0x6
[  401.762190][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.762213][    C0]     pending: wg_packet_handshake_send_worker
[  401.762232][    C0] workqueue wg-crypt-wg2: flags=0x28
[  401.781181][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.781204][    C0]     pending: wg_packet_encrypt_worker
[  401.781219][    C0] workqueue wg-kex-wg1: flags=0x6
[  401.799376][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.799399][    C0]     pending: wg_packet_handshake_send_worker
[  401.799417][    C0] workqueue wg-crypt-wg1: flags=0x28
[  401.818033][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.818056][    C0]     pending: wg_packet_encrypt_worker
[  401.818070][    C0] workqueue wg-kex-wg2: flags=0x6
[  401.836528][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.836548][    C0]     pending: wg_packet_handshake_send_worker
[  401.836566][    C0] workqueue wg-crypt-wg2: flags=0x28
[  401.855164][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.855187][    C0]     pending: wg_packet_encrypt_worker
[  401.855200][    C0] workqueue wg-kex-wg0: flags=0x6
[  401.873715][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.873738][    C0]     pending: wg_packet_handshake_send_worker
[  401.873757][    C0] workqueue wg-crypt-wg0: flags=0x28
[  401.892391][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.892415][    C0]     pending: wg_packet_encrypt_worker
[  401.892433][    C0] workqueue wg-kex-wg2: flags=0x6
[  401.910592][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.910614][    C0]     pending: wg_packet_handshake_send_worker
[  401.910632][    C0] workqueue wg-crypt-wg2: flags=0x28
[  401.929441][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.929476][    C0]     pending: wg_packet_encrypt_worker
[  401.929501][    C0] workqueue wg-kex-wg2: flags=0x6
[  401.947698][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.947722][    C0]     pending: wg_packet_handshake_send_worker
[  401.947742][    C0] workqueue wg-crypt-wg2: flags=0x28
[  401.966532][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  401.966556][    C0]     pending: wg_packet_encrypt_worker
[  401.966573][    C0] workqueue wg-kex-wg0: flags=0x6
[  401.985038][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  401.985068][    C0]     pending: wg_packet_handshake_send_worker
[  401.985093][    C0] workqueue wg-crypt-wg0: flags=0x28
[  402.004196][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  402.004230][    C0]     pending: wg_packet_encrypt_worker
[  402.004258][    C0] workqueue wg-kex-wg1: flags=0x6
[  402.022569][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  402.022595][    C0]     pending: wg_packet_handshake_send_worker
[  402.022614][    C0] workqueue wg-crypt-wg1: flags=0x28
[  402.041531][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  402.041564][    C0]     pending: wg_packet_encrypt_worker
[  402.041587][    C0] workqueue wg-kex-wg2: flags=0x6
[  402.060121][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  402.060150][    C0]     pending: wg_packet_handshake_send_worker
[  402.060173][    C0] workqueue wg-crypt-wg2: flags=0x28
[  402.079053][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  402.079081][    C0]     pending: wg_packet_encrypt_worker
[  402.079102][    C0] workqueue wg-crypt-wg0: flags=0x28
[  402.097599][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  402.097630][    C0]     pending: wg_packet_encrypt_worker
[  402.097653][    C0] workqueue wg-kex-wg1: flags=0x6
[  402.116119][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  402.116145][    C0]     pending: wg_packet_handshake_send_worker
[  402.116164][    C0] workqueue wg-crypt-wg1: flags=0x28
[  402.135074][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  402.135111][    C0]     pending: wg_packet_encrypt_worker
[  402.135133][    C0] workqueue wg-kex-wg2: flags=0x6
[  402.153322][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  402.153355][    C0]     pending: wg_packet_handshake_send_worker
[  402.153380][    C0] workqueue wg-crypt-wg2: flags=0x28
[  402.172501][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  402.172536][    C0]     pending: wg_packet_encrypt_worker