last executing test programs:

29.480191844s ago: executing program 0 (id=466):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='/,0x400000,0x4', 0xe)

29.456495885s ago: executing program 0 (id=467):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0xb}, 0x0, &(0x7f0000000140)="0000fa7eaeb6500012c460", 0x0)

29.456115995s ago: executing program 0 (id=468):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='common_pid > 0X', 0xf)

29.372542977s ago: executing program 0 (id=469):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@i_version}, {@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x7ff}}]}, 0xfc, 0x4b8, &(0x7f0000000a40)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'security.', '/+\x00'}, 0x0, 0x0)

29.294047479s ago: executing program 0 (id=470):
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80080000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00')
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020)

29.076566894s ago: executing program 0 (id=472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x48}}, 0x0)

29.076365964s ago: executing program 32 (id=472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x48}}, 0x0)

3.00259062s ago: executing program 2 (id=1030):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230", @ANYRESDEC, @ANYRESHEX, @ANYRES8=0x0], 0x1, 0x105d6, &(0x7f0000010640)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab)
fchown(r0, 0x0, 0x0)

1.207012782s ago: executing program 5 (id=1057):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000140)={0x3})

1.206048482s ago: executing program 2 (id=1059):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xc0010117, 0x0, 0x8}]})

1.093374534s ago: executing program 5 (id=1061):
capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x14, r1, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

1.021099966s ago: executing program 5 (id=1062):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x2201, 0x0)

971.643657ms ago: executing program 5 (id=1065):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1feff)

685.098675ms ago: executing program 3 (id=1073):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x5319, 0x0)

536.342558ms ago: executing program 4 (id=1076):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81c99, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20)

525.085598ms ago: executing program 3 (id=1077):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[], 0x0)

478.118459ms ago: executing program 4 (id=1079):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18)
setreuid(0xffffffffffffffff, 0xee01)
utimensat(r0, 0x0, 0x0, 0x0)

442.69309ms ago: executing program 1 (id=1080):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x9, 0x8, 0x2}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20)
ppoll(&(0x7f0000000040)=[{r1, 0x2122}], 0x1, 0x0, 0x0, 0x0)

418.189121ms ago: executing program 5 (id=1081):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x48)

416.719281ms ago: executing program 3 (id=1082):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000bc0)={[{@rodir}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_win95}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f1, &(0x7f0000001140)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xc2143, 0x11)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88)
getdents64(r0, &(0x7f0000000000)=""/134, 0x86)

406.742461ms ago: executing program 4 (id=1083):
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0)

344.562043ms ago: executing program 1 (id=1084):
openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0)

327.469832ms ago: executing program 4 (id=1085):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x40, &(0x7f0000000080)={0x11, 0x19, r1, 0x1, 0xe5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

314.404863ms ago: executing program 1 (id=1086):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240, 0x0, 0x0, 0x5})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

243.301974ms ago: executing program 4 (id=1087):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000005000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

204.481506ms ago: executing program 3 (id=1088):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0)
lseek(r0, 0x2dc, 0x2)

204.186946ms ago: executing program 1 (id=1089):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x32, 0x6, 0x0, {0x2, 0x6, 0x9, 0x0, 'nodiscard'}}, 0x32)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf2508000000180004"], 0x2c}}, 0x40000000)

203.993595ms ago: executing program 5 (id=1090):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setlink={0x3c, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c040941}, 0x0)

203.558595ms ago: executing program 2 (id=1091):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x24008040, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0x8}, 0x1c)
shutdown(r0, 0x1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)

166.713026ms ago: executing program 1 (id=1092):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f)
read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020)

130.473847ms ago: executing program 4 (id=1093):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1feff)

130.151757ms ago: executing program 3 (id=1094):
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="190000"], 0x50)

129.934147ms ago: executing program 2 (id=1095):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x20, 0x11}, {0x80000000, 0x9, 0x1ff, 0x2, 0xc, 0x40000000081, 0xfc, 0x1}, {0x800, 0x4d, 0x2cb, 0x1}, 0x85, 0xfffffffc, 0x2, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

92.275008ms ago: executing program 1 (id=1096):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)

63.974378ms ago: executing program 2 (id=1097):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

51.711689ms ago: executing program 3 (id=1098):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
read(r0, &(0x7f0000001000)=""/8192, 0x2000)

0s ago: executing program 2 (id=1099):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000004c0)="f0", 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e06, 0x80000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x90000}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)

kernel console output (not intermixed with test programs):

