last executing test programs:

2m28.539465739s ago: executing program 32 (id=258):
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
unshare(0x400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x220, 0x6a9, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

2m26.740387573s ago: executing program 33 (id=322):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x7, 0x0)

2m20.449178366s ago: executing program 5 (id=500):
r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d0, 0x2, 0x42, 0xfc})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000})
exit(0x7)
io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)

2m19.597125097s ago: executing program 5 (id=524):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendto$inet6(r0, 0x0, 0x0, 0x90, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x18)

2m19.568019878s ago: executing program 5 (id=525):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

2m19.529325639s ago: executing program 5 (id=528):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0xb, 0x42f, &(0x7f0000000940)="$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")
truncate(&(0x7f0000000000)='./file2\x00', 0x5)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

2m19.09798146s ago: executing program 5 (id=534):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m18.66147064s ago: executing program 5 (id=548):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000)

2m18.630825891s ago: executing program 34 (id=548):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000)

1m58.253013299s ago: executing program 1 (id=1208):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='never', 0x5)

1m58.21279705s ago: executing program 1 (id=1209):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000000001)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000540)={0x2, 0x0, [{0x7, 0xca2a, 0x0, 0x45, 0x3, 0x10000, 0x5}, {0x1, 0x2, 0x0, 0x5, 0x9, 0x9, 0x81}]})

1m58.164552941s ago: executing program 1 (id=1210):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00')
read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020)

1m58.142983692s ago: executing program 1 (id=1212):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$eJzs3cFr024YwPFn7bZ2HV17GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZ2NLVSEbebeNvfMTx6UlD/gV12E6/ipQiClx3EytpkS7fKVl2Xab4fGHnzvu+TvMmblSeBps2ljYelgmMUzJpE4ioRkXXZEUnvllxD7jLSLo+K37pcHv/24dyt23euZ3O52XnVuezClYyqTpx/+/jpywvva+OLrybexGQrfbf5NfNpa2rrv+aPBW/rFRFTlyuVmrlsW7pSdEqG6k3bMh1Li2XHqtbU116wK6urDTXLK8nEatVyHDXLDS1ZDa1VtFZtqHnfLJbVMAxNJiRson1H5Dfn583sQAaDIIz1qqxWs2a0Z2N+8zQGBQAAzpbm0kY0iPz/QdHRoqPlSld+fzj/j0gf+b9IqPP//pH/h8Fu/p9w/3+7kf8DAAAAAAAAAAAAAAAAAAAAAPA32Gm1Uq1WK+Utvb+YiMRFxFsPepwYDOY/3Hxf3IuL2M/r+Xq+s+y0ZwtSFFssmR4R+d6+Hlyd8ty13Oy0tk3JO3vNjV+r56MS8+I96d7xM5149cevyYgk/PvPSEome8dnfPHerur5Ubl0sRVzVy0xJCXb96Qitqy0r+v9+Gczqldv5LR7/GPtfgAAAAAA/AsM3ZM+eP/ebjfUe23IgfZO5f7zAUkd8XzgwP31sPw/HNxxAwAAAAAQJk7jScm0basagoL3+wcnssHgT138uJ2HRcSteX06I4z00XlovTMrh5siInJkeLJ3U/TPZvmLiHTVTAY+3SdR+Pyoc673aj7+uvNiMrAPJQAAAAAD4SX9Q/Kiz8j89oCGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA6Bz35WFe/99595hvd9FgjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G34GAAD//2ulE4Q=")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x25)

1m58.014562395s ago: executing program 1 (id=1215):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
io_setup(0x6, &(0x7f0000003b80)=<r1=>0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x98, r0, 0x0, 0x0, 0x5}])

1m57.80565577s ago: executing program 1 (id=1221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0)

1m57.80547512s ago: executing program 35 (id=1221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0)

50.069255546s ago: executing program 8 (id=3447):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x1018807, &(0x7f0000000200)=ANY=[], 0x41, 0x24e, &(0x7f0000000480)="$eJzsmb9v00AUx79nO05ckOjUARYkKlEEJI0z0CUCOjGxtPyaIKKmKnEJcoxELCFascAAGwMj/0QlOrGzMTEwABISEkSCoQuL0fOdnXOSpkkQE+8zXL937/XuvXfnN7RgGOa/5cvnvU/Pl5dWzwA4jHkU1fo3ExBC6lnN/+OrB6df1pUBj3b79yNLHOcXSnmXnNkC8PaiicfJzNDNv0nMq8kqjExfgYFTSl+DQFnpWzBwVWkPAjfU+XdTDaBF/uXynQ3fK99u+WskFmmo0uDSUENffN1tgbUs+DhOsy8AaHeiZsP3vUATlrLTyrnl1LR3JBjmPIbIgmnO9ZcbBdjoHgPqWnxUxetPn2zTPK3NYla/96jCwE+VRA0CK8pnCcW0NrIkWv5HLXxP9ze182WUaba5uMmVDAclWZKi/muoD0qTV82GF7SdXoTJg8h86NpG77NA6VwYNM1i8suj03MrBfRMpgoMW1M8i/GeTiKs/tuxBpzPq3JNcdblXHlHiBd0J/8oU11MlUUq5rq77/SV452oAP9rtmIP/eajWBy485uZ8d9PaaSP3UsQzwA4mOplSuEgahp/U7FIDDsd+LAj+0f8WuCk1p8srX9Uws37lXYnOrux2Vj31r17rlsrHpK2pBFVknGg7/X6s5P0pxlt/8I+vrZh42EjDIOqHG1hw0EYBm4yd7XPZmWn9eOm+rUQlwCckBNqm3a2o+yERe0MU/kYyU9SC+a+wTMMwzAMwzAMwzAMwzAMw0xC+sfVeBQC2JL/nvkTAAD//8XoVOA=")
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10)

49.93054414s ago: executing program 8 (id=3452):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

49.861322842s ago: executing program 8 (id=3457):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

49.545737659s ago: executing program 8 (id=3470):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000409, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

49.313218065s ago: executing program 8 (id=3478):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff})
unshare(0x2040400)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xd0002009})

46.949772792s ago: executing program 8 (id=3551):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0022220000009623132742a0be5003e7e036042a0008070200000083"], 0x0}, 0x0)

46.900821824s ago: executing program 36 (id=3551):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0022220000009623132742a0be5003e7e036042a0008070200000083"], 0x0}, 0x0)

37.367702887s ago: executing program 9 (id=3825):
openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000b0000000200000006"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000240), 0x0}, 0x20)

37.330069778s ago: executing program 9 (id=3826):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f00000001c0), 0x0}, 0x20)

37.293801549s ago: executing program 9 (id=3828):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "a07c0000008c4f2d"}}}}}, 0x0)

37.22878011s ago: executing program 9 (id=3830):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@auto_da_alloc}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

36.983323296s ago: executing program 9 (id=3836):
syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x10000, &(0x7f0000000300)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@fmask}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0)

34.79373465s ago: executing program 9 (id=3875):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800)

34.750326221s ago: executing program 37 (id=3875):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800)

31.065942461s ago: executing program 7 (id=3958):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$9p_tcp(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2002029, 0x0)

31.019895172s ago: executing program 7 (id=3959):
unshare(0x40400)
socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x53, 0x10, &(0x7f0000000180), 0xfffffffffffffd00}, 0x48)

30.980346073s ago: executing program 7 (id=3960):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x6c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x9, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x9}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)

30.933190954s ago: executing program 7 (id=3961):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@i_version}, {@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x7ff}}]}, 0xfc, 0x4b8, &(0x7f0000000a40)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'security.', '/+\x00'}, 0x0, 0x0)

30.610869192s ago: executing program 7 (id=3965):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0x3, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x16, &(0x7f0000000140)={@broadcast, @remote, @void, {@llc={0x4, {@snap={0xaa, 0x1, "86", "fc7313", 0x8848}}}}}, 0x0)

30.429709556s ago: executing program 7 (id=3966):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a)
read$FUSE(r0, &(0x7f0000005000)={0x2020}, 0x2020)

30.426028897s ago: executing program 38 (id=3966):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a)
read$FUSE(r0, &(0x7f0000005000)={0x2020}, 0x2020)

2.285997924s ago: executing program 3 (id=4442):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x8, 0xffffffffffffffff)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
tkill(r0, 0x12)

2.05318821s ago: executing program 3 (id=4447):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x1000002, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='1', 0x1)
write$make_it_fail(r0, &(0x7f0000000000)='0\x00', 0x2)

2.001252721s ago: executing program 3 (id=4451):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b866b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d69c72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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")
r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8ffff)
sendfile(r0, r0, 0x0, 0x800000020)

1.694191749s ago: executing program 6 (id=4457):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x3, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x10)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)

1.66838072s ago: executing program 4 (id=4458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000001280), 0x8, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@volatile}]})
chroot(&(0x7f0000000100)='./file0\x00')
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

1.63515571s ago: executing program 6 (id=4459):
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge='])
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20)

1.615050901s ago: executing program 2 (id=4461):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x1000000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x121c, &(0x7f00000024c0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.530708813s ago: executing program 4 (id=4462):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.525590713s ago: executing program 6 (id=4463):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.477678084s ago: executing program 3 (id=4464):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)

1.476425184s ago: executing program 6 (id=4465):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
fremovexattr(r0, 0x0)

1.441192445s ago: executing program 4 (id=4466):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xf00, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)
read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020)

1.402159966s ago: executing program 6 (id=4467):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r1, r0, 0x0, 0x8010002b)

1.273622959s ago: executing program 2 (id=4468):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket(0x11, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/105, 0x69}], 0x1, 0x42, 0x3)

1.25489993s ago: executing program 2 (id=4469):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0xa10448, 0x0, 0xff, 0x0, &(0x7f00000007c0))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
getdents64(r0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4)

920.831678ms ago: executing program 2 (id=4474):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

900.083808ms ago: executing program 3 (id=4475):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0xf7, 0x12)
sendfile(r1, r1, 0x0, 0x7ff)

767.464822ms ago: executing program 0 (id=4476):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x3010080, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x121c42, 0x140)

753.337322ms ago: executing program 3 (id=4477):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291"], 0x1, 0x5516, &(0x7f00000006c0)="$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")
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=""/14, 0xe}, 0x8000}], 0x1, 0x2102, 0x0)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)

746.161012ms ago: executing program 0 (id=4478):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0x1, 0x2, 0xc, 0x9, 0xc, 0x9}]})

715.419423ms ago: executing program 2 (id=4479):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0471a, &(0x7f0000000000), 0x82, 0x4a0, &(0x7f0000000240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, 0xffffffffffffffff, 0x3, 0xffffffff, 0x486, 0x100000000fff})

568.076556ms ago: executing program 4 (id=4480):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x6)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c)

561.351247ms ago: executing program 0 (id=4481):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x20000c0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={0x2, 0x6, 0x80000, {r0}}, 0x20)

469.406489ms ago: executing program 4 (id=4482):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x40850)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040000, 0x0)

460.493629ms ago: executing program 0 (id=4483):
unshare(0x4a000200)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)

459.617159ms ago: executing program 4 (id=4484):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x23d, &(0x7f0000010a80)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x81084, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r0, 0x0, 0x1, 0x2000402)

195.888796ms ago: executing program 0 (id=4485):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
inotify_rm_watch(r0, 0x0)

66.938799ms ago: executing program 2 (id=4486):
unshare(0x60000600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0x2, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x2000, 0xba88, 0xa3c, 0x4}})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

445.56µs ago: executing program 0 (id=4487):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc178fd0b, &(0x7f0000000138)="0400000000000000000000007801000038010000010000000000000000000000000000000000000030")

0s ago: executing program 6 (id=4488):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x3, 0x100, 0x0, 0x7fffffff, 0x8aa2, 0x1185e141})

