last executing test programs:

2m11.505543213s ago: executing program 32 (id=118):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10)
syz_emit_ethernet(0xe0, &(0x7f0000000400)={@empty, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0xe, 0x6, 'SGy', 0xaa, 0x6, 0x0, @mcast1, @remote, {[@fragment={0x3b, 0x0, 0x3, 0x1, 0x0, 0x17, 0x66}], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0xf, 0xc2, 0x4, 0x0, 0xa274, {[@exp_fastopen={0xfe, 0x12, 0xf989, "68c72df68c2ee38c3bdbc8189a86"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x5, 0x0, 0xc}, @fastopen={0x22, 0xa, "4ce52f4334694cec"}]}}, {"1ca8f65b5681511b275f70960c7732ccb92d8b5963ac56823c43917891d1aba6ce322037248d40920b9daa8824d7274211e69aaf00369f969494936a45885b88749dfb73f130f258736d92e8a828d1dc6c6698899565d180c25edf3584c8d5af641e87f32708"}}}}}}}}, 0x0)

1m47.436797012s ago: executing program 33 (id=654):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0xffff)
wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0)

1m6.508079427s ago: executing program 6 (id=1541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xcf, 0xf8, 0xa3, 0x40, 0x4e6, 0x6, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe, 0x0, 0x0, 0xf4, 0xde, 0x1}}]}}]}}, 0x0)

1m5.055835361s ago: executing program 6 (id=1571):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
brk(0x689d80000003)

1m4.993986907s ago: executing program 6 (id=1572):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r2, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x4c)

1m4.85788152s ago: executing program 6 (id=1580):
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

1m4.738116002s ago: executing program 6 (id=1584):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000400)="76389e14a3bf35f15517c87583ddd0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m4.591759296s ago: executing program 6 (id=1592):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r1}, 0x38)

1m4.564273699s ago: executing program 34 (id=1592):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r1}, 0x38)

59.493782981s ago: executing program 4 (id=1757):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
lseek(r0, 0x2000, 0x4)

59.493484121s ago: executing program 4 (id=1758):
io_setup(0x23, &(0x7f0000000280)=<r0=>0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)

59.413863208s ago: executing program 4 (id=1761):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_clone3(&(0x7f0000000580)={0x1000, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x1}, 0x58)

59.330264987s ago: executing program 4 (id=1762):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=")
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x5008000, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001080)=""/4096, 0x1000)

59.257520434s ago: executing program 4 (id=1764):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)

59.156356714s ago: executing program 4 (id=1765):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05150000000000000109022400010000c0050904000081030000000921000028012207000905810300"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0)
lseek(0xffffffffffffffff, 0x1, 0x0)

59.117074738s ago: executing program 35 (id=1765):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05150000000000000109022400010000c0050904000081030000000921000028012207000905810300"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0)
lseek(0xffffffffffffffff, 0x1, 0x0)

58.615164417s ago: executing program 3 (id=1792):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='rss_stat\x00', r1}, 0x18)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

58.558321423s ago: executing program 3 (id=1795):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
pread64(r2, &(0x7f0000000200)=""/4098, 0x1002, 0xd37)

58.529143566s ago: executing program 3 (id=1799):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, 0x0})
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000340)={0x5, 0x0, [{0x4000009f, 0x0, 0x101}, {0xaa8, 0x0, 0x6}, {0x235, 0x0, 0x7fff}, {0x228, 0x0, 0x6}, {0xa6d, 0x0, 0x2}]})

58.463401892s ago: executing program 3 (id=1802):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xc})
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

58.354292983s ago: executing program 3 (id=1805):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x1e)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

58.342686394s ago: executing program 3 (id=1807):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18)
syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040))

42.921304689s ago: executing program 36 (id=1807):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18)
syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040))

32.060242812s ago: executing program 0 (id=2271):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r0}, 0x10)

31.940680633s ago: executing program 0 (id=2272):
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x802, 0xfffb, 0x5, 0x402, 0x3})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7)
rt_sigaction(0x1, &(0x7f0000000080)={&(0x7f00000000c0)="c461f9134200c482f5293b66262465f2c543aaaa676666420fadf4c461dd6b651dc4a12966dbc461fc1069e468859a71a4000092663b663b", 0x88000000, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f00000002c0))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r0, 0x80000000457, 0x0)

31.921780595s ago: executing program 0 (id=2274):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022050000004b741cb9765ab67a022bc0c19b4a9c4ae1333930c048"], 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xc002a0, 0x0)

29.95609715s ago: executing program 0 (id=2312):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

29.666198418s ago: executing program 0 (id=2315):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r1, 0x409, 0xb)

29.486481196s ago: executing program 0 (id=2316):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@auto_da_alloc}, {@dioread_nolock}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b5}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nobh}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

29.363583248s ago: executing program 37 (id=2316):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@auto_da_alloc}, {@dioread_nolock}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b5}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nobh}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

10.820137461s ago: executing program 8 (id=2632):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)

10.488319714s ago: executing program 8 (id=2639):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)

10.265731456s ago: executing program 8 (id=2641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
capget(&(0x7f0000003700)={0x20071026}, 0x0)

10.235742728s ago: executing program 8 (id=2642):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000040)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0xeca42, 0x86)

9.873862634s ago: executing program 8 (id=2645):
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xe}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a"], 0x24}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[], 0x47)
splice(r1, 0x0, r0, 0x0, 0x800, 0x0)

8.997806881s ago: executing program 8 (id=2654):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

8.997543921s ago: executing program 38 (id=2654):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

4.712769345s ago: executing program 2 (id=2758):
r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)

3.325787441s ago: executing program 1 (id=2808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0)

3.275551086s ago: executing program 1 (id=2798):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r1 = epoll_create(0x4)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009})

3.251469629s ago: executing program 1 (id=2801):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x1000, &(0x7f00000000c0)={0x2, 0x3, 0x100000}, 0x20)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00')

3.202926393s ago: executing program 1 (id=2802):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00182bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)

3.148916669s ago: executing program 1 (id=2816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
getpriority(0x0, 0x0)

3.112564962s ago: executing program 2 (id=2806):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r4)
sendmmsg$unix(r1, &(0x7f000000c040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004280)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}], 0x20, 0x20040885}}], 0x1, 0x0)

3.112107953s ago: executing program 1 (id=2809):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x0, 0x10, 0x1, 0x10, 0x10, 0x10, 0x10, 0x200, 0x11, 0x10, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

3.111970063s ago: executing program 2 (id=2810):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r1 = syz_open_pts(r0, 0x101)
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, 0x0, 0x0)

2.666312166s ago: executing program 7 (id=2814):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20)
sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000040)=@udp6=r0}, 0x20)

2.262502036s ago: executing program 2 (id=2815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x4, 0xa}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

2.260772437s ago: executing program 7 (id=2817):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0)

2.216076071s ago: executing program 7 (id=2819):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x24004805)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x2d}, 0x141)

2.198972583s ago: executing program 7 (id=2821):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@grpid}, {@usrjquota}, {@grpquota}, {@nogrpid}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}, {@errors_remount}]}, 0x3, 0x44a, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000700)='./bus\x00', 0x8001121ac2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x40, 0x4, 0x0, 0x2, 0xfe})

2.093381913s ago: executing program 2 (id=2822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.088049974s ago: executing program 5 (id=2834):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
getrusage(0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)

1.974323625s ago: executing program 5 (id=2824):
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = dup2(r0, r0)
sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890)

795.373451ms ago: executing program 5 (id=2825):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x1, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

756.856186ms ago: executing program 2 (id=2826):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="401506"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x20, 0x1, 0x1, "89"}, 0x0, 0x0, 0x0, 0x0, 0x0})

736.922147ms ago: executing program 7 (id=2828):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="991a54fc28d627d80740ede1a4724090"]}]}, 0x38}], 0x1}, 0x0)

678.053873ms ago: executing program 7 (id=2830):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1001, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x1, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0xb, 0xc, {0xc, 0x0, "057751239412ca52ad3a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

677.425233ms ago: executing program 5 (id=2841):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10)
r1 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)

657.000795ms ago: executing program 5 (id=2843):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r0, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c)
recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

637.989097ms ago: executing program 5 (id=2832):
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xa, 0xb, 0x5, '\x00', 0x1})

480.657833ms ago: executing program 9 (id=2840):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, 0x0, &(0x7f0000000340)=""/38}, 0x20)

459.011365ms ago: executing program 9 (id=2842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x1, 0x5}, 0x50)
close(r2)

439.131347ms ago: executing program 9 (id=2844):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

408.30999ms ago: executing program 9 (id=2845):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0)

389.205182ms ago: executing program 9 (id=2846):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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")
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

0s ago: executing program 9 (id=2847):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r2=>0x0})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r2}, 0x10, &(0x7f0000000880)={&(0x7f0000000180)=@can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14)

kernel console output (not intermixed with test programs):

