last executing test programs:

1m34.479901851s ago: executing program 3 (id=2110):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})

1m34.347274422s ago: executing program 3 (id=2114):
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setreuid(0xee01, 0xee01)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

1m34.294135311s ago: executing program 3 (id=2116):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000)
signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x8]}, 0x8, 0x800)

1m34.260288572s ago: executing program 3 (id=2119):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0x70b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xc}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x200, 0x80000a, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x8, 0xd, 0x1, 0xa, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10)

1m34.235923802s ago: executing program 3 (id=2121):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

1m34.215834592s ago: executing program 3 (id=2122):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

1m29.171469433s ago: executing program 32 (id=2278):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x17b, 0x0, 0xb}]})

1m19.185981213s ago: executing program 33 (id=2122):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

1m8.333564439s ago: executing program 2 (id=2971):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000000), &(0x7f0000000b80)}, 0x20)

1m8.333254068s ago: executing program 2 (id=2972):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9)

1m8.333045408s ago: executing program 2 (id=2973):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)

1m8.332740959s ago: executing program 2 (id=2974):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000001440)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0xb, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x31486c, &(0x7f0000000140)='usrjquota=')

1m8.215139419s ago: executing program 2 (id=2975):
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0)

1m8.11653498s ago: executing program 2 (id=2981):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x200001, 0x0)
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x800000, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m8.09270475s ago: executing program 34 (id=2981):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x200001, 0x0)
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x800000, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m8.04141928s ago: executing program 5 (id=2983):
r0 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000400)=0xc)
syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=")
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000)

1m7.99912532s ago: executing program 5 (id=2984):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x10000}}}, 0x24}}, 0x0)

1m7.95971152s ago: executing program 5 (id=2985):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)

1m7.953459341s ago: executing program 5 (id=2986):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')

1m7.946118641s ago: executing program 5 (id=2987):
r0 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100))

1m7.759234342s ago: executing program 5 (id=2988):
prctl$PR_SET_NAME(0x4, 0x0)
r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

1m7.731230752s ago: executing program 35 (id=2988):
prctl$PR_SET_NAME(0x4, 0x0)
r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

40.599179695s ago: executing program 6 (id=3980):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000340)={&(0x7f00000011c0), 0x0})
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000d80)={&(0x7f0000000300), &(0x7f0000005200)=""/4144, 0x1030})

40.554137426s ago: executing program 6 (id=3981):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc1, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa, 0x0, 0x3}}}}}]}}]}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x2, {0x2, 0x30}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

38.956550416s ago: executing program 6 (id=4000):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x4, 0x0, 0x2}, 0x4f, [0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xffff9519, 0x40000000, 0x0, 0x2, 0xfffffffe, 0x0, 0xfffffe00, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8000, 0x2, 0x3, 0x3, 0x7, 0x0, 0x5ff339ba, 0x200, 0x8, 0x0, 0xa345, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf, 0x3562, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x200, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x3, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x400000, 0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff1, 0x0, 0xfffffffb, 0x0, 0xfffffffd, 0x0, 0x4, 0x4, 0xffff, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1000, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xde, 0x20000000, 0x0, 0x0, 0x4], [0x0, 0x0, 0x101, 0x0, 0x40, 0x0, 0x6, 0x0, 0xfffffffd, 0x53, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x483534d7, 0x1, 0x1, 0x0, 0x6, 0xd, 0x10001, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x10000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x68, 0x2, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x5, 0x200003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x4, 0x7fffffff, 0x5, 0x0, 0x0, 0x5, 0x48, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x10000, 0x9, 0x101, 0x7]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

38.956079726s ago: executing program 6 (id=4001):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a9, &(0x7f00000007c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020)

38.913223216s ago: executing program 6 (id=4002):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000089d400000000020000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000feffffffffffff"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

38.398918519s ago: executing program 6 (id=4004):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
getrusage(0xffffffffffffffff, &(0x7f00000011c0))

38.398739749s ago: executing program 36 (id=4004):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
getrusage(0xffffffffffffffff, &(0x7f00000011c0))

15.765668436s ago: executing program 9 (id=4627):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2, 0x0, &(0x7f00000002c0)='\x00\x00', 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

15.716041246s ago: executing program 9 (id=4631):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280))

15.698932726s ago: executing program 9 (id=4633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0)

15.666560586s ago: executing program 9 (id=4636):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x189000, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
lsetxattr$trusted_overlay_redirect(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x2)

15.483213827s ago: executing program 9 (id=4638):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f00fba2e66370066b9800000c00f326635010000000f30660f38005b6066660fc7b4701bba2100b8a759ef66b92800000066b80c00000066ba000000000f30660f38803bd287ad000f00150f09", 0x4d}], 0x1, 0x33, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15.271317458s ago: executing program 9 (id=4643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xddf, r0, 0x4}, 0x38)

15.271048568s ago: executing program 37 (id=4643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xddf, r0, 0x4}, 0x38)

3.074393832s ago: executing program 4 (id=5096):
getsockopt(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.73541234s ago: executing program 8 (id=5135):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = io_uring_setup(0xad5, &(0x7f0000000040)={0x0, 0xfffffffc})
close(r0)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)

1.464053292s ago: executing program 1 (id=5156):
syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.463838032s ago: executing program 1 (id=5157):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x0)

1.463608282s ago: executing program 1 (id=5158):
unshare(0x400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10)

1.411335422s ago: executing program 1 (id=5160):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000)

1.361049452s ago: executing program 4 (id=5165):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000200), 0xfffffecc)
splice(r1, 0x0, r0, 0x0, 0x8001, 0x0)

1.346548273s ago: executing program 1 (id=5167):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000af802c082505a4a47e9e01020301090224"], 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x10000000)

887.364365ms ago: executing program 8 (id=5184):
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

856.208436ms ago: executing program 8 (id=5185):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
llistxattr(0x0, 0x0, 0x0)

855.723496ms ago: executing program 8 (id=5186):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46040700030d0000000000000003000300060000000903000038000000000000000e00000000002000030005000000ff0f0000000002000000000000800900000000000100010000002d09000004000000fa00000000000068144f5b0003000000000400000700000002000000000000000d00000003"], 0x98)
close(r0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

843.565666ms ago: executing program 8 (id=5187):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064766d7270310000000001000000000008000a00000046"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0)

763.893506ms ago: executing program 8 (id=5191):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
writev(r1, &(0x7f0000000740)=[{&(0x7f00000003c0)='O', 0x1}], 0x1)

625.746107ms ago: executing program 7 (id=5202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

605.982997ms ago: executing program 0 (id=5203):
creat(&(0x7f00000002c0)='./file0\x00', 0x6)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x808410, 0x0)

605.717647ms ago: executing program 7 (id=5204):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)

557.166137ms ago: executing program 7 (id=5205):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

556.948707ms ago: executing program 0 (id=5206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0)

556.780797ms ago: executing program 7 (id=5207):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0x4)

556.676537ms ago: executing program 7 (id=5208):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x4dd9, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10)
recvfrom$unix(r0, 0x0, 0x0, 0x12122, 0x0, 0x0)

556.567207ms ago: executing program 0 (id=5209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0)

556.366137ms ago: executing program 7 (id=5210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10)
exit(0x0)

503.255908ms ago: executing program 0 (id=5211):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

503.006808ms ago: executing program 0 (id=5212):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))

502.854148ms ago: executing program 0 (id=5213):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000180)=0x9ebb, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffff3ff3e, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))

502.613228ms ago: executing program 4 (id=5214):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x54, r2, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x54}}, 0x4000040)

502.474478ms ago: executing program 4 (id=5215):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f821ffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10)

474.821128ms ago: executing program 4 (id=5216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

457.540648ms ago: executing program 4 (id=5217):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, 0x0, 0x6a)
fcntl$setpipe(r1, 0x407, 0x0)
ppoll(&(0x7f0000000480)=[{r1, 0x421}], 0x1, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1)