0s ago: executing program 0 (id=4489):
dup(0xffffffffffffffff)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
syz_usb_connect$midi(0x5, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000203512148240000102030109023d00010118100409040000020103000609058e0b20000fd7020525010a"], 0x0)

kernel console output (not intermixed with test programs):

mounted at /413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  110.785102][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.798821][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.813839][ T6500] device bridge_slave_0 entered promiscuous mode
[  110.827337][   T45] device bridge_slave_1 left promiscuous mode
[  110.836788][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.866302][   T45] device bridge_slave_0 left promiscuous mode
[  110.872921][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.885762][   T45] device veth1_macvtap left promiscuous mode
[  110.913902][   T45] device veth0_vlan left promiscuous mode
[  111.004757][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.017127][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.024918][ T6500] device bridge_slave_1 entered promiscuous mode
[  111.085842][ T6537] syz.3.2784[6537] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.085895][ T6537] syz.3.2784[6537] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.168333][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.186804][ T6500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.194434][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.201455][ T6500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.328191][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.348826][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.377384][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.426065][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.457689][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.464761][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.508520][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  111.559428][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.566513][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.632239][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.661719][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.696926][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  111.724385][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2812'.
[  111.742294][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  111.772993][ T6500] device veth0_vlan entered promiscuous mode
[  111.795259][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  111.818758][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  111.861062][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  111.902622][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  111.925198][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  111.979376][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  112.015048][ T6500] device veth1_macvtap entered promiscuous mode
[  112.045315][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  112.067988][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  112.103134][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  112.145593][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  112.192851][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  112.527561][ T6651] loop7: detected capacity change from 0 to 256
[  112.571535][ T6651] exfat: Deprecated parameter 'utf8'
[  112.585853][ T6651] exfat: Deprecated parameter 'namecase'
[  112.598034][ T6651] exfat: Deprecated parameter 'utf8'
[  112.610002][ T6596] loop6: detected capacity change from 0 to 131072
[  112.618091][ T6651] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  112.635277][ T6596] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[  112.669347][ T6596] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  112.695929][ T6596] F2FS-fs (loop6): invalid crc value
[  112.730757][ T6596] F2FS-fs (loop6): Found nat_bits in checkpoint
[  112.786981][ T6596] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  112.815871][ T6596] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  112.850944][  T306] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  112.919451][ T6596] F2FS-fs (loop6): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [61317896, 8] run fsck to fix.
[  112.985728][ T6675] loop7: detected capacity change from 0 to 512
[  112.993406][ T6596] F2FS-fs (loop6): Found FS corruption, run fsck to fix.
[  113.009429][ T6678] netlink: 'syz.3.2845': attribute type 2 has an invalid length.
[  113.130939][  T306] usb 9-1: Using ep0 maxpacket: 16
[  113.209801][ T6699] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2857'.
[  113.251023][  T306] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.286735][  T306] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.480969][  T306] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.500395][  T306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.518227][  T306] usb 9-1: Product: syz
[  113.526856][  T306] usb 9-1: Manufacturer: syz
[  113.536845][  T306] usb 9-1: SerialNumber: syz
[  113.821038][  T290] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  113.860997][  T306] usb 9-1: 0:2 : does not exist
[  113.878869][  T306] usb 9-1: USB disconnect, device number 9
[  114.070933][  T290] usb 8-1: Using ep0 maxpacket: 8
[  114.191003][  T290] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.219371][  T290] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  114.248961][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  114.248971][   T30] audit: type=1400 audit(2000000051.968:468): avc:  denied  { bind } for  pid=6791 comm="syz.3.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  114.280805][  T290] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.344420][  T290] usb 8-1: config 0 interface 0 has no altsetting 0
[  114.377255][  T290] usb 8-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  114.404393][ T6806] netem: change failed
[  114.409596][  T290] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.432536][  T290] usb 8-1: config 0 descriptor??
[  114.460974][ T6732] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  114.922012][  T290] input: HID 1b96:000a as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:1B96:000A.0006/input/input11
[  114.944959][ T6823] loop6: detected capacity change from 0 to 512
[  114.965200][  T290] ntrig 0003:1B96:000A.0006: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.7-1/input0
[  114.990312][ T6823] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.2913: iget: bad i_size value: 38620345925642
[  115.025655][ T6823] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.2913: couldn't read orphan inode 15 (err -117)
[  115.060265][ T6823] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  115.150976][  T290] ntrig 0003:1B96:000A.0006: Firmware version: 2.11.10.15.1 (ed15 f141)
[  115.160290][   T30] audit: type=1400 audit(2000000052.878:469): avc:  denied  { write } for  pid=6846 comm="syz.6.2921" path="socket:[38028]" dev="sockfs" ino=38028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  115.295362][ T6858] loop6: detected capacity change from 0 to 1024
[  115.337692][ T6858] EXT4-fs (loop6): Ignoring removed bh option
[  115.374543][ T6866] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2932'.
[  115.384551][  T290] usb 8-1: USB disconnect, device number 10
[  115.392893][ T6858] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none.
[  115.472279][ T6877] tipc: Started in network mode
[  115.504973][ T6877] tipc: Node identity ac14140f, cluster identity 4711
[  115.548173][ T6877] tipc: New replicast peer: 255.255.255.255
[  115.564644][ T6877] tipc: Enabled bearer <udp:syz2>, priority 10
[  115.669262][   T30] audit: type=1400 audit(2000000053.388:470): avc:  denied  { ioctl } for  pid=6899 comm="syz.6.2946" path="socket:[38188]" dev="sockfs" ino=38188 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  115.730546][ T6907] loop6: detected capacity change from 0 to 2048
[  115.810160][ T6907] EXT4-fs error (device loop6): __ext4_iget:4950: inode #2: block 127754: comm syz.6.2949: invalid block
[  115.857906][ T6907] EXT4-fs (loop6): get root inode failed
[  115.872231][ T6922] bridge0: port 3(syz_tun) entered blocking state
[  115.883820][ T6907] EXT4-fs (loop6): mount failed
[  115.892035][ T6922] bridge0: port 3(syz_tun) entered disabled state
[  115.936524][ T6922] device syz_tun entered promiscuous mode
[  115.972926][ T6922] bridge0: port 3(syz_tun) entered blocking state
[  115.979421][ T6922] bridge0: port 3(syz_tun) entered forwarding state
[  116.018296][ T6933] device veth0_to_bond entered promiscuous mode
[  116.043106][ T6933] device macsec1 entered promiscuous mode
[  116.127165][ T6941] loop6: detected capacity change from 0 to 16
[  116.145372][ T6944] loop8: detected capacity change from 0 to 512
[  116.193094][ T6941] erofs: (device loop6): mounted with root inode @ nid 36.
[  116.219072][ T6944] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  116.260511][ T6944] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.456613][ T6964] loop7: detected capacity change from 0 to 512
[  116.522248][ T6964] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  116.560481][ T6975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2979'.
[  116.569575][ T6964] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.632640][   T30] audit: type=1400 audit(2000000054.358:471): avc:  denied  { listen } for  pid=6980 comm="syz.6.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  116.693829][    T6] tipc: Node number set to 2886997007
[  116.739427][   T30] audit: type=1400 audit(2000000054.398:472): avc:  denied  { bind } for  pid=6961 comm="syz.7.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  116.771520][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2985'.
[  116.960999][  T290] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  117.334666][ T7022] loop8: detected capacity change from 0 to 40427
[  117.341247][  T290] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  117.356363][  T290] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.372363][ T7022] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64)
[  117.392596][ T7022] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  117.403397][  T290] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  117.419996][ T7022] F2FS-fs (loop8): invalid crc value
[  117.427684][  T290] usb 7-1: config 1 has no interface number 0
[  117.438532][ T7022] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  117.452202][  T290] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  117.475848][  T290] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  117.510117][ T7022] F2FS-fs (loop8): Start checkpoint disabled!
[  117.533524][ T7022] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  117.550550][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3005'.
[  117.560014][ T7022] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  117.633384][ T7022] F2FS-fs (loop8): Inconsistent error blkaddr:5633, sit bitmap:0
[  117.657454][ T7022] CPU: 0 PID: 7022 Comm: syz.8.3001 Tainted: G        W         syzkaller #0
[  117.666234][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  117.676305][ T7022] Call Trace:
[  117.679562][ T7022]  <TASK>
[  117.682479][ T7022]  __dump_stack+0x21/0x30
[  117.686786][ T7022]  dump_stack_lvl+0x110/0x170
[  117.691439][ T7022]  ? show_regs_print_info+0x20/0x20
[  117.696617][ T7022]  ? __kernel_text_address+0xa0/0x100
[  117.701970][ T7022]  dump_stack+0x15/0x20
[  117.706102][ T7022]  f2fs_is_valid_blkaddr+0xc27/0x1220
[  117.711454][ T7022]  f2fs_map_blocks+0xb83/0x3530
[  117.716283][ T7022]  ? f2fs_do_map_lock+0x80/0x80
[  117.721131][ T7022]  f2fs_mpage_readpages+0xa7d/0x1c80
[  117.726408][ T7022]  ? get_mem_cgroup_from_objcg+0x170/0x170
[  117.732193][ T7022]  ? get_page_from_freelist+0x2c3a/0x2cd0
[  117.737891][ T7022]  ? dquot_release_reservation_block+0xa0/0xa0
[  117.744020][ T7022]  ? __this_cpu_preempt_check+0x13/0x20
[  117.749574][ T7022]  ? cgroup_rstat_updated+0xf0/0x360
[  117.754841][ T7022]  f2fs_readahead+0xfc/0x240
[  117.759407][ T7022]  ? f2fs_set_data_page_dirty+0x510/0x510
[  117.765099][ T7022]  read_pages+0x186/0xad0
[  117.769420][ T7022]  ? __lru_cache_activate_page+0x210/0x210
[  117.775211][ T7022]  ? page_cache_ra_unbounded+0x960/0x960
[  117.780839][ T7022]  page_cache_ra_unbounded+0x782/0x960
[  117.786374][ T7022]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  117.792862][ T7022]  ? __stack_depot_save+0x34/0x480
[  117.797956][ T7022]  ? path_openat+0x284f/0x2f80
[  117.802816][ T7022]  ondemand_readahead+0x8b7/0xeb0
[  117.807838][ T7022]  ? do_sys_openat2+0x6df/0x7f0
[  117.812683][ T7022]  ? x64_sys_call+0x219/0x9a0
[  117.817345][ T7022]  ? page_cache_sync_ra+0x5a0/0x5a0
[  117.822521][ T7022]  page_cache_sync_ra+0x544/0x5a0
[  117.827544][ T7022]  ? force_page_cache_ra+0x460/0x460
[  117.832808][ T7022]  f2fs_readdir+0x495/0x9e0
[  117.837299][ T7022]  ? f2fs_fill_dentries+0xcd0/0xcd0
[  117.842601][ T7022]  ? down_read_killable+0xc1/0x110
[  117.847707][ T7022]  ? security_file_permission+0x83/0xa0
[  117.853235][ T7022]  iterate_dir+0x25c/0x600
[  117.857640][ T7022]  ? f2fs_fill_dentries+0xcd0/0xcd0
[  117.862822][ T7022]  __se_sys_getdents64+0xf2/0x250
[  117.867831][ T7022]  ? __x64_sys_getdents64+0x90/0x90
[  117.873009][ T7022]  ? filldir+0x660/0x660
[  117.877231][ T7022]  ? __kasan_check_write+0x14/0x20
[  117.882318][ T7022]  ? switch_fpu_return+0x15d/0x2c0
[  117.887425][ T7022]  __x64_sys_getdents64+0x7b/0x90
[  117.892433][ T7022]  x64_sys_call+0x592/0x9a0
[  117.896923][ T7022]  do_syscall_64+0x4c/0xa0
[  117.901320][ T7022]  ? clear_bhb_loop+0x50/0xa0
[  117.906066][ T7022]  ? clear_bhb_loop+0x50/0xa0
[  117.910728][ T7022]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  117.916597][ T7022] RIP: 0033:0x7fc807ecc0d9
[  117.921078][ T7022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.940695][ T7022] RSP: 002b:00007fc806925028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  117.949106][ T7022] RAX: ffffffffffffffda RBX: 00007fc808153fa0 RCX: 00007fc807ecc0d9
[  117.957061][ T7022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  117.965018][ T7022] RBP: 00007fc807f63024 R08: 0000000000000000 R09: 0000000000000000
[  117.972984][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.980933][ T7022] R13: 00007fc808154038 R14: 00007fc808153fa0 R15: 00007ffc75cbca08
[  117.988885][ T7022]  </TASK>
[  118.011055][  T290] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.024299][ T7050] loop7: detected capacity change from 0 to 256
[  118.039278][  T290] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.070972][  T290] usb 7-1: Product: syz
[  118.083210][ T7050] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.100282][  T290] usb 7-1: Manufacturer: syz
[  118.115178][  T290] usb 7-1: SerialNumber: syz
[  118.122903][ T7050] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  118.145110][ T7050] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  118.271548][ T7073] xt_hashlimit: size too large, truncated to 1048576
