last executing test programs:

37.017604412s ago: executing program 3 (id=154):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="a314472a3ebf07662bb26a717f3b", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xd, 0x43}]}, 0x10)
listen(r3, 0x5)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
writev(r4, &(0x7f0000000380)=[{&(0x7f0000000100)="c9fcaa1a5e0025543d7e85927eb8957953c391c457e777fb6a152848f06de629799aa9ea", 0x24}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)

35.584880209s ago: executing program 3 (id=158):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080d1}, 0x4040004)

35.583970129s ago: executing program 3 (id=161):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x4, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c)
recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc1c}, 0x40002000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4)
syz_emit_ethernet(0x6e, &(0x7f0000000700)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0xfc, 0x3, 0x0, [{@empty, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private, 0x1}]}]}}}}}}}, 0x0)
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)
ioctl$FIONREAD(r8, 0x541b, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)

35.331375161s ago: executing program 3 (id=166):
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setresgid(0xee00, 0x0, 0xee00)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00008aa000/0x400000)=nil)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x0, 0xffffffffffffffff, 0x7, 0x80000001000, 0x79, 0x8000000001002, 0x9, 0x6, 0x6, 0xfffffffffffffffa, 0x4000002373, 0x80000000008bd9, 0xfffffffffffffefd, 0x7f, 0x8000000000020], 0x25000, 0x386343})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000014c0)=""/4093, 0x0, 0x1}, 0x3d)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000000)='3', 0x4e)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/1171], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x80000000}, 0x10}, 0x94)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6879f})

34.880396532s ago: executing program 3 (id=170):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000200)={r2, r3/1000+10000}, 0x10)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x91}], 0x1, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

34.792905326s ago: executing program 3 (id=171):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000280)={[{@barrier_val}]}, 0x2, 0x54a, &(0x7f0000000b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2/file0\x00', 0x101084, 0xd0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

34.768256777s ago: executing program 32 (id=171):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000280)={[{@barrier_val}]}, 0x2, 0x54a, &(0x7f0000000b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2/file0\x00', 0x101084, 0xd0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

28.209264086s ago: executing program 2 (id=226):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x880000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7cf28b12}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hopopts_2292={{0x18, 0x29, 0x34, {0x11}}}], 0x18}, 0xc4) (async)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb2, 0x4) (async)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0xdb31}], 0x1, 0x40002102, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xfd, 0x1f6, &(0x7f00000001c0)="$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") (async)
r2 = signalfd(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8)
write$binfmt_misc(r2, &(0x7f0000000100)="0af17e4bca329a5c28566c09ccf43541dcdf07f987a34ac495c81e57de4fe002709aa1f7a602c7f210a6da6b8688f4f0aa1d7dfd4aa70ae36e38687c79fbc23c7e988d03cbf08191969a9b5d61255067c56566a42046b72ab6e1a35a842000a4b6", 0x61)

28.074291052s ago: executing program 2 (id=228):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,gid=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macgreek,namecase=1,iocharset=cp857,namecase=1,utf8,errors=continue,dmask=00000000000020000000000,\x00'], 0x1, 0x154a, &(0x7f0000000400)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uyyRJLklySZIkSXJLSJrkSEJiyC1pSEJyGZLLEJLLhDTu9/slIUmaJAnJLVn/z8Qcder3P+f8quP/P57v57M/8z57vc/az/s+e8972cw3nQZXb1ijSn0igj8EL/xIAoBYAOgPANcAQAAAZeLKxGWOZ5eY9MdehP25Hkq93BWwy4n7f2Xj/l/ZuP9XNu7/lY37f2Xj/l/ZuP9XNu4/Y1eyTVPzX8uPK/fB9/+vZHz8/y+SUXL0F2tKXt8ZIOZfTeH+//8P/0Au9/+/VvCvrMT9v7Jx/69UsZe7APb/AP78XwmyAXT8/RHu/3+V7P9uAvefsSvZL+8Fx8Llvx/9n35A5K/8DsT3uLCXL/92bpqadXD4h+1njDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcb+A077SxQAZC1f7roYY4wxxhhjjDH25/HZLncFjDHGGGOMMcYY++shCJCgIIAYyAaxkB1ygACIyRq/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJSEBboJScDOUhlugDNwKZeE2KAfloQJUhNuhEtwBleFOqAJ3QVWoBtWhBtwNNeEeqAX3Qm24D+rA/VAXHoB68CDUh4egATwMDeERaASPQmNoAk2hGTT/X+W/AN3gRegOPSAJekIveAl6Qx/oC/2gP7wMA+AVGAivQjIMgsHwGgyB12EovAHDYDiMgDdhJLwFo2A0jIGxkALjYDy8DRPgHZgIk2AyTIFUmArT4F2YDjNgJrwHs+B9mA1zYC7Mg7S/79cPYRF8BOmwGJbAUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2AbbYQd8DDvhE9gFu2EPfAp74bN/M//UP+R3RkBAgQIVKozBGIzFWMyBOTAn5sRcmAsjGME4jMPcmBvzYB7Mh/kwHuOxIBZEgwYJCQthIYxiFItgESyKRbE4FkeHDhMwAUvhzVgaS2MZLINlsSyWw/JYHitiRayElbAyVsYqWAWrYlWsjtXxbrwbe2ItrIW1sTbWwTpZt6ewPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi20xEROxHbbD9tgeO2AH7IgdsRN2ws7YBbtkvJAN8EV8EXtgVdETe2Ev7I3J2fpiP+yHL+MAfAVfwVcxGQfhYHwNX8PXcSiexGHnh+MIHIGVxFs4CkcjibGYgik4HsfjBJyAE3ESTsIpmIpTcRpOw+k4A2fgezgL38f3cQ7OwXmYhmk4HxfgQlyIi/AUpuNiXIJLcRkux2W4ElfhSlyDa3ENrsf1uBE34mbcjFtxK27H7fgxKgD8BHfjbkzGvbgX9+E+3I/78QAewAzMwIN4EA/hITyMh/EIHsGjeAyP4zE8gSfwJJ7C03gaz+JZPIfPxX/V4ONiq5NBZFJCiRgRI2JFrMghcoicIqfIJXKJiIiIOBEncovcIo/II/KJfCJexIuCoqAwwggSYeY7WkRFVBQRRURRUVQUF8WFE04kiARRSpQSpUVpUUbcKsqK20Q5UV60chVFRVFJtHaVxZ2iiqgiqopqorqoIWqImqKmqCXkxc9IHVFXPCDqiZ7YFx8SmZ1pKAZhIzEYG4smf1+rhRiKLUUr0Vo8IYbjMGwrWrhE8bRoJ0Zhe/E3MRqfFR3FWOwknhedRRfRVbwguomWrrvoISZiT9FLTMHeoo/oK/qJ6VhNvIezslcXr4pkMUgMFq+Jefi6GCquEsPEcDFCvClGirfEKDFajBFjRYoYJ8aLt8UE8Y6YKCaJyWKKSBVTxTTxrpguZoiZ4j0xS7wvZos5Yq6YJ9LEB2K+WCAWig/FIvGRSBeLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vFDvGx2Ck+EbvEbrFHfCr2is/EPvG52C++EAfElyJDfCUOiq/FIfGNOCy+FUfEd+KoOCaOi+/FCfGDOClOidPijDgrfhTnxE/ivPACJEohpVQykDEym4yV2WUOeZXMKYOs3/8yTl4nc8vrZR6ZV+aT+WW8LCALSi2NtJJkKAvJwjIqb5BF5I2yqCwmi8sS0smSMkHeJEvJm2VpeYssI2+VZeVtspwsLyvIivJ2WUneISFy4TWqymqyuqwh75ZJcI+sJe+VteV9so68X9aVD8h68kFZXz4kG8iHZUP5iGwkH5WNZRPZVDaTzeVjsoV8XLaUrWRr+YRsI5+UbeVTMlE+LdtJf/Et8qzsKJ+TneTzsrPsIrvKn+R56WV32UNCT5C95Euyt+wj+8p+sr98WQ6Qr8iB8lWZLAfJwfI1OUS+LofKN+QwOVyOkG/KkfItOUqOlmPkWJkix8nx8m05Qb4jJ8pJcrKcIlPlVNn34kwzpfyn+W//Tv7An199o9wkN8stcqvcJrfLHfJjuVPulLvkLrlH7pF75V65T+6T++V+eUAekBkyQx6UB+UheUgeloflEXlEHpXH5Bn5vTwhf5An5Sl5Sp6RZ+VZee7iPgCFSiiplApUjMqmYlV2lUNdpXKqq1UudY2KqGtVnLpO5VbXqzwqr8qn8qt4VUAVVFoZZRWpUBVShVVU3YAX3zCquCqhnCqpEtRN/06+KqJuVEVVsV/lZ9WX9D/U11w1Vy1UC9VStVStVWvVRrVRbVVblagSVTvVTrVX7VUH1UF1VB1VJ9VJdVadVVfVVXVT3VR31V0lqSTVS72keqs+qq/qp/qrl0XmNgxUA1WySlaD1WA1RA1RQ9VQNUwNUyPUCDVSjVSj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfLVQL1SK1SKWrxWqxWqqWquVquVqpVqrVarVaq9aq9Wq9Sleb1Ca1RW1R29Q2tUPtUDvVTrVL7VJ71B61V+1V+9Q+tV/tVwfUAZWhMtRBdVAdUofUYXVYHVFH1FF1VB1Xx9UJdUKdVCfVaXVanVVn1Tl1Tp1X5zNP+wIRiEAFKogJYoLYIDbIEeQIcgY5g1xBriASRIK4IC7IHVwf5AnyBvmC/EF8UCAoGOjABDYQF5seDW4IigQ3BkWDYkHxoETggpJBQnBTUCq4OSgd3BKUCW4Nyga3BeWC8kGFoGJwe1ApuCOoHNwZVAnuCqoG1YLqQY3g7qBmcE9QK7g3qB3cF9QJ7g/qBg8E9YIHg/rBQ0GD4OGgYfBI0Ch4NGgcNAmaBs2C5j/Pj/jnzO/9ybyPu+66h07SPXUv/ZLurfvovrqf7q9f1gP0K3qgflUn60F6sH5ND9Gv66H6DT1MD9cj9Jt6pH5Lj9Kj9Rg9VqfocXq8fltP0O/oiXqSnqyn6FQ9VU/T7+rpeoaeqd/Ts/T7eraeo+fqeTpNf6Dn6wV6of5QL9If6XS9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79Af6536E71L79Z79Kd6r/5M79Of6/36C31Af6kz9Ff6oP5aH9Lf6MP6W31Ef6eP6mO6tP5en9A/6JP6lD6tz+iz+kd9Tv+kz2ufeXKfeXg3yigTY2JMrIk1OUwOk9PkNLlMLhMxERNn4kxuk9vkMXlMPpPPxJt4U9AUNJnIkClkCpmoiZoipogpaoqa4qa4ccaZBJNgSplSprQpbcqYMqasKWvKmXKmgqlgbje3mzvMHeZOc6e5y9xlqplqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpqlpapqb5qaFaWFampamtWlt2pg2pq1paxJNomln2pn2pr3pYDqYjqaj6WQ6mc6ms+lquppuppvpbrqbJJNkepleprfpbfqavqa/6W8GmAFmoBlokk2yGWwGmyFmiBlqhpphZrgZkXmiat4yo8xoM8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz3yw0C80is8ikm3SzxCwxy8wys8KsMKvMKrPGrDHrYJ3ZYDaYTWaT2WK2mG1mm9lhdpidZqfZZXaZPWaP2Wv2mn1mn9lv9psD5oDJMBnmoDloDplD5rA5bI6YI+aoOWqOm+PmhDlhTpqT5rQ5bc6avBePl97E2uw2h73K5rRX21z2GvuPcT6b38bbArag1TaPzfur2Fhri9pitrgtYZ0taRPsTb+Jy9nytoKtaG+3lewdtvJv4pr2HlvL3mtr2/tsDXv3r+I69n5b1z5i6yEC2Ca2gW1mG9pHbCP7qG1sm9imtpltY5+0be1TNtE+bdvZZ34Tz7cL7Cq72q6xa+0uu9uetmfsIfuNPWt/tN1tD9vfvmwH2FfsQPuqTbaDfhOPsG/akfYtO8qOtmPs2N/Ek+0Um2qn2mn2XTvdzvhNnGY/sLPsQjvbzrFz7byf48yaFtoP7SL7kU23ASyxS+0yu9yusCv/XutSu95usBvtTvuJ3WK32m12u92RdSJsd9s99lO7135mD9qv7X77hT1gD9sM+9XPceb2Hbbf2iP2O3vUHrPH7ff2hP1BZWVnbvv39id73noLhAQkSVFAMZSNYik75aCrKCddTbnoGorQtRRH11Fuup7yUF7KR/kpngpQQdJkyBJRSIWoMEXpBsoqrziVIEclKYFuolJ0M5WmW6gM3Upl6TYqR+WpAlWk26kS3UGV6U6qQndRVapG1akG3U016R6qRfdSbbqP6tD9VJceoHr0INWnh6gBPUwN6RFqRI9SY2pCTakZNafHqAU9Ti2pFbWmJ6gNPUlt6SlKpKepHT1D7elv1IGepY70HHWi56kzdaGu9AJ1oxepO/WgJOpJvegl6k19qC/1o/70Mg2gV2ggvUrJNIgG02s0hF6nofQGDaPhNILepJH0Fo2i0TSGxlIKjaPx9DZNoHdoIk2iyTSFUmkqTaN3aTrNoJn0Hs2i92k2zaG5NI/S6AOaTwtoIX1Ii+gjSqfFtISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO+hj2kmf0C7aTXvoU9pLn9E++pz20xd0gL6kDPqKDtLXdIi+ocP0re9B39FROkbH6Xs6QT/QSTpFp+kMnaUf6Rz9ROfJE4QYilCGKgzCmDBbGBtmD3OEV4U5w6vDXOE1YSS8NowLrwtzh9eHecK8Yb4wfxgfFggLhjo0oQ0pDMNCYeEwGt4QFglvDIuGxcLiYYnQhSXDhPCmsFR4c1g6vCUsE94alg1vC8uF5cNH7qsY3h5WCu8IK4d3hlXCu8KqYbWwelgjvDusGd4T1grvDWuH94Wlw/vDuuEDYb3wwbB++FDYIHw4bBg+EjYKHw0bh03CpmGzsHn4WNgifDxsGbYKW4dXhW3CJ8O24VNhYvh02C585ufx+xdkjT/xm/GksGfYK3wpfCn0/l45Nzovmhb9IDo/uiC6MPphdFH0o2h6dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3Rj1Psa2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1BVzxV0J51xJl+CaueauuWvhHnctXSvX2j3hnnBPuifdU+4p97Rr555x7d3fXAf3rOvonnPPueddZ9fFdXUvuG5uXK4Ln8kk18v1cr1db9fX9XX9XX83wA1wA91Al+yS3WA32A1xQ9xQN9QNc8PcCDfCjXQj3Sg3yo1xY1yKS3Hj3Xg3wU1wE91EN9lNdqku1U1z09x0N91VmnHhVWa72W6um+vSXJqb7zLPGRe6RW6RS3fpbolb4pa5ZW6FW+FWuVVujVvj1rl1boPb4Da5TW6L2+K2uW1uh9vhdrqdbpe/5sKkbq/b5/a5/W6/O+C+dBnuK3fQfe0OuW/cYfetO+K+c0fdMXfcfe9OuB/cSXfKnXZn3Fn3ozvnfnLnnXcpkXGR8ZG3IxMi70QmRiZFJkemRFIjUyPTIu9GpkdmRGZG3ovMirwfmR2ZE5kbmRdJi3wQmR9ZEFkY+TCyKPJRJD2yOLIksjSyLLI84n2BLaEv5Av7qL/BF/E3+qK+mC/uS3jnS/oEf5MvdaHudO9v9WX9bb6cL+8r+Ed9Y9/EN/XNfHP/mG/hH/ctfSvf2j/h2/gnfVv/lE/0T/t2/hnf3v/Nd/DP+o7+Od/JP+87+y6+q3/Bd/Mv+u6+h0/yPX0v/5Lv7fv4vr6f7+9f9gP8K36gf9Un+0F+sH/ND/Gv+6H+DT/MD/cjYt70I7MukWGsT/Hj/Hj/tp/g3/ET/SQ/2U/xqX6qn+bf9dP9DD/Tv+dn+ff9bD/Hz/XzfJr/wM/3C/xC/6Ff5D/y6X5x1s1Nv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+x3+k/8Lr/b7/Gf+r3+M7/Pf+73+y/8Af+lz/Bf+YP+a3/If+MP+2/9Ef+dP+qP+eP+e3/C/+BP+lP+tD/jz/of/Tn/kz/P/2eNMcYYY+xfMu7Sovj1yIXb+T1/J0f8YuVeAHD11vwZvxzPPKNcl+fCch8RH5v58+kenR7KelStmpSUdHHddAlB4TkAWd8EZfr5K/KL8WJoDU9CIrSCUr9bfx/R5Sz9k/mjtwLk+EVOZkFZ8aX5PwfApN9sbx/x2BMj5pcNT8f9X+afA1C08KWc7HApXgytf76/0gpK/w/1523xT+rP/kUKQMtf5OSES/Gl+hPgcXgGEn+1JmOMMcYYY4wxdkEfUaFD1vVn1r/4/L3r83h1KScbXIr/2fU5Y4wxxhhjjDHGLr9nu3R96rHExFYd/v2Fyv+rrH95oRH8VTP/qQuoLnMZCgD+lAm9B8h6JnPSPzghQOaC/Gt3QvZfPbP5P7LDky9+dP5xaNkZH8Blf0Nmv1jdH57wMv5SYowxxhhjjP0lLp30//p5dbkKYowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGrkD/iT9Ldrm3kTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvc/k8AAAD//y4o7Ww=")
lseek(0xffffffffffffffff, 0x10001, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

27.993141106s ago: executing program 2 (id=230):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000340)="08004275ac5884c2", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x30}, 0x40010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0xffffffffffffff73, &(0x7f0000000340)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000014}, 0x804)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@acl}, {@noblock_validity}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@dioread_nolock}]}, 0x7, 0x60a, &(0x7f00000027c0)="$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")

27.640258803s ago: executing program 2 (id=231):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1e9, &(0x7f0000000100)="$eJzslU+L00AYxp+ZNMlWvXnz4sEF14Npkqp4WdiTJw+CfxYPgsXNlmpqpe3BFor4Cbx78+CnEKFeC34FqYIoSE/qeSSTSTKtSbC1pYjvD3byJPPyzjvvbJ8BQRD/LZ8+/pyKH/tfdgCcwi5s9f2rkcVwLf6DidG769cOX9x7PbGnTnU+m730+hUA4/bk/Ui9CyGEPr+rnrfAU30bHBeUPgQD5B9wHxx31PcADHeVfqjpjqlEGDgPOuHRcSsM3GjwosGPhvpifbPnDEdafUyb7w2GjxphGHQ3KPI7N/4GtfPZDrCv1aefl6N642r988DhKV0Hw02lr8KG4zhZS7T9n6lk+Y3S/Vv4y21/lqeTfDleiDGwZEKzJMaKllqp1KjzuVNvNv3fsFZhQIrkRLdez9oFKn8aHP1OSmOEbWDb2ykQbw/i80tLfRa/zwd3Tpaf8kHBEhZW6nzqn+IVw3nNn2IreSkvi1q//aTWGwwvttqNZtAMHvt+/Yp7yXUv+zVpRPGYb4Eyf1X604ksf7Uo1mIWnjb6/a4Xj+m7H495jsul/3HsnYMZ++3pG4t5vwNIFk1uIy6fkdozCosnCILYImfBpCdLX06Euk3UhCWE8H8zPYIgCIIgCIIgCIIg/hl+BQAA///qF1hV")
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r3, &(0x7f0000000100)='?', 0x1)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file7\x00', 0x0, &(0x7f0000000080), 0x1, 0x507, &(0x7f0000000c00)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r4, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x81001)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e3d312c696f636861727365743d6d616363656e746575726f2c757466383d312c757466383d312c696f636861727365743d63833934392c6e66732c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d6163677265656b2c00"/166], 0x0, 0x37c, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
sendfile(r3, r2, 0x0, 0x3ffff)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000)

27.411012754s ago: executing program 2 (id=232):
r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000100)={[{@data_journal}, {@grpquota}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000a00)="$eJzs3c1vG2UaAPDHdpMmaXb7satV25W2lbpS90ON86FVk929cAIOlRCVuIBUQuKGEieOYqc0UQ8p3HrggEAgIQ7c+Qu40BMVEuIMd8QBFUEJEiAhGc3YTvPl4KI0RpnfT5p4Zl5nnveN9byZeWfGE0BmnU1+5CIGI+LTiDjaWNz8hrONl7X7N6eSKRf1+uVvcun7kuXWW1u/dyQiViOiLyKefjzihdz2uNXlldnJcrm02Fwu1uYWitXllQvX5iZnSjOl+ZHxixMT48NjoxN71tbbr710+9IHT/a+/8Or9+6+/tGHSbUGm2Ub27GXGk3vieMb1h2KiP8/imBdUGi2p7/bFeE3ST6/P0XEuTT/j0Yh/TSBLKjX6/Wf64fbFa/WgQMrn+4D5/JDEdGYz+eHhhr78H+OgXy5Uq39+2plaX66sa98LHryV6+VS8PNY4Vj0ZNLlkfS+QfLo1uWxyLSfeA3Cv3p8tBUpTy9v10dsMWRZv73N/P/+0Ij/4GM2PmQv+1BAXCAGPKD7JL/kF3yH7JL/kN2yX/ILvkP2fXQ+V94NPUA9p///5Bd8h+yS/5DJj116VIy1Vv3v09fX16arVy/MF2qzg7NLU0NTVUWF4ZmKpWZ9J6duV/bXrlSWRj5TyzdKNZK1VqxurxyZa6yNF+7kt7Xf6XUsy+tAjpx/Mydz3MRsfrf/nRK9DbL5CocbPV6Lrp9DzLQHc7kQXYZ+oPscowP7PAVvZv0tStY2Pu6APsj3+0KAF1z/pTzf5BVxv8hu4z/Q3bZxweM/0P2GP+H7Bps8/yvP2x4dtdwRPwxIj4r9BxuPesLOAjyX+Ui8sn+//mjfx/cWtqb+7EQ0ZOeE3z5nctv3Zis1RZHkvXfpqcOkvW1t5vrR7vSAKBDrTxt5TEAkF1r929Otab9jPv1Y42LELbHP9Qcm+xLz1EOrOU2XauQ26NrF1ZvRcTJneLnms87b5z5GFgrbIt/ovmaa2wire+h9Lnp+xP/1Ib4f9sQ//Qu8Xofom5w0N1J+p/hnfIvn+Z0rOff5v5ncI+unWjf/+XX+79Cm/7vTIcxXnz3lS/bxr8VcXrH+K14fWmsrfGTup3vLHzu3nPP/KVdYf29xnZ2ir++gYgo1uYWitXllQvp98jNlOZHxi9OTIwPj41OFNMx6mJrpHq7/5385O5u7R94EL8/Ijpqf7Lun521P37668fPnt0l/j/O7fz5n9glflLRf3UY/7vRL55vV5bEn27z98/vEj9ZN9Zh/OqbT3iWOAD8jlSXV2Yny+XSohkzZsysz3S7ZwIetQdJ3+2aAAAAAAAAAAAAAJ3aj8uJu91GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICD4JcAAAD///3C05Q=")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$inet(r8, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYRES8=r3, @ANYRESOCT=r9, @ANYBLOB="3f52196f2a9c7665c97a04ee621eedcd36c643aad8e39f6ffeb54d8af9499024d9d00a99524e6558434356e065b8653aed248e03d3b1d5ac65a652b237f9c8af33b088966eb69199e50fe33740733c1e0fe7f5605d8c69b19cd0f63c5300f7ba2aad463e9e0da7c7b0fb4c096f8d54a8863fbaf90d5807395e93e0bf6d92ed3673f95bee2c095ffc62372948495af3fc4fc07b9eeb66b196e6bae7eb03a73f054f2a1ba808de67483fd2183c0068b88b4c5dfebfe4cda97f4445e4f5d583f4ee7eefe65e95454652f05daa0af14c", @ANYRESDEC=0x0, @ANYBLOB="1f3cbccd2e63e29d4f700d32d4acf25a4820ef0c1efb8f6acaf6ddfa1946f5f639a5aa97fe81cff063a5373bc2c786790502f2ea336c09cb4d725f248cb60eb7a92afa539ef77e2f4f4479d4f2164f6f1474b46c167e7a0f7bb6352bada3f31c20fc9a2ab2838f4a9be16a716f197f63923515a812495269be83f4b6f096b2e8ae12", @ANYBLOB], 0x0}, 0x0)
syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030200000002fc3e9212e6551e7f57304de336dfeb03"], 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000008, 0x11, r2, 0xaca5f000)

27.200239334s ago: executing program 2 (id=234):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getegid()
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

27.199632094s ago: executing program 33 (id=234):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x80003, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getegid()
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

11.587536348s ago: executing program 0 (id=312):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1cc4}}]}, 0x5, 0x7eb, &(0x7f00000004c0)="$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") (async)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
r2 = syz_clone(0x400c800, &(0x7f0000000cc0)="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", 0x1000, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)="ab570a7216e9d8356770b25ac098f8dc236d36af97ed7da6a67053850e9c4094381b7ab2a58b98400b2d55b9b8c14a6bd725cf3df1106dbed4900058a9d19a762e8915a7677b1ff54d1a523eb42c811fd7c0598b8aa2c5be4eda1e705c00b88391891349683fed9c4a47036b8e847c34676f735e9f9df8d49824b53a4e8a2b310a2e9231f24e9c30f8c92c34618259440756bc23caf25db24c0cb6fcbf020bf7be81beea")
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001e00)={r1, r1, 0x32, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)=[0x7, 0x2, 0x9, 0x5], &(0x7f0000000240)=[0x3, 0x0, 0x3, 0x0], 0x5, 0x4, 0x0, r2}}, 0x40) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0d04000800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800040003000000"], 0x3c}}, 0x0)
r4 = userfaultfd(0x80801) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) (async)
fallocate(r0, 0x0, 0x3, 0x800008fffe) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) (async)
close(0x3)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000205000/0x3000)=nil, 0x3000}})
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000240)={0x14, {{0x29, 0x0, 0x5000000, @dev={0xfe, 0x80, '\x00', 0x17}}}}, 0x88)
ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f0000000280)={r4, 0x0, 0x0, 0x4, 0x5, 0x8})
write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0xd3, 0x2, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4004, 0x198, 0x38, 0x1025e, 0x408, 0x4, 0x20, 0x1, 0x1, 0x5, 0x6}, [{0x6474e551, 0x0, 0x1, 0x58788277, 0xfffffffb, 0x0, 0x10000, 0x5}]}, 0x58)

11.441862744s ago: executing program 0 (id=313):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000440)='\x00\x00\xd7\xcaw\xffM\xb6\xf6\x12\xf2\xe7\xdb\xbe\x1f\xa6\xda\x17\x81\xdcrl\xca\xab,\xba\x8e7\x9b\x0e#\x13\x8aR\x1e\xae\xdc\x11<6\xcdL\xea&t\x1an\xa3\x98\xf4\xe8H\xb5uh\xe1\xd6\xf3\xbf\xa3\xef9\xf4i\x03\xb7\t\xcdS\x9b\xaf\x8b\xea\x7fu\xec\xc6\xe1\x9b\xa5\xf5\xef+\x8fMxu\x1e\x8c\xf91\x86htX\xa4\xfe\xb4\xd8\xb4\x9f[;\xf1\x90o\v2\xbc\xff\"1@Z\xc3\xda\x14\xc2G\xcaT\xdc+\xad\xd8\xcby\x92f\x96', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0x0, 0x6, 0x1ff, 0x8b, 0x2, 0xfffffffd})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ptrace(0x10, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c0000000002000004000000011f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0007000000050007000000000005000a"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000)

11.249746434s ago: executing program 0 (id=315):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, 0x0, 0x0)
connect$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'team0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x28, 0x6, 0x45, 0xfffff004}, {0x6, 0x2, 0x4, 0xfffffdfc}]})
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001)
socket$packet(0x11, 0x2, 0x300)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
close(r3)
r4 = io_uring_setup(0x2122, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xfffffffd, 0x80c3})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[r4]}, 0x1)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x1082, 0x0)
sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1edc8d23225d58aaf06ddb1711e7892c8daa16ecf75e19e7cd2ce8594971df1f89d730a8a28641ac98a9b10d9fc9360dab88cc4a7bb1f2305b7f7e", 0x3b}], 0x1, &(0x7f0000000200)=[@mark={{0x0, 0x1, 0x24, 0xff}}], 0xfffffffffffffe98}, 0x4000840)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000000)='3', 0x4e)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, 0x0, 0x0)

11.088085352s ago: executing program 0 (id=318):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$inet(0x2, 0x4000000000000001, 0x0)
lseek(0xffffffffffffffff, 0x10001, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x8, 0x0, 0x0}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

10.868453922s ago: executing program 0 (id=324):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x200000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x156)
write(r1, &(0x7f0000000040)='0', 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000200000000010027424203ac"], 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0xfe, "55c10c3c0004000000000002000000000900"})
syz_open_pts(r0, 0x40)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)

9.632188461s ago: executing program 0 (id=333):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000020))
r4 = syz_open_pts(r3, 0x2)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf)
ioctl(r4, 0x400455c8, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r8, 0x13)
tkill(r8, 0x12)
waitid(0x1, r8, 0x0, 0xe, &(0x7f00000003c0))
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r9, 0x400448c9, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50)

4.891433807s ago: executing program 6 (id=383):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x48, 0x7ff00004}]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)

4.60530201s ago: executing program 6 (id=385):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x6020400)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x254fe)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)

4.467525597s ago: executing program 1 (id=387):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000280003"], 0x100}, 0x1, 0x0, 0x0, 0x8894}, 0x0)

4.344928053s ago: executing program 1 (id=388):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x5, 0x2a2, &(0x7f0000000980)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000)

3.692286954s ago: executing program 6 (id=389):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
close(r0)

3.472722464s ago: executing program 1 (id=395):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1ff, @local, 0x1}, 0x1e)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xaf4, 0x0)

3.086298063s ago: executing program 4 (id=402):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffc00001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000000080)=ANY=[], 0x0)

3.066709824s ago: executing program 4 (id=403):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000200))

3.057177104s ago: executing program 4 (id=404):
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8000000008, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
memfd_create(0x0, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040000000"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38)

2.692358232s ago: executing program 6 (id=405):
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/165)

2.182829916s ago: executing program 4 (id=406):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2.151747558s ago: executing program 4 (id=407):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
syz_clone3(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0)
ioctl(r0, 0x80480911, 0x0)

2.10033857s ago: executing program 4 (id=408):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000)
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0)

1.905411749s ago: executing program 1 (id=410):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
close(0x3)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000340)=""/146, 0x92}], 0x2, 0x8000, 0x3)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

1.348230145s ago: executing program 1 (id=411):
creat(&(0x7f0000000040)='./file0\x00', 0x3a)
syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
close_range(r3, 0xffffffffffffffff, 0x0)

1.203565482s ago: executing program 5 (id=412):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
creat(0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x25000, 0x9000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0xb000, 0x103000})

1.184765393s ago: executing program 5 (id=413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}}, 0x0)

1.136209766s ago: executing program 5 (id=414):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153e, &(0x7f00000034c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x104)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000280)=r3}, 0x20)
socket(0x2, 0x80805, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f0000000000), 0x0}, 0x20)

949.873015ms ago: executing program 6 (id=415):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0)
read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r3, 0x40104d04, &(0x7f0000000900))
ptrace$pokeuser(0x6, r2, 0x358, 0x0)

547.359014ms ago: executing program 1 (id=416):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x160)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10)

530.436494ms ago: executing program 6 (id=417):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
getdents(r3, &(0x7f0000000f40)=""/243, 0xf3)

176.224132ms ago: executing program 5 (id=418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x5}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}, @TCA_HTB_CTAB={0x404, 0x3, [0x9, 0x1, 0x5, 0x2, 0x1, 0xa, 0x0, 0x6, 0x40000000, 0x3, 0x15, 0x3, 0x7, 0x0, 0x9, 0xf6, 0x8001, 0xffffffff, 0x0, 0xfffffffe, 0x40, 0x8, 0xfffffffc, 0x80000000, 0x1, 0x2, 0x7, 0x2, 0x7, 0x2, 0x7, 0xffff, 0x101, 0x5, 0x7, 0x81, 0x306, 0x5, 0x3, 0x620f8cf2, 0x4, 0x8, 0x7, 0x10000, 0xdac4, 0x6, 0x6, 0xd, 0x2, 0x4f08, 0x9a12a13, 0x0, 0x5, 0x0, 0xfdb, 0x8, 0x5, 0x7, 0x2, 0xf, 0x80000001, 0x6e61, 0xffff, 0x7, 0x7, 0xc, 0x10, 0x77, 0x0, 0xe, 0x63, 0x9, 0x8, 0x2bc4, 0x7fff, 0x4, 0x8, 0x2, 0x363a, 0xeb45, 0x9, 0x6, 0xd, 0x8, 0x30d962b1, 0x0, 0x101, 0x8, 0x4, 0x6, 0x5, 0x5, 0x0, 0x8, 0x10001, 0x0, 0x200, 0x0, 0x5, 0x4335f8e, 0x5, 0x8, 0x7, 0x9, 0x1, 0x8, 0x2, 0xffffffd6, 0x1, 0x3, 0x6, 0x7fffffff, 0x7, 0x1, 0x2, 0x3, 0x81, 0x5, 0x2768, 0x1, 0x9, 0x8, 0x5ef, 0xc7, 0xfffff800, 0x1ff, 0x4, 0x5e, 0x7, 0x8, 0x9, 0x4, 0xf, 0x4a, 0x800, 0x8, 0x5, 0x9, 0x400, 0x9e, 0x2, 0x1000, 0x2, 0xffffffff, 0xd, 0x0, 0x8000, 0x33b, 0x1, 0x4, 0xc8, 0xffff, 0x0, 0xf3, 0x7, 0xb1, 0x7, 0x6, 0xfffeffff, 0x8cf8, 0x1, 0x8, 0x5e, 0xf, 0x3, 0xa, 0x1, 0x6, 0xf, 0x55, 0x64b, 0x3, 0x7fff, 0x200, 0x0, 0xb, 0x1, 0x8000, 0xfffffffd, 0x3, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x2b0, 0x166, 0x5, 0x2, 0x2, 0x101, 0x1, 0xffffffff, 0x80000000, 0x5dc0, 0x1, 0x23f1, 0x80000001, 0xfff, 0x7, 0x1000, 0x3, 0x4, 0x3, 0xe, 0x8, 0xffffffff, 0x40, 0x0, 0x7, 0x9fdc, 0x6, 0x4, 0x16e3, 0x101, 0xc9, 0xfffffffa, 0x10001, 0x5, 0x3, 0xc, 0x1, 0x0, 0x3ff, 0x81, 0x9, 0x6, 0x2, 0x3, 0x3, 0x4, 0x80000000, 0x5, 0x1, 0x917, 0x2, 0x7f, 0xc3f, 0x96, 0x9, 0x60000, 0x0, 0x2, 0xc000, 0xe3, 0x7, 0x7, 0x8, 0x8, 0xfffffe01, 0x2c, 0x60000000, 0x2, 0x0, 0xb1, 0x0, 0x3]}]}}]}, 0x464}}, 0x0)