0s ago: executing program 1 (id=5218):
r0 = socket$netlink(0x10, 0x3, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='cmdline\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 attempt to access beyond end of device
[  139.608632][ T9068] loop6: rw=3, sector=226, nr_sectors = 6 limit=128
[  139.622016][ T9068] syz.6.3803: attempt to access beyond end of device
[  139.622016][ T9068] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128
[  139.920100][    T6] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  140.101156][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.112435][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.122589][    T6] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  140.131834][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.140498][    T6] usb 7-1: config 0 descriptor??
[  140.165264][ T9096] raw_sendmsg: syz.4.3816 forgot to set AF_INET. Fix it!
[  140.190131][ T9101] loop4: detected capacity change from 0 to 256
[  140.271695][ T9110] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[  140.279539][ T9110] SELinux: failed to load policy
[  140.359435][ T9122] loop8: detected capacity change from 0 to 2048
[  140.391456][ T9122] Alternate GPT is invalid, using primary GPT.
[  140.397741][ T9122]  loop8: p1 p2 p3
[  140.480139][   T19] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  140.552411][ T9137] netlink: 'syz.0.3833': attribute type 4 has an invalid length.
[  140.561447][    T6] sony 0003:054C:024B.001A: unexpected long global item
[  140.568609][    T6] sony 0003:054C:024B.001A: parse failed
[  140.574514][    T6] sony: probe of 0003:054C:024B.001A failed with error -22
[  140.592560][ T9139] netlink: 'syz.7.3834': attribute type 4 has an invalid length.
[  140.613626][ T9145] loop7: detected capacity change from 0 to 128
[  140.621400][ T9145] EXT4-fs (loop7): Test dummy encryption mode enabled
[  140.629349][ T9145] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  140.641715][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  140.641729][   T28] audit: type=1400 audit(140.621:6517): avc:  denied  { write } for  pid=9143 comm="syz.7.3836" name="file1" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  140.669551][   T28] audit: type=1400 audit(140.621:6518): avc:  denied  { add_name } for  pid=9143 comm="syz.7.3836" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  140.689704][   T28] audit: type=1400 audit(140.621:6519): avc:  denied  { rename } for  pid=9143 comm="syz.7.3836" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  140.712055][   T28] audit: type=1400 audit(140.621:6520): avc:  denied  { remove_name } for  pid=9143 comm="syz.7.3836" name="file2" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  140.712637][ T7168] EXT4-fs (loop7): unmounting filesystem.
[  140.733921][   T28] audit: type=1400 audit(140.621:6521): avc:  denied  { unlink } for  pid=9143 comm="syz.7.3836" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  140.762605][   T19] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  140.767260][   T60] usb 7-1: USB disconnect, device number 4
[  140.773539][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.773564][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.799927][   T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  140.818689][   T19] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  140.829171][   T19] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  140.838356][   T19] usb 5-1: Manufacturer: syz
[  140.844181][ T9157] tun0: tun_chr_ioctl cmd 1074025675
[  140.844783][   T19] usb 5-1: config 0 descriptor??
[  140.849712][ T9159] loop0: detected capacity change from 0 to 1024
[  140.854808][ T9157] tun0: persist enabled
[  140.862058][ T9159] EXT4-fs: Ignoring removed i_version option
[  140.870015][ T9157] tun0: tun_chr_ioctl cmd 1074025675
[  140.871110][ T9159] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.876459][ T9157] tun0: persist disabled
[  140.882974][ T9159] EXT4-fs: Ignoring removed nobh option
[  140.892882][ T9159] EXT4-fs: Ignoring removed bh option
[  140.898702][ T9159] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  140.921786][ T9159] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  140.939636][   T28] audit: type=1400 audit(140.911:6522): avc:  denied  { map } for  pid=9158 comm="syz.0.3843" path="/742/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  140.964049][  T285] EXT4-fs (loop0): unmounting filesystem.
[  141.084510][   T28] audit: type=1400 audit(141.061:6523): avc:  denied  { write } for  pid=9171 comm="syz.0.3849" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  141.150140][ T9176] device batadv_slave_1 entered promiscuous mode
[  141.156942][ T9175] device batadv_slave_1 left promiscuous mode
[  141.202418][   T28] audit: type=1400 audit(141.181:6524): avc:  denied  { relabelfrom } for  pid=9183 comm="syz.0.3854" name="NETLINK" dev="sockfs" ino=54099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  141.226278][   T28] audit: type=1400 audit(141.181:6525): avc:  denied  { relabelto } for  pid=9183 comm="syz.0.3854" name="NETLINK" dev="sockfs" ino=54099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  141.267675][   T19] appleir 0003:05AC:8243.001B: unknown main item tag 0x0
[  141.275253][   T19] appleir 0003:05AC:8243.001B: No inputs registered, leaving
[  141.275437][   T28] audit: type=1400 audit(141.251:6526): avc:  denied  { bind } for  pid=9187 comm="syz.0.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  141.284030][   T19] appleir 0003:05AC:8243.001B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  141.340853][ T9194] loop8: detected capacity change from 0 to 1024
[  141.348979][   T19] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  141.356563][ T9198] loop0: detected capacity change from 0 to 1024
[  141.357160][   T19] hid-generic 0000:0000:0000.001C: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  141.363645][ T9198] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.374491][ T9194] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  141.379738][ T9198] EXT4-fs: Mount option(s) incompatible with ext2
[  141.402006][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  141.550954][   T19] usb 5-1: USB disconnect, device number 17
[  141.654274][ T9234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9234 comm=syz.8.3875
[  141.781981][ T9240] bridge0: port 3(syz_tun) entered blocking state
[  141.788506][ T9240] bridge0: port 3(syz_tun) entered disabled state
[  141.788977][ T9240] device syz_tun entered promiscuous mode
[  141.789079][ T9240] bridge0: port 3(syz_tun) entered blocking state
[  141.807573][ T9240] bridge0: port 3(syz_tun) entered forwarding state
[  141.878885][ T9246] loop8: detected capacity change from 0 to 128
[  142.009367][ T9261] loop0: detected capacity change from 0 to 256
[  142.016559][ T9261] exfat: Deprecated parameter 'namecase'
[  142.024940][ T9261] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  142.056131][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3888'.
[  142.108903][ T9273] loop0: detected capacity change from 0 to 256
[  142.117516][ T9273] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  142.131792][ T9273] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008)
[  142.141033][ T9273] exFAT-fs (loop0): Filesystem has been set read-only
[  142.187866][ T9280] incfs: Options parsing error. -22
[  142.193157][   T19] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  142.196525][ T9280] incfs: mount failed -22
[  142.253672][ T9296] loop4: detected capacity change from 0 to 512
[  142.267862][ T9296] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.3904: invalid block
[  142.280118][ T9296] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3904: invalid indirect mapped block 10 (level 1)
[  142.299074][ T9296] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3904: invalid indirect mapped block 8 (level 1)
[  142.314576][ T9296] EXT4-fs (loop4): 1 truncate cleaned up
[  142.320455][ T9296] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  142.351680][  T286] EXT4-fs (loop4): unmounting filesystem.
[  142.381185][   T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.400069][   T19] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  142.437390][   T19] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  142.460097][   T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.480314][   T19] usb 9-1: config 0 descriptor??
[  142.888257][   T19] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  142.898832][   T19] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[  142.909595][   T19] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  143.007922][ T9355] loop6: detected capacity change from 0 to 8192
[  143.140302][ T9370] loop0: detected capacity change from 0 to 8192
[  143.156651][ T9370] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  143.165662][ T9370] FAT-fs (loop0): Filesystem has been set read-only
[  143.172778][    T6] usb 9-1: USB disconnect, device number 4
[  143.686133][ T9385] loop8: detected capacity change from 0 to 256
[  143.692634][ T9385] exfat: Deprecated parameter 'namecase'
[  143.700708][ T9385] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  143.733139][ T9388] loop8: detected capacity change from 0 to 512
[  143.741457][ T9388] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.3943: casefold flag without casefold feature
[  143.754207][ T9388] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3943: couldn't read orphan inode 15 (err -117)
[  143.766188][ T9388] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  143.782815][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  143.793762][ T9392] syz.8.3944[9392] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.793807][ T9392] syz.8.3944[9392] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  144.075551][ T9428] loop6: detected capacity change from 0 to 512
[  144.095749][ T9428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  144.107143][ T9428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  144.111393][ T9430] loop7: detected capacity change from 0 to 8192
[  144.117312][ T9428] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3961: invalid block
[  144.130486][ T9430] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  144.142575][ T9428] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3961: invalid indirect mapped block 4294967295 (level 1)
[  144.159722][ T9430] FAT-fs (loop7): Filesystem has been set read-only
[  144.167540][ T9428] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3961: invalid indirect mapped block 4294967295 (level 1)
[  144.182001][ T9428] EXT4-fs (loop6): 2 truncates cleaned up
[  144.188982][ T9428] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  144.213685][ T9428] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3961: bg 0: block 5: invalid block bitmap
[  144.226151][ T9428] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  144.272203][ T9441] loop4: detected capacity change from 0 to 2048
[  144.283875][ T6163] EXT4-fs (loop6): unmounting filesystem.
[  144.349810][  T286] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  144.379638][ T9464] loop8: detected capacity change from 0 to 512
[  144.392349][ T9464] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.400024][ T9464] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.408029][ T9464] EXT4-fs (loop8): Test dummy encryption mode enabled
[  144.414862][ T9464] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  144.426005][ T9464] EXT4-fs (loop8): 1 truncate cleaned up
[  144.435096][ T9464] fscrypt: AES-256-XTS using blk-crypto-fallback
[  144.680097][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  144.720097][   T39] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  144.861150][   T24] usb 7-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.871134][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  144.877760][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  144.886825][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.895314][   T24] usb 7-1: config 0 descriptor??
[  144.901384][   T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.911631][   T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.921902][   T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  144.930989][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.939010][   T39] usb 5-1: Product: syz
[  144.943192][   T39] usb 5-1: Manufacturer: syz
[  144.947827][   T39] usb 5-1: SerialNumber: syz
[  145.155137][   T39] usb 5-1: 0:2 : does not exist
[  145.162258][   T39] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  145.172683][   T39] usb 5-1: USB disconnect, device number 18
[  145.247284][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  145.253694][ T9489] Bluetooth: hci0: Frame reassembly failed (-84)
[  145.303400][   T24] lg-g15 0003:046D:C225.001E: item fetching failed at offset 0/2
[  145.311354][   T24] lg-g15: probe of 0003:046D:C225.001E failed with error -22
[  145.348308][ T9495] loop8: detected capacity change from 0 to 128
[  145.471046][ T9499] kvm: apic: phys broadcast and lowest prio
[  145.504907][   T39] usb 7-1: USB disconnect, device number 5
[  146.016811][ T9519] input: syz0 as /devices/virtual/input/input30
[  146.039147][ T9521] loop6: detected capacity change from 0 to 2048
[  146.064428][   T28] kauditd_printk_skb: 2048 callbacks suppressed
[  146.064441][   T28] audit: type=1400 audit(146.041:8575): avc:  denied  { mounton } for  pid=9520 comm="syz.6.4001" path="/388/file2/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  146.073019][ T6163] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /388/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.115827][ T6163] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.136209][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.147865][ T6163] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /388/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.170545][ T6163] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.190923][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.202467][ T6163] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /388/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.225012][ T6163] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.245349][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.256886][ T6163] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /388/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.279441][ T6163] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.299793][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.311359][ T6163] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /388/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.333941][ T6163] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0
[  146.354283][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.366258][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.378132][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.389995][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.401975][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.413876][ T6163] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..'
[  146.485309][ T9526] loop8: detected capacity change from 0 to 512
[  146.493039][ T9526] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  146.502087][ T9526] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  146.511296][ T9526] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  146.519326][ T9526] System zones: 0-2, 18-18, 34-34
[  146.524975][ T9526] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  146.542598][ T9526] EXT4-fs (loop8): 1 truncate cleaned up
[  146.592069][ T9531] netlink: 'syz.8.4005': attribute type 1 has an invalid length.
[  146.599868][ T9531] netlink: 'syz.8.4005': attribute type 2 has an invalid length.
[  146.609058][ T9531] netlink: 'syz.8.4005': attribute type 1 has an invalid length.
[  146.621214][ T9531] netlink: 'syz.8.4005': attribute type 2 has an invalid length.
[  146.639821][ T9534] loop4: detected capacity change from 0 to 2048
[  146.677216][ T9534] Alternate GPT is invalid, using primary GPT.
[  146.687699][ T9534]  loop4: p2 p3 p7
[  146.752817][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.759969][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.767465][ T9539] device bridge_slave_0 entered promiscuous mode
[  146.777938][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.785060][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.787568][ T9556] support for the xor transformation has been removed.
[  146.792751][ T9539] device bridge_slave_1 entered promiscuous mode
[  146.855919][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.862967][ T9539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.870214][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.877237][ T9539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.901944][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.909551][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.918299][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.929215][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.937542][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.944597][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.958303][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.967032][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.974086][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.981453][   T28] audit: type=1400 audit(146.951:8576): avc:  denied  { nlmsg_read } for  pid=9562 comm="syz.0.4020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  147.006302][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.016527][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.024580][ T9567] loop0: detected capacity change from 0 to 512
[  147.033747][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.044245][ T9567] EXT4-fs error (device loop0): ext4_quota_enable:6993: comm syz.0.4022: Bad quota inum: 1, type: 2
[  147.055412][ T9567] EXT4-fs warning (device loop0): ext4_enable_quotas:7041: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix.
[  147.061027][ T9539] device veth0_vlan entered promiscuous mode
[  147.076443][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.080649][ T9567] EXT4-fs (loop0): mount failed
[  147.085071][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.096417][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.104275][   T10] device bridge_slave_1 left promiscuous mode
[  147.110543][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.117791][   T10] device bridge_slave_0 left promiscuous mode
[  147.123967][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.133249][   T10] device veth1_macvtap left promiscuous mode
[  147.140141][   T10] device veth0_vlan left promiscuous mode
[  147.161583][ T9573] loop4: detected capacity change from 0 to 16
[  147.168227][ T9573] erofs: (device loop4): mounted with root inode @ nid 36.
[  147.269934][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.279684][ T9539] device veth1_macvtap entered promiscuous mode
[  147.290094][ T2942] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  147.290135][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[  147.300113][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.322951][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  147.338325][ T9584] futex_wake_op: syz.7.4029 tries to shift op by 32; fix this program
[  147.379851][ T9586] loop9: detected capacity change from 0 to 2048
[  147.386973][ T9588] device veth3 entered promiscuous mode
[  147.426146][    T8] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  147.441115][    T8] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 65793 with max blocks 1 with error 28
[  147.454396][    T8] EXT4-fs (loop9): This should not happen!! Data will be lost
[  147.454396][    T8] 
[  147.464229][    T8] EXT4-fs (loop9): Total free blocks count 0
[  147.470316][    T8] EXT4-fs (loop9): Free/Dirty block details
[  147.476331][    T8] EXT4-fs (loop9): free_blocks=66060288
[  147.481995][    T8] EXT4-fs (loop9): dirty_blocks=16
[  147.487354][    T8] EXT4-fs (loop9): Block reservation details
[  147.493429][    T8] EXT4-fs (loop9): i_reserved_data_blocks=1
[  147.522532][ T9604] loop7: detected capacity change from 0 to 128
[  147.529347][ T9604] EXT4-fs (loop7): Test dummy encryption mode enabled
[  147.546533][   T28] audit: type=1400 audit(147.521:8577): avc:  denied  { rename } for  pid=9602 comm="syz.7.4036" name="file2" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  147.568459][   T28] audit: type=1400 audit(147.521:8578): avc:  denied  { reparent } for  pid=9602 comm="syz.7.4036" name="file2" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  147.594358][   T28] audit: type=1400 audit(147.521:8579): avc:  denied  { rmdir } for  pid=9602 comm="syz.7.4036" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  147.747168][ T9620] loop8: detected capacity change from 0 to 40427
[  147.754538][ T9620] F2FS-fs (loop8): invalid crc value
[  147.761337][ T9620] F2FS-fs (loop8): Found nat_bits in checkpoint
[  147.789091][ T9620] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  147.801736][ T9620] syz.8.4043: attempt to access beyond end of device
[  147.801736][ T9620] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.871962][ T9629] tipc: Started in network mode
[  147.876875][ T9629] tipc: Node identity -:, cluster identity 4711
[  147.883237][ T9629] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  148.158833][   T28] audit: type=1400 audit(148.131:8580): avc:  denied  { ioctl } for  pid=9653 comm="syz.8.4057" path="socket:[56303]" dev="sockfs" ino=56303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  148.280313][ T9658] tipc: Cannot configure node identity twice
[  148.312891][ T9665] block device autoloading is deprecated and will be removed.
[  148.511344][   T28] audit: type=1400 audit(148.491:8581): avc:  denied  { search } for  pid=9683 comm="syz.4.4070" name="/" dev="configfs" ino=14195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  148.583034][ T9695] device batadv_slave_1 entered promiscuous mode
[  148.589850][ T9695] device batadv_slave_1 left promiscuous mode
[  148.615658][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4078'.
[  148.650987][   T28] audit: type=1400 audit(148.631:8582): avc:  denied  { ioctl } for  pid=9706 comm="syz.8.4081" path="socket:[56495]" dev="sockfs" ino=56495 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  148.685119][ T9713] xt_bpf: check failed: parse error
[  148.691438][ T9715] usb usb8: usbfs: process 9715 (syz.4.4085) did not claim interface 0 before use
[  148.743946][ T9724] device ip6gretap0 entered promiscuous mode
[  148.749934][ T9724] device macsec1 entered promiscuous mode
[  148.756318][ T9724] device ip6gretap0 left promiscuous mode
[  148.893813][ T9734] loop8: detected capacity change from 0 to 512
[  148.901789][ T9734] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.4093: bad orphan inode 15
[  148.912020][ T9734] ext4_test_bit(bit=14, block=5) = 0
[  148.990112][ T2088] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  149.100133][   T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  149.170103][ T2088] usb 5-1: Using ep0 maxpacket: 32
[  149.176339][ T2088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.187230][ T2088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.196986][ T2088] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  149.206041][ T2088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.214674][ T2088] usb 5-1: config 0 descriptor??
[  149.281273][   T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.292360][   T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.302215][   T60] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  149.311391][   T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.320503][   T60] usb 10-1: config 0 descriptor??
[  149.623807][ T2088] savu 0003:1E7D:2D5A.001F: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  149.728258][   T60] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0
[  149.735815][   T60] cp2112 0003:10C4:EA90.0020: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0
[  149.900922][ T2088] usb 5-1: USB disconnect, device number 19
[  149.927978][   T60] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE
[  150.021163][ T9764] loop8: detected capacity change from 0 to 512
[  150.027712][ T9764] ext4: Unknown parameter 'fowner>18446744073709551615'
[  150.135483][   T60] cp2112 0003:10C4:EA90.0020: error requesting SMBus config
[  150.143224][   T60] cp2112: probe of 0003:10C4:EA90.0020 failed with error -71
[  150.151512][   T60] usb 10-1: USB disconnect, device number 2
[  150.421949][ T9782] input: syz1 as /devices/virtual/input/input31
[  150.492402][ T9785] loop4: detected capacity change from 0 to 256
[  150.498836][ T9785] exfat: Deprecated parameter 'namecase'
[  150.504506][ T9785] exfat: Deprecated parameter 'utf8'
[  150.512578][ T9785] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  150.591445][ T9793] loop4: detected capacity change from 0 to 1024
[  150.617485][ T9798] loop4: detected capacity change from 0 to 512
[  150.687612][ T9811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4126'.
[  150.700638][ T2088] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  150.713496][   T28] audit: type=1400 audit(150.691:8583): avc:  denied  { read } for  pid=9814 comm="syz.7.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  150.809799][ T9813] loop4: detected capacity change from 0 to 40427
[  150.817719][ T9813] F2FS-fs (loop4): invalid crc value
[  150.823602][ T9820] SELinux:  policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c
[  150.824493][ T9813] F2FS-fs (loop4): Found nat_bits in checkpoint
[  150.833927][ T9820] SELinux: failed to load policy
[  150.869529][ T9813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  150.890153][ T2088] usb 9-1: Using ep0 maxpacket: 32
[  150.899243][ T2088] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  150.907768][ T2088] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  150.907959][  T286] syz-executor: attempt to access beyond end of device
[  150.907959][  T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.916456][ T2088] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  150.939244][ T2088] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  150.949296][ T2088] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  150.958962][ T2088] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  150.971985][ T2088] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  150.981069][ T2088] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.995772][ T2088] usb 9-1: config 0 descriptor??
[  151.045417][   T28] audit: type=1400 audit(151.021:8584): avc:  denied  { unlink } for  pid=9833 comm="syz.4.4135" name="#8" dev="tmpfs" ino=4847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  151.073098][ T9834] overlayfs: conflicting lowerdir path
[  151.090902][ T9834] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  151.213333][ T2088] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  151.365657][ T9850] loop0: detected capacity change from 0 to 40427
[  151.373625][ T9850] F2FS-fs (loop0): invalid crc value
[  151.380159][ T9850] F2FS-fs (loop0): Found nat_bits in checkpoint
[  151.400565][ T9865] tmpfs: Unknown parameter 'nolazytime1'
[  151.417431][ T9850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  151.444731][   T28] audit: type=1400 audit(151.421:8585): avc:  denied  { shutdown } for  pid=9871 comm="syz.7.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  151.461944][ T9874] loop7: detected capacity change from 0 to 512
[  151.464872][   T28] audit: type=1400 audit(151.421:8586): avc:  denied  { write } for  pid=9871 comm="syz.7.4151" path="socket:[57790]" dev="sockfs" ino=57790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  151.473643][ T9850] syz.0.4142: attempt to access beyond end of device
[  151.473643][ T9850] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  151.510312][ T9874] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  151.525701][  T285] syz-executor: attempt to access beyond end of device
[  151.525701][  T285] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  151.544818][ T9876] loop9: detected capacity change from 0 to 512
[  151.640091][ T2252] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  151.698845][ T9901] loop0: detected capacity change from 0 to 512
[  151.705913][ T9901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  151.723709][   T28] audit: type=1400 audit(151.701:8587): avc:  denied  { relabelto } for  pid=9900 comm="syz.0.4163" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  151.724380][ T9901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  151.820145][ T2252] usb 5-1: Using ep0 maxpacket: 16
[  151.826458][ T2252] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.837444][ T2252] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.847243][ T2252] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  151.860100][ T2252] usb 5-1: config 0 interface 0 has no altsetting 0
[  151.866705][ T2252] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  151.875736][ T2252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.884544][ T2252] usb 5-1: config 0 descriptor??
[  151.910109][   T19] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  152.092606][   T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  152.103637][   T19] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  152.112760][   T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.121517][   T19] usb 10-1: config 0 descriptor??
[  152.126911][ T9893] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[  152.294320][ T2252] hid-generic 0003:045E:05DA.0021: unknown main item tag 0x0
[  152.301986][ T2252] hid-generic 0003:045E:05DA.0021: unknown main item tag 0x0
[  152.309376][ T2252] hid-generic 0003:045E:05DA.0021: unknown main item tag 0x0
[  152.316765][ T2252] hid-generic 0003:045E:05DA.0021: ignoring exceeding usage max
[  152.325840][ T2252] hid-generic 0003:045E:05DA.0021: unknown main item tag 0x0
[  152.333608][ T2252] hid-generic 0003:045E:05DA.0021: unknown main item tag 0x0
[  152.341019][ T2252] hid-generic 0003:045E:05DA.0021: unbalanced collection at end of report description
[  152.350762][ T2252] hid-generic: probe of 0003:045E:05DA.0021 failed with error -22
[  152.506715][ T2252] usb 5-1: USB disconnect, device number 20
[  152.536898][   T19] usbhid 10-1:0.0: can't add hid device: -71
[  152.542977][   T19] usbhid: probe of 10-1:0.0 failed with error -71
[  152.549953][   T19] usb 10-1: USB disconnect, device number 3
[  153.125782][ T9934] loop0: detected capacity change from 0 to 512
[  153.140154][ T9934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  153.170544][ T9934] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.4178: bad orphan inode 131083
[  153.417987][   T19] usb 9-1: USB disconnect, device number 5
[  153.427341][   T19] usblp0: removed
[  153.482423][ T9944] loop0: detected capacity change from 0 to 40427
[  153.489673][ T9944] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  153.500797][ T9944] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  153.509378][ T9944] F2FS-fs (loop0): heap/no_heap options were deprecated
[  153.517518][ T9944] F2FS-fs (loop0): invalid crc value
[  153.529859][ T9944] F2FS-fs (loop0): Found nat_bits in checkpoint
[  153.544225][   T28] audit: type=1400 audit(153.521:8588): avc:  denied  { bind } for  pid=9953 comm="syz.4.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  153.603584][ T9944] F2FS-fs (loop0): Start checkpoint disabled!
[  153.626759][ T9944] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  153.640085][ T9944] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  153.744636][  T313] kworker/u4:3: attempt to access beyond end of device
[  153.744636][  T313] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  153.769662][ T9959] netlink: 'syz.4.4188': attribute type 280 has an invalid length.
[  153.812902][ T9961] loop4: detected capacity change from 0 to 512
[  153.834281][ T9961] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  153.845673][   T19] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  153.883442][ T9961] EXT4-fs warning (device loop4): ext4_group_add:1723: Can't resize non-sparse filesystem further
[  153.984799][    T6] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  153.992896][    T6] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  154.041191][   T19] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  154.052059][   T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.067319][   T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.078439][   T19] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  154.093454][ T9971] hid-generic 0000:0000:0000.0022: pid 9971 passed too short report
[  154.101798][   T19] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  154.111694][   T19] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  154.113972][ T9980] loop0: detected capacity change from 0 to 128
[  154.120079][   T19] usb 9-1: Manufacturer: syz
[  154.149606][   T19] usb 9-1: config 0 descriptor??
[  154.555470][ T9990] loop9: detected capacity change from 0 to 131072
[  154.562487][ T9990] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  154.570613][ T9990] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  154.579518][ T9990] F2FS-fs (loop9): invalid crc value
[  154.586116][   T19] appleir 0003:05AC:8243.0023: unknown main item tag 0x0
[  154.593455][   T19] appleir 0003:05AC:8243.0023: No inputs registered, leaving
[  154.602450][   T19] appleir 0003:05AC:8243.0023: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[  154.618639][ T9990] F2FS-fs (loop9): Found nat_bits in checkpoint
[  154.638882][   T28] audit: type=1400 audit(154.601:8589): avc:  denied  { write } for  pid=10008 comm="syz.7.4206" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  154.664694][ T9990] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  154.671863][ T9990] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  154.804554][   T28] audit: type=1400 audit(154.781:8590): avc:  denied  { append } for  pid=9945 comm="syz.8.4182" name="hiddev0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  154.866060][T10015] loop4: detected capacity change from 0 to 40427
[  154.872984][T10015] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  154.880775][T10015] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  154.891322][   T24] usb 9-1: USB disconnect, device number 6
[  154.891519][T10015] F2FS-fs (loop4): Found nat_bits in checkpoint
[  154.933248][T10015] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  154.940392][T10015] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  155.034660][T10031] loop9: detected capacity change from 0 to 256