4.611682][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.618750][ T5309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.644848][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.652746][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.660179][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.672540][ T1417] usb 9-1: USB disconnect, device number 4
[  114.680519][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.688977][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.696075][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.705609][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.714400][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.721484][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.734976][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.746743][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  114.763159][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  114.778282][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  114.786536][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  114.794254][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  114.802574][ T5309] device veth0_vlan entered promiscuous mode
[  114.815127][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  114.824454][ T5309] device veth1_macvtap entered promiscuous mode
[  114.835043][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.845126][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  114.911235][ T5326] loop9: detected capacity change from 0 to 4096
[  114.966720][  T332] Bluetooth: hci0: Frame reassembly failed (-84)
[  114.979605][ T5326] EXT4-fs (loop9): Test dummy encryption mode enabled
[  114.994829][ T5326] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  115.004648][   T45] device bridge_slave_1 left promiscuous mode
[  115.011604][  T530] usb 6-1: USB disconnect, device number 10
[  115.019367][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.034465][   T45] device bridge_slave_0 left promiscuous mode
[  115.035706][ T5326] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  115.041802][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.069455][   T45] device veth1_macvtap left promiscuous mode
[  115.075524][   T45] device veth0_vlan left promiscuous mode
[  115.195363][ T5344] loop8: detected capacity change from 0 to 128
[  115.211135][ T5344] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.221768][ T1417] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  115.222300][ T5344] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  115.267717][   T20] usb 6-1-port1: config error
[  115.487380][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  115.487394][   T30] audit: type=1400 audit(1895232141.313:3649): avc:  denied  { listen } for  pid=5378 comm="syz.8.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  115.527238][   T30] audit: type=1326 audit(1895232141.353:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.551594][   T30] audit: type=1326 audit(1895232141.353:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.580686][   T30] audit: type=1326 audit(1895232141.363:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.604542][   T30] audit: type=1326 audit(1895232141.363:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.629330][   T30] audit: type=1326 audit(1895232141.363:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.657395][ T1417] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.669264][ T1417] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.679438][ T1417] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  115.690098][   T30] audit: type=1326 audit(1895232141.363:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.697474][ T1417] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  115.725700][   T30] audit: type=1326 audit(1895232141.383:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.728943][ T1417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.751863][   T30] audit: type=1326 audit(1895232141.393:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.760013][ T1417] usb 8-1: config 0 descriptor??
[  115.782461][   T30] audit: type=1326 audit(1895232141.403:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  115.951722][ T5405] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2106'.
[  115.978705][ T5409] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53
[  116.288867][ T1417] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xe
[  116.296332][ T1417] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  116.304396][ T1417] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving
[  116.315526][ T1417] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  116.680957][  T632] usb 8-1: USB disconnect, device number 5
[  116.700163][ T5441] loop8: detected capacity change from 0 to 512
[  116.718568][ T5441] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  116.755385][ T5441] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00)
[  116.987787][  T530] Bluetooth: hci0: command 0x1003 tx timeout
[  116.993873][   T47] Bluetooth: hci0: sending frame failed (-49)
[  117.627805][  T334] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  117.737628][ T1417] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  117.987703][  T334] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.998094][  T334] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.077706][  T334] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  118.086947][  T334] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  118.095123][  T334] usb 10-1: SerialNumber: syz
[  118.099907][ T1417] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  118.108272][ T1417] usb 8-1: config 0 has no interface number 0
[  118.114373][ T1417] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.126163][ T1417] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.135957][ T1417] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  118.145055][ T1417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.153826][ T1417] usb 8-1: config 0 descriptor??
[  118.398506][  T334] usb 10-1: 0:2 : does not exist
[  118.405225][  T334] usb 10-1: USB disconnect, device number 2
[  118.608293][ T1547] udevd[1547]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  118.638856][ T1417] uclogic 0003:256C:006D.001F: No inputs registered, leaving
[  118.646909][ T1417] uclogic 0003:256C:006D.001F: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.7-1/input1
[  118.843284][ T1417] usb 8-1: USB disconnect, device number 6
[  118.882617][ T5482] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  119.029063][ T5497] loop8: detected capacity change from 0 to 512
[  119.067617][ T1417] Bluetooth: hci0: command 0x1001 tx timeout
[  119.073810][   T47] Bluetooth: hci0: sending frame failed (-49)
[  119.167727][   T60] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  119.364378][ T5515] loop8: detected capacity change from 0 to 512
[  119.435801][ T5515] EXT4-fs (loop8): Test dummy encryption mode enabled
[  119.444968][ T5515] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  119.459808][ T5515] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  119.467422][ T5515] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  119.524813][ T5515] EXT4-fs (loop8): Ignoring removed orlov option
[  119.534015][ T5515] EXT4-fs (loop8): Remounting file system with no journal so ignoring journalled data option
[  119.545955][ T5515] EXT4-fs (loop8): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback.
[  119.547949][   T60] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  119.601141][   T60] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  119.613721][   T60] usb 6-1: config 0 has no interface number 0
[  119.644399][ T5541] loop9: detected capacity change from 0 to 128
[  119.670616][ T5541] attempt to access beyond end of device
[  119.670616][ T5541] loop9: rw=2049, want=234, limit=128
[  119.777726][   T60] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  119.792443][   T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.801165][ T5545] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  119.808317][   T60] usb 6-1: Product: syz
[  119.821861][   T60] usb 6-1: Manufacturer: syz
[  119.842769][   T60] usb 6-1: SerialNumber: syz
[  119.854892][   T60] usb 6-1: config 0 descriptor??
[  119.875949][ T5556] loop8: detected capacity change from 0 to 8192
[  119.896544][ T5556] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  119.927364][ T5564] incfs: Error accessing: ./file0.
[  119.932616][ T5564] incfs: mount failed -20
[  120.102885][ T5570] loop7: detected capacity change from 0 to 40427
[  120.111642][ T5570] F2FS-fs (loop7): fault_injection options not supported
[  120.120785][ T5570] F2FS-fs (loop7): fault_type options not supported
[  120.127624][ T1417] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  120.143004][ T5570] F2FS-fs (loop7): invalid crc value
[  120.150287][ T5570] F2FS-fs (loop7): Found nat_bits in checkpoint
[  120.189632][ T5570] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  120.265071][ T4182] attempt to access beyond end of device
[  120.265071][ T4182] loop7: rw=2049, want=45112, limit=40427
[  120.337819][   T60] usb 6-1: Found UVC 0.00 device syz (046d:0823)
[  120.344280][   T60] usb 6-1: No valid video chain found.
[  120.387781][ T1417] usb 10-1: Using ep0 maxpacket: 16
[  120.508166][ T1417] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.518496][ T1417] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.557337][  T632] usb 6-1: USB disconnect, device number 11
[  120.557505][ T5588] loop7: detected capacity change from 0 to 512
[  120.687747][ T1417] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  120.696962][ T1417] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.705309][ T1417] usb 10-1: Product: syz
[  120.709622][ T1417] usb 10-1: Manufacturer: syz
[  120.714317][ T1417] usb 10-1: SerialNumber: syz
[  120.825038][ T5596] loop7: detected capacity change from 0 to 512
[  120.837745][ T5596] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2191: inode #1: comm syz.7.2191: iget: illegal inode #
[  120.851120][ T5596] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2191: error while reading EA inode 1 err=-117
[  120.863780][ T5596] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2191: inode #1: comm syz.7.2191: iget: illegal inode #
[  120.877682][ T5596] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2191: error while reading EA inode 1 err=-117
[  120.890456][ T5596] EXT4-fs (loop7): 1 orphan inode deleted
[  120.896209][ T5596] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,barrier=0x0000000000000002,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  121.001537][ T5600] loop8: detected capacity change from 0 to 128
[  121.044270][ T5600] EXT4-fs (loop8): Test dummy encryption mode enabled
[  121.057692][ T1417] usb 10-1: 0:2 : does not exist
[  121.064619][ T5600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c118, mo2=0002]
[  121.073258][ T5600] System zones: 1-3, 19-19, 35-36
[  121.099818][ T1417] usb 10-1: USB disconnect, device number 3
[  121.104523][ T5600] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,nolazytime,barrier,acl,nodioread_nolock,noload,test_dummy_encryption,,errors=continue. Quota mode: none.
[  121.124112][ T5600] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.145190][   T30] kauditd_printk_skb: 43 callbacks suppressed
[  121.145214][   T30] audit: type=1326 audit(1895232146.973:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.5.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  121.151352][  T530] Bluetooth: hci0: command 0x1009 tx timeout
[  121.186497][   T30] audit: type=1326 audit(1895232146.973:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.5.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  121.216472][   T30] audit: type=1326 audit(1895232146.973:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.5.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  121.240121][   T30] audit: type=1326 audit(1895232147.013:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.5.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad87e4fc9 code=0x7ffc0000
[  121.323772][ T5622] loop5: detected capacity change from 0 to 128
[  121.328067][ T5620] loop8: detected capacity change from 0 to 2048
[  121.358448][ T1547] udevd[1547]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  121.387050][ T5622] attempt to access beyond end of device
[  121.387050][ T5622] loop5: rw=2049, want=234, limit=128
[  121.398823][ T5620] EXT4-fs (loop8): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none.
[  121.506465][ T5630] loop9: detected capacity change from 0 to 512
[  121.518217][ T5632] loop5: detected capacity change from 0 to 512
[  121.533897][ T5630] EXT4-fs (loop9): Test dummy encryption mode enabled
[  121.557657][ T5630] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  121.568083][ T5630] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  121.575660][ T5630] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  121.612523][ T5632] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.2203: inode #1: comm syz.5.2203: iget: illegal inode #
[  121.625661][ T5630] EXT4-fs (loop9): Ignoring removed orlov option
[  121.637845][ T5630] EXT4-fs (loop9): Remounting file system with no journal so ignoring journalled data option
[  121.654254][ T5632] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2203: error while reading EA inode 1 err=-117
[  121.666990][ T5630] EXT4-fs (loop9): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback.
[  121.667301][ T5632] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.2203: inode #1: comm syz.5.2203: iget: illegal inode #
[  121.697358][ T5632] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2203: error while reading EA inode 1 err=-117