[  118.505652][ T7087] loop7: detected capacity change from 0 to 512
[  118.557906][ T7087] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.3031: inode has both inline data and extents flags
[  118.593390][ T7087] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.3031: couldn't read orphan inode 15 (err -117)
[  118.607845][  T290] usb 7-1: USB disconnect, device number 9
[  118.635942][ T7087] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback.
[  119.183256][ T7120] loop7: detected capacity change from 0 to 8192
[  119.360457][ T7022] F2FS-fs (loop8): Inconsistent error blkaddr:5633, sit bitmap:0
[  119.421220][ T7022] CPU: 0 PID: 7022 Comm: syz.8.3001 Tainted: G        W         syzkaller #0
[  119.430000][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.440051][ T7022] Call Trace:
[  119.443318][ T7022]  <TASK>
[  119.446232][ T7022]  __dump_stack+0x21/0x30
[  119.450540][ T7022]  dump_stack_lvl+0x110/0x170
[  119.455337][ T7022]  ? show_regs_print_info+0x20/0x20
[  119.460529][ T7022]  ? page_cache_prev_miss+0x290/0x290
[  119.465887][ T7022]  dump_stack+0x15/0x20
[  119.470042][ T7022]  f2fs_is_valid_blkaddr+0xc27/0x1220
[  119.475418][ T7022]  f2fs_get_read_data_page+0x43f/0x6e0
[  119.480856][ T7022]  ? f2fs_get_block+0x140/0x140
[  119.485686][ T7022]  ? force_page_cache_ra+0x460/0x460
[  119.490970][ T7022]  f2fs_find_data_page+0x189/0x3c0
[  119.496146][ T7022]  f2fs_readdir+0x4b4/0x9e0
[  119.500650][ T7022]  ? f2fs_fill_dentries+0xcd0/0xcd0
[  119.505826][ T7022]  ? down_read_killable+0xc1/0x110
[  119.510917][ T7022]  ? security_file_permission+0x83/0xa0
[  119.516444][ T7022]  iterate_dir+0x25c/0x600
[  119.520846][ T7022]  ? f2fs_fill_dentries+0xcd0/0xcd0
[  119.526021][ T7022]  __se_sys_getdents64+0xf2/0x250
[  119.531040][ T7022]  ? __x64_sys_getdents64+0x90/0x90
[  119.536213][ T7022]  ? filldir+0x660/0x660
[  119.540432][ T7022]  ? __kasan_check_write+0x14/0x20
[  119.545538][ T7022]  ? switch_fpu_return+0x15d/0x2c0
[  119.550649][ T7022]  __x64_sys_getdents64+0x7b/0x90
[  119.555649][ T7022]  x64_sys_call+0x592/0x9a0
[  119.560128][ T7022]  do_syscall_64+0x4c/0xa0
[  119.564518][ T7022]  ? clear_bhb_loop+0x50/0xa0
[  119.569181][ T7022]  ? clear_bhb_loop+0x50/0xa0
[  119.573831][ T7022]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  119.579696][ T7022] RIP: 0033:0x7fc807ecc0d9
[  119.584087][ T7022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.603761][ T7022] RSP: 002b:00007fc806925028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  119.612255][ T7022] RAX: ffffffffffffffda RBX: 00007fc808153fa0 RCX: 00007fc807ecc0d9
[  119.620215][ T7022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  119.628189][ T7022] RBP: 00007fc807f63024 R08: 0000000000000000 R09: 0000000000000000
[  119.636231][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.644177][ T7022] R13: 00007fc808154038 R14: 00007fc808153fa0 R15: 00007ffc75cbca08
[  119.652130][ T7022]  </TASK>
[  120.137821][ T7181] loop6: detected capacity change from 0 to 4096
[  120.186529][ T7181] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  120.389458][ T7216] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  120.408447][ T7216] tipc: Disabling bearer <udp:syz0>
[  120.574890][ T7238] loop6: detected capacity change from 0 to 512
[  120.653431][ T7248] loop6: detected capacity change from 0 to 256
[  120.664836][  T314] attempt to access beyond end of device
[  120.664836][  T314] loop8: rw=2049, want=45104, limit=40427
[  121.101805][ T7272] dyndbg: expected <4096 bytes into control
[  121.190000][ T7279] loop8: detected capacity change from 0 to 4096
[  121.223282][ T7279] EXT4-fs (loop8): Mount option "noacl" will be removed by 3.5
[  121.223282][ T7279] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  121.223282][ T7279] 
[  121.279644][ T7279] EXT4-fs (loop8): Journaled quota options ignored when QUOTA feature is enabled
[  121.319992][ T7279] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,bsdgroups,noacl,usrjquota=./file2,norecovery,,errors=continue. Quota mode: writeback.
[  121.500820][ T7285] loop7: detected capacity change from 0 to 40427
[  121.575333][ T7285] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[  121.604745][ T7285] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  121.656657][ T7285] F2FS-fs (loop7): invalid crc value
[  121.697172][ T7285] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  121.712838][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  121.780186][ T7285] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  121.817324][ T7285] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  121.832017][ T7337] loop6: detected capacity change from 0 to 512
[  121.882072][ T7337] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled
[  121.941963][ T7337] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=./sys/bus/pci/devices/0000:00:00.0/remove,errors=remount-ro,. Quota mode: writeback.
[  121.966478][ T6500] attempt to access beyond end of device
[  121.966478][ T6500] loop7: rw=2049, want=40976, limit=40427
[  121.997477][ T7337] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.070738][ T7337] EXT4-fs (loop6): shut down requested (1)
[  122.226199][ T7347] zero sized request
[  122.434364][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3159'.
[  123.065001][ T7402] netlink: 'syz.6.3176': attribute type 16 has an invalid length.
[  123.120980][    T6] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  123.247924][ T7411] netem: unknown loss type 0
[  123.316924][ T7416] binder: 7414:7416 ioctl 541b 200000000240 returned -22
[  123.371016][    T6] usb 9-1: Using ep0 maxpacket: 16
[  123.661025][    T6] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  123.683184][    T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.706520][    T6] usb 9-1: Product: syz
[  123.719421][    T6] usb 9-1: Manufacturer: syz
[  123.731751][    T6] usb 9-1: SerialNumber: syz
[  123.749657][    T6] usb 9-1: config 0 descriptor??
[  123.802253][    T6] ums-onetouch 9-1:0.0: USB Mass Storage device detected
[  124.021791][    T6] usb 9-1: USB disconnect, device number 10
[  124.294304][ T7470] netlink: 'syz.7.3206': attribute type 12 has an invalid length.
[  124.303921][ T7469] netlink: 8964 bytes leftover after parsing attributes in process `syz.4.3207'.
[  124.323501][ T7469] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3207'.
[  124.350958][   T20] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  124.358839][ T7470] netlink: 'syz.7.3206': attribute type 29 has an invalid length.
[  124.399669][ T7470] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3206'.
[  124.570158][ T7487] loop8: detected capacity change from 0 to 256
[  124.588876][ T7489] xt_hashlimit: size too large, truncated to 1048576
[  124.601083][   T20] usb 7-1: Using ep0 maxpacket: 16
[  124.613773][ T7487] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  124.642090][ T7491] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  124.650242][ T7487] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  124.681555][ T7487] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  124.741088][   T20] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 18, changing to 8
[  124.770965][   T20] usb 7-1: config 0 interface 0 has no altsetting 0
[  124.806755][   T20] usb 7-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  124.849634][   T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.893380][   T20] usb 7-1: config 0 descriptor??
[  125.393222][   T20] wacom 0003:056A:003F.0007: hidraw0: USB HID v0.02 Joystick [HID 056a:003f] on usb-dummy_hcd.6-1/input0
[  125.610620][   T20] usb 7-1: USB disconnect, device number 10
[  125.757703][ T7543] loop8: detected capacity change from 0 to 128
[  126.016685][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3247'.
[  127.090969][    T6] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  127.481044][    T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  127.512869][ T7688] xt_hashlimit: size too large, truncated to 1048576
[  127.536400][    T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.583117][ T7640] loop7: detected capacity change from 0 to 40427
[  127.592922][    T6] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  127.629902][ T7640] F2FS-fs (loop7): invalid crc value
[  127.647490][    T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.678973][ T7640] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  127.715317][    T6] usb 9-1: config 0 descriptor??
[  127.737184][ T7700] loop6: detected capacity change from 0 to 2048
[  127.796999][ T7640] F2FS-fs (loop7): recover fsync data on readonly fs
[  127.821384][ T7700] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  127.834816][ T7640] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  127.856492][ T7700] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.945611][   T30] audit: type=1400 audit(2000000065.668:473): avc:  denied  { mounton } for  pid=7699 comm="syz.6.3312" path="/509/file0/file0/file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  127.990613][ T1048] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /509/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  128.077133][   T30] audit: type=1400 audit(2000000065.798:474): avc:  denied  { unlink } for  pid=1048 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  128.192776][    T6] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0
[  128.353710][ T7712] netem: change failed
[  128.614372][   T20] usb 9-1: USB disconnect, device number 11
[  128.872904][ T7750] loop6: detected capacity change from 0 to 4096
[  128.909473][ T7750] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  129.122995][   T30] audit: type=1400 audit(2000000322.851:475): avc:  denied  { mounton } for  pid=7767 comm="syz.4.3341" path="/887/file0" dev="tmpfs" ino=4626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  129.178300][ T7770] loop7: detected capacity change from 0 to 512
[  129.229208][ T7770] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  129.281704][ T7770] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.866864][   T30] audit: type=1326 audit(2000000323.591:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.3.3366" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  130.040154][   T30] audit: type=1400 audit(2000000323.621:477): avc:  denied  { shutdown } for  pid=7811 comm="syz.6.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  130.096675][ T7799] loop7: detected capacity change from 0 to 40427
[  130.161198][ T7799] F2FS-fs (loop7): invalid crc value
[  130.190987][   T30] audit: type=1326 audit(2000000323.621:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.3.3366" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  130.241545][ T7799] F2FS-fs (loop7): Found nat_bits in checkpoint
[  130.329532][ T7864] 9pnet: Insufficient options for proto=fd
[  130.354332][   T30] audit: type=1326 audit(2000000323.621:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.3.3366" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  130.380017][ T7799] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  130.505350][   T30] audit: type=1326 audit(2000000323.631:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.3.3366" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  130.546343][ T6500] attempt to access beyond end of device
[  130.546343][ T6500] loop7: rw=2049, want=45104, limit=40427
[  130.667722][   T30] audit: type=1326 audit(2000000323.631:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.3.3366" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  130.830994][   T30] audit: type=1326 audit(2000000323.631:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.3.3366" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  130.882282][ T7889] SELinux: failed to load policy
[  131.023979][ T7903] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3402'.
[  131.037167][ T7905] loop8: detected capacity change from 0 to 1024
[  131.076451][ T7907] loop7: detected capacity change from 0 to 256
[  131.091447][ T7908] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3402'.
[  131.133287][ T7905] EXT4-fs (loop8): Ignoring removed orlov option
[  131.140356][ T7907] exfat: Deprecated parameter 'utf8'
[  131.178485][ T7907] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  131.203850][ T7905] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  131.554638][ T7902] loop6: detected capacity change from 0 to 40427
[  131.586118][ T7935] fuse: Bad value for 'fd'
[  131.599906][ T7902] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  131.641189][ T7902] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  131.709250][ T7902] F2FS-fs (loop6): Found nat_bits in checkpoint
[  131.816118][ T7902] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  131.854354][ T7902] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  131.862984][ T7953] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3421'.
[  132.286181][ T7981] overlayfs: failed to clone lowerpath
[  132.485769][ T8004] loop8: detected capacity change from 0 to 16
[  132.516766][ T8004] erofs: (device loop8): mounted with root inode @ nid 36.
[  132.530276][ T8009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.671238][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3455'.
[  132.962796][ T8056] loop8: detected capacity change from 0 to 1024
[  132.990582][ T8056] EXT4-fs (loop8): Ignoring removed bh option
[  133.018568][ T8056] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000004,bh,init_itable,. Quota mode: none.
[  133.138164][ T8056] overlayfs: invalid origin (0000)
[  133.217625][ T3085] EXT4-fs error (device loop8): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /384/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  133.304392][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  133.351320][ T3085] EXT4-fs error (device loop8): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /384/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  133.455873][ T8090] loop6: detected capacity change from 0 to 128
[  133.473229][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  133.490463][ T8090] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  133.507826][ T3085] EXT4-fs error (device loop8): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  133.538128][ T8090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  133.560707][ T8090] System zones: 1-3, 19-19, 35-36
[  133.576366][ T8090] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,debug,mblk_io_submit,usrquota,,errors=continue. Quota mode: writeback.
[  133.597981][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  133.616652][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  133.642012][ T8090] ext4 filesystem being mounted at /524/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.670000][ T3085] EXT4-fs error (device loop8): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /384/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  133.729442][ T8090] fscrypt (loop6, inode 12): Unsupported encryption flags (0x08)