165.175702ms ago: executing program 5 (id=419):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTVtFTxUPIhgoaBn27DZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7aXabbM3uhubzgck+z8xsnue7z8wzz+wMOwHsWWPpn0zEoYj4MIkYqc1PImKgkuqPOFld787aai6dklhff+P3pLLO7bXVXDS8J3WglnkyIn54L+JwZnO5peWVuelCIb9Yy0+U5y9MlJZXjpyfn57Nz+YXjk9OTR09cezE8Z2L9c+fVw7e+OjVZ78++fe7T1z74MckTsbB2rLGOHbKWIzVPpOB9CPc4JWdLqzHko3Zfb2qB+1Jd82+6l4eh2Ik+iqpFoa6WTMAoFPWAYC9651eVwAA6Jb69wC311Zz9am330h0182XI2J/Nf769c3qkv7aNbv9leugw7eTDVdGkogY3YHyxyLi82/f+jKdotYOyQ78X4CtXL4SEWdHxzb3/8mmexba9dyDFq4PVl7G7pu9144/0EvfpeOfF5qN/zJ3xz/RZPwz2GTffRhb7/+Z67VE3w4Ut0k6/nup4d62Ow3x14z21XL/q4z5BpJz5wv5tG/7f0SMx8Bgmp+srNp85DZ+659brcpvHP/98fHbX6Tlp6/31shc7x/c+J6Z6fL0f4277uaViKf6m8Wf3G3/pMX49/Q2y3jtxfc/a7UsjT+Ntz5tjr+z1q9GPNO0/e+1ZdLy/sT+YyeOT1Q2h4n6RtHEN798Otyq/Mb2T6e0/Pq5QDek7T/84PhHk8b7NUvtl/HT1ZHvWy3bOv7m2/++5M1Kun6j4aXpcnlxMmJf8vrm+Ufvvbeer6+fxj/+dPP9v1ps8+0/PSc8u834+2/89tXDx99ZafwzbbV/+4lrd+Za9t3ba/+pSmq8Nmc7/d8W9bocD701AwAAAAAAAAAAAAAAAAAAAAAAAED7MhFxMJJM9m46k8lmq8/wfjyGM4ViqXz4XHFpYSYqz8oejYFM/acuRxp+D3Wy9nv49fzR+/LPR8RjEfHJ4FAln80VCzO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAag60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3tHf8H+pYPQCA7nH+DwB7z7aP/2c7Ww8AoHvaPf/v61A9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGSdPnUqndb/WlvNpfmZi8tLc8WLR2bypbns/FIumysuXsjOFouzhXw2V5xv+Y8uV18KxeKFqVhYujRRzpfKE6XllTPzxaWF8pnz89Oz+TP5ga5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbV1pemZsuFPKLEg9MDO2OauyaRH/simo8Com+2BXVuD/R2EsM9a6DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/g0AAP//3BEuHw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x10003, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

0s ago: executing program 5 (id=420):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e)
ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0)

kernel console output (not intermixed with test programs):