[  155.043389][T10031] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  155.048946][T10033] loop4: detected capacity change from 0 to 2048
[  155.061122][   T28] audit: type=1326 audit(155.041:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.9.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  155.084912][   T28] audit: type=1326 audit(155.041:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.9.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  155.108095][   T28] audit: type=1326 audit(155.071:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.9.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  155.130287][T10033] fs-verity: sha512 using implementation "sha512-avx2"
[  155.131191][   T28] audit: type=1326 audit(155.071:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.9.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  155.169970][T10038] loop9: detected capacity change from 0 to 512
[  155.176815][T10038] EXT4-fs (loop9): Test dummy encryption mode enabled
[  155.183664][T10038] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  155.195254][T10038] EXT4-fs (loop9): 1 truncate cleaned up
[  155.217877][T10043] loop9: detected capacity change from 0 to 256
[  155.427168][T10053] loop8: detected capacity change from 0 to 128
[  155.446508][T10055] loop9: detected capacity change from 0 to 512
[  155.500009][T10061] loop7: detected capacity change from 0 to 256
[  155.501050][T10059] input: syz0 as /devices/virtual/input/input32
[  155.661532][T10063] loop7: detected capacity change from 0 to 40427
[  155.662277][T10063] F2FS-fs (loop7): fault_injection options not supported
[  155.675118][T10063] F2FS-fs (loop7): fault_type options not supported
[  155.681737][T10063] F2FS-fs (loop7): Image doesn't support compression
[  155.681789][T10063] F2FS-fs (loop7): Image doesn't support compression
[  155.682468][T10063] F2FS-fs (loop7): invalid crc value
[  155.700954][   T19] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  155.702367][T10063] F2FS-fs (loop7): Found nat_bits in checkpoint
[  155.744245][T10063] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  155.772934][ T7168] syz-executor: attempt to access beyond end of device
[  155.772934][ T7168] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  155.790110][    T6] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  155.880085][   T19] usb 9-1: Using ep0 maxpacket: 32
[  155.886277][   T19] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11
[  155.886311][   T19] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26623, setting to 1024
[  155.909543][   T19] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  155.909572][   T19] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  155.909594][   T19] usb 9-1: Product: syz
[  155.909608][   T19] usb 9-1: Manufacturer: syz
[  155.927810][T10053] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  155.928261][   T19] hub 9-1:4.0: USB hub found
[  155.981135][    T6] usb 10-1: config 0 has an invalid interface number: 39 but max is 0
[  155.981164][    T6] usb 10-1: config 0 has no interface number 0
[  155.981205][    T6] usb 10-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  156.006642][    T6] usb 10-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a
[  156.006667][    T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.006686][    T6] usb 10-1: Product: syz
[  156.006734][    T6] usb 10-1: Manufacturer: syz
[  156.006749][    T6] usb 10-1: SerialNumber: syz
[  156.007444][    T6] usb 10-1: config 0 descriptor??
[  156.035164][T10072] loop7: detected capacity change from 0 to 40427
[  156.035656][T10072] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  156.035678][T10072] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  156.035807][T10072] F2FS-fs (loop7): heap/no_heap options were deprecated
[  156.036453][T10072] F2FS-fs (loop7): invalid crc value
[  156.051473][T10072] F2FS-fs (loop7): Found nat_bits in checkpoint
[  156.085283][T10072] F2FS-fs (loop7): Start checkpoint disabled!
[  156.105528][T10072] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  156.112869][T10072] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  156.129324][   T19] hub 9-1:4.0: 2 ports detected
[  156.170124][    T8] kworker/u4:0: attempt to access beyond end of device
[  156.170124][    T8] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  156.221718][    T6] usb 10-1: USB disconnect, device number 4
[  156.329746][   T19] hub 9-1:4.0: hub_hub_status failed (err = -71)
[  156.336150][   T19] hub 9-1:4.0: config failed, can't get hub status (err -71)
[  156.370312][   T19] usb 9-1: USB disconnect, device number 7
[  156.570247][ T2982] Bluetooth: hci0: command 0x1003 tx timeout
[  156.570274][ T9582] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  156.602962][T10088] loop0: detected capacity change from 0 to 512
[  156.771240][T10105] tmpfs: Unknown parameter 'n'
[  157.106284][T10101] loop9: detected capacity change from 0 to 131072
[  157.118971][T10125] loop8: detected capacity change from 0 to 4096
[  157.130570][T10101] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[  157.137267][T10101] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  157.146477][T10101] F2FS-fs (loop9): invalid crc value
[  157.163574][T10101] F2FS-fs (loop9): Found nat_bits in checkpoint
[  157.199724][T10101] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  157.207131][T10101] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  157.334156][T10127] loop0: detected capacity change from 0 to 131072
[  157.343030][T10127] F2FS-fs (loop0): invalid crc value
[  157.350025][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  157.358884][ T7179] EXT4-fs unmount: 39 callbacks suppressed
[  157.358899][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  157.361566][   T28] audit: type=1400 audit(157.321:8597): avc:  denied  { write } for  pid=10129 comm="syz.4.4253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  157.392485][T10127] F2FS-fs (loop0): Found nat_bits in checkpoint
[  157.428950][T10127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  157.739339][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  157.762751][T10173] kernel profiling enabled (shift: 5)
[  157.950407][T10192] loop9: detected capacity change from 0 to 40427
[  157.957639][T10192] F2FS-fs (loop9): fault_injection options not supported
[  157.965220][T10192] F2FS-fs (loop9): Image doesn't support compression
[  157.972921][T10192] F2FS-fs (loop9): invalid crc value
[  157.979297][T10192] F2FS-fs (loop9): Found nat_bits in checkpoint
[  158.006961][T10192] F2FS-fs (loop9): Start checkpoint disabled!
[  158.014141][T10192] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  158.035604][T10192] syz.9.4277: attempt to access beyond end of device
[  158.035604][T10192] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  158.051002][T10192] syz.9.4277: attempt to access beyond end of device
[  158.051002][T10192] loop9: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  158.080572][    T8] kworker/u4:0: attempt to access beyond end of device
[  158.080572][    T8] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  158.199838][ T2252] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  158.207725][ T2252] hid-generic 0000:0000:0000.0024: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  158.295412][T10209] loop9: detected capacity change from 0 to 256
[  158.304424][T10209] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  158.318763][T10209] exFAT-fs (loop9): hint_cluster is invalid (17)
[  158.447206][T10231] loop8: detected capacity change from 0 to 256
[  158.680161][T10237] device bridge0 entered promiscuous mode
[  158.686186][T10236] device bridge0 left promiscuous mode
[  158.730538][ T2252] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  158.843957][T10248] xt_hashlimit: size too large, truncated to 1048576
[  158.886579][T10250] loop0: detected capacity change from 0 to 128
[  158.902784][T10250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  158.912346][ T2252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.927711][ T2252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.944039][  T285] EXT4-fs (loop0): unmounting filesystem.
[  158.949827][ T2252] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  158.964053][ T2252] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  158.978346][ T2252] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.987660][ T2252] usb 10-1: config 0 descriptor??
[  159.034371][T10261] loop0: detected capacity change from 0 to 512
[  159.041016][T10261] EXT4-fs: Ignoring removed orlov option
[  159.046981][T10261] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  159.058682][T10261] EXT4-fs (loop0): 1 orphan inode deleted
[  159.064480][T10261] EXT4-fs (loop0): 1 truncate cleaned up
[  159.070176][T10261] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  159.083532][T10261] EXT4-fs error (device loop0): ext4_check_all_de:666: inode #12: block 7: comm syz.0.4308: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0
[  159.103349][T10261] EXT4-fs (loop0): Remounting filesystem read-only
[  159.111229][T10261] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.0.4308: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  159.132182][T10261] EXT4-fs (loop0): Remounting filesystem read-only
[  159.138690][T10261] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1804: Corrupt filesystem
[  159.148265][T10261] EXT4-fs (loop0): Remounting filesystem read-only
[  159.161348][  T285] EXT4-fs (loop0): unmounting filesystem.
[  159.175599][T10268] loop0: detected capacity change from 0 to 512
[  159.182173][T10268] EXT4-fs: Ignoring removed nobh option
[  159.189508][T10268] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  159.206647][  T285] EXT4-fs (loop0): unmounting filesystem.
[  159.402758][ T2252] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd
[  159.411781][ T2252] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving
[  159.420496][ T2252] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  159.450842][T10299] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.460081][T10299] FAT-fs (loop15): unable to read boot sector
[  159.532021][   T28] audit: type=1400 audit(159.511:8598): avc:  denied  { setopt } for  pid=10310 comm="syz.0.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  159.535705][T10313] loop7: detected capacity change from 0 to 1024
[  159.558648][T10313] EXT4-fs: Ignoring removed orlov option
[  159.564605][T10313] EXT4-fs: Ignoring removed nomblk_io_submit option
[  159.582645][T10313] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  159.603750][ T7168] EXT4-fs (loop7): unmounting filesystem.
[  159.631061][T10324] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  159.664154][T10331] netlink: 'syz.7.4339': attribute type 2 has an invalid length.
[  159.711847][ T2088] usb 10-1: USB disconnect, device number 5
[  159.770114][ T9582] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  159.770147][ T2982] Bluetooth: hci0: command 0x1003 tx timeout
[  159.857356][T10348] loop7: detected capacity change from 0 to 1024
[  159.914653][T10348] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  159.935457][T10348] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  159.979481][T10348] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28
[  159.992158][T10348] EXT4-fs (loop7): This should not happen!! Data will be lost
[  159.992158][T10348] 
[  160.022353][T10348] EXT4-fs (loop7): Total free blocks count 0
[  160.040115][T10348] EXT4-fs (loop7): Free/Dirty block details
[  160.046086][T10348] EXT4-fs (loop7): free_blocks=4293918720
[  160.051874][T10348] EXT4-fs (loop7): dirty_blocks=80
[  160.057113][T10348] EXT4-fs (loop7): Block reservation details
[  160.063199][T10348] EXT4-fs (loop7): i_reserved_data_blocks=5
[  160.080748][   T60] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  160.082981][ T7168] EXT4-fs (loop7): unmounting filesystem.
[  160.120146][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4352'.
[  160.147772][T10365] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  160.286731][   T60] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  160.310092][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.318659][   T60] usb 5-1: config 0 descriptor??
[  160.682400][T10355] loop8: detected capacity change from 0 to 262144
[  160.689790][T10355] F2FS-fs (loop8): invalid crc value
[  160.696557][T10355] F2FS-fs (loop8): Found nat_bits in checkpoint
[  160.723987][T10355] F2FS-fs (loop8): Start checkpoint disabled!
[  160.730829][T10355] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  160.930616][   T60] usb 5-1: Cannot set autoneg
[  160.935436][   T60] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[  160.944453][   T60] usb 5-1: USB disconnect, device number 21
[  161.012212][T10382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  161.159042][T10389] loop9: detected capacity change from 0 to 128
[  161.165558][T10389] EXT4-fs: Ignoring removed nobh option
[  161.173101][T10389] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  161.190425][ T9539] EXT4-fs (loop9): unmounting filesystem.
[  161.305768][T10410] loop8: detected capacity change from 0 to 1024
[  161.321852][T10410] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  161.340774][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  161.354688][T10404] loop9: detected capacity change from 0 to 40427
[  161.362386][T10404] F2FS-fs (loop9): invalid crc value
[  161.369012][T10404] F2FS-fs (loop9): Found nat_bits in checkpoint
[  161.397588][T10404] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  161.417726][ T9539] syz-executor: attempt to access beyond end of device
[  161.417726][ T9539] loop9: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  161.432014][ T9539] syz-executor: attempt to access beyond end of device
[  161.432014][ T9539] loop9: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[  161.446423][ T9539] F2FS-fs (loop9): Issue discard(4614, 4614, 1019) failed, ret: -5
[  161.446450][ T9539] F2FS-fs (loop9): Issue discard(5637, 5637, 10747) failed, ret: -5
[  161.464624][T10423] loop4: detected capacity change from 0 to 512
[  161.497815][T10423] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #3: comm syz.4.4376: corrupted inode contents
[  161.515203][T10423] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #3: comm syz.4.4376: mark_inode_dirty error
[  161.528118][   T28] audit: type=1326 audit(161.511:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.9.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  161.561552][   T28] audit: type=1326 audit(161.511:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.9.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  161.584880][   T28] audit: type=1326 audit(161.511:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.9.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  161.607950][   T28] audit: type=1326 audit(161.511:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.9.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  161.630892][   T28] audit: type=1326 audit(161.511:8603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.9.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  161.636349][T10423] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #3: comm syz.4.4376: corrupted inode contents
[  161.655683][   T28] audit: type=1326 audit(161.531:8604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.9.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c7c78e929 code=0x7ffc0000
[  161.688723][T10423] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.4376: mark_inode_dirty error
[  161.700776][T10423] Quota error (device loop4): write_blk: dquota write failed
[  161.708340][T10423] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  161.728486][T10423] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.4376: Failed to acquire dquot type 0
[  161.741359][T10423] EXT4-fs (loop4): 1 orphan inode deleted
[  161.748591][T10423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  161.763421][   T10] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:1: Failed to release dquot type 1
[  161.822103][  T286] EXT4-fs (loop4): unmounting filesystem.
[  161.828026][   T10] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:1: Failed to release dquot type 1
[  161.958096][T10460] loop9: detected capacity change from 0 to 1024
[  161.967311][T10460] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.015573][T10460] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  162.044225][T10460] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2748: inode #12: comm syz.9.4390: corrupted in-inode xattr
[  162.052912][T10456] loop8: detected capacity change from 0 to 40427
[  162.058112][T10460] EXT4-fs (loop9): Remounting filesystem read-only
[  162.065059][T10456] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[  162.078032][T10456] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  162.086512][T10456] F2FS-fs (loop8): fault_injection options not supported
[  162.088975][ T9539] EXT4-fs (loop9): unmounting filesystem.
[  162.093795][T10456] F2FS-fs (loop8): fault_type options not supported
[  162.106784][T10456] F2FS-fs (loop8): invalid crc value
[  162.113500][T10456] F2FS-fs (loop8): Found nat_bits in checkpoint
[  162.151792][T10456] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  162.158850][T10456] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  162.192147][T10456] syz.8.4389: attempt to access beyond end of device
[  162.192147][T10456] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  162.192659][T10478] input: syz0 as /devices/virtual/input/input34
[  162.212570][T10478] input: failed to attach handler leds to device input34, error: -6
[  162.221482][ T7179] syz-executor: attempt to access beyond end of device
[  162.221482][ T7179] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  162.267255][T10482] loop9: detected capacity change from 0 to 2048
[  162.281476][T10482] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  162.300192][ T2088] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  162.308650][ T9539] EXT4-fs (loop9): unmounting filesystem.
[  162.399360][T10496] loop9: detected capacity change from 0 to 2048
[  162.406024][T10496] ext4: Unknown parameter 'noacl'
[  162.490542][ T2088] usb 5-1: Using ep0 maxpacket: 16
[  162.497018][ T2088] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.507250][ T2088] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.517725][ T2088] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.526838][ T2088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.534981][ T2088] usb 5-1: Product: syz
[  162.539261][ T2088] usb 5-1: Manufacturer: syz
[  162.543980][ T2088] usb 5-1: SerialNumber: syz
[  162.626817][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  162.751995][ T2088] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  162.761218][ T2088] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  162.768756][ T2088] usb 5-1: USB disconnect, device number 22
[  163.233713][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  163.233728][   T28] audit: type=1400 audit(163.211:8614): avc:  denied  { remount } for  pid=10509 comm="syz.7.4410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  163.276329][T10513] xt_hashlimit: size too large, truncated to 1048576
[  163.300888][   T28] audit: type=1400 audit(163.281:8615): avc:  denied  { mount } for  pid=10516 comm="syz.0.4413" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  163.342966][   T28] audit: type=1400 audit(163.311:8616): avc:  denied  { mounton } for  pid=10516 comm="syz.0.4413" path="/891/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  163.425351][T10505] loop8: detected capacity change from 0 to 40427
[  163.460352][T10505] F2FS-fs (loop8): invalid crc value
[  163.481051][T10505] F2FS-fs (loop8): Found nat_bits in checkpoint
[  163.550225][T10505] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  163.585451][T10518] loop7: detected capacity change from 0 to 40427
[  163.593335][T10518] F2FS-fs (loop7): invalid crc value
[  163.618883][T10518] F2FS-fs (loop7): Found nat_bits in checkpoint
[  163.694099][T10518] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  163.744419][T10505] syz.8.4408: attempt to access beyond end of device
[  163.744419][T10505] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.758667][ T7168] syz-executor: attempt to access beyond end of device
[  163.758667][ T7168] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.873506][T10541] loop0: detected capacity change from 0 to 40427
[  163.880783][T10541] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  163.888579][T10541] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  163.938060][T10541] F2FS-fs (loop0): invalid crc value
[  163.970882][T10541] F2FS-fs (loop0): Found nat_bits in checkpoint
[  164.021943][T10556] loop8: detected capacity change from 0 to 512
[  164.032806][T10541] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  164.040229][T10541] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  164.051656][T10556] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  164.064151][T10556] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #2: comm syz.8.4425: corrupted inode contents
[  164.076303][T10556] EXT4-fs error (device loop8): ext4_dirty_inode:6120: inode #2: comm syz.8.4425: mark_inode_dirty error
[  164.087845][T10556] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #2: comm syz.8.4425: corrupted inode contents
[  164.102811][T10556] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.4425: mark_inode_dirty error
[  164.121045][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4
[  164.128704][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x2
[  164.152292][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.158707][T10570] binder: 10569:10570 ioctl c018620c 200000000180 returned -22
[  164.160243][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.175550][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.175843][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  164.183437][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.197657][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.205354][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.212646][   T28] audit: type=1400 audit(164.191:8617): avc:  denied  { watch watch_reads } for  pid=10573 comm="syz.0.4433" path="/900/file1" dev="tmpfs" ino=4688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  164.213136][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.244689][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.252348][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.259967][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.267607][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.275275][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.282940][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.291652][ T2088] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  164.299785][ T2088] hid-generic 0000:3000000:0000.0026: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  164.321302][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4431'.
[  164.362682][T10589] loop8: detected capacity change from 0 to 128
[  164.370732][T10589] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  164.390651][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  164.478783][T10606] loop8: detected capacity change from 0 to 1024
[  164.485862][T10606] EXT4-fs: Ignoring removed bh option
[  164.497512][T10606] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  164.511438][T10606] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  164.532847][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  164.650239][ T2982] Bluetooth: hci0: command 0x1003 tx timeout
[  164.660084][ T9582] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  165.279734][T10652] loop7: detected capacity change from 0 to 512
[  165.296363][T10652] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  165.327042][T10652] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[  165.348090][T10652] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.4467: corrupted xattr block 19
[  165.360088][T10652] EXT4-fs (loop7): Remounting filesystem read-only
[  165.366629][T10652] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  165.376368][T10652] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.4467: corrupted xattr block 19
[  165.388462][T10652] EXT4-fs (loop7): Remounting filesystem read-only
[  165.395023][T10652] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  165.404897][   T28] audit: type=1400 audit(165.381:8618): avc:  denied  { link } for  pid=10651 comm="syz.7.4467" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  165.405396][T10652] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.4467: corrupted xattr block 19
[  165.438358][T10652] EXT4-fs (loop7): Remounting filesystem read-only
[  165.444890][T10652] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  165.466006][ T7168] EXT4-fs (loop7): unmounting filesystem.
[  165.675796][T10670] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  165.689980][T10670] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  165.730101][T10674] loop9: detected capacity change from 0 to 512
[  165.741774][T10674] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  165.759943][ T9539] EXT4-fs (loop9): unmounting filesystem.
[  165.782821][T10680] loop9: detected capacity change from 0 to 256
[  165.789423][T10680] exFAT-fs (loop9): bogus sector size bits : 0
[  165.795740][T10680] exFAT-fs (loop9): failed to read boot sector
[  165.802217][T10680] exFAT-fs (loop9): failed to recognize exfat type
[  165.853508][   T28] audit: type=1400 audit(165.831:8619): avc:  denied  { create } for  pid=10679 comm="syz.9.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  165.896590][T10686] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  165.978697][   T19] kernel write not supported for file /stat (pid: 19 comm: kworker/0:1)
[  166.053594][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4491'.
[  166.183044][   T28] audit: type=1326 audit(166.151:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.8.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599ab8e929 code=0x7fc00000
[  166.201255][T10729] loop8: detected capacity change from 0 to 512
[  166.214300][T10729] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  166.233186][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  166.285924][T10742] loop8: detected capacity change from 0 to 512
[  166.301608][T10742] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  166.319452][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  166.464433][T10734] binder: 10733:10734 ioctl c0306201 200000001a80 returned -14
[  166.504629][T10759] loop7: detected capacity change from 0 to 128
[  166.512088][T10759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  166.520181][T10759] System zones: 1-3, 19-19, 35-36
[  166.525593][T10759] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  166.536997][T10759] EXT4-fs warning (device loop7): ext4_group_add:1743: No reserved GDT blocks, can't resize
[  166.554123][ T7168] EXT4-fs (loop7): unmounting filesystem.
[  166.902415][T10801] loop9: detected capacity change from 0 to 40427
[  166.919252][T10801] F2FS-fs (loop9): invalid crc value
[  166.952048][T10801] F2FS-fs (loop9): Found nat_bits in checkpoint
[  166.970675][   T28] audit: type=1326 audit(166.951:8621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.7.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5a692ab19 code=0x7ffc0000
[  167.025324][   T28] audit: type=1326 audit(166.971:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.7.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a698e929 code=0x7ffc0000
[  167.060540][T10801] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  167.082344][   T28] audit: type=1326 audit(166.971:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.7.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a698e929 code=0x7ffc0000
[  167.135809][T10829] loop8: detected capacity change from 0 to 1024
[  167.149485][T10829] EXT4-fs (loop8): Test dummy encryption mode enabled
[  167.187616][T10829] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  167.221207][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  167.257850][T10834] syz.9.4529: attempt to access beyond end of device
[  167.257850][T10834] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.447342][T10845] loop4: detected capacity change from 0 to 1024
[  167.515623][T10845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  167.541807][T10838] loop8: detected capacity change from 0 to 40427
[  167.559703][T10838] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[  167.573030][T10838] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  167.573732][  T286] EXT4-fs (loop4): unmounting filesystem.
[  167.581957][T10838] F2FS-fs (loop8): fault_injection options not supported
[  167.595141][T10838] F2FS-fs (loop8): fault_type options not supported
[  167.606407][T10838] F2FS-fs (loop8): invalid crc value
[  167.614632][T10838] F2FS-fs (loop8): Found nat_bits in checkpoint
[  167.647945][T10838] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  167.655170][T10838] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  167.713306][ T7179] syz-executor: attempt to access beyond end of device
[  167.713306][ T7179] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.880618][T10898] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4569'.
[  167.960107][ T2088] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  167.976695][T10894] loop4: detected capacity change from 0 to 40427
[  167.984462][T10894] F2FS-fs (loop4): invalid crc value
[  167.991309][T10894] F2FS-fs (loop4): Found nat_bits in checkpoint
[  168.026766][T10894] F2FS-fs (loop4): Start checkpoint disabled!
[  168.033490][T10894] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  168.099209][   T10] kworker/u4:1: attempt to access beyond end of device
[  168.099209][   T10] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  168.100112][    T6] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  168.160964][ T2088] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.180158][ T2088] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.197721][T10932] binder: 10931:10932 ioctl c0306201 200000000080 returned -14
[  168.209905][ T2088] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  168.212928][T10936] overlayfs: failed to clone upperpath
[  168.224697][ T2088] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.238469][ T2088] usb 10-1: Product: syz
[  168.245088][ T2088] usb 10-1: Manufacturer: syz
[  168.249769][ T2088] usb 10-1: SerialNumber: syz
[  168.275261][   T28] kauditd_printk_skb: 701 callbacks suppressed
[  168.275276][   T28] audit: type=1400 audit(168.251:9325): avc:  denied  { getopt } for  pid=10939 comm="syz.7.4588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  168.331203][    T6] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.332091][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4591'.
[  168.350068][    T6] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  168.370829][    T6] usb 9-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18
[  168.380127][    T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.388195][    T6] usb 9-1: Product: syz
[  168.394925][   T28] audit: type=1400 audit(168.381:9326): avc:  denied  { setopt } for  pid=10948 comm="syz.4.4593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  168.414192][    T6] usb 9-1: Manufacturer: syz
[  168.418807][    T6] usb 9-1: SerialNumber: syz
[  168.424317][    T6] usb 9-1: config 0 descriptor??
[  168.429319][   T28] audit: type=1400 audit(168.401:9327): avc:  denied  { read } for  pid=10948 comm="syz.4.4593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  168.436714][T10934] loop0: detected capacity change from 0 to 40427
[  168.455035][T10934] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  168.463783][T10934] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  168.464241][ T2088] usb 10-1: 0:2 : does not exist
[  168.476314][T10934] F2FS-fs (loop0): Found nat_bits in checkpoint
[  168.479546][ T2088] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[  168.518591][ T2088] usb 10-1: USB disconnect, device number 6
[  168.527900][T10934] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  168.534997][T10934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  168.676000][T10892] netlink: 43 bytes leftover after parsing attributes in process `syz.8.4559'.
[  168.696088][    T6] usb 9-1: USB disconnect, device number 8
[  168.999977][T10999] loop9: detected capacity change from 0 to 512
[  169.008222][T10999] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #15: comm syz.9.4613: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964)
[  169.026890][T10999] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.4613: couldn't read orphan inode 15 (err -117)
[  169.039197][T10999] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  169.064134][T10999] EXT4-fs (loop9): shut down requested (2)
[  169.077776][ T9539] EXT4-fs (loop9): unmounting filesystem.
[  169.106386][T11015] loop0: detected capacity change from 0 to 1024
[  169.137521][T11015] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  169.151536][   T28] audit: type=1400 audit(169.131:9328): avc:  denied  { execute } for  pid=11014 comm="syz.0.4620" path="/935/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  169.175472][T11015] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  169.190626][T11015] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  169.203084][T11015] EXT4-fs (loop0): This should not happen!! Data will be lost
[  169.203084][T11015] 
[  169.221303][T11015] EXT4-fs (loop0): Total free blocks count 0
[  169.232699][T11031] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  169.237047][T11015] EXT4-fs (loop0): Free/Dirty block details
[  169.250584][T11015] EXT4-fs (loop0): free_blocks=4293918720
[  169.256326][T11015] EXT4-fs (loop0): dirty_blocks=16
[  169.261486][T11015] EXT4-fs (loop0): Block reservation details
[  169.267744][T11015] EXT4-fs (loop0): i_reserved_data_blocks=1
[  169.294746][    T8] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  169.327260][T11048] loop9: detected capacity change from 0 to 1024
[  169.327936][T11049] loop0: detected capacity change from 0 to 512
[  169.342464][T11048] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  169.355004][T11048] EXT4-fs (loop9): shut down requested (2)
[  169.362322][T11048] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.366912][T11055] loop8: detected capacity change from 0 to 256