[  133.769770][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  133.797463][ T8095] loop6: detected capacity change from 0 to 128
[  133.807298][ T3085] EXT4-fs error (device loop8): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /384/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  133.844601][ T8095] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  133.883027][ T8095] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  133.902613][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  133.920648][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  133.920657][   T30] audit: type=1400 audit(2000000327.641:503): avc:  denied  { mount } for  pid=8094 comm="syz.6.3488" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  133.968968][ T3085] EXT4-fs error (device loop8): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  134.085673][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  134.128676][ T8111] loop7: detected capacity change from 0 to 1024
[  134.143814][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  134.168913][ T8113] 9pnet: Insufficient options for proto=fd
[  134.193556][ T8111] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  134.223283][ T3085] EXT4-fs error (device loop8): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /384/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  134.262589][ T8111] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  134.283271][   T30] audit: type=1400 audit(2000000328.011:504): avc:  denied  { unmount } for  pid=1048 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  134.306178][  T608] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  134.324465][ T8111] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #3: comm syz.7.3495: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[  134.357070][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  134.391873][ T3085] EXT4-fs error (device loop8): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /384/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  134.427933][ T8111] EXT4-fs (loop7): no journal found
[  134.449386][ T8111] EXT4-fs (loop7): can't get journal size
[  134.491377][ T8111] EXT4-fs (loop7): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[  134.546571][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  134.566647][ T3085] EXT4-fs error (device loop8): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  134.652871][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  134.688849][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  134.757899][ T8165] loop7: detected capacity change from 0 to 256
[  134.768919][ T3085] EXT4-fs error (device loop8): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /384/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  134.816576][ T8165] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  134.893012][ T3085] EXT4-fs (loop8): Remounting filesystem read-only
[  134.916142][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  135.006273][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  135.033275][   T30] audit: type=1400 audit(2000000328.761:505): avc:  denied  { create } for  pid=8180 comm="syz.7.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  135.077045][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  135.123298][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  135.138166][ T8190] fuseblk: Bad value for 'fd'
[  135.170806][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  135.216819][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  135.264686][ T3085] EXT4-fs warning (device loop8): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  135.423025][ T3085] bridge0: port 3(syz_tun) entered disabled state
[  135.438144][ T3085] device syz_tun left promiscuous mode
[  135.448162][ T3085] bridge0: port 3(syz_tun) entered disabled state
[  135.709238][   T30] audit: type=1326 audit(2000000329.431:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.3.3558" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  135.792145][ T8248] program syz.7.3560 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.862115][  T608] tipc: Disabling bearer <udp:syz2>
[  135.881384][   T30] audit: type=1326 audit(2000000329.481:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.3.3558" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  135.918839][  T608] tipc: Left network mode
[  136.014684][ T8259] loop6: detected capacity change from 0 to 512
[  136.082031][ T8259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.3564: inode #1: comm syz.6.3564: iget: illegal inode #
[  136.097634][   T30] audit: type=1326 audit(2000000329.481:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.3.3558" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  136.161327][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.168384][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.179283][ T8259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.3564: error while reading EA inode 1 err=-117
[  136.233862][ T8252] device bridge_slave_0 entered promiscuous mode
[  136.240576][ T8259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.3564: inode #1: comm syz.6.3564: iget: illegal inode #
[  136.254359][   T30] audit: type=1326 audit(2000000329.541:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.3.3558" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  136.302557][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.331654][ T8259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.3564: error while reading EA inode 1 err=-117
[  136.346628][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.372226][ T8252] device bridge_slave_1 entered promiscuous mode
[  136.393194][   T30] audit: type=1326 audit(2000000329.541:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.3558" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5dc2f1290e code=0x7ffc0000
[  136.419677][ T8259] EXT4-fs (loop6): 1 orphan inode deleted
[  136.451033][ T8259] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,resgid=0x0000000000000000,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,barrier,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  136.571327][   T30] audit: type=1326 audit(2000000329.541:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.3.3558" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5dc2f520d9 code=0x7ffc0000
[  136.598698][  T608] device bridge_slave_1 left promiscuous mode
[  136.609684][  T608] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.658543][  T608] device bridge_slave_0 left promiscuous mode
[  136.691048][  T608] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.731799][   T30] audit: type=1326 audit(2000000329.541:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.3.3558" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5dc2f51e42 code=0x7ffc0000
[  136.772314][  T608] device veth1_macvtap left promiscuous mode
[  136.810997][  T608] device veth0_vlan left promiscuous mode
[  137.046993][ T8297] device veth1_to_batadv entered promiscuous mode
[  137.223657][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.223858][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.225947][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.226112][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.226256][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.226266][  T314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.226404][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.243688][  T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.244182][  T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.244286][  T608] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.244295][  T608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.258941][  T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.268551][  T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.303731][  T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  137.331559][  T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  137.331840][  T608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  137.331990][  T608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  137.333212][ T8252] device veth0_vlan entered promiscuous mode
[  137.353164][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  137.355618][ T8252] device veth1_macvtap entered promiscuous mode
[  137.385102][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  137.386993][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  138.114967][ T8383] fuse: Bad value for 'fd'
[  138.148215][ T8383] fuse: Bad value for 'fd'
[  138.275171][ T8392] loop7: detected capacity change from 0 to 128
[  138.373414][ T8392] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none.
[  138.460480][ T8392] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  138.496439][ T8403] tipc: Started in network mode
[  138.509750][ T8403] tipc: Node identity 2d40334623b70443002e, cluster identity 4711
[  138.948410][ T8443] loop7: detected capacity change from 0 to 4096
[  138.993747][ T8443] EXT4-fs (loop7): Test dummy encryption mode enabled
[  139.032531][ T8443] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  139.063879][   T30] kauditd_printk_skb: 64 callbacks suppressed
[  139.063889][   T30] audit: type=1400 audit(2000000332.791:577): avc:  denied  { setopt } for  pid=8454 comm="syz.9.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  139.122909][ T8443] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  139.155577][ T8443] System zones: 0-5
[  139.175950][ T8443] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  139.250635][ T8468] overlayfs: failed to clone upperpath
[  139.349035][ T8473] overlayfs: failed to clone upperpath
[  139.391545][ T8478] overlayfs: failed to clone upperpath
[  139.570826][ T8497] loop7: detected capacity change from 0 to 512
[  139.657095][ T8497] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  139.702207][ T8497] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.924285][ T8514] loop7: detected capacity change from 0 to 2048
[  139.979567][ T8514] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,noload,delalloc,. Quota mode: none.
[  140.046754][ T8514] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.197655][   T30] audit: type=1400 audit(2000000333.921:578): avc:  denied  { setopt } for  pid=8522 comm="syz.7.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  140.850585][ T8577] tap0: tun_chr_ioctl cmd 1074025677
[  140.894251][ T8577] tap0: linktype set to 6
[  140.997346][ T8586] loop7: detected capacity change from 0 to 4096
[  141.076873][ T8586] EXT4-fs (loop7): Test dummy encryption mode enabled
[  141.111018][ T8483] loop9: detected capacity change from 0 to 131072
[  141.119537][ T8586] EXT4-fs (loop7): Test dummy encryption mode enabled
[  141.169386][ T8483] F2FS-fs (loop9): Test dummy encryption mode enabled
[  141.197810][ T8586] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000009,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  141.225126][ T8604] loop6: detected capacity change from 0 to 1024
[  141.241577][ T8483] F2FS-fs (loop9): invalid crc value
[  141.275143][ T8483] F2FS-fs (loop9): Found nat_bits in checkpoint
[  141.282600][ T8604] EXT4-fs (loop6): Ignoring removed oldalloc option
[  141.289193][ T8604] EXT4-fs (loop6): Ignoring removed bh option
[  141.361872][ T8604] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none.
[  141.400067][ T8586] EXT4-fs (loop7): shut down requested (0)
[  141.415324][ T8483] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  141.439219][ T8604] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.570028][ T8604] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #15: comm syz.6.3717: lblock 0 mapped to illegal pblock 0 (length 1)
[  141.681325][ T8604] EXT4-fs (loop6): Remounting filesystem read-only
[  141.725037][   T30] audit: type=1400 audit(2000000335.451:579): avc:  denied  { map } for  pid=8601 comm="syz.6.3717" path="/570/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  141.751210][ T8604] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: comm syz.6.3717: lblock 0 mapped to illegal pblock 0 (length 1)
[  141.805122][ T8638] netlink: 4804 bytes leftover after parsing attributes in process `syz.7.3731'.
[  141.834411][ T8604] EXT4-fs (loop6): Remounting filesystem read-only
[  141.866391][ T8604] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: comm syz.6.3717: lblock 0 mapped to illegal pblock 0 (length 1)
[  141.955627][ T8604] EXT4-fs (loop6): Remounting filesystem read-only
[  141.997659][ T8604] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #15: comm syz.6.3717: lblock 0 mapped to illegal pblock 0 (length 1)
[  142.106970][ T8604] EXT4-fs (loop6): Remounting filesystem read-only
[  142.233803][ T8665] loop6: detected capacity change from 0 to 1024
[  142.312361][ T8665] EXT4-fs (loop6): Ignoring removed bh option
[  142.375728][ T8665] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[  142.652388][ T8699] loop9: detected capacity change from 0 to 512
[  142.747767][ T8699] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  143.181453][ T8729] loop7: detected capacity change from 0 to 2048
[  143.270444][ T8729] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  143.331147][ T8729] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  143.390980][    T6] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  143.401278][ T8729] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  143.441439][ T8741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3776'.
[  143.462699][ T8729] EXT4-fs (loop7): This should not happen!! Data will be lost
[  143.462699][ T8729] 
[  143.481398][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3776'.
[  143.499098][ T8729] EXT4-fs (loop7): Total free blocks count 0
[  143.512153][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3776'.
[  143.527968][ T8729] EXT4-fs (loop7): Free/Dirty block details
[  143.555961][ T8729] EXT4-fs (loop7): free_blocks=2415919504
[  143.565490][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3776'.
[  143.584781][ T8729] EXT4-fs (loop7): dirty_blocks=16
[  143.617704][ T8729] EXT4-fs (loop7): Block reservation details
[  143.639844][ T8729] EXT4-fs (loop7): i_reserved_data_blocks=1
[  143.661048][    T6] usb 7-1: Using ep0 maxpacket: 32
[  143.676163][ T8739] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  143.710725][ T8739] EXT4-fs (loop7): This should not happen!! Data will be lost
[  143.710725][ T8739] 
[  143.781045][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.805410][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.824066][    T6] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  143.841663][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.859407][    T6] usb 7-1: config 0 descriptor??
[  143.936100][ T8758] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3783'.
[  143.966285][ T8761] loop9: detected capacity change from 0 to 128
[  144.005007][ T8761] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  144.035547][ T8761] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  144.099879][ T8761] fscrypt (loop9, inode 12): Direct key flag not allowed with different contents and filenames modes