nk becomes ready
[   27.775472][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   27.783484][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.791787][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.799242][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.806796][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.814328][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.826746][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   27.835215][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.855408][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   27.863011][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   27.870431][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   27.879088][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   27.888658][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.895734][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.903348][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   27.911764][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   27.920074][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.927152][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.934751][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   27.943194][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.951556][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   27.960884][  T288] device veth1_macvtap entered promiscuous mode
[   27.972781][  T287] device veth0_vlan entered promiscuous mode
[   27.979418][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   27.987288][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   27.995341][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.004007][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.012183][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.025957][  T285] device veth1_macvtap entered promiscuous mode
[   28.033128][  T286] device veth0_vlan entered promiscuous mode
[   28.046763][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.054286][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.062295][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.069697][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.077657][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.085951][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.094269][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   28.102062][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.110271][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.118826][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.127196][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.137070][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   28.145316][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.158029][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.166665][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.175337][  T287] device veth1_macvtap entered promiscuous mode
[   28.189082][  T288] request_module fs-gadgetfs succeeded, but still no fs?
[   28.196349][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   28.204424][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.213195][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.221561][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.229770][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.253185][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   28.261896][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.270028][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.285100][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.293680][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.301982][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.310318][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.318674][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.337821][  T289] device veth0_vlan entered promiscuous mode
[   28.346895][  T286] device veth1_macvtap entered promiscuous mode
[   28.361371][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   28.369054][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   28.378996][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.387545][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.395969][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.426543][  T289] device veth1_macvtap entered promiscuous mode
[   28.440928][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.448709][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.456483][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.466619][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.475325][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.483815][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.492960][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.501416][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.509629][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   28.551524][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.570944][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.581374][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.601204][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.728971][  T334] loop4: detected capacity change from 0 to 512
[   28.801648][  T334] =======================================================
[   28.801648][  T334] WARNING: The mand mount option has been deprecated and
[   28.801648][  T334]          and is ignored by this kernel. Remove the mand
[   28.801648][  T334]          option from the mount to silence this warning.
[   28.801648][  T334] =======================================================
[   28.877677][  T334] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   28.888957][  T329] loop0: detected capacity change from 0 to 40427
[   28.905933][  T329] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   28.917631][  T329] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   28.923638][  T334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[   28.931697][  T329] F2FS-fs (loop0): invalid crc value
[   28.940123][  T334] EXT4-fs (loop4): orphan cleanup on readonly fs
[   28.946944][  T334] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.11: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 257(257)
[   28.967132][  T334] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.11: couldn't read orphan inode 16 (err -117)
[   28.979500][  T334] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none.
[   28.998178][  T329] F2FS-fs (loop0): Found nat_bits in checkpoint
[   29.076147][  T329] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   29.083855][  T329] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   29.158872][  T285] attempt to access beyond end of device
[   29.158872][  T285] loop0: rw=2049, want=40968, limit=40427
[   29.321221][  T355] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   29.507619][  T369] loop3: detected capacity change from 0 to 512
[   29.537659][  T369] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   29.563816][  T369] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.23: bg 0: block 393: padding at end of block bitmap is not set
[   29.578476][  T369] EXT4-fs (loop3): Remounting filesystem read-only
[   29.596995][  T369] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   29.610815][  T369] EXT4-fs (loop3): Remounting filesystem read-only
[   29.617607][  T369] EXT4-fs (loop3): 2 truncates cleaned up
[   29.625106][  T369] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback.
[   29.644869][  T369] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1479: inode #12: block 7: comm syz.3.23: path /8/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   29.651856][  T373] loop1: detected capacity change from 0 to 512
[   29.672846][  T369] EXT4-fs (loop3): Remounting filesystem read-only
[   29.746846][  T373] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[   29.755273][  T373] System zones: 0-2, 18-18, 34-35
[   29.761663][  T373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   29.774234][  T373] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.810163][  T379] bridge0: port 3(syz_tun) entered blocking state
[   29.816847][  T379] bridge0: port 3(syz_tun) entered disabled state
[   29.826522][  T379] device syz_tun entered promiscuous mode
[   29.833415][  T379] bridge0: port 3(syz_tun) entered blocking state
[   29.839900][  T379] bridge0: port 3(syz_tun) entered forwarding state
[   30.057907][  T400] loop1: detected capacity change from 0 to 16
[   30.084472][  T400] erofs: (device loop1): mounted with root inode @ nid 36.
[   30.223798][  T407] loop1: detected capacity change from 0 to 512
[   30.308674][  T407] EXT4-fs (loop1): Test dummy encryption mode enabled
[   30.323436][  T407] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.39: inode has both inline data and extents flags
[   30.350551][  T407] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.39: couldn't read orphan inode 15 (err -117)
[   30.362781][  T407] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   30.380154][   T30] kauditd_printk_skb: 69 callbacks suppressed
[   30.380168][   T30] audit: type=1400 audit(1787153922.072:143): avc:  denied  { create } for  pid=406 comm="syz.1.39" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   30.407461][  T407] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   30.419168][   T30] audit: type=1400 audit(1787153922.112:144): avc:  denied  { setattr } for  pid=406 comm="syz.1.39" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   30.490532][  T416] loop1: detected capacity change from 0 to 512
[   30.514306][  T416] EXT4-fs (loop1): Ignoring removed nobh option
[   30.551859][  T416] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[   30.571014][  T416] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.614015][  T416] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.41: corrupted inode contents
[   30.640237][  T416] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #2: comm syz.1.41: mark_inode_dirty error
[   30.666040][  T416] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.41: corrupted inode contents
[   30.705743][  T416] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.41: mark_inode_dirty error
[   30.731307][   T30] audit: type=1400 audit(1787153922.432:145): avc:  denied  { remove_name } for  pid=415 comm="syz.1.41" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   30.762486][  T423] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #18: comm syz.1.41: directory missing '.'
[   30.820622][   T30] audit: type=1400 audit(1787153922.462:146): avc:  denied  { rmdir } for  pid=415 comm="syz.1.41" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   30.854455][  T425] loop3: detected capacity change from 0 to 4096
[   30.903660][   T30] audit: type=1400 audit(1787153922.602:147): avc:  denied  { mounton } for  pid=426 comm="syz.1.45" path="/10/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   30.941387][  T398] loop4: detected capacity change from 0 to 131072
[   30.978091][  T425] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   30.992577][   T30] audit: type=1400 audit(1787153922.692:148): avc:  denied  { write } for  pid=424 comm="syz.3.44" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.019846][  T398] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[   31.039275][  T422] loop0: detected capacity change from 0 to 40427
[   31.057577][  T398] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   31.071216][  T422] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   31.079190][  T422] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   31.091360][  T422] F2FS-fs (loop0): invalid crc value
[   31.098223][  T422] F2FS-fs (loop0): Found nat_bits in checkpoint
[   31.128500][  T398] F2FS-fs (loop4): invalid crc value
[   31.144126][  T422] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   31.148323][   T30] audit: type=1400 audit(1787153922.722:149): avc:  denied  { open } for  pid=424 comm="syz.3.44" path="/13/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.152248][  T422] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   31.191813][  T398] F2FS-fs (loop4): Found nat_bits in checkpoint
[   31.257381][  T398] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   31.264790][  T398] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   31.286923][   T30] audit: type=1400 audit(1787153922.792:150): avc:  denied  { ioctl } for  pid=424 comm="syz.3.44" path="/13/file0/file1" dev="loop3" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.360262][   T30] audit: type=1400 audit(1787153923.032:151): avc:  denied  { read write } for  pid=448 comm="syz.1.51" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   31.423570][   T30] audit: type=1400 audit(1787153923.032:152): avc:  denied  { open } for  pid=448 comm="syz.1.51" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   31.453891][  T398] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[   31.467855][  T452] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   31.538720][  T452] exFAT-fs (loop2): invalid start cluster (17)
[   31.686654][  T464] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   31.706701][  T464] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   31.729646][   T10] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   32.005261][  T485] exfat: Deprecated parameter 'utf8'
[   32.011064][  T485] exfat: Deprecated parameter 'utf8'
[   32.016458][  T485] exfat: Deprecated parameter 'utf8'
[   32.022018][  T485] exfat: Deprecated parameter 'namecase'
[   32.030071][  T481] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,bsddf,,errors=continue. Quota mode: writeback.
[   32.045974][  T485] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   32.058303][  T481] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.122982][  T481] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.64: corrupted xattr block 6
[   32.135236][  T481] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=12
[   32.144740][  T481] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.64: corrupted xattr block 6
[   32.156918][  T481] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=12
[   32.167727][  T481] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.64: corrupted xattr block 6
[   32.193180][  T481] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=12
[   32.202508][  T481] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.64: corrupted xattr block 6
[   32.215616][  T481] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=12
[   32.258821][  T490] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   32.269110][  T490] System zones: 1-3, 19-19, 35-36
[   32.275272][  T490] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[   32.293251][  T490] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   32.364366][  T504] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   32.427588][  T506] EXT4-fs (loop4): Test dummy encryption mode enabled
[   32.459575][  T506] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.75: inode has both inline data and extents flags
[   32.460337][  T506] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.75: couldn't read orphan inode 15 (err -117)
[   32.460757][  T506] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   32.700662][  T305] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   32.862915][  T537] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   32.870304][  T537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   32.891502][  T537] F2FS-fs (loop3): invalid crc value
[   32.901312][  T537] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   32.952295][  T537] F2FS-fs (loop3): Start checkpoint disabled!
[   32.960977][  T537] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   32.965288][  T557] netlink: 292 bytes leftover after parsing attributes in process `syz.2.96'.
[   32.968232][  T537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   33.005075][  T557] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   33.005235][  T537] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT
[   33.020689][  T557] netlink: 'syz.2.96': attribute type 2 has an invalid length.
[   33.090671][  T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.107514][  T305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   33.190712][  T305] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   33.202829][  T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[   33.211480][  T305] usb 2-1: SerialNumber: syz
[   33.427591][  T572] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   33.435684][  T572] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   33.485045][  T572] F2FS-fs (loop4): Found nat_bits in checkpoint
[   33.514558][  T589] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   33.523330][  T584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   33.537169][  T305] usb 2-1: 0:2 : does not exist
[   33.543322][  T305] usb 2-1: USB disconnect, device number 2
[   33.551844][  T584] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   33.617699][  T572] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   33.625217][  T572] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   33.786968][  T581] set_capacity_and_notify: 10 callbacks suppressed
[   33.786986][  T581] loop3: detected capacity change from 0 to 40427
[   33.804417][  T581] F2FS-fs (loop3): Unrecognized mount option "0xffffffffffffffff00000000000000000000ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ01777777777777777777777ÿ>ÿǯiûÃÓ$îlt(ÿÙ­Ü×ëQ‘tÎ?2Ö6‹‰æÛ®â)~®J`œ+!È®ÉéÌæìûXŽ?e;bÁsé’ª_�Óv�‡yH&HËç|ÊÇAø¨áɦW" or missing value
[   33.943700][  T605] loop0: detected capacity change from 0 to 256
[   33.980912][  T605] exfat: Deprecated parameter 'utf8'
[   33.986286][  T605] exfat: Deprecated parameter 'namecase'
[   34.010697][  T605] exfat: Deprecated parameter 'namecase'
[   34.033733][  T605] exfat: Deprecated parameter 'utf8'
[   34.088308][  T605] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[   34.247250][  T626] SELinux:  policydb table sizes (8,2097159) do not match mine (8,7)
[   34.266070][  T626] SELinux: failed to load policy
[   34.303108][  T633] loop0: detected capacity change from 0 to 16
[   34.415463][  T648] process 'syz.1.135' launched './file1' with NULL argv: empty string added
[   34.436381][  T633] erofs: (device loop0): mounted with root inode @ nid 36.
[   34.602373][  T671] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   34.763098][  T683] loop1: detected capacity change from 0 to 512
[   34.884273][  T683] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   34.908688][  T668] loop2: detected capacity change from 0 to 40427