[  169.371213][T11048] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.377844][T11055] exfat: Deprecated parameter 'utf8'
[  169.387153][T11048] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.393690][T11049] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  169.400433][T11048] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.418808][T11048] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.428142][T11048] overlayfs: failed to create directory ./file1/work (errno: 5); mounting read-only
[  169.438874][T11055] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  169.453344][T11049] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  169.467953][T11049] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28
[  169.480569][T11049] EXT4-fs (loop0): This should not happen!! Data will be lost
[  169.480569][T11049] 
[  169.486913][ T9539] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.490424][T11049] EXT4-fs (loop0): Total free blocks count 0
[  169.505392][T11049] EXT4-fs (loop0): Free/Dirty block details
[  169.511335][T11049] EXT4-fs (loop0): free_blocks=65280
[  169.516625][T11049] EXT4-fs (loop0): dirty_blocks=31
[  169.520148][ T9539] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.522210][T11049] EXT4-fs (loop0): Block reservation details
[  169.537015][T11049] EXT4-fs (loop0): i_reserved_data_blocks=31
[  169.537383][ T9539] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.552136][ T9539] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.554822][   T28] audit: type=1400 audit(169.531:9329): avc:  denied  { lock } for  pid=11054 comm="syz.8.4637" path="/358/file0/file1" dev="loop8" ino=1048816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  169.561106][ T9539] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.593870][ T9539] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.604137][ T9539] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.604434][  T285] EXT4-fs (loop0): unmounting filesystem.
[  169.618469][ T9539] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=11
[  169.627701][   T28] audit: type=1400 audit(169.611:9330): avc:  denied  { rmdir } for  pid=9539 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  169.654474][ T9539] EXT4-fs (loop9): unmounting filesystem.
[  169.660293][    T8] tipc: Left network mode
[  169.792380][T11079] loop8: detected capacity change from 0 to 256
[  169.841587][T11088] netlink: 'syz.0.4654': attribute type 4 has an invalid length.
[  169.890880][T11100] loop0: detected capacity change from 0 to 1024
[  169.923706][T11100] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  169.932939][T11084] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.939979][T11084] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.949176][T11084] device bridge_slave_0 entered promiscuous mode
[  169.957399][T11084] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.992223][T11084] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.999816][T11084] device bridge_slave_1 entered promiscuous mode
[  170.001118][  T285] EXT4-fs (loop0): unmounting filesystem.
[  170.080661][T11094] loop4: detected capacity change from 0 to 40427
[  170.096320][T11094] F2FS-fs (loop4): fault_injection options not supported
[  170.098311][T11124] loop8: detected capacity change from 0 to 256
[  170.111085][T11094] F2FS-fs (loop4): invalid crc value
[  170.126059][T11094] F2FS-fs (loop4): Found nat_bits in checkpoint
[  170.176497][T11133] netem: incorrect gi model size
[  170.191603][T11135] loop8: detected capacity change from 0 to 256
[  170.197895][T11133] netem: change failed
[  170.215301][T11084] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.222359][T11084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.229723][T11094] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  170.249074][T11135] FAT-fs (loop8): Directory bread(block 64) failed
[  170.267511][T11135] FAT-fs (loop8): Directory bread(block 65) failed
[  170.294805][T11135] FAT-fs (loop8): Directory bread(block 66) failed
[  170.307416][T10575] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.316855][T10575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  170.324453][T11135] FAT-fs (loop8): Directory bread(block 67) failed
[  170.331840][T11135] FAT-fs (loop8): Directory bread(block 68) failed
[  170.337691][T11140] loop0: detected capacity change from 0 to 2048
[  170.338979][  T286] syz-executor: attempt to access beyond end of device
[  170.338979][  T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  170.350473][T10575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.358838][T11135] FAT-fs (loop8): Directory bread(block 69) failed
[  170.387109][T10575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  170.398751][T11135] FAT-fs (loop8): Directory bread(block 70) failed
[  170.400391][T10575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.406641][T11135] FAT-fs (loop8): Directory bread(block 71) failed
[  170.427360][T10575] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.434414][T10575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.437956][T11135] FAT-fs (loop8): Directory bread(block 72) failed
[  170.441883][T11140]  loop0: p1 < > p4
[  170.458345][T11135] FAT-fs (loop8): Directory bread(block 73) failed
[  170.465105][T11140] loop0: p4 size 8388608 extends beyond EOD, truncated
[  170.475155][T10575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.505166][T10575] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.512325][T10575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.521514][   T28] audit: type=1400 audit(170.501:9331): avc:  denied  { map } for  pid=11142 comm="syz.4.4676" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  170.545933][    T8] device bridge_slave_1 left promiscuous mode
[  170.556121][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.570685][    T8] device bridge_slave_0 left promiscuous mode
[  170.589650][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.608152][    T8] device veth1_macvtap left promiscuous mode
[  170.619105][    T8] device veth0_vlan left promiscuous mode
[  170.675713][T11159] loop4: detected capacity change from 0 to 16
[  170.682432][T11159] erofs: (device loop4): mounted with root inode @ nid 36.
[  170.691553][T11159] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  170.701183][T11159] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  170.712640][T11159] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  170.723793][T11159] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  170.734042][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.738350][T11159] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  170.742335][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.754194][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36
[  170.768100][T11159] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  170.769576][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.786920][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36
[  170.801074][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.806552][T11159] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  170.809880][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.826138][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.827374][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36
[  170.835255][T11084] device veth0_vlan entered promiscuous mode
[  170.849157][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36
[  170.858380][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36
[  170.867733][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36
[  170.873800][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.877050][T11159] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  170.886707][T11084] device veth1_macvtap entered promiscuous mode
[  170.900261][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36
[  170.909528][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36
[  170.909715][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.918737][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36
[  170.927610][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.935864][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36
[  170.953289][T11159] syz.4.4684: attempt to access beyond end of device
[  170.953289][T11159] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16
[  170.967003][T11159] syz.4.4684: attempt to access beyond end of device
[  170.967003][T11159] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  170.981735][T11159] syz.4.4684: attempt to access beyond end of device
[  170.981735][T11159] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  170.996525][T11159] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639]
[  171.008627][T11159] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.017984][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36
[  171.027094][T11159] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.036398][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36
[  171.045693][T11159] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36
[  171.056416][T11159] syz.4.4684: attempt to access beyond end of device
[  171.056416][T11159] loop4: rw=524288, sector=24, nr_sectors = 8 limit=16
[  171.070382][T11159] syz.4.4684: attempt to access beyond end of device
[  171.070382][T11159] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16
[  171.084822][T11159] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537]
[  171.103341][T11167] loop1: detected capacity change from 0 to 512
[  171.109976][T11167] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  171.150082][   T60] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  171.276776][   T28] audit: type=1326 audit(171.251:9332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11180 comm="syz.7.4694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5a698e929 code=0x0
[  171.341393][   T60] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.355937][T11171] loop4: detected capacity change from 0 to 40427
[  171.361217][T11175] loop1: detected capacity change from 0 to 40427
[  171.362440][   T60] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.369944][T11171] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  171.377799][T11175] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  171.385708][T11171] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  171.393424][   T60] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  171.402679][T11171] F2FS-fs (loop4): invalid crc value
[  171.412001][T11175] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  171.418696][T11171] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  171.425447][   T60] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  171.438150][T11171] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  171.450611][T11175] F2FS-fs (loop1): invalid crc value
[  171.462901][   T60] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  171.476538][   T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  171.484720][   T60] usb 9-1: SerialNumber: syz
[  171.490450][T11171] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  171.497609][T11171] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  171.506235][T11175] F2FS-fs (loop1): Found nat_bits in checkpoint
[  171.538517][   T28] audit: type=1400 audit(171.511:9333): avc:  denied  { mounton } for  pid=11170 comm="syz.4.4689" path="/1022/bus/bus" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  171.561071][   T28] audit: type=1400 audit(171.511:9334): avc:  denied  { setattr } for  pid=11170 comm="syz.4.4689" name="work" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  171.581965][T11197] loop0: detected capacity change from 0 to 512
[  171.590258][T11175] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  171.597373][T11175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.617734][T11197] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  171.634762][    T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  171.646736][    T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  171.663486][  T285] EXT4-fs (loop0): unmounting filesystem.
[  171.694840][   T60] usb 9-1: 0:2 : does not exist
[  171.699762][   T60] usb 9-1: unit 5 not found!
[  171.714228][   T60] usb 9-1: USB disconnect, device number 9
[  171.741289][T11207] loop4: detected capacity change from 0 to 128
[  171.755836][T11209] loop0: detected capacity change from 0 to 512
[  171.763890][T11209] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  171.783628][  T285] EXT4-fs (loop0): unmounting filesystem.
[  171.809454][T11218] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4706'.
[  171.841811][T11223] loop4: detected capacity change from 0 to 256
[  171.870324][T11229] loop1: detected capacity change from 0 to 512
[  171.877086][T11229] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  171.888663][T11229] EXT4-fs (loop1): 1 truncate cleaned up
[  171.894530][T11229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  171.914224][T11084] EXT4-fs (loop1): unmounting filesystem.
[  171.929284][T11233] loop1: detected capacity change from 0 to 128
[  171.938562][T11233] EXT4-fs: Ignoring removed nobh option
[  171.945473][T11233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  171.956149][T11233] EXT4-fs error (device loop1): __ext4_remount:6598: comm syz.1.4712: Abort forced by user
[  171.966430][T11233] EXT4-fs (loop1): Remounting filesystem read-only
[  171.973015][T11233] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  171.987782][T11084] EXT4-fs (loop1): unmounting filesystem.
[  172.068679][T11246] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4718'.
[  172.202435][T11263] loop1: detected capacity change from 0 to 256
[  172.382682][T11289] loop8: detected capacity change from 0 to 128
[  172.393457][T11289] EXT4-fs: Ignoring removed nobh option
[  172.401051][T11289] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  172.414671][T11289] fscrypt (loop8, inode 12): Mutually exclusive encryption flags (0x16)
[  172.430679][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  172.469475][T11301] loop8: detected capacity change from 0 to 512
[  172.479188][T11301] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  172.500777][T11301] EXT4-fs (loop8): 1 truncate cleaned up
[  172.506482][T11301] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  172.671745][ T7179] EXT4-fs (loop8): unmounting filesystem.
[  172.722468][T11316] loop8: detected capacity change from 0 to 512
[  172.756576][T11316] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.4748: Failed to acquire dquot type 1
[  172.768576][T11316] EXT4-fs (loop8): 1 truncate cleaned up
[  172.775681][T11316] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  172.776364][T11324] device batadv_slave_1 entered promiscuous mode
[  172.795364][T11316] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.4748: Failed to acquire dquot type 1
[  172.811646][T11323] device batadv_slave_1 left promiscuous mode
[  173.054175][T11362] incfs: iterate_incfs_dir / -22
[  173.231382][T11378] loop4: detected capacity change from 0 to 1024
[  173.298620][T11384] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4780'.
[  173.347439][T11390] syz.1.4783[11390] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  173.347504][T11390] syz.1.4783[11390] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  173.467884][T11407] loop4: detected capacity change from 0 to 1024
[  173.486317][T11407] EXT4-fs: Ignoring removed orlov option
[  173.834925][T11423] loop4: detected capacity change from 0 to 40427
[  173.848960][T11423] F2FS-fs (loop4): fault_type options not supported
[  173.865129][T11423] F2FS-fs (loop4): invalid crc value
[  173.882579][T11423] F2FS-fs (loop4): Found nat_bits in checkpoint
[  173.931427][T11423] F2FS-fs (loop4): Start checkpoint disabled!
[  173.938097][T11423] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  174.009412][  T313] kworker/u4:3: attempt to access beyond end of device
[  174.009412][  T313] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  174.041982][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  174.041996][   T28] audit: type=1400 audit(174.021:9350): avc:  denied  { setattr } for  pid=11441 comm="syz.8.4805" name="/" dev="incremental-fs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  174.150653][T11454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4811'.
[  174.173010][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4803'.
[  174.213757][T11463] loop4: detected capacity change from 0 to 256
[  174.222811][T11463] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  174.291935][T11481] loop8: detected capacity change from 0 to 2048
[  174.318210][T11481] EXT4-fs (loop8): shut down requested (1)
[  174.328149][T11486] loop4: detected capacity change from 0 to 1024
[  174.335135][T11486] EXT4-fs: Ignoring removed nobh option
[  174.341089][T11486] EXT4-fs: Ignoring removed bh option
[  174.346802][T11486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  174.391322][T11503] loop4: detected capacity change from 0 to 256
[  174.399643][T11503] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  174.428688][   T28] audit: type=1400 audit(174.401:9351): avc:  denied  { watch watch_reads } for  pid=11502 comm="syz.4.4830" path="/1054/file0/file0" dev="loop4" ino=1048828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  174.466754][T11509] loop4: detected capacity change from 0 to 128
[  174.477840][T11511] loop1: detected capacity change from 0 to 256