[  144.237852][   T30] audit: type=1400 audit(2000000337.961:580): avc:  denied  { bind } for  pid=8778 comm="syz.7.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  144.332418][    T6] hid-generic 0003:0403:6030.0009: item fetching failed at offset 0/2
[  144.357549][    T6] hid-generic: probe of 0003:0403:6030.0009 failed with error -22
[  144.447234][ T8797] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3802'.
[  144.539364][    T6] usb 7-1: USB disconnect, device number 11
[  144.546372][ T8803] loop9: detected capacity change from 0 to 256
[  144.610816][ T8803] FAT-fs (loop9): Directory bread(block 64) failed
[  144.635724][ T8803] FAT-fs (loop9): Directory bread(block 65) failed
[  144.657334][ T8803] FAT-fs (loop9): Directory bread(block 66) failed
[  144.679625][ T8803] FAT-fs (loop9): Directory bread(block 67) failed
[  144.696798][ T8803] FAT-fs (loop9): Directory bread(block 68) failed
[  144.706879][ T8803] FAT-fs (loop9): Directory bread(block 69) failed
[  144.721117][ T8803] FAT-fs (loop9): Directory bread(block 70) failed
[  144.731474][ T8803] FAT-fs (loop9): Directory bread(block 71) failed
[  144.744692][ T8803] FAT-fs (loop9): Directory bread(block 72) failed
[  144.756820][ T8803] FAT-fs (loop9): Directory bread(block 73) failed
[  144.908991][ T8822] loop9: detected capacity change from 0 to 512
[  144.936462][ T8822] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.059359][   T30] audit: type=1400 audit(2000000338.781:581): avc:  denied  { append } for  pid=8839 comm="syz.9.3821" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  145.110847][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3822'.
[  145.306287][ T8858] loop9: detected capacity change from 0 to 1024
[  145.341285][ T8858] EXT4-fs (loop9): Ignoring removed bh option
[  145.388854][ T8858] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,auto_da_alloc,bh,auto_da_alloc,. Quota mode: none.
[  145.483077][ T8844] loop6: detected capacity change from 0 to 40427
[  145.508778][ T8844] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  145.534391][ T8252] EXT4-fs error (device loop9): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /51/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  145.573912][ T8844] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  145.611850][ T8844] F2FS-fs (loop6): Found nat_bits in checkpoint
[  145.630682][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  145.640998][ T7455] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  145.671405][ T8252] EXT4-fs error (device loop9): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /51/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  145.715939][ T8844] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  145.737451][ T8844] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  145.756583][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  145.802095][ T8252] EXT4-fs error (device loop9): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  145.857760][ T8844] attempt to access beyond end of device
[  145.857760][ T8844] loop6: rw=2049, want=77960, limit=40427
[  145.877816][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  145.894824][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  145.910988][ T7455] usb 8-1: Using ep0 maxpacket: 32
[  145.959349][   T10] attempt to access beyond end of device
[  145.959349][   T10] loop6: rw=1, want=77856, limit=40427
[  145.980765][ T8252] EXT4-fs error (device loop9): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /51/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  146.041044][ T7455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.070525][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  146.080998][ T7455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.123002][ T8252] EXT4-fs error (device loop9): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /51/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  146.151016][ T7455] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  146.190973][ T7455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.233666][ T7455] usb 8-1: config 0 descriptor??
[  146.240737][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  146.275439][ T8252] EXT4-fs error (device loop9): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  146.369834][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  146.391703][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  146.449005][ T8932] loop6: detected capacity change from 0 to 256
[  146.466391][ T8252] EXT4-fs error (device loop9): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /51/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  146.549411][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  146.569447][ T8252] EXT4-fs error (device loop9): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /51/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  146.691263][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  146.711989][ T7455] hid-generic 0003:0403:6030.000A: item fetching failed at offset 0/2
[  146.730483][ T8252] EXT4-fs error (device loop9): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  146.770830][ T7455] hid-generic: probe of 0003:0403:6030.000A failed with error -22
[  146.821170][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  146.842080][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  146.897006][ T8252] EXT4-fs error (device loop9): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /51/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  146.928463][  T290] usb 8-1: USB disconnect, device number 11
[  147.003518][ T8252] EXT4-fs (loop9): Remounting filesystem read-only
[  147.015630][ T8937] loop6: detected capacity change from 0 to 40427
[  147.041573][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.067708][ T8937] F2FS-fs (loop6): invalid crc value
[  147.097497][ T8937] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  147.109876][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.163747][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.209723][ T8937] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  147.228148][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.311645][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.363202][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.424977][ T8252] EXT4-fs warning (device loop9): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.642837][   T10] tipc: Left network mode
[  147.766417][ T1048] attempt to access beyond end of device
[  147.766417][ T1048] loop6: rw=2049, want=45104, limit=40427
[  147.989164][   T30] audit: type=1326 audit(2000000341.711:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.7.3881" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f5ef60d9 code=0x7ffc0000
[  148.046580][   T10] device bridge_slave_1 left promiscuous mode
[  148.064341][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.084169][   T10] device bridge_slave_0 left promiscuous mode
[  148.093606][   T30] audit: type=1326 audit(2000000341.751:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.7.3881" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f81f5ef60d9 code=0x7ffc0000
[  148.124035][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.148618][   T10] device veth1_macvtap left promiscuous mode
[  148.173425][   T10] device veth0_vlan left promiscuous mode
[  148.216545][   T30] audit: type=1326 audit(2000000341.751:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.7.3881" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f5ef60d9 code=0x7ffc0000
[  148.307189][   T30] audit: type=1326 audit(2000000341.771:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.7.3881" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f5ef60d9 code=0x7ffc0000
[  148.366761][   T30] audit: type=1326 audit(2000000341.771:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.7.3881" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f81f5ef60d9 code=0x7ffc0000
[  148.457412][   T30] audit: type=1326 audit(2000000341.771:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.7.3881" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f81f5eb690e code=0x7ffc0000
[  148.503522][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.528365][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.554629][ T8973] device bridge_slave_0 entered promiscuous mode
[  148.562319][   T30] audit: type=1400 audit(2000000341.911:588): avc:  denied  { create } for  pid=8978 comm="syz.6.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  148.608777][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.625229][ T8995] loop6: detected capacity change from 0 to 1024
[  148.632084][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.645955][   T30] audit: type=1326 audit(2000000341.921:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.7.3881" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f81f5ef60d9 code=0x7ffc0000
[  148.673976][ T8973] device bridge_slave_1 entered promiscuous mode
[  148.682936][ T8995] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  148.701262][ T8995] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.922520][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.943844][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.989202][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.028015][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.061958][ T9020] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3899'.
[  149.077887][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.085024][  T314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.108845][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3899'.
[  149.134393][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.178924][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.225290][  T314] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.232415][  T314] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.273861][ T8986] 9pnet: p9_fd_create_tcp (8986): problem connecting socket to 127.0.0.1
[  149.316768][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.355437][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.401568][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.445750][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  149.512945][ T8973] device veth0_vlan entered promiscuous mode
[  149.532169][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  149.571470][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.611272][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  149.651772][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  149.694621][ T8973] device veth1_macvtap entered promiscuous mode
[  149.734084][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.774253][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.812295][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.851464][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.093906][ T9078] netlink: 'syz.7.3926': attribute type 1 has an invalid length.
[  150.143987][ T9078] netlink: 8968 bytes leftover after parsing attributes in process `syz.7.3926'.
[  150.210293][ T9082] loop0: detected capacity change from 0 to 512
[  150.216794][ T9078] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3926'.
[  150.277277][ T9078] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3926'.
[  150.292103][ T9082] EXT4-fs (loop0): Ignoring removed nobh option
[  150.332523][ T9082] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  150.371272][ T9082] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3928: invalid indirect mapped block 256 (level 1)
[  150.402373][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3929'.
[  150.441673][ T9082] EXT4-fs (loop0): Remounting filesystem read-only
[  150.491502][ T9082] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3928: invalid indirect mapped block 2683928664 (level 1)
[  150.558424][ T9016] loop6: detected capacity change from 0 to 131072
[  150.571256][ T9082] EXT4-fs (loop0): Remounting filesystem read-only
[  150.611489][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  150.611501][   T30] audit: type=1400 audit(2000000344.341:591): avc:  denied  { mounton } for  pid=9090 comm="syz.7.3932" path="/207/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  150.642076][ T9082] EXT4-fs (loop0): 1 truncate cleaned up
[  150.647719][ T9082] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x000000000000000c,nobh,nodioread_nolock,discard,usrjquota=.noload,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc,,. Quota mode: writeback.
[  150.679632][ T9016] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[  150.739650][ T9016] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  150.784549][ T9016] F2FS-fs (loop6): invalid crc value
[  150.842009][ T9016] F2FS-fs (loop6): Found nat_bits in checkpoint
[  150.852685][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3937'.
[  150.889510][ T9082] EXT4-fs warning (device loop0): ext4_resize_begin:73: won't resize using backup superblock at 1
[  150.912210][   T30] audit: type=1400 audit(2000000344.641:592): avc:  denied  { ioctl } for  pid=9109 comm="syz.7.3939" path="mnt:[4026532296]" dev="nsfs" ino=4026532296 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  151.000771][ T9016] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  151.057348][ T9016] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  151.267330][ T9140] loop0: detected capacity change from 0 to 1024
[  151.334112][ T9140] EXT4-fs (loop0): Ignoring removed bh option
[  151.369799][ T9140] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,min_batch_time=0x000000007fffffff,barrier=0x0000000000000004,quota,debug_want_extra_isize=0x0000000000000080,errors=continue,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: writeback.
[  151.510507][ T9140] EXT4-fs (loop0): shut down requested (2)
[  151.534324][ T9140] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=16
[  151.572208][ T9140] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=16
[  151.605340][ T9162] loop7: detected capacity change from 0 to 512
[  151.614136][ T9140] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=16
[  151.639175][ T9162] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.7.3961: corrupted xattr block 95
[  151.681405][ T9162] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.3961: bg 0: block 7: invalid block bitmap
[  151.738830][ T9162] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  151.760059][ T9162] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2925: inode #11: comm syz.7.3961: corrupted xattr block 95
[  151.785841][ T9162] EXT4-fs warning (device loop7): ext4_evict_inode:305: xattr delete (err -117)
[  151.816492][ T9162] EXT4-fs (loop7): 1 orphan inode deleted
[  151.830148][ T9162] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,jqfmt=vfsv1,stripe=0x00000000000007ff,,errors=continue. Quota mode: none.
[  151.903654][ T6500] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /219/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  151.933535][ T6500] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  151.956434][ T6500] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  152.340472][  T314] device bridge_slave_1 left promiscuous mode