[   34.909589][  T683] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   34.932185][  T668] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   34.948280][  T603] loop3: detected capacity change from 0 to 131072
[   34.951417][  T668] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   34.963964][  T683] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   34.981335][  T683] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   34.991794][  T683] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   35.000305][  T683] EXT4-fs (loop1): orphan cleanup on readonly fs
[   35.008153][  T683] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.152: bg 0: block 34: padding at end of block bitmap is not set
[   35.022953][  T683] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.152: Failed to acquire dquot type 1
[   35.038959][  T603] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[   35.048305][  T603] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   35.051783][  T668] F2FS-fs (loop2): Found nat_bits in checkpoint
[   35.063133][  T603] F2FS-fs (loop3): invalid crc value
[   35.063993][  T683] EXT4-fs (loop1): 1 truncate cleaned up
[   35.125682][  T603] F2FS-fs (loop3): Found nat_bits in checkpoint
[   35.154156][  T683] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000001,noquota,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback.
[   35.217479][  T668] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   35.230636][  T668] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   35.267623][  T603] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   35.279803][  T603] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   35.321394][  T668] netlink: 300 bytes leftover after parsing attributes in process `syz.2.145'.
[   35.366585][  T603] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=9000000, run fsck to fix.
[   35.389355][  T603] F2FS-fs (loop3): sanity_check_inode: inode (ino=7) has corrupted i_xattr_nid: 150994944, run fsck to fix.
[   35.409988][   T30] kauditd_printk_skb: 73 callbacks suppressed
[   35.410004][   T30] audit: type=1400 audit(1787153927.102:224): avc:  denied  { mounton } for  pid=602 comm="syz.3.114" path="/28/bus/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   35.421849][  T603] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=9000000, run fsck to fix.
[   35.480636][  T603] F2FS-fs (loop3): sanity_check_inode: inode (ino=7) has corrupted i_xattr_nid: 150994944, run fsck to fix.
[   35.506893][  T603] overlayfs: failed to resolve './file1': -117
[   35.540663][   T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   35.678104][  T720] tap0: tun_chr_ioctl cmd 99999999
[   35.772373][   T30] audit: type=1400 audit(1787153927.472:225): avc:  denied  { setopt } for  pid=728 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.812676][   T30] audit: type=1400 audit(1787153927.472:226): avc:  denied  { write } for  pid=728 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.863063][  T734] loop1: detected capacity change from 0 to 128
[   35.920860][   T39] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   35.937944][   T39] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   35.958428][  T734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   35.970691][   T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   35.979950][  T734] System zones: 1-3, 19-19, 35-36
[   35.999914][   T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   36.031164][  T734] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[   36.060619][   T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   36.072024][  T734] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   36.146988][   T30] audit: type=1400 audit(1787153927.842:227): avc:  denied  { setopt } for  pid=738 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   36.182707][  T734] EXT4-fs (loop1): resizing filesystem from 64 to 2 blocks
[   36.211341][  T734] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted
[   36.234690][  T743] loop3: detected capacity change from 0 to 256
[   36.271219][   T39] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   36.290694][   T39] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   36.304059][   T30] audit: type=1400 audit(1787153928.002:228): avc:  denied  { write } for  pid=744 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   36.558693][   T39] usb 1-1: Product: syz
[   36.562987][   T39] usb 1-1: Manufacturer: syz
[   36.574456][  T735] loop2: detected capacity change from 0 to 131072
[   36.596759][   T30] audit: type=1400 audit(1787153928.292:229): avc:  denied  { create } for  pid=746 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   36.621110][   T39] cdc_wdm 1-1:1.0: skipping garbage
[   36.626365][   T39] cdc_wdm 1-1:1.0: skipping garbage
[   36.638016][  T735] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[   36.647005][   T39] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[   36.658433][   T30] audit: type=1400 audit(1787153928.312:230): avc:  denied  { write } for  pid=746 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   36.703195][  T735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   36.713548][  T735] F2FS-fs (loop2): invalid crc value
[   36.734149][  T735] F2FS-fs (loop2): Found nat_bits in checkpoint
[   36.759958][   T30] audit: type=1400 audit(1787153928.452:231): avc:  denied  { create } for  pid=759 comm="syz.1.181" dev="anon_inodefs" ino=17363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   36.785137][   T30] audit: type=1400 audit(1787153928.482:232): avc:  denied  { ioctl } for  pid=759 comm="syz.1.181" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17363 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   36.818946][  T735] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   36.826914][  T735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   36.887869][  T735] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=9000000, run fsck to fix.
[   36.908131][  T735] F2FS-fs (loop2): sanity_check_inode: inode (ino=7) has corrupted i_xattr_nid: 150994944, run fsck to fix.
[   36.937395][  T735] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=9000000, run fsck to fix.
[   36.948804][  T772] loop1: detected capacity change from 0 to 256
[   36.967344][  T735] F2FS-fs (loop2): sanity_check_inode: inode (ino=7) has corrupted i_xattr_nid: 150994944, run fsck to fix.
[   36.995438][  T735] overlayfs: failed to resolve './file1': -117
[   37.020892][  T772] exfat: Deprecated parameter 'namecase'
[   37.026619][  T772] exfat: Deprecated parameter 'namecase'
[   37.050748][   T20] usb 1-1: USB disconnect, device number 2
[   37.057439][  T772] exfat: Deprecated parameter 'utf8'
[   37.086794][  T772] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   37.135588][   T30] audit: type=1400 audit(1787153928.832:233): avc:  denied  { setattr } for  pid=771 comm="syz.1.185" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.695270][  T791] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   37.741962][  T791] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[   37.793201][  T791] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.044020][  T803] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.199: inode #15: comm syz.0.199: iget: illegal inode #
[   38.076819][  T803] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.199: couldn't read orphan inode 15 (err -117)
[   38.108986][  T803] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,jqfmt=vfsv0,min_batch_time=0x0000000000000007,noload,bsdgroups,noblock_validity,inode_readahead_blks=0x0000000000800000,inode_readahead_blks=0x0000000000000000,delalloc,,errors=continue. Quota mode: none.
[   38.261610][  T814] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.326529][  T818] exfat: Deprecated parameter 'namecase'
[   38.340665][  T818] exfat: Deprecated parameter 'namecase'
[   38.346416][  T814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   38.373577][  T818] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   38.398871][  T814] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   38.460193][  T814] EXT4-fs (loop3): 1 truncate cleaned up
[   38.483072][  T814] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[   38.761106][  T793] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[   38.770359][  T793] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   38.799806][  T793] F2FS-fs (loop2): invalid crc value
[   38.827612][  T847] syz.3.219 (847) used greatest stack depth: 20256 bytes left
[   38.851750][  T793] F2FS-fs (loop2): Found nat_bits in checkpoint
[   38.953439][  T793] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   38.970732][  T793] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   39.086099][  T768] set_capacity_and_notify: 6 callbacks suppressed
[   39.086116][  T768] loop4: detected capacity change from 0 to 262144
[   39.122749][  T768] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9)
[   39.133036][  T768] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   39.161608][  T768] F2FS-fs (loop4): Found nat_bits in checkpoint
[   39.180680][   T58] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   39.259288][  T768] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   39.266467][  T768] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   39.580750][   T58] usb 4-1: unable to get BOS descriptor or descriptor too short
[   39.649350][  T883] loop2: detected capacity change from 0 to 4096
[   39.660770][   T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   39.685811][  T883] EXT4-fs (loop2): Test dummy encryption mode enabled
[   39.692940][  T883] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   39.721603][  T883] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[   39.739991][  T883] System zones: 0-5
[   39.744944][  T883] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,block_validity,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[   39.801501][  T871] loop1: detected capacity change from 0 to 131072
[   39.877750][  T871] F2FS-fs (loop1): Test dummy encryption mode enabled
[   39.893346][  T871] F2FS-fs (loop1): invalid crc value
[   39.910755][   T58] usb 4-1: string descriptor 0 read error: -22
[   39.917752][   T58] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   39.931576][  T871] F2FS-fs (loop1): Found nat_bits in checkpoint
[   39.937515][   T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.006086][  T871] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   40.127987][  T904] device veth1_to_batadv entered promiscuous mode
[   40.294216][  T928] loop4: detected capacity change from 0 to 512
[   40.514067][   T30] kauditd_printk_skb: 38 callbacks suppressed
[   40.514084][   T30] audit: type=1400 audit(1787153932.212:272): avc:  denied  { shutdown } for  pid=956 comm="syz.0.266" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.648950][   T30] audit: type=1400 audit(1787153932.342:273): avc:  denied  { write } for  pid=970 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   40.670693][   T58] usb 4-1: 1:1: cannot get freq at ep 0x1
[   40.690337][   T58] usb 4-1: USB disconnect, device number 2
[   40.723724][   T30] audit: type=1326 audit(1787153932.422:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.0.273" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea415c0d9 code=0x7ffc0000
[   40.780773][   T30] audit: type=1326 audit(1787153932.422:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.0.273" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea415c0d9 code=0x7ffc0000
[   40.845437][   T30] audit: type=1326 audit(1787153932.422:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.0.273" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea415c0d9 code=0x7ffc0000
[   40.889265][   T30] audit: type=1326 audit(1787153932.422:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.0.273" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbea415c0d9 code=0x7ffc0000
[   40.914344][   T30] audit: type=1326 audit(1787153932.422:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.0.273" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea415c0d9 code=0x7ffc0000
[   40.939299][   T30] audit: type=1326 audit(1787153932.422:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.0.273" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea415c0d9 code=0x7ffc0000
[   40.962482][  T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   40.982406][   T30] audit: type=1326 audit(1787153932.422:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.0.273" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea415c0d9 code=0x7ffc0000
[   41.018538][   T30] audit: type=1326 audit(1787153932.422:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=974 comm="syz.0.273" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbea415c0d9 code=0x7ffc0000
[   41.061231][  T992] loop4: detected capacity change from 0 to 512
[   41.066437][  T993] loop2: detected capacity change from 0 to 256
[   41.136784][  T992] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   41.148266][  T992] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.160613][   T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   41.223265][ T1004] loop2: detected capacity change from 0 to 1024
[   41.235965][ T1004] EXT4-fs (loop2): Ignoring removed orlov option
[   41.269353][ T1004] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[   41.297070][ T1004] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   41.410636][   T20] usb 1-1: Using ep0 maxpacket: 32
[   41.444115][ T1034] loop2: detected capacity change from 0 to 2048
[   41.492276][ T1034] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   41.506991][ T1034] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   41.522236][ T1034] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   41.534723][ T1034] EXT4-fs (loop2): This should not happen!! Data will be lost
[   41.534723][ T1034] 
[   41.544465][ T1034] EXT4-fs (loop2): Total free blocks count 0
[   41.550553][ T1034] EXT4-fs (loop2): Free/Dirty block details
[   41.556536][ T1034] EXT4-fs (loop2): free_blocks=66060288
[   41.562241][   T20] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   41.570336][   T20] usb 1-1: config 0 has no interface number 0
[   41.576480][ T1034] EXT4-fs (loop2): dirty_blocks=32
[   41.581651][ T1034] EXT4-fs (loop2): Block reservation details
[   41.587684][ T1034] EXT4-fs (loop2): i_reserved_data_blocks=2
[   41.593760][ T1034] EXT4-fs error (device loop2) in ext4_setattr:5676: error 28
[   41.610721][    T8] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   41.623366][    T8] EXT4-fs (loop2): This should not happen!! Data will be lost
[   41.623366][    T8] 
[   41.750687][   T20] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   41.759996][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.770280][   T20] usb 1-1: Product: syz
[   41.774653][   T20] usb 1-1: Manufacturer: syz
[   41.779315][   T20] usb 1-1: SerialNumber: syz
[   41.792415][   T20] usb 1-1: config 0 descriptor??
[   41.831409][   T20] smsc95xx v2.0.0
[   42.159539][ T1055] loop1: detected capacity change from 0 to 40427
[   42.184161][ T1055] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   42.192160][ T1055] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   42.207534][ T1055] F2FS-fs (loop1): Found nat_bits in checkpoint
[   42.247529][ T1055] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   42.254804][   T20] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   42.269642][ T1055] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   42.277617][   T20] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   42.360767][   T39] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   42.425255][ T1071] netlink: 'syz.1.310': attribute type 5 has an invalid length.
[   42.466872][ T1077] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   42.550666][   T20] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   42.574342][   T20] smsc95xx: probe of 1-1:0.67 failed with error -71
[   42.600410][   T20] usb 1-1: USB disconnect, device number 3
[   42.730689][   T39] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   42.753687][   T39] usb 4-1: config 0 interface 0 has no altsetting 0
[   42.760342][   T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00
[   42.779908][ T1088] loop2: detected capacity change from 0 to 40427
[   42.786456][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.811470][ T1088] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   42.822573][   T39] usb 4-1: config 0 descriptor??
[   42.828030][ T1088] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   42.861214][ T1096] EXT4-fs (loop1): Ignoring removed bh option
[   42.881969][ T1088] F2FS-fs (loop2): Found nat_bits in checkpoint
[   42.901033][ T1096] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,min_batch_time=0x000000007fffffff,barrier=0x0000000000000004,quota,debug_want_extra_isize=0x0000000000000080,errors=continue,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: writeback.
[   42.938925][ T1088] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   42.956655][ T1096] EXT4-fs (loop1): shut down requested (2)
[   42.963463][ T1088] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   42.973080][ T1096] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop1 ino=16
[   42.982130][ T1096] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop1 ino=16
[   42.991149][ T1096] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop1 ino=16
[   43.129489][ T1109] EXT4-fs (loop1): Ignoring removed orlov option
[   43.154552][ T1115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'.
[   43.164256][ T1109] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,user_xattr,bsddf,orlov,abort,errors=continue,discard,,errors=continue. Quota mode: none.
[   43.215341][ T1109] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.312322][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x5
[   43.332596][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x6
[   43.345478][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0
[   43.354034][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0
[   43.385132][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0
[   43.393795][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0
[   43.402401][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0
[   43.410950][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0
[   43.419329][   T39] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0
[   43.446831][   T39] logitech-hidpp-device 0003:046D:C081.0001: hidraw0: USB HID v0.c1 Device [HID 046d:c081] on usb-dummy_hcd.3-1/input0