5]  ? __stack_depot_save+0x34/0x480
[   24.235913][  T355]  ? __kasan_slab_alloc+0x69/0xe0
[   24.241042][  T355]  ? __kasan_kmalloc+0xe6/0x100
[   24.245897][  T355]  ? __kasan_kmalloc+0xd4/0x100
[   24.250752][  T355]  ? kmem_cache_alloc_trace+0x119/0x270
[   24.256299][  T355]  ? selinux_bpf_prog_alloc+0x51/0x140
[   24.261763][  T355]  ? security_bpf_prog_alloc+0x62/0x90
[   24.267216][  T355]  ? bpf_prog_load+0x9d4/0x1620
[   24.272063][  T355]  ? __sys_bpf+0x51d/0x7d0
[   24.276476][  T355]  ? __x64_sys_bpf+0x7c/0x90
[   24.281062][  T355]  ? x64_sys_call+0x4b9/0x9a0
[   24.285737][  T355]  ? do_syscall_64+0x4c/0xa0
[   24.290329][  T355]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   24.296402][  T355]  ? check_stack_object+0x81/0x150
[   24.301517][  T355]  ? memset+0x35/0x40
[   24.305495][  T355]  ? bpf_obj_name_cpy+0x193/0x1e0
[   24.310504][  T355]  bpf_prog_load+0x10c5/0x1620
[   24.315246][  T355]  ? __anon_inode_getfd+0x35c/0x3d0
[   24.320430][  T355]  ? map_freeze+0x370/0x370
[   24.324913][  T355]  ? selinux_bpf+0xc7/0xf0
[   24.329307][  T355]  ? security_bpf+0x82/0xa0
[   24.333812][  T355]  __sys_bpf+0x51d/0x7d0
[   24.338052][  T355]  ? bpf_link_show_fdinfo+0x330/0x330
[   24.343418][  T355]  ? __kasan_check_write+0x14/0x20
[   24.348512][  T355]  ? switch_fpu_return+0x15d/0x2c0
[   24.353612][  T355]  __x64_sys_bpf+0x7c/0x90
[   24.358028][  T355]  x64_sys_call+0x4b9/0x9a0
[   24.362520][  T355]  do_syscall_64+0x4c/0xa0
[   24.366931][  T355]  ? clear_bhb_loop+0x50/0xa0
[   24.371628][  T355]  ? clear_bhb_loop+0x50/0xa0
[   24.376295][  T355]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   24.382171][  T355] RIP: 0033:0x7f37a5ffd159
[   24.386571][  T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   24.406509][  T355] RSP: 002b:00007f37a4a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   24.415031][  T355] RAX: ffffffffffffffda RBX: 00007f37a6285090 RCX: 00007f37a5ffd159
[   24.423004][  T355] RDX: 000000000000007b RSI: 0000200000000440 RDI: 0000000000000005
[   24.430981][  T355] RBP: 00007f37a609406b R08: 0000000000000000 R09: 0000000000000000
[   24.438936][  T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   24.446887][  T355] R13: 00007f37a6285128 R14: 00007f37a6285090 R15: 00007ffebda7dbf8
[   24.454843][  T355]  </TASK>
[   24.769677][  T367] loop1: detected capacity change from 0 to 8192
[   24.811255][  T367]  loop1: p1 p2 p3
[   24.818955][  T367] loop1: p3 start 117772289 is beyond EOD, truncated
[   25.120475][    T6] usb 1-1: USB disconnect, device number 2
[   25.720796][  T368] Bluetooth: hci0: command 0x1001 tx timeout
[   26.186885][  T378] loop1: detected capacity change from 0 to 1024
[   26.245173][  T378] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   27.262480][  T386] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   27.490454][   T20] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   27.645467][  T396] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   27.800458][  T376] Bluetooth: hci0: command 0x1009 tx timeout
[   29.160331][    C0] sched: RT throttling activated
[   29.160670][  T369] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   29.766092][  T408] ip_tables: iptables: counters copy to user failed while replacing table
[   29.777051][  T409] xt_hashlimit: size too large, truncated to 1048576
[   29.890617][  T407] xt_TCPMSS: Only works on TCP SYN packets
[   29.897788][  T407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=407 comm=syz.3.23
[   29.910724][  T407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23'.
[   30.089726][   T30] kauditd_printk_skb: 19 callbacks suppressed
[   30.089743][   T30] audit: type=1400 audit(1790074969.108:170): avc:  denied  { read } for  pid=406 comm="syz.3.23" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   30.147783][  T412] loop1: detected capacity change from 0 to 1024
[   30.157550][  T414] loop3: detected capacity change from 0 to 1024
[   30.327991][  T417] loop4: detected capacity change from 0 to 256
[   30.340578][  T414] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   30.356045][   T30] audit: type=1400 audit(1790074969.108:171): avc:  denied  { open } for  pid=406 comm="syz.3.23" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   30.390812][  T412] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   30.401455][  T414] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[   30.550788][  T417] FAT-fs (loop4): IO charset none not found
[   30.781590][   T20] usb 1-1: device not accepting address 3, error -71
[   31.079269][   T30] audit: type=1400 audit(1790074970.388:172): avc:  denied  { mount } for  pid=439 comm="syz.1.29" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   31.084519][  T442] capability: warning: `syz.1.29' uses deprecated v2 capabilities in a way that may be insecure
[   31.104660][   T30] audit: type=1400 audit(1790074970.388:173): avc:  denied  { mmap_zero } for  pid=439 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   31.176980][   T30] audit: type=1400 audit(1790074970.448:174): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   31.230580][   T30] audit: type=1400 audit(1790074970.468:175): avc:  denied  { create } for  pid=445 comm="syz.1.31" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   31.252156][  T447] mmap: syz.1.31 (447) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   31.280413][   T30] audit: type=1400 audit(1790074970.468:176): avc:  denied  { write } for  pid=445 comm="syz.1.31" name="file2" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   31.320679][   T30] audit: type=1400 audit(1790074970.468:177): avc:  denied  { open } for  pid=445 comm="syz.1.31" path="/7/file2" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   31.350370][  T369] usb 4-1: Using ep0 maxpacket: 16
[   31.360394][   T30] audit: type=1400 audit(1790074970.468:178): avc:  denied  { ioctl } for  pid=445 comm="syz.1.31" path="/7/file2" dev="tmpfs" ino=62 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   31.434822][   T30] audit: type=1400 audit(1790074970.708:179): avc:  denied  { create } for  pid=440 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   31.445678][  T449] loop4: detected capacity change from 0 to 1024
[   31.490441][  T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.504852][  T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   31.532278][  T451] loop1: detected capacity change from 0 to 256
[   31.545769][  T369] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   31.555360][  T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.582623][  T449] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   31.614642][  T369] usb 4-1: config 0 descriptor??
[   31.689377][  T458] loop1: detected capacity change from 0 to 1024
[   32.040869][  T458] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   32.280540][  T340] Bluetooth: hci1: command 0x1003 tx timeout
[   32.299712][   T47] Bluetooth: hci1: sending frame failed (-49)
[   32.389151][  T468] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   33.434451][  T471] loop4: detected capacity change from 0 to 256
[   33.641070][  T436] xt_hashlimit: size too large, truncated to 1048576
[   33.719204][  T471] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   33.786075][  T478] ip_tables: iptables: counters copy to user failed while replacing table
[   34.370427][  T376] Bluetooth: hci1: command 0x1001 tx timeout
[   34.377102][  T416] Bluetooth: hci1: sending frame failed (-49)
[   34.808020][  T485] ------------[ cut here ]------------
[   34.824590][  T485] trace type BPF program uses run-time allocation
[   34.871429][  T485] WARNING: CPU: 0 PID: 485 at kernel/bpf/verifier.c:11749 check_map_prog_compatibility+0x6cc/0x870
[   34.890404][  T369] usbhid 4-1:0.0: can't add hid device: -71
[   34.896483][  T369] usbhid: probe of 4-1:0.0 failed with error -71
[   34.903325][  T485] Modules linked in:
[   34.907327][  T485] CPU: 0 PID: 485 Comm: syz.4.40 Not tainted syzkaller #0
[   35.044766][  T485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.139387][  T485] RIP: 0010:check_map_prog_compatibility+0x6cc/0x870
[   35.228966][  T485] Code: ee ff 48 c7 c6 40 58 48 85 4c 8b 65 d0 e9 f9 fc ff ff e8 a7 24 ee ff c6 05 48 90 6a 05 01 48 c7 c7 a0 54 48 85 e8 34 9b 2f 03 <0f> 0b e9 83 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a7 f9 ff
[   35.529692][  T485] RSP: 0018:ffffc90000d37450 EFLAGS: 00010246
[   35.817565][  T369] usb 4-1: USB disconnect, device number 2
[   35.824352][  T485] RAX: 2cfb97af343ca800 RBX: 0000000000000001 RCX: 0000000000080000
[   35.856214][  T485] RDX: ffffc90003b75000 RSI: 00000000000039c0 RDI: 00000000000039c1
[   35.864458][   T30] kauditd_printk_skb: 15 callbacks suppressed
[   35.864470][   T30] audit: type=1400 audit(1790074975.168:195): avc:  denied  { create } for  pid=489 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   35.900419][  T376] Bluetooth: hci0: command 0x1003 tx timeout
[   35.906482][  T416] Bluetooth: hci0: sending frame failed (-49)
[   35.906756][  T490] loop3: detected capacity change from 0 to 512
[   35.925092][  T485] RBP: ffffc90000d37490 R08: ffff8881f7032f3f R09: 1ffff1103ee065e7
[   35.933166][  T485] R10: dffffc0000000000 R11: ffffed103ee065e8 R12: ffff88811619c000
[   35.941289][  T485] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888116378000
[   35.949263][  T485] FS:  00007fa797ed26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   35.958226][  T485] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   35.967058][  T485] CR2: 00007f37a4a35990 CR3: 0000000116348000 CR4: 00000000003506a0
[   35.975097][  T485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   35.983147][  T485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   36.000383][  T485] Call Trace:
[   36.003780][  T485]  <TASK>
[   36.006724][  T485]  resolve_pseudo_ldimm64+0x617/0x10f0
[   36.012622][  T490] EXT4-fs (loop3): Test dummy encryption mode enabled
[   36.014405][  T485]  ? check_attach_btf_id+0xd80/0xd80
[   36.024894][  T485]  ? __mark_reg_known+0x1b0/0x1b0
[   36.029960][  T485]  ? security_capable+0x87/0xb0
[   36.031957][  T490] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   36.035054][  T485]  bpf_check+0x2d02/0xf750
[   36.048503][  T485]  ? is_bpf_text_address+0x177/0x190
[   36.054088][  T485]  ? is_bpf_text_address+0x177/0x190
[   36.058943][  T490] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   36.059455][  T485]  ? bpf_get_btf_vmlinux+0x60/0x60
[   36.072235][  T485]  ? unwind_get_return_address+0x4d/0x90
[   36.072240][  T490] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrjquota=,dioread_lock,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   36.101858][  T485]  ? stack_trace_save+0xf0/0xf0
[   36.106761][  T485]  ? arch_stack_walk+0xee/0x140
[   36.110745][   T30] audit: type=1400 audit(1790074975.428:196): avc:  denied  { write } for  pid=489 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   36.135278][   T30] audit: type=1400 audit(1790074975.428:197): avc:  denied  { nlmsg_write } for  pid=489 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   36.140706][  T485]  ? stack_trace_save+0xa6/0xf0
[   36.172056][  T485]  ? __stack_depot_save+0x34/0x480
[   36.177242][  T485]  ? __kasan_slab_alloc+0x69/0xe0
[   36.182487][  T485]  ? __kasan_kmalloc+0xe6/0x100
[   36.187355][  T485]  ? __kasan_kmalloc+0xd4/0x100
[   36.192245][  T485]  ? kmem_cache_alloc_trace+0x119/0x270
[   36.197861][  T485]  ? selinux_bpf_prog_alloc+0x51/0x140
[   36.203395][  T485]  ? security_bpf_prog_alloc+0x62/0x90
[   36.208912][  T485]  ? bpf_prog_load+0x9d4/0x1620
[   36.213900][  T485]  ? __sys_bpf+0x51d/0x7d0
[   36.218317][  T485]  ? __x64_sys_bpf+0x7c/0x90
[   36.222948][  T485]  ? x64_sys_call+0x4b9/0x9a0
[   36.227686][  T485]  ? do_syscall_64+0x4c/0xa0
[   36.232303][  T485]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   36.238422][  T485]  ? check_stack_object+0x81/0x150
[   36.243590][  T485]  ? memset+0x35/0x40
[   36.247618][  T485]  ? bpf_obj_name_cpy+0x193/0x1e0
[   36.252730][  T485]  bpf_prog_load+0x10c5/0x1620
[   36.257492][  T485]  ? __anon_inode_getfd+0x35c/0x3d0
[   36.262734][  T485]  ? map_freeze+0x370/0x370
[   36.267295][  T485]  ? selinux_bpf+0xc7/0xf0
[   36.271753][  T485]  ? security_bpf+0x82/0xa0
[   36.276318][  T485]  __sys_bpf+0x51d/0x7d0
[   36.280595][  T485]  ? bpf_link_show_fdinfo+0x330/0x330
[   36.286037][  T485]  ? __kasan_check_write+0x14/0x20
[   36.291181][  T485]  ? switch_fpu_return+0x15d/0x2c0
[   36.296388][  T485]  __x64_sys_bpf+0x7c/0x90
[   36.300858][  T485]  x64_sys_call+0x4b9/0x9a0
[   36.305430][  T485]  do_syscall_64+0x4c/0xa0
[   36.309861][  T485]  ? clear_bhb_loop+0x50/0xa0
[   36.314583][  T485]  ? clear_bhb_loop+0x50/0xa0
[   36.319342][  T485]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   36.325411][  T485] RIP: 0033:0x7fa799479159
[   36.329907][  T485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.349688][  T485] RSP: 002b:00007fa797ed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   36.358291][  T485] RAX: ffffffffffffffda RBX: 00007fa799700fa0 RCX: 00007fa799479159
[   36.366375][  T485] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[   36.374446][  T485] RBP: 00007fa79951006b R08: 0000000000000000 R09: 0000000000000000
[   36.382541][  T485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.390800][  T485] R13: 00007fa799701038 R14: 00007fa799700fa0 R15: 00007ffd90270e38
[   36.398787][  T485]  </TASK>
[   36.401907][  T485] ---[ end trace 272448e04471600c ]---
[   36.440414][  T376] Bluetooth: hci1: command 0x1009 tx timeout
[   36.469422][  T494] loop2: detected capacity change from 0 to 131072
[   36.502737][  T494] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[   36.511333][  T494] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   36.516247][  T501] loop4: detected capacity change from 0 to 256
[   36.526068][  T494] F2FS-fs (loop2): invalid crc value
[   36.533112][  T494] F2FS-fs (loop2): Found nat_bits in checkpoint
[   36.555048][  T494] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   36.562171][  T494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   36.707913][  T507] loop3: detected capacity change from 0 to 256
[   36.750951][  T507] FAT-fs (loop3): Unrecognized mount option "check=" or missing value
[   36.766698][   T30] audit: type=1400 audit(1790074976.068:198): avc:  denied  { remount } for  pid=506 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   36.766705][  T507] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22
[   36.766722][  T507] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22
[   36.847487][  T507] loop3: detected capacity change from 0 to 4096
[   36.866746][  T507] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   36.899832][   T30] audit: type=1400 audit(1790074976.208:199): avc:  denied  { append } for  pid=506 comm="syz.3.45" path="/7/file0/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   36.939244][   T30] audit: type=1400 audit(1790074976.248:200): avc:  denied  { bind } for  pid=506 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.011198][   T30] audit: type=1400 audit(1790074976.328:201): avc:  denied  { write } for  pid=506 comm="syz.3.45" path="socket:[16733]" dev="sockfs" ino=16733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.034733][   T30] audit: type=1400 audit(1790074976.328:202): avc:  denied  { write } for  pid=506 comm="syz.3.45" name="vlan0" dev="proc" ino=4026532778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   37.121133][  T514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'.
[   37.243217][   T30] audit: type=1326 audit(1790074976.458:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=510 comm="syz.2.46" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cb1100159 code=0x0
[   37.460033][   T30] audit: type=1400 audit(1790074976.768:204): avc:  denied  { bind } for  pid=516 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   37.649720][  T527] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.153197][  T376] Bluetooth: hci0: command 0x1001 tx timeout
[   39.159300][  T416] Bluetooth: hci0: sending frame failed (-49)
[   40.172644][  T540] team_slave_1: mtu greater than device maximum
[   40.187201][  T542] ip_tables: iptables: counters copy to user failed while replacing table
[   40.376941][  T548] loop3: detected capacity change from 0 to 1024
[   40.443997][  T555] loop0: detected capacity change from 0 to 512
[   40.451312][  T555] EXT4-fs (loop0): Test dummy encryption mode enabled
[   40.459248][  T555] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   40.483443][  T555] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[   40.491301][  T555] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrjquota=,dioread_lock,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   40.492939][  T548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   41.417867][   T26] Bluetooth: hci0: command 0x1009 tx timeout
[   41.657942][  T566] loop2: detected capacity change from 0 to 256
[   42.007537][  T569] loop3: detected capacity change from 0 to 131072
[   42.023520][  T569] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[   42.040531][  T569] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   42.049260][  T569] F2FS-fs (loop3): invalid crc value
[   42.070222][  T569] F2FS-fs (loop3): Found nat_bits in checkpoint
[   42.092254][  T569] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   42.099366][  T569] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   42.181171][  T578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   42.206364][  T368] Bluetooth: hci2: command 0x1003 tx timeout
[   42.213808][  T314] Bluetooth: hci2: sending frame failed (-49)
[   42.250212][   T30] kauditd_printk_skb: 8 callbacks suppressed
[   42.250235][   T30] audit: type=1326 audit(1790074981.518:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.0.62" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37a5ffd159 code=0x0
[   42.419668][  T581] loop2: detected capacity change from 0 to 1024
[   42.457358][  T581] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   42.930853][  T587] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   43.848678][   T30] audit: type=1400 audit(1790074983.108:214): avc:  denied  { getopt } for  pid=590 comm="syz.0.66" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.784798][  T368] Bluetooth: hci2: command 0x1001 tx timeout
[   44.806413][  T314] Bluetooth: hci2: sending frame failed (-49)
[   45.186326][  T602] device syzkaller0 entered promiscuous mode
[   45.190955][   T30] audit: type=1400 audit(1790074984.508:215): avc:  denied  { setopt } for  pid=600 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   45.673855][  T610] loop3: detected capacity change from 0 to 1024
[   45.679867][   T30] audit: type=1400 audit(1790074984.508:216): avc:  denied  { ioctl } for  pid=600 comm="syz.1.69" path="socket:[16243]" dev="sockfs" ino=16243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   45.705165][   T30] audit: type=1400 audit(1790074984.508:217): avc:  denied  { write } for  pid=600 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   45.707476][  T610] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   45.741438][   T30] audit: type=1400 audit(1790074984.958:218): avc:  denied  { create } for  pid=611 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   45.821191][   T30] audit: type=1400 audit(1790074984.958:219): avc:  denied  { setopt } for  pid=611 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   46.135116][   T30] audit: type=1400 audit(1790074984.958:220): avc:  denied  { write } for  pid=611 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   46.154700][   T30] audit: type=1400 audit(1790074984.968:221): avc:  denied  { setopt } for  pid=611 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.175134][   T30] audit: type=1400 audit(1790074984.968:222): avc:  denied  { create } for  pid=611 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   46.265928][  T628] ip_tables: iptables: counters copy to user failed while replacing table
[   46.435142][  T632] loop0: detected capacity change from 0 to 16
[   46.500664][  T632] erofs: Unknown parameter '��'
[   46.555794][  T632] loop0: detected capacity change from 0 to 512
[   46.557238][  T636] loop3: detected capacity change from 0 to 2048
[   46.572475][  T632] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   46.670875][  T639] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   46.840425][  T376] Bluetooth: hci2: command 0x1009 tx timeout
[   47.617658][  T647] loop0: detected capacity change from 0 to 128
[   47.625683][  T647] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   47.678065][  T647] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   49.154713][  T376] Bluetooth: hci0: command 0x1003 tx timeout
[   49.168462][  T314] Bluetooth: hci0: sending frame failed (-49)
[   49.172252][  T657] netlink: 64 bytes leftover after parsing attributes in process `syz.2.82'.
[   49.300124][  T652] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   49.308714][  T652] FAT-fs (loop0): Filesystem has been set read-only
[   49.549351][  T662] loop0: detected capacity change from 0 to 1024
[   49.639095][  T662] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   49.754782][  T673] ip_tables: iptables: counters copy to user failed while replacing table
[   49.757803][  T671] loop3: detected capacity change from 0 to 256
[   50.204409][  T679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'.
[   51.201683][  T683] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   51.250440][  T376] Bluetooth: hci0: command 0x1001 tx timeout
[   51.256598][  T416] Bluetooth: hci0: sending frame failed (-49)
[   51.667713][  T694] loop4: detected capacity change from 0 to 128
[   51.755502][  T694] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   51.801052][   T26] Bluetooth: hci1: command 0x1003 tx timeout
[   51.830579][  T416] Bluetooth: hci1: sending frame failed (-49)
[   51.873799][  T694] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   52.513806][   T30] kauditd_printk_skb: 7 callbacks suppressed
[   52.513820][   T30] audit: type=1400 audit(1790074991.828:230): avc:  denied  { mount } for  pid=696 comm="syz.3.95" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   52.592426][   T30] audit: type=1400 audit(1790074991.868:231): avc:  denied  { remount } for  pid=696 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   52.867637][  T698] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   52.876428][  T698] FAT-fs (loop4): Filesystem has been set read-only
[   52.959238][  T703] loop3: detected capacity change from 0 to 40427
[   52.982559][  T703] F2FS-fs (loop3): invalid crc value
[   52.983170][  T308] udevd[308]: symlink '../../loop3' '/dev/disk/by-diskseq/111.tmp-b7:3' failed: Read-only file system
[   53.023468][  T308] udevd[308]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[   53.039692][  T703] F2FS-fs (loop3): Found nat_bits in checkpoint
[   53.075313][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-diskseq/112.tmp-b7:4' failed: Read-only file system
[   53.114683][  T703] F2FS-fs (loop3): Start checkpoint disabled!
[   53.130422][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-diskseq/112.tmp-b7:4' failed: Read-only file system
[   53.150929][  T703] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   53.166148][  T711] loop4: detected capacity change from 0 to 1024
[   53.172237][  T311] udevd[311]: symlink '../../loop3' '/dev/disk/by-diskseq/111.tmp-b7:3' failed: Read-only file system
[   53.207015][  T703] x_tables: duplicate entry at hook 2
[   53.223934][  T311] udevd[311]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[   53.275996][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-diskseq/113.tmp-b7:4' failed: Read-only file system
[   53.297184][  T711] EXT4-fs (loop4): can't mount with commit=4, fs mounted w/o journal
[   53.306375][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[   53.320368][   T26] Bluetooth: hci0: command 0x1009 tx timeout
[   53.330292][  T703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=703 comm=syz.3.96
[   53.342457][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-diskseq/113.tmp-b7:4' failed: Read-only file system
[   53.361175][  T703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'.
[   53.371353][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[   53.480800][    T8] attempt to access beyond end of device
[   53.480800][    T8] loop3: rw=2049, want=40968, limit=40427
[   53.570580][  T716] loop3: detected capacity change from 0 to 1024
[   53.760653][  T716] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   53.880390][   T26] Bluetooth: hci1: command 0x1001 tx timeout
[   53.886872][  T416] Bluetooth: hci1: sending frame failed (-49)
[   54.077379][  T725] ip_tables: iptables: counters copy to user failed while replacing table
[   54.389613][  T732] xt_l2tp: invalid flags combination: c
[   54.730363][  T305] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   54.970432][  T305] usb 1-1: Using ep0 maxpacket: 16
[   55.090471][  T305] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[   55.098578][  T305] usb 1-1: config 0 has no interface number 0
[   55.104682][  T305] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   55.114680][  T305] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   55.280488][  T305] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   55.289550][  T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.297669][  T305] usb 1-1: Product: syz
[   55.301844][  T305] usb 1-1: Manufacturer: syz
[   55.306414][  T305] usb 1-1: SerialNumber: syz
[   55.311695][  T305] usb 1-1: config 0 descriptor??
[   55.330434][  T735] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.337393][  T735] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.551641][  T735] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.558609][  T735] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.780472][  T305] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   55.960414][  T376] Bluetooth: hci1: command 0x1009 tx timeout
[   56.120427][   T20] Bluetooth: hci2: command 0x1003 tx timeout
[   56.126531][  T313] Bluetooth: hci2: sending frame failed (-49)
[   56.947236][  T737] loop1: detected capacity change from 0 to 512
[   57.001701][  T737] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   57.012823][  T737] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.300731][  T305] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   57.310990][  T305] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[   57.322132][   T30] audit: type=1400 audit(1790074996.638:232): avc:  denied  { link } for  pid=736 comm="syz.1.106" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.322780][  T305] asix: probe of 1-1:0.34 failed with error -71
[   57.357262][  T305] usb 1-1: USB disconnect, device number 5
[   57.407768][  T742] loop1: detected capacity change from 0 to 128
[   57.461757][  T742] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   57.473957][  T742] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   57.889185][  T747] loop0: detected capacity change from 0 to 256
[   57.996151][  T308] udevd[308]: symlink '../../loop1' '/dev/disk/by-diskseq/119.tmp-b7:1' failed: Read-only file system
[   58.070486][  T743] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   58.079020][  T743] FAT-fs (loop1): Filesystem has been set read-only
[   58.200463][  T278] Bluetooth: hci2: command 0x1001 tx timeout
[   58.206583][   T47] Bluetooth: hci2: sending frame failed (-49)
[   58.244326][   T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   58.316309][  T308] udevd[308]: symlink '../../loop1' '/dev/disk/by-diskseq/119.tmp-b7:1' failed: Read-only file system
[   58.330641][  T308] udevd[308]: symlink '../../loop1' '/dev/disk/by-diskseq/119.tmp-b7:1' failed: Read-only file system
[   58.345358][  T308] udevd[308]: symlink '../../loop1' '/dev/disk/by-diskseq/121.tmp-b7:1' failed: Read-only file system
[   58.463965][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-diskseq/113.tmp-b7:4' failed: Read-only file system
[   58.478009][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-diskseq/113.tmp-b7:4' failed: Read-only file system
[   58.493410][   T30] audit: type=1326 audit(1790074997.808:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=757 comm="syz.4.113" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa799479159 code=0x0
[   58.770444][   T20] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[   58.779516][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   58.787587][   T20] usb 1-1: Product: syz
[   58.791792][   T20] usb 1-1: Manufacturer: syz
[   59.048750][  T311] udevd[311]: symlink '../../loop0' '/dev/disk/by-diskseq/120.tmp-b7:0' failed: Read-only file system
[   59.061611][   T20] scsi host1: uas
[   59.206430][   T30] audit: type=1326 audit(1790074998.518:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.210677][  T767] netlink: 72 bytes leftover after parsing attributes in process `syz.1.114'.
[   59.231258][  T308] udevd[308]: symlink '../../loop1' '/dev/disk/by-diskseq/121.tmp-b7:1' failed: Read-only file system
[   59.249716][   T30] audit: type=1326 audit(1790074998.518:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.275559][   T30] audit: type=1326 audit(1790074998.518:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.300817][   T30] audit: type=1326 audit(1790074998.518:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.325485][   T30] audit: type=1326 audit(1790074998.518:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.334379][  T308] udevd[308]: symlink '../../loop4' '/dev/disk/by-diskseq/122.tmp-b7:4' failed: Read-only file system
[   59.350442][   T30] audit: type=1326 audit(1790074998.518:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.386402][   T30] audit: type=1326 audit(1790074998.518:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.392357][  T769] loop4: detected capacity change from 0 to 256
[   59.411503][   T30] audit: type=1326 audit(1790074998.518:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.441805][   T30] audit: type=1326 audit(1790074998.518:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=766 comm="syz.1.114" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b6193159 code=0x7ffc0000
[   59.473660][  T311] udevd[311]: symlink '../../loop1' '/dev/disk/by-diskseq/121.tmp-b7:1' failed: Read-only file system
[   59.488004][  T769] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   59.493478][  T771] ip_tables: iptables: counters copy to user failed while replacing table
[   59.500844][  T369] usb 1-1: USB disconnect, device number 6
[   59.520372][    C0] usb 1-1: stat urb: status -71
[   59.525351][    C0] usb 1-1: cmd cmplt err -108
[   59.530280][  T369] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[   59.538132][  T369] scsi 1:0:0:0: tag#16 CDB: opcode=0x12 12 00 00 00 24 00
[   59.587323][  T773] loop4: detected capacity change from 0 to 256
[   59.663237][  T773] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[   59.738186][  T780] loop4: detected capacity change from 0 to 128
[   59.762303][  T780] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   59.774528][  T780] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   60.176730][  T785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'.
[   60.216058][  T787] loop2: detected capacity change from 0 to 256
[   60.280407][   T20] Bluetooth: hci2: command 0x1009 tx timeout
[   60.293704][  T787] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   60.492416][  T789] loop0: detected capacity change from 0 to 40427
[   60.520889][  T781] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   60.529500][  T781] FAT-fs (loop4): Filesystem has been set read-only
[   60.565244][  T791] loop2: detected capacity change from 0 to 40427
[   60.574241][  T789] F2FS-fs (loop0): invalid crc value
[   60.581092][  T789] F2FS-fs (loop0): Found nat_bits in checkpoint
[   60.603325][  T789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   60.611445][  T791] F2FS-fs (loop2): Unrecognized mount option "00000000000000000000005" or missing value
[   60.664280][  T288] attempt to access beyond end of device
[   60.664280][  T288] loop0: rw=2049, want=45104, limit=40427
[   60.702507][  T800] loop2: detected capacity change from 0 to 512
[   60.723351][  T800] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   60.724706][  T802] loop4: detected capacity change from 0 to 512
[   60.737379][  T800] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   60.757140][  T800] EXT4-fs (loop2): 1 truncate cleaned up
[   60.763161][  T800] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   60.773809][  T802] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   60.826781][  T802] EXT4-fs (loop4): 1 orphan inode deleted
[   60.842403][  T802] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   60.854979][  T802] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.866953][  T287] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   60.881522][  T287] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[   60.896231][  T287] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[   60.947029][  T826] loop2: detected capacity change from 0 to 256
[   60.961747][  T826] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   61.042545][  T828] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   61.174615][  T831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=831 comm=syz.2.128
[   61.189564][  T831] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[   61.199715][  T831] 9pnet: Insufficient options for proto=fd
[   61.440357][   T20] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[   61.560441][  T376] Bluetooth: hci0: command 0x1003 tx timeout
[   61.566561][  T314] Bluetooth: hci0: sending frame failed (-49)
[   61.680398][   T20] usb 5-1: Invalid ep0 maxpacket: 32
[   61.840375][   T20] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   61.918771][  T845] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.956403][  T849] loop2: detected capacity change from 0 to 8192
[   61.980421][  T376] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   62.000778][  T308]  loop2: p1 p2 p3 p4[EZD]
[   62.005283][  T308] loop2: p1 start 16384 is beyond EOD, truncated
[   62.011683][  T308] loop2: p2 size 150994944 extends beyond EOD, truncated
[   62.019162][  T308] loop2: p3 start 67108864 is beyond EOD, truncated
[   62.025853][  T308] loop2: p4 size 33555584 extends beyond EOD, truncated
[   62.034541][  T849]  loop2: p1 p2 p3 p4[EZD]
[   62.039046][  T849] loop2: p1 start 16384 is beyond EOD, truncated
[   62.045458][  T849] loop2: p2 size 150994944 extends beyond EOD, truncated
[   62.052867][  T849] loop2: p3 start 67108864 is beyond EOD, truncated
[   62.059469][  T849] loop2: p4 size 33555584 extends beyond EOD, truncated
[   62.080376][   T20] usb 5-1: Invalid ep0 maxpacket: 32
[   62.085733][   T20] usb usb5-port1: attempt power cycle
[   62.220408][  T376] usb 1-1: Using ep0 maxpacket: 8
[   62.224469][  T853] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   62.321684][  T855] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   62.332391][  T855] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.340485][  T376] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[   62.351740][  T855] fs-verity: sha512 using implementation "sha512-avx2"
[   62.353969][  T376] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[   62.372186][  T376] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   62.381263][  T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.400916][  T855] syz.2.139 (855) used greatest stack depth: 21000 bytes left
[   62.410499][  T843] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   62.500421][   T20] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   62.670492][  T376] usb 1-1: string descriptor 0 read error: -71
[   62.678768][  T376] hub 1-1:32.0: USB hub found
[   62.730459][   T20] usb 5-1: Invalid ep0 maxpacket: 32
[   62.760389][  T376] hub 1-1:32.0: config failed, can't read hub descriptor (err -22)
[   62.811230][  T376] usb 1-1: USB disconnect, device number 7
[   62.880412][   T20] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   62.970445][   T20] usb 5-1: Invalid ep0 maxpacket: 32
[   62.975820][   T20] usb usb5-port1: unable to enumerate USB device
[   63.171141][  T308] udevd[308]: symlink '../../loop0' '/dev/disk/by-diskseq/137.tmp-b7:0' failed: Read-only file system
[   63.467625][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/147.tmp-b7:2' failed: Read-only file system
[   63.471449][  T869] EXT4-fs (loop2): Ignoring removed orlov option
[   63.484087][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system
[   63.486294][  T869] EXT4-fs (loop2): quotafile must be on filesystem root
[   63.496781][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[   63.519110][  T869] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   63.528685][   T30] kauditd_printk_skb: 121 callbacks suppressed
[   63.528696][   T30] audit: type=1400 audit(1790075002.848:364): avc:  denied  { relabelto } for  pid=868 comm="syz.2.142" name="30" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   63.560703][   T30] audit: type=1400 audit(1790075002.848:365): avc:  denied  { associate } for  pid=868 comm="syz.2.142" name="30" dev="tmpfs" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[   63.587529][   T30] audit: type=1400 audit(1790075002.848:366): avc:  denied  { write } for  pid=868 comm="syz.2.142" name="30" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   63.613319][   T30] audit: type=1400 audit(1790075002.848:367): avc:  denied  { add_name } for  pid=868 comm="syz.2.142" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   63.622388][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system
[   63.640157][   T30] audit: type=1400 audit(1790075002.848:368): avc:  denied  { associate } for  pid=868 comm="syz.2.142" name="blkio.bfq.io_serviced" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   63.649959][  T369] Bluetooth: hci0: command 0x1001 tx timeout
[   63.650049][  T314] Bluetooth: hci0: sending frame failed (-49)
[   63.682419][   T30] audit: type=1400 audit(1790075002.848:369): avc:  denied  { remove_name } for  pid=287 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   63.698756][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system
[   63.713147][   T30] audit: type=1400 audit(1790075002.848:370): avc:  denied  { rmdir } for  pid=287 comm="syz-executor" name="30" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   63.728565][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/149.tmp-b7:2' failed: Read-only file system
[   63.761147][  T875] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[   63.763831][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/149.tmp-b7:2' failed: Read-only file system
[   63.789319][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/149.tmp-b7:2' failed: Read-only file system
[   63.851363][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/149.tmp-b7:2' failed: Read-only file system
[   63.915609][  T885] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   63.960828][  T887] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   64.937422][   T30] audit: type=1400 audit(1790075004.248:371): avc:  denied  { connect } for  pid=898 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.973188][   T30] audit: type=1400 audit(1790075004.278:372): avc:  denied  { write } for  pid=898 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   65.009047][  T900] set_capacity_and_notify: 5 callbacks suppressed
[   65.009062][  T900] loop4: detected capacity change from 0 to 256
[   65.057017][   T30] audit: type=1326 audit(1790075004.368:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.2.156" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cb1100159 code=0x0
[   66.172760][  T369] Bluetooth: hci0: command 0x1009 tx timeout
[   66.238207][  T915] loop0: detected capacity change from 0 to 256
[   66.252085][  T916] xt_hashlimit: size too large, truncated to 1048576
[   66.265986][  T919] loop4: detected capacity change from 0 to 128
[   66.320905][  T919] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   66.331196][  T919] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   66.348250][  T915] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   66.367587][  T919] ext2 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   66.454936][  T929] loop3: detected capacity change from 0 to 256
[   66.456785][  T927] loop0: detected capacity change from 0 to 256
[   66.485162][  T931] ip_tables: iptables: counters copy to user failed while replacing table
[   66.496136][  T927] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   66.523487][  T929] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.557985][  T935] loop0: detected capacity change from 0 to 256
[   66.584661][  T935] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   66.625175][  T929] FAULT_INJECTION: forcing a failure.
[   66.625175][  T929] name failslab, interval 1, probability 0, space 0, times 0
[   66.637892][  T929] CPU: 0 PID: 929 Comm: syz.3.166 Tainted: G        W         syzkaller #0
[   66.646488][  T929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   66.656560][  T929] Call Trace:
[   66.659841][  T929]  <TASK>
[   66.662764][  T929]  __dump_stack+0x21/0x30
[   66.667099][  T929]  dump_stack_lvl+0x110/0x170
[   66.671781][  T929]  ? show_regs_print_info+0x20/0x20
[   66.676987][  T929]  dump_stack+0x15/0x20
[   66.681142][  T929]  should_fail+0x3ab/0x500
[   66.685558][  T929]  __should_failslab+0xa4/0xe0
[   66.690325][  T929]  should_failslab+0x9/0x20
[   66.694828][  T929]  slab_pre_alloc_hook+0x39/0xd0
[   66.699773][  T929]  ? getname_flags+0xba/0x510
[   66.704454][  T929]  kmem_cache_alloc+0x44/0x260
[   66.709220][  T929]  getname_flags+0xba/0x510
[   66.713720][  T929]  getname+0x19/0x20
[   66.717609][  T929]  do_sys_openat2+0xeb/0x7f0
[   66.722194][  T929]  ? __se_sys_futex+0x135/0x330
[   66.727047][  T929]  ? do_sys_open+0xe0/0xe0
[   66.731464][  T929]  ? __x64_sys_futex+0x100/0x100
[   66.736404][  T929]  ? ksys_write+0x1fa/0x260
[   66.740910][  T929]  __x64_sys_openat+0x136/0x160
[   66.745760][  T929]  x64_sys_call+0x219/0x9a0
[   66.750266][  T929]  do_syscall_64+0x4c/0xa0
[   66.754681][  T929]  ? clear_bhb_loop+0x50/0xa0
[   66.759354][  T929]  ? clear_bhb_loop+0x50/0xa0
[   66.764031][  T929]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   66.769934][  T929] RIP: 0033:0x7fdaa3318159
[   66.774346][  T929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.793948][  T929] RSP: 002b:00007fdaa1d71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   66.802351][  T929] RAX: ffffffffffffffda RBX: 00007fdaa359ffa0 RCX: 00007fdaa3318159
[   66.810305][  T929] RDX: 00000000000c1842 RSI: 0000200000000100 RDI: ffffffffffffff9c
[   66.818259][  T929] RBP: 00007fdaa33af06b R08: 0000000000000000 R09: 0000000000000000
[   66.826206][  T929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.834155][  T929] R13: 00007fdaa35a0038 R14: 00007fdaa359ffa0 R15: 00007ffc673d2a98
[   66.842110][  T929]  </TASK>
[   66.888990][  T285] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   66.897338][  T285] FAT-fs (loop3): Filesystem has been set read-only
[   66.904149][  T285] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   67.001109][  T285] syz-executor (285) used greatest stack depth: 20032 bytes left
[   67.151096][  T949] loop2: detected capacity change from 0 to 256
[   67.170368][  T371] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   67.179496][  T944] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.187715][  T944] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.195399][  T944] device bridge_slave_0 entered promiscuous mode
[   67.202608][  T944] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.209701][  T944] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.218955][  T944] device bridge_slave_1 entered promiscuous mode
[   67.241658][  T955] loop2: detected capacity change from 0 to 256
[   67.256078][  T955] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   67.298928][  T944] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.306007][  T944] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.313287][  T944] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.320358][  T944] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.337514][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.345642][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.365210][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.377964][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.386426][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.393498][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.402031][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.410220][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.412405][  T959] loop2: detected capacity change from 0 to 8192
[   67.417303][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.417453][  T371] usb 1-1: Using ep0 maxpacket: 32
[   67.440751][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.449869][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.460825][  T308]  loop2: p1 < > p2 < > p4 < >
[   67.465744][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.471397][  T308] loop2: partition table partially beyond EOD, truncated
[   67.481271][  T308] loop2: p2 start 16776960 is beyond EOD, truncated
[   67.489600][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.498928][  T959]  loop2: p1 < > p2 < > p4 < >
[   67.499533][  T944] device veth0_vlan entered promiscuous mode
[   67.503743][  T959] loop2: partition table partially beyond EOD, truncated
[   67.517626][  T959] loop2: p2 start 16776960 is beyond EOD, truncated
[   67.525986][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.533572][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.541555][  T959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'.
[   67.550506][  T371] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 33, using maximum allowed: 30
[   67.558200][  T944] device veth1_macvtap entered promiscuous mode
[   67.567678][  T371] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[   67.581280][  T371] usb 1-1: config 0 interface 0 has no altsetting 0
[   67.588292][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.596248][  T371] usb 1-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00
[   67.605318][  T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.614975][  T371] usb 1-1: config 0 descriptor??
[   67.621943][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.631666][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.708835][  T963] loop2: detected capacity change from 0 to 8192
[   67.716567][   T43] device bridge_slave_1 left promiscuous mode
[   67.722811][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.730476][   T43] device bridge_slave_0 left promiscuous mode
[   67.736576][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.744058][  T308]  loop2: p1 p2 p3 p4[EZD]
[   67.748631][   T43] device veth1_macvtap left promiscuous mode
[   67.748765][  T308] loop2: p1 start 16384 is beyond EOD, truncated
[   67.754934][   T43] device veth0_vlan left promiscuous mode
[   67.766682][  T308] loop2: p2 size 150994944 extends beyond EOD, truncated
[   67.836658][  T308] loop2: p3 start 67108864 is beyond EOD, truncated
[   67.880112][  T308] loop2: p4 size 33555584 extends beyond EOD, truncated
[   68.642275][   T20] Bluetooth: hci1: command 0x1003 tx timeout
[   68.648339][  T314] Bluetooth: hci1: sending frame failed (-49)
[   68.650791][  T963]  loop2: p1 p2 p3 p4[EZD]
[   68.661813][  T963] loop2: p1 start 16384 is beyond EOD, truncated
[   68.668170][  T963] loop2: p2 size 150994944 extends beyond EOD, truncated
[   68.677420][  T963] loop2: p3 start 67108864 is beyond EOD, truncated
[   68.691528][   T30] kauditd_printk_skb: 10 callbacks suppressed
[   68.691541][   T30] audit: type=1400 audit(1790075008.008:384): avc:  denied  { mount } for  pid=970 comm="syz.5.178" name="/" dev="configfs" ino=13200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   68.742855][  T963] loop2: p4 size 33555584 extends beyond EOD, truncated
[   68.761574][   T30] audit: type=1400 audit(1790075008.038:385): avc:  denied  { search } for  pid=970 comm="syz.5.178" name="/" dev="configfs" ino=13200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   68.765999][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/170.tmp-b7:2' failed: Read-only file system
[   68.783930][   T30] audit: type=1400 audit(1790075008.038:386): avc:  denied  { unmount } for  pid=944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   68.824884][  T311] udevd[311]: symlink '../../loop5' '/dev/disk/by-diskseq/173.tmp-b7:5' failed: Read-only file system
[   68.844810][  T973] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   68.851283][  T311] udevd[311]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system
[   68.860476][  T349] udevd[349]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   68.871490][  T308] udevd[308]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   68.898004][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/170.tmp-b7:2' failed: Read-only file system
[   68.910493][  T371] usbhid 1-1:0.0: can't add hid device: -71
[   68.916440][  T371] usbhid: probe of 1-1:0.0 failed with error -71
[   68.929253][  T349] udevd[349]: symlink '../../loop5' '/dev/disk/by-diskseq/173.tmp-b7:5' failed: Read-only file system
[   68.934071][  T371] usb 1-1: USB disconnect, device number 8
[   68.957252][  T308] udevd[308]: symlink '../../loop2' '/dev/disk/by-diskseq/170.tmp-b7:2' failed: Read-only file system
[   68.960999][  T349] udevd[349]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system
[   68.976893][  T311] udevd[311]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system
[   68.990446][   T30] audit: type=1400 audit(1790075008.288:387): avc:  denied  { block_suspend } for  pid=975 comm="syz.2.182" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   69.063683][   T30] audit: type=1400 audit(1790075008.378:388): avc:  denied  { remount } for  pid=982 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.291361][ T1006] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   69.303601][ T1006] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   69.520457][   T26] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   69.752936][ T1014] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   69.879661][ T1016] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   69.989470][ T1009] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   69.998205][ T1009] FAT-fs (loop5): Filesystem has been set read-only
[   70.013211][ T1018] set_capacity_and_notify: 5 callbacks suppressed
[   70.013226][ T1018] loop1: detected capacity change from 0 to 512
[   70.019138][ T1020] loop0: detected capacity change from 0 to 256
[   70.072789][ T1020] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   70.087114][ T1018] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   70.104402][ T1018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[   70.115325][ T1018] EXT4-fs (loop1): orphan cleanup on readonly fs
[   70.122855][ T1018] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.193: bad orphan inode 3
[   70.133616][ T1018] EXT4-fs (loop1): Remounting filesystem read-only
[   70.140141][ T1018] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none.
[   70.159232][ T1018] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.193: dx entry: limit 0 != root limit 125
[   70.171816][ T1018] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.193: Corrupt directory, running e2fsck is recommended
[   70.186353][ T1018] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.193: dx entry: limit 0 != root limit 125
[   70.198199][ T1018] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.193: Corrupt directory, running e2fsck is recommended
[   70.211454][ T1018] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.193: dx entry: limit 0 != root limit 125
[   70.223404][ T1018] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.193: Corrupt directory, running e2fsck is recommended
[   70.237793][ T1018] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.193: dx entry: limit 0 != root limit 125
[   70.249573][ T1018] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.193: Corrupt directory, running e2fsck is recommended
[   70.289102][ T1027] loop5: detected capacity change from 0 to 512
[   70.339804][ T1027] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   70.350822][ T1027] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.368097][   T30] audit: type=1400 audit(1790075009.678:389): avc:  denied  { map } for  pid=1026 comm="syz.5.196" path="/7/file0/rdma.current" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   70.391198][   T26] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[   70.399524][   T26] usb 3-1: config 0 has no interface number 0
[   70.417229][   T26] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   70.433183][   T26] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   70.444291][   T26] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[   70.461680][   T26] usb 3-1: config 0 interface 2 has no altsetting 0
[   70.468306][ T1028] loop0: detected capacity change from 0 to 40427
[   70.481184][ T1035] loop5: detected capacity change from 0 to 256
[   70.482848][ T1038] loop1: detected capacity change from 0 to 512
[   70.492178][ T1028] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   70.501713][ T1028] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   70.511361][ T1028] F2FS-fs (loop0): invalid crc value
[   70.517895][ T1028] F2FS-fs (loop0): Found nat_bits in checkpoint
[   70.530826][ T1038] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   70.548998][ T1028] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   70.556641][   T30] audit: type=1400 audit(1790075009.878:390): avc:  denied  { getopt } for  pid=1037 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   70.563084][ T1028] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   70.641108][   T30] audit: type=1400 audit(1790075009.948:391): avc:  denied  { create } for  pid=1045 comm="syz.5.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   70.680036][ T1049] loop1: detected capacity change from 0 to 256
[   70.686797][  T371] Bluetooth: hci1: command 0x1001 tx timeout
[   70.692868][   T47] Bluetooth: hci1: sending frame failed (-49)
[   70.702754][ T1046] loop5: detected capacity change from 0 to 8192
[   70.709446][   T26] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[   70.742644][ T1049] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   70.826018][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.834348][   T26] usb 3-1: Product: syz
[   70.838503][   T26] usb 3-1: Manufacturer: syz
[   70.843792][   T26] usb 3-1: SerialNumber: syz
[   70.849017][   T26] usb 3-1: config 0 descriptor??
[   70.870659][ T1008] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   70.877814][ T1008] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   70.885526][   T30] audit: type=1400 audit(1790075010.198:392): avc:  denied  { watch } for  pid=1045 comm="syz.5.203" path="/10/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   70.956143][ T1053] loop1: detected capacity change from 0 to 1024
[   70.985841][ T1053] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   71.007677][ T1053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e815c018, mo2=0003]
[   71.016100][ T1053] System zones: 0-1, 3-36
[   71.051702][ T1053] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,jqfmt=vfsv1,debug,max_dir_size_kb=0x0000000000000000,bsddf,nogrpid,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   71.186359][   T30] audit: type=1400 audit(1790075010.498:393): avc:  denied  { create } for  pid=1007 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   71.245371][ T1060] loop5: detected capacity change from 0 to 256
[   71.293523][ T1060] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   71.368259][ T1008] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   71.376083][ T1008] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   71.396087][ T1008] F2FS-fs (loop2): invalid crc value
[   71.413841][ T1008] F2FS-fs (loop2): Found nat_bits in checkpoint
[   71.418152][ T1071] FAULT_INJECTION: forcing a failure.
[   71.418152][ T1071] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   71.438169][ T1071] CPU: 0 PID: 1071 Comm: syz.5.209 Tainted: G        W         syzkaller #0
[   71.446868][ T1071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   71.453368][ T1008] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   71.456919][ T1071] Call Trace:
[   71.456926][ T1071]  <TASK>
[   71.464005][ T1008] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   71.467181][ T1071]  __dump_stack+0x21/0x30
[   71.481826][ T1071]  dump_stack_lvl+0x110/0x170
[   71.486498][ T1071]  ? show_regs_print_info+0x20/0x20
[   71.491685][ T1071]  ? stack_trace_save+0xa6/0xf0
[   71.496536][ T1071]  ? __stack_depot_save+0x34/0x480
[   71.501641][ T1071]  ? path_openat+0x284f/0x2f80
[   71.506392][ T1071]  dump_stack+0x15/0x20
[   71.510538][ T1071]  should_fail+0x3ab/0x500
[   71.514940][ T1071]  should_fail_usercopy+0x1a/0x20
[   71.519944][ T1071]  _copy_from_user+0x20/0xd0
[   71.524514][ T1071]  __copy_msghdr_from_user+0xc9/0x630
[   71.529865][ T1071]  ? _kstrtoull+0x3bb/0x4c0
[   71.534346][ T1071]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[   71.539607][ T1071]  ? kstrtouint_from_user+0x1c4/0x220
[   71.544957][ T1071]  ___sys_sendmsg+0x19a/0x2e0
[   71.549612][ T1071]  ? __sys_sendmsg+0x280/0x280
[   71.554356][ T1071]  ? __fdget+0x1a1/0x230
[   71.558578][ T1071]  __x64_sys_sendmsg+0x201/0x2d0
[   71.563492][ T1071]  ? ___sys_sendmsg+0x2e0/0x2e0
[   71.568319][ T1071]  ? ksys_write+0x1fa/0x260
[   71.572800][ T1071]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   71.578847][ T1071]  x64_sys_call+0x4b/0x9a0
[   71.583239][ T1071]  do_syscall_64+0x4c/0xa0
[   71.587634][ T1071]  ? clear_bhb_loop+0x50/0xa0
[   71.592291][ T1071]  ? clear_bhb_loop+0x50/0xa0
[   71.596947][ T1071]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   71.602817][ T1071] RIP: 0033:0x7f03a447b159
[   71.607215][ T1071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.626796][ T1071] RSP: 002b:00007f03a2ed4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.635192][ T1071] RAX: ffffffffffffffda RBX: 00007f03a4702fa0 RCX: 00007f03a447b159
[   71.643146][ T1071] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003
[   71.651097][ T1071] RBP: 00007f03a2ed4090 R08: 0000000000000000 R09: 0000000000000000
[   71.659048][ T1071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.666998][ T1071] R13: 00007f03a4703038 R14: 00007f03a4702fa0 R15: 00007fff7867efc8
[   71.674951][ T1071]  </TASK>
[   71.820387][  T348] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   71.921869][ T1081] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12
[   71.929633][ T1081] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   71.938010][ T1081] F2FS-fs (loop5): old and new quota format mixing
[   72.060379][  T348] usb 1-1: Using ep0 maxpacket: 16
[   72.180424][  T348] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[   72.188698][  T348] usb 1-1: config 0 has no interface number 0
[   72.195061][  T348] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   72.205329][  T348] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   72.297396][ T1085] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   72.314751][   T26] usb 3-1: USB disconnect, device number 2
[   72.380430][  T348] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   72.410805][  T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.411464][ T1089] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none.
[   72.418842][  T348] usb 1-1: Product: syz
[   72.418865][  T348] usb 1-1: Manufacturer: syz
[   72.442066][  T348] usb 1-1: SerialNumber: syz
[   72.455677][  T348] usb 1-1: config 0 descriptor??
[   72.465401][ T1089] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.470717][ T1097] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   72.480451][ T1073] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   72.493885][ T1073] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   73.030065][ T1073] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   73.038539][ T1073] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   73.280672][  T348] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   73.403244][ T1103] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   73.504511][  T278] Bluetooth: hci1: command 0x1009 tx timeout
[   73.511176][    T8] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 6)
[   73.530269][    T8] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[   73.531943][ T1111] x_tables: duplicate underflow at hook 2
[   73.548369][    T8] EXT4-fs (loop1): This should not happen!! Data will be lost
[   73.548369][    T8] 
[   73.564927][   T10] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8)
[   73.580766][   T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   73.593089][   T10] EXT4-fs (loop1): This should not happen!! Data will be lost
[   73.593089][   T10] 
[   73.645591][ T1113] erofs: (device loop2): EXPERIMENTAL big pcluster feature in use. Use at your own risk!
[   73.657836][ T1113] erofs: (device loop2): z_erofs_load_lzma_config: lzma algorithm isn't enabled
[   73.789611][ T1122] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   73.902491][ T1127] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   73.916411][ T1127] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 2: comm syz.2.230: lblock 2 mapped to illegal pblock 2 (length 1)
[   73.930538][ T1127] EXT4-fs (loop2): Remounting filesystem read-only
[   73.937042][ T1127] __quota_error: 7 callbacks suppressed
[   73.937053][ T1127] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   73.950856][ T1127] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.230: Invalid inode table block 1 in block_group 0
[   73.963592][ T1127] EXT4-fs (loop2): Remounting filesystem read-only
[   73.970111][ T1127] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   73.979905][ T1127] EXT4-fs (loop2): Remounting filesystem read-only
[   73.986445][ T1127] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.230: mark_inode_dirty error
[   73.997701][ T1127] EXT4-fs (loop2): Remounting filesystem read-only
[   74.004295][ T1127] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   74.013124][ T1127] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.230: Failed to acquire dquot type 0
[   74.024400][ T1127] EXT4-fs (loop2): Remounting filesystem read-only
[   74.030959][ T1127] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   74.040734][ T1127] EXT4-fs (loop2): Remounting filesystem read-only
[   74.047259][ T1127] EXT4-fs error (device loop2): ext4_evict_inode:285: inode #11: comm syz.2.230: mark_inode_dirty error
[   74.058545][ T1127] EXT4-fs (loop2): Remounting filesystem read-only
[   74.065104][ T1127] EXT4-fs warning (device loop2): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[   74.075377][ T1127] EXT4-fs (loop2): 1 orphan inode deleted
[   74.081134][ T1127] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,noblock_validity,errors=remount-ro,max_batch_time=0x00000000000008c9,inlinecrypt,dioread_nolock,. Quota mode: none.
[   74.105244][   T43] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   74.119644][   T43] EXT4-fs (loop2): Remounting filesystem read-only
[   74.126472][   T43] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   74.135067][   T43] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0
[   74.146617][   T43] EXT4-fs (loop2): Remounting filesystem read-only
[   74.153829][  T287] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[   74.166925][  T287] EXT4-fs (loop2): Remounting filesystem read-only
[   74.173466][  T287] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   74.182986][  T287] EXT4-fs (loop2): Remounting filesystem read-only
[   74.189488][  T287] EXT4-fs error (device loop2): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[   74.201137][  T287] EXT4-fs (loop2): Remounting filesystem read-only
[   74.262493][ T1130] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[   74.276256][   T30] audit: type=1400 audit(1790075013.598:401): avc:  denied  { write } for  pid=1129 comm="syz.2.231" path="/59/file0/bus" dev="loop2" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   74.307508][   T30] audit: type=1400 audit(1790075013.618:402): avc:  denied  { mounton } for  pid=1129 comm="syz.2.231" path="/59/file0/bus" dev="loop2" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   74.338505][   T30] audit: type=1400 audit(1790075013.648:403): avc:  denied  { append } for  pid=1129 comm="syz.2.231" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.362252][   T30] audit: type=1400 audit(1790075013.648:404): avc:  denied  { map } for  pid=1129 comm="syz.2.231" path="/dev/loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   74.399587][  T287] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   74.410527][  T287] exFAT-fs (loop2): Filesystem has been set read-only
[   74.417359][  T287] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   74.472653][   T30] audit: type=1326 audit(1790075013.788:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1116 comm="syz.5.227" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a447b159 code=0x7fc00000
[   74.499274][   T30] audit: type=1326 audit(1790075013.788:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1116 comm="syz.5.227" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f03a447b159 code=0x7fc00000
[   74.514421][ T1132] netlink: 'syz.5.233': attribute type 12 has an invalid length.
[   74.525381][   T30] audit: type=1326 audit(1790075013.788:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1116 comm="syz.5.227" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a447b159 code=0x7fc00000
[   74.534527][ T1134] netlink: 'syz.5.233': attribute type 12 has an invalid length.
[   74.825827][ T1150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   74.860561][  T348] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   74.871056][  T348] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[   74.884016][  T348] asix: probe of 1-1:0.34 failed with error -71
[   74.932489][  T348] usb 1-1: USB disconnect, device number 9
[   75.144992][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.182358][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.226003][ T1148] device bridge_slave_0 entered promiscuous mode
[   75.276232][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.312941][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.357082][ T1148] device bridge_slave_1 entered promiscuous mode
[   75.666399][ T1154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.238'.
[   75.711225][ T1154] x_tables: duplicate underflow at hook 2
[   75.720967][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.733447][ T1156] set_capacity_and_notify: 11 callbacks suppressed
[   75.733463][ T1156] loop0: detected capacity change from 0 to 1024
[   75.734349][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.744076][ T1158] loop5: detected capacity change from 0 to 256
[   75.748584][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.768290][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.776705][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.782455][ T1158] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   75.783772][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.803148][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.811736][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.819922][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.826974][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.834367][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.871152][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.892385][ T1156] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,minixdf,noblock_validity,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000001,grpjquota=,,errors=continue. Quota mode: writeback.
[   75.892580][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.981330][  T320] device bridge_slave_1 left promiscuous mode
[   75.987497][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.995659][  T320] device bridge_slave_0 left promiscuous mode
[   76.001842][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.009988][  T320] device veth1_macvtap left promiscuous mode
[   76.017407][  T320] device veth0_vlan left promiscuous mode
[   76.192633][ T1176] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   77.173179][ T1180] loop4: detected capacity change from 0 to 256
[   77.240364][   T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   77.253218][ T1180] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   77.264254][ T1178] loop1: detected capacity change from 0 to 2048
[   77.319798][ T1148] device veth0_vlan entered promiscuous mode
[   77.372136][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.381020][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.389167][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.402016][ T1186] loop5: detected capacity change from 0 to 512
[   77.410282][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.435920][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.443134][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.461325][ T1186] loop5: detected capacity change from 0 to 512
[   77.496390][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.507428][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.526985][ T1148] device veth1_macvtap entered promiscuous mode
[   77.537036][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.546309][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.554643][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.554712][ T1201] loop5: detected capacity change from 0 to 256
[   77.573770][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.582413][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.594706][ T1201] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   77.662609][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.674146][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.684011][   T26] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   77.693070][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.698224][ T1205] loop5: detected capacity change from 0 to 256
[   77.701634][   T26] usb 1-1: config 0 descriptor??
[   77.713230][ T1205] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   77.723898][ T1205] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[   77.735377][ T1205] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   77.747872][  T348] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   77.787399][ T1207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.236'.
[   79.170272][ T1211] loop0: detected capacity change from 0 to 256
[   80.146105][  T348] usb 2-1: Using ep0 maxpacket: 16
[   80.171166][ T1213] xt_hashlimit: size too large, truncated to 1048576
[   80.315049][   T26] usbhid 1-1:0.0: can't add hid device: -71
[   80.338012][ T1211] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   80.339961][   T26] usbhid: probe of 1-1:0.0 failed with error -71
[   80.488679][ T1225] ip_tables: iptables: counters copy to user failed while replacing table
[   80.576384][  T348] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[   80.584831][  T348] usb 2-1: config 0 has no interface number 0
[   80.591266][  T348] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   80.676973][   T26] usb 1-1: USB disconnect, device number 10
[   80.695160][ T1231] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   80.725745][ T1232] loop5: detected capacity change from 0 to 256
[   80.735640][  T348] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   80.940885][  T348] usb 2-1: string descriptor 0 read error: -71
[   80.946234][ T1217] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   80.955588][  T348] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   80.984828][  T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.020563][ T1217] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   81.032565][  T348] usb 2-1: config 0 descriptor??
[   81.050478][  T348] usb 2-1: can't set config #0, error -71
[   81.082842][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   81.082879][   T30] audit: type=1400 audit(1790075020.398:412): avc:  denied  { ioctl } for  pid=1234 comm="syz.5.259" path="socket:[20130]" dev="sockfs" ino=20130 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   81.114978][ T1235] netlink: 68 bytes leftover after parsing attributes in process `syz.5.259'.
[   81.120471][  T348] usb 2-1: USB disconnect, device number 2
[   81.160784][ T1235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.259'.
[   81.403750][ T1238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.260'.
[   81.443071][ T1238] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.450287][ T1238] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.459833][ T1239] loop5: detected capacity change from 0 to 512
[   81.508180][ T1239] EXT4-fs (loop5): Ignoring removed oldalloc option
[   81.562006][ T1242] loop4: detected capacity change from 0 to 256
[   81.621504][ T1242] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   81.640715][ T1239] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback.
[   81.690465][ T1239] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.784839][ T1248] loop0: detected capacity change from 0 to 1024
[   81.843739][ T1248] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,minixdf,noblock_validity,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000001,grpjquota=,,errors=continue. Quota mode: writeback.
[   81.878538][ T1248] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback.
[   81.952080][ T1256] loop5: detected capacity change from 0 to 1024
[   81.983689][ T1256] EXT4-fs (loop5): Ignoring removed oldalloc option
[   81.990350][ T1256] EXT4-fs (loop5): Ignoring removed oldalloc option
[   81.996945][ T1256] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   82.048976][ T1256] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[   82.080455][  T348] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   82.380528][   T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   82.433240][ T1265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.266'.
[   82.520803][  T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.532773][  T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.544062][  T348] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   82.554274][  T348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.567895][  T348] usb 5-1: config 0 descriptor??
[   82.650439][   T26] usb 1-1: Using ep0 maxpacket: 16
[   82.680438][  T305] Bluetooth: hci0: command 0x1003 tx timeout
[   82.769758][   T47] Bluetooth: hci0: sending frame failed (-49)
[   82.832152][   T26] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[   82.840791][   T26] usb 1-1: config 0 has no interface number 0
[   82.847052][   T26] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   82.858509][   T26] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   83.033416][   T30] audit: type=1400 audit(1790075022.348:413): avc:  denied  { read write } for  pid=1250 comm="syz.4.262" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   83.056723][   T30] audit: type=1400 audit(1790075022.348:414): avc:  denied  { open } for  pid=1250 comm="syz.4.262" path="/47/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   83.064474][   T26] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   83.083712][   T30] audit: type=1400 audit(1790075022.348:415): avc:  denied  { ioctl } for  pid=1250 comm="syz.4.262" path="/47/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   83.121605][ T1267] loop5: detected capacity change from 0 to 256
[   83.148202][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.156477][   T26] usb 1-1: Product: syz
[   83.161296][   T26] usb 1-1: Manufacturer: syz
[   83.165896][   T26] usb 1-1: SerialNumber: syz
[   83.171089][   T26] usb 1-1: config 0 descriptor??
[   83.171291][ T1251] xt_hashlimit: size too large, truncated to 1048576
[   83.190562][ T1261] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   83.200547][ T1261] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   83.201309][ T1267] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   83.274684][   T30] audit: type=1400 audit(1790075022.588:416): avc:  denied  { create } for  pid=1266 comm="syz.5.267" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   83.419426][ T1261] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   83.426548][ T1261] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   83.450425][  T348] usbhid 5-1:0.0: can't add hid device: -71
[   83.456655][  T348] usbhid: probe of 5-1:0.0 failed with error -71
[   83.469353][  T348] usb 5-1: USB disconnect, device number 6
[   83.660411][   T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   83.811837][ T1280] loop6: detected capacity change from 0 to 256
[   83.852835][ T1280] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   83.897504][ T1282] loop6: detected capacity change from 0 to 256
[   83.936670][   T30] audit: type=1400 audit(1790075023.248:417): avc:  denied  { mount } for  pid=1281 comm="syz.6.273" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   84.270374][  T369] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   84.515997][  T369] usb 7-1: Using ep0 maxpacket: 8
[   84.665505][ T1297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.278'.
[   84.840372][  T376] Bluetooth: hci0: command 0x1001 tx timeout
[   84.865546][   T47] Bluetooth: hci0: sending frame failed (-49)
[   85.200473][   T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   85.211061][   T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[   85.223840][   T26] asix: probe of 1-1:0.34 failed with error -71
[   85.236842][   T26] usb 1-1: USB disconnect, device number 11
[   85.311251][  T369] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[   85.319535][  T369] usb 7-1: config 179 has no interface number 0
[   85.325844][  T369] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   85.336896][  T369] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   85.348231][  T369] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   85.359380][  T369] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   85.370810][  T369] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   85.384358][  T369] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   85.393428][  T369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.420448][ T1286] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   85.430372][ T1304] netlink: 'syz.5.280': attribute type 3 has an invalid length.
[   85.448611][ T1306] loop5: detected capacity change from 0 to 1024
[   85.456495][ T1306] EXT4-fs (loop5): error: journal path ./file0 is not a block device
[   85.550710][ T1314] loop5: detected capacity change from 0 to 256
[   85.592870][ T1314] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   85.832742][ T1320] loop0: detected capacity change from 0 to 512
[   85.854753][   T26] usb 7-1: USB disconnect, device number 2
[   85.870362][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   85.934770][ T1320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.946346][ T1320] EXT4-fs (loop0): 1 truncate cleaned up
[   85.952119][ T1320] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   85.971112][   T30] audit: type=1400 audit(1790075025.288:418): avc:  denied  { create } for  pid=1319 comm="syz.0.283" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   86.210380][  T369] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   86.388452][ T1335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.289'.
[   86.413495][   T30] audit: type=1400 audit(1790075025.728:419): avc:  denied  { read } for  pid=1336 comm="syz.0.290" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   86.436489][   T30] audit: type=1400 audit(1790075025.728:420): avc:  denied  { open } for  pid=1336 comm="syz.0.290" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   86.460126][   T30] audit: type=1400 audit(1790075025.728:421): avc:  denied  { ioctl } for  pid=1336 comm="syz.0.290" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   86.512753][ T1345] loop0: detected capacity change from 0 to 256
[   86.600168][ T1346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.291'.
[   86.692634][ T1345] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   86.920747][   T26] Bluetooth: hci0: command 0x1009 tx timeout
[   87.216372][ T1351] loop0: detected capacity change from 0 to 512
[   87.336879][ T1351] EXT4-fs (loop0): Ignoring removed bh option
[   87.408612][ T1348] loop5: detected capacity change from 0 to 32768
[   87.443699][ T1348]  loop5: p1 p3 < p5 >
[   87.444511][ T1355] loop6: detected capacity change from 0 to 512
[   87.460416][  T369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.462412][ T1355] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   87.476514][  T369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.496038][  T369] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   87.496339][ T1355] EXT4-fs (loop6): 1 truncate cleaned up
[   87.505332][  T369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.511414][ T1355] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   87.519938][  T369] usb 5-1: config 0 descriptor??
[   87.554309][  T308] udevd[308]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   87.566159][  T385] udevd[385]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   87.579720][  T349] udevd[349]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[   87.645800][   T30] audit: type=1400 audit(1790075026.938:422): avc:  denied  { watch watch_reads } for  pid=1360 comm="syz.6.299" path="/14" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   87.678164][ T1363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.298'.
[   87.916670][ T1367] loop5: detected capacity change from 0 to 40427
[   88.046155][ T1324] xt_hashlimit: size too large, truncated to 1048576
[   88.543024][   T30] audit: type=1400 audit(1790075027.858:423): avc:  denied  { write } for  pid=1374 comm="syz.0.302" path="socket:[20554]" dev="sockfs" ino=20554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   88.568566][   T30] audit: type=1400 audit(1790075027.888:424): avc:  denied  { ioctl } for  pid=1374 comm="syz.0.302" path="socket:[20558]" dev="sockfs" ino=20558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   88.622603][   T30] audit: type=1400 audit(1790075027.938:425): avc:  denied  { remount } for  pid=1380 comm="syz.6.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   88.675595][   T30] audit: type=1400 audit(1790075027.958:426): avc:  denied  { sys_admin } for  pid=1380 comm="syz.6.304" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   88.717546][ T1385] loop5: detected capacity change from 0 to 256
[   88.720201][ T1387] loop6: detected capacity change from 0 to 256
[   88.758076][   T30] audit: type=1400 audit(1790075027.968:427): avc:  denied  { write } for  pid=1380 comm="syz.6.304" name="usb_gadget" dev="configfs" ino=13201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   88.813026][ T1387] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   88.820119][   T30] audit: type=1400 audit(1790075027.968:428): avc:  denied  { add_name } for  pid=1380 comm="syz.6.304" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   88.853273][  T369] usbhid 5-1:0.0: can't add hid device: -71
[   88.859246][  T369] usbhid: probe of 5-1:0.0 failed with error -71
[   88.908816][  T369] usb 5-1: USB disconnect, device number 7
[   89.055464][ T1394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.307'.
[   89.095201][ T1395] loop6: detected capacity change from 0 to 128
[   89.217991][ T1395] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   89.384038][ T1395] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   89.928241][ T1397] loop4: detected capacity change from 0 to 512
[   89.981294][ T1397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   90.074480][ T1404] loop5: detected capacity change from 0 to 512
[   90.130784][ T1404] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[   90.143172][ T1404] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   90.208395][ T1397] EXT4-fs (loop4): 1 truncate cleaned up
[   90.224287][ T1397] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   90.279698][ T1404] EXT4-fs (loop5): 1 truncate cleaned up
[   90.302129][ T1404] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   90.405922][ T1404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.311'.
[   90.522691][ T1401] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   90.531322][ T1401] FAT-fs (loop6): Filesystem has been set read-only
[   90.581832][  T944] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   90.600634][  T944] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[   90.617773][  T944] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[   90.806823][ T1426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   90.832313][ T1426] EXT4-fs (loop0): 1 truncate cleaned up
[   90.842500][ T1426] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   90.854687][ T1440] FAULT_INJECTION: forcing a failure.
[   90.854687][ T1440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.879017][ T1440] CPU: 0 PID: 1440 Comm: syz.5.322 Tainted: G        W         syzkaller #0
[   90.887738][ T1440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.897796][ T1440] Call Trace:
[   90.901080][ T1440]  <TASK>
[   90.904007][ T1440]  __dump_stack+0x21/0x30
[   90.908334][ T1440]  dump_stack_lvl+0x110/0x170
[   90.913004][ T1440]  ? show_regs_print_info+0x20/0x20
[   90.918199][ T1440]  dump_stack+0x15/0x20
[   90.922349][ T1440]  should_fail+0x3ab/0x500
[   90.926765][ T1440]  should_fail_usercopy+0x1a/0x20
[   90.931792][ T1440]  _copy_to_user+0x20/0x90
[   90.936248][ T1440]  simple_read_from_buffer+0xe9/0x160
[   90.941626][ T1440]  proc_fail_nth_read+0x1a6/0x220
[   90.946770][ T1440]  ? proc_fault_inject_write+0x310/0x310
[   90.952414][ T1440]  ? security_file_permission+0x83/0xa0
[   90.957971][ T1440]  ? proc_fault_inject_write+0x310/0x310
[   90.963619][ T1440]  vfs_read+0x28c/0xc20
[   90.967784][ T1440]  ? kernel_read+0x1f0/0x1f0
[   90.972377][ T1440]  ? __kasan_check_write+0x14/0x20
[   90.977495][ T1440]  ? mutex_lock+0x9b/0x1c0
[   90.981913][ T1440]  ? wait_for_completion_killable_timeout+0x10/0x10
[   90.988487][ T1440]  ? __fget_files+0x2e1/0x340
[   90.993236][ T1440]  ? __fdget_pos+0x2d2/0x380
[   90.997808][ T1440]  ? ksys_read+0x70/0x260
[   91.002118][ T1440]  ksys_read+0x14a/0x260
[   91.006350][ T1440]  ? vfs_write+0xfd0/0xfd0
[   91.010755][ T1440]  ? debug_smp_processor_id+0x17/0x20
[   91.016127][ T1440]  __x64_sys_read+0x7b/0x90
[   91.020623][ T1440]  x64_sys_call+0x96d/0x9a0
[   91.025142][ T1440]  do_syscall_64+0x4c/0xa0
[   91.029541][ T1440]  ? clear_bhb_loop+0x50/0xa0
[   91.034197][ T1440]  ? clear_bhb_loop+0x50/0xa0
[   91.038857][ T1440]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.044737][ T1440] RIP: 0033:0x7f03a443b98e
[   91.049134][ T1440] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   91.068717][ T1440] RSP: 002b:00007f03a2eb2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   91.077112][ T1440] RAX: ffffffffffffffda RBX: 00007f03a2eb36c0 RCX: 00007f03a443b98e
[   91.085065][ T1440] RDX: 000000000000000f RSI: 00007f03a2eb30a0 RDI: 0000000000000005
[   91.093017][ T1440] RBP: 00007f03a2eb3090 R08: 0000000000000000 R09: 0000000000000000
[   91.100965][ T1440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.108913][ T1440] R13: 00007f03a4703128 R14: 00007f03a4703090 R15: 00007fff7867efc8
[   91.116870][ T1440]  </TASK>
[   91.236458][ T1452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.321'.
[   91.316450][ T1445] exfat: Bad value for 'gid'
[   91.536596][ T1446] set_capacity_and_notify: 4 callbacks suppressed
[   91.536730][ T1446] loop1: detected capacity change from 0 to 1024
[   91.574620][ T1445] loop5: detected capacity change from 0 to 512
[   91.662846][ T1454] loop0: detected capacity change from 0 to 1024
[   91.802853][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'.
[   91.815870][ T1445] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   91.853098][ T1445] EXT4-fs (loop5): 1 truncate cleaned up
[   91.863865][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   91.863877][   T30] audit: type=1400 audit(1790075031.178:442): avc:  denied  { nlmsg_read } for  pid=1455 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   91.892919][ T1456] loop4: detected capacity change from 0 to 128
[   91.914132][ T1445] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   91.937601][ T1454] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   91.967254][   T30] audit: type=1400 audit(1790075031.278:443): avc:  denied  { setattr } for  pid=1451 comm="syz.0.324" name="file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   91.998311][ T1464] loop6: detected capacity change from 0 to 256
[   92.054250][ T1469] loop1: detected capacity change from 0 to 512
[   92.081075][ T1469] EXT4-fs (loop1): Unrecognized mount option "." or missing value
[   92.161875][ T1474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.332'.
[   92.196004][ T1478] loop6: detected capacity change from 0 to 512
[   92.215215][ T1480] ip_tables: iptables: counters copy to user failed while replacing table
[   92.229855][ T1478] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   92.256898][ T1478] EXT4-fs (loop6): 1 truncate cleaned up
[   92.300743][ T1478] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   92.320382][  T305] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   92.339958][ T1476] loop1: detected capacity change from 0 to 40427
[   92.349727][ T1476] F2FS-fs (loop1): fault_injection options not supported
[   92.377978][ T1476] F2FS-fs (loop1): fault_type options not supported
[   92.412113][   T30] audit: type=1400 audit(1790075031.728:444): avc:  denied  { mount } for  pid=1481 comm="syz.4.336" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   92.441554][ T1476] F2FS-fs (loop1): invalid crc value
[   92.460416][ T1476] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 4
[   92.490819][ T1476] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[   92.536466][ T1493] loop6: detected capacity change from 0 to 1024
[   92.570385][  T305] usb 6-1: Using ep0 maxpacket: 32
[   92.620743][ T1493] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,dioread_lock,quota,lazytime,errors=remount-ro,nogrpid,noblock_validity,errors=remount-ro,. Quota mode: writeback.
[   92.767520][   T30] audit: type=1400 audit(1790075032.078:445): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   93.242406][ T1505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'.
[   93.560929][  T305] usb 6-1: string descriptor 0 read error: -22
[   93.596646][  T305] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[   93.722355][ T1508] loop1: detected capacity change from 0 to 256
[   93.730001][   T30] audit: type=1400 audit(1790075033.038:446): avc:  denied  { bind } for  pid=1507 comm="syz.6.339" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   93.760383][  T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.795383][   T30] audit: type=1400 audit(1790075033.068:447): avc:  denied  { name_bind } for  pid=1507 comm="syz.6.339" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[   93.821338][ T1508] exfat: Bad value for 'gid'
[   93.847507][   T30] audit: type=1400 audit(1790075033.068:448): avc:  denied  { node_bind } for  pid=1507 comm="syz.6.339" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   93.958811][ T1508] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   94.020026][ T1508] EXT4-fs (loop1): 1 truncate cleaned up
[   94.069089][ T1508] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   94.161027][ T1470] kvm [1467]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7
[   94.170181][ T1470] kvm [1467]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7
[   94.320290][  T348] Bluetooth: hci0: command 0x1003 tx timeout
[   94.402817][   T47] Bluetooth: hci0: sending frame failed (-49)
[   94.434945][ T1522] FAT-fs (loop1): Unrecognized mount option "tots" or missing value
[   94.517248][   T30] audit: type=1400 audit(1790075033.828:449): avc:  denied  { bind } for  pid=1528 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   94.569221][ T1531] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[   94.570399][   T30] audit: type=1400 audit(1790075033.848:450): avc:  denied  { name_bind } for  pid=1528 comm="syz.4.345" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   94.590474][ T1531] EXT4-fs (loop1): group descriptors corrupted!
[   94.606167][   T30] audit: type=1400 audit(1790075033.848:451): avc:  denied  { node_bind } for  pid=1528 comm="syz.4.345" saddr=172.20.20.42 src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   94.633380][ T1533] exfat: Deprecated parameter 'utf8'
[   94.638885][ T1533] exfat: Deprecated parameter 'utf8'
[   94.651592][ T1536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   94.662819][ T1533] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   94.699713][ T1536] EXT4-fs (loop4): 1 truncate cleaned up
[   94.705637][ T1536] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   94.813884][ T1553] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   94.936675][ T1554] F2FS-fs (loop4): invalid crc value
[   94.945740][ T1554] F2FS-fs (loop4): Found nat_bits in checkpoint
[   94.994432][ T1554] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   95.002912][ T1554] SELinux: (dev loop4, type f2fs) getxattr errno 2
[   95.021626][  T348] usb 6-1: USB disconnect, device number 2
[   95.954061][ T1595] syz.4.369 (1595): /proc/1594/oom_adj is deprecated, please use /proc/1594/oom_score_adj instead.
[   95.990147][ T1599] FAULT_INJECTION: forcing a failure.
[   95.990147][ T1599] name failslab, interval 1, probability 0, space 0, times 0
[   96.003889][ T1599] CPU: 0 PID: 1599 Comm: syz.4.371 Tainted: G        W         syzkaller #0
[   96.012586][ T1599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   96.022644][ T1599] Call Trace:
[   96.025921][ T1599]  <TASK>
[   96.028843][ T1599]  __dump_stack+0x21/0x30
[   96.033174][ T1599]  dump_stack_lvl+0x110/0x170
[   96.037850][ T1599]  ? show_regs_print_info+0x20/0x20
[   96.043048][ T1599]  ? ida_alloc_range+0x809/0x840
[   96.047991][ T1599]  dump_stack+0x15/0x20
[   96.052149][ T1599]  should_fail+0x3ab/0x500
[   96.056571][ T1599]  __should_failslab+0xa4/0xe0
[   96.061351][ T1599]  should_failslab+0x9/0x20
[   96.065856][ T1599]  slab_pre_alloc_hook+0x39/0xd0
[   96.070795][ T1599]  kmem_cache_alloc_trace+0x48/0x270
[   96.076083][ T1599]  ? proc_fill_super+0x77/0x760
[   96.080930][ T1599]  proc_fill_super+0x77/0x760
[   96.085609][ T1599]  get_tree_nodev+0xb3/0x160
[   96.090203][ T1599]  ? proc_reconfigure+0x3c0/0x3c0
[   96.095210][ T1599]  proc_get_tree+0x1c/0x20
[   96.099608][ T1599]  vfs_get_tree+0x89/0x260
[   96.104011][ T1599]  do_new_mount+0x251/0xb40
[   96.108500][ T1599]  ? security_capable+0x87/0xb0
[   96.113333][ T1599]  path_mount+0x640/0xff0
[   96.117645][ T1599]  __se_sys_mount+0x320/0x390
[   96.122302][ T1599]  ? __x64_sys_mount+0xd0/0xd0
[   96.127050][ T1599]  ? __kasan_check_write+0x14/0x20
[   96.132149][ T1599]  __x64_sys_mount+0xbf/0xd0
[   96.136720][ T1599]  x64_sys_call+0x6bf/0x9a0
[   96.141214][ T1599]  do_syscall_64+0x4c/0xa0
[   96.145611][ T1599]  ? clear_bhb_loop+0x50/0xa0
[   96.150268][ T1599]  ? clear_bhb_loop+0x50/0xa0
[   96.154924][ T1599]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   96.160799][ T1599] RIP: 0033:0x7fa799479159
[   96.165197][ T1599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.184787][ T1599] RSP: 002b:00007fa797ed2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   96.193193][ T1599] RAX: ffffffffffffffda RBX: 00007fa799700fa0 RCX: 00007fa799479159
[   96.201161][ T1599] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000
[   96.209128][ T1599] RBP: 00007fa79951006b R08: 0000000000000000 R09: 0000000000000000
[   96.217090][ T1599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.225044][ T1599] R13: 00007fa799701038 R14: 00007fa799700fa0 R15: 00007ffd90270e38
[   96.233007][ T1599]  </TASK>
[   96.440557][  T305] Bluetooth: hci0: command 0x1001 tx timeout
[   96.446763][   T47] Bluetooth: hci0: sending frame failed (-49)
[   96.617844][ T1618]  loop4: unable to read partition table
[   96.623758][ T1618] loop4: partition table beyond EOD, truncated
[   96.630086][ T1618] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[   96.700657][  T100]  loop4: unable to read partition table
[   96.706656][  T100] loop4: partition table beyond EOD, truncated
[   96.896263][ T1629] dyndbg: bad flag-op f, at start of fi
[   96.902027][ T1629] dyndbg: flags parse failed
[   96.924385][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   96.924400][   T30] audit: type=1326 audit(1790075036.238:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   96.955302][   T30] audit: type=1326 audit(1790075036.238:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   96.980219][   T30] audit: type=1326 audit(1790075036.238:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   97.005128][   T30] audit: type=1326 audit(1790075036.238:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   97.029974][   T30] audit: type=1326 audit(1790075036.238:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   97.054791][   T30] audit: type=1326 audit(1790075036.238:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   97.079546][   T30] audit: type=1326 audit(1790075036.238:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   97.104327][   T30] audit: type=1326 audit(1790075036.238:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   97.129067][   T30] audit: type=1326 audit(1790075036.238:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   97.153885][   T30] audit: type=1326 audit(1790075036.238:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.6.383" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad3be0159 code=0x7ff00000
[   97.168862][ T1635] set_capacity_and_notify: 8 callbacks suppressed
[   97.168877][ T1635] loop1: detected capacity change from 0 to 512
[   97.196321][ T1635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[   97.206161][ T1635] System zones: 1-12
[   97.213800][ T1635] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.384: invalid indirect mapped block 1819239214 (level 1)
[   97.236234][ T1635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.384: bg 0: block 361: padding at end of block bitmap is not set
[   97.251167][ T1635] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   97.260051][ T1635] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.384: attempt to clear invalid blocks 33619980 len 1
[   97.281489][ T1635] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.384: invalid indirect mapped block 1819239214 (level 0)
[   97.295912][ T1635] EXT4-fs (loop1): 1 truncate cleaned up
[   97.301631][ T1635] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none.
[   97.469434][ T1647] loop1: detected capacity change from 0 to 128
[   97.478993][ T1647] FAT-fs (loop1): Unrecognized mount option "x���MOA��_KyZEQ0Ɖ\����l$�&�Ƈ�d��6--�6�#ܼ�:�Go&�7��W����k�]��BH��Z���N3����?�̡����J��ZE��d�(%�iG�(��5���jC7��_����N.��[0f>�x3k��������>7�|�د������o[�[�?_�\SrM��0�Y���R�1�%�ls��خcJUש��+��զ���#C�u" or missing value
[   98.407967][ T1671] loop4: detected capacity change from 0 to 1024
[   98.441027][ T1671] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   98.448575][ T1671] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   98.471573][ T1671] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none.
[   98.492107][ T1671] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.508285][ T1671] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: comm syz.4.396: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.521507][  T348] Bluetooth: hci0: command 0x1009 tx timeout
[   98.521719][ T1671] EXT4-fs (loop4): Remounting filesystem read-only
[   98.596943][ T1678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'.
[   98.731747][ T1687] Illegal XDP return value 4294967294, expect packet loss!
[   99.550375][   T20] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   99.632860][   T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   99.641145][   T26] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   99.790395][   T20] usb 7-1: Using ep0 maxpacket: 32
[   99.910421][   T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   99.940451][  T369] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  100.070465][   T20] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  100.079526][   T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.087536][   T20] usb 7-1: Product: syz
[  100.091708][   T20] usb 7-1: Manufacturer: syz
[  100.096301][   T20] usb 7-1: SerialNumber: syz
[  100.101457][   T20] usb 7-1: config 0 descriptor??
[  100.140643][   T20] hub 7-1:0.0: bad descriptor, ignoring hub
[  100.146584][   T20] hub: probe of 7-1:0.0 failed with error -5
[  100.300423][  T369] usb 5-1: config 0 has no interfaces?
[  100.305930][  T369] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  100.315155][  T369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.323980][  T369] usb 5-1: config 0 descriptor??
[  100.460494][   T20] usb 7-1: USB disconnect, device number 3
[  100.638549][ T1718] loop5: detected capacity change from 0 to 256
[  100.661462][ T1718] exfat: Deprecated parameter 'namecase'
[  100.742569][ T1718] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  100.996997][ T1725] MTRR 1 not used
[  101.654488][ T1736] loop5: detected capacity change from 0 to 2048
[  101.691875][ T1736] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  101.705476][ T1736] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  101.721065][ T1736] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28
[  101.733694][ T1736] EXT4-fs (loop5): This should not happen!! Data will be lost
[  101.733694][ T1736] 
[  101.743390][ T1736] EXT4-fs (loop5): Total free blocks count 0
[  101.749393][ T1736] EXT4-fs (loop5): Free/Dirty block details
[  101.755614][ T1736] EXT4-fs (loop5): free_blocks=2415919504
[  101.756429][ T1740] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  101.761424][ T1736] EXT4-fs (loop5): dirty_blocks=48
[  101.778795][ T1736] EXT4-fs (loop5): Block reservation details
[  101.784840][ T1736] EXT4-fs (loop5): i_reserved_data_blocks=3
[  101.790845][ T1740] EXT4-fs (loop5): This should not happen!! Data will be lost
[  101.790845][ T1740] 
[  101.868303][ T1741] ==================================================================
[  101.876419][ T1741] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0
[  101.884038][ T1741] Write of size 8 at addr ffff888128a16190 by task syz.5.420/1741
[  101.891818][ T1741] 
[  101.894122][ T1741] CPU: 1 PID: 1741 Comm: syz.5.420 Tainted: G        W         syzkaller #0
[  101.902766][ T1741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  101.912795][ T1741] Call Trace:
[  101.916055][ T1741]  <TASK>
[  101.918965][ T1741]  __dump_stack+0x21/0x30
[  101.923273][ T1741]  dump_stack_lvl+0x110/0x170
[  101.927925][ T1741]  ? show_regs_print_info+0x20/0x20
[  101.933095][ T1741]  ? load_image+0x3f0/0x3f0
[  101.937575][ T1741]  print_address_description+0x7f/0x2c0
[  101.943096][ T1741]  ? rcu_segcblist_enqueue+0x9c/0xb0
[  101.948358][ T1741]  kasan_report+0x10f/0x150
[  101.952851][ T1741]  ? rcu_segcblist_enqueue+0x9c/0xb0
[  101.958115][ T1741]  __asan_report_store8_noabort+0x17/0x20
[  101.963827][ T1741]  rcu_segcblist_enqueue+0x9c/0xb0
[  101.968915][ T1741]  call_rcu+0x549/0xf60
[  101.973043][ T1741]  ? rcu_gp_kthread_wake+0x90/0x90
[  101.978127][ T1741]  ? __kasan_check_write+0x14/0x20
[  101.983215][ T1741]  ? selinux_inode_free_security+0x21f/0x230
[  101.989170][ T1741]  ? __wake_up_bit+0x120/0x120
[  101.993910][ T1741]  security_inode_free+0xb4/0xd0
[  101.998824][ T1741]  __destroy_inode+0x175/0x4f0
[  102.003563][ T1741]  evict+0x769/0x8b0
[  102.007433][ T1741]  ? irqentry_exit+0x37/0x40
[  102.012009][ T1741]  ? sysvec_reschedule_ipi+0x78/0x80
[  102.017273][ T1741]  ? proc_nr_inodes+0x310/0x310
[  102.022110][ T1741]  ? _raw_spin_lock+0x94/0xf0
[  102.026772][ T1741]  ? _raw_spin_trylock_bh+0x150/0x150
[  102.032123][ T1741]  ? call_rcu+0xb94/0xf60
[  102.036437][ T1741]  ? __kasan_check_write+0x14/0x20
[  102.041557][ T1741]  iput+0x651/0x7e0
[  102.045357][ T1741]  dentry_unlink_inode+0x338/0x3e0
[  102.050445][ T1741]  __dentry_kill+0x45b/0x660
[  102.055014][ T1741]  dentry_kill+0xc0/0x2a0
[  102.059321][ T1741]  dput+0x47/0x90
[  102.062931][ T1741]  __fput+0x5c7/0x900
[  102.066895][ T1741]  ____fput+0x15/0x20
[  102.070851][ T1741]  task_work_run+0x127/0x190
[  102.075421][ T1741]  exit_to_user_mode_loop+0xd0/0xe0
[  102.080599][ T1741]  exit_to_user_mode_prepare+0x87/0xd0
[  102.086055][ T1741]  syscall_exit_to_user_mode+0x1a/0x30
[  102.091496][ T1741]  do_syscall_64+0x58/0xa0
[  102.095887][ T1741]  ? clear_bhb_loop+0x50/0xa0
[  102.100543][ T1741]  ? clear_bhb_loop+0x50/0xa0
[  102.105197][ T1741]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  102.111067][ T1741] RIP: 0033:0x7f03a447b159
[  102.115458][ T1741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.135046][ T1741] RSP: 002b:00007fff7867f128 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  102.143444][ T1741] RAX: 0000000000000000 RBX: 00007fff7867f210 RCX: 00007f03a447b159
[  102.151420][ T1741] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  102.159371][ T1741] RBP: 0000000000018dd6 R08: 0000000000000001 R09: 0000000000000000
[  102.167323][ T1741] R10: 0000001b2ef20000 R11: 0000000000000246 R12: 00007fff7867f250
[  102.175272][ T1741] R13: 00007f03a4702fac R14: 0000000000018e09 R15: 00007f03a4702fa0
[  102.183224][ T1741]  </TASK>
[  102.186238][ T1741] 
[  102.188536][ T1741] Allocated by task 1742:
[  102.192836][ T1741]  __kasan_kmalloc+0xd4/0x100
[  102.197491][ T1741]  __kmalloc+0x13d/0x2c0
[  102.201708][ T1741]  l2tp_session_create+0x39/0xb60
[  102.206709][ T1741]  pppol2tp_connect+0xbf5/0x1640
[  102.211625][ T1741]  __sys_connect+0x3cb/0x450
[  102.216192][ T1741]  __x64_sys_connect+0x7a/0x90
[  102.220945][ T1741]  x64_sys_call+0x7c/0x9a0
[  102.225337][ T1741]  do_syscall_64+0x4c/0xa0
[  102.229725][ T1741]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  102.235591][ T1741] 
[  102.237894][ T1741] Freed by task 1164:
[  102.241842][ T1741]  kasan_set_track+0x4a/0x70
[  102.246406][ T1741]  kasan_set_free_info+0x23/0x40
[  102.251319][ T1741]  ____kasan_slab_free+0x125/0x160
[  102.256407][ T1741]  __kasan_slab_free+0x11/0x20
[  102.261163][ T1741]  slab_free_freelist_hook+0xc2/0x190
[  102.266508][ T1741]  kfree+0xc4/0x270
[  102.270363][ T1741]  l2tp_session_put+0xaf/0x1a0
[  102.275132][ T1741]  l2tp_session_delete+0x3a9/0x4a0
[  102.280233][ T1741]  l2tp_tunnel_del_work+0x180/0x3d0
[  102.285408][ T1741]  process_one_work+0x6c8/0xbb0
[  102.290237][ T1741]  worker_thread+0xaa0/0x1250
[  102.294890][ T1741]  kthread+0x3f5/0x4f0
[  102.298933][ T1741]  ret_from_fork+0x1f/0x30
[  102.303326][ T1741] 
[  102.305631][ T1741] Last potentially related work creation:
[  102.311324][ T1741]  kasan_save_stack+0x3a/0x60
[  102.315982][ T1741]  __kasan_record_aux_stack+0xd2/0x100
[  102.321419][ T1741]  kasan_record_aux_stack_noalloc+0xb/0x10
[  102.327205][ T1741]  call_rcu+0x10b/0xf60
[  102.331345][ T1741]  pppol2tp_release+0x1e3/0x2b0
[  102.336177][ T1741]  sock_close+0xb8/0x200
[  102.340405][ T1741]  __fput+0x22b/0x900
[  102.344373][ T1741]  ____fput+0x15/0x20
[  102.348335][ T1741]  task_work_run+0x127/0x190
[  102.352904][ T1741]  exit_to_user_mode_loop+0xd0/0xe0
[  102.358080][ T1741]  exit_to_user_mode_prepare+0x87/0xd0
[  102.363514][ T1741]  syscall_exit_to_user_mode+0x1a/0x30
[  102.368953][ T1741]  do_syscall_64+0x58/0xa0
[  102.373348][ T1741]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  102.379220][ T1741] 
[  102.381522][ T1741] Second to last potentially related work creation:
[  102.388080][ T1741]  kasan_save_stack+0x3a/0x60
[  102.392733][ T1741]  __kasan_record_aux_stack+0xd2/0x100
[  102.398171][ T1741]  kasan_record_aux_stack_noalloc+0xb/0x10
[  102.403953][ T1741]  call_rcu+0x10b/0xf60
[  102.408089][ T1741]  fib6_del+0xbf0/0xf00
[  102.412221][ T1741]  fib6_clean_node+0x2a1/0x540
[  102.416963][ T1741]  fib6_walk_continue+0x54b/0x740
[  102.421963][ T1741]  fib6_walk+0x153/0x290
[  102.426182][ T1741]  fib6_clean_all+0x1a1/0x270
[  102.430833][ T1741]  rt6_disable_ip+0x12a/0x840
[  102.435485][ T1741]  addrconf_ifdown+0x144/0x1910
[  102.440320][ T1741]  addrconf_notify+0x3bd/0xe00
[  102.445068][ T1741]  raw_notifier_call_chain+0x90/0x100
[  102.450418][ T1741]  dev_close_many+0x325/0x4d0
[  102.455074][ T1741]  unregister_netdevice_many+0x477/0x1a00
[  102.460771][ T1741]  ip6_tnl_exit_batch_net+0x3eb/0x440
[  102.466122][ T1741]  cleanup_net+0x605/0xae0
[  102.470518][ T1741]  process_one_work+0x6c8/0xbb0
[  102.475350][ T1741]  worker_thread+0xaa0/0x1250
[  102.480008][ T1741]  kthread+0x3f5/0x4f0
[  102.484054][ T1741]  ret_from_fork+0x1f/0x30
[  102.488448][ T1741] 
[  102.490749][ T1741] The buggy address belongs to the object at ffff888128a16000
[  102.490749][ T1741]  which belongs to the cache kmalloc-512 of size 512
[  102.504780][ T1741] The buggy address is located 400 bytes inside of
[  102.504780][ T1741]  512-byte region [ffff888128a16000, ffff888128a16200)
[  102.518030][ T1741] The buggy address belongs to the page:
[  102.523654][ T1741] page:ffffea0004a28500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128a14
[  102.533869][ T1741] head:ffffea0004a28500 order:2 compound_mapcount:0 compound_pincount:0
[  102.542170][ T1741] flags: 0x4000000000010200(slab|head|zone=1)
[  102.548228][ T1741] raw: 4000000000010200 ffffea0004a45900 0000000400000004 ffff888100042f00
[  102.556791][ T1741] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  102.565344][ T1741] page dumped because: kasan: bad access detected
[  102.571731][ T1741] page_owner tracks the page as allocated
[  102.577422][ T1741] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, ts 19661919694, free_ts 0
[  102.595541][ T1741]  post_alloc_hook+0x192/0x1b0
[  102.600463][ T1741]  prep_new_page+0x1c/0x110
[  102.604950][ T1741]  get_page_from_freelist+0x2c3a/0x2cd0
[  102.610473][ T1741]  __alloc_pages+0x1a2/0x460
[  102.615039][ T1741]  new_slab+0xa0/0x4d0
[  102.619082][ T1741]  ___slab_alloc+0x3ac/0x840
[  102.623654][ T1741]  __slab_alloc+0x49/0x90
[  102.627961][ T1741]  __kmalloc_track_caller+0x169/0x2c0
[  102.633309][ T1741]  __alloc_skb+0x210/0x730
[  102.637702][ T1741]  netlink_ack+0x35c/0xb10
[  102.642096][ T1741]  netlink_rcv_skb+0x267/0x430
[  102.646861][ T1741]  rtnetlink_rcv+0x1c/0x20
[  102.651260][ T1741]  netlink_unicast+0x86c/0xa30
[  102.656007][ T1741]  netlink_sendmsg+0x879/0xb80
[  102.660764][ T1741]  __sys_sendto+0x46d/0x620
[  102.665252][ T1741]  __x64_sys_sendto+0xe5/0x100
[  102.669998][ T1741] page_owner free stack trace missing
[  102.675352][ T1741] 
[  102.677656][ T1741] Memory state around the buggy address:
[  102.683270][ T1741]  ffff888128a16080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.691318][ T1741]  ffff888128a16100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.699364][ T1741] >ffff888128a16180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.707402][ T1741]                          ^
[  102.711971][ T1741]  ffff888128a16200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  102.720010][ T1741]  ffff888128a16280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  102.728044][ T1741] ==================================================================
[  102.736078][ T1741] Disabling lock debugging due to kernel taint
[  102.785826][   T30] kauditd_printk_skb: 93 callbacks suppressed
[  102.785839][   T30] audit: type=1400 audit(1790075042.098:559): avc:  denied  { read } for  pid=82 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  102.819129][   T30] audit: type=1400 audit(1790075042.098:560): avc:  denied  { search } for  pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.835316][  T348] usb 5-1: USB disconnect, device number 8
[  102.840548][   T30] audit: type=1400 audit(1790075042.098:561): avc:  denied  { write } for  pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.867597][   T30] audit: type=1400 audit(1790075042.098:562): avc:  denied  { add_name } for  pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  102.888382][   T30] audit: type=1400 audit(1790075042.098:563): avc:  denied  { create } for  pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  102.908854][   T30] audit: type=1400 audit(1790075042.098:564): avc:  denied  { append open } for  pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  102.931735][   T30] audit: type=1400 audit(1790075042.098:565): avc:  denied  { getattr } for  pid=82 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1