[  152.355033][ T9186] loop6: detected capacity change from 0 to 256
[  152.362345][  T314] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.382233][ T9186] FAT-fs (loop6): Directory bread(block 1285) failed
[  152.392049][  T314] device bridge_slave_0 left promiscuous mode
[  152.405091][ T9186] FAT-fs (loop6): Directory bread(block 1286) failed
[  152.412348][  T314] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.427648][ T9186] FAT-fs (loop6): Directory bread(block 1287) failed
[  152.436950][  T314] device veth1_to_batadv left promiscuous mode
[  152.449859][ T9186] FAT-fs (loop6): Directory bread(block 1288) failed
[  152.457098][  T314] device veth0_to_bond left promiscuous mode
[  152.469267][  T314] device veth1_macvtap left promiscuous mode
[  152.501384][  T314] device veth0_vlan left promiscuous mode
[  152.690632][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.735088][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.758742][   T30] audit: type=1400 audit(2000000346.481:593): avc:  denied  { accept } for  pid=9210 comm="syz.4.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  152.788732][ T9180] device bridge_slave_0 entered promiscuous mode
[  152.831482][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.873363][   T30] audit: type=1400 audit(2000000346.511:594): avc:  denied  { write } for  pid=9210 comm="syz.4.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  152.894707][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.942435][ T9221] input: syz1 as /devices/virtual/input/input15
[  152.959198][ T9180] device bridge_slave_1 entered promiscuous mode
[  153.045752][   T30] audit: type=1400 audit(2000000346.511:595): avc:  denied  { nlmsg_write } for  pid=9210 comm="syz.4.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  153.161004][   T30] audit: type=1400 audit(2000000346.561:596): avc:  denied  { setopt } for  pid=9212 comm="syz.4.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  153.325242][   T30] audit: type=1400 audit(2000000346.731:597): avc:  denied  { execmem } for  pid=9226 comm="syz.4.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  153.373330][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.415264][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.443463][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  153.491271][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.540815][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.547918][  T314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.601040][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  153.648745][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.691177][  T314] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.698512][  T314] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.757256][ T9257] netlink: 'syz.4.4006': attribute type 4 has an invalid length.
[  153.777787][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  153.798970][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.824494][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.869473][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  153.921686][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  153.961715][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  154.014318][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  154.030683][ T9180] device veth0_vlan entered promiscuous mode
[  154.072747][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  154.095091][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  154.133661][ T9180] device veth1_macvtap entered promiscuous mode
[  154.193628][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  154.204215][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  154.235359][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  154.279776][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  154.312442][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.443560][   T30] audit: type=1400 audit(2000000348.171:598): avc:  denied  { map } for  pid=9283 comm="syz.4.4017" path="socket:[45801]" dev="sockfs" ino=45801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  154.560094][ T9245] loop0: detected capacity change from 0 to 131072
[  154.583149][ T9245] F2FS-fs (loop0): invalid crc value
[  154.623223][ T9245] F2FS-fs (loop0): Found nat_bits in checkpoint
[  154.693317][ T9245] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  154.709881][ T9245] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  154.890177][   T30] audit: type=1400 audit(2000000348.611:599): avc:  denied  { create } for  pid=9302 comm="syz.3.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  154.967137][   T30] audit: type=1400 audit(2000000348.641:600): avc:  denied  { setopt } for  pid=9302 comm="syz.3.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  155.274518][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4029'.
[  155.326763][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4029'.
[  155.396459][ T9326] loop0: detected capacity change from 0 to 512
[  155.443507][ T9329] loop2: detected capacity change from 0 to 256
[  155.490534][ T9326] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.4033: bad orphan inode 11862016
[  155.549633][ T9326] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  155.563080][ T9334] size and base must be multiples of 4 kiB
[  155.568904][ T9334] CPU: 0 PID: 9334 Comm: syz.6.4036 Tainted: G        W         syzkaller #0
[  155.577656][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.587711][ T9334] Call Trace:
[  155.590990][ T9334]  <TASK>
[  155.593909][ T9334]  __dump_stack+0x21/0x30
[  155.598239][ T9334]  dump_stack_lvl+0x110/0x170
[  155.602914][ T9334]  ? show_regs_print_info+0x20/0x20
[  155.608095][ T9334]  ? has_cap_mac_admin+0x370/0x370
[  155.613187][ T9334]  dump_stack+0x15/0x20
[  155.617324][ T9334]  mtrr_del+0x84/0x90
[  155.621285][ T9334]  mtrr_ioctl+0x8c1/0xf90
[  155.625604][ T9334]  ? mtrr_close+0x1f0/0x1f0
[  155.630082][ T9334]  ? selinux_file_ioctl+0x3ad/0x4c0
[  155.635263][ T9334]  ? ring_buffer_unlock_commit+0x410/0x5d0
[  155.641063][ T9334]  ? trace_buffer_unlock_commit_regs+0x12e/0x5f0
[  155.647368][ T9334]  ? __fget_files+0x2e1/0x340
[  155.652022][ T9334]  ? mtrr_close+0x1f0/0x1f0
[  155.656500][ T9334]  proc_reg_unlocked_ioctl+0x1c6/0x2b0
[  155.661959][ T9334]  ? proc_reg_poll+0x290/0x290
[  155.666700][ T9334]  __se_sys_ioctl+0x121/0x1a0
[  155.671355][ T9334]  __x64_sys_ioctl+0x7b/0x90
[  155.675924][ T9334]  x64_sys_call+0x2f/0x9a0
[  155.680322][ T9334]  do_syscall_64+0x4c/0xa0
[  155.684721][ T9334]  ? clear_bhb_loop+0x50/0xa0
[  155.689380][ T9334]  ? clear_bhb_loop+0x50/0xa0
[  155.694038][ T9334]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  155.699917][ T9334] RIP: 0033:0x7f63c0cb80d9
[  155.704343][ T9334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.723954][ T9334] RSP: 002b:00007f63bf711028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.732368][ T9334] RAX: ffffffffffffffda RBX: 00007f63c0f3ffa0 RCX: 00007f63c0cb80d9
[  155.740410][ T9334] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003
[  155.748359][ T9334] RBP: 00007f63c0d4f024 R08: 0000000000000000 R09: 0000000000000000
[  155.756330][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.764294][ T9334] R13: 00007f63c0f40038 R14: 00007f63c0f3ffa0 R15: 00007fff8a938218
[  155.772338][ T9334]  </TASK>
[  155.797523][ T9326] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.884788][ T9340] loop2: detected capacity change from 0 to 16
[  155.922381][ T9340] erofs: (device loop2): mounted with root inode @ nid 36.
[  156.165816][ T9355] overlayfs: unrecognized mount option "\" or missing value
[  156.472573][ T9364] netlink: 'syz.0.4049': attribute type 16 has an invalid length.
[  156.501027][ T9364] netlink: 'syz.0.4049': attribute type 17 has an invalid length.
[  156.540733][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  156.583421][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  156.611709][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  156.653605][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  156.676924][   T30] audit: type=1400 audit(2000000350.401:601): avc:  denied  { search } for  pid=9365 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.699906][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  156.730037][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  156.759668][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready
[  156.774403][   T30] audit: type=1400 audit(2000000350.431:602): avc:  denied  { read } for  pid=9374 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.805194][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready
[  156.842063][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready
[  156.879748][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready
[  156.907166][   T30] audit: type=1400 audit(2000000350.431:603): avc:  denied  { open } for  pid=9374 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.956937][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready
[  156.989771][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready
[  157.031820][ T9392] loop6: detected capacity change from 0 to 512
[  157.045674][ T9364] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  157.083640][ T9392] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  157.101655][   T30] audit: type=1400 audit(2000000350.431:604): avc:  denied  { getattr } for  pid=9374 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.155956][ T9392] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  157.171412][ T9375] netlink: 'syz.2.4052': attribute type 4 has an invalid length.
[  157.262014][ T9392] EXT4-fs (loop6): 1 truncate cleaned up
[  157.267691][ T9392] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback.
[  157.295996][   T30] audit: type=1400 audit(2000000350.441:605): avc:  denied  { getattr } for  pid=9374 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  157.454242][ T9415] loop0: detected capacity change from 0 to 256
[  157.510969][   T30] audit: type=1400 audit(2000000350.481:606): avc:  denied  { read } for  pid=9378 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  157.545634][ T9415] exfat: Deprecated parameter 'utf8'
[  157.588716][ T9415] exfat: Deprecated parameter 'utf8'
[  157.655933][ T9415] exfat: Deprecated parameter 'namecase'
[  157.687690][ T9415] exfat: Deprecated parameter 'namecase'
[  157.721934][   T30] audit: type=1400 audit(2000000350.481:607): avc:  denied  { open } for  pid=9378 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  157.757899][ T9435] device batadv_slave_1 entered promiscuous mode
[  157.785174][ T9415] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[  157.818648][ T9434] device batadv_slave_1 left promiscuous mode
[  157.921157][   T30] audit: type=1400 audit(2000000350.671:608): avc:  denied  { write } for  pid=9365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  158.129980][   T30] audit: type=1400 audit(2000000350.671:609): avc:  denied  { add_name } for  pid=9365 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  158.164784][ T9467] binder: 9465:9467 ioctl c0306201 2000000001c0 returned -14
[  158.214586][ T9472] loop0: detected capacity change from 0 to 128
[  158.272540][ T9472] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  158.330085][   T30] audit: type=1400 audit(2000000350.671:610): avc:  denied  { create } for  pid=9365 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  158.360844][ T9472] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  158.423625][ T9487] loop6: detected capacity change from 0 to 512
[  158.502154][ T9487] EXT4-fs (loop6): Test dummy encryption mode enabled
[  158.509004][ T9487] EXT4-fs (loop6): Ignoring removed oldalloc option
[  158.540195][  T327] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  158.591040][ T9487] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (53686!=18645)
[  158.686289][ T9487] EXT4-fs (loop6): group descriptors corrupted!
[  158.901003][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  159.166195][ T9551] loop0: detected capacity change from 0 to 128
[  159.273945][ T9551] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  159.310158][ T9551] System zones: 1-3, 19-19, 35-36
[  159.364171][ T9551] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  159.427281][ T9551] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.649121][ T9414] loop2: detected capacity change from 0 to 131072
[  159.650959][  T290] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  159.690757][ T9414] F2FS-fs (loop2): invalid crc value
[  159.755161][ T9414] F2FS-fs (loop2): Found nat_bits in checkpoint
[  159.893200][ T9414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  159.971126][  T290] usb 7-1: Using ep0 maxpacket: 32
[  160.111073][  T290] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  160.147310][  T290] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  160.196555][  T290] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  160.221190][ T9614] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  160.221806][ T9614] 
@0Ù: renamed from bond_slave_1
[  160.340968][  T290] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  160.380929][  T290] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  160.420932][  T290] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  160.470930][  T290] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  160.499639][ T9605] loop0: detected capacity change from 0 to 40427
[  160.510941][  T290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.549914][ T9605] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  160.557964][  T290] usb 7-1: config 0 descriptor??
[  160.593379][ T9605] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  160.624448][ T9605] F2FS-fs (loop0): invalid crc value
[  160.652138][ T9605] F2FS-fs (loop0): Found nat_bits in checkpoint
[  160.720196][ T9605] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  160.750968][ T9605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  160.794517][ T9414] F2FS-fs (loop2): Start checkpoint disabled!
[  160.842404][  T290] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  160.861202][ T9605] attempt to access beyond end of device
[  160.861202][ T9605] loop0: rw=2049, want=45104, limit=40427
[  160.946595][ T9629] overlayfs: failed to clone upperpath
[  160.995587][ T9629] overlayfs: failed to clone upperpath
[  161.083201][  T290] usb 7-1: USB disconnect, device number 12
[  161.113520][  T290] usblp0: removed
[  161.206723][ T9605] attempt to access beyond end of device
[  161.206723][ T9605] loop0: rw=0, want=45104, limit=40427
[  161.271579][ T9632] attempt to access beyond end of device
[  161.271579][ T9632] loop0: rw=2049, want=40968, limit=40427
[  161.670180][ T9650] 9p: Unknown Cache mode readahead
[  161.741392][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  161.741403][   T30] audit: type=1400 audit(2000000355.471:622): avc:  denied  { search } for  pid=9657 comm="syz.6.4121" name="/" dev="configfs" ino=14608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  161.885358][ T9669] loop6: detected capacity change from 0 to 512