[   43.486858][ T1093] F2FS-fs (loop4): invalid crc value
[   43.524434][   T39] usb 4-1: USB disconnect, device number 3
[   43.544232][ T1136] fido_id[1136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   43.555448][ T1134] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[   43.574503][ T1093] F2FS-fs (loop4): Found nat_bits in checkpoint
[   43.581097][ T1138] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   43.607819][ T1138] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz.1.336: corrupted in-inode xattr
[   43.629731][ T1134] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.629794][ T1138] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.336: couldn't read orphan inode 15 (err -117)
[   43.674990][ T1093] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   43.681986][ T1138] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,nodiscard,noload,user_xattr,mblk_io_submit,noinit_itable,journal_ioprio=0x0000000000000006,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000001,errors=continue. Quota mode: none.
[   43.718473][ T1093] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   43.854539][ T1159] capability: warning: `syz.1.341' uses deprecated v2 capabilities in a way that may be insecure
[   44.345273][ T1198] binder: 1196:1198 ioctl 400c620e 200000000040 returned -22
[   44.374050][ T1204] set_capacity_and_notify: 5 callbacks suppressed
[   44.374068][ T1204] loop3: detected capacity change from 0 to 256
[   44.405435][ T1204] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[   44.491739][ T1208] loop3: detected capacity change from 0 to 512
[   44.511709][ T1210] loop1: detected capacity change from 0 to 256
[   44.518122][ T1208] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   44.547206][ T1208] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   44.561844][ T1208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102]
[   44.580419][ T1208] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[   44.590642][ T1208] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[   44.599696][ T1210] exfat: Deprecated parameter 'utf8'
[   44.612528][ T1210] exfat: Deprecated parameter 'utf8'
[   44.620821][ T1208] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none.
[   44.645527][ T1206] loop4: detected capacity change from 0 to 40427
[   44.652642][ T1210] exfat: Deprecated parameter 'namecase'
[   44.668014][ T1206] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   44.676465][ T1210] exfat: Deprecated parameter 'namecase'
[   44.685256][ T1206] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   44.696215][ T1210] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   44.725939][ T1206] F2FS-fs (loop4): fault_type options not supported
[   44.761441][ T1206] F2FS-fs (loop4): invalid crc value
[   44.779866][ T1206] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   44.811758][ T1206] F2FS-fs (loop4): Start checkpoint disabled!
[   44.818616][ T1206] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   44.842776][ T1206] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   44.872278][ T1215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.367'.
[   44.956060][ T1227] device bridge0 entered promiscuous mode
[   45.129002][ T1238] netlink: 220 bytes leftover after parsing attributes in process `syz.2.377'.
[   45.232759][ T1248] loop4: detected capacity change from 0 to 1024
[   45.244006][ T1252] loop3: detected capacity change from 0 to 512
[   45.271445][ T1248] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   45.278956][ T1248] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   45.287354][ T1248] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   45.312208][ T1252] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[   45.350716][ T1252] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.361903][ T1248] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,quota,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback.
[   45.427222][ T1248] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.550630][   T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   45.680708][ T1157] loop0: detected capacity change from 0 to 262144
[   45.688265][ T1157] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9)
[   45.696882][ T1157] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   45.751770][ T1157] F2FS-fs (loop0): Found nat_bits in checkpoint
[   45.790635][   T39] usb 3-1: Using ep0 maxpacket: 32
[   45.854513][ T1157] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   45.870612][ T1157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   45.920726][   T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   45.937353][   T39] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   46.007916][   T30] kauditd_printk_skb: 41 callbacks suppressed
[   46.007932][   T30] audit: type=1400 audit(1787153937.702:323): avc:  denied  { setopt } for  pid=1286 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   46.050698][   T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   46.070629][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   46.088834][   T39] usb 3-1: SerialNumber: syz
[   46.110675][ T1254] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   46.338511][ T1254] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   46.389880][ T1264] loop3: detected capacity change from 0 to 131072
[   46.442238][ T1306] tap0: tun_chr_ioctl cmd 1074025692
[   46.472935][ T1264] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[   46.498659][ T1264] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   46.509691][   T30] audit: type=1400 audit(1787153938.202:324): avc:  denied  { read } for  pid=1311 comm="syz.1.407" path="socket:[20512]" dev="sockfs" ino=20512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   46.557391][ T1264] F2FS-fs (loop3): invalid crc value
[   46.575766][   T30] audit: type=1400 audit(1787153938.242:325): avc:  denied  { bind } for  pid=1313 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.596346][ T1264] F2FS-fs (loop3): Found nat_bits in checkpoint
[   46.639965][ T1264] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   46.647117][ T1264] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   46.657444][   T30] audit: type=1400 audit(1787153938.352:326): avc:  denied  { block_suspend } for  pid=1320 comm="syz.1.410" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   46.719276][   T30] audit: type=1400 audit(1787153938.382:327): avc:  denied  { connect } for  pid=1317 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   46.725884][ T1325] loop1: detected capacity change from 0 to 1024
[   46.795590][ T1327] kvm [1326]: vcpu1, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0xffffffffffffffff
[   46.806473][   T39] cdc_ether: probe of 3-1:1.0 failed with error -22
[   46.832519][ T1325] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   46.850690][ T1325] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.879481][ T1325] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   46.930985][ T1325] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   46.963710][ T1325] EXT4-fs (loop1): This should not happen!! Data will be lost
[   46.963710][ T1325] 
[   46.983559][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   46.997846][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   47.016235][   T39] usb 3-1: USB disconnect, device number 2
[   47.052940][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   47.076121][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   47.099602][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   47.120905][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   47.146597][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   47.162336][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   47.175970][ T1336] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.411: lblock 0 mapped to illegal pblock 0 (length 1)
[   47.557018][ T1345] loop0: detected capacity change from 0 to 8192
[   47.593020][ T1345] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   47.731264][ T1361] EXT4-fs (loop2): Test dummy encryption mode enabled
[   47.751597][ T1361] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[   47.788590][ T1361] System zones: 0-5
[   47.806455][   T30] audit: type=1400 audit(1787153939.502:328): avc:  denied  { create } for  pid=1365 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   47.838964][ T1361] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,noload,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback.
[   47.902692][ T1374] tipc: Started in network mode
[   47.907625][ T1374] tipc: Node identity ac14140f, cluster identity 4711
[   47.914462][   T30] audit: type=1400 audit(1787153939.602:329): avc:  denied  { watch } for  pid=1360 comm="syz.2.425" path="/81/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.937216][   T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   47.945394][ T1374] tipc: New replicast peer: 255.255.255.255
[   47.956538][   T30] audit: type=1400 audit(1787153939.602:330): avc:  denied  { rename } for  pid=1360 comm="syz.2.425" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   47.979153][ T1374] tipc: Enabled bearer <udp:syz2>, priority 10
[   48.131005][ T1387] EXT4-fs (loop4): Ignoring removed oldalloc option
[   48.155640][ T1387] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,acl,oldalloc,delalloc,,errors=continue. Quota mode: writeback.
[   48.178588][   T30] audit: type=1400 audit(1787153939.872:331): avc:  denied  { read } for  pid=1394 comm="syz.0.437" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   48.201867][   T30] audit: type=1400 audit(1787153939.872:332): avc:  denied  { open } for  pid=1394 comm="syz.0.437" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   48.240621][   T39] usb 2-1: Using ep0 maxpacket: 16
[   48.274634][ T1389] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   48.290789][ T1389] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   48.313809][ T1389] F2FS-fs (loop3): fault_type options not supported
[   48.322655][ T1399] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.438: bad orphan inode 15
[   48.340414][ T1389] F2FS-fs (loop3): invalid crc value
[   48.346193][ T1399] ext4_test_bit(bit=14, block=5) = 0
[   48.352120][ T1399] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000005,nolazytime,noload,,errors=continue. Quota mode: none.
[   48.371866][ T1389] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   48.390619][  T312] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   48.422893][ T1389] F2FS-fs (loop3): Start checkpoint disabled!
[   48.429711][ T1389] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   48.437958][ T1389] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   48.496498][ T1413] netem: change failed
[   48.550696][   T39] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[   48.562655][   T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.572192][   T39] usb 2-1: Product: syz
[   48.576394][   T39] usb 2-1: Manufacturer: syz
[   48.583239][ T1418] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   48.600982][   T39] usb 2-1: SerialNumber: syz
[   48.611718][   T39] usb 2-1: config 0 descriptor??
[   48.627090][ T1418] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   48.635840][  T312] usb 3-1: Using ep0 maxpacket: 8
[   48.642638][ T1418] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   48.661163][   T39] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[   48.714305][ T1426] EXT4-fs (loop3): Ignoring removed oldalloc option
[   48.738726][ T1426] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000001,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[   48.790760][  T312] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.802153][  T312] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   48.817675][  T312] usb 3-1: config 0 interface 0 has no altsetting 0
[   48.824493][  T312] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[   48.833736][  T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.882040][  T312] usb 3-1: config 0 descriptor??
[   48.887488][  T305] usb 2-1: USB disconnect, device number 3
[   48.895776][ T1439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'.
[   48.914856][ T1439] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   49.090763][   T20] tipc: Node number set to 2886997007
[   49.259987][ T1475] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.469: corrupted xattr block 95
[   49.272976][ T1475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.469: bg 0: block 7: invalid block bitmap
[   49.286114][ T1475] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   49.295110][ T1475] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.469: corrupted xattr block 95
[   49.307474][ T1475] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117)
[   49.316662][ T1475] EXT4-fs (loop0): 1 orphan inode deleted
[   49.322589][ T1475] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,jqfmt=vfsv1,stripe=0x00000000000007ff,,errors=continue. Quota mode: none.
[   49.348748][  T285] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /103/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[   49.369192][  T285] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[   49.381189][  T285] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[   49.384111][  T312] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x0
[   49.401221][  T312] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x0
[   49.408905][  T312] hid-multitouch 0003:0EEF:72D0.0002: unbalanced collection at end of report description
[   49.427158][  T312] hid-multitouch: probe of 0003:0EEF:72D0.0002 failed with error -22
[   49.583766][  T312] usb 3-1: USB disconnect, device number 3
[   49.621914][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.628983][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.636753][ T1482] device bridge_slave_0 entered promiscuous mode
[   49.645584][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.652716][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.660350][ T1482] device bridge_slave_1 entered promiscuous mode
[   49.709502][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.716627][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.723973][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.731032][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.755201][  T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.768478][  T540] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.776296][  T540] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.791717][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.795055][ T1487] SELinux: failed to load policy
[   49.801503][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.811770][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.828804][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.838734][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.846016][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.861128][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.869240][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.882750][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.896211][ T1482] device veth0_vlan entered promiscuous mode
[   49.911225][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.919764][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.927990][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.935559][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.954323][ T1482] device veth1_macvtap entered promiscuous mode
[   49.966252][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.988407][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.015189][   T10] device bridge_slave_1 left promiscuous mode
[   50.023090][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.032120][ T1498] set_capacity_and_notify: 8 callbacks suppressed
[   50.032131][ T1498] loop3: detected capacity change from 0 to 2048
[   50.041321][   T10] device bridge_slave_0 left promiscuous mode
[   50.052044][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.059994][   T10] device veth1_to_batadv left promiscuous mode
[   50.066357][   T10] device veth1_macvtap left promiscuous mode
[   50.072492][   T10] device veth0_vlan left promiscuous mode
[   50.091352][ T1498]  loop3: p2 p3 < > p4 < p5 >
[   50.096158][ T1498] loop3: partition table partially beyond EOD, truncated
[   50.104892][ T1498] loop3: p3 start 4225 is beyond EOD, truncated
[   50.192695][ T1504] loop3: detected capacity change from 0 to 256
[   50.199300][ T1504] exfat: Deprecated parameter 'namecase'
[   50.208247][ T1500] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   50.214034][ T1504] exfat: Deprecated parameter 'namecase'
[   50.252907][ T1504] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[   50.390617][  T312] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   50.404221][ T1519] SELinux: failed to load policy
[   50.429695][ T1527] loop3: detected capacity change from 0 to 256
[   50.461513][ T1527] exfat: Deprecated parameter 'utf8'
[   50.466953][ T1527] exfat: Deprecated parameter 'namecase'
[   50.477060][ T1527] exfat: Deprecated parameter 'namecase'
[   50.492639][ T1527] exfat: Deprecated parameter 'utf8'
[   50.513294][ T1527] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   50.525596][ T1535] loop1: detected capacity change from 0 to 1024
[   50.562067][  T307] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   50.573639][ T1535] EXT4-fs (loop1): Ignoring removed oldalloc option
[   50.580289][ T1535] EXT4-fs (loop1): Ignoring removed oldalloc option
[   50.590823][ T1535] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   50.642311][ T1535] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[   50.684815][ T1542] loop4: detected capacity change from 0 to 256
[   50.697228][ T1544] loop3: detected capacity change from 0 to 256
[   50.721415][ T1542] exfat: Deprecated parameter 'namecase'
[   50.727597][ T1542] exfat: Deprecated parameter 'namecase'
[   50.739589][ T1542] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[   50.740793][  T312] usb 3-1: not running at top speed; connect to a high speed hub
[   50.800616][  T307] usb 6-1: Using ep0 maxpacket: 16
[   50.870648][  T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.884655][  T312] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   50.910772][  T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.920686][  T307] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   50.930729][  T307] usb 6-1: config 0 has no interface number 0
[   50.936856][  T307] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.955975][  T307] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.971506][  T312] usb 3-1: Found UVC 1.00 device <unnamed> (0000:0000)
[   50.980533][ T1564] loop1: detected capacity change from 0 to 128
[   50.986969][  T307] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   51.000243][  T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.022234][  T307] usb 6-1: config 0 descriptor??
[   51.148735][ T1572] tipc: Started in network mode
[   51.154196][ T1572] tipc: Node identity ac14140f, cluster identity 4711
[   51.161534][ T1572] tipc: New replicast peer: 255.255.255.255
[   51.167768][ T1572] tipc: Enabled bearer <udp:syz2>, priority 10
[   51.211393][  T312] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   51.232956][ T1580] loop3: detected capacity change from 0 to 512
[   51.242178][  T312] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[   51.251066][  T312] uvcvideo 3-1:1.1: Failed to initialize the device (-5).
[   51.259681][  T312] usb 3-1: USB disconnect, device number 4
[   51.270810][ T1584] mmap: syz.1.517 (1584) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   51.273502][ T1580] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   51.326244][ T1580] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.515: Directory hole found for htree index block 0
[   51.344376][ T1580] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   51.353105][ T1580] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,dioread_nolock,jqfmt=vfsold,noinit_itable,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000000004,grpid,,,errors=continue. Quota mode: writeback.
[   51.389111][ T1580] EXT4-fs (loop3): shut down requested (2)
[   51.421330][ T1593] smpboot: CPU 1 is now offline
[   51.741733][  T307] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0003/input/input5
[   51.774243][ T1621] loop4: detected capacity change from 0 to 512
[   51.782569][ T1623] binder: 1622:1623 ioctl 40046205 0 returned -22
[   51.789849][   T30] kauditd_printk_skb: 8 callbacks suppressed
[   51.789859][   T30] audit: type=1400 audit(1787153943.482:341): avc:  denied  { read } for  pid=86 comm="acpid" name="event2" dev="devtmpfs" ino=819 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   51.819818][  T307] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0003/input/input6
[   51.841204][ T1621] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.533: iget: bad i_size value: 38620345925642
[   51.871011][  T307] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1
[   51.887400][ T1621] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.533: couldn't read orphan inode 15 (err -117)
[   51.926110][   T30] audit: type=1400 audit(1787153943.482:342): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=819 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   51.970134][  T307] usb 6-1: USB disconnect, device number 2
[   51.977885][ T1621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   52.024253][   T30] audit: type=1400 audit(1787153943.552:343): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=819 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   52.280621][  T307] tipc: Node number set to 2886997007
[   52.318623][ T1650] loop4: detected capacity change from 0 to 256
[   52.361416][ T1650] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   52.396403][ T1650] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.462806][ T1659] EXT4-fs (loop1): Ignoring removed oldalloc option
[   52.486337][ T1659] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000001,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[   52.671231][ T1677] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   52.714823][ T1676] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.556: bad orphan inode 11862016
[   52.738399][   T30] audit: type=1400 audit(1787153944.432:344): avc:  denied  { read } for  pid=1684 comm="syz.4.559" laddr=172.20.20.10 lport=5 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   52.776347][ T1677] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   52.806974][ T1676] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   52.878887][   T30] audit: type=1400 audit(1787153944.542:345): avc:  denied  { bind } for  pid=1690 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   52.904626][    T8] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   52.917621][ T1676] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.929720][ T1695] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.201914][ T1713] exfat: Deprecated parameter 'utf8'
[   53.224657][   T30] audit: type=1400 audit(1787153944.922:346): avc:  denied  { mount } for  pid=1717 comm="syz.3.575" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   53.251581][ T1715] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   53.270641][ T1713] exfat: Deprecated parameter 'namecase'
[   53.297114][ T1713] exfat: Deprecated parameter 'namecase'
[   53.313640][ T1713] exfat: Deprecated parameter 'utf8'
[   53.372047][ T1713] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   53.635058][   T30] audit: type=1400 audit(1787153945.332:347): avc:  denied  { write } for  pid=1743 comm="syz.5.588" name="file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   53.682103][   T58] kernel write not supported for file /uinput (pid: 58 comm: kworker/0:2)
[   53.735387][ T1752] erofs: (device loop1): mounted with root inode @ nid 36.
[   53.788295][ T1752] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36
[   53.798805][   T30] audit: type=1400 audit(1787153945.352:348): avc:  denied  { open } for  pid=1743 comm="syz.5.588" path="/11/file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   53.829921][ T1759] EXT4-fs (loop4): Ignoring removed bh option
[   53.859181][ T1762] erofs: (device loop1): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000
[   53.873318][ T1759] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.594: corrupted in-inode xattr
[   53.905373][ T1759] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.594: couldn't read orphan inode 15 (err -117)
[   53.945151][ T1759] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[   54.058659][ T1767] tap0: tun_chr_ioctl cmd 1074025675
[   54.074670][ T1767] tap0: persist disabled
[   54.220112][ T1758] F2FS-fs (loop2): fault_injection options not supported
[   54.267755][   T30] audit: type=1400 audit(1787153945.962:349): avc:  denied  { read } for  pid=1776 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.287793][ T1758] F2FS-fs (loop2): invalid crc value
[   54.313369][ T1758] F2FS-fs (loop2): Found nat_bits in checkpoint
[   54.423817][ T1786] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   54.443152][ T1758] F2FS-fs (loop2): Start checkpoint disabled!
[   54.469363][ T1758] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   54.484723][  T306] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   54.613257][  T306] attempt to access beyond end of device
[   54.613257][  T306] loop2: rw=2049, want=40984, limit=40427
[   54.710617][  T307] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   54.922737][   T30] audit: type=1400 audit(1787153946.622:350): avc:  denied  { read } for  pid=1804 comm="syz.2.613" name="file2" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   54.990449][   T58] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0
[   55.032003][   T58] wiimote 0005:057E:0306.0004: New device registered
[   55.055607][ T1807] wiimote 0005:057E:0306.0004: Device removed
[   55.073840][ T1799] set_capacity_and_notify: 11 callbacks suppressed
[   55.073854][ T1799] loop5: detected capacity change from 0 to 40427
[   55.101688][ T1799] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[   55.122597][ T1799] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   55.138541][ T1799] F2FS-fs (loop5): invalid crc value
[   55.148863][ T1799] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   55.160405][  T307] usb 2-1: unable to get BOS descriptor or descriptor too short
[   55.200312][ T1799] F2FS-fs (loop5): Start checkpoint disabled!
[   55.213418][ T1799] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   55.225113][ T1799] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   55.250663][  T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.264139][ T1753] loop3: detected capacity change from 0 to 131072
[   55.279425][  T307] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   55.292811][  T540] attempt to access beyond end of device
[   55.292811][  T540] loop5: rw=2049, want=45104, limit=40427
[   55.309260][ T1753] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[   55.332770][ T1753] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   55.349773][ T1753] F2FS-fs (loop3): invalid crc value
[   55.369186][ T1753] F2FS-fs (loop3): Found nat_bits in checkpoint
[   55.445462][ T1753] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   55.461198][ T1753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   55.490656][  T307] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   55.527139][  T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.566481][  T307] usb 2-1: Product: syz
[   55.583561][  T307] usb 2-1: Manufacturer: syz
[   55.606687][  T307] usb 2-1: SerialNumber: syz
[   55.747260][ T1814] loop5: detected capacity change from 0 to 40427
[   55.780210][ T1814] F2FS-fs (loop5): Found nat_bits in checkpoint
[   55.857944][ T1814] F2FS-fs (loop5): Start checkpoint disabled!
[   55.886523][ T1814] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   55.901168][  T307] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   55.940644][  T307] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[   55.968719][  T307] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   55.978437][   T10] attempt to access beyond end of device
[   55.978437][   T10] loop5: rw=2049, want=40968, limit=40427
[   56.010073][  T307] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[   56.040374][  T307] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   56.066711][ T1825] syz.4.620 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   56.080799][   T58] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1)
[   56.128184][  T307] usb 2-1: USB disconnect, device number 4
[   56.156270][   T58] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input8
[   56.223791][   T58] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input9
[   56.280897][   T58] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input7
[   56.403938][ T1836] syz.5.621 (1836) used greatest stack depth: 19168 bytes left
[   56.542381][ T1849] SELinux: failed to load policy
[   56.664078][ T1834] loop4: detected capacity change from 0 to 40427
[   56.691960][ T1834] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   56.731198][ T1834] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   56.769537][ T1834] F2FS-fs (loop4): invalid crc value
[   56.785942][ T1834] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   56.837742][ T1834] F2FS-fs (loop4): Start checkpoint disabled!
[   56.854004][ T1834] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   56.868259][ T1834] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   56.927158][ T1834] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   56.929313][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   56.929323][   T30] audit: type=1400 audit(1787153948.622:355): avc:  denied  { create } for  pid=1833 comm="syz.4.623" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   57.303758][ T1890] loop3: detected capacity change from 0 to 256
[   57.678080][   T30] audit: type=1400 audit(1787153949.372:356): avc:  denied  { bind } for  pid=1904 comm="syz.5.651" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   57.700778][ T1890] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   57.785048][ T1910] loop5: detected capacity change from 0 to 256
[   57.791530][   T30] audit: type=1400 audit(1787153949.412:357): avc:  denied  { name_bind } for  pid=1904 comm="syz.5.651" src=19558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   57.844930][ T1910] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   57.876903][   T30] audit: type=1400 audit(1787153949.412:358): avc:  denied  { node_bind } for  pid=1904 comm="syz.5.651" saddr=ff02::1 src=19558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   57.899317][    T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   57.906899][   T20] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   57.924547][ T1910] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[   57.955729][ T1910] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   57.990450][   T30] audit: type=1400 audit(1787153949.512:359): avc:  denied  { ioctl } for  pid=1888 comm="syz.3.644" path="socket:[22381]" dev="sockfs" ino=22381 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.078290][   T30] audit: type=1400 audit(1787153949.732:360): avc:  denied  { remove_name } for  pid=1909 comm="syz.5.653" name="file0" dev="loop5" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.124082][   T30] audit: type=1400 audit(1787153949.732:361): avc:  denied  { rename } for  pid=1909 comm="syz.5.653" name="file0" dev="loop5" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.170620][    T6] usb 5-1: Using ep0 maxpacket: 8
[   58.175707][   T20] usb 2-1: Using ep0 maxpacket: 16
[   58.181346][   T30] audit: type=1400 audit(1787153949.732:362): avc:  denied  { reparent } for  pid=1909 comm="syz.5.653" name="file0" dev="loop5" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.290621][ T1906] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   58.300689][    T6] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.321378][   T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.332417][    T6] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   58.345409][   T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   58.365534][    T6] usb 5-1: config 0 interface 0 has no altsetting 0
[   58.380662][    T6] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[   58.399870][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.421387][    T6] usb 5-1: config 0 descriptor??
[   58.520756][   T20] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   58.529930][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.538162][   T20] usb 2-1: Product: syz
[   58.542510][   T20] usb 2-1: Manufacturer: syz
[   58.547104][   T20] usb 2-1: SerialNumber: syz
[   58.690682][ T1906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.701708][ T1906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.711615][ T1906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   58.724571][ T1906] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[   58.733777][ T1906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.744016][ T1906] usb 4-1: config 0 descriptor??
[   58.870778][   T20] usb 2-1: 0:2 : does not exist
[   58.883189][   T20] usb 2-1: USB disconnect, device number 5
[   58.901889][    T6] hid-multitouch 0003:0EEF:72D0.0005: No inputs registered, leaving
[   58.913345][    T6] hid-multitouch 0003:0EEF:72D0.0005: hidraw1: USB HID v0.00 Joystick [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0
[   59.106299][ T1919] usb 5-1: USB disconnect, device number 2
[   59.211352][ T1906] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0
[   59.218967][ T1906] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0
[   59.226538][ T1906] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0
[   59.234068][ T1906] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0
[   59.241628][ T1906] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0
[   59.249020][ T1906] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0
[   59.256477][ T1906] gt683r_led 0003:1770:FF00.0006: unexpected long global item
[   59.264265][ T1906] gt683r_led 0003:1770:FF00.0006: hid parsing failed
[   59.271114][ T1906] gt683r_led: probe of 0003:1770:FF00.0006 failed with error -22
[   59.377359][   T30] audit: type=1400 audit(1787153951.072:363): avc:  denied  { write } for  pid=1933 comm="syz.1.664" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   59.408308][   T30] audit: type=1400 audit(1787153951.102:364): avc:  denied  { ioctl } for  pid=1933 comm="syz.1.664" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   59.467267][ T1906] usb 4-1: USB disconnect, device number 4
[   59.629676][ T1944] loop1: detected capacity change from 0 to 256
[   59.675305][ T1944] attempt to access beyond end of device
[   59.675305][ T1944] loop1: rw=524288, want=276, limit=256
[   59.707107][ T1948] loop7: detected capacity change from 0 to 7
[   59.713349][ T1944] attempt to access beyond end of device
[   59.713349][ T1944] loop1: rw=0, want=264, limit=256
[   59.728413][  T306] loop: Write error at byte offset 2, length 3584.
[   59.735135][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0
[   59.746360][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0
[   59.758371][ T1943] attempt to access beyond end of device
[   59.758371][ T1943] loop1: rw=0, want=272, limit=256
[   59.769286][ T1944] attempt to access beyond end of device
[   59.769286][ T1944] loop1: rw=0, want=264, limit=256
[   59.824783][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   59.838770][ T1943] attempt to access beyond end of device
[   59.838770][ T1943] loop1: rw=0, want=272, limit=256
[   59.875157][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   59.884498][ T1944] attempt to access beyond end of device
[   59.884498][ T1944] loop1: rw=0, want=264, limit=256
[   59.895415][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   59.904937][ T1955] attempt to access beyond end of device
[   59.904937][ T1955] loop1: rw=0, want=272, limit=256
[   59.915814][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   59.925479][ T1944] attempt to access beyond end of device
[   59.925479][ T1944] loop1: rw=0, want=264, limit=256
[   59.936317][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   59.945454][ T1955] attempt to access beyond end of device
[   59.945454][ T1955] loop1: rw=0, want=272, limit=256
[   59.956384][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   59.965452][ T1944] attempt to access beyond end of device
[   59.965452][ T1944] loop1: rw=0, want=264, limit=256
[   59.976295][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   59.990668][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   60.032718][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   60.050519][ T1952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.673'.