[  121.719303][ T5632] EXT4-fs (loop5): 1 orphan inode deleted
[  121.725167][ T5632] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,barrier=0x0000000000000002,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  122.057629][  T632] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  122.128760][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2215'.
[  122.169210][ T5666] loop5: detected capacity change from 0 to 512
[  122.248050][ T5673] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  122.297666][  T632] usb 9-1: Using ep0 maxpacket: 16
[  122.417698][  T632] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.428782][  T632] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  122.437877][  T632] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.446977][  T632] usb 9-1: config 0 descriptor??
[  122.487641][  T530] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  122.537598][   T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  122.737795][  T530] usb 6-1: Using ep0 maxpacket: 16
[  122.768709][   T30] audit: type=1326 audit(1895232148.603:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.9.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  122.792508][   T30] audit: type=1326 audit(1895232148.603:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.9.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  122.817860][   T30] audit: type=1326 audit(1895232148.603:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.9.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  122.841761][   T30] audit: type=1326 audit(1895232148.603:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.9.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  122.865670][   T30] audit: type=1326 audit(1895232148.603:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.9.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  122.889554][  T530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.900752][  T530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.914400][  T530] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  122.919157][  T632] konepure 0003:1E7D:2DBE.0020: item fetching failed at offset 1/5
[  122.928150][  T530] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  122.935710][  T632] konepure 0003:1E7D:2DBE.0020: parse failed
[  122.944732][  T530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.950616][  T632] konepure: probe of 0003:1E7D:2DBE.0020 failed with error -22
[  122.964442][  T530] usb 6-1: config 0 descriptor??
[  122.977662][   T60] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  122.989624][ T5684] tmpfs: Too small a size for current use
[  122.997186][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.008184][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.018490][   T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  123.108126][ T5688] binder: 5687:5688 ioctl c0306201 200000000640 returned -22
[  123.129523][   T60] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  123.140469][   T60] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  123.150040][   T30] audit: type=1326 audit(1895232148.983:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  123.174152][   T60] usb 8-1: Manufacturer: syz
[  123.179741][   T20] usb 9-1: USB disconnect, device number 5
[  123.191150][   T60] usb 8-1: config 0 descriptor??
[  123.262071][ T5698] loop9: detected capacity change from 0 to 128
[  123.315268][ T5698] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  123.326107][ T5698] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.386016][ T5701] loop9: detected capacity change from 0 to 128
[  123.421411][ T5701] EXT4-fs (loop9): Test dummy encryption mode enabled
[  123.432124][ T5701] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  123.448152][ T5701] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.449439][  T530] microsoft 0003:045E:07DA.0021: unbalanced collection at end of report description
[  123.471142][  T530] microsoft 0003:045E:07DA.0021: parse failed
[  123.473734][ T5701] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22
[  123.477278][  T530] microsoft: probe of 0003:045E:07DA.0021 failed with error -22
[  123.490957][ T5701] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  123.671543][  T333] usb 6-1: USB disconnect, device number 12
[  123.680288][   T60] appleir 0003:05AC:8243.0022: unknown main item tag 0x0
[  123.697837][   T60] appleir 0003:05AC:8243.0022: No inputs registered, leaving
[  123.724633][   T60] appleir 0003:05AC:8243.0022: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  123.811444][ T5720] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2240'.
[  123.948582][   T26] usb 8-1: USB disconnect, device number 7
[  124.298471][ T5728] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  124.390982][ T5738] loop9: detected capacity change from 0 to 128
[  124.464664][ T5743] loop7: detected capacity change from 0 to 128
[  124.512172][ T5743] EXT4-fs (loop7): Test dummy encryption mode enabled
[  124.532269][ T5743] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  124.548385][ T5743] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.566220][ T5743] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22
[  124.578738][ T5743] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  124.613403][ T5752] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  124.698076][ T5757] loop9: detected capacity change from 0 to 512
[  124.751689][ T5757] EXT4-fs (loop9): Ignoring removed oldalloc option
[  124.761358][ T5757] EXT4-fs (loop9): 1 truncate cleaned up
[  124.767108][ T5757] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  124.797659][  T530] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  124.956284][ T5776] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2263'.
[  125.003450][ T5782] loop0: detected capacity change from 0 to 128
[  125.079841][ T5782] EXT4-fs (loop0): Test dummy encryption mode enabled
[  125.119271][ T5782] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  125.147927][ T5790] loop7: detected capacity change from 0 to 1024
[  125.159206][ T5782] ext4 filesystem being mounted at /464/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.166296][ T5792] loop9: detected capacity change from 0 to 1024
[  125.169887][ T5790] EXT4-fs (loop7): Ignoring removed nobh option
[  125.186157][ T5790] EXT4-fs (loop7): Ignoring removed bh option
[  125.192525][ T5790] EXT4-fs (loop7): Ignoring removed nobh option
[  125.201253][ T5782] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22
[  125.211759][ T5782] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  125.217770][  T530] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.234487][  T530] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.238761][ T5790] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue. Quota mode: writeback.
[  125.267802][ T5792] EXT4-fs (loop9): Ignoring removed orlov option
[  125.309291][ T5792] EXT4-fs (loop9): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  125.328808][ T5790] overlayfs: failed to resolve './bus': -2
[  125.407643][  T530] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  125.418730][  T530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  125.429425][ T5807] loop7: detected capacity change from 0 to 512
[  125.435884][  T530] usb 9-1: SerialNumber: syz
[  125.490688][ T5807] EXT4-fs (loop7): Ignoring removed oldalloc option
[  125.509202][ T5807] EXT4-fs (loop7): 1 truncate cleaned up
[  125.514887][ T5807] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  125.522557][ T5811] loop5: detected capacity change from 0 to 4096
[  125.552066][ T5811] EXT4-fs (loop5): Ignoring removed orlov option
[  125.563668][ T5811] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  125.579594][ T5811] System zones: 0-5
[  125.584329][ T5811] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000002,orlov,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  125.647724][   T26] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  125.715879][ T5815] incfs: Options parsing error. -22
[  125.722029][  T530] usb 9-1: 0:2 : does not exist
[  125.730266][  T530] usb 9-1: USB disconnect, device number 6
[  125.766091][ T5815] incfs: mount failed -22
[  125.790719][ T5821] overlayfs: failed to set xattr on upper
[  125.893435][ T5832] loop5: detected capacity change from 0 to 1024
[  125.930289][ T5832] EXT4-fs (loop5): Ignoring removed nobh option
[  125.937886][ T5832] EXT4-fs (loop5): Ignoring removed bh option
[  125.950945][ T5832] EXT4-fs (loop5): Ignoring removed nobh option
[  125.998792][ T5832] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue. Quota mode: writeback.
[  126.007676][   T26] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  126.031428][   T26] usb 1-1: config 0 has no interface number 0
[  126.037696][   T26] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.048681][   T26] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.058523][   T26] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  126.067698][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.087386][   T26] usb 1-1: config 0 descriptor??
[  126.101338][ T5832] overlayfs: failed to resolve './bus': -2
[  126.215364][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  126.215382][   T30] audit: type=1326 audit(1895232152.043:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.249047][   T30] audit: type=1326 audit(1895232152.083:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.260613][ T5839] loop5: detected capacity change from 0 to 1024
[  126.274711][   T30] audit: type=1326 audit(1895232152.083:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.302649][   T30] audit: type=1326 audit(1895232152.083:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.326525][   T30] audit: type=1326 audit(1895232152.083:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.331526][ T5843] loop7: detected capacity change from 0 to 4096
[  126.357006][   T30] audit: type=1326 audit(1895232152.083:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.380958][   T30] audit: type=1326 audit(1895232152.113:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.404905][   T30] audit: type=1326 audit(1895232152.193:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.428716][   T30] audit: type=1326 audit(1895232152.193:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.452534][   T30] audit: type=1326 audit(1895232152.223:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.9.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  126.467742][ T5843] EXT4-fs (loop7): Ignoring removed orlov option
[  126.484190][ T5839] EXT4-fs (loop5): Ignoring removed orlov option
[  126.504598][ T5843] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  126.514065][ T5843] System zones: 0-5
[  126.518310][ T5839] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  126.534109][ T5843] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000002,orlov,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  126.598972][ T5849] loop8: detected capacity change from 0 to 512
[  126.600163][   T26] uclogic 0003:256C:006D.0023: No inputs registered, leaving
[  126.629760][   T26] uclogic 0003:256C:006D.0023: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1
[  126.681494][ T5849] EXT4-fs (loop8): Ignoring removed oldalloc option
[  126.694451][ T5856] overlayfs: failed to set xattr on upper
[  126.707855][ T5849] EXT4-fs (loop8): 1 truncate cleaned up
[  126.718954][ T5849] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  126.820738][   T26] usb 1-1: USB disconnect, device number 19
[  126.889921][ T5871] incfs: Options parsing error. -22
[  126.900164][ T5871] incfs: mount failed -22
[  126.958333][ T5876] loop9: detected capacity change from 0 to 1024
[  127.003490][ T5876] EXT4-fs (loop9): Ignoring removed nobh option
[  127.022458][ T5876] EXT4-fs (loop9): Ignoring removed bh option
[  127.033135][ T5876] EXT4-fs (loop9): Ignoring removed nobh option
[  127.065136][ T5876] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue. Quota mode: writeback.
[  127.102272][ T5876] overlayfs: failed to resolve './bus': -2
[  127.247633][   T60] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  127.266868][ T5883] loop9: detected capacity change from 0 to 4096
[  127.285792][ T5883] EXT4-fs (loop9): Ignoring removed orlov option
[  127.312942][ T5883] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  127.313614][ T5899] loop5: detected capacity change from 0 to 512
[  127.322585][ T5883] System zones: 0-5
[  127.338642][ T5883] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000002,orlov,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  127.372743][ T5901] loop0: detected capacity change from 0 to 512
[  127.402550][ T5899] EXT4-fs (loop5): Ignoring removed oldalloc option
[  127.412141][ T5901] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  127.433678][ T5901] EXT4-fs (loop0): 1 truncate cleaned up
[  127.459490][ T5901] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001df,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  127.460584][ T5899] EXT4-fs (loop5): 1 truncate cleaned up
[  127.502618][ T5899] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  127.503167][ T5901] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.2312: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  127.547226][ T5907] loop8: detected capacity change from 0 to 1024
[  127.588393][  T281] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  127.621084][ T5907] EXT4-fs (loop8): Ignoring removed orlov option
[  127.643839][ T5907] EXT4-fs (loop8): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  127.687772][   T60] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.715832][   T60] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.831555][ T5914] loop9: detected capacity change from 0 to 1024
[  127.867934][   T60] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  127.891515][   T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  127.905774][ T5914] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  127.966777][   T60] usb 8-1: SerialNumber: syz
[  127.998878][ T5914] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3871: comm syz.9.2327: Allocating blocks 385-513 which overlap fs metadata
[  128.091284][ T5914] EXT4-fs (loop9): pa ffff888128fc1348: logic 16, phys. 129, len 24
[  128.099421][ T5914] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8
[  128.202941][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.234294][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.242389][ T5922] device bridge_slave_0 entered promiscuous mode
[  128.255006][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.264630][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.272750][ T5922] device bridge_slave_1 entered promiscuous mode
[  128.273045][   T60] usb 8-1: 0:2 : does not exist
[  128.288490][   T60] usb 8-1: USB disconnect, device number 8
[  128.345700][   T45] device vlan2 left promiscuous mode
[  128.351164][   T45] device dummy0 left promiscuous mode
[  128.357131][   T45] bridge0: port 3(vlan2) entered disabled state
[  128.367321][   T45] device bridge_slave_1 left promiscuous mode
[  128.374291][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.385449][   T45] device bridge_slave_0 left promiscuous mode
[  128.392511][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.409273][   T45] device veth0_vlan left promiscuous mode
[  128.508938][ T1547] udevd[1547]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  128.527584][   T26] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  128.562121][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.569197][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.576471][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.583579][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.605319][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.613284][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.621686][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.631532][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.640067][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.647134][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.656432][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.664925][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.671979][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.685664][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.693943][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.703385][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.711637][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.726997][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  128.735652][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  128.751366][ T5922] device veth0_vlan entered promiscuous mode
[  128.770320][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  128.779134][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  128.795961][ T5922] device veth1_macvtap entered promiscuous mode
[  128.807994][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  128.815620][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  128.823567][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  128.832906][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  128.842960][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  128.851079][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  128.859660][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  128.877293][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  128.889480][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.908726][   T26] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  128.933359][   T26] usb 10-1: config 0 has no interface number 0
[  128.948529][   T26] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.978171][   T26] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.999424][   T26] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  129.006523][ T5962] loop7: detected capacity change from 0 to 2048
[  129.013726][   T26] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.031331][   T26] usb 10-1: config 0 descriptor??
[  129.041805][ T5962] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  129.075011][ T5962] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  129.519364][   T26] uclogic 0003:256C:006D.0024: No inputs registered, leaving
[  129.528009][   T26] uclogic 0003:256C:006D.0024: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.9-1/input1
[  129.726304][  T333] usb 10-1: USB disconnect, device number 4
[  130.093161][ T6046] binder: 6045:6046 ioctl c0306201 2000000003c0 returned -14
[  130.244732][ T6064] device ip6tnl1 entered promiscuous mode
[  130.314673][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2383'.
[  130.340770][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  130.354846][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2392'.
[  130.373780][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.398507][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.421681][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.483097][ T6090] loop7: detected capacity change from 0 to 256
[  130.603264][ T6101] loop5: detected capacity change from 0 to 16
[  130.632630][ T6101] erofs: (device loop5): mounted with root inode @ nid 36.
[  130.768419][  T618] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 46
[  130.795654][  T618] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  130.810615][  T618] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  130.856383][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2398'.
[  130.868501][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  130.921558][ T6119] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2399'.
[  130.933553][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.943559][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.960270][   T60] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  130.961210][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.981074][ T6121] device ip6tnl1 entered promiscuous mode
[  130.998713][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  131.077681][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  131.147927][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  131.207590][   T60] usb 8-1: Using ep0 maxpacket: 16
[  131.327650][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.338648][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.348579][  T632] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  131.357989][   T60] usb 8-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00
[  131.367154][   T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.381746][   T60] usb 8-1: config 0 descriptor??
[  131.408486][   T30] kauditd_printk_skb: 128 callbacks suppressed
[  131.408505][   T30] audit: type=1326 audit(1895232157.243:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.1.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea0085fc9 code=0x7ffc0000
[  131.439759][   T30] audit: type=1326 audit(1895232157.243:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.1.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea0085fc9 code=0x7ffc0000
[  131.464359][   T30] audit: type=1326 audit(1895232157.243:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.1.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8ea0085fc9 code=0x7ffc0000
[  131.488147][   T30] audit: type=1326 audit(1895232157.243:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.1.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea0085fc9 code=0x7ffc0000
[  131.511801][   T30] audit: type=1326 audit(1895232157.243:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.1.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea0085fc9 code=0x7ffc0000
[  131.707692][ T1417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  131.727655][  T632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.737956][   T60] usbhid 8-1:0.0: can't add hid device: -71
[  131.743977][   T60] usbhid: probe of 8-1:0.0 failed with error -71
[  131.750468][  T632] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.761383][   T60] usb 8-1: USB disconnect, device number 9
[  131.926306][   T30] audit: type=1326 audit(1895232157.753:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  131.950301][  T632] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  131.966517][  T632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.977610][  T632] usb 6-1: Product: syz
[  131.984805][  T632] usb 6-1: Manufacturer: syz
[  131.990538][  T632] usb 6-1: SerialNumber: syz
[  131.995352][   T30] audit: type=1326 audit(1895232157.753:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  132.019474][   T30] audit: type=1326 audit(1895232157.753:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  132.044085][   T30] audit: type=1326 audit(1895232157.793:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc3bfafc9 code=0x7ffc0000
[  132.407653][  T632] usb 6-1: 0:2 : does not exist
[  132.449510][  T632] usb 6-1: USB disconnect, device number 13
[  132.658343][ T1547] udevd[1547]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  132.887690][   T60] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  132.917657][ T1417] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  132.955118][ T6192] loop8: detected capacity change from 0 to 4096
[  132.967086][ T6192] EXT4-fs (loop8): Ignoring removed orlov option
[  132.975273][ T6192] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  132.983784][ T6192] System zones: 0-5
[  132.988770][ T6192] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000002,orlov,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  133.107612][  T632] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  133.127627][   T60] usb 10-1: Using ep0 maxpacket: 16
[  133.247656][   T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.258739][   T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.268586][   T60] usb 10-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00
[  133.277739][   T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.286491][   T60] usb 10-1: config 0 descriptor??
[  133.297680][ T1417] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  133.305765][ T1417] usb 2-1: config 0 has no interface number 0
[  133.312169][ T1417] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.323296][ T1417] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.333085][ T1417] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  133.342155][ T1417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.350966][ T1417] usb 2-1: config 0 descriptor??
[  133.467668][  T632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.477906][  T632] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.557753][  T632] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  133.566835][  T632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  133.575044][  T632] usb 6-1: SerialNumber: syz
[  133.627674][   T60] usbhid 10-1:0.0: can't add hid device: -71
[  133.633860][   T60] usbhid: probe of 10-1:0.0 failed with error -71
[  133.641540][   T60] usb 10-1: USB disconnect, device number 5
[  133.839045][ T1417] uclogic 0003:256C:006D.0025: No inputs registered, leaving
[  133.846987][ T1417] uclogic 0003:256C:006D.0025: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1
[  133.859219][  T632] usb 6-1: 0:2 : does not exist
[  133.867857][  T632] usb 6-1: USB disconnect, device number 14
[  134.045921][   T26] usb 2-1: USB disconnect, device number 2
[  134.054876][ T6199] input: syz0 as /devices/virtual/input/input28
[  134.078655][ T1781] udevd[1781]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  134.347823][   T20] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  134.617091][ T6220] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2441'.
[  134.646582][ T6222] SELinux:  policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c
[  134.656864][ T6222] SELinux: failed to load policy
[  134.679382][   T30] audit: type=1326 audit(1895232160.513:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6225 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea0085fc9 code=0x7ffc0000
[  134.708329][   T20] usb 9-1: config 0 has an invalid interface number: 14 but max is 0
[  134.716478][   T20] usb 9-1: config 0 has no interface number 0
[  134.722994][   T20] usb 9-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00
[  134.732331][   T20] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.742606][   T20] usb 9-1: config 0 descriptor??
[  134.788235][   T20] usb-storage 9-1:0.14: USB Mass Storage device detected
[  134.796358][   T20] usb-storage 9-1:0.14: Quirks match for vid 04e6 pid 0006: 1
[  134.804777][   T20] usb-storage 9-1:0.14: This device (04e6,0006,0100 S de P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller)
[  134.804777][   T20]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  134.847096][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.871006][ T6241] device bridge_slave_1 left promiscuous mode
[  134.877245][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.969009][ T6253] kvm [6251]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[  134.978340][ T6253] kvm [6251]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[  135.003568][  T334] usb 9-1: USB disconnect, device number 7
[  135.062212][ T6260] loop5: detected capacity change from 0 to 1024
[  135.109831][ T6260] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  135.127973][ T6260] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.2458: Allocating blocks 385-513 which overlap fs metadata
[  135.147091][ T6260] EXT4-fs (loop5): pa ffff888128fc1e70: logic 16, phys. 129, len 24
[  135.155391][ T6260] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8
[  135.799351][ T6271] loop5: detected capacity change from 0 to 256
[  135.838075][ T6276] loop9: detected capacity change from 0 to 256
[  135.868457][ T6276] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  135.956472][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.967394][ T6284] device bridge_slave_1 left promiscuous mode
[  135.973599][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.986438][ T6288] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2466'.
[  136.044717][ T6292] input: syz0 as /devices/virtual/input/input29
[  136.057675][  T334] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  136.108923][ T6291] kvm [6290]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[  136.118494][ T6291] kvm [6290]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[  136.225936][ T6304] overlayfs: failed to resolve './file0': -2
[  136.246413][ T6312] loop5: detected capacity change from 0 to 256
[  136.271951][ T6312] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  136.367973][ T6303] loop8: detected capacity change from 0 to 32768
[  136.389193][ T6303]  loop8: p1 p3 < >
[  136.417668][  T334] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  136.427923][  T334] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  136.438347][  T334] usb 8-1: config 1 interface 0 has no altsetting 0
[  136.514972][ T1781] udevd[1781]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  136.526126][ T1547] udevd[1547]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  136.617752][  T334] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  136.627044][  T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.635376][  T334] usb 8-1: Product: syz
[  136.639847][  T334] usb 8-1: Manufacturer: syz
[  136.644493][  T334] usb 8-1: SerialNumber: syz
[  136.677724][ T6266] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.684865][ T6266] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.014083][ T6320] loop5: detected capacity change from 0 to 512
[  137.022793][ T6323] syz.1.2493[6323] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  137.022894][ T6323] syz.1.2493[6323] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  137.045272][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.071554][ T6320] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  137.091088][ T6324] device bridge_slave_1 left promiscuous mode
[  137.098155][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.106108][ T6320] EXT4-fs (loop5): 1 truncate cleaned up
[  137.111898][ T6320] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001df,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  137.140881][ T6320] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.2483: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  137.171362][  T618] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  137.280040][  T332] tipc: Disabling bearer <udp:ree>
[  137.285279][  T332] tipc: Left network mode
[  137.329097][  T618] syz-executor (618) used greatest stack depth: 20192 bytes left
[  137.817654][  T334] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:82:79:b4:57:92
[  137.829317][  T334] rtl8150 8-1:1.0: eth1: rtl8150 is detected
[  137.835979][  T332] device veth0_macvtap left promiscuous mode
[  137.837158][  T334] usb 8-1: USB disconnect, device number 10
[  137.848919][  T332] bridge0: port 3(veth0_macvtap) entered disabled state
[  137.856448][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.864929][  T332] device veth1_macvtap left promiscuous mode
[  137.870972][  T332] device veth0_vlan left promiscuous mode
[  138.341288][ T6347] loop7: detected capacity change from 0 to 1024
[  138.420852][ T6347] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  138.501628][ T6347] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3871: comm syz.7.2492: Allocating blocks 385-513 which overlap fs metadata
[  138.523888][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  138.523906][   T30] audit: type=1326 audit(1895232164.353:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.8.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6138ffc9 code=0x7ffc0000
[  138.530631][ T6347] EXT4-fs (loop7): pa ffff888128e46150: logic 16, phys. 129, len 24
[  138.561685][ T6347] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8
[  138.592408][   T30] audit: type=1326 audit(1895232164.393:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.8.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fba6138ffc9 code=0x7ffc0000
[  138.616097][   T30] audit: type=1326 audit(1895232164.393:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.8.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6138ffc9 code=0x7ffc0000
[  138.639893][   T30] audit: type=1326 audit(1895232164.393:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.8.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba6138ffc9 code=0x7ffc0000
[  138.667886][   T30] audit: type=1326 audit(1895232164.393:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.8.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6138ffc9 code=0x7ffc0000
[  138.670074][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2508'.
[  138.691681][   T30] audit: type=1326 audit(1895232164.393:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.8.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fba6138ffc9 code=0x7ffc0000
[  138.724164][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2508'.
[  138.725291][   T30] audit: type=1326 audit(1895232164.393:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.8.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  138.757194][   T30] audit: type=1326 audit(1895232164.393:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.8.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6138ffc9 code=0x7ffc0000
[  138.794487][   T30] audit: type=1326 audit(1895232164.623:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.1.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea0085fc9 code=0x7ffc0000
[  138.818990][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.826185][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.827840][   T30] audit: type=1326 audit(1895232164.623:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.1.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ea0085fc9 code=0x7ffc0000
[  138.833896][   T20] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  138.858388][ T6359] device bridge_slave_0 entered promiscuous mode
[  138.875195][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.882432][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.897807][ T6359] device bridge_slave_1 entered promiscuous mode
[  138.964337][ T6389] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  138.973639][ T6387] loop8: detected capacity change from 0 to 2048
[  139.012725][ T6387] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none.
[  139.065449][ T6387] incfs_lookup_dentry err:-13
[  139.150287][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  139.157978][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.179641][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.188865][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  139.197301][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.204420][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.219645][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  139.227805][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  139.238112][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  139.248611][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.255764][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.277870][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  139.286113][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  139.294214][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.302722][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.334165][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  139.342747][   T20] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  139.353438][   T20] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  139.353777][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  139.371793][   T20] usb 10-1: config 1 interface 0 has no altsetting 0
[  139.382188][ T6359] device veth0_vlan entered promiscuous mode
[  139.388408][ T1417] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  139.417939][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.426777][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.435706][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.446435][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.455390][ T6359] device veth1_macvtap entered promiscuous mode
[  139.476094][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  139.484538][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  139.492804][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  139.501824][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  139.510654][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  139.518648][  T632] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  139.518663][  T632] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  139.519483][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  139.540845][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  139.547952][   T20] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  139.549625][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.564788][   T20] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.574302][   T20] usb 10-1: Product: syz
[  139.574668][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.578592][   T20] usb 10-1: Manufacturer: syz
[  139.578610][   T20] usb 10-1: SerialNumber: syz
[  139.597953][ T6367] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  139.604949][ T6367] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  139.617268][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  139.625794][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  139.634358][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  139.643547][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  139.719691][ T6446] syz.5.2536[6446] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  139.719782][ T6446] syz.5.2536[6446] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  139.757737][ T1417] usb 8-1: config 0 has an invalid interface number: 14 but max is 0
[  139.777297][ T1417] usb 8-1: config 0 has no interface number 0
[  139.783422][ T1417] usb 8-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00
[  139.792540][ T1417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.802708][ T1417] usb 8-1: config 0 descriptor??
[  139.848386][ T1417] usb-storage 8-1:0.14: USB Mass Storage device detected
[  139.856596][ T1417] usb-storage 8-1:0.14: Quirks match for vid 04e6 pid 0006: 1
[  139.864163][ T1417] usb-storage 8-1:0.14: This device (04e6,0006,0100 S de P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller)
[  139.864163][ T1417]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  139.987666][   T60] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  140.990164][  T632] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.006881][  T632] usb 8-1: USB disconnect, device number 11
[  141.295117][ T6477] rtc_cmos 00:00: Alarms can be up to one day in the future
[  141.304787][ T6476] rtc_cmos 00:00: Alarms can be up to one day in the future
[  141.384041][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2552'.
[  141.395005][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2552'.
[  141.404216][   T60] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  141.424208][   T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.439356][   T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  141.452988][   T60] usb 9-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  141.462802][   T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.482490][   T60] usb 9-1: config 0 descriptor??
[  141.586558][ T6502] loop7: detected capacity change from 0 to 512
[  141.623778][ T6502] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  141.667760][   T20] (unnamed net_device) (uninitialized): Assigned a random MAC address: 96:9c:60:41:f9:5e
[  141.683470][ T6502] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  141.684225][   T20] rtl8150 10-1:1.0: eth1: rtl8150 is detected
[  141.707680][   T20] usb 10-1: USB disconnect, device number 6
[  141.715900][ T6502] EXT4-fs (loop7): 1 truncate cleaned up
[  141.721894][ T6502] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback.
[  141.768845][ T6508] loop5: detected capacity change from 0 to 256
[  141.848315][ T6514] loop5: detected capacity change from 0 to 128
[  141.855602][ T6514] EXT4-fs (loop5): Test dummy encryption mode enabled
[  141.872759][ T6514] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none.
[  141.887772][ T6514] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.935949][ T6523] netlink: 'syz.7.2568': attribute type 3 has an invalid length.
[  141.943811][ T6523] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2568'.
[  141.956193][ T6521] netlink: 'syz.1.2567': attribute type 12 has an invalid length.
[  141.983761][   T60] sony 0003:054C:042F.0026: unknown main item tag 0x0
[  141.993811][   T60] sony 0003:054C:042F.0026: unknown main item tag 0x5
[  142.003570][   T60] sony 0003:054C:042F.0026: hidraw0: USB HID v10.01 Device [HID 054c:042f] on usb-dummy_hcd.8-1/input0
[  142.016908][   T60] sony 0003:054C:042F.0026: failed to claim input
[  142.060339][ T6532] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2566'.
[  142.070411][ T6532] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2566'.
[  142.125509][ T6539] loop7: detected capacity change from 0 to 1024
[  142.139192][ T6539] EXT4-fs (loop7): Ignoring removed orlov option
[  142.150203][ T6539] EXT4-fs (loop7): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  142.180302][   T60] usb 9-1: USB disconnect, device number 8
[  142.227276][   T20] rtc_cmos 00:00: Alarms can be up to one day in the future
[  142.245611][ T6546] loop5: detected capacity change from 0 to 512
[  142.252816][   T20] rtc_cmos 00:00: Alarms can be up to one day in the future
[  142.288186][   T20] rtc_cmos 00:00: Alarms can be up to one day in the future
[  142.314180][   T20] rtc_cmos 00:00: Alarms can be up to one day in the future
[  142.327240][ T6546] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  142.354886][   T20] rtc rtc0: __rtc_set_alarm: err=-22
[  142.384953][ T6546] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  142.416624][ T6546] EXT4-fs (loop5): 1 truncate cleaned up
[  142.437109][ T6546] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback.
[  142.473191][ T6556] netlink: 'syz.1.2580': attribute type 3 has an invalid length.
[  142.481025][ T6556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2580'.
[  142.608875][ T6567] netlink: 'syz.5.2582': attribute type 12 has an invalid length.
[  142.724871][ T6582] loop5: detected capacity change from 0 to 1024
[  142.735748][ T6582] EXT4-fs (loop5): Ignoring removed bh option
[  142.749809][ T6582] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  142.800675][ T6582] EXT4-fs error (device loop5): ext4_check_all_de:667: inode #12: block 7: comm syz.5.2591: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  142.822878][ T6589] loop9: detected capacity change from 0 to 512
[  142.831386][ T6582] EXT4-fs (loop5): Remounting filesystem read-only
[  142.853245][ T6359] EXT4-fs error (device loop5): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /20/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  142.875786][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  142.882867][ T6359] EXT4-fs error (device loop5): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /20/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  142.907630][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  142.908382][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  142.937007][ T6359] EXT4-fs error (device loop5): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  142.971801][ T6589] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  142.988858][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  142.995997][ T6589] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  143.011465][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.018748][ T6589] EXT4-fs (loop9): 1 truncate cleaned up
[  143.026213][ T6359] EXT4-fs error (device loop5): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /20/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  143.031552][   T20] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  143.061511][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  143.071057][ T6589] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback.
[  143.087695][ T6359] EXT4-fs error (device loop5): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /20/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  143.181440][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  143.191635][ T6359] EXT4-fs error (device loop5): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  143.215712][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  143.240294][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.265702][ T6359] EXT4-fs error (device loop5): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /20/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  143.305919][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  143.317433][ T6359] EXT4-fs error (device loop5): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /20/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  143.340674][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  143.347879][ T6359] EXT4-fs error (device loop5): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  143.370970][ T6597] loop9: detected capacity change from 0 to 512
[  143.387823][ T6359] EXT4-fs (loop5): Remounting filesystem read-only
[  143.395116][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.410081][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.425898][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.440937][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.456832][ T6597] EXT4-fs warning (device loop9): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  143.471739][   T20] usb 9-1: Using ep0 maxpacket: 16
[  143.477006][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.481035][ T6597] EXT4-fs (loop9): mount failed
[  143.501317][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.516797][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.533128][ T6359] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.671779][ T6618] loop7: detected capacity change from 0 to 1024
[  143.727278][ T6618] EXT4-fs (loop7): Ignoring removed bh option
[  143.768618][ T6618] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  143.817840][   T20] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  143.834825][   T20] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.844207][ T6618] EXT4-fs error (device loop7): ext4_check_all_de:667: inode #12: block 7: comm syz.7.2606: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  143.864061][   T20] usb 9-1: Product: syz
[  143.868813][   T20] usb 9-1: Manufacturer: syz
[  143.873449][   T20] usb 9-1: SerialNumber: syz
[  143.879807][   T20] usb 9-1: config 0 descriptor??
[  143.886331][ T6618] EXT4-fs (loop7): Remounting filesystem read-only
[  143.905073][ T4182] EXT4-fs error (device loop7): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  143.918411][   T20] ums-onetouch 9-1:0.0: USB Mass Storage device detected
[  143.928253][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  143.941046][ T4182] EXT4-fs error (device loop7): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  143.963658][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  143.970382][ T4182] EXT4-fs error (device loop7): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  143.990493][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  143.997053][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.011573][ T4182] EXT4-fs error (device loop7): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  144.034219][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  144.040902][ T4182] EXT4-fs error (device loop7): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  144.063293][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  144.070003][ T4182] EXT4-fs error (device loop7): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  144.089986][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  144.096536][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.111306][ T4182] EXT4-fs error (device loop7): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  144.133852][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  144.140699][ T4182] EXT4-fs error (device loop7): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  144.141079][ T6459] usb 9-1: USB disconnect, device number 9
[  144.163405][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  144.175449][ T4182] EXT4-fs error (device loop7): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  144.195754][ T4182] EXT4-fs (loop7): Remounting filesystem read-only
[  144.202354][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.217288][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.232206][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.247109][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.262205][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.277117][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.292795][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.307890][ T4182] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.414359][  T332] device bridge_slave_1 left promiscuous mode
[  144.420558][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.428210][  T332] device bridge_slave_0 left promiscuous mode
[  144.434343][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.442703][  T332] device veth1_macvtap left promiscuous mode
[  144.448810][  T332] device veth0_vlan left promiscuous mode
[  144.688132][ T6629] loop8: detected capacity change from 0 to 512
[  144.736194][ T6632] loop9: detected capacity change from 0 to 1024
[  144.779560][ T6629] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  144.809136][ T6629] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  144.823885][ T6629] EXT4-fs (loop8): 1 truncate cleaned up
[  144.829627][ T6632] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  144.829734][ T6632] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.846680][ T6629] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback.
[  144.877572][ T6632] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  144.905024][ T6632] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28
[  144.919083][ T6632] EXT4-fs (loop9): This should not happen!! Data will be lost
[  144.919083][ T6632] 
[  144.928798][ T6632] EXT4-fs (loop9): Total free blocks count 0
[  144.934898][ T6632] EXT4-fs (loop9): Free/Dirty block details
[  144.941026][ T6632] EXT4-fs (loop9): free_blocks=4293918720
[  144.946855][ T6632] EXT4-fs (loop9): dirty_blocks=16
[  144.952076][ T6632] EXT4-fs (loop9): Block reservation details
[  144.958173][ T6632] EXT4-fs (loop9): i_reserved_data_blocks=1
[  144.986251][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.993379][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.008593][ T6634] device bridge_slave_0 entered promiscuous mode
[  145.023823][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.031289][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.038816][ T6634] device bridge_slave_1 entered promiscuous mode
[  145.047735][ T6459] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  145.095491][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.102576][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.110034][ T6636] device bridge_slave_0 entered promiscuous mode
[  145.117236][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.124327][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.132352][ T6636] device bridge_slave_1 entered promiscuous mode
[  145.222440][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.229524][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.236863][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.243920][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.264079][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.271160][ T6636] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.278485][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.285513][ T6636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.314223][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.321874][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.329481][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.336811][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.344449][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.360166][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.368638][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.375670][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.383196][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.391479][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.398517][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.411387][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.417701][ T6459] usb 2-1: config 0 has an invalid interface number: 14 but max is 0
[  145.427167][ T6459] usb 2-1: config 0 has no interface number 0
[  145.433351][ T6459] usb 2-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00
[  145.442934][  T332] device bridge_slave_1 left promiscuous mode
[  145.449300][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.449512][ T6459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.464780][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.465692][ T6459] usb 2-1: config 0 descriptor??
[  145.478259][  T332] device veth0_vlan left promiscuous mode
[  145.519353][ T6459] usb-storage 2-1:0.14: USB Mass Storage device detected
[  145.527283][ T6459] usb-storage 2-1:0.14: Quirks match for vid 04e6 pid 0006: 1
[  145.534947][ T6459] usb-storage 2-1:0.14: This device (04e6,0006,0100 S de P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller)
[  145.534947][ T6459]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  145.600599][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.608698][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.616882][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.623927][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.631402][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.639803][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.646884][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.662625][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.677698][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.686028][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.694267][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.702681][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.715423][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.724050][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  145.740217][ T6636] device veth0_vlan entered promiscuous mode
[  145.743790][ T6459] usb 2-1: USB disconnect, device number 3
[  145.753866][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.762397][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  145.770970][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  145.778912][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  145.787042][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  145.794661][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  145.805565][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.813931][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.823048][ T6636] device veth1_macvtap entered promiscuous mode
[  145.831017][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  145.838741][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  145.846595][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  145.855953][ T6634] device veth0_vlan entered promiscuous mode
[  145.863527][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  145.871056][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  145.888135][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  145.896941][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  145.905466][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  145.913842][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.933505][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.941792][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.950676][ T6634] device veth1_macvtap entered promiscuous mode
[  145.966160][ T6662] loop9: detected capacity change from 0 to 512
[  145.973945][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  145.982026][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  145.990500][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  146.000059][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  146.008425][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.028756][ T6662] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  146.067370][ T6662] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  146.082990][ T6662] EXT4-fs (loop9): 1 truncate cleaned up
[  146.089159][ T6662] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback.
[  146.466239][ T6701] xt_bpf: check failed: parse error
[  146.521441][ T6710] loop7: detected capacity change from 0 to 512
[  146.598655][ T6710] EXT4-fs (loop7): Ignoring removed nobh option
[  146.650568][ T6710] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #3: comm syz.7.2634: corrupted inode contents
[  146.662798][   T30] kauditd_printk_skb: 91 callbacks suppressed
[  146.662814][   T30] audit: type=1326 audit(1895232172.493:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  146.669637][ T6710] EXT4-fs error (device loop7): ext4_dirty_inode:6071: inode #3: comm syz.7.2634: mark_inode_dirty error
[  146.708258][   T30] audit: type=1326 audit(1895232172.543:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  146.737568][   T30] audit: type=1326 audit(1895232172.543:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  146.765037][ T6710] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #3: comm syz.7.2634: corrupted inode contents
[  146.777242][   T30] audit: type=1326 audit(1895232172.543:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  146.801555][   T30] audit: type=1326 audit(1895232172.543:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  146.831193][ T6710] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #3: comm syz.7.2634: mark_inode_dirty error
[  146.847575][   T20] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  146.860119][   T30] audit: type=1326 audit(1895232172.543:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  146.889580][ T6710] Quota error (device loop7): write_blk: dquota write failed
[  146.904908][   T30] audit: type=1326 audit(1895232172.543:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  146.938189][ T6710] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  146.946329][   T30] audit: type=1326 audit(1895232172.543:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.5.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  146.957634][ T6710] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.2634: Failed to acquire dquot type 0
[  146.993545][ T6710] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #16: comm syz.7.2634: corrupted inode contents
[  147.016048][ T6710] EXT4-fs error (device loop7): ext4_dirty_inode:6071: inode #16: comm syz.7.2634: mark_inode_dirty error
[  147.043869][ T6710] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #16: comm syz.7.2634: corrupted inode contents
[  147.072293][ T6710] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.2634: mark_inode_dirty error
[  147.075203][ T6733] loop8: detected capacity change from 0 to 1024
[  147.094077][ T6710] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #16: comm syz.7.2634: corrupted inode contents
[  147.116409][ T6710] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[  147.135325][ T6710] EXT4-fs error (device loop7): ext4_do_update_inode:5235: inode #16: comm syz.7.2634: corrupted inode contents
[  147.151395][ T6733] EXT4-fs (loop8): Ignoring removed bh option
[  147.174707][ T6710] EXT4-fs error (device loop7): ext4_truncate:4304: inode #16: comm syz.7.2634: mark_inode_dirty error
[  147.196260][ T6710] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[  147.206789][ T6733] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  147.216599][ T6710] EXT4-fs (loop7): 1 truncate cleaned up
[  147.237704][   T20] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.257628][ T6710] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback.
[  147.281460][ T6710] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.332642][ T6733] EXT4-fs error (device loop8): ext4_check_all_de:667: inode #12: block 7: comm syz.8.2642: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  147.359024][ T6733] EXT4-fs (loop8): Remounting filesystem read-only
[  147.422535][ T4582] EXT4-fs error (device loop8): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /188/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  147.444927][   T20] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  147.454389][   T20] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.462731][   T20] usb 10-1: Product: syz
[  147.467336][   T20] usb 10-1: Manufacturer: syz
[  147.472426][   T20] usb 10-1: SerialNumber: syz
[  147.478047][   T20] usb 10-1: config 0 descriptor??
[  147.484191][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.491587][ T4582] EXT4-fs error (device loop8): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /188/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  147.514495][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.521370][ T4582] EXT4-fs error (device loop8): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  147.545486][   T20] snd-usb-audio: probe of 10-1:0.0 failed with error -22
[  147.558319][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.564897][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.579494][ T4582] EXT4-fs error (device loop8): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /188/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  147.613288][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.628965][ T4582] EXT4-fs error (device loop8): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /188/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  147.657945][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.664629][ T4582] EXT4-fs error (device loop8): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  147.703382][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.717589][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.739445][ T4582] EXT4-fs error (device loop8): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /188/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  147.767875][   T60] usb 10-1: USB disconnect, device number 7
[  147.776426][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.782002][ T6750] rtc_cmos 00:00: Alarms can be up to one day in the future
[  147.785172][ T4582] EXT4-fs error (device loop8): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /188/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0
[  147.791926][ T6751] loop7: detected capacity change from 0 to 512
[  147.813366][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.825551][ T4582] EXT4-fs error (device loop8): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  147.826062][ T6749] rtc_cmos 00:00: Alarms can be up to one day in the future
[  147.845760][ T4582] EXT4-fs (loop8): Remounting filesystem read-only
[  147.876503][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.901218][ T6751] EXT4-fs warning (device loop7): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  147.908360][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.918979][ T6751] EXT4-fs (loop7): mount failed
[  147.942180][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.958045][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.973038][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  147.990234][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  148.005274][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  148.020369][ T4582] EXT4-fs warning (device loop8): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  148.225405][   T60] rtc_cmos 00:00: Alarms can be up to one day in the future
[  148.233155][   T60] rtc_cmos 00:00: Alarms can be up to one day in the future
[  148.260762][ T6768] loop5: detected capacity change from 0 to 1024
[  148.267612][   T60] rtc_cmos 00:00: Alarms can be up to one day in the future
[  148.288061][   T60] rtc_cmos 00:00: Alarms can be up to one day in the future
[  148.295835][   T60] rtc rtc0: __rtc_set_alarm: err=-22
[  148.364714][ T6768] EXT4-fs (loop5): Ignoring removed orlov option
[  148.394240][ T6768] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  148.633501][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.641279][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.648922][ T6779] device bridge_slave_0 entered promiscuous mode
[  148.656900][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.664020][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.671865][ T6779] device bridge_slave_1 entered promiscuous mode
[  148.754842][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.761923][ T6779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.769263][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.776304][ T6779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.811370][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.819285][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.827134][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.845420][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.853843][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.860930][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.879414][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.887721][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.894762][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.902681][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.911817][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.932993][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.946146][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.954415][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.962618][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.972537][ T6779] device veth0_vlan entered promiscuous mode
[  148.991073][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.000966][ T6779] device veth1_macvtap entered promiscuous mode
[  149.012589][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.026761][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.094308][ T6811] loop2: detected capacity change from 0 to 512
[  149.184233][ T6811] EXT4-fs warning (device loop2): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  149.200708][ T6811] EXT4-fs (loop2): mount failed
[  149.293166][   T45] device bridge_slave_0 left promiscuous mode
[  149.311549][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.346213][   T45] device veth0_vlan left promiscuous mode
[  149.596094][ T6827] loop9: detected capacity change from 0 to 40427
[  149.615540][ T6827] F2FS-fs (loop9): invalid crc value
[  149.632587][ T6827] F2FS-fs (loop9): Found nat_bits in checkpoint
[  149.696789][ T6827] F2FS-fs (loop9): Start checkpoint disabled!
[  149.703679][ T6827] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  150.854441][ T6843] attempt to access beyond end of device
[  150.854441][ T6843] loop9: rw=2049, want=40984, limit=40427
[  151.047852][  T333] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  151.111848][ T6878] device batadv_slave_1 entered promiscuous mode
[  151.125555][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2698'.
[  151.153873][ T6878] device batadv_slave_1 left promiscuous mode
[  151.224710][ T6892] input: syz0 as /devices/virtual/input/input30
[  151.261654][ T6900] loop2: detected capacity change from 0 to 256
[  151.289126][ T6906] SELinux:  Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped).
[  151.417625][  T333] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  151.438779][  T333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.456279][ T6928] input: syz0 as /devices/virtual/input/input31
[  151.467829][  T333] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  151.500165][  T333] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  151.540454][  T333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.559132][ T6938] loop7: detected capacity change from 0 to 256
[  151.570715][  T333] usb 6-1: config 0 descriptor??
[  151.597778][ T6946] loop2: detected capacity change from 0 to 1024
[  151.662365][ T6946] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.760624][ T6957] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  151.833835][ T6963] input: syz0 as /devices/virtual/input/input32
[  151.904505][ T6973] kvm [6972]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x187 data 0xc0010002c0010001
[  151.916661][ T6973] kvm [6972]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0xc0010006c0010005
[  151.927708][ T6973] kvm [6972]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x4b564d0100000011
[  151.968751][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  151.968797][   T30] audit: type=1400 audit(1895232177.803:4093): avc:  denied  { watch watch_reads } for  pid=6982 comm="syz.1.2745" path="/103/file1" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  152.005680][ T6985] loop9: detected capacity change from 0 to 256
[  152.058815][  T333] sony 0003:054C:042F.0027: unknown main item tag 0x0
[  152.066177][  T333] sony 0003:054C:042F.0027: unknown main item tag 0x5
[  152.080208][  T333] sony 0003:054C:042F.0027: hidraw0: USB HID v10.01 Device [HID 054c:042f] on usb-dummy_hcd.5-1/input0
[  152.117799][  T333] sony 0003:054C:042F.0027: failed to claim input
[  152.200107][ T6988] loop2: detected capacity change from 0 to 40427
[  152.221329][ T6988] F2FS-fs (loop2): invalid crc value
[  152.230050][ T6988] F2FS-fs (loop2): Found nat_bits in checkpoint
[  152.261876][ T6988] F2FS-fs (loop2): Start checkpoint disabled!
[  152.266791][   T60] usb 6-1: USB disconnect, device number 15
[  152.274783][ T6988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  152.320213][   T30] audit: type=1400 audit(1895232178.153:4094): avc:  denied  { wake_alarm } for  pid=6999 comm="syz.1.2763" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  152.341921][ T6843] attempt to access beyond end of device
[  152.341921][ T6843] loop2: rw=2049, want=40984, limit=40427
[  152.357601][   T30] audit: type=1107 audit(1895232178.193:4095): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='>'
[  152.478783][ T7004] input: syz0 as /devices/virtual/input/input33
[  152.675589][   T30] audit: type=1400 audit(1895232178.503:4096): avc:  denied  { ioctl } for  pid=7028 comm="syz.1.2762" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  152.833949][ T7038] loop9: detected capacity change from 0 to 256
[  152.849904][ T7038] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d)
[  152.862128][  T334] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  152.875486][ T7041] loop5: detected capacity change from 0 to 512
[  152.882421][   T30] audit: type=1400 audit(1895232178.713:4097): avc:  denied  { rename } for  pid=7036 comm="syz.9.2770" name="file0" dev="loop9" ino=1048780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  152.905330][   T30] audit: type=1400 audit(1895232178.713:4098): avc:  denied  { reparent } for  pid=7036 comm="syz.9.2770" name="file0" dev="loop9" ino=1048780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  152.928395][  T333] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  152.963548][ T7041] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  152.974633][ T7041] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  152.988480][ T7041] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #2: comm syz.5.2772: corrupted inode contents
[  153.005673][ T7041] EXT4-fs error (device loop5): ext4_dirty_inode:6071: inode #2: comm syz.5.2772: mark_inode_dirty error
[  153.018014][ T7041] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #2: comm syz.5.2772: corrupted inode contents
[  153.031613][ T7041] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.2772: mark_inode_dirty error
[  153.126618][ T7062] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  153.147611][  T334] usb 3-1: Using ep0 maxpacket: 8
[  153.156930][ T7064] loop5: detected capacity change from 0 to 512
[  153.188313][ T7064] EXT4-fs (loop5): Ignoring removed nobh option
[  153.199604][ T7064] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #3: comm syz.5.2781: corrupted inode contents
[  153.211721][ T7064] EXT4-fs error (device loop5): ext4_dirty_inode:6071: inode #3: comm syz.5.2781: mark_inode_dirty error
[  153.223485][ T7064] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #3: comm syz.5.2781: corrupted inode contents
[  153.235747][ T7064] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.2781: mark_inode_dirty error
[  153.247839][ T7064] Quota error (device loop5): write_blk: dquota write failed
[  153.255303][ T7064] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  153.265328][ T7064] EXT4-fs error (device loop5): ext4_acquire_dquot:6200: comm syz.5.2781: Failed to acquire dquot type 0
[  153.276753][  T334] usb 3-1: config 0 has no interfaces?
[  153.277314][ T7064] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #16: comm syz.5.2781: corrupted inode contents
[  153.282502][  T334] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  153.294568][ T7064] EXT4-fs error (device loop5): ext4_dirty_inode:6071: inode #16: comm syz.5.2781: mark_inode_dirty error
[  153.303532][  T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.314715][  T333] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  153.334225][ T7064] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #16: comm syz.5.2781: corrupted inode contents
[  153.346252][  T333] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  153.347292][  T334] usb 3-1: config 0 descriptor??
[  153.360380][  T333] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.368736][ T7064] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.2781: mark_inode_dirty error
[  153.380543][ T7064] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #16: comm syz.5.2781: corrupted inode contents
[  153.381731][  T333] usb 8-1: config 0 descriptor??
[  153.392895][ T7064] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  153.406281][ T7064] EXT4-fs error (device loop5): ext4_do_update_inode:5235: inode #16: comm syz.5.2781: corrupted inode contents
[  153.418918][ T7026] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  153.422576][   T60] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  153.426320][ T7064] EXT4-fs error (device loop5): ext4_truncate:4304: inode #16: comm syz.5.2781: mark_inode_dirty error
[  153.444807][ T7064] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  153.454585][ T7064] EXT4-fs (loop5): 1 truncate cleaned up
[  153.460572][ T7064] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback.
[  153.474670][ T7064] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.533493][ T7070] device batadv_slave_1 entered promiscuous mode
[  153.540859][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2784'.
[  153.553220][   T30] audit: type=1326 audit(1895232179.383:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  153.579596][ T7070] device batadv_slave_1 left promiscuous mode
[  153.587018][   T30] audit: type=1326 audit(1895232179.383:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.5.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20121fc9 code=0x7ffc0000
[  153.626652][  T334] usb 3-1: USB disconnect, device number 4
[  153.664584][ T7082] loop5: detected capacity change from 0 to 256
[  153.701674][ T7082] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d)
[  153.787663][   T60] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  153.798665][   T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.808540][   T60] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  153.827590][   T60] usb 10-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  153.847594][   T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.856604][   T60] usb 10-1: config 0 descriptor??
[  153.889263][  T333] uclogic 0003:5543:0522.0028: unknown main item tag 0x0
[  153.896441][  T333] uclogic 0003:5543:0522.0028: item fetching failed at offset 3/5
[  153.905295][  T333] uclogic 0003:5543:0522.0028: parse failed
[  153.911562][  T333] uclogic: probe of 0003:5543:0522.0028 failed with error -22
[  153.973094][ T7101] IPv6: NLM_F_CREATE should be specified when creating new route
[  153.981154][ T7101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  153.988415][ T7101] IPv6: NLM_F_CREATE should be set when creating new route
[  153.995789][ T7101] IPv6: NLM_F_CREATE should be set when creating new route
[  154.024108][ T7106] device batadv_slave_1 entered promiscuous mode
[  154.031157][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2800'.
[  154.044800][ T7106] device batadv_slave_1 left promiscuous mode
[  154.092389][ T6459] usb 8-1: USB disconnect, device number 12
[  154.328594][   T60] sony 0003:054C:042F.0029: unknown main item tag 0x0
[  154.335409][   T60] sony 0003:054C:042F.0029: unknown main item tag 0x5
[  154.342851][   T60] sony 0003:054C:042F.0029: hidraw0: USB HID v10.01 Device [HID 054c:042f] on usb-dummy_hcd.9-1/input0
[  154.353922][   T60] sony 0003:054C:042F.0029: failed to claim input
[  154.457631][  T334] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  154.534933][   T60] usb 10-1: USB disconnect, device number 8
[  154.817675][  T334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.997695][  T334] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.006933][  T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.015087][  T334] usb 2-1: Product: syz
[  155.019331][  T334] usb 2-1: Manufacturer: syz
[  155.023948][  T334] usb 2-1: SerialNumber: syz
[  155.040852][ T7142] device batadv_slave_1 entered promiscuous mode
[  155.064117][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'.
[  155.093701][ T7142] device batadv_slave_1 left promiscuous mode
[  155.104523][ T7155] loop7: detected capacity change from 0 to 512
[  155.112022][ T7153] input: syz0 as /devices/virtual/input/input34
[  155.159400][ T7155] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2821: inode #1: comm syz.7.2821: iget: illegal inode #
[  155.166290][ T7148] kvm [7147]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0xbb800a000000000
[  155.172905][ T7155] EXT4-fs (loop7): Remounting filesystem read-only
[  155.183157][ T7148] kvm [7147]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0xbb800a000000000
[  155.202039][ T7148] kvm [7147]: vcpu0, guest rIP: 0x9133 ignored wrmsr: 0x11e data 0xbb800a000000000
[  155.215784][ T7148] kvm [7147]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0x186 data 0xbb800a000000000
[  155.226219][ T7148] kvm [7147]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0x187 data 0xbb800a000000000
[  155.227696][ T7155] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2821: error while reading EA inode 1 err=-117
[  155.306870][ T7155] EXT4-fs (loop7): Remounting filesystem read-only
[  155.327377][ T7155] EXT4-fs (loop7): 1 orphan inode deleted
[  155.333276][ T7155] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000006,grpid,usrjquota=,grpquota,nogrpid,journal_dev=0x0000000000000dcc,errors=remount-ro,. Quota mode: writeback.
[  156.499809][ T7155] EXT4-fs error (device loop7): __ext4_expand_extra_isize:5887: inode #18: comm syz.7.2821: bad extra_isize 6 (inode size 256)
[  156.514398][ T7155] EXT4-fs (loop7): Remounting filesystem read-only
[  156.536673][ T7165] syz.5.2825[7165] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.536830][ T7165] syz.5.2825[7165] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.696607][ T7186] sch_fq: defrate 4294967295 ignored.
[  156.817612][ T1417] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  156.867603][   T60] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  157.016706][ T7208] loop9: detected capacity change from 0 to 40427
[  157.131553][ T7208] F2FS-fs (loop9): Found nat_bits in checkpoint
[  157.147785][  T334] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  157.157717][  T334] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  157.165220][  T334] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  157.177751][ T1417] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  157.192058][ T1417] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  157.204744][ T7208] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  157.232611][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  157.232629][   T30] audit: type=1400 audit(1895232183.063:4120): avc:  denied  { create } for  pid=7207 comm="syz.9.2846" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  157.233051][ T7208] attempt to access beyond end of device
[  157.233051][ T7208] loop9: rw=2049, want=45104, limit=40427
[  157.267669][   T60] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  157.281883][   T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.292180][   T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  157.292194][ T5309] attempt to access beyond end of device
[  157.292194][ T5309] loop9: rw=2049, want=45112, limit=40427
[  157.317463][   T60] usb 8-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  157.326767][   T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.339259][   T60] usb 8-1: config 0 descriptor??
[  157.357745][  T334] cdc_ncm 2-1:1.0: setting tx_max = 32
[  157.364707][  T334] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[  157.377089][  T334] usb 2-1: USB disconnect, device number 4
[  157.390679][ T1417] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  157.407911][  T334] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[  157.416383][ T1417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.440474][ T1417] usb 3-1: Product: syz
[  157.444709][ T1417] usb 3-1: Manufacturer: syz
[  157.457769][ T1417] usb 3-1: SerialNumber: syz
[  157.464020][   T42] ==================================================================
[  157.472140][   T42] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120
[  157.480004][   T42] Read of size 8 at addr ffff888118b7ec70 by task kworker/1:1/42
[  157.487751][   T42] 
[  157.490119][   T42] CPU: 1 PID: 42 Comm: kworker/1:1 Tainted: G        W         syzkaller #0
[  157.498832][   T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  157.509052][   T42] Workqueue: rcu_gp srcu_invoke_callbacks
[  157.514927][   T42] Call Trace:
[  157.518202][   T42]  <TASK>
[  157.521140][   T42]  __dump_stack+0x21/0x30
[  157.525510][   T42]  dump_stack_lