last executing test programs:

2.171838415s ago: executing program 0 (id=1135):
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
times(0xffffffffffffffff)

2.029182619s ago: executing program 0 (id=1140):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000b70242"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40)

2.008194379s ago: executing program 0 (id=1141):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000040)=""/40, 0x28)
getdents64(r0, 0xfffffffffffffffe, 0x29)

1.916027041s ago: executing program 0 (id=1145):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
read$FUSE(r1, &(0x7f00000030c0)={0x2020}, 0x2020)

1.707700225s ago: executing program 4 (id=1153):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x14, 0xdd, 0x0, 0x1, [@nested={0x10, 0x67, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x10}]}]}]}, 0x28}}, 0x0)

1.600563507s ago: executing program 3 (id=1155):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0})

1.514388469s ago: executing program 0 (id=1157):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r1, 0x6, 0x1, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.47962745s ago: executing program 4 (id=1158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001"], 0x50)

1.420477101s ago: executing program 0 (id=1160):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x41402)

1.420290591s ago: executing program 4 (id=1161):
syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00')
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000004, 0x31, 0xffffffffffffffff, 0x9335b000)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

1.402692601s ago: executing program 4 (id=1162):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

1.350743282s ago: executing program 3 (id=1163):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x90)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x401, 0xfffffffd, 0x7ff, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8)

1.236723795s ago: executing program 4 (id=1164):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3ea, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='='], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '})

1.233452245s ago: executing program 3 (id=1165):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x90, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

1.207086895s ago: executing program 4 (id=1166):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TCFLSH(r0, 0x800455c9, 0x2)

517.337799ms ago: executing program 1 (id=1182):
ioprio_set$uid(0x3, 0x0, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1})

480.668981ms ago: executing program 1 (id=1184):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000001c0)='\x00', 0x1, 0x8000c61)
fallocate(r0, 0x3, 0x8000000, 0x8000c62)

369.899472ms ago: executing program 3 (id=1186):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x14, 0xdd, 0x0, 0x1, [@nested={0x10, 0x67, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x10}]}]}]}, 0x28}}, 0x0)

359.339373ms ago: executing program 1 (id=1187):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)

330.474624ms ago: executing program 3 (id=1188):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20)
ftruncate(r0, 0x4)

320.790684ms ago: executing program 1 (id=1189):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x800008, &(0x7f0000000000)={[{@init_itable}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x515, &(0x7f00000040c0)="$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")
ptrace$getregset(0x4204, r0, 0x2, 0x0)

294.695924ms ago: executing program 3 (id=1190):
syz_usb_connect$uac1(0x6, 0x81, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x5, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x40}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x7f, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x5, 0x1, [0x6], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xd, 0x5, 0x12, {0x7, 0x25, 0x1, 0x80, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x72, 0x6, 0x9, {0x7, 0x25, 0x1, 0x83, 0x6, 0xc}}}}}}}]}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

236.560506ms ago: executing program 2 (id=1191):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)

151.119427ms ago: executing program 2 (id=1192):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

125.945288ms ago: executing program 2 (id=1193):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x2})

59.885489ms ago: executing program 2 (id=1194):
ioprio_set$uid(0x3, 0x0, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1})

59.781649ms ago: executing program 1 (id=1195):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x11, 0x2, 0x10001)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth0_vlan\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0x85, 0x4}, {0x6, 0x80000000}]}})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

59.443839ms ago: executing program 2 (id=1196):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

507.23µs ago: executing program 1 (id=1197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file2\x00', 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100dc3ba748033542625bc334eaf791a982a7422a6f7b863c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x1059a, &(0x7f0000010640)="$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")

0s ago: executing program 2 (id=1207):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
io_submit(0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

n item tag 0x0
[   36.595535][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 14 @ nid 36
[   36.600297][  T398] usbhid 4-1:0.0: can't add hid device: -71
[   36.619452][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 13 @ nid 36
[   36.655482][   T39] kye 0003:0458:0153.0002: item fetching failed at offset 6/7
[   36.655676][   T39] kye 0003:0458:0153.0002: parse failed
[   36.655704][   T39] kye: probe of 0003:0458:0153.0002 failed with error -22
[   36.669130][  T398] usbhid: probe of 4-1:0.0 failed with error -71
[   36.682041][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 12 @ nid 36
[   36.695733][   T39] usb 1-1: USB disconnect, device number 3
[   36.705762][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 11 @ nid 36
[   36.775705][  T398] usb 4-1: USB disconnect, device number 4
[   36.783492][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 10 @ nid 36
[   37.058362][   T28] kauditd_printk_skb: 27 callbacks suppressed
[   37.058380][   T28] audit: type=1400 audit(1757978430.239:200): avc:  denied  { read write } for  pid=908 comm="syz.2.237" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.061723][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 9 @ nid 36
[   37.268294][   T28] audit: type=1400 audit(1757978430.259:201): avc:  denied  { open } for  pid=908 comm="syz.2.237" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.277802][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[   37.331159][  T916] loop0: detected capacity change from 0 to 256
[   37.345386][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 7 @ nid 36
[   37.345413][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 36
[   37.372077][   T28] audit: type=1400 audit(1757978430.278:202): avc:  denied  { create } for  pid=911 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   37.383714][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 5 @ nid 36
[   37.404247][   T28] audit: type=1400 audit(1757978430.278:203): avc:  denied  { write } for  pid=911 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   37.421008][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 36
[   37.645069][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 36
[   37.654742][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 2 @ nid 36
[   37.664357][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 36
[   37.681007][  T496] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36
[   37.692183][  T496] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[   37.726759][   T28] audit: type=1400 audit(1757978430.896:204): avc:  denied  { map } for  pid=919 comm="syz.0.243" path="socket:[18064]" dev="sockfs" ino=18064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   37.794609][   T28] audit: type=1400 audit(1757978430.896:205): avc:  denied  { read } for  pid=919 comm="syz.0.243" path="socket:[18064]" dev="sockfs" ino=18064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   37.845021][   T28] audit: type=1400 audit(1757978430.936:206): avc:  denied  { map } for  pid=922 comm="syz.4.245" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   37.845132][  T937] Illegal XDP return value 4294967274 on prog  (id 71) dev N/A, expect packet loss!
[   37.868346][  T928] loop2: detected capacity change from 0 to 8192
[   37.891091][  T941] loop1: detected capacity change from 0 to 128
[   37.900237][   T28] audit: type=1400 audit(1757978430.936:207): avc:  denied  { read write } for  pid=922 comm="syz.4.245" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   37.905083][  T941] EXT4-fs (loop1): Test dummy encryption mode enabled
[   37.945479][  T928] FAT-fs (loop2): bogus sectors per cluster 0
[   37.963857][  T928] FAT-fs (loop2): Can't find a valid FAT filesystem
[   37.982051][  T941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   38.001973][  T941] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   38.016035][  T951] loop3: detected capacity change from 0 to 256
[   38.038942][  T957] loop2: detected capacity change from 0 to 512
[   38.048941][  T957] EXT4-fs: Ignoring removed nobh option
[   38.055159][  T957] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   38.071371][  T951] exFAT-fs (loop3): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d)
[   38.082850][  T957] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.260: iget: bad i_size value: 38620345925642
[   38.090049][  T941] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   38.109109][  T957] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.260: couldn't read orphan inode 15 (err -117)
[   38.149759][  T957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   38.168418][  T282] EXT4-fs (loop1): unmounting filesystem.
[   38.184999][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   38.215201][   T28] audit: type=1400 audit(1757978431.378:208): avc:  denied  { append } for  pid=956 comm="syz.2.260" path="/60/file1/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   38.262861][  T981] device erspan0 entered promiscuous mode
[   38.357501][  T994] loop0: detected capacity change from 0 to 512
[   38.373106][  T994] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   38.388194][  T994] EXT4-fs (loop0): Remounting filesystem read-only
[   38.394995][   T24] usb 5-1: Using ep0 maxpacket: 16
[   38.398903][  T994] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.276: invalid indirect mapped block 4278190080 (level 0)
[   38.410070][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.424334][  T994] EXT4-fs (loop0): Remounting filesystem read-only
[   38.424369][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.436423][  T994] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.276: invalid indirect mapped block 1 (level 1)
[   38.450832][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   38.461692][  T994] EXT4-fs (loop0): Remounting filesystem read-only
[   38.469949][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.470769][  T994] EXT4-fs (loop0): 1 truncate cleaned up
[   38.484419][  T994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   38.488539][   T24] usb 5-1: Product: syz
[   38.497041][   T24] usb 5-1: Manufacturer: syz
[   38.501658][   T24] usb 5-1: SerialNumber: syz
[   38.521404][   T24] usb 5-1: selecting invalid altsetting 1
[   38.532410][  T994] EXT4-fs (loop0): shut down requested (2)
[   38.538889][   T28] audit: type=1400 audit(1757978431.692:209): avc:  denied  { create } for  pid=993 comm="syz.0.276" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[   38.568411][  T285] EXT4-fs (loop0): unmounting filesystem.
[   38.574992][   T43] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[   38.587893][   T43] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   38.600466][   T43] EXT4-fs (loop2): This should not happen!! Data will be lost
[   38.600466][   T43] 
[   38.611806][   T43] EXT4-fs (loop2): Total free blocks count 0
[   38.618010][   T43] EXT4-fs (loop2): Free/Dirty block details
[   38.624459][   T43] EXT4-fs (loop2): free_blocks=0
[   38.629624][   T43] EXT4-fs (loop2): dirty_blocks=16032
[   38.635339][   T43] EXT4-fs (loop2): Block reservation details
[   38.641433][   T43] EXT4-fs (loop2): i_reserved_data_blocks=16032
[   38.684389][ T1004] tap0: tun_chr_ioctl cmd 2148553947
[   38.708681][   T43] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   38.773404][ T1010] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   38.783139][ T1010] SELinux: failed to load policy
[   38.951402][ T1012] loop0: detected capacity change from 0 to 40427
[   38.962621][ T1012] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   38.970879][ T1012] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   38.992130][ T1012] F2FS-fs (loop0): Found nat_bits in checkpoint
[   39.030406][ T1012] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   39.037509][ T1012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   39.056532][ T1016] loop2: detected capacity change from 0 to 40427
[   39.080508][ T1016] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3)
[   39.088201][ T1016] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   39.099295][ T1016] F2FS-fs (loop2): heap/no_heap options were deprecated
[   39.107527][ T1016] F2FS-fs (loop2): invalid crc value
[   39.136491][ T1016] F2FS-fs (loop2): Found nat_bits in checkpoint
[   39.172383][  T285] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   39.172405][  T285] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   39.182214][  T285] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   39.189792][  T285] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   39.212977][  T285] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   39.220856][ T1016] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   39.236117][  T285] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   39.236133][  T285] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   39.243841][ T1016] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   39.274409][ T1034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'.
[   39.327988][   T24] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed
[   39.354337][   T24] usb 5-1: selecting invalid altsetting 1
[   39.360514][   T24] cdc_ncm 5-1:1.0: bind() failure
[   39.375683][   T24] usb 5-1: USB disconnect, device number 2
[   39.421509][ T1029] loop3: detected capacity change from 0 to 40427
[   39.436619][ T1029] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[   39.452604][ T1029] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   39.465687][ T1029] F2FS-fs (loop3): invalid crc value
[   39.477648][ T1029] F2FS-fs (loop3): Found nat_bits in checkpoint
[   39.545840][ T1029] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   39.554382][ T1029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   39.572787][ T1044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'.
[   39.620688][  T283] syz-executor: attempt to access beyond end of device
[   39.620688][  T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   39.684458][ T1039] loop1: detected capacity change from 0 to 40427
[   39.743171][ T1039] F2FS-fs (loop1): Found nat_bits in checkpoint
[   39.773545][  T284] syz-executor: attempt to access beyond end of device
[   39.773545][  T284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   39.826092][ T1039] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   39.925320][ T1055] bridge0: port 2(bridge_slave_1) entered listening state
[   39.947869][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.955245][  T282] syz-executor: attempt to access beyond end of device
[   39.955245][  T282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   40.158810][ T1075] pim6reg0: tun_chr_ioctl cmd 1074025677
[   40.167964][ T1075] pim6reg0: linktype set to 774
[   40.177634][ T1074] loop0: detected capacity change from 0 to 4096
[   40.198783][ T1074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   40.232970][  T285] EXT4-fs (loop0): unmounting filesystem.
[   40.288500][ T1092] loop7: detected capacity change from 0 to 7
[   40.310995][ T1094] loop3: detected capacity change from 0 to 512
[   40.319815][ T1096] loop1: detected capacity change from 0 to 512
[   40.349496][ T1096] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   40.372561][ T1096] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   40.393660][ T1096] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   40.403049][ T1096] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   40.411093][ T1096] System zones: 0-2, 18-18, 34-35
[   40.416789][ T1096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   40.834492][  T282] EXT4-fs (loop1): unmounting filesystem.
[   41.258957][ T1136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'.
[   41.555431][ T1146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'.
[   41.568900][  T334] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   41.592106][ T1150] loop1: detected capacity change from 0 to 256
[   41.599747][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   41.612248][ T1150] FAT-fs (loop1): Directory bread(block 64) failed
[   41.618904][ T1150] FAT-fs (loop1): Directory bread(block 65) failed
[   41.625733][ T1150] FAT-fs (loop1): Directory bread(block 66) failed
[   41.632441][ T1150] FAT-fs (loop1): Directory bread(block 67) failed
[   41.639000][ T1150] FAT-fs (loop1): Directory bread(block 68) failed
[   41.646818][ T1150] FAT-fs (loop1): Directory bread(block 69) failed
[   41.653436][ T1150] FAT-fs (loop1): Directory bread(block 70) failed
[   41.660029][ T1150] FAT-fs (loop1): Directory bread(block 71) failed
[   41.666584][ T1150] FAT-fs (loop1): Directory bread(block 72) failed
[   41.673172][ T1150] FAT-fs (loop1): Directory bread(block 73) failed
[   41.762177][  T334] usb 3-1: Using ep0 maxpacket: 16
[   41.768708][  T334] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   41.778906][  T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.799158][  T334] usb 3-1: config 0 descriptor??
[   41.803572][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.808698][  T334] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   41.822438][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   41.835585][   T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   41.846468][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.890830][   T24] usb 1-1: config 0 descriptor??
[   41.971934][ T1176] loop4: detected capacity change from 0 to 1024
[   41.997416][ T1176] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   42.006103][ T1176] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.025226][  T334] usb 3-1: Detected FT232B
[   42.036218][  T286] EXT4-fs (loop4): unmounting filesystem.
[   42.098722][ T1168] loop1: detected capacity change from 0 to 40427
[   42.108363][ T1168] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3)
[   42.116094][ T1168] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   42.125884][ T1168] F2FS-fs (loop1): heap/no_heap options were deprecated
[   42.136312][ T1168] F2FS-fs (loop1): invalid crc value
[   42.143039][ T1168] F2FS-fs (loop1): Found nat_bits in checkpoint
[   42.196746][ T1168] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   42.204519][   T28] kauditd_printk_skb: 34 callbacks suppressed
[   42.204548][   T28] audit: type=1400 audit(1757978435.315:244): avc:  denied  { read write } for  pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   42.205492][ T1168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   42.213154][   T28] audit: type=1400 audit(1757978435.315:245): avc:  denied  { open } for  pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   42.238173][  T343] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   42.242836][   T28] audit: type=1400 audit(1757978435.315:246): avc:  denied  { ioctl } for  pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   42.300550][  T334] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   42.301922][   T28] audit: type=1400 audit(1757978435.375:247): avc:  denied  { ioctl } for  pid=1173 comm="syz.3.350" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   42.339491][  T334] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   42.340015][   T24] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[   42.354460][  T334] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   42.359162][   T24] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[   42.371671][   T24] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[   42.379507][   T28] audit: type=1400 audit(1757978435.375:248): avc:  denied  { mount } for  pid=1167 comm="syz.1.347" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.402062][  T334] usb 3-1: USB disconnect, device number 3
[   42.406173][   T24] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[   42.419606][  T334] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   42.419643][   T28] audit: type=1400 audit(1757978435.503:249): avc:  denied  { write } for  pid=1167 comm="syz.1.347" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.441061][  T334] ftdi_sio 3-1:0.0: device disconnected
[   42.450832][   T28] audit: type=1400 audit(1757978435.503:250): avc:  denied  { add_name } for  pid=1167 comm="syz.1.347" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.457140][  T343] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   42.491782][   T28] audit: type=1400 audit(1757978435.503:251): avc:  denied  { create } for  pid=1167 comm="syz.1.347" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.501679][  T343] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   42.512630][   T28] audit: type=1400 audit(1757978435.503:252): avc:  denied  { read write open } for  pid=1167 comm="syz.1.347" path="/38/file0/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.532075][  T343] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   42.555302][   T24] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device
[   42.555460][  T343] usb 4-1: config 220 has no interface number 2
[   42.569864][  T343] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   42.572595][   T24] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse
[   42.583124][  T343] usb 4-1: config 220 interface 0 has no altsetting 0
[   42.593915][   T24] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -71
[   42.596940][  T343] usb 4-1: config 220 interface 76 has no altsetting 0
[   42.611349][  T343] usb 4-1: config 220 interface 1 has no altsetting 1
[   42.618393][   T24] usb 1-1: USB disconnect, device number 4
[   42.634797][  T343] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   42.645118][  T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.653181][  T343] usb 4-1: Product: syz
[   42.664080][  T343] usb 4-1: Manufacturer: syz
[   42.668720][  T343] usb 4-1: SerialNumber: syz
[   42.669654][ T1195] fido_id[1195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   42.741864][   T28] audit: type=1400 audit(1757978435.838:253): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.764932][  T282] syz-executor: attempt to access beyond end of device
[   42.764932][  T282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   42.893040][ T1205] loop4: detected capacity change from 0 to 2048
[   42.899550][  T343] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[   42.908765][  T343] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[   42.915152][  T343] usb 4-1: No valid video chain found.
[   42.938463][ T1205]  loop4: p1 < > p3 p4 < >
[   42.947376][  T343] usb 4-1: USB disconnect, device number 5
[   42.953965][ T1205] loop4: p3 start 4284289 is beyond EOD, truncated
[   42.966608][ T1209] input: syz1 as /devices/virtual/input/input4
[   43.055605][ T1218] loop4: detected capacity change from 0 to 1024
[   43.080711][ T1218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   43.108940][  T286] EXT4-fs (loop4): unmounting filesystem.
[   43.114421][ T1223] Dead loop on virtual device ip6_vti0, fix it urgently!
[   43.166759][ T1229] pim6reg0: tun_chr_ioctl cmd 1074025680
[   43.260092][ T1225] loop0: detected capacity change from 0 to 40427
[   43.268655][ T1225] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3)
[   43.276590][ T1225] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   43.284938][ T1225] F2FS-fs (loop0): heap/no_heap options were deprecated
[   43.292695][ T1225] F2FS-fs (loop0): invalid crc value
[   43.299187][ T1225] F2FS-fs (loop0): Found nat_bits in checkpoint
[   43.328240][ T1225] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   43.335314][ T1225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   43.465991][  T285] syz-executor: attempt to access beyond end of device
[   43.465991][  T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   43.622307][ T1243] loop0: detected capacity change from 0 to 16
[   43.631673][ T1243] erofs: (device loop0): mounted with root inode @ nid 36.
[   43.891192][ T1251] loop0: detected capacity change from 0 to 40427
[   43.907283][ T1251] F2FS-fs (loop0): fault_injection options not supported
[   43.925242][ T1251] F2FS-fs (loop0): Image doesn't support compression
[   43.942566][ T1251] F2FS-fs (loop0): Image doesn't support compression
[   43.951077][ T1251] F2FS-fs (loop0): invalid crc value
[   43.978239][ T1267] loop4: detected capacity change from 0 to 512
[   43.982396][ T1251] F2FS-fs (loop0): Found nat_bits in checkpoint
[   43.991991][ T1267] EXT4-fs: Ignoring removed i_version option
[   44.003689][ T1267] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.026062][ T1267] EXT4-fs (loop4): Test dummy encryption mode enabled
[   44.047665][ T1267] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.386: inode #13: comm syz.4.386: iget: illegal inode #
[   44.062855][ T1251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   44.067957][ T1267] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.386: couldn't read orphan inode 13 (err -117)
[   44.095212][ T1267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   44.174627][ T1251] syz.0.380: attempt to access beyond end of device
[   44.174627][ T1251] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   44.189077][  T286] EXT4-fs (loop4): unmounting filesystem.
[   44.209028][ T1282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'.
[   44.462167][ T1304] loop1: detected capacity change from 0 to 1024
[   44.475326][ T1306] loop3: detected capacity change from 0 to 1024
[   44.520591][ T1306] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   44.532730][ T1306] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.549890][ T1304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   44.620930][  T283] EXT4-fs (loop3): unmounting filesystem.
[   44.628726][  T282] EXT4-fs (loop1): unmounting filesystem.
[   44.825431][ T1337] loop2: detected capacity change from 0 to 2048
[   44.840663][ T1341] SELinux: security_context_str_to_sid (r) failed with errno=-22
[   44.861675][ T1337]  loop2: p1 < > p3 p4 < >
[   44.868720][ T1337] loop2: p3 start 4284289 is beyond EOD, truncated
[   44.953551][ T1348] loop3: detected capacity change from 0 to 1024
[   44.992646][ T1348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   45.005553][ T1333] loop1: detected capacity change from 0 to 40427
[   45.014671][ T1333] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   45.027550][ T1333] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   45.060679][  T283] EXT4-fs (loop3): unmounting filesystem.
[   45.075222][ T1333] F2FS-fs (loop1): Found nat_bits in checkpoint
[   45.151541][ T1333] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   45.168410][ T1333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   45.268665][  T282] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   45.268688][  T282] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   45.276446][  T282] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   45.284069][  T282] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   45.292314][  T282] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   45.299984][  T282] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   45.307595][  T282] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   45.420059][ T1384] loop3: detected capacity change from 0 to 40427
[   45.437266][ T1384] F2FS-fs (loop3): fault_injection options not supported
[   45.447754][ T1384] F2FS-fs (loop3): Image doesn't support compression
[   45.462778][ T1384] F2FS-fs (loop3): Image doesn't support compression
[   45.472584][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'.
[   45.473229][ T1384] F2FS-fs (loop3): invalid crc value
[   45.491213][ T1390] loop0: detected capacity change from 0 to 1024
[   45.502486][ T1384] F2FS-fs (loop3): Found nat_bits in checkpoint
[   45.528848][ T1390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   45.559479][  T285] EXT4-fs (loop0): unmounting filesystem.
[   45.572806][ T1384] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   45.716526][ T1384] syz.3.435: attempt to access beyond end of device
[   45.716526][ T1384] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   45.719017][ T1416] loop4: detected capacity change from 0 to 512
[   45.736892][   T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   45.759134][ T1416] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.448: invalid indirect mapped block 10 (level 1)
[   45.773639][ T1416] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.448: invalid indirect mapped block 8 (level 1)
[   45.787619][ T1416] EXT4-fs (loop4): 1 truncate cleaned up
[   45.794896][ T1416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   45.818650][  T286] EXT4-fs (loop4): unmounting filesystem.
[   45.869059][ T1419] loop3: detected capacity change from 0 to 512
[   45.876104][ T1419] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   45.885395][ T1419] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   45.894116][ T1419] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   45.903554][ T1419] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   45.911552][ T1419] System zones: 0-2, 18-18, 34-35
[   45.917737][ T1419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   45.933069][   T39] usb 2-1: Using ep0 maxpacket: 32
[   45.951680][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.963447][  T398] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   45.971969][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.981951][   T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   45.991653][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.003449][   T39] usb 2-1: config 0 descriptor??
[   46.011602][   T39] hub 2-1:0.0: USB hub found
[   46.134883][  T283] EXT4-fs (loop3): unmounting filesystem.
[   46.148169][  T398] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[   46.170998][  T398] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   46.180291][ T1426] loop3: detected capacity change from 0 to 2048
[   46.180511][  T398] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   46.197094][  T398] usb 1-1: config 220 has no interface number 2
[   46.203348][  T398] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   46.217518][  T398] usb 1-1: config 220 interface 0 has no altsetting 0
[   46.224363][   T39] hub 2-1:0.0: 29 ports detected
[   46.229493][  T398] usb 1-1: config 220 interface 76 has no altsetting 0
[   46.236529][   T39] hub 2-1:0.0: insufficient power available to use all downstream ports
[   46.244913][  T398] usb 1-1: config 220 interface 1 has no altsetting 1
[   46.253613][ T1426]  loop3: p1 < > p3 p4 < >
[   46.254478][  T398] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   46.259121][ T1426] loop3: p3 start 4284289 is beyond EOD, 
[   46.267136][  T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.267348][ T1426] truncated
[   46.272878][  T398] usb 1-1: Product: syz
[   46.288280][  T398] usb 1-1: Manufacturer: syz
[   46.296335][  T398] usb 1-1: SerialNumber: syz
[   46.328460][ T1428] loop4: detected capacity change from 0 to 1024
[   46.358127][ T1434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'.
[   46.369931][ T1428] EXT4-fs (loop4): corrupt root inode, run e2fsck
[   46.382435][ T1428] EXT4-fs (loop4): mount failed
[   46.426817][   T39] hub 2-1:0.0: hub_hub_status failed (err = -71)
[   46.438355][   T39] hub 2-1:0.0: config failed, can't get hub status (err -71)
[   46.459753][   T39] usbhid 2-1:0.0: can't add hid device: -71
[   46.467539][   T39] usbhid: probe of 2-1:0.0 failed with error -71
[   46.510029][   T39] usb 2-1: USB disconnect, device number 2
[   46.516976][  T398] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[   46.526477][  T398] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[   46.543171][  T398] usb 1-1: No valid video chain found.
[   46.557068][  T398] usb 1-1: USB disconnect, device number 5
[   46.965989][ T1468] loop2: detected capacity change from 0 to 128
[   46.973227][ T1464] loop1: detected capacity change from 0 to 2048
[   46.998702][ T1472] loop4: detected capacity change from 0 to 512
[   47.015173][ T1464]  loop1: p1 < > p3 p4 < >
[   47.030341][ T1464] loop1: p3 start 4284289 is beyond EOD, truncated
[   47.060345][ T1472] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.469: iget: bad i_size value: 38620345925642
[   47.078167][ T1472] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.469: couldn't read orphan inode 15 (err -117)
[   47.151196][ T1472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   47.153901][ T1484] loop3: detected capacity change from 0 to 512
[   47.172228][ T1472] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.469: bg 0: block 5: invalid block bitmap
[   47.197459][ T1484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   47.208937][ T1484] EXT4-fs (loop3): 1 truncate cleaned up
[   47.214627][ T1484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   47.222834][  T335] udevd[335]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   47.239804][  T367] udevd[367]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   47.279904][  T286] EXT4-fs (loop4): unmounting filesystem.
[   47.323306][  T283] EXT4-fs (loop3): unmounting filesystem.
[   47.454212][ T1507] loop3: detected capacity change from 0 to 4096
[   47.470489][ T1507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   47.482533][   T28] kauditd_printk_skb: 81 callbacks suppressed
[   47.482547][   T28] audit: type=1400 audit(1757978440.524:335): avc:  denied  { ioctl } for  pid=1505 comm="syz.3.487" path="/106/file0/file1" dev="loop3" ino=15 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   47.513921][  T283] EXT4-fs (loop3): unmounting filesystem.
[   47.547297][   T28] audit: type=1400 audit(1757978440.574:336): avc:  denied  { write } for  pid=1516 comm="syz.2.492" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   47.548179][ T1517] input: syz1 as /devices/virtual/input/input5
[   47.610400][ T1519] loop0: detected capacity change from 0 to 2048
[   47.616817][   T28] audit: type=1400 audit(1757978440.633:337): avc:  denied  { write } for  pid=1522 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.641378][ T1519]  loop0: p1 < > p3 p4 < >
[   47.646847][ T1519] loop0: p3 start 4284289 is beyond EOD, truncated
[   47.649181][ T1530] loop4: detected capacity change from 0 to 512
[   47.660876][ T1530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   47.660904][   T28] audit: type=1400 audit(1757978440.633:338): avc:  denied  { read } for  pid=1522 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.702661][ T1530] EXT4-fs (loop4): 1 truncate cleaned up
[   47.708369][ T1530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   47.719047][ T1530] EXT4-fs error (device loop4): ext4_find_extent:900: inode #15: comm syz.4.498: inode has invalid extent depth: 25964
[   47.732291][ T1530] EXT4-fs (loop4): Remounting filesystem read-only
[   47.738843][ T1530] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size
[   47.751911][   T28] audit: type=1400 audit(1757978440.782:339): avc:  denied  { read } for  pid=1532 comm="syz.1.499" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   47.781337][   T28] audit: type=1400 audit(1757978440.782:340): avc:  denied  { open } for  pid=1532 comm="syz.1.499" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   47.786325][  T286] EXT4-fs (loop4): unmounting filesystem.
[   47.814251][   T28] audit: type=1400 audit(1757978440.851:341): avc:  denied  { map } for  pid=1532 comm="syz.1.499" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   47.854295][  T335] udevd[335]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   47.871921][  T367] udevd[367]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   48.042767][ T1551] loop3: detected capacity change from 0 to 512
[   48.057110][ T1551] EXT4-fs: Ignoring removed nobh option
[   48.069346][ T1551] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   48.086071][ T1551] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.505: iget: bad i_size value: 38620345925642
[   48.100346][ T1551] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.505: couldn't read orphan inode 15 (err -117)
[   48.112495][ T1551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   48.148060][   T28] audit: type=1400 audit(1757978441.188:342): avc:  denied  { append } for  pid=1550 comm="syz.3.505" path="/108/file1/cpuacct.usage_percpu_user" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   48.175399][ T1559] loop1: detected capacity change from 0 to 256
[   48.201262][ T1544] loop4: detected capacity change from 0 to 40427
[   48.211110][ T1544] F2FS-fs (loop4): heap/no_heap options were deprecated
[   48.216300][ T1559] FAT-fs (loop1): Directory bread(block 64) failed
[   48.218472][ T1544] F2FS-fs (loop4): fault_injection options not supported
[   48.228171][ T1559] FAT-fs (loop1): Directory bread(block 65) failed
[   48.231951][ T1544] F2FS-fs (loop4): fault_type options not supported
[   48.245303][ T1559] FAT-fs (loop1): Directory bread(block 66) failed
[   48.252137][ T1559] FAT-fs (loop1): Directory bread(block 67) failed
[   48.258890][ T1544] F2FS-fs (loop4): invalid crc value
[   48.264353][ T1559] FAT-fs (loop1): Directory bread(block 68) failed
[   48.270999][ T1559] FAT-fs (loop1): Directory bread(block 69) failed
[   48.277717][ T1559] FAT-fs (loop1): Directory bread(block 70) failed
[   48.284426][ T1559] FAT-fs (loop1): Directory bread(block 71) failed
[   48.291565][ T1559] FAT-fs (loop1): Directory bread(block 72) failed
[   48.299113][ T1544] F2FS-fs (loop4): Found nat_bits in checkpoint
[   48.316866][ T1559] FAT-fs (loop1): Directory bread(block 73) failed
[   48.354807][ T1544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   48.368920][   T28] audit: type=1400 audit(1757978441.406:343): avc:  denied  { ioctl } for  pid=1543 comm="syz.4.503" path="/112/file0/file0" dev="loop4" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   48.401829][  T286] syz-executor: attempt to access beyond end of device
[   48.401829][  T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   48.447154][ T1567] loop2: detected capacity change from 0 to 1024
[   48.502797][ T1571] loop1: detected capacity change from 0 to 256
[   48.509987][ T1567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   48.524002][ T1571] FAT-fs (loop1): Directory bread(block 64) failed
[   48.541654][ T1571] FAT-fs (loop1): Directory bread(block 65) failed
[   48.558845][ T1571] FAT-fs (loop1): Directory bread(block 66) failed
[   48.580023][ T1571] FAT-fs (loop1): Directory bread(block 67) failed
[   48.586643][ T1571] FAT-fs (loop1): Directory bread(block 68) failed
[   48.598776][ T1571] FAT-fs (loop1): Directory bread(block 69) failed
[   48.605525][ T1571] FAT-fs (loop1): Directory bread(block 70) failed
[   48.612161][ T1571] FAT-fs (loop1): Directory bread(block 71) failed
[   48.620108][ T1571] FAT-fs (loop1): Directory bread(block 72) failed
[   48.623065][ T1574] loop0: detected capacity change from 0 to 256
[   48.626668][ T1571] FAT-fs (loop1): Directory bread(block 73) failed
[   48.640533][   T28] audit: type=1400 audit(1757978441.663:344): avc:  denied  { read } for  pid=1573 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.660097][ T1574] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   48.671514][  T284] EXT4-fs (loop2): unmounting filesystem.
[   48.706198][  T393] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap
[   48.715402][ T1574] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   48.725064][  T393] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   48.771306][ T1574] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   48.784812][  T393] EXT4-fs (loop3): This should not happen!! Data will be lost
[   48.784812][  T393] 
[   48.804755][  T393] EXT4-fs (loop3): Total free blocks count 0
[   48.831812][  T393] EXT4-fs (loop3): Free/Dirty block details
[   50.505688][    C1] sched: RT throttling activated
[   50.506351][  T393] EXT4-fs (loop3): free_blocks=0
[   50.522136][  T393] EXT4-fs (loop3): dirty_blocks=16008
[   50.531978][  T393] EXT4-fs (loop3): Block reservation details
[   50.553006][  T393] EXT4-fs (loop3): i_reserved_data_blocks=16008
[   51.513827][  T294] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   51.566449][    T8] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   51.715551][  T294] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.751011][  T294] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.764827][  T294] usb 3-1: config 0 interface 0 has no altsetting 0
[   51.772687][  T294] usb 3-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00
[   51.782030][  T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.814985][  T294] usb 3-1: config 0 descriptor??
[   51.856964][  T294] usbhid 3-1:0.0: can't add hid device: -71
[   51.867543][ T1618] loop1: detected capacity change from 0 to 128
[   51.894265][  T294] usbhid: probe of 3-1:0.0 failed with error -71
[   51.924166][  T294] usb 3-1: USB disconnect, device number 4
[   51.971967][ T1630] binder: 1629:1630 ioctl 40046205 0 returned -22
[   52.391400][ T1702] incfs: Backing dir is not set, filesystem can't be mounted.
[   52.413375][ T1702] incfs: mount failed -2
[   52.431409][ T1715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'.
[   52.540442][ T1738] overlayfs: upper fs does not support tmpfile.
[   52.575309][ T1745] loop0: detected capacity change from 0 to 512
[   52.595440][ T1747] overlayfs: failed to resolve './bus': -2
[   52.612725][ T1745] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.591: casefold flag without casefold feature
[   52.647227][ T1745] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.591: couldn't read orphan inode 15 (err -117)
[   52.661588][ T1745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   52.691526][ T1760] loop3: detected capacity change from 0 to 512
[   52.703631][   T28] kauditd_printk_skb: 32 callbacks suppressed
[   52.703645][   T28] audit: type=1400 audit(1757978445.701:377): avc:  denied  { setattr } for  pid=1743 comm="syz.0.591" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   52.756934][ T1760] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.596: invalid indirect mapped block 10 (level 1)
[   52.786688][  T285] EXT4-fs (loop0): unmounting filesystem.
[   52.790283][ T1760] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.596: invalid indirect mapped block 8 (level 1)
[   52.806145][ T1760] EXT4-fs (loop3): 1 truncate cleaned up
[   52.816149][ T1760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   52.876797][  T283] EXT4-fs (loop3): unmounting filesystem.
[   52.985441][   T28] audit: type=1400 audit(1757978445.989:378): avc:  denied  { bind } for  pid=1786 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.036966][   T28] audit: type=1400 audit(1757978446.009:379): avc:  denied  { write } for  pid=1786 comm="syz.4.608" path="socket:[22012]" dev="sockfs" ino=22012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   53.064177][ T1792] loop2: detected capacity change from 0 to 512
[   53.104402][ T1792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   53.113514][ T1792] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.540308][ T1799] loop4: detected capacity change from 0 to 512
[   54.547231][ T1799] EXT4-fs: Ignoring removed nobh option
[   54.553105][ T1799] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.585093][  T284] EXT4-fs (loop2): unmounting filesystem.
[   54.591037][ T1799] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.612: iget: bad i_size value: 38620345925642
[   54.628525][ T1799] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.612: couldn't read orphan inode 15 (err -117)
[   54.665800][ T1799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   54.874487][ T1807] loop0: detected capacity change from 0 to 40427
[   54.889142][ T1807] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   54.897449][ T1807] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   54.917313][ T1807] F2FS-fs (loop0): invalid crc value
[   54.951511][ T1807] F2FS-fs (loop0): Found nat_bits in checkpoint
[   55.077678][ T1807] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   55.084764][ T1807] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   55.132276][ T1826] loop3: detected capacity change from 0 to 1024
[   55.147801][ T1826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.179083][   T28] audit: type=1400 audit(1757978448.165:380): avc:  denied  { ioctl } for  pid=1830 comm="syz.1.621" path="socket:[22126]" dev="sockfs" ino=22126 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.205692][ T1831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'.
[   55.219177][ T1831] netlink: 7 bytes leftover after parsing attributes in process `syz.1.621'.
[   55.229996][ T1826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   55.241386][   T28] audit: type=1400 audit(1757978448.224:381): avc:  denied  { sys_module } for  pid=1806 comm="syz.0.614" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   55.264275][  T393] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap
[   55.277163][  T393] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   55.292800][  T393] EXT4-fs (loop4): This should not happen!! Data will be lost
[   55.292800][  T393] 
[   55.303680][ T1826] EXT4-fs warning (device loop3): empty_inline_dir:1866: bad inline directory (dir #12) - no `..'
[   55.314428][   T28] audit: type=1400 audit(1757978448.284:382): avc:  denied  { rename } for  pid=1825 comm="syz.3.619" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   55.337017][   T28] audit: type=1400 audit(1757978448.284:383): avc:  denied  { rmdir } for  pid=1825 comm="syz.3.619" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.369378][  T393] EXT4-fs (loop4): Total free blocks count 0
[   55.382882][  T283] EXT4-fs (loop3): unmounting filesystem.
[   55.400136][  T393] EXT4-fs (loop4): Free/Dirty block details
[   55.418166][  T393] EXT4-fs (loop4): free_blocks=0
[   55.442023][  T393] EXT4-fs (loop4): dirty_blocks=16008
[   55.451043][ T1842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'.
[   55.466147][  T393] EXT4-fs (loop4): Block reservation details
[   55.486163][  T393] EXT4-fs (loop4): i_reserved_data_blocks=16008
[   55.547757][    T8] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   55.604587][ T1856] syz.2.636[1856] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.604670][ T1856] syz.2.636[1856] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.665341][   T28] audit: type=1400 audit(1757978448.642:384): avc:  denied  { execute } for  pid=1859 comm="syz.1.638" path="/89/net_prio.prioidx" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   55.740565][ T1869] loop2: detected capacity change from 0 to 128
[   55.775520][ T1869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   55.799092][ T1869] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   55.815373][   T28] audit: type=1326 audit(1757978448.791:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1879 comm="syz.4.655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bd7d8eba9 code=0x0
[   55.852983][  T284] EXT4-fs (loop2): unmounting filesystem.
[   55.912647][  T334] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   55.967649][   T28] audit: type=1400 audit(1757978448.940:386): avc:  denied  { setopt } for  pid=1883 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   55.971099][ T1889] loop1: detected capacity change from 0 to 512
[   55.995165][ T1889] EXT4-fs: Ignoring removed nobh option
[   56.001114][ T1889] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   56.034789][ T1889] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.646: iget: bad i_size value: 38620345925642
[   56.047627][ T1889] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.646: couldn't read orphan inode 15 (err -117)
[   56.061776][ T1889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   56.113706][  T334] usb 1-1: Using ep0 maxpacket: 16
[   56.121266][  T334] usb 1-1: config 1 interface 0 altsetting 168 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.153734][  T334] usb 1-1: config 1 interface 0 altsetting 168 bulk endpoint 0x82 has invalid maxpacket 96
[   56.173952][ T1903] syz.3.652[1903] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.174213][ T1903] syz.3.652[1903] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.191640][  T334] usb 1-1: config 1 interface 0 altsetting 168 endpoint 0x3 has invalid maxpacket 53000, setting to 1024
[   56.215111][  T334] usb 1-1: config 1 interface 0 altsetting 168 bulk endpoint 0x3 has invalid maxpacket 1024
[   56.242043][  T334] usb 1-1: config 1 interface 0 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 17
[   56.258824][ T1907] loop3: detected capacity change from 0 to 512
[   56.272112][  T334] usb 1-1: config 1 interface 0 has no altsetting 0
[   56.288029][  T334] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   56.301438][ T1907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   56.311101][  T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   56.319547][ T1907] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.330289][  T334] usb 1-1: SerialNumber: syz
[   56.340388][ T1860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   56.349575][ T1860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   56.365440][  T334] hub 1-1:1.0: bad descriptor, ignoring hub
[   56.371892][  T334] hub: probe of 1-1:1.0 failed with error -5
[   56.378580][  T283] EXT4-fs (loop3): unmounting filesystem.
[   56.389276][ T1913] loop2: detected capacity change from 0 to 512
[   56.398121][ T1035] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:5: bg 0: block 5: invalid block bitmap
[   56.401051][ T1913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[   56.432107][ T1913] System zones: 1-12
[   56.436882][ T1913] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.656: Directory hole found for htree index block 0
[   56.439836][ T1035] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   56.461989][ T1913] EXT4-fs (loop2): Remounting filesystem read-only
[   56.462014][ T1035] EXT4-fs (loop1): This should not happen!! Data will be lost
[   56.462014][ T1035] 
[   56.476305][ T1913] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[   56.479598][ T1035] EXT4-fs (loop1): Total free blocks count 0
[   56.492781][ T1035] EXT4-fs (loop1): Free/Dirty block details
[   56.493449][ T1913] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.656: Directory hole found for htree index block 0
[   56.502715][ T1035] EXT4-fs (loop1): free_blocks=0
[   56.516572][ T1035] EXT4-fs (loop1): dirty_blocks=16024
[   56.521492][ T1913] EXT4-fs (loop2): Remounting filesystem read-only
[   56.522011][ T1035] EXT4-fs (loop1): Block reservation details
[   56.534581][ T1035] EXT4-fs (loop1): i_reserved_data_blocks=16024
[   56.536160][ T1913] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   56.553126][ T1913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   56.572119][ T1860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   56.608251][ T1860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   56.629340][  T393] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   56.644164][  T284] EXT4-fs (loop2): unmounting filesystem.
[   56.690334][ T1923] loop2: detected capacity change from 0 to 512
[   56.699980][ T1923] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   56.723764][ T1921] netlink: 128 bytes leftover after parsing attributes in process `syz.4.661'.
[   56.735638][ T1923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   56.745844][ T1921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.661'.
[   56.756216][ T1921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.661'.
[   56.766094][ T1923] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.660: Invalid block bitmap block 0 in block_group 0
[   56.812222][ T1923] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   56.821635][ T1923] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.660: attempt to clear invalid blocks 983261 len 1
[   56.835406][ T1923] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.660: Invalid inode table block 0 in block_group 0
[   56.839572][ T1932] loop1: detected capacity change from 0 to 256
[   56.862395][ T1923] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem
[   56.873959][ T1932] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   56.886214][ T1923] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   56.898099][ T1923] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.660: Invalid inode table block 0 in block_group 0
[   56.915686][ T1923] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem
[   56.926024][ T1923] EXT4-fs error (device loop2): ext4_truncate:4314: inode #11: comm syz.2.660: mark_inode_dirty error
[   56.947262][ T1923] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   56.963455][ T1923] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.660: Invalid inode table block 0 in block_group 0
[   56.981015][ T1923] EXT4-fs (loop2): 1 truncate cleaned up
[   56.986832][ T1923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   57.032853][ T1923] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.660: Invalid inode table block 0 in block_group 0
[   57.046904][ T1947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[   57.063587][  T334] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[   57.080116][ T1923] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem
[   57.100001][ T1923] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #2: comm syz.2.660: mark_inode_dirty error
[   57.148897][ T1955] netlink: 52 bytes leftover after parsing attributes in process `syz.4.676'.
[   57.158185][  T393] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm kworker/u4:4: Invalid inode table block 0 in block_group 0
[   57.380718][  T343] usb 1-1: USB disconnect, device number 6
[   57.602147][ T2006] SELinux: failed to load policy
[   57.867104][   T28] kauditd_printk_skb: 27 callbacks suppressed
[   57.867120][   T28] audit: type=1400 audit(1757978450.840:414): avc:  denied  { create } for  pid=2019 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.892847][   T28] audit: type=1400 audit(1757978450.840:415): avc:  denied  { ioctl } for  pid=2019 comm="syz.4.699" path="socket:[23392]" dev="sockfs" ino=23392 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.085729][ T2024] loop1: detected capacity change from 0 to 16
[   58.092581][ T2024] erofs: (device loop1): mounted with root inode @ nid 36.
[   58.106171][ T2024] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   58.115785][ T2024] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[   58.125870][ T2024] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   58.135501][ T2024] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[   58.390399][ T2030] loop1: detected capacity change from 0 to 40427
[   58.401326][ T2030] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   58.408026][ T2030] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   58.418462][ T2030] F2FS-fs (loop1): Found nat_bits in checkpoint
[   58.448761][ T2030] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   58.457214][ T2030] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   58.489192][  T282] syz-executor: attempt to access beyond end of device
[   58.489192][  T282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   58.591287][   T28] audit: type=1400 audit(1757978451.556:416): avc:  denied  { relabelfrom } for  pid=2033 comm="syz.1.704" name="NETLINK" dev="sockfs" ino=23396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   58.615731][   T28] audit: type=1400 audit(1757978451.556:417): avc:  denied  { relabelto } for  pid=2033 comm="syz.1.704" name="NETLINK" dev="sockfs" ino=23396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[   58.730673][ T2038] loop0: detected capacity change from 0 to 512
[   58.737715][ T2038] EXT4-fs: Ignoring removed nobh option
[   58.743654][ T2038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   58.756541][ T2038] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.705: iget: bad i_size value: 38620345925642
[   58.769544][ T2038] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.705: couldn't read orphan inode 15 (err -117)
[   58.942532][   T43] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[   58.955278][   T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   58.967795][   T43] EXT4-fs (loop0): This should not happen!! Data will be lost
[   58.967795][   T43] 
[   58.977449][   T43] EXT4-fs (loop0): Total free blocks count 0
[   58.983488][   T43] EXT4-fs (loop0): Free/Dirty block details
[   58.989405][   T43] EXT4-fs (loop0): free_blocks=0
[   58.994375][   T43] EXT4-fs (loop0): dirty_blocks=16000
[   58.999763][   T43] EXT4-fs (loop0): Block reservation details
[   59.005758][   T43] EXT4-fs (loop0): i_reserved_data_blocks=16000
[   59.048505][   T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   59.061331][   T43] EXT4-fs (loop0): This should not happen!! Data will be lost
[   59.061331][   T43] 
[   59.152636][ T2042] loop0: detected capacity change from 0 to 512
[   59.182134][ T2042] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.707: corrupted inode contents
[   59.194109][ T2042] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #3: comm syz.0.707: mark_inode_dirty error
[   59.205810][ T2042] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.707: corrupted inode contents
[   59.217697][ T2042] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.707: mark_inode_dirty error
[   59.229201][ T2042] Quota error (device loop0): write_blk: dquota write failed
[   59.236636][ T2042] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   59.246609][ T2042] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.707: Failed to acquire dquot type 0
[   59.258742][ T2042] EXT4-fs (loop0): 1 truncate cleaned up
[   59.264592][ T2042] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.531037][  T343] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[   61.574034][ T2055] loop0: detected capacity change from 0 to 512
[   61.591006][ T2036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'.
[   61.614741][ T2055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[   61.625248][ T2058] loop2: detected capacity change from 0 to 512
[   61.638987][ T2055] System zones: 1-12
[   61.657766][ T2055] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.711: Directory hole found for htree index block 0
[   61.672275][ T2058] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.713: casefold flag without casefold feature
[   61.701304][ T2055] EXT4-fs (loop0): Remounting filesystem read-only
[   61.707868][ T2055] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[   61.716423][ T2058] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.713: couldn't read orphan inode 15 (err -117)
[   61.716471][ T2055] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.711: Directory hole found for htree index block 0
[   61.744580][ T2055] EXT4-fs (loop0): Remounting filesystem read-only
[   61.751543][ T2055] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   61.843009][ T2078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'.
[   61.896936][   T28] audit: type=1400 audit(1757978454.842:418): avc:  denied  { create } for  pid=2085 comm="syz.1.722" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   61.964101][ T2051] loop3: detected capacity change from 0 to 40427
[   61.970414][   T28] audit: type=1400 audit(1757978454.862:419): avc:  denied  { read } for  pid=2085 comm="syz.1.722" name="file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.020539][ T2051] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   62.035167][ T2102] loop4: detected capacity change from 0 to 512
[   62.041428][ T2051] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   62.050419][ T2051] F2FS-fs (loop3): invalid crc value
[   62.063207][   T28] audit: type=1400 audit(1757978454.862:420): avc:  denied  { open } for  pid=2085 comm="syz.1.722" path="/105/file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.110173][ T2102] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   62.123431][ T2051] F2FS-fs (loop3): Found nat_bits in checkpoint
[   62.131439][ T2102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   62.166024][   T28] audit: type=1400 audit(1757978454.862:421): avc:  denied  { ioctl } for  pid=2085 comm="syz.1.722" path="/105/file0" dev="tmpfs" ino=568 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.197135][ T2102] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.728: Invalid block bitmap block 0 in block_group 0
[   62.212331][ T2051] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   62.219384][ T2051] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   62.227419][ T2102] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   62.279375][ T2102] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.728: attempt to clear invalid blocks 983261 len 1
[   62.311403][ T2102] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.728: Invalid inode table block 0 in block_group 0
[   62.321437][ T2106] loop2: detected capacity change from 0 to 40427
[   62.325378][ T2102] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5917: Corrupt filesystem
[   62.343665][ T2102] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   62.362734][ T2106] F2FS-fs (loop2): invalid crc value
[   62.378980][ T2102] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.728: Invalid inode table block 0 in block_group 0
[   62.395414][ T2106] F2FS-fs (loop2): Found nat_bits in checkpoint
[   62.434408][ T2102] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5917: Corrupt filesystem
[   62.454568][ T2102] EXT4-fs error (device loop4): ext4_truncate:4314: inode #11: comm syz.4.728: mark_inode_dirty error
[   62.471883][ T2102] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   62.482032][ T2102] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.728: Invalid inode table block 0 in block_group 0
[   62.496382][ T2106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   62.496596][ T2102] EXT4-fs (loop4): 1 truncate cleaned up
[   62.504525][ T2131] loop3: detected capacity change from 0 to 512
[   62.530402][ T2102] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.728: Invalid inode table block 0 in block_group 0
[   62.543466][ T2102] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5917: Corrupt filesystem
[   62.553051][ T2102] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #2: comm syz.4.728: mark_inode_dirty error
[   62.569317][ T2131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[   62.577830][ T2131] System zones: 1-12
[   62.577851][ T2121] f2fs_ckpt-7:2: attempt to access beyond end of device
[   62.577851][ T2121] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   62.582307][ T2131] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.733: Directory hole found for htree index block 0
[   62.608237][  T341] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[   62.608502][ T2131] EXT4-fs (loop3): Remounting filesystem read-only
[   62.628404][ T2131] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[   62.649541][ T2134] loop4: detected capacity change from 0 to 512
[   62.649663][ T2131] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.733: Directory hole found for htree index block 0
[   62.673853][  T334] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   62.688929][ T2131] EXT4-fs (loop3): Remounting filesystem read-only
[   62.697810][ T2134] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.737: corrupted inode contents
[   62.710117][ T2131] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   62.718461][  T343] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   62.734181][ T2134] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #3: comm syz.4.737: mark_inode_dirty error
[   62.754727][ T2134] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.737: corrupted inode contents
[   62.795425][ T2134] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.737: mark_inode_dirty error
[   62.823174][ T2134] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.737: Failed to acquire dquot type 0
[   62.851711][ T2134] EXT4-fs (loop4): 1 truncate cleaned up
[   62.863114][ T2134] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.864503][  T334] usb 1-1: Using ep0 maxpacket: 16
[   62.901471][  T334] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.912439][  T343] usb 2-1: Using ep0 maxpacket: 16
[   62.919948][  T334] usb 1-1: config 0 interface 0 has no altsetting 0
[   62.926831][  T334] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   62.940598][  T343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.962833][  T343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   62.974142][ T2153] loop4: detected capacity change from 0 to 512
[   62.980870][  T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.995465][ T2153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[   63.001307][  T343] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   63.012509][ T2153] System zones: 1-12
[   63.017359][ T2153] EXT4-fs (loop4): orphan cleanup on readonly fs
[   63.023858][ T2153] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.745: invalid indirect mapped block 8 (level 2)
[   63.024561][  T334] usb 1-1: config 0 descriptor??
[   63.042181][  T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.051602][ T2153] EXT4-fs (loop4): 1 truncate cleaned up
[   63.076627][  T343] usb 2-1: Product: syz
[   63.080889][  T343] usb 2-1: Manufacturer: syz
[   63.104397][  T343] usb 2-1: SerialNumber: syz
[   63.151219][ T2149] loop2: detected capacity change from 0 to 40427
[   63.169104][ T2149] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   63.191777][ T2149] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   63.210648][ T2149] F2FS-fs (loop2): invalid crc value
[   63.237922][ T2149] F2FS-fs (loop2): Found nat_bits in checkpoint
[   63.320235][ T2149] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   63.327461][ T2125] loop0: detected capacity change from 0 to 8192
[   63.329880][ T2149] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   63.452288][   T28] kauditd_printk_skb: 17 callbacks suppressed
[   63.452303][   T28] audit: type=1400 audit(1757978456.396:437): avc:  denied  { read } for  pid=2167 comm="syz.3.750" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.483348][   T28] audit: type=1400 audit(1757978456.396:438): avc:  denied  { open } for  pid=2167 comm="syz.3.750" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.514061][   T28] audit: type=1400 audit(1757978456.396:439): avc:  denied  { ioctl } for  pid=2167 comm="syz.3.750" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.520388][ T2164] loop4: detected capacity change from 0 to 40427
[   63.520873][  T343] usb 2-1: 0:2 : does not exist
[   63.562774][  T334] hid (null): unknown global tag 0xe
[   63.567845][ T2164] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[   63.583261][ T2164] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   63.591922][  T334] hid (null): unknown global tag 0xc
[   63.591992][ T2164] F2FS-fs (loop4): heap/no_heap options were deprecated
[   63.615963][  T334] hid (null): unknown global tag 0x1a
[   63.622123][ T2164] F2FS-fs (loop4): invalid crc value
[   63.627699][  T334] hid (null): unknown global tag 0xd
[   63.634976][  T334] hid (null): global environment stack underflow
[   63.641441][  T334] hid (null): unknown global tag 0xd
[   63.647033][  T334] hid (null): invalid report_count 1666728304
[   63.654223][ T2164] F2FS-fs (loop4): Found nat_bits in checkpoint
[   63.660570][  T334] hid (null): unknown global tag 0xa1
[   63.666021][  T334] hid (null): unknown global tag 0xe
[   63.687455][  T334] hid (null): invalid report_size 33679
[   63.693076][  T334] hid (null): unknown global tag 0xc
[   63.717651][ T2164] F2FS-fs (loop4): Start checkpoint disabled!
[   63.724589][ T2164] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   63.731777][ T2164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   63.794330][  T334] usb 1-1: USB disconnect, device number 7
[   63.810406][  T393] kworker/u4:4: attempt to access beyond end of device
[   63.810406][  T393] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   63.825091][  T393] kworker/u4:4: attempt to access beyond end of device
[   63.825091][  T393] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   63.936072][ T2186] loop4: detected capacity change from 0 to 16
[   63.952932][ T2186] erofs: (device loop4): mounted with root inode @ nid 36.
[   63.965915][  T343] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   63.968044][ T2186] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   63.983852][ T2186] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   63.992836][  T343] usb 2-1: USB disconnect, device number 3
[   63.995766][ T2186] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   64.008280][ T2186] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   64.055248][ T2191] SELinux: failed to load policy
[   64.171436][   T28] audit: type=1400 audit(1757978457.114:440): avc:  denied  { getopt } for  pid=2198 comm="syz.4.760" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   64.173424][ T2199] loop4: detected capacity change from 0 to 256
[   64.213243][ T2199] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[   64.230242][   T28] audit: type=1400 audit(1757978457.174:441): avc:  denied  { setattr } for  pid=2198 comm="syz.4.760" name="file0" dev="loop4" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.274979][ T2205] loop4: detected capacity change from 0 to 1024
[   64.279386][   T39] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   64.288939][ T2205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.305519][ T2205] EXT4-fs warning (device loop4): empty_inline_dir:1866: bad inline directory (dir #12) - no `..'
[   64.322466][ T2209] loop3: detected capacity change from 0 to 128
[   64.349495][ T2209] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   64.471071][   T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   64.486340][ T2216] loop4: detected capacity change from 0 to 1024
[   64.498329][   T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   64.500503][ T2219] device vlan3 entered promiscuous mode
[   64.517161][   T39] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[   64.527540][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.545648][   T39] usb 3-1: config 0 descriptor??
[   64.551258][ T2183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   64.559041][ T2216] EXT4-fs mount: 21 callbacks suppressed
[   64.559055][ T2216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   64.577173][ T2219] device bridge0 entered promiscuous mode
[   64.579879][ T2216] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.608568][   T28] audit: type=1400 audit(1757978457.543:442): avc:  denied  { read write } for  pid=2215 comm="syz.4.768" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   64.653006][   T28] audit: type=1400 audit(1757978457.582:443): avc:  denied  { open } for  pid=2215 comm="syz.4.768" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   64.676541][   T28] audit: type=1400 audit(1757978457.582:444): avc:  denied  { mounton } for  pid=2215 comm="syz.4.768" path="/171/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.700462][  T286] EXT4-fs (loop4): unmounting filesystem.
[   64.705794][   T28] audit: type=1400 audit(1757978457.582:445): avc:  denied  { mount } for  pid=2215 comm="syz.4.768" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   64.709181][ T2228] loop0: detected capacity change from 0 to 512
[   64.794063][ T2232] loop1: detected capacity change from 0 to 256
[   64.807935][ T2232] FAT-fs (loop1): Unrecognized mount option "nnnumtail=0" or missing value
[   64.842161][ T2228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   64.856881][ T2228] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.885274][   T28] audit: type=1400 audit(1757978457.822:446): avc:  denied  { map } for  pid=2239 comm="syz.4.778" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.957685][  T285] EXT4-fs (loop0): unmounting filesystem.
[   64.978698][ T2227] loop3: detected capacity change from 0 to 40427
[   64.984987][   T39] hkems 0003:2006:0118.0005: item fetching failed at offset 5/7
[   64.993098][ T2227] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[   65.001896][ T2227] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   65.015439][   T39] hkems 0003:2006:0118.0005: parse failed
[   65.035995][   T39] hkems: probe of 0003:2006:0118.0005 failed with error -22
[   65.040224][ T2251] loop4: detected capacity change from 0 to 512
[   65.066817][ T2227] F2FS-fs (loop3): Found nat_bits in checkpoint
[   65.075093][ T2251] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.784: casefold flag without casefold feature
[   65.089598][ T2251] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.784: couldn't read orphan inode 15 (err -117)
[   65.102394][ T2251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   65.145881][ T2227] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   65.153760][ T2227] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   65.170458][  T286] EXT4-fs (loop4): unmounting filesystem.
[   65.200113][   T39] usb 3-1: USB disconnect, device number 5
[   65.215404][ T2263] loop0: detected capacity change from 0 to 256
[   65.225122][  T283] syz-executor: attempt to access beyond end of device
[   65.225122][  T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   65.246969][ T2263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[   65.434528][ T2288] loop0: detected capacity change from 0 to 512
[   65.462362][ T2288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   65.472180][ T2290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'.
[   65.488908][ T2288] EXT4-fs (loop0): 1 truncate cleaned up
[   65.494915][ T2288] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   65.547178][  T285] EXT4-fs (loop0): unmounting filesystem.
[   65.608915][ T2310] incfs: iterate_incfs_dir / -22
[   65.656431][ T2315] netlink: 71 bytes leftover after parsing attributes in process `syz.4.812'.
[   65.880464][ T2344] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[   65.892683][ T2344] netlink: 'syz.0.823': attribute type 2 has an invalid length.
[   65.905461][ T2344] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[   65.920390][ T2344] netlink: 'syz.0.823': attribute type 2 has an invalid length.
[   66.164701][ T2388] loop2: detected capacity change from 0 to 256
[   66.177494][ T2388] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value
[   66.257481][ T2394] loop2: detected capacity change from 0 to 16
[   66.274538][ T2394] erofs: (device loop2): mounted with root inode @ nid 36.
[   66.289733][ T2394] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=46
[   66.327007][ T2394] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=46
[   66.344037][ T2394] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=46
[   66.379334][ T2394] overlayfs: failed to get redirect (-117)
[   66.384975][ T2412] loop3: detected capacity change from 0 to 512
[   66.488194][ T2419] loop0: detected capacity change from 0 to 512
[   66.508862][ T2419] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.516741][ T2419] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   66.554172][ T2419] EXT4-fs (loop0): 1 truncate cleaned up
[   66.585531][ T2419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   66.631545][ T2410] loop4: detected capacity change from 0 to 40427
[   66.641291][ T2410] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   66.649289][ T2410] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   66.658526][  T285] EXT4-fs (loop0): unmounting filesystem.
[   66.664648][ T2410] F2FS-fs (loop4): invalid crc value
[   66.679675][ T2410] F2FS-fs (loop4): Found nat_bits in checkpoint
[   66.726105][ T2433] SELinux: ebitmap: truncated map
[   66.731234][ T2433] SELinux: failed to load policy
[   66.757064][ T2410] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   66.762047][ T2436] netlink: 104 bytes leftover after parsing attributes in process `syz.0.861'.
[   66.764174][ T2410] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   66.967203][ T2428] loop1: detected capacity change from 0 to 40427
[   66.980776][ T2428] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   66.997867][ T2428] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   67.011606][ T2428] F2FS-fs (loop1): invalid crc value
[   67.051937][ T2428] F2FS-fs (loop1): Found nat_bits in checkpoint
[   67.133445][ T2428] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   67.140542][ T2428] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   67.222606][ T2470] loop4: detected capacity change from 0 to 2048
[   67.234835][ T2448] loop0: detected capacity change from 0 to 40427
[   67.249530][ T2448] F2FS-fs (loop0): fault_injection options not supported
[   67.258539][ T2448] F2FS-fs (loop0): fault_type options not supported
[   67.278202][ T2448] F2FS-fs (loop0): Image doesn't support compression
[   67.296091][ T2448] F2FS-fs (loop0): invalid crc value
[   67.308704][ T2470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   67.308740][ T2448] F2FS-fs (loop0): Found nat_bits in checkpoint
[   67.350729][ T2470] EXT4-fs (loop4): shut down requested (0)
[   67.360994][ T2467] loop2: detected capacity change from 0 to 40427
[   67.368383][ T2448] F2FS-fs (loop0): Start checkpoint disabled!
[   67.379344][ T2467] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[   67.393317][ T2448] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   67.419439][ T2467] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   67.428162][  T286] EXT4-fs (loop4): unmounting filesystem.
[   67.472116][ T2467] F2FS-fs (loop2): Found nat_bits in checkpoint
[   67.507184][ T2487] loop1: detected capacity change from 0 to 512
[   67.558264][ T2467] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   67.572288][ T2467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   67.584704][ T2487] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.876: corrupted inode contents
[   67.616995][ T2487] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #3: comm syz.1.876: mark_inode_dirty error
[   67.636561][ T2487] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.876: corrupted inode contents
[   67.661425][  T284] syz-executor: attempt to access beyond end of device
[   67.661425][  T284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.678786][ T2487] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.876: mark_inode_dirty error
[   67.693587][ T2487] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.876: Failed to acquire dquot type 0
[   67.732926][ T2487] EXT4-fs (loop1): 1 truncate cleaned up
[   67.739278][ T2487] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   67.748660][ T2487] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.772566][  T282] EXT4-fs (loop1): unmounting filesystem.
[   67.833278][  T294] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   68.022695][ T2528] loop2: detected capacity change from 0 to 1024
[   68.034238][  T294] usb 5-1: Using ep0 maxpacket: 32
[   68.054911][  T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.071791][ T2528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   68.080769][  T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.092082][ T2528] process 'syz.2.899' launched './file1' with NULL argv: empty string added
[   68.093690][  T294] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   68.110028][  T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.113063][ T2528] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   68.118994][  T294] usb 5-1: config 0 descriptor??
[   68.131331][  T294] hub 5-1:0.0: USB hub found
[   68.138173][  T284] EXT4-fs (loop2): unmounting filesystem.
[   68.173817][ T2540] loop2: detected capacity change from 0 to 128
[   68.216350][ T2545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.906'.
[   68.225404][ T2545] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   68.331694][  T294] hub 5-1:0.0: 1 port detected
[   68.389572][ T2562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'.
[   68.486579][   T28] kauditd_printk_skb: 20 callbacks suppressed
[   68.486595][   T28] audit: type=1400 audit(2000000000.100:465): avc:  denied  { write } for  pid=2568 comm="syz.2.917" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   68.515587][   T28] audit: type=1400 audit(2000000000.100:466): avc:  denied  { read write } for  pid=2568 comm="syz.2.917" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   68.539892][   T28] audit: type=1400 audit(2000000000.100:467): avc:  denied  { open } for  pid=2568 comm="syz.2.917" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   68.568607][   T28] audit: type=1400 audit(2000000000.100:468): avc:  denied  { ioctl } for  pid=2568 comm="syz.2.917" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   68.593958][  T334] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   68.766302][  T294] usb 5-1: USB disconnect, device number 3
[   68.775956][  T334] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[   68.787336][  T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.796742][  T334] usb 1-1: Product: syz
[   68.801255][  T334] usb 1-1: Manufacturer: syz
[   68.806263][  T334] usb 1-1: SerialNumber: syz
[   68.816254][  T334] r8152-cfgselector 1-1: config 0 descriptor??
[   68.862790][ T2588] loop1: detected capacity change from 0 to 128
[   68.878061][ T2588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   68.888860][  T343] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   68.890598][ T2588] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   68.915916][  T282] EXT4-fs (loop1): unmounting filesystem.
[   68.954085][ T2596] loop1: detected capacity change from 0 to 512
[   68.970844][ T2596] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   68.985605][ T2596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.927: bg 0: block 5: invalid block bitmap
[   68.998069][ T2596] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   69.008502][ T2596] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.927: invalid indirect mapped block 3 (level 2)
[   69.022582][ T2596] EXT4-fs (loop1): 2 truncates cleaned up
[   69.028511][ T2596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   69.064680][  T282] EXT4-fs (loop1): unmounting filesystem.
[   69.081997][  T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.094172][  T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.104957][  T343] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   69.114442][  T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.123331][  T343] usb 4-1: config 0 descriptor??
[   69.226298][  T334] r8152-cfgselector 1-1: Unknown version 0x0000
[   69.226511][   T28] audit: type=1400 audit(2000000000.840:469): avc:  denied  { create } for  pid=2553 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   69.232654][  T334] r8152-cfgselector 1-1: bad CDC descriptors
[   69.262160][  T334] r8152-cfgselector 1-1: Unknown version 0x0000
[   69.269788][  T334] r8152-cfgselector 1-1: USB disconnect, device number 8
[   69.332536][   T28] audit: type=1400 audit(2000000000.940:470): avc:  denied  { read write } for  pid=2616 comm="syz.1.937" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   69.375191][   T28] audit: type=1400 audit(2000000000.940:471): avc:  denied  { open } for  pid=2616 comm="syz.1.937" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   69.384824][ T2621] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   69.512323][ T2623] loop4: detected capacity change from 0 to 8192
[   69.522448][   T28] audit: type=1400 audit(2000000001.140:472): avc:  denied  { remount } for  pid=2622 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   69.543480][  T343] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[   69.551453][  T343] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[   69.605235][ T2619] loop2: detected capacity change from 0 to 40427
[   69.616546][ T2619] F2FS-fs (loop2): fault_injection options not supported
[   69.640676][ T2619] F2FS-fs (loop2): invalid crc value
[   69.650994][ T2619] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   69.682055][ T2619] F2FS-fs (loop2): Start checkpoint disabled!
[   69.688920][ T2619] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   69.700997][ T2619] syz.2.938: attempt to access beyond end of device
[   69.700997][ T2619] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   69.847346][   T28] audit: type=1326 audit(2000000001.460:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.2.945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faba598eba9 code=0x0
[   69.955330][  T343] usb 4-1: USB disconnect, device number 6
[   70.000401][ T2643] loop0: detected capacity change from 0 to 40427
[   70.008611][ T2643] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   70.016561][ T2643] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   70.025943][ T2643] F2FS-fs (loop0): invalid crc value
[   70.032494][ T2643] F2FS-fs (loop0): Found nat_bits in checkpoint
[   70.061325][ T2643] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   70.068482][ T2643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   70.147299][ T2643] syz.0.946: attempt to access beyond end of device
[   70.147299][ T2643] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   70.220128][   T28] audit: type=1400 audit(2000000001.830:474): avc:  denied  { connect } for  pid=2654 comm="syz.1.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   70.330974][ T2667] loop1: detected capacity change from 0 to 256
[   70.350674][ T2667] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[   70.408761][ T2676] loop1: detected capacity change from 0 to 1024
[   70.435457][ T2676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   70.444264][ T2676] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.467195][ T2676] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.959: lblock 3 mapped to illegal pblock 3 (length 3)
[   70.483433][ T2676] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   70.503718][ T2676] EXT4-fs (loop1): This should not happen!! Data will be lost
[   70.503718][ T2676] 
[   70.516309][ T2676] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm syz.1.959: lblock 8 mapped to illegal pblock 8 (length 8)
[   70.552247][ T2676] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   70.594096][ T2676] EXT4-fs (loop1): This should not happen!! Data will be lost
[   70.594096][ T2676] 
[   70.604480][ T2676] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: block 3: comm syz.1.959: lblock 3 mapped to illegal pblock 3 (length 1)
[   70.636474][  T282] EXT4-fs (loop1): unmounting filesystem.
[   70.700670][ T2705] loop1: detected capacity change from 0 to 512
[   70.788274][  T335] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.872878][ T2737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'.
[   70.874555][ T2735] input: syz1 as /devices/virtual/input/input6
[   73.594438][ T2749] loop1: detected capacity change from 0 to 256
[   73.601170][ T2749] exfat: Deprecated parameter 'utf8'
[   73.609158][ T2749] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[   73.625545][   T28] kauditd_printk_skb: 15 callbacks suppressed
[   73.625560][   T28] audit: type=1400 audit(2000000005.240:490): avc:  denied  { mounton } for  pid=2748 comm="syz.1.991" path="/151/file1/file0" dev="loop1" ino=1048630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   73.729330][ T2761] loop0: detected capacity change from 0 to 512
[   73.737175][ T2761] EXT4-fs: Ignoring removed i_version option
[   73.743475][ T2761] EXT4-fs: Ignoring removed nobh option
[   73.751714][ T2761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   73.778216][ T2761] EXT4-fs (loop0): 1 truncate cleaned up
[   73.784105][ T2761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   76.638605][  T285] EXT4-fs (loop0): unmounting filesystem.
[   76.788712][ T2805] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1017'.
[   76.818536][   T28] audit: type=1400 audit(2000000008.430:491): avc:  denied  { unlink } for  pid=2807 comm="syz.2.1019" name="#6" dev="tmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   76.818711][ T2808] overlayfs: invalid origin (0000)
[   76.876281][   T28] audit: type=1400 audit(2000000008.490:492): avc:  denied  { create } for  pid=2813 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   76.921458][   T28] audit: type=1400 audit(2000000008.490:493): avc:  denied  { write } for  pid=2813 comm="syz.4.1022" path="socket:[26976]" dev="sockfs" ino=26976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   76.945199][ T2818] loop0: detected capacity change from 0 to 16
[   76.964209][ T2818] erofs: (device loop0): mounted with root inode @ nid 36.
[   77.058125][ T2794] loop1: detected capacity change from 0 to 40427
[   77.086991][ T2794] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   77.095288][ T2794] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   77.112290][   T28] audit: type=1400 audit(2000000008.720:494): avc:  denied  { execute_no_trans } for  pid=2833 comm="syz.0.1032" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E847B202864656C6574656429 dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   77.174757][ T2794] F2FS-fs (loop1): Found nat_bits in checkpoint
[   77.187431][ T2843] loop4: detected capacity change from 0 to 16
[   77.219138][ T2843] erofs: (device loop4): mounted with root inode @ nid 36.
[   77.251054][   T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192]
[   77.264912][ T2843] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192]
[   77.278277][ T2843] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096]
[   77.291572][ T2794] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   77.308374][ T2794] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   77.342431][ T2828] loop3: detected capacity change from 0 to 40427
[   77.370910][ T2828] F2FS-fs (loop3): invalid crc value
[   77.407564][ T2828] F2FS-fs (loop3): Found nat_bits in checkpoint
[   77.438508][  T282] syz-executor: attempt to access beyond end of device
[   77.438508][  T282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   77.481428][   T28] audit: type=1400 audit(2000000009.090:495): avc:  denied  { map } for  pid=2866 comm="syz.0.1047" path="socket:[27130]" dev="sockfs" ino=27130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   77.553881][ T2828] F2FS-fs (loop3): Start checkpoint disabled!
[   77.564577][ T2828] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   77.654838][ T2883] loop1: detected capacity change from 0 to 256
[   77.664929][ T2883] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d)
[   77.680775][ T2885] mmap: syz.4.1044 (2885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   77.693132][ T2828] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT
[   77.853280][ T2581] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   77.916853][ T2899] overlayfs: invalid origin (0000)
[   77.990562][ T2892] loop0: detected capacity change from 0 to 40427
[   78.001015][ T2892] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[   78.017106][ T2892] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   78.028163][ T2892] F2FS-fs (loop0): Found nat_bits in checkpoint
[   78.053206][ T2581] usb 3-1: Using ep0 maxpacket: 32
[   78.059496][ T2581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.068883][ T2892] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   78.077571][ T2892] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   78.078535][ T2581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.125637][ T2920] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1067'.
[   78.130231][ T2581] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   78.154000][ T2581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.171908][ T2581] usb 3-1: config 0 descriptor??
[   78.179514][  T285] syz-executor: attempt to access beyond end of device
[   78.179514][  T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   78.185331][ T2581] hub 3-1:0.0: USB hub found
[   78.271646][ T2928] loop1: detected capacity change from 0 to 512
[   78.296533][ T2928] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   78.310175][ T2928] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   78.337148][  T282] EXT4-fs (loop1): unmounting filesystem.
[   78.382650][ T2581] hub 3-1:0.0: 1 port detected
[   78.527892][   T28] audit: type=1400 audit(2000000010.140:496): avc:  denied  { name_bind } for  pid=2947 comm="syz.0.1089" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   78.529859][ T2950] loop1: detected capacity change from 0 to 512
[   78.559571][   T28] audit: type=1400 audit(2000000010.140:497): avc:  denied  { node_bind } for  pid=2947 comm="syz.0.1089" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   78.582471][ T2950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.594837][ T2950] EXT4-fs (loop1): 1 truncate cleaned up
[   78.600555][ T2950] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   78.624250][  T282] EXT4-fs (loop1): unmounting filesystem.
[   78.675991][ T2959] loop0: detected capacity change from 0 to 1024
[   78.704908][ T2959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   78.713607][ T2959] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.736645][   T28] audit: type=1400 audit(2000000010.350:498): avc:  denied  { append } for  pid=2958 comm="syz.0.1082" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   78.761990][ T2959] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.1082: Freeing blocks not in datazone - block = 0, count = 16
[   78.783110][  T285] EXT4-fs (loop0): unmounting filesystem.
[   78.789033][ T2581] usb 3-1: USB disconnect, device number 6
[   78.841411][ T2963] loop0: detected capacity change from 0 to 1024
[   78.857282][ T2955] loop1: detected capacity change from 0 to 40427
[   78.858386][ T2963] EXT4-fs: Ignoring removed i_version option
[   78.890753][ T2963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.912977][ T2955] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   78.940950][ T2955] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   78.952662][ T2963] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   78.961947][ T2955] F2FS-fs (loop1): invalid crc value
[   79.007998][ T2963] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.1083: Allocating blocks 497-513 which overlap fs metadata
[   79.018291][ T2955] F2FS-fs (loop1): Found nat_bits in checkpoint
[   79.029252][ T2963] EXT4-fs (loop0): pa ffff888135228c78: logic 256, phys. 385, len 8
[   79.037397][ T2963] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[   79.054575][ T2985] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[   79.067883][ T2955] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   79.076200][ T2955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   79.149968][ T2992] netlink: 'syz.4.1094': attribute type 8 has an invalid length.
[   79.158511][  T285] EXT4-fs (loop0): unmounting filesystem.
[   79.186816][ T2955] syz.1.1080: attempt to access beyond end of device
[   79.186816][ T2955] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   79.198489][ T2992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'.
[   79.252399][ T2998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'.
[   79.265984][ T3000] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   79.276725][ T3000] SELinux: failed to load policy
[   79.418630][ T3014] loop1: detected capacity change from 0 to 1024
[   79.434657][ T3014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   79.443331][ T3014] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.464954][ T3014] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1096: Freeing blocks not in datazone - block = 0, count = 16
[   79.487084][   T28] audit: type=1400 audit(2000000011.100:499): avc:  denied  { listen } for  pid=3019 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.489038][  T282] EXT4-fs (loop1): unmounting filesystem.
[   79.533259][ T2581] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   79.567782][ T3029] loop0: detected capacity change from 0 to 1024
[   79.567939][ T3025] incfs: iterate_incfs_dir / -22
[   79.624249][ T3029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   79.633297][ T3029] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.705688][  T285] EXT4-fs (loop0): unmounting filesystem.
[   79.743255][ T2581] usb 5-1: Using ep0 maxpacket: 16
[   79.749859][ T2581] usb 5-1: config 0 interface 0 has no altsetting 0
[   79.759951][ T2581] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   79.773024][ T2581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.789902][ T3031] loop3: detected capacity change from 0 to 40427
[   79.790379][ T2581] usb 5-1: config 0 descriptor??
[   79.805172][ T3031] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   79.823082][ T3031] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   79.850324][ T3031] F2FS-fs (loop3): invalid crc value
[   79.858838][ T3031] F2FS-fs (loop3): Found nat_bits in checkpoint
[   79.900663][ T3031] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   79.903228][  T398] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   79.907932][ T3031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   80.040618][ T3031] syz.3.1111: attempt to access beyond end of device
[   80.040618][ T3031] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   80.123210][  T398] usb 2-1: Using ep0 maxpacket: 32
[   80.129726][  T398] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   80.148577][  T398] usb 2-1: config 0 has no interface number 0
[   80.158677][  T398] usb 2-1: config 0 interface 184 has no altsetting 0
[   80.180257][  T398] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   80.199574][  T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.219754][  T398] usb 2-1: Product: syz
[   80.224079][  T398] usb 2-1: Manufacturer: syz
[   80.228688][  T398] usb 2-1: SerialNumber: syz
[   80.237012][ T2581] hid (null): global environment stack underflow
[   80.243985][  T398] usb 2-1: config 0 descriptor??
[   80.246265][ T2581] hid (null): report_id 0 is invalid
[   80.249808][  T398] smsc75xx v1.0.0
[   80.254839][ T2581] hid (null): global environment stack underflow
[   80.264822][ T2581] hid (null): report_id 0 is invalid
[   80.270162][ T2581] hid (null): report_id 0 is invalid
[   80.275595][ T2581] hid (null): global environment stack underflow
[   80.374059][ T3047] loop0: detected capacity change from 0 to 131072
[   80.381273][ T3047] F2FS-fs (loop0): Test dummy encryption mode enabled
[   80.389087][ T3047] F2FS-fs (loop0): invalid crc value
[   80.396110][ T3047] F2FS-fs (loop0): Found nat_bits in checkpoint
[   80.436548][ T3047] F2FS-fs (loop0): Start checkpoint disabled!
[   80.443423][ T3047] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   80.451399][   T24] usb 5-1: USB disconnect, device number 4
[   80.481999][ T3047] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   80.500908][  T285] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix.
[   80.973228][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   80.978002][ T3074] loop4: detected capacity change from 0 to 1024
[   80.987760][ T3074] EXT4-fs: Ignoring removed i_version option
[   80.997451][ T3074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   81.017794][ T3074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   81.041561][ T3074] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.1125: Allocating blocks 497-513 which overlap fs metadata
[   81.058974][ T3074] EXT4-fs (loop4): pa ffff8881352287e0: logic 256, phys. 385, len 8
[   81.067331][ T3074] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[   81.079804][  T398] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[   81.092178][  T398] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   81.098945][ T3077] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[   81.101377][   T28] audit: type=1400 audit(2000000012.710:500): avc:  denied  { mounton } for  pid=3078 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   81.137829][  T398] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   81.148975][  T398] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   81.159871][  T286] EXT4-fs (loop4): unmounting filesystem.
[   81.165700][  T398] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   81.166301][  T393] device bridge_slave_1 left promiscuous mode
[   81.177091][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.182252][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.193338][  T398] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   81.209850][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.210210][  T393] device bridge_slave_0 left promiscuous mode
[   81.220071][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.236171][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.246408][  T398] smsc75xx: probe of 2-1:0.184 failed with error -71
[   81.253434][  T393] device veth1_macvtap left promiscuous mode
[   81.254641][  T398] usb 2-1: USB disconnect, device number 4
[   81.265356][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.266669][  T393] device veth0_vlan left promiscuous mode
[   81.275562][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.303327][   T24] usb 3-1: config 0 descriptor??
[   81.403345][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.410428][ T3078] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.418204][ T3078] device bridge_slave_0 entered promiscuous mode
[   81.425447][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.432517][ T3078] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.440078][ T3078] device bridge_slave_1 entered promiscuous mode
[   81.513077][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.520190][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.527509][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.534553][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.554965][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.562662][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.585354][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.605527][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.627931][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.637274][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.645815][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.652892][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.660593][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.669244][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.677486][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.684547][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.710208][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.718876][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.727030][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.735770][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.746565][   T24] plantronics 0003:047F:FFFF.0008: unbalanced collection at end of report description
[   81.764236][   T24] plantronics 0003:047F:FFFF.0008: parse failed
[   81.770575][   T24] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22
[   81.778623][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.791388][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.802661][ T3078] device veth0_vlan entered promiscuous mode
[   81.813019][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.820938][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.829013][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.836838][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.851697][ T3078] device veth1_macvtap entered promiscuous mode
[   81.858433][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.866700][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.875048][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.885888][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.894258][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.915415][   T28] audit: type=1400 audit(2000000013.530:501): avc:  denied  { mounton } for  pid=3078 comm="syz-executor" path="/root/syzkaller.xZmZ0S/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   81.918272][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.965234][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.975865][   T28] audit: type=1400 audit(2000000013.530:502): avc:  denied  { mount } for  pid=3078 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   81.988066][  T398] usb 3-1: USB disconnect, device number 7
[   81.998985][   T28] audit: type=1400 audit(2000000013.530:503): avc:  denied  { mount } for  pid=3078 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   82.026103][  T294] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   82.034020][   T28] audit: type=1400 audit(2000000013.530:504): avc:  denied  { mounton } for  pid=3078 comm="syz-executor" path="/root/syzkaller.xZmZ0S/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   82.098242][   T28] audit: type=1400 audit(2000000013.530:505): avc:  denied  { mounton } for  pid=3078 comm="syz-executor" path="/root/syzkaller.xZmZ0S/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   82.135236][ T3119] netlink: 'syz.4.1138': attribute type 25 has an invalid length.
[   82.138412][   T28] audit: type=1400 audit(2000000013.560:506): avc:  denied  { setopt } for  pid=3108 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   82.154025][ T3119] netlink: 'syz.4.1138': attribute type 7 has an invalid length.
[   82.170280][ T3123] loop0: detected capacity change from 0 to 128
[   82.183367][   T28] audit: type=1400 audit(2000000013.560:507): avc:  denied  { read } for  pid=3108 comm="syz.3.1136" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   82.215237][ T3127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'.
[   82.467313][ T3149] loop3: detected capacity change from 0 to 512
[   82.482939][ T3149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   82.495981][ T3149] EXT4-fs (loop3): 1 truncate cleaned up
[   82.501662][ T3149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   82.554018][  T294] usb 2-1: Using ep0 maxpacket: 16
[   82.560108][  T283] EXT4-fs (loop3): unmounting filesystem.
[   82.572498][  T294] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[   82.573608][ T3146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'.
[   82.591511][  T294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.599579][  T294] usb 2-1: Product: syz
[   82.604035][  T294] usb 2-1: Manufacturer: syz
[   82.608765][  T294] usb 2-1: SerialNumber: syz
[   82.614094][  T294] usb 2-1: config 0 descriptor??
[   82.630652][  T294] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[   82.640017][ T3155] loop3: detected capacity change from 0 to 1024
[   82.685567][ T3155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   82.711367][ T3155] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.746872][ T3171] loop4: detected capacity change from 0 to 512
[   82.779445][  T283] EXT4-fs (loop3): unmounting filesystem.
[   82.787163][ T3171] EXT4-fs (loop4): 1 orphan inode deleted
[   82.792972][ T3171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   82.803004][  T341] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1
[   82.814751][ T3171] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.831271][ T2581] usb 2-1: USB disconnect, device number 5
[   82.854365][ T3163] loop2: detected capacity change from 0 to 40427
[   82.861701][  T286] EXT4-fs (loop4): unmounting filesystem.
[   82.870098][ T3163] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   82.877950][ T3163] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   82.905113][ T3163] F2FS-fs (loop2): invalid crc value
[   82.922278][ T3163] F2FS-fs (loop2): Found nat_bits in checkpoint
[   82.935258][  T341] Bluetooth: hci0: Frame reassembly failed (-84)
[   82.957681][ T3163] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   82.964959][ T3163] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   82.973298][   T39] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[   83.048131][ T3163] syz.2.1159: attempt to access beyond end of device
[   83.048131][ T3163] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   83.164387][   T39] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   83.174767][ T3187] incfs: iterate_incfs_dir / -22
[   83.175911][   T39] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.190215][   T39] usb 1-1: config 0 interface 0 has no altsetting 0
[   83.197086][   T39] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[   83.206213][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.210998][ T3189] loop2: detected capacity change from 0 to 256
[   83.215027][   T39] usb 1-1: config 0 descriptor??
[   83.232659][ T3189] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[   83.245035][ T3189] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   83.329877][ T3193] loop2: detected capacity change from 0 to 512
[   83.336461][ T3193] EXT4-fs: Ignoring removed i_version option
[   83.342508][ T3193] EXT4-fs: Ignoring removed nobh option
[   83.350373][ T3193] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   83.364820][ T3195] loop1: detected capacity change from 0 to 256
[   83.373763][ T3195] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb45ad1ca, utbl_chksum : 0xe619d30d)
[   83.390905][ T3193] EXT4-fs (loop2): 1 truncate cleaned up
[   83.396863][ T3193] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   83.426287][  T284] EXT4-fs (loop2): unmounting filesystem.
[   83.604742][ T3220] input: syz1 as /devices/virtual/input/input7
[   83.630912][   T39] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0
[   83.640731][   T39] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0
[   83.655035][ T3224] loop1: detected capacity change from 0 to 512
[   83.661643][ T3224] EXT4-fs: Ignoring removed i_version option
[   83.661690][   T39] hid-steam 0003:28DE:1102.0009: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[   83.679766][ T3224] EXT4-fs: Ignoring removed nobh option
[   83.681029][   T39] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0
[   83.686886][ T3224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   83.692848][   T39] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0
[   83.711422][ T3224] EXT4-fs (loop1): 1 truncate cleaned up
[   83.711677][   T39] hid-steam 0003:28DE:1102.000A: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[   83.717271][ T3224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   83.771313][ T3233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'.
[   83.781632][  T282] EXT4-fs (loop1): unmounting filesystem.
[   83.813234][   T39] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' connected
[   83.822484][   T39] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0009/input/input8
[   83.834692][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   83.834705][   T28] audit: type=1400 audit(2000000015.450:517): avc:  denied  { append } for  pid=3166 comm="syz.0.1160" name="hidraw0" dev="devtmpfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   83.835497][ T3166] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0009/input/input9
[   83.853589][ T3241] loop1: detected capacity change from 0 to 512
[   83.895919][   T39] usb 1-1: USB disconnect, device number 9
[   83.910158][   T39] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' disconnected
[   83.922574][ T3241] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002]
[   83.930898][ T3241] System zones: 0-2, 18-18, 34-35
[   83.936585][ T3241] EXT4-fs error (device loop1): ext4_quota_enable:7009: inode #4: comm syz.1.1189: iget: bad i_size value: 5910974510929920
[   83.951797][ T3241] EXT4-fs error (device loop1): ext4_quota_enable:7012: comm syz.1.1189: Bad quota inode: 4, type: 1
[   83.963022][ T3241] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   83.971415][ T3249] fido_id[3249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   83.979009][ T3241] EXT4-fs (loop1): mount failed
[   84.145372][  T335] ==================================================================
[   84.153482][  T335] BUG: KASAN: use-after-free in mutex_lock+0x80/0x1a0
[   84.160273][  T335] Write of size 8 at addr ffff8881176c5850 by task udevd/335
[   84.167652][  T335] 
[   84.169995][  T335] CPU: 1 PID: 335 Comm: udevd Not tainted syzkaller #0
[   84.176849][  T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   84.186947][  T335] Call Trace:
[   84.190232][  T335]  <TASK>
[   84.193168][  T335]  __dump_stack+0x21/0x24
[   84.197518][  T335]  dump_stack_lvl+0xee/0x150
[   84.202124][  T335]  ? __cfi_dump_stack_lvl+0x8/0x8
[   84.207177][  T335]  ? __cfi__printk+0x8/0x8
[   84.211604][  T335]  ? path_openat+0x2681/0x2f50
[   84.216381][  T335]  ? x64_sys_call+0x783/0x9a0
[   84.221071][  T335]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.227181][  T335]  ? mutex_lock+0x80/0x1a0
[   84.231614][  T335]  print_address_description+0x71/0x1e0
[   84.237185][  T335]  print_report+0x4a/0x60
[   84.241535][  T335]  kasan_report+0x122/0x150
[   84.246067][  T335]  ? mutex_lock+0x80/0x1a0
[   84.250508][  T335]  kasan_check_range+0x280/0x290
[   84.255476][  T335]  __kasan_check_write+0x14/0x20
[   84.260442][  T335]  mutex_lock+0x80/0x1a0
[   84.264700][  T335]  ? __cfi_mutex_lock+0x10/0x10
[   84.269564][  T335]  ? kasan_save_alloc_info+0x25/0x30
[   84.274870][  T335]  ? __kasan_kmalloc+0x95/0xb0
[   84.279666][  T335]  steam_input_open+0x91/0x160
[   84.284448][  T335]  ? __cfi_steam_input_open+0x10/0x10
[   84.289830][  T335]  ? __kasan_check_write+0x14/0x20
[   84.294971][  T335]  ? mutex_lock_interruptible+0x8d/0x1a0
[   84.300623][  T335]  input_open_device+0x17b/0x300
[   84.305590][  T335]  evdev_open+0x4b1/0x5c0
[   84.309945][  T335]  chrdev_open+0x5a5/0x680
[   84.314392][  T335]  ? __cfi_chrdev_open+0x10/0x10
[   84.319349][  T335]  ? fsnotify_perm+0x3e9/0x5b0
[   84.324148][  T335]  do_dentry_open+0x88e/0x1260
[   84.328924][  T335]  ? __cfi_chrdev_open+0x10/0x10
[   84.333877][  T335]  vfs_open+0x73/0x80
[   84.337861][  T335]  path_openat+0x2681/0x2f50
[   84.342458][  T335]  ? kasan_set_track+0x4b/0x70
[   84.347233][  T335]  ? getname_flags+0xb9/0x500
[   84.351920][  T335]  ? getname+0x19/0x20
[   84.356014][  T335]  ? x64_sys_call+0x783/0x9a0
[   84.360723][  T335]  ? do_syscall_64+0x4c/0xa0
[   84.365327][  T335]  ? do_filp_open+0x3c0/0x3c0
[   84.370016][  T335]  do_filp_open+0x1c1/0x3c0
[   84.374544][  T335]  ? __cfi_do_filp_open+0x10/0x10
[   84.379584][  T335]  ? alloc_fd+0x4e6/0x590
[   84.383974][  T335]  do_sys_openat2+0x185/0x7e0
[   84.388674][  T335]  ? do_sys_open+0xe0/0xe0
[   84.393107][  T335]  __x64_sys_openat+0x136/0x160
[   84.397980][  T335]  x64_sys_call+0x783/0x9a0
[   84.402503][  T335]  do_syscall_64+0x4c/0xa0
[   84.406939][  T335]  ? clear_bhb_loop+0x30/0x80
[   84.411648][  T335]  ? clear_bhb_loop+0x30/0x80
[   84.416345][  T335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.422263][  T335] RIP: 0033:0x7f8eb4ea7407
[   84.426687][  T335] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   84.446296][  T335] RSP: 002b:00007ffe21d8d9d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[   84.454723][  T335] RAX: ffffffffffffffda RBX: 00007f8eb56a9880 RCX: 00007f8eb4ea7407
[   84.462705][  T335] RDX: 0000000000080000 RSI: 0000563d2b4b4f60 RDI: ffffffffffffff9c
[   84.470785][  T335] RBP: 0000563d2b4b0d40 R08: 0000000000000000 R09: 0000000000000000
[   84.478786][  T335] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563d0ad960c8
[   84.486769][  T335] R13: 0000563d0ad960ce R14: 00007ffe21d8dfd0 R15: 0000563d0ad9cbcc
[   84.494758][  T335]  </TASK>
[   84.497782][  T335] 
[   84.500123][  T335] Allocated by task 39:
[   84.504286][  T335]  kasan_set_track+0x4b/0x70
[   84.508913][  T335]  kasan_save_alloc_info+0x25/0x30
[   84.514049][  T335]  __kasan_kmalloc+0x95/0xb0
[   84.518648][  T335]  __kmalloc_node_track_caller+0xb1/0x1e0
[   84.524383][  T335]  devm_kmalloc+0x55/0x160
[   84.528807][  T335]  steam_probe+0x11b/0xb50
[   84.533236][  T335]  hid_device_probe+0x268/0x390
[   84.538097][  T335]  really_probe+0x2cb/0x960
[   84.542617][  T335]  __driver_probe_device+0x198/0x280
[   84.547925][  T335]  driver_probe_device+0x54/0x3e0
[   84.552954][  T335]  __device_attach_driver+0x2e9/0x4a0
[   84.558338][  T335]  bus_for_each_drv+0x183/0x210
[   84.563210][  T335]  __device_attach+0x2a2/0x400
[   84.567994][  T335]  device_initial_probe+0x1a/0x20
[   84.573040][  T335]  bus_probe_device+0xc0/0x1f0
[   84.577823][  T335]  device_add+0xb4d/0xef0
[   84.582172][  T335]  hid_add_device+0x38f/0x540
[   84.586872][  T335]  usbhid_probe+0xbb6/0xfa0
[   84.591386][  T335]  usb_probe_interface+0x610/0xaf0
[   84.596514][  T335]  really_probe+0x2cb/0x960
[   84.601025][  T335]  __driver_probe_device+0x198/0x280
[   84.606328][  T335]  driver_probe_device+0x54/0x3e0
[   84.611369][  T335]  __device_attach_driver+0x2e9/0x4a0
[   84.616761][  T335]  bus_for_each_drv+0x183/0x210
[   84.621645][  T335]  __device_attach+0x2a2/0x400
[   84.626429][  T335]  device_initial_probe+0x1a/0x20
[   84.631477][  T335]  bus_probe_device+0xc0/0x1f0
[   84.636258][  T335]  device_add+0xb4d/0xef0
[   84.640609][  T335]  usb_set_configuration+0x19c2/0x1f10
[   84.646096][  T335]  usb_generic_driver_probe+0x91/0x150
[   84.651567][  T335]  usb_probe_device+0x159/0x270
[   84.656437][  T335]  really_probe+0x2cb/0x960
[   84.660951][  T335]  __driver_probe_device+0x198/0x280
[   84.666255][  T335]  driver_probe_device+0x54/0x3e0
[   84.671300][  T335]  __device_attach_driver+0x2e9/0x4a0
[   84.676680][  T335]  bus_for_each_drv+0x183/0x210
[   84.681545][  T335]  __device_attach+0x2a2/0x400
[   84.686331][  T335]  device_initial_probe+0x1a/0x20
[   84.691374][  T335]  bus_probe_device+0xc0/0x1f0
[   84.696191][  T335]  device_add+0xb4d/0xef0
[   84.700549][  T335]  usb_new_device+0xa70/0x1520
[   84.705418][  T335]  hub_event+0x2850/0x4350
[   84.709854][  T335]  process_one_work+0x71f/0xc40
[   84.714723][  T335]  worker_thread+0xa29/0x11f0
[   84.719406][  T335]  kthread+0x281/0x320
[   84.723487][  T335]  ret_from_fork+0x1f/0x30
[   84.727914][  T335] 
[   84.730243][  T335] Freed by task 39:
[   84.734054][  T335]  kasan_set_track+0x4b/0x70
[   84.738657][  T335]  kasan_save_free_info+0x31/0x50
[   84.743710][  T335]  ____kasan_slab_free+0x132/0x180
[   84.748842][  T335]  __kasan_slab_free+0x11/0x20
[   84.753650][  T335]  slab_free_freelist_hook+0xc2/0x190
[   84.759308][  T335]  __kmem_cache_free+0xb7/0x1b0
[   84.764177][  T335]  kfree+0x6f/0xf0
[   84.767913][  T335]  release_nodes+0xf9/0x230
[   84.772430][  T335]  devres_release_all+0x149/0x1b0
[   84.777466][  T335]  device_release_driver_internal+0x581/0x820
[   84.783555][  T335]  device_release_driver+0x19/0x20
[   84.788123][ T3261] loop1: detected capacity change from 0 to 131072
[   84.788678][  T335]  bus_remove_device+0x2ee/0x350
[   84.800107][  T335]  device_del+0x6a4/0xeb0
[   84.803692][ T3261] F2FS-fs (loop1): Test dummy encryption mode enabled
[   84.804459][  T335]  hid_destroy_device+0x6a/0x110
[   84.816139][  T335]  usbhid_disconnect+0x9f/0xc0
[   84.820950][  T335]  usb_unbind_interface+0x223/0x8d0
[   84.826192][  T335]  device_release_driver_internal+0x508/0x820
[   84.832283][  T335]  device_release_driver+0x19/0x20
[   84.832358][ T3261] F2FS-fs (loop1): invalid crc value
[   84.837414][  T335]  bus_remove_device+0x2ee/0x350
[   84.837439][  T335]  device_del+0x6a4/0xeb0
[   84.837464][  T335]  usb_disable_device+0x3a8/0x750
[   84.848494][ T3261] F2FS-fs (loop1): Found nat_bits in checkpoint
[   84.852001][  T335]  usb_disconnect+0x31e/0x860
[   84.867923][  T335]  hub_event+0x1a78/0x4350
[   84.872358][  T335]  process_one_work+0x71f/0xc40
[   84.877214][  T335]  worker_thread+0xd2e/0x11f0
[   84.881914][  T335]  kthread+0x281/0x320
[   84.885993][  T335]  ret_from_fork+0x1f/0x30
[   84.890427][  T335] 
[   84.892497][ T3261] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   84.892756][  T335] The buggy address belongs to the object at ffff8881176c5800
[   84.892756][  T335]  which belongs to the cache kmalloc-512 of size 512
[   84.914263][  T335] The buggy address is located 80 bytes inside of
[   84.914263][  T335]  512-byte region [ffff8881176c5800, ffff8881176c5a00)
[   84.927461][  T335] 
[   84.929797][  T335] The buggy address belongs to the physical page:
[   84.936245][  T335] page:ffffea00045db100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1176c4
[   84.946474][  T335] head:ffffea00045db100 order:2 compound_mapcount:0 compound_pincount:0
[   84.954791][  T335] flags: 0x4000000000010200(slab|head|zone=1)
[   84.960867][  T335] raw: 4000000000010200 ffffea00045da400 dead000000000002 ffff888100042f00
[   84.969451][  T335] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   84.978025][  T335] page dumped because: kasan: bad access detected
[   84.984437][  T335] page_owner tracks the page as allocated
[   84.990140][  T335] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, tgid 283 (syz-executor), ts 23155280268, free_ts 23133681941
[   85.012276][  T335]  post_alloc_hook+0x1f5/0x210
[   85.017043][  T335]  prep_new_page+0x1c/0x110
[   85.021544][  T335]  get_page_from_freelist+0x2c7b/0x2cf0
[   85.027086][  T335]  __alloc_pages+0x1c3/0x450
[   85.031669][  T335]  alloc_slab_page+0x6e/0xf0
[   85.036252][  T335]  new_slab+0x98/0x3d0
[   85.040318][  T335]  ___slab_alloc+0x6f6/0xb50
[   85.044908][  T335]  __slab_alloc+0x5e/0xa0
[   85.049239][  T335]  __kmem_cache_alloc_node+0x203/0x2c0
[   85.054694][  T335]  __kmalloc_node_track_caller+0xa0/0x1e0
[   85.060420][  T335]  pskb_expand_head+0x1b0/0x1210
[   85.065353][  T335]  netlink_trim+0x193/0x230
[   85.069856][  T335]  netlink_unicast+0x66/0xa30
[   85.074536][  T335]  ctrl_getfamily+0x484/0x570
[   85.079293][  T335]  genl_family_rcv_msg_doit+0x250/0x350
[   85.084838][  T335]  genl_rcv_msg+0x5ea/0x770
[   85.089337][  T335] page last free stack trace:
[   85.093998][  T335]  free_unref_page_prepare+0x742/0x750
[   85.099453][  T335]  free_unref_page+0x8f/0x530
[   85.104128][  T335]  __free_pages+0x67/0x100
[   85.108537][  T335]  __free_slab+0xca/0x1a0
[   85.112867][  T335]  __unfreeze_partials+0x160/0x190
[   85.117977][  T335]  put_cpu_partial+0xa9/0x100
[   85.122654][  T335]  __slab_free+0x1c4/0x280
[   85.127076][  T335]  ___cache_free+0xbf/0xd0
[   85.131582][  T335]  qlist_free_all+0xc6/0x140
[   85.136168][  T335]  kasan_quarantine_reduce+0x14a/0x170
[   85.141622][  T335]  __kasan_slab_alloc+0x24/0x80
[   85.146470][  T335]  slab_post_alloc_hook+0x4f/0x2d0
[   85.151582][  T335]  __kmem_cache_alloc_node+0x192/0x2c0
[   85.157040][  T335]  kmalloc_trace+0x29/0xb0
[   85.161460][  T335]  kset_create_and_add+0x59/0x2b0
[   85.166485][  T335]  netdev_register_kobject+0x1a5/0x320
[   85.171941][  T335] 
[   85.174260][  T335] Memory state around the buggy address:
[   85.179884][  T335]  ffff8881176c5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   85.187958][  T335]  ffff8881176c5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   85.196102][  T335] >ffff8881176c5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   85.204164][  T335]                                                  ^
[   85.210837][  T335]  ffff8881176c5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   85.218894][  T335]  ffff8881176c5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   85.226951][  T335] ==================================================================
[   85.236000][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   85.239082][  T662] Bluetooth: hci0: command 0x1003 tx timeout
[   85.242474][  T335] Disabling lock debugging due to kernel taint
[   85.257122][  T335] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.272115][  T335] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.281177][  T335] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.290106][  T335] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.299425][  T335] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.309062][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.320229][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.330103][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.339108][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.348015][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.357218][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.366294][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.375974][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.385021][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[   85.394027][   T87] hid 0003:28DE:1102.0009: No HID_FEATURE_REPORT submitted -  nothing to read