[   60.125581][ T1961] loop5: detected capacity change from 0 to 1024
[   60.160978][   T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   60.181756][ T1961] EXT4-fs (loop5): Ignoring removed oldalloc option
[   60.217285][ T1961] EXT4-fs (loop5): Ignoring removed bh option
[   60.256652][ T1961] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none.
[   60.313251][ T1961] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.364976][ T1961] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.419967][ T1961] EXT4-fs (loop5): Remounting filesystem read-only
[   60.430608][   T20] usb 5-1: Using ep0 maxpacket: 16
[   60.452241][ T1977] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.494636][ T1977] EXT4-fs (loop5): Remounting filesystem read-only
[   60.518721][ T1977] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.550654][   T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.571083][ T1977] EXT4-fs (loop5): Remounting filesystem read-only
[   60.583748][   T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   60.598141][ T1977] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.643057][ T1977] EXT4-fs (loop5): Remounting filesystem read-only
[   60.673215][ T1977] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.707602][ T1990] device gretap0 entered promiscuous mode
[   60.723970][ T1990] device gretap0 left promiscuous mode
[   60.729650][ T1977] EXT4-fs (loop5): Remounting filesystem read-only
[   60.748842][ T1977] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.780737][   T20] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   60.797941][ T1977] EXT4-fs (loop5): Remounting filesystem read-only
[   60.809968][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.818281][ T1977] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.840886][   T20] usb 5-1: Product: syz
[   60.850857][   T20] usb 5-1: Manufacturer: syz
[   60.855674][ T1977] EXT4-fs (loop5): Remounting filesystem read-only
[   60.863038][   T20] usb 5-1: SerialNumber: syz
[   60.876387][ T1977] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.924685][ T1977] EXT4-fs (loop5): Remounting filesystem read-only
[   60.935483][ T1977] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.677: lblock 0 mapped to illegal pblock 0 (length 1)
[   60.952420][ T1977] EXT4-fs (loop5): Remounting filesystem read-only
[   61.010909][ T1906] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   61.040646][ T1906] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   61.071198][ T1906] hid-generic 0000:0000:0000.0007: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   61.153591][ T2025] loop5: detected capacity change from 0 to 128
[   61.190748][   T20] usb 5-1: 0:2 : does not exist
[   61.216274][   T20] usb 5-1: USB disconnect, device number 3
[   61.231297][ T2025] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   61.276928][ T2025] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   61.346675][ T2025] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes
[   61.390496][ T2043] loop1: detected capacity change from 0 to 512
[   61.470994][ T2043] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.712: missing EA_INODE flag
[   61.501620][ T2043] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.712: error while reading EA inode 2 err=-117
[   61.562891][ T2043] EXT4-fs (loop1): 1 orphan inode deleted
[   61.568649][ T2043] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   61.964518][ T2081] Zero length message leads to an empty skb
[   62.779858][ T2117] loop1: detected capacity change from 0 to 256
[   62.821307][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   62.821319][   T30] audit: type=1400 audit(1787153954.522:370): avc:  denied  { mount } for  pid=2119 comm="syz.2.747" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   63.040650][   T30] audit: type=1400 audit(1787153954.552:371): avc:  denied  { search } for  pid=2119 comm="syz.2.747" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   63.210380][   T30] audit: type=1400 audit(1787153954.572:372): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   63.356463][ T2162] netlink: 'syz.3.766': attribute type 3 has an invalid length.
[   63.370647][   T30] audit: type=1400 audit(1787153954.932:373): avc:  denied  { connect } for  pid=2147 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.509892][ T2171] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   63.521477][ T2172] loop5: detected capacity change from 0 to 128
[   63.582900][ T2172] EXT4-fs (loop5): Test dummy encryption mode enabled
[   63.612029][ T2178] loop3: detected capacity change from 0 to 128
[   63.618664][ T2172] EXT4-fs error (device loop5): ext4_fill_super:4863: inode #2: comm syz.5.771: iget: checksum invalid
[   63.677341][ T2172] EXT4-fs (loop5): get root inode failed
[   63.700799][ T2178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   63.708794][ T2172] EXT4-fs (loop5): mount failed
[   63.750691][ T2178] System zones: 1-3, 19-19, 35-36
[   63.756451][ T2178] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[   63.817746][ T2172] ip_tables: iptables: counters copy to user failed while replacing table
[   63.859097][ T2178] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   64.053691][ T2177] loop2: detected capacity change from 0 to 40427
[   64.061769][ T2188] netlink: 'syz.5.777': attribute type 2 has an invalid length.
[   64.124937][ T2177] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   64.186431][ T2177] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   64.212009][ T2197] loop1: detected capacity change from 0 to 512
[   64.251038][ T2177] F2FS-fs (loop2): invalid crc_offset: 33558524
[   64.283236][ T2197] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   64.321765][ T2177] F2FS-fs (loop2): Found nat_bits in checkpoint
[   64.335287][ T2201] loop3: detected capacity change from 0 to 4096
[   64.389718][   T10] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   64.469452][ T2201] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   64.530765][ T2177] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   64.576440][ T2177] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   64.615064][ T2224] loop5: detected capacity change from 0 to 256
[   65.495883][ T2266] loop5: detected capacity change from 0 to 512
[   65.539600][ T2266] EXT4-fs (loop5): Ignoring removed nobh option
[   65.576332][ T2266] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[   65.612872][ T2266] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.810: attempt to clear invalid blocks 1 len 1
[   65.661561][ T2257] loop2: detected capacity change from 0 to 40427
[   65.683725][ T2266] EXT4-fs (loop5): Remounting filesystem read-only
[   65.700379][ T2257] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   65.717391][ T2278] loop1: detected capacity change from 0 to 512
[   65.728634][ T2266] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   65.750624][ T2257] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   65.764990][ T2278] EXT4-fs error (device loop1): __ext4_iget:4950: inode #11: block 1: comm syz.1.815: invalid block
[   65.777176][ T2257] F2FS-fs (loop2): invalid crc_offset: 33558524
[   65.784197][ T2266] EXT4-fs (loop5): Remounting filesystem read-only
[   65.791404][ T2278] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.815: couldn't read orphan inode 11 (err -117)
[   65.803811][ T2266] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.810: invalid indirect mapped block 1819239214 (level 0)
[   65.818654][ T2257] F2FS-fs (loop2): Found nat_bits in checkpoint
[   65.826210][ T2278] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   65.844688][ T2266] EXT4-fs (loop5): Remounting filesystem read-only
[   65.872962][ T2266] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.810: invalid indirect mapped block 1819239214 (level 1)
[   65.904004][ T2257] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   65.911321][ T2266] EXT4-fs (loop5): Remounting filesystem read-only
[   65.917996][ T2257] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   65.935872][ T2266] EXT4-fs (loop5): 1 truncate cleaned up
[   65.969897][ T2266] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback.
[   66.186898][ T2295] __nla_validate_parse: 17 callbacks suppressed
[   66.186911][ T2295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'.
[   66.249728][ T2301] loop5: detected capacity change from 0 to 2048
[   66.338348][ T2301] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[   66.418059][ T2301] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   66.475808][ T2316] loop2: detected capacity change from 0 to 256
[   66.500357][ T2316] FAT-fs (loop2): Unrecognized mount option "s€'n=mixed" or missing value
[   66.512561][ T2301] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   66.570473][ T2301] EXT4-fs (loop5): This should not happen!! Data will be lost
[   66.570473][ T2301] 
[   66.590621][  T306] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   66.648359][ T2301] EXT4-fs (loop5): Total free blocks count 0
[   66.673990][   T30] audit: type=1400 audit(1787153958.372:374): avc:  denied  { accept } for  pid=2320 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.698463][  T306] EXT4-fs (loop5): This should not happen!! Data will be lost
[   66.698463][  T306] 
[   66.712326][ T2301] EXT4-fs (loop5): Free/Dirty block details
[   66.740362][ T2301] EXT4-fs (loop5): free_blocks=2415919504
[   66.761148][  T306] EXT4-fs (loop5): Total free blocks count 0
[   66.788384][ T2301] EXT4-fs (loop5): dirty_blocks=16
[   66.795339][  T306] EXT4-fs (loop5): Free/Dirty block details
[   67.165076][ T2351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'.
[   67.346268][ T2363] loop2: detected capacity change from 0 to 512
[   67.397190][ T2363] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback.
[   67.510896][ T2363] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.547511][ T2347] loop1: detected capacity change from 0 to 40427
[   67.587624][ T2363] EXT4-fs (loop2): shut down requested (1)
[   67.615345][ T2347] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   67.651218][ T2347] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   67.744040][ T2347] F2FS-fs (loop1): invalid crc value
[   67.788833][ T2347] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   67.960888][ T2347] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   68.006424][ T2347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   68.086077][   T30] audit: type=1400 audit(1787153959.782:375): avc:  denied  { read } for  pid=2407 comm="syz.5.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   68.223725][   T30] audit: type=1400 audit(1787153959.862:376): avc:  denied  { remount } for  pid=2346 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   68.380530][ T2378] loop2: detected capacity change from 0 to 40427
[   68.410063][ T2378] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   68.464683][ T2378] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   68.519075][   T30] audit: type=1400 audit(1787153960.212:377): avc:  denied  { nlmsg_read } for  pid=2422 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   68.539628][ T2423] netlink: 104 bytes leftover after parsing attributes in process `syz.4.877'.
[   68.551685][ T2378] F2FS-fs (loop2): invalid crc_offset: 33558524
[   68.591671][ T2378] F2FS-fs (loop2): Found nat_bits in checkpoint
[   68.711766][ T2398] loop3: detected capacity change from 0 to 40427
[   68.791683][ T2398] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   68.807398][ T2378] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   68.854957][ T2378] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   68.863673][ T2398] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   68.930946][ T2398] F2FS-fs (loop3): invalid crc value
[   68.995235][ T2398] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   69.015984][ T2378] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   69.205387][ T2398] F2FS-fs (loop3): Start checkpoint disabled!
[   69.241332][   T30] audit: type=1400 audit(1787153960.942:378): avc:  denied  { lock } for  pid=2463 comm="syz.1.895" path="socket:[24528]" dev="sockfs" ino=24528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   69.370926][ T2398] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   69.429826][ T2398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   69.606376][   T30] audit: type=1400 audit(1787153961.302:379): avc:  denied  { write } for  pid=2397 comm="syz.3.864" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   69.680396][    T8] handle_bad_sector: 6968 callbacks suppressed
[   69.680412][    T8] attempt to access beyond end of device
[   69.680412][    T8] loop3: rw=2049, want=45104, limit=40427
[   69.721031][ T2494] netlink: 92 bytes leftover after parsing attributes in process `syz.2.908'.
[   69.750143][   T30] audit: type=1400 audit(1787153961.332:380): avc:  denied  { add_name } for  pid=2397 comm="syz.3.864" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   69.942219][ T2497] SELinux: avtab: truncated entry
[   70.061368][ T2497] SELinux: failed to load policy
[   70.164310][ T2417] loop5: detected capacity change from 0 to 131072
[   70.266941][ T2417] F2FS-fs (loop5): Found nat_bits in checkpoint
[   70.412899][ T2417] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   70.535598][ T2417] F2FS-fs (loop5): lookup inode (7) has corrupted xattr
[   70.721116][ T2504] loop2: detected capacity change from 0 to 40427
[   70.784184][ T2504] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[   70.821783][ T2504] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   70.881360][ T2504] F2FS-fs (loop2): invalid crc value
[   70.935294][ T2504] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   71.108018][ T2504] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   71.140613][ T2504] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   71.273039][  T306] attempt to access beyond end of device
[   71.273039][  T306] loop2: rw=2049, want=45104, limit=40427
[   71.372015][ T2545] loop5: detected capacity change from 0 to 128
[   71.480378][ T2545] xt_hashlimit: size too large, truncated to 1048576
[   71.854659][   T30] audit: type=1400 audit(1787153963.552:381): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   71.935938][ T2573] tap0: tun_chr_ioctl cmd 1074025677
[   71.965848][ T2573] tap0: linktype set to 804
[   72.072384][   T30] audit: type=1400 audit(1787153963.772:382): avc:  denied  { append } for  pid=2579 comm="syz.4.942" name="file0" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   72.261398][ T2591] kvm [2590]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x800000000000001
[   72.275931][ T2594] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 32624. macoff=96
[   72.329239][ T2598] loop2: detected capacity change from 0 to 2048
[   72.383274][ T2601] loop1: detected capacity change from 0 to 256
[   72.422543][ T2601] exfat: Deprecated parameter 'namecase'
[   72.440619][ T1906] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   72.448993][ T2601] exfat: Deprecated parameter 'namecase'
[   72.456454][ T2598] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,noquota,,errors=continue. Quota mode: none.
[   72.475072][ T2601] exfat: Deprecated parameter 'namecase'
[   72.489908][ T2598] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.502025][ T2601] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   72.604229][   T30] audit: type=1400 audit(1787153964.302:383): avc:  denied  { create } for  pid=2611 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   72.631048][ T2615] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.949: bg 0: block 345: padding at end of block bitmap is not set
[   72.694851][ T2615] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117
[   72.720639][ T1906] usb 5-1: Using ep0 maxpacket: 32
[   72.744436][ T2615] EXT4-fs (loop2): This should not happen!! Data will be lost
[   72.744436][ T2615] 
[   72.768011][  T306] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 410 with error 28
[   72.804314][  T306] EXT4-fs (loop2): This should not happen!! Data will be lost
[   72.804314][  T306] 
[   72.842703][   T30] audit: type=1400 audit(1787153964.542:384): avc:  denied  { create } for  pid=2628 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   72.862777][ T1906] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[   72.873745][  T306] EXT4-fs (loop2): Total free blocks count 0
[   72.894672][ T1906] usb 5-1: config 0 has no interface number 0
[   72.901965][  T306] EXT4-fs (loop2): Free/Dirty block details
[   72.919871][ T1906] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   72.931439][  T306] EXT4-fs (loop2): free_blocks=0
[   72.950657][  T306] EXT4-fs (loop2): dirty_blocks=416
[   72.966728][ T1906] usb 5-1: config 0 interface 196 has no altsetting 0
[   72.974931][  T306] EXT4-fs (loop2): Block reservation details
[   72.998672][  T306] EXT4-fs (loop2): i_reserved_data_blocks=26
[   73.160717][ T1906] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   73.185383][ T1906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.209574][ T1906] usb 5-1: Product: syz
[   73.222516][ T1906] usb 5-1: Manufacturer: syz
[   73.237222][ T1906] usb 5-1: SerialNumber: syz
[   73.260723][ T1906] usb 5-1: config 0 descriptor??
[   73.290661][ T2585] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   73.540607][   T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   73.708279][   T30] kauditd_printk_skb: 1 callbacks suppressed
[   73.708291][   T30] audit: type=1400 audit(1787153965.402:386): avc:  denied  { name_bind } for  pid=2669 comm="syz.5.979" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   73.752828][ T1906] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached
[   73.767116][   T30] audit: type=1400 audit(1787153965.462:387): avc:  denied  { read } for  pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   73.835360][   T30] audit: type=1400 audit(1787153965.492:388): avc:  denied  { search } for  pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.900362][   T30] audit: type=1400 audit(1787153965.492:389): avc:  denied  { read } for  pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=6588 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.960675][   T20] usb 2-1: unable to get BOS descriptor or descriptor too short
[   73.981757][ T2686] netlink: 44 bytes leftover after parsing attributes in process `syz.5.983'.
[   74.003939][   T30] audit: type=1400 audit(1787153965.492:390): avc:  denied  { open } for  pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=6588 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.030679][ T2686] netlink: 43 bytes leftover after parsing attributes in process `syz.5.983'.