[  161.923360][  T314] tipc: Subscription rejected, illegal request
[  161.950029][   T30] audit: type=1400 audit(2000000355.501:623): avc:  denied  { read } for  pid=9657 comm="syz.6.4121" name="/" dev="configfs" ino=14608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  161.982075][ T9669] EXT4-fs (loop6): Ignoring removed bh option
[  162.041864][ T9669] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,grpquota,,errors=continue. Quota mode: writeback.
[  162.094436][ T9669] ext4 filesystem being mounted at /623/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.105175][   T30] audit: type=1400 audit(2000000355.501:624): avc:  denied  { open } for  pid=9657 comm="syz.6.4121" path="/" dev="configfs" ino=14608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  162.186494][ T9686] bridge0: port 1(syz_tun) entered blocking state
[  162.194044][ T9687] loop0: detected capacity change from 0 to 128
[  162.221814][ T9686] bridge0: port 1(syz_tun) entered disabled state
[  162.254410][ T9686] device syz_tun entered promiscuous mode
[  162.446100][ T9701] loop2: detected capacity change from 0 to 128
[  162.491917][ T9701] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  162.550966][    T6] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  162.573194][  T327] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  162.727402][ T9713] loop2: detected capacity change from 0 to 256
[  162.746230][ T9713] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  162.761063][ T7455] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  162.781210][ T9713] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.801035][    T6] usb 7-1: Using ep0 maxpacket: 32
[  162.863150][ T9721] loop2: detected capacity change from 0 to 512
[  162.883198][ T9721] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.931013][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.954658][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.977937][    T6] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  162.989938][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.002505][    T6] usb 7-1: config 0 descriptor??
[  163.011130][ T7455] usb 1-1: Using ep0 maxpacket: 32
[  163.040420][ T9732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4152'.
[  163.051881][ T9732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4152'.
[  163.131037][ T7455] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  163.139664][ T7455] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  163.148549][ T7455] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  163.158069][ T7455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  163.168895][ T7455] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  163.179026][ T7455] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  163.192406][ T7455] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  163.201675][ T7455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.213183][ T7455] usb 1-1: config 0 descriptor??
[  163.472894][ T7455] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  163.493407][    T6] savu 0003:1E7D:2D5A.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  163.666459][ T9735] loop2: detected capacity change from 0 to 16
[  163.693206][ T7455] usb 1-1: USB disconnect, device number 2
[  163.712798][ T9735] erofs: (device loop2): mounted with root inode @ nid 36.
[  163.723128][ T7455] usblp0: removed
[  163.754025][ T9735] attempt to access beyond end of device
[  163.754025][ T9735] loop2: rw=0, want=40, limit=16
[  163.778796][ T9735] attempt to access beyond end of device
[  163.778796][ T9735] loop2: rw=524288, want=48, limit=16
[  163.795341][ T9735] attempt to access beyond end of device
[  163.795341][ T9735] loop2: rw=524288, want=40, limit=16
[  163.810286][    T6] usb 7-1: USB disconnect, device number 13
[  163.894602][ T9751] loop2: detected capacity change from 0 to 512
[  163.921616][ T9751] EXT4-fs (loop2): 1 truncate cleaned up
[  163.935266][ T9751] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback.
[  164.306608][ T9755] loop2: detected capacity change from 0 to 2048
[  164.438566][ T9755]  loop2: unable to read partition table
[  164.454296][ T9765] loop6: detected capacity change from 0 to 4096
[  164.476393][ T9755] loop2: partition table beyond EOD, truncated
[  164.498300][ T9765] EXT4-fs (loop6): Test dummy encryption mode enabled
[  164.514043][ T9755] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  164.549794][ T9765] EXT4-fs (loop6): Test dummy encryption mode enabled
[  164.563625][ T9771] loop0: detected capacity change from 0 to 256
[  164.589300][ T9765] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  164.646466][  T101]  loop2: unable to read partition table
[  164.655258][ T9771] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  164.678402][  T101] loop2: partition table beyond EOD, truncated
[  164.731300][ T9771] attempt to access beyond end of device
[  164.731300][ T9771] loop0: rw=0, want=98488, limit=256
[  164.810044][ T9765] EXT4-fs (loop6): shut down requested (2)
[  164.821423][   T30] audit: type=1400 audit(2000000358.551:625): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.078519][ T9788] loop6: detected capacity change from 0 to 128
[  165.124834][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4179'.
[  165.152661][ T9788] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  165.221070][ T9788] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  165.267186][ T9788] FAT-fs (loop6): Filesystem has been set read-only
[  165.287099][ T9788] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  165.310454][ T9788] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[  166.087556][ T9838] EXT4-fs (loop6): Ignoring removed bh option
[  166.181376][ T9838] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,sysvgroups,noinit_itable,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none.
[  166.229733][ T7455] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  166.270029][ T7455] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  167.206448][ T9886] set_capacity_and_notify: 2 callbacks suppressed
[  167.209714][ T9886] loop6: detected capacity change from 0 to 40427
[  167.275616][ T9886] F2FS-fs (loop6): invalid crc value
[  167.318259][ T9886] F2FS-fs (loop6): Found nat_bits in checkpoint
[  167.410596][ T9902] incfs: Can't find or create .index dir in .
[  167.423366][ T9886] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  167.440378][ T9902] incfs: mount failed -28
[  167.589077][   T30] audit: type=1400 audit(2000000361.311:626): avc:  denied  { map } for  pid=9884 comm="syz.6.4217" path="/643/file0/file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  167.672587][ T1048] attempt to access beyond end of device
[  167.672587][ T1048] loop6: rw=2049, want=45104, limit=40427
[  168.087950][   T30] audit: type=1400 audit(2000000361.811:627): avc:  denied  { mounton } for  pid=9936 comm="syz.2.4248" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  168.148916][ T9941] loop2: detected capacity change from 0 to 512
[  168.176505][ T9941] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  168.215196][ T9941] EXT4-fs (loop2): 1 truncate cleaned up
[  168.230948][ T9941] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  168.322596][   T30] audit: type=1400 audit(2000000362.051:628): avc:  denied  { execute } for  pid=9940 comm="syz.2.4239" path="/40/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  168.827476][ T9961] xt_hashlimit: size too large, truncated to 1048576
[  168.856327][ T9965] loop0: detected capacity change from 0 to 512
[  168.932900][ T9965] EXT4-fs (loop0): Ignoring removed nobh option
[  168.995294][ T9965] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[  169.062118][ T9965] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.156139][ T9965] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.4250: corrupted inode contents
[  169.215100][ T9965] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #2: comm syz.0.4250: mark_inode_dirty error
[  169.269037][ T9965] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.4250: corrupted inode contents
[  169.317878][ T9973] loop6: detected capacity change from 0 to 2048
[  169.341240][ T9965] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.4250: mark_inode_dirty error
[  169.389441][   T30] audit: type=1400 audit(2000000363.111:629): avc:  denied  { rename } for  pid=9964 comm="syz.0.4250" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  169.432058][ T9981] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #18: comm syz.0.4250: directory missing '.'
[  169.481414][ T9973]  loop6: unable to read partition table
[  169.567101][ T9973] loop6: partition table beyond EOD, truncated
[  169.582360][ T9983] loop7: detected capacity change from 0 to 7
[  169.621498][ T9973] loop_reread_partitions: partition scan of loop6 () failed (rc=-5)
[  169.632509][   T30] audit: type=1400 audit(2000000363.361:630): avc:  denied  { remount } for  pid=9984 comm="syz.2.4257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  169.653915][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.664849][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.680926][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.691831][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.699656][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.710930][  T320]  loop7: unable to read partition table
[  169.719289][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.730186][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.738544][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.749457][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.758191][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.769103][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.777522][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.788864][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.796889][ T9983]  loop7: unable to read partition table
[  169.803212][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.814115][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.822500][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.833468][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.841815][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.852707][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  169.897525][ T9983] loop_reread_partitions: partition scan of loop7 (úù) failed (rc=-5)
[  169.931822][   T30] audit: type=1400 audit(2000000363.601:631): avc:  denied  { unmount } for  pid=9180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  170.003612][  T101]  loop6: unable to read partition table
[  170.009334][  T101] loop6: partition table beyond EOD, truncated
[  170.393278][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4271'.
[  170.466858][T10021] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4271'.
[  170.481316][  T306] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  170.506552][  T306] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  170.889340][T10032] kvm: apic: phys broadcast and lowest prio
[  170.977568][   T30] audit: type=1400 audit(2000000364.701:632): avc:  denied  { bind } for  pid=10038 comm="syz.2.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  171.144197][T10043] loop6: detected capacity change from 0 to 512
[  171.390784][T10058] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  171.457877][   T30] audit: type=1400 audit(2000000365.181:633): avc:  denied  { relabelto } for  pid=10056 comm="syz.4.4287" name="/" dev="ramfs" ino=48069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  171.535528][T10060] overlayfs: failed to clone upperpath
[  171.594545][T10062] loop6: detected capacity change from 0 to 512
[  171.621020][   T30] audit: type=1400 audit(2000000365.211:634): avc:  denied  { associate } for  pid=10056 comm="syz.4.4287" name="/" dev="ramfs" ino=48069 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0"
[  171.649646][T10065] fuse: Bad value for 'fd'
[  171.712151][T10062] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.752125][T10062] ext4 filesystem being mounted at /654/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.797478][   T30] audit: type=1400 audit(2000000365.521:635): avc:  denied  { mounton } for  pid=10072 comm="syz.2.4293" path="/53/file0" dev="incremental-fs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  171.839683][T10073] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  171.856784][T10071] 9pnet: p9_errstr2errno: server reported unknown error Dfß ¥®r
[  171.856784][T10071] °’°µÔ†ÿ00000000000000000000003ÿÿÿÿ
[  171.878576][T10046] loop0: detected capacity change from 0 to 2048
[  172.012050][ T1369]  loop0: unable to read partition table
[  172.017746][ T1369] loop0: partition table beyond EOD, truncated
[  172.180682][T10046]  loop0: unable to read partition table
[  172.211645][T10085] device bridge_slave_0 left promiscuous mode
[  172.223500][T10046] loop0: partition table beyond EOD, truncated
[  172.266956][T10046] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  172.610023][  T101]  loop0: unable to read partition table
[  172.643033][  T101] loop0: partition table beyond EOD, truncated
[  173.397691][T10133] loop0: detected capacity change from 0 to 512
[  173.462185][T10133] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  173.663481][T10083] loop2: detected capacity change from 0 to 131072
[  173.707792][T10083] F2FS-fs (loop2): Test dummy encryption mode enabled
[  173.715349][T10157] loop0: detected capacity change from 0 to 1024
[  173.755339][T10083] F2FS-fs (loop2): invalid crc value
[  173.771350][T10157] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  173.810336][T10083] F2FS-fs (loop2): Found nat_bits in checkpoint
[  173.847524][T10157] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.885234][T10083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  173.913833][T10157] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm syz.0.4332: lblock 0 mapped to illegal pblock 0 (length 1)
[  174.011964][  T314] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1)
[  174.050110][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  174.050121][   T30] audit: type=1400 audit(2000000367.771:637): avc:  denied  { rename } for  pid=10082 comm="syz.2.4297" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  174.111169][  T314] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  174.201054][  T314] EXT4-fs (loop0): This should not happen!! Data will be lost
[  174.201054][  T314] 
[  174.387505][   T30] audit: type=1400 audit(2000000367.831:638): avc:  denied  { unlink } for  pid=10082 comm="syz.2.4297" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  174.899476][T10189] nicvf0: renamed from team_slave_1
[  174.945060][T10191] loop2: detected capacity change from 0 to 256
[  175.020287][T10191] incfs: Can't find or create .incomplete dir in ./file0
[  175.063360][T10191] incfs: mount failed -28
[  175.273023][T10211] loop6: detected capacity change from 0 to 512