[  174.484631][T11511] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  174.495953][T11511] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  174.506579][T11511] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  174.519943][T11509] syz.4.4834 (pid 11509) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  174.538264][   T28] audit: type=1400 audit(174.511:9352): avc:  denied  { rename } for  pid=11510 comm="syz.1.4835" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=1048834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  174.656365][   T28] audit: type=1326 audit(174.631:9353): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.1.4845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2f6d8e929 code=0x0
[  174.778873][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4852'.
[  174.854664][T11563] loop0: detected capacity change from 0 to 256
[  174.864006][T11563] exfat: Deprecated parameter 'utf8'
[  174.872231][T11563] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[  174.927224][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4867'.
[  174.929987][T11583] loop0: detected capacity change from 0 to 16
[  174.943487][T11583] erofs: (device loop0): mounted with root inode @ nid 36.
[  174.952213][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36
[  174.960806][   T28] audit: type=1400 audit(174.931:9354): avc:  denied  { write } for  pid=6 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64344 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  174.961439][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36
[  174.994271][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 37 @ nid 36
[  175.003320][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36
[  175.013248][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 35 @ nid 36
[  175.022298][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 34 @ nid 36
[  175.031346][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 33 @ nid 36
[  175.040385][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 32 @ nid 36
[  175.049443][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36
[  175.058535][T11583] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36
[  175.067718][T11583] syz.0.4868: attempt to access beyond end of device
[  175.067718][T11583] loop0: rw=524288, sector=1049272, nr_sectors = 32 limit=16
[  175.081687][T11583] syz.0.4868: attempt to access beyond end of device
[  175.081687][T11583] loop0: rw=524288, sector=376, nr_sectors = 32 limit=16
[  175.095465][T11583] syz.0.4868: attempt to access beyond end of device
[  175.095465][T11583] loop0: rw=524288, sector=384, nr_sectors = 32 limit=16
[  175.109058][T11583] syz.0.4868: attempt to access beyond end of device
[  175.109058][T11583] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16
[  175.122445][T11583] syz.0.4868: attempt to access beyond end of device
[  175.122445][T11583] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16
[  175.209333][T11604] netlink: 'syz.0.4877': attribute type 4 has an invalid length.
[  175.260101][ T2088] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  175.303263][T11616] xt_hashlimit: size too large, truncated to 1048576
[  175.452359][ T2088] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  175.466490][ T2088] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  175.487889][ T2088] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  175.505856][ T2088] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.522721][ T2088] usb 9-1: Product: syz
[  175.531429][ T2088] usb 9-1: Manufacturer: syz
[  175.541456][ T2088] usb 9-1: SerialNumber: syz
[  175.552738][ T2088] usb 9-1: config 0 descriptor??
[  175.563838][T11587] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  175.581379][T11587] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  175.766175][T11639] loop4: detected capacity change from 0 to 40427
[  175.774416][T11639] F2FS-fs (loop4): invalid crc value
[  175.780694][T11639] F2FS-fs (loop4): Found nat_bits in checkpoint
[  175.794763][T11587] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  175.810110][T11587] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  175.837038][T11639] F2FS-fs (loop4): Start checkpoint disabled!
[  175.843832][T11639] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  175.901353][T11639] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  175.939260][T11639] F2FS-fs (loop4): ino:10, start:0, end:0, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  175.960021][   T10] kworker/u4:1: attempt to access beyond end of device
[  175.960021][   T10] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  176.143198][T11657] netlink: 'syz.7.4895': attribute type 2 has an invalid length.
[  176.222536][ T2088] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  176.625078][ T2088] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  176.640645][ T2088] usb 9-1: USB disconnect, device number 10
[  176.661314][T11691] SELinux: failed to load policy
[  176.714697][T11691] loop4: detected capacity change from 0 to 10865
[  176.722590][T11691] F2FS-fs (loop4): invalid crc value
[  176.735825][T11691] syz.4.4914: attempt to access beyond end of device
[  176.735825][T11691] loop4: rw=12288, sector=12288, nr_sectors = 8 limit=10865
[  176.749808][T11691] syz.4.4914: attempt to access beyond end of device
[  176.749808][T11691] loop4: rw=12288, sector=12288, nr_sectors = 8 limit=10865
[  176.763765][T11691] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-5)
[  176.764052][T11709] loop1: detected capacity change from 0 to 256
[  177.171734][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4927'.
[  177.290147][    T6] ip6_tnl_xmit_ctl: 5 callbacks suppressed
[  177.290163][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.360157][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.420117][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.443727][T11737] loop4: detected capacity change from 0 to 40427
[  177.451616][T11737] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  177.458015][T11737] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  177.475208][T11737] F2FS-fs (loop4): invalid crc value
[  177.487155][T11752] loop1: detected capacity change from 0 to 128
[  177.490174][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.502215][T11737] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  177.518489][T11752] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[  177.533733][T11752] FAT-fs (loop1): Filesystem has been set read-only
[  177.537967][T11737] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  177.547488][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.555122][T11737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  177.580176][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.592439][T11737] syz.4.4935: attempt to access beyond end of device
[  177.592439][T11737] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  177.597930][T11758] input: syz1 as /devices/virtual/input/input35
[  177.620203][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.633320][   T28] audit: type=1400 audit(177.611:9355): avc:  denied  { create } for  pid=11759 comm="syz.1.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  177.720140][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.727874][T11765] loop0: detected capacity change from 0 to 512
[  177.756277][T11765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  177.789406][T11770] loop4: detected capacity change from 0 to 1024
[  177.790201][T11765] EXT4-fs (loop0): 1 truncate cleaned up
[  177.800168][    T6] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  177.834078][   T28] audit: type=1400 audit(177.811:9356): avc:  denied  { mounton } for  pid=11769 comm="syz.4.4944" path="/1081/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  177.897178][  T286] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 81:freeing already freed block (bit 5); block bitmap corrupt.
[  177.915956][T11784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4953'.
[  177.960411][   T19] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  178.106880][T11803] loop1: detected capacity change from 0 to 1024
[  178.124426][T11805] loop0: detected capacity change from 0 to 256
[  178.157581][T11809] loop0: detected capacity change from 0 to 256
[  178.176897][T11811] loop8: detected capacity change from 0 to 1024
[  178.191570][T11809] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  178.209169][T11811] EXT4-fs: Ignoring removed orlov option
[  178.215309][T11809] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  178.220122][T11811] EXT4-fs: Ignoring removed nomblk_io_submit option
[  178.226625][T11809] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  178.319796][   T28] audit: type=1400 audit(178.291:9357): avc:  denied  { execute_no_trans } for  pid=11810 comm="syz.8.4964" path="/413/file1/file0/file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  178.358618][T11829] loop4: detected capacity change from 0 to 1024
[  178.365483][T11829] EXT4-fs: Ignoring removed nobh option
[  178.371800][T11829] EXT4-fs: Ignoring removed bh option
[  178.377573][T11829] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  178.408346][T11832] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4974'.
[  178.429685][T11837] loop0: detected capacity change from 0 to 512
[  178.472115][T11837] EXT4-fs (loop0): 1 orphan inode deleted
[  178.613304][T11874] syz.4.4992[11874] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  178.613392][T11874] syz.4.4992[11874] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  178.729041][T11888] loop0: detected capacity change from 0 to 256
[  178.761812][T11888] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  178.857575][T11920] loop1: detected capacity change from 0 to 1024
[  178.903288][T11929] loop1: detected capacity change from 0 to 256
[  179.130580][   T19] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  179.190086][    T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  179.310115][   T19] usb 9-1: Using ep0 maxpacket: 32
[  179.316356][   T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.327275][   T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.337030][   T19] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  179.346109][   T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.354586][   T19] usb 9-1: config 0 descriptor??
[  179.391039][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.401963][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.411724][    T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  179.424582][    T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  179.433612][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.443515][    T6] usb 2-1: config 0 descriptor??
[  179.747681][T11969] netlink: 74 bytes leftover after parsing attributes in process `syz.7.5034'.
[  179.766790][   T19] savu 0003:1E7D:2D5A.0027: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  179.804130][T11977] xt_hashlimit: size too large, truncated to 1048576
[  179.851540][    T6] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x6
[  179.859128][    T6] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving
[  179.877051][    T6] plantronics 0003:047F:FFFF.0028: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  179.889559][ T2088] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  180.031092][   T24] usb 9-1: USB disconnect, device number 11
[  180.075964][    T6] usb 2-1: USB disconnect, device number 12
[  180.081943][ T2088] usb 5-1: Using ep0 maxpacket: 16
[  180.088077][ T2088] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  180.098332][ T2088] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.108715][ T2088] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.119312][ T2088] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  180.128382][ T2088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.136690][ T2088] usb 5-1: Product: syz
[  180.141075][ T2088] usb 5-1: Manufacturer: syz
[  180.145681][ T2088] usb 5-1: SerialNumber: syz
[  180.554389][ T2088] usb 5-1: 0:2 : does not exist
[  180.661659][T12013] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.5055'.
[  180.719207][T12027] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5062'.
[  180.804487][T12038] loop8: detected capacity change from 0 to 512
[  180.811519][T12038] EXT4-fs: Ignoring removed orlov option
[  180.818839][T12038] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.5067: casefold flag without casefold feature
[  180.831663][T12038] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.5067: couldn't read orphan inode 15 (err -117)
[  181.160608][ T2088] usb 5-1: USB disconnect, device number 23
[  181.208339][T12046] loop1: detected capacity change from 0 to 131072
[  181.216155][T12046] F2FS-fs (loop1): invalid crc value
[  181.222810][T12046] F2FS-fs (loop1): Found nat_bits in checkpoint
[  181.249375][T12046] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  181.323956][   T28] audit: type=1400 audit(181.301:9358): avc:  denied  { listen } for  pid=12068 comm="syz.7.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  181.343412][   T28] audit: type=1400 audit(181.321:9359): avc:  denied  { accept } for  pid=12068 comm="syz.7.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  181.481967][   T28] audit: type=1400 audit(181.461:9360): avc:  denied  { shutdown } for  pid=12074 comm="syz.1.5082" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  181.542964][T12081] loop1: detected capacity change from 0 to 2048
[  181.795756][T12090] 9pnet: p9_errstr2errno: server reported unknown error �@�΂�(����Q�0x0000000000000004
[  181.869632][   T28] audit: type=1400 audit(181.841:9361): avc:  denied  { name_bind } for  pid=12101 comm="syz.0.5093" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  181.971881][T12112] SELinux: failed to load policy
[  182.004498][T12116] usb usb8: usbfs: process 12116 (syz.0.5101) did not claim interface 0 before use
[  182.096350][T12128] syz.0.5107[12128] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.096442][T12128] syz.0.5107[12128] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.190124][   T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  182.401185][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.420081][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.439978][   T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  182.458721][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.470724][   T24] usb 5-1: config 0 descriptor??
[  182.858779][T12174] loop1: detected capacity change from 0 to 40427
[  182.865872][T12174] F2FS-fs (loop1): fault_type options not supported
[  182.873204][T12174] F2FS-fs (loop1): invalid crc value
[  182.878691][   T24] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0
[  182.879478][T12174] F2FS-fs (loop1): Found nat_bits in checkpoint
[  182.886414][   T24] cp2112 0003:10C4:EA90.0029: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  182.917108][T12174] F2FS-fs (loop1): Start checkpoint disabled!
[  182.923792][T12174] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  182.969318][   T28] audit: type=1400 audit(182.941:9362): avc:  denied  { relabelfrom } for  pid=12182 comm="syz.0.5125" name="RFCOMM" dev="sockfs" ino=67015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  182.969354][T12183] SELinux:  Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped).
[  183.017468][   T28] audit: type=1400 audit(182.981:9363): avc:  denied  { relabelto } for  pid=12182 comm="syz.0.5125" name="RFCOMM" dev="sockfs" ino=67015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0"
[  183.063489][    T8] bio_check_eod: 1 callbacks suppressed
[  183.063506][    T8] kworker/u4:0: attempt to access beyond end of device
[  183.063506][    T8] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  183.083269][   T24] cp2112 0003:10C4:EA90.0029: error requesting version
[  183.083668][   T28] audit: type=1400 audit(183.061:9364): avc:  denied  { create } for  pid=12186 comm="syz.0.5128" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  183.100529][   T24] cp2112: probe of 0003:10C4:EA90.0029 failed with error -71
[  183.131426][ T2942] Bluetooth: hci0: command 0x1003 tx timeout
[  183.144729][ T9582] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  183.149348][   T24] usb 5-1: USB disconnect, device number 24
[  183.156879][T12059] Bluetooth: hci0: Opcode 0x080f failed: -22
[  183.297977][T12214] loop1: detected capacity change from 0 to 2048
[  183.321243][T12214] Alternate GPT is invalid, using primary GPT.
[  183.327439][T12214]  loop1: p1 p2 p3
[  183.348047][T12218] netlink: 116 bytes leftover after parsing attributes in process `syz.7.5143'.
[  183.357167][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5143'.
[  183.379548][T12222] x_tables: duplicate underflow at hook 4
[  183.455909][T12238] overlayfs: failed to clone upperpath
[  183.493329][T12245] syz.7.5155[12245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  183.493395][T12245] syz.7.5155[12245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  183.537886][T12255] device macsec1 entered promiscuous mode
[  183.555110][T12255] device vlan1 entered promiscuous mode
[  183.561706][T12255] device vlan1 left promiscuous mode
[  183.820293][T12289] 9pnet_fd: Insufficient options for proto=fd
[  183.910089][ T2088] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  184.090131][ T2088] usb 2-1: Using ep0 maxpacket: 8
[  184.096656][ T2088] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.115592][ T2088] usb 2-1: config 0 has no interfaces?
[  184.129137][ T2088] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e
[  184.146531][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5187'.
[  184.155963][ T2088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.165152][ T2088] usb 2-1: Product: syz
[  184.175777][ T2088] usb 2-1: Manufacturer: syz
[  184.189560][ T2088] usb 2-1: SerialNumber: syz
[  184.200211][ T2252] ip6_tnl_xmit_ctl: 5 callbacks suppressed
[  184.200232][ T2252] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.200421][ T2088] usb 2-1: config 0 descriptor??
[  184.260407][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.310239][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.434224][ T2088] usb 2-1: USB disconnect, device number 13
[  184.485021][T12370] device veth0 entered promiscuous mode
[  184.490718][ T2252] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  184.498390][T12369] device veth0 left promiscuous mode
[  184.510803][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.580394][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.681164][ T2252] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  184.695399][ T2252] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  184.704477][ T2252] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.712524][ T2252] usb 9-1: Product: syz
[  184.716689][ T2252] usb 9-1: Manufacturer: syz
[  184.721281][ T2252] usb 9-1: SerialNumber: syz
[  184.726375][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.760150][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.800129][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.840112][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.920173][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.935978][ T2252] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  184.948256][   T28] audit: type=1326 audit(184.931:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.1.5218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2f6d8e929 code=0x0
[  185.151014][ T2252] usb 9-1: USB disconnect, device number 12
[  185.157511][ T2252] usblp0: removed
[  185.210064][    C0] ==================================================================
[  185.218140][    C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0
[  185.225192][    C0] Write of size 8 at addr ffff888118dfca00 by task swapper/0/0
[  185.232739][    C0] 
[  185.235056][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.138-syzkaller-00052-g4cf22d978348 #0
[  185.244489][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  185.254543][    C0] Call Trace:
[  185.257812][    C0]  <IRQ>
[  185.260650][    C0]  __dump_stack+0x21/0x24
[  185.265002][    C0]  dump_stack_lvl+0xee/0x150
[  185.269581][    C0]  ? __cfi_dump_stack_lvl+0x8/0x8
[  185.274590][    C0]  ? profile_hits+0x8e5/0xbe0
[  185.279264][    C0]  ? __run_timers+0x32b/0x9a0
[  185.284376][    C0]  print_address_description+0x71/0x210
[  185.289923][    C0]  print_report+0x4a/0x60
[  185.294249][    C0]  kasan_report+0x122/0x150
[  185.298737][    C0]  ? __run_timers+0x32b/0x9a0
[  185.303405][    C0]  __asan_report_store8_noabort+0x17/0x20
[  185.309135][    C0]  __run_timers+0x32b/0x9a0
[  185.313633][    C0]  ? sched_clock+0x9/0x10
[  185.317948][    C0]  ? sched_clock_cpu+0x6e/0x250
[  185.322779][    C0]  ? calc_index+0x200/0x200
[  185.327267][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  185.332468][    C0]  run_timer_softirq+0x6a/0xf0
[  185.337217][    C0]  handle_softirqs+0x1d7/0x600
[  185.342006][    C0]  ? irqtime_account_irq+0xc4/0x240
[  185.347191][    C0]  __irq_exit_rcu+0x52/0xf0
[  185.351680][    C0]  irq_exit_rcu+0x9/0x10
[  185.355912][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  185.361532][    C0]  </IRQ>
[  185.364456][    C0]  <TASK>
[  185.367373][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  185.373348][    C0] RIP: 0010:default_idle+0xf/0x20
[  185.378356][    C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 79 56 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[  185.397939][    C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257
[  185.403990][    C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: ec0fcf18ed3e8800
[  185.411977][    C0] RDX: 0000000000000001 RSI: ffffffff85a9f700 RDI: ffffffff85a9f6c0
[  185.419931][    C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917
[  185.427886][    C0] R10: 0000000000000000 R11: ffffffff84efba50 R12: 0000000000000000
[  185.435843][    C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000
[  185.443799][    C0]  ? __cfi_default_idle+0x10/0x10
[  185.448812][    C0]  arch_cpu_idle+0x1c/0x20
[  185.453212][    C0]  default_idle_call+0x71/0x1d0
[  185.458046][    C0]  do_idle+0x1a7/0x520
[  185.462095][    C0]  ? irqentry_exit+0x30/0x40
[  185.466668][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  185.471888][    C0]  ? schedule_idle+0x5b/0x90
[  185.476481][    C0]  ? do_idle+0x1/0x520
[  185.480540][    C0]  cpu_startup_entry+0x43/0x60
[  185.485301][    C0]  rest_init+0x10a/0x130
[  185.489535][    C0]  ? __cfi_x86_late_time_init+0x8/0x8
[  185.494895][    C0]  arch_call_rest_init+0xe/0x10
[  185.499732][    C0]  start_kernel+0x482/0x4f0
[  185.504219][    C0]  x86_64_start_reservations+0x2a/0x2c
[  185.509670][    C0]  x86_64_start_kernel+0x7c/0x81
[  185.514594][    C0]  secondary_startup_64_no_verify+0xce/0xdb
[  185.520471][    C0]  </TASK>
[  185.523477][    C0] 
[  185.525790][    C0] Allocated by task 12059:
[  185.530186][    C0]  kasan_set_track+0x4b/0x70
[  185.534775][    C0]  kasan_save_alloc_info+0x25/0x30
[  185.539875][    C0]  __kasan_kmalloc+0x95/0xb0
[  185.544536][    C0]  __kmalloc+0xb1/0x1e0
[  185.548684][    C0]  hci_alloc_dev_priv+0x27/0x1bd0
[  185.553698][    C0]  hci_uart_tty_ioctl+0x3d6/0xa20
[  185.558705][    C0]  tty_ioctl+0x8ef/0xc60
[  185.562932][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  185.567593][    C0]  __x64_sys_ioctl+0x7b/0x90
[  185.572169][    C0]  x64_sys_call+0x58b/0x9a0
[  185.576656][    C0]  do_syscall_64+0x4c/0xa0
[  185.581077][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.586997][    C0] 
[  185.589304][    C0] Freed by task 12059:
[  185.593351][    C0]  kasan_set_track+0x4b/0x70
[  185.597924][    C0]  kasan_save_free_info+0x31/0x50
[  185.602936][    C0]  ____kasan_slab_free+0x132/0x180
[  185.608031][    C0]  __kasan_slab_free+0x11/0x20
[  185.612849][    C0]  slab_free_freelist_hook+0xc2/0x190
[  185.618222][    C0]  __kmem_cache_free+0xb7/0x1b0
[  185.623055][    C0]  kfree+0x6f/0xf0
[  185.626761][    C0]  hci_release_dev+0x13ad/0x1500
[  185.631678][    C0]  bt_host_release+0x82/0x90
[  185.636255][    C0]  device_release+0xa4/0x1d0
[  185.640832][    C0]  kobject_put+0x19d/0x280
[  185.645240][    C0]  put_device+0x1f/0x30
[  185.649380][    C0]  hci_dev_cmd+0x265/0x720
[  185.653790][    C0]  hci_sock_ioctl+0x41e/0x7f0
[  185.658445][    C0]  sock_do_ioctl+0x101/0x310
[  185.663015][    C0]  sock_ioctl+0x4d8/0x6e0
[  185.667328][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  185.671995][    C0]  __x64_sys_ioctl+0x7b/0x90
[  185.676590][    C0]  x64_sys_call+0x58b/0x9a0
[  185.681080][    C0]  do_syscall_64+0x4c/0xa0
[  185.685489][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.691378][    C0] 
[  185.693686][    C0] Last potentially related work creation:
[  185.699373][    C0]  kasan_save_stack+0x3a/0x60
[  185.704034][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  185.709405][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  185.715195][    C0]  insert_work+0x51/0x300
[  185.719510][    C0]  __queue_work+0x9b1/0xd30
[  185.723996][    C0]  queue_work_on+0xd2/0x140
[  185.728479][    C0]  __hci_cmd_sync_sk+0xa3e/0xcf0
[  185.733403][    C0]  hci_cmd_sync_status+0x53/0x120
[  185.738409][    C0]  hci_dev_cmd+0x628/0x720
[  185.742812][    C0]  hci_sock_ioctl+0x41e/0x7f0
[  185.747468][    C0]  sock_do_ioctl+0x101/0x310
[  185.752037][    C0]  sock_ioctl+0x4d8/0x6e0
[  185.756349][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  185.761014][    C0]  __x64_sys_ioctl+0x7b/0x90
[  185.765596][    C0]  x64_sys_call+0x58b/0x9a0
[  185.770084][    C0]  do_syscall_64+0x4c/0xa0
[  185.774498][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.780378][    C0] 
[  185.782680][    C0] Second to last potentially related work creation:
[  185.789239][    C0]  kasan_save_stack+0x3a/0x60
[  185.793983][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  185.799337][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  185.805129][    C0]  insert_work+0x51/0x300
[  185.809444][    C0]  __queue_work+0x9b1/0xd30
[  185.813925][    C0]  queue_work_on+0xd2/0x140
[  185.818408][    C0]  hci_cmd_timeout+0x191/0x200
[  185.823149][    C0]  process_one_work+0x71f/0xc40
[  185.827987][    C0]  worker_thread+0xa29/0x11f0
[  185.832638][    C0]  kthread+0x281/0x320
[  185.836684][    C0]  ret_from_fork+0x1f/0x30
[  185.841090][    C0] 
[  185.843413][    C0] The buggy address belongs to the object at ffff888118dfc000
[  185.843413][    C0]  which belongs to the cache kmalloc-8k of size 8192
[  185.857446][    C0] The buggy address is located 2560 bytes inside of
[  185.857446][    C0]  8192-byte region [ffff888118dfc000, ffff888118dfe000)
[  185.870875][    C0] 
[  185.873184][    C0] The buggy address belongs to the physical page:
[  185.879581][    C0] page:ffffea0004637e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118df8
[  185.889791][    C0] head:ffffea0004637e00 order:3 compound_mapcount:0 compound_pincount:0
[  185.898088][    C0] flags: 0x4000000000010200(slab|head|zone=1)
[  185.904142][    C0] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043500
[  185.912701][    C0] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  185.921258][    C0] page dumped because: kasan: bad access detected
[  185.927651][    C0] page_owner tracks the page as allocated
[  185.933341][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9304, tgid 9303 (syz.6.3907), ts 142750674826, free_ts 142678223111
[  185.956066][    C0]  post_alloc_hook+0x1f5/0x210
[  185.960818][    C0]  prep_new_page+0x1c/0x110
[  185.965305][    C0]  get_page_from_freelist+0x2c6e/0x2ce0
[  185.970856][    C0]  __alloc_pages+0x19e/0x3a0
[  185.975429][    C0]  alloc_slab_page+0x6e/0xf0
[  185.980002][    C0]  new_slab+0x98/0x3d0
[  185.984054][    C0]  ___slab_alloc+0x6f6/0xb50
[  185.988626][    C0]  __slab_alloc+0x5e/0xa0
[  185.992940][    C0]  __kmem_cache_alloc_node+0x203/0x2c0
[  185.998381][    C0]  kmalloc_trace+0x29/0xb0
[  186.002799][    C0]  audit_log_d_path+0xc6/0x240
[  186.007552][    C0]  audit_log_d_path_exe+0x42/0x70
[  186.012563][    C0]  audit_log_task+0x205/0x2e0
[  186.017218][    C0]  audit_seccomp+0x7f/0x160
[  186.021701][    C0]  __seccomp_filter+0xacd/0x19d0
[  186.026628][    C0]  __secure_computing+0xea/0x290
[  186.031544][    C0] page last free stack trace:
[  186.036200][    C0]  free_unref_page_prepare+0x742/0x750
[  186.041639][    C0]  free_unref_page+0x8f/0x530
[  186.046299][    C0]  __free_pages+0x67/0x100
[  186.050731][    C0]  __free_slab+0xca/0x1a0
[  186.055047][    C0]  __unfreeze_partials+0x160/0x190
[  186.060138][    C0]  put_cpu_partial+0xa9/0x100
[  186.064795][    C0]  __slab_free+0x1c4/0x280
[  186.069202][    C0]  ___cache_free+0xbf/0xd0
[  186.073593][    C0]  qlist_free_all+0xc6/0x140
[  186.078164][    C0]  kasan_quarantine_reduce+0x14a/0x170
[  186.083601][    C0]  __kasan_slab_alloc+0x24/0x80
[  186.088429][    C0]  slab_post_alloc_hook+0x4f/0x2d0
[  186.093520][    C0]  kmem_cache_alloc+0x16e/0x330
[  186.098345][    C0]  __kernfs_new_node+0xdb/0x680
[  186.103174][    C0]  kernfs_new_node+0x150/0x260
[  186.107918][    C0]  __kernfs_create_file+0x4e/0x270
[  186.113020][    C0] 
[  186.115322][    C0] Memory state around the buggy address:
[  186.120929][    C0]  ffff888118dfc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.128971][    C0]  ffff888118dfc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.137008][    C0] >ffff888118dfca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.145038][    C0]                    ^
[  186.149097][    C0]  ffff888118dfca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.157134][    C0]  ffff888118dfcb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.165164][    C0] ==================================================================
[  186.173212][    C0] Disabling lock debugging due to kernel taint
[  186.179421][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  186.191122][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  186.199516][    C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B              6.1.138-syzkaller-00052-g4cf22d978348 #0
[  186.210421][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  186.220454][    C0] RIP: 0010:__queue_work+0x575/0xd30
[  186.225723][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 d2 28 00 4c 89 ff e8 70 c6 a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 2b 6d 00 49 8b 7d 00 e8 53 c2
[  186.245304][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[  186.251351][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500
[  186.259308][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  186.267256][    C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[  186.275205][    C0] R10: ffffed10231bf939 R11: 1ffff110231bf939 R12: dffffc0000000000
[  186.283156][    C0] R13: 0000000000000000 R14: ffff888118dfc9c8 R15: 0000000000000008
[  186.291107][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  186.300020][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  186.306599][    C0] CR2: 0000001b2cc19ff8 CR3: 0000000121636000 CR4: 00000000003506b0
[  186.314550][    C0] Call Trace:
[  186.317827][    C0]  <IRQ>
[  186.320653][    C0]  delayed_work_timer_fn+0x61/0x80
[  186.325749][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  186.331538][    C0]  call_timer_fn+0x46/0x2a0
[  186.336030][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  186.341827][    C0]  __run_timers+0x667/0x9a0
[  186.346333][    C0]  ? calc_index+0x200/0x200
[  186.350820][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  186.356099][    C0]  run_timer_softirq+0x6a/0xf0
[  186.360860][    C0]  handle_softirqs+0x1d7/0x600
[  186.365613][    C0]  ? irqtime_account_irq+0xc4/0x240
[  186.370810][    C0]  __irq_exit_rcu+0x52/0xf0
[  186.375298][    C0]  irq_exit_rcu+0x9/0x10
[  186.379515][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  186.385125][    C0]  </IRQ>
[  186.388070][    C0]  <TASK>
[  186.390986][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  186.396951][    C0] RIP: 0010:default_idle+0xf/0x20
[  186.401963][    C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 79 56 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[  186.421560][    C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257
[  186.427610][    C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: ec0fcf18ed3e8800
[  186.435560][    C0] RDX: 0000000000000001 RSI: ffffffff85a9f700 RDI: ffffffff85a9f6c0
[  186.443511][    C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917
[  186.451463][    C0] R10: 0000000000000000 R11: ffffffff84efba50 R12: 0000000000000000
[  186.459416][    C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000
[  186.467367][    C0]  ? __cfi_default_idle+0x10/0x10
[  186.472376][    C0]  arch_cpu_idle+0x1c/0x20
[  186.476790][    C0]  default_idle_call+0x71/0x1d0
[  186.481627][    C0]  do_idle+0x1a7/0x520
[  186.485678][    C0]  ? irqentry_exit+0x30/0x40
[  186.490248][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  186.495424][    C0]  ? schedule_idle+0x5b/0x90
[  186.499995][    C0]  ? do_idle+0x1/0x520
[  186.504080][    C0]  cpu_startup_entry+0x43/0x60
[  186.508826][    C0]  rest_init+0x10a/0x130
[  186.513146][    C0]  ? __cfi_x86_late_time_init+0x8/0x8
[  186.518509][    C0]  arch_call_rest_init+0xe/0x10
[  186.523345][    C0]  start_kernel+0x482/0x4f0
[  186.527853][    C0]  x86_64_start_reservations+0x2a/0x2c
[  186.533293][    C0]  x86_64_start_kernel+0x7c/0x81
[  186.538212][    C0]  secondary_startup_64_no_verify+0xce/0xdb
[  186.544092][    C0]  </TASK>
[  186.547099][    C0] Modules linked in:
[  186.550983][    C0] ---[ end trace 0000000000000000 ]---
[  186.556422][    C0] RIP: 0010:__queue_work+0x575/0xd30
[  186.561699][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 d2 28 00 4c 89 ff e8 70 c6 a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 2b 6d 00 49 8b 7d 00 e8 53 c2
[  186.581297][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[  186.587350][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500
[  186.595319][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  186.603265][    C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[  186.611220][    C0] R10: ffffed10231bf939 R11: 1ffff110231bf939 R12: dffffc0000000000
[  186.619175][    C0] R13: 0000000000000000 R14: ffff888118dfc9c8 R15: 0000000000000008
[  186.627124][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  186.636184][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  186.642747][    C0] CR2: 0000001b2cc19ff8 CR3: 0000000121636000 CR4: 00000000003506b0
[  186.650718][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  186.658238][    C0] Kernel Offset: disabled
[  186.662550][    C0] Rebooting in 86400 seconds..