[   74.060678][   T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.075556][ T2686] netlink: 'syz.5.983': attribute type 5 has an invalid length.
[   74.094787][   T20] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   74.106325][ T2686] netlink: 43 bytes leftover after parsing attributes in process `syz.5.983'.
[   74.117813][ T2699] netlink: 'syz.3.986': attribute type 1 has an invalid length.
[   74.125748][   T30] audit: type=1400 audit(1787153965.492:391): avc:  denied  { getattr } for  pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=6588 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   74.149151][   T20] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   74.160423][ T2699] netlink: 5696 bytes leftover after parsing attributes in process `syz.3.986'.
[   74.174405][   T20] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   74.200521][   T30] audit: type=1400 audit(1787153965.532:392): avc:  denied  { read } for  pid=2678 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.248270][   T20] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   74.293781][   T20] usb 2-1: config 1 interface 1 has no altsetting 0
[   74.317556][ T2712] loop2: detected capacity change from 0 to 512
[   74.331536][   T58] usb 5-1: USB disconnect, device number 4
[   74.340392][   T30] audit: type=1400 audit(1787153965.532:393): avc:  denied  { open } for  pid=2678 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.385617][   T58] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected
[   74.431710][ T2712] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,init_itable=0x00000000000000ff,grpid,,errors=continue. Quota mode: writeback.
[   74.497881][   T30] audit: type=1400 audit(1787153965.532:394): avc:  denied  { getattr } for  pid=2678 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.534841][ T2712] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.586507][ T2738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'.
[   74.600773][   T20] usb 2-1: string descriptor 0 read error: -22
[   74.622920][   T20] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   74.654822][   T30] audit: type=1400 audit(1787153965.692:395): avc:  denied  { write } for  pid=2675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.686085][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.808385][ T2755] loop3: detected capacity change from 0 to 512
[   74.899052][ T2755] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   74.918860][ T2764] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1008'.
[   75.102522][ T2776] loop2: detected capacity change from 0 to 512
[   75.598046][ T2809] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1029'.
[   75.630672][   T20] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4
[   75.670896][   T20] usb 2-1: Warning! Unlikely big volume range (=11853), cval->res is probably wrong.
[   75.680409][   T20] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = -11853/0/1
[   75.798255][   T20] usb 2-1: USB disconnect, device number 6
[   76.211962][ T2832] tap0: tun_chr_ioctl cmd 1074025672
[   76.247614][ T2832] tap0: ignored: set checksum disabled
[   76.867152][ T2842] loop3: detected capacity change from 0 to 512
[   76.924270][ T2811] loop2: detected capacity change from 0 to 131072
[   76.949686][ T2842] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   76.979078][ T2811] F2FS-fs (loop2): Test dummy encryption mode enabled
[   77.020202][ T2811] F2FS-fs (loop2): invalid crc value
[   77.026538][ T2842] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   77.077718][ T2811] F2FS-fs (loop2): Found nat_bits in checkpoint
[   77.191383][ T2811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   77.337847][ T2873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'.
[   77.350200][ T2811] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   77.419912][ T2878] loop1: detected capacity change from 0 to 256
[   77.514915][ T2878] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d)
[   77.537968][ T2884] loop3: detected capacity change from 0 to 128
[   77.811268][ T2900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=2900 comm=syz.3.1067
[   77.907044][ T2894] SELinux: avtab: truncated entry
[   77.997526][ T2915] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   78.096873][ T2894] SELinux: failed to load policy
[   78.275135][ T2934] loop3: detected capacity change from 0 to 256
[   78.650216][ T2971] ------------[ cut here ]------------
[   78.655706][ T2971] WARNING: CPU: 0 PID: 2971 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   78.665960][ T2971] Modules linked in:
[   78.669847][ T2971] CPU: 0 PID: 2971 Comm: syz.3.1098 Not tainted syzkaller #0
[   78.677212][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   78.687277][ T2971] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   78.693092][ T2971] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   78.712736][ T2971] RSP: 0018:ffffc90000bc77e0 EFLAGS: 00010002
[   78.718831][ T2971] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf854
[   78.726805][ T2971] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   78.734798][ T2971] RBP: ffffc90000bc7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   78.742773][ T2971] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000001030
[   78.750746][ T2971] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   78.758720][ T2971] FS:  00007f732413e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   78.767673][ T2971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   78.774259][ T2971] CR2: 00007f8318b51060 CR3: 0000000110c7d000 CR4: 00000000003526b0
[   78.782327][ T2971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   78.790494][ T2971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   78.798463][ T2971] Call Trace:
[   78.801902][ T2971]  <TASK>
[   78.804837][ T2971]  ? ring_buffer_read_page+0x1210/0x1210
[   78.810472][ T2971]  ? __kasan_check_write+0x14/0x20
[   78.815587][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   78.820287][ T2971]  rb_buffer_peek+0x60/0x7a0
[   78.824891][ T2971]  ring_buffer_peek+0x184/0x3b0
[   78.829750][ T2971]  ? ring_buffer_iter_empty+0x370/0x370
[   78.835340][ T2971]  ? __kasan_check_write+0x14/0x20
[   78.840454][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   78.845132][ T2971]  __find_next_entry+0x34d/0x6b0
[   78.850182][ T2971]  ? rb_advance_reader+0x4c1/0x6b0
[   78.855294][ T2971]  ? trace_find_next_entry+0x370/0x370
[   78.860857][ T2971]  ? ring_buffer_iter_dropped+0x60/0x60
[   78.866411][ T2971]  ? print_trace_line+0x385/0x690
[   78.871447][ T2971]  tracing_read_pipe+0x3b8/0xab0
[   78.876620][ T2971]  ? s_show+0x320/0x320
[   78.880914][ T2971]  vfs_read+0x28c/0xc20
[   78.885072][ T2971]  ? kernel_read+0x1f0/0x1f0
[   78.889661][ T2971]  ? __kasan_check_write+0x14/0x20
[   78.894869][ T2971]  ? mutex_lock+0x9b/0x1c0
[   78.899296][ T2971]  ? wait_for_completion_killable_timeout+0x10/0x10
[   78.905884][ T2971]  ? __fget_files+0x2e1/0x340
[   78.910561][ T2971]  ? __fdget_pos+0x2d2/0x380
[   78.915147][ T2971]  ? ksys_read+0x70/0x260
[   78.919480][ T2971]  ksys_read+0x14a/0x260
[   78.923719][ T2971]  ? vfs_write+0xfd0/0xfd0
[   78.928130][ T2971]  ? __kasan_check_write+0x14/0x20
[   78.933250][ T2971]  ? switch_fpu_return+0x15d/0x2c0
[   78.938368][ T2971]  __x64_sys_read+0x7b/0x90
[   78.942897][ T2971]  x64_sys_call+0x96d/0x9a0
[   78.947412][ T2971]  do_syscall_64+0x4c/0xa0
[   78.951845][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   78.956592][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   78.961290][ T2971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.967199][ T2971] RIP: 0033:0x7f73256e50d9
[   78.971618][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.991227][ T2971] RSP: 002b:00007f732413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   78.999644][ T2971] RAX: ffffffffffffffda RBX: 00007f732596cfa0 RCX: 00007f73256e50d9
[   79.007631][ T2971] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[   79.015734][ T2971] RBP: 00007f732577c024 R08: 0000000000000000 R09: 0000000000000000
[   79.023816][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.031809][ T2971] R13: 00007f732596d038 R14: 00007f732596cfa0 R15: 00007ffd9a3940a8
[   79.039903][ T2971]  </TASK>
[   79.042926][ T2971] ---[ end trace c7dead8856dd5fcd ]---
[   79.048388][ T2971] ==================================================================
[   79.056463][ T2971] BUG: KASAN: slab-out-of-bounds in rb_buffer_peek+0x71a/0x7a0
[   79.064020][ T2971] Read of size 4 at addr ffff88810006c040 by task syz.3.1098/2971
[   79.071842][ T2971] 
[   79.074172][ T2971] CPU: 0 PID: 2971 Comm: syz.3.1098 Tainted: G        W         syzkaller #0
[   79.082929][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   79.093003][ T2971] Call Trace:
[   79.096281][ T2971]  <TASK>
[   79.099221][ T2971]  __dump_stack+0x21/0x30
[   79.103553][ T2971]  dump_stack_lvl+0x110/0x170
[   79.108228][ T2971]  ? show_regs_print_info+0x20/0x20
[   79.113426][ T2971]  ? load_image+0x3f0/0x3f0
[   79.117942][ T2971]  print_address_description+0x7f/0x2c0
[   79.123487][ T2971]  ? rb_buffer_peek+0x71a/0x7a0
[   79.128336][ T2971]  kasan_report+0x10f/0x150
[   79.132839][ T2971]  ? rb_buffer_peek+0x71a/0x7a0
[   79.137718][ T2971]  __asan_report_load4_noabort+0x14/0x20
[   79.143349][ T2971]  rb_buffer_peek+0x71a/0x7a0
[   79.148031][ T2971]  ring_buffer_peek+0x184/0x3b0
[   79.152880][ T2971]  ? ring_buffer_iter_empty+0x370/0x370
[   79.158422][ T2971]  ? __kasan_check_write+0x14/0x20
[   79.163532][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   79.168208][ T2971]  __find_next_entry+0x34d/0x6b0
[   79.173155][ T2971]  ? rb_advance_reader+0x4c1/0x6b0
[   79.178306][ T2971]  ? trace_find_next_entry+0x370/0x370
[   79.183872][ T2971]  ? ring_buffer_iter_dropped+0x60/0x60
[   79.189421][ T2971]  ? print_trace_line+0x385/0x690
[   79.194452][ T2971]  tracing_read_pipe+0x3b8/0xab0
[   79.199395][ T2971]  ? s_show+0x320/0x320
[   79.203551][ T2971]  vfs_read+0x28c/0xc20
[   79.207708][ T2971]  ? kernel_read+0x1f0/0x1f0
[   79.212297][ T2971]  ? __kasan_check_write+0x14/0x20
[   79.217409][ T2971]  ? mutex_lock+0x9b/0x1c0
[   79.222874][ T2971]  ? wait_for_completion_killable_timeout+0x10/0x10
[   79.229659][ T2971]  ? __fget_files+0x2e1/0x340
[   79.234330][ T2971]  ? __fdget_pos+0x2d2/0x380
[   79.238915][ T2971]  ? ksys_read+0x70/0x260
[   79.243237][ T2971]  ksys_read+0x14a/0x260
[   79.247475][ T2971]  ? vfs_write+0xfd0/0xfd0
[   79.251889][ T2971]  ? __kasan_check_write+0x14/0x20
[   79.256999][ T2971]  ? switch_fpu_return+0x15d/0x2c0
[   79.262113][ T2971]  __x64_sys_read+0x7b/0x90
[   79.266625][ T2971]  x64_sys_call+0x96d/0x9a0
[   79.271145][ T2971]  do_syscall_64+0x4c/0xa0
[   79.275578][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   79.280264][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   79.285026][ T2971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   79.290917][ T2971] RIP: 0033:0x7f73256e50d9
[   79.295342][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.314942][ T2971] RSP: 002b:00007f732413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   79.323531][ T2971] RAX: ffffffffffffffda RBX: 00007f732596cfa0 RCX: 00007f73256e50d9
[   79.331498][ T2971] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[   79.339462][ T2971] RBP: 00007f732577c024 R08: 0000000000000000 R09: 0000000000000000
[   79.347517][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.355507][ T2971] R13: 00007f732596d038 R14: 00007f732596cfa0 R15: 00007ffd9a3940a8
[   79.363511][ T2971]  </TASK>
[   79.366547][ T2971] 
[   79.368871][ T2971] Allocated by task 0:
[   79.372954][ T2971]  __kasan_slab_alloc+0xb7/0xe0
[   79.377809][ T2971]  slab_post_alloc_hook+0x4f/0x2b0
[   79.382917][ T2971]  kmem_cache_alloc+0xf7/0x260
[   79.387697][ T2971]  __kmem_cache_create+0x184/0x640
[   79.392809][ T2971]  kmem_cache_create_usercopy+0x155/0x2b0
[   79.398521][ T2971]  kmem_cache_create+0x13/0x20
[   79.403295][ T2971]  avtab_cache_init+0x24/0x50
[   79.407973][ T2971]  selinux_init+0x164/0x260
[   79.412690][ T2971]  initialize_lsm+0x8d/0x140
[   79.417276][ T2971]  ordered_lsm_init+0x331/0x390
[   79.422119][ T2971]  security_init+0xad/0xc0
[   79.426684][ T2971]  start_kernel+0x422/0x4e0
[   79.431225][ T2971]  x86_64_start_reservations+0x2a/0x30
[   79.436881][ T2971]  x86_64_start_kernel+0x5b/0x60
[   79.441847][ T2971]  secondary_startup_64_no_verify+0xb1/0xbb
[   79.447864][ T2971] 
[   79.450203][ T2971] The buggy address belongs to the object at ffff88810006c000
[   79.450203][ T2971]  which belongs to the cache kmem_cache_node of size 64
[   79.464517][ T2971] The buggy address is located 0 bytes to the right of
[   79.464517][ T2971]  64-byte region [ffff88810006c000, ffff88810006c040)
[   79.478055][ T2971] The buggy address belongs to the page:
[   79.483722][ T2971] page:ffffea0004001b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10006c
[   79.493961][ T2971] flags: 0x4000000000000200(slab|zone=1)
[   79.499609][ T2971] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100042180
[   79.508211][ T2971] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[   79.516805][ T2971] page dumped because: kasan: bad access detected
[   79.523215][ T2971] page_owner tracks the page as allocated
[   79.528935][ T2971] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, ts 1321836565, free_ts 0
[   79.540212][ T2971]  register_early_stack+0x95/0xf0
[   79.545240][ T2971]  init_page_owner+0x32/0x830
[   79.549925][ T2971]  page_ext_init+0x371/0x3a0
[   79.554531][ T2971]  kernel_init_freeable+0x293/0x3d0
[   79.559742][ T2971] page_owner free stack trace missing
[   79.565109][ T2971] 
[   79.567448][ T2971] Memory state around the buggy address:
[   79.573200][ T2971]  ffff88810006bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   79.581284][ T2971]  ffff88810006bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   79.589339][ T2971] >ffff88810006c000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   79.597394][ T2971]                                            ^
[   79.603537][ T2971]  ffff88810006c080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   79.611590][ T2971]  ffff88810006c100: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   79.619642][ T2971] ==================================================================
[   79.627695][ T2971] Disabling lock debugging due to kernel taint
[   79.691297][ T2958] SELinux: avtab: truncated entry
[   79.717022][ T2958] SELinux: failed to load policy
[   79.722268][ T2971] ------------[ cut here ]------------
[   79.727724][ T2971] WARNING: CPU: 0 PID: 2971 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   79.737986][ T2971] Modules linked in:
[   79.741888][ T2971] CPU: 0 PID: 2971 Comm: syz.3.1098 Tainted: G    B   W         syzkaller #0
[   79.750655][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   79.760792][ T2971] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   79.766598][ T2971] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   79.786200][ T2971] RSP: 0018:ffffc90000bc7920 EFLAGS: 00010002
[   79.792297][ T2971] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf854
[   79.800792][ T2971] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   79.808775][ T2971] RBP: ffffc90000bc7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   79.816746][ T2971] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000001030
[   79.824733][ T2971] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   79.832701][ T2971] FS:  00007f732413e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   79.841638][ T2971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   79.848240][ T2971] CR2: 00007f73257327c0 CR3: 0000000110c7d000 CR4: 00000000003506b0
[   79.856215][ T2971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   79.864195][ T2971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   79.872164][ T2971] Call Trace:
[   79.875464][ T2971]  <TASK>
[   79.878406][ T2971]  ? ring_buffer_read_page+0x1210/0x1210
[   79.884040][ T2971]  ? __kasan_check_write+0x14/0x20
[   79.889148][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   79.893913][ T2971]  rb_buffer_peek+0x60/0x7a0
[   79.898509][ T2971]  ring_buffer_consume+0x1aa/0x370
[   79.903619][ T2971]  ? ring_buffer_iter_dropped+0x60/0x60
[   79.909162][ T2971]  ? print_trace_line+0x385/0x690
[   79.914190][ T2971]  tracing_read_pipe+0x599/0xab0
[   79.919139][ T2971]  ? s_show+0x320/0x320
[   79.923290][ T2971]  vfs_read+0x28c/0xc20
[   79.927446][ T2971]  ? kernel_read+0x1f0/0x1f0
[   79.932049][ T2971]  ? __kasan_check_write+0x14/0x20
[   79.937161][ T2971]  ? mutex_lock+0x9b/0x1c0
[   79.941590][ T2971]  ? wait_for_completion_killable_timeout+0x10/0x10
[   79.948193][ T2971]  ? __fget_files+0x2e1/0x340
[   79.952868][ T2971]  ? __fdget_pos+0x2d2/0x380
[   79.957454][ T2971]  ? ksys_read+0x70/0x260
[   79.961780][ T2971]  ksys_read+0x14a/0x260
[   79.966375][ T2971]  ? vfs_write+0xfd0/0xfd0
[   79.970801][ T2971]  ? __kasan_check_write+0x14/0x20
[   79.975928][ T2971]  ? switch_fpu_return+0x15d/0x2c0
[   79.981049][ T2971]  __x64_sys_read+0x7b/0x90
[   79.985564][ T2971]  x64_sys_call+0x96d/0x9a0
[   79.990093][ T2971]  do_syscall_64+0x4c/0xa0
[   79.994514][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   79.999211][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   80.003903][ T2971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.010235][ T2971] RIP: 0033:0x7f73256e50d9
[   80.014660][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.034455][ T2971] RSP: 002b:00007f732413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   80.042873][ T2971] RAX: ffffffffffffffda RBX: 00007f732596cfa0 RCX: 00007f73256e50d9
[   80.050845][ T2971] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[   80.058815][ T2971] RBP: 00007f732577c024 R08: 0000000000000000 R09: 0000000000000000
[   80.066783][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.074838][ T2971] R13: 00007f732596d038 R14: 00007f732596cfa0 R15: 00007ffd9a3940a8
[   80.082983][ T2971]  </TASK>
[   80.086037][ T2971] ---[ end trace c7dead8856dd5fce ]---
[   80.091551][ T2971] ------------[ cut here ]------------
[   80.097000][ T2971] WARNING: CPU: 0 PID: 2971 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   80.107344][ T2971] Modules linked in:
[   80.111229][ T2971] CPU: 0 PID: 2971 Comm: syz.3.1098 Tainted: G    B   W         syzkaller #0
[   80.119990][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   80.130043][ T2971] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   80.135850][ T2971] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   80.155469][ T2971] RSP: 0018:ffffc90000bc7940 EFLAGS: 00010006
[   80.161535][ T2971] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf854
[   80.169627][ T2971] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   80.177606][ T2971] RBP: ffffc90000bc7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   80.185579][ T2971] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 0000000000001030
[   80.193549][ T2971] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   80.201524][ T2971] FS:  00007f732413e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   80.210452][ T2971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   80.217034][ T2971] CR2: 00007f73257327c0 CR3: 0000000110c7d000 CR4: 00000000003506b0
[   80.225026][ T2971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   80.233027][ T2971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   80.241286][ T2971] Call Trace:
[   80.244576][ T2971]  <TASK>
[   80.247511][ T2971]  ? ring_buffer_read_page+0x1210/0x1210
[   80.253151][ T2971]  ? __kasan_check_write+0x14/0x20
[   80.258268][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   80.262945][ T2971]  rb_advance_reader+0x2b/0x6b0
[   80.267796][ T2971]  ring_buffer_consume+0x1e7/0x370
[   80.272917][ T2971]  ? ring_buffer_iter_dropped+0x60/0x60
[   80.278463][ T2971]  ? print_trace_line+0x385/0x690
[   80.283490][ T2971]  tracing_read_pipe+0x599/0xab0
[   80.288425][ T2971]  ? s_show+0x320/0x320
[   80.292579][ T2971]  vfs_read+0x28c/0xc20
[   80.296735][ T2971]  ? kernel_read+0x1f0/0x1f0
[   80.301324][ T2971]  ? __kasan_check_write+0x14/0x20
[   80.306440][ T2971]  ? mutex_lock+0x9b/0x1c0
[   80.310866][ T2971]  ? wait_for_completion_killable_timeout+0x10/0x10
[   80.317491][ T2971]  ? __fget_files+0x2e1/0x340
[   80.322199][ T2971]  ? __fdget_pos+0x2d2/0x380
[   80.327004][ T2971]  ? ksys_read+0x70/0x260
[   80.331352][ T2971]  ksys_read+0x14a/0x260
[   80.335715][ T2971]  ? vfs_write+0xfd0/0xfd0
[   80.340655][ T2971]  ? __kasan_check_write+0x14/0x20
[   80.345766][ T2971]  ? switch_fpu_return+0x15d/0x2c0
[   80.350986][ T2971]  __x64_sys_read+0x7b/0x90
[   80.355503][ T2971]  x64_sys_call+0x96d/0x9a0
[   80.360032][ T2971]  do_syscall_64+0x4c/0xa0
[   80.364449][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   80.369126][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   80.373801][ T2971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.379713][ T2971] RIP: 0033:0x7f73256e50d9
[   80.384131][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.403738][ T2971] RSP: 002b:00007f732413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   80.412153][ T2971] RAX: ffffffffffffffda RBX: 00007f732596cfa0 RCX: 00007f73256e50d9
[   80.420126][ T2971] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[   80.428098][ T2971] RBP: 00007f732577c024 R08: 0000000000000000 R09: 0000000000000000
[   80.436066][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.444043][ T2971] R13: 00007f732596d038 R14: 00007f732596cfa0 R15: 00007ffd9a3940a8
[   80.452240][ T2971]  </TASK>
[   80.455255][ T2971] ---[ end trace c7dead8856dd5fcf ]---
[   80.480732][ T2971] ------------[ cut here ]------------
[   80.486216][ T2971] WARNING: CPU: 0 PID: 2971 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   80.496478][ T2971] Modules linked in:
[   80.500372][ T2971] CPU: 0 PID: 2971 Comm: syz.3.1098 Tainted: G    B   W         syzkaller #0
[   80.509237][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   80.519289][ T2971] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   80.525196][ T2971] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   80.544844][ T2971] RSP: 0018:ffffc90000bc77e0 EFLAGS: 00010002
[   80.550934][ T2971] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf854
[   80.558918][ T2971] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   80.566989][ T2971] RBP: ffffc90000bc7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   80.575246][ T2971] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000c9e01035
[   80.583391][ T2971] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   80.591385][ T2971] FS:  00007f732413e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   80.600310][ T2971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   80.607149][ T2971] CR2: 0000001b2ed1eff8 CR3: 0000000110c7d000 CR4: 00000000003506b0
[   80.615224][ T2971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   80.623276][ T2971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   80.631264][ T2971] Call Trace:
[   80.634546][ T2971]  <TASK>
[   80.637479][ T2971]  ? ring_buffer_read_page+0x1210/0x1210
[   80.643638][ T2971]  ? __kasan_check_write+0x14/0x20
[   80.648765][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   80.653441][ T2971]  rb_buffer_peek+0x60/0x7a0
[   80.658030][ T2971]  ring_buffer_peek+0x184/0x3b0
[   80.662881][ T2971]  ? ring_buffer_iter_empty+0x370/0x370
[   80.668422][ T2971]  ? preempt_schedule+0xbc/0xd0
[   80.673280][ T2971]  ? schedule_preempt_disabled+0x20/0x20
[   80.678910][ T2971]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   80.685072][ T2971]  __find_next_entry+0x34d/0x6b0
[   80.690009][ T2971]  ? preempt_schedule_thunk+0x16/0x18
[   80.695383][ T2971]  ? trace_find_next_entry+0x370/0x370
[   80.700848][ T2971]  ? ring_buffer_iter_dropped+0x60/0x60
[   80.706392][ T2971]  ? print_trace_line+0x385/0x690
[   80.711421][ T2971]  tracing_read_pipe+0x3b8/0xab0
[   80.716449][ T2971]  ? s_show+0x320/0x320
[   80.720603][ T2971]  vfs_read+0x28c/0xc20
[   80.724756][ T2971]  ? kernel_read+0x1f0/0x1f0
[   80.729341][ T2971]  ? __kasan_check_write+0x14/0x20
[   80.734452][ T2971]  ? mutex_lock+0x9b/0x1c0
[   80.738867][ T2971]  ? wait_for_completion_killable_timeout+0x10/0x10
[   80.745451][ T2971]  ? __fget_files+0x2e1/0x340
[   80.750127][ T2971]  ? __fdget_pos+0x2d2/0x380
[   80.754719][ T2971]  ? ksys_read+0x70/0x260
[   80.759046][ T2971]  ksys_read+0x14a/0x260
[   80.763284][ T2971]  ? vfs_write+0xfd0/0xfd0
[   80.767696][ T2971]  ? __kasan_check_write+0x14/0x20
[   80.772803][ T2971]  ? switch_fpu_return+0x15d/0x2c0
[   80.777929][ T2971]  __x64_sys_read+0x7b/0x90
[   80.782427][ T2971]  x64_sys_call+0x96d/0x9a0
[   80.786940][ T2971]  do_syscall_64+0x4c/0xa0
[   80.791350][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   80.796023][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   80.800719][ T2971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.806613][ T2971] RIP: 0033:0x7f73256e50d9
[   80.811025][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.830639][ T2971] RSP: 002b:00007f732413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   80.839054][ T2971] RAX: ffffffffffffffda RBX: 00007f732596cfa0 RCX: 00007f73256e50d9
[   80.847021][ T2971] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[   80.854997][ T2971] RBP: 00007f732577c024 R08: 0000000000000000 R09: 0000000000000000
[   80.862966][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.870932][ T2971] R13: 00007f732596d038 R14: 00007f732596cfa0 R15: 00007ffd9a3940a8
[   80.878906][ T2971]  </TASK>
[   80.881918][ T2971] ---[ end trace c7dead8856dd5fd0 ]---
[   80.924844][ T2971] ------------[ cut here ]------------
[   80.930322][ T2971] WARNING: CPU: 0 PID: 2971 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   80.940566][ T2971] Modules linked in:
[   80.944452][ T2971] CPU: 0 PID: 2971 Comm: syz.3.1098 Tainted: G    B   W         syzkaller #0
[   80.953204][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   80.963254][ T2971] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   80.969061][ T2971] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   80.988664][ T2971] RSP: 0018:ffffc90000bc7920 EFLAGS: 00010006
[   80.994725][ T2971] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf854
[   81.002699][ T2971] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   81.010673][ T2971] RBP: ffffc90000bc7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   81.018658][ T2971] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000c9e01035
[   81.026629][ T2971] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   81.034620][ T2971] FS:  00007f732413e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   81.043592][ T2971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   81.050176][ T2971] CR2: 0000001b2ed1dff8 CR3: 0000000110c7d000 CR4: 00000000003506b0
[   81.058149][ T2971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   81.066117][ T2971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   81.074173][ T2971] Call Trace:
[   81.077448][ T2971]  <TASK>
[   81.080383][ T2971]  ? ring_buffer_read_page+0x1210/0x1210
[   81.086020][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.091131][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   81.095822][ T2971]  rb_buffer_peek+0x60/0x7a0
[   81.100417][ T2971]  ring_buffer_consume+0x1aa/0x370
[   81.105535][ T2971]  ? ring_buffer_iter_dropped+0x60/0x60
[   81.111077][ T2971]  ? print_trace_line+0x385/0x690
[   81.116100][ T2971]  tracing_read_pipe+0x599/0xab0
[   81.121046][ T2971]  ? s_show+0x320/0x320
[   81.125215][ T2971]  vfs_read+0x28c/0xc20
[   81.129562][ T2971]  ? kernel_read+0x1f0/0x1f0
[   81.134184][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.139294][ T2971]  ? mutex_lock+0x9b/0x1c0
[   81.143710][ T2971]  ? wait_for_completion_killable_timeout+0x10/0x10
[   81.150302][ T2971]  ? __fget_files+0x2e1/0x340
[   81.154981][ T2971]  ? __fdget_pos+0x2d2/0x380
[   81.159602][ T2971]  ? ksys_read+0x70/0x260
[   81.163931][ T2971]  ksys_read+0x14a/0x260
[   81.168174][ T2971]  ? vfs_write+0xfd0/0xfd0
[   81.172587][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.177715][ T2971]  ? switch_fpu_return+0x15d/0x2c0
[   81.182823][ T2971]  __x64_sys_read+0x7b/0x90
[   81.187333][ T2971]  x64_sys_call+0x96d/0x9a0
[   81.191832][ T2971]  do_syscall_64+0x4c/0xa0
[   81.196266][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   81.200959][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   81.205647][ T2971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.211541][ T2971] RIP: 0033:0x7f73256e50d9
[   81.215956][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.235651][ T2971] RSP: 002b:00007f732413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   81.244070][ T2971] RAX: ffffffffffffffda RBX: 00007f732596cfa0 RCX: 00007f73256e50d9
[   81.252045][ T2971] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[   81.260025][ T2971] RBP: 00007f732577c024 R08: 0000000000000000 R09: 0000000000000000
[   81.267996][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.275991][ T2971] R13: 00007f732596d038 R14: 00007f732596cfa0 R15: 00007ffd9a3940a8
[   81.283969][ T2971]  </TASK>
[   81.287089][ T2971] ---[ end trace c7dead8856dd5fd1 ]---
[   81.292603][ T2971] ------------[ cut here ]------------
[   81.298174][ T2971] WARNING: CPU: 0 PID: 2971 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   81.308529][ T2971] Modules linked in:
[   81.312529][ T2971] CPU: 0 PID: 2971 Comm: syz.3.1098 Tainted: G    B   W         syzkaller #0
[   81.321283][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   81.331333][ T2971] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   81.337138][ T2971] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   81.356743][ T2971] RSP: 0018:ffffc90000bc7940 EFLAGS: 00010006
[   81.362809][ T2971] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf854
[   81.370780][ T2971] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   81.378756][ T2971] RBP: ffffc90000bc7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   81.386756][ T2971] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000c9e01035
[   81.394734][ T2971] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   81.402710][ T2971] FS:  00007f732413e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   81.411748][ T2971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   81.418331][ T2971] CR2: 0000001b2ed1dff8 CR3: 0000000110c7d000 CR4: 00000000003506b0
[   81.426411][ T2971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   81.434382][ T2971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   81.442360][ T2971] Call Trace:
[   81.445642][ T2971]  <TASK>
[   81.448579][ T2971]  ? ring_buffer_read_page+0x1210/0x1210
[   81.454216][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.459331][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   81.464007][ T2971]  rb_advance_reader+0x2b/0x6b0
[   81.468875][ T2971]  ring_buffer_consume+0x1e7/0x370
[   81.473988][ T2971]  ? ring_buffer_iter_dropped+0x60/0x60
[   81.479549][ T2971]  ? print_trace_line+0x385/0x690
[   81.484585][ T2971]  tracing_read_pipe+0x599/0xab0
[   81.489536][ T2971]  ? s_show+0x320/0x320
[   81.493687][ T2971]  vfs_read+0x28c/0xc20
[   81.497841][ T2971]  ? kernel_read+0x1f0/0x1f0
[   81.502426][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.507536][ T2971]  ? mutex_lock+0x9b/0x1c0
[   81.512043][ T2971]  ? wait_for_completion_killable_timeout+0x10/0x10
[   81.518650][ T2971]  ? __fget_files+0x2e1/0x340
[   81.523329][ T2971]  ? __fdget_pos+0x2d2/0x380
[   81.527916][ T2971]  ? ksys_read+0x70/0x260
[   81.532244][ T2971]  ksys_read+0x14a/0x260
[   81.536487][ T2971]  ? vfs_write+0xfd0/0xfd0
[   81.540907][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.546017][ T2971]  ? switch_fpu_return+0x15d/0x2c0
[   81.551124][ T2971]  __x64_sys_read+0x7b/0x90
[   81.555624][ T2971]  x64_sys_call+0x96d/0x9a0
[   81.560125][ T2971]  do_syscall_64+0x4c/0xa0
[   81.564539][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   81.569224][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   81.573920][ T2971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.579812][ T2971] RIP: 0033:0x7f73256e50d9
[   81.584235][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.603925][ T2971] RSP: 002b:00007f732413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   81.612332][ T2971] RAX: ffffffffffffffda RBX: 00007f732596cfa0 RCX: 00007f73256e50d9
[   81.620302][ T2971] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[   81.628276][ T2971] RBP: 00007f732577c024 R08: 0000000000000000 R09: 0000000000000000
[   81.636342][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.644309][ T2971] R13: 00007f732596d038 R14: 00007f732596cfa0 R15: 00007ffd9a3940a8
[   81.652285][ T2971]  </TASK>
[   81.655308][ T2971] ---[ end trace c7dead8856dd5fd2 ]---
[   81.664651][ T2971] ------------[ cut here ]------------
[   81.670115][ T2971] WARNING: CPU: 0 PID: 2971 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[   81.680361][ T2971] Modules linked in:
[   81.684258][ T2971] CPU: 0 PID: 2971 Comm: syz.3.1098 Tainted: G    B   W         syzkaller #0
[   81.693016][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   81.703076][ T2971] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[   81.708903][ T2971] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[   81.728514][ T2971] RSP: 0018:ffffc90000bc77e0 EFLAGS: 00010002
[   81.734584][ T2971] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf854
[   81.742570][ T2971] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[   81.750543][ T2971] RBP: ffffc90000bc7958 R08: ffff88810005260b R09: 1ffff1102000a4c1
[   81.758514][ T2971] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000c9e01039
[   81.766482][ T2971] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[   81.774457][ T2971] FS:  00007f732413e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   81.783394][ T2971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   81.790007][ T2971] CR2: 0000001b2ed1dff8 CR3: 0000000110c7d000 CR4: 00000000003506b0
[   81.797982][ T2971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   81.805958][ T2971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   81.814019][ T2971] Call Trace:
[   81.817313][ T2971]  <TASK>
[   81.820257][ T2971]  ? ring_buffer_read_page+0x1210/0x1210
[   81.825900][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.831019][ T2971]  ? _raw_spin_lock+0x94/0xf0
[   81.835693][ T2971]  rb_buffer_peek+0x60/0x7a0
[   81.840286][ T2971]  ring_buffer_peek+0x184/0x3b0
[   81.845136][ T2971]  ? ring_buffer_iter_empty+0x370/0x370
[   81.850805][ T2971]  ? preempt_schedule+0xbc/0xd0
[   81.855695][ T2971]  ? schedule_preempt_disabled+0x20/0x20
[   81.861420][ T2971]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   81.867603][ T2971]  __find_next_entry+0x34d/0x6b0
[   81.872546][ T2971]  ? preempt_schedule_thunk+0x16/0x18
[   81.877945][ T2971]  ? trace_find_next_entry+0x370/0x370
[   81.883411][ T2971]  ? ring_buffer_iter_dropped+0x60/0x60
[   81.888953][ T2971]  ? print_trace_line+0x385/0x690
[   81.893977][ T2971]  tracing_read_pipe+0x3b8/0xab0
[   81.898909][ T2971]  ? s_show+0x320/0x320
[   81.903058][ T2971]  vfs_read+0x28c/0xc20
[   81.907212][ T2971]  ? kernel_read+0x1f0/0x1f0
[   81.911821][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.916932][ T2971]  ? mutex_lock+0x9b/0x1c0
[   81.921348][ T2971]  ? wait_for_completion_killable_timeout+0x10/0x10
[   81.927939][ T2971]  ? __fget_files+0x2e1/0x340
[   81.932626][ T2971]  ? __fdget_pos+0x2d2/0x380
[   81.937209][ T2971]  ? ksys_read+0x70/0x260
[   81.941532][ T2971]  ksys_read+0x14a/0x260
[   81.945777][ T2971]  ? vfs_write+0xfd0/0xfd0
[   81.950291][ T2971]  ? __kasan_check_write+0x14/0x20
[   81.955401][ T2971]  ? switch_fpu_return+0x15d/0x2c0
[   81.960507][ T2971]  __x64_sys_read+0x7b/0x90
[   81.965004][ T2971]  x64_sys_call+0x96d/0x9a0
[   81.969505][ T2971]  do_syscall_64+0x4c/0xa0
[   81.973920][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   81.978592][ T2971]  ? clear_bhb_loop+0x50/0xa0
[   81.983272][ T2971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.989160][ T2971] RIP: 0033:0x7f73256e50d9
[   81.993586][ T2971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.013197][ T2971] RSP: 002b:00007f732413e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   82.021622][ T2971] RAX: ffffffffffffffda RBX: 00007f732596cfa0 RCX: 00007f73256e50d9
[   82.029679][ T2971] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000003
[   82.037648][ T2971] RBP: 00007f732577c024 R08: 0000000000000000 R09: 0000000000000000
[   82.045628][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.053602][ T2971] R13: 00007f732596d038 R14: 00007f732596cfa0 R15: 00007ffd9a3940a8
[   82.061605][ T2971]  </TASK>
[   82.064621][ T2971] ---[ end trace c7dead8856dd5fd3 ]---