[  175.320650][T10211] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  175.380287][T10211] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  175.432397][T10220] loop2: detected capacity change from 0 to 1024
[  175.448154][T10211] EXT4-fs (loop6): 1 truncate cleaned up
[  175.475905][T10211] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback.
[  175.500079][T10220] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  175.553549][T10220] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.615539][T10211] EXT4-fs error (device loop6) in ext4_setattr:5676: error 28
[  175.629551][T10220] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.4357: lblock 0 mapped to illegal pblock 0 (length 1)
[  175.680624][T10220] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  175.730426][T10220] EXT4-fs (loop2): This should not happen!! Data will be lost
[  175.730426][T10220] 
[  175.769963][T10220] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: comm syz.2.4357: lblock 0 mapped to illegal pblock 0 (length 1)
[  175.812270][T10220] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.4357: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  176.078114][T10246] loop2: detected capacity change from 0 to 512
[  176.183211][T10246] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  176.250494][T10246] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.289785][T10260] loop6: detected capacity change from 0 to 128
[  176.636170][   T30] audit: type=1400 audit(2000000370.361:639): avc:  denied  { nlmsg_read } for  pid=10278 comm="syz.3.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  176.657048][T10279] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4382'.
[  176.691020][  T290] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  176.778386][T10264] loop0: detected capacity change from 0 to 40427
[  176.810161][T10264] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  176.854191][T10264] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  176.885881][T10264] F2FS-fs (loop0): invalid crc value
[  176.920352][T10264] F2FS-fs (loop0): Found nat_bits in checkpoint
[  177.011641][T10264] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  177.027286][T10267] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  177.052222][T10264] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  177.081037][  T290] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  177.100985][  T290] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  177.191295][T10267] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  177.242202][T10267] EXT4-fs (loop2): This should not happen!! Data will be lost
[  177.242202][T10267] 
[  177.285909][T10267] EXT4-fs (loop2): Total free blocks count 0
[  177.311104][  T290] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  177.330428][T10267] EXT4-fs (loop2): Free/Dirty block details
[  177.341810][  T290] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.349815][  T290] usb 7-1: Product: syz
[  177.354416][T10267] EXT4-fs (loop2): free_blocks=65280
[  177.359705][T10267] EXT4-fs (loop2): dirty_blocks=4095
[  177.405860][T10267] EXT4-fs (loop2): Block reservation details
[  177.415932][  T290] usb 7-1: Manufacturer: syz
[  177.420528][  T290] usb 7-1: SerialNumber: syz
[  177.441039][T10267] EXT4-fs (loop2): i_reserved_data_blocks=4095
[  177.523826][  T327] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 67586 with max blocks 2046 with error 28
[  177.583908][  T327] EXT4-fs (loop2): This should not happen!! Data will be lost
[  177.583908][  T327] 
[  177.722216][  T290] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  177.871439][T10309] loop0: detected capacity change from 0 to 8192
[  177.908921][T10309] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  177.984828][  T290] usb 7-1: USB disconnect, device number 14
[  178.016395][  T290] usblp0: removed
[  179.149871][T10344] loop0: detected capacity change from 0 to 40427
[  179.187503][T10344] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  179.227498][T10344] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  179.265418][T10344] F2FS-fs (loop0): invalid crc value
[  179.281653][T10366] loop2: detected capacity change from 0 to 1024
[  179.292494][T10344] F2FS-fs (loop0): Found nat_bits in checkpoint
[  179.313642][T10366] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.4420: iget: bad i_size value: -360287970189638630
[  179.342101][T10344] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  179.349697][T10366] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.4420: couldn't read orphan inode 13 (err -117)
[  179.362926][T10344] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  179.371231][T10366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  179.488741][  T314] tipc: Subscription rejected, illegal request
[  179.518877][T10377] loop2: detected capacity change from 0 to 512
[  179.563379][T10377] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.4422: inode #1: comm syz.2.4422: iget: illegal inode #
[  179.614861][T10377] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4422: error while reading EA inode 1 err=-117
[  179.653691][T10377] EXT4-fs (loop2): 1 orphan inode deleted
[  179.672747][T10377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  179.714535][T10382] dummy_hcd dummy_hcd.0: remove, state 4
[  179.747946][T10382] usb usb1: USB disconnect, device number 1
[  179.776148][T10382] dummy_hcd dummy_hcd.0: stopped
[  179.786861][T10382] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  179.882181][T10386] loop0: detected capacity change from 0 to 512
[  179.925872][T10386] EXT4-fs (loop0): Ignoring removed bh option
[  179.965283][T10386] EXT4-fs (loop0): Test dummy encryption mode enabled
[  180.018742][T10386] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.4427: inode #1: comm syz.0.4427: iget: illegal inode #
[  180.080080][T10406] loop6: detected capacity change from 0 to 512
[  180.097693][T10386] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.4427: error while reading EA inode 1 err=-117
[  180.132370][T10406] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.4436: inode has both inline data and extents flags
[  180.158674][T10407] loop2: detected capacity change from 0 to 8192
[  180.178438][T10386] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.4427: inode #1: comm syz.0.4427: iget: illegal inode #
[  180.203710][T10406] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.4436: couldn't read orphan inode 15 (err -117)
[  180.228992][T10407] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  180.259198][T10386] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.4427: error while reading EA inode 1 err=-117
[  180.275206][T10406] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback.
[  180.314664][   T30] audit: type=1400 audit(2000000374.041:640): avc:  denied  { watch watch_reads } for  pid=10405 comm="syz.2.4437" path="/81/file1/file2" dev="loop2" ino=1048716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  180.356686][T10386] EXT4-fs (loop0): 1 orphan inode deleted
[  180.393395][T10386] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,bh,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,dioread_lock,noblock_validity,bsddf,,errors=continue. Quota mode: none.
[  180.522498][T10437] loop2: detected capacity change from 0 to 256
[  180.717018][T10452] overlayfs: failed to clone upperpath
[  180.723787][   T30] audit: type=1400 audit(2000000374.451:641): avc:  denied  { write } for  pid=10385 comm="syz.0.4427" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  180.761634][T10386] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.4427: unexpected EA_INODE flag
[  180.862254][T10460] overlayfs: failed to clone upperpath
[  180.916016][   T30] audit: type=1400 audit(2000000374.491:642): avc:  denied  { add_name } for  pid=10385 comm="syz.0.4427" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  180.973679][T10467] loop0: detected capacity change from 0 to 128
[  181.073151][T10465] loop2: detected capacity change from 0 to 8192
[  181.085055][T10467] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.109839][   T30] audit: type=1400 audit(2000000374.801:643): avc:  denied  { mounton } for  pid=10472 comm="syz.6.4465" path="/678/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  181.154864][T10467] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.293119][T10485] loop2: detected capacity change from 0 to 512
[  181.359134][T10485] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.385273][T10490] device batadv_slave_0 entered promiscuous mode
[  181.410084][T10485] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.422726][T10489] device batadv_slave_0 left promiscuous mode
[  181.497784][T10485] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.4469: Directory block failed checksum
[  181.640002][T10499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4474'.
[  181.687275][T10499] device ip6gre1 entered promiscuous mode
[  181.719165][   T30] audit: type=1400 audit(2000000375.441:644): avc:  denied  { append } for  pid=10501 comm="syz.0.4476" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  181.748533][ T7455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.783920][ T7455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.830318][ T7455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.895837][T10509] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.4479: iget: bad extended attribute block 134217728
[  181.971754][T10509] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.4479: couldn't read orphan inode 15 (err -117)
[  182.024679][T10509] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  182.119616][T10509] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4479: bg 0: block 465: padding at end of block bitmap is not set
[  182.190240][T10509] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  182.231120][T10509] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4479: invalid indirect mapped block 234881024 (level 0)
[  182.301295][T10509] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4479: invalid indirect mapped block 768 (level 1)
[  182.383011][T10523] EXT4-fs (loop0): Mount option "journal_ioprio=0x0000000000000006" incompatible with ext2
[  182.593532][T10530] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  182.605266][T10530] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  182.613690][T10530] CPU: 0 PID: 10530 Comm: syz.0.4489 Tainted: G        W         syzkaller #0
[  182.622518][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.632574][T10530] RIP: 0010:dummy_udc_start+0xbb/0x1d0
[  182.638037][T10530] Code: 00 00 ff 24 c5 80 22 7c 85 e8 a1 0c 40 fe eb 13 e8 9a 0c 40 fe eb 0c e8 93 0c 40 fe eb 05 e8 8c 0c 40 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 e6 7b 7f fe 4d 8b 36 4c 89 f7 e8
[  182.657639][T10530] RSP: 0018:ffffc90000a67aa8 EFLAGS: 00010246
[  182.663691][T10530] RAX: 0000000000000000 RBX: ffff88811f170010 RCX: 0000000000080000
[  182.671649][T10530] RDX: ffffc90000d69000 RSI: 0000000000000ae5 RDI: 0000000000000ae6
[  182.679613][T10530] RBP: ffffc90000a67ad0 R08: ffff88810bde0000 R09: 0000000000000004
[  182.687564][T10530] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000
[  182.695523][T10530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
[  182.703480][T10530] FS:  00007febf76586c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  182.712393][T10530] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  182.718958][T10530] CR2: 00007febf8be8240 CR3: 000000013f5e9000 CR4: 00000000003506b0
[  182.726935][T10530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  182.734884][T10530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  182.742921][T10530] Call Trace:
[  182.746178][T10530]  <TASK>
[  182.749098][T10530]  ? dummy_pullup+0x130/0x130
[  182.753859][T10530]  udc_bind_to_driver+0x2af/0x770
[  182.758878][T10530]  usb_gadget_probe_driver+0x1fc/0x380
[  182.764327][T10530]  raw_ioctl+0x114d/0x3040
[  182.768717][T10530]  ? ioctl_has_perm+0x3ab/0x4f0
[  182.773546][T10530]  ? audio_source_pcm_show+0xe0/0xe0
[  182.778808][T10530]  ? has_cap_mac_admin+0x370/0x370
[  182.783897][T10530]  ? selinux_file_ioctl+0x3ad/0x4c0
[  182.789074][T10530]  ? ring_buffer_unlock_commit+0x46f/0x5d0
[  182.794856][T10530]  ? selinux_file_alloc_security+0x120/0x120
[  182.800818][T10530]  ? trace_buffer_unlock_commit_regs+0x12e/0x5f0
[  182.807125][T10530]  ? __fget_files+0x2e1/0x340
[  182.811780][T10530]  ? security_file_ioctl+0x84/0xa0
[  182.816872][T10530]  ? audio_source_pcm_show+0xe0/0xe0
[  182.822132][T10530]  __se_sys_ioctl+0x121/0x1a0
[  182.826792][T10530]  __x64_sys_ioctl+0x7b/0x90
[  182.831356][T10530]  x64_sys_call+0x2f/0x9a0
[  182.835752][T10530]  do_syscall_64+0x4c/0xa0
[  182.840170][T10530]  ? clear_bhb_loop+0x50/0xa0
[  182.844844][T10530]  ? clear_bhb_loop+0x50/0xa0
[  182.849533][T10530]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  182.855410][T10530] RIP: 0033:0x7febf8bfed6b
[  182.859808][T10530] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  182.879394][T10530] RSP: 002b:00007febf7655f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.887790][T10530] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007febf8bfed6b
[  182.895740][T10530] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  182.903690][T10530] RBP: 00007febf7656fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  182.911641][T10530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.919593][T10530] R13: 00002000000000c0 R14: 0000000000000005 R15: 0000000000000000
[  182.927563][T10530]  </TASK>
[  182.930561][T10530] Modules linked in:
[  182.937962][  T290] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  182.963018][  T306] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.072095][T10530] ---[ end trace c7135508a697298c ]---
[  183.077669][T10530] RIP: 0010:dummy_udc_start+0xbb/0x1d0
[  183.084452][T10530] Code: 00 00 ff 24 c5 80 22 7c 85 e8 a1 0c 40 fe eb 13 e8 9a 0c 40 fe eb 0c e8 93 0c 40 fe eb 05 e8 8c 0c 40 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 e6 7b 7f fe 4d 8b 36 4c 89 f7 e8
[  183.105058][   T10] tipc: Subscription rejected, illegal request
[  183.112113][T10530] RSP: 0018:ffffc90000a67aa8 EFLAGS: 00010246
[  183.125180][T10530] RAX: 0000000000000000 RBX: ffff88811f170010 RCX: 0000000000080000
[  183.134488][T10530] RDX: ffffc90000d69000 RSI: 0000000000000ae5 RDI: 0000000000000ae6
[  183.142769][T10530] RBP: ffffc90000a67ad0 R08: ffff88810bde0000 R09: 0000000000000004
[  183.150812][T10530] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000
[  183.159951][T10530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
[  183.168319][T10530] FS:  00007febf76586c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  183.177449][T10530] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.185132][T10530] CR2: 00007f5dc31a32f8 CR3: 000000013f5e9000 CR4: 00000000003506b0
[  183.193353][T10530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  183.201514][T10530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  183.209550][T10530] Kernel panic - not syncing: Fatal exception
[  183.215669][T10530] Kernel Offset: disabled
[  183.219996][T10530] Rebooting in 86400 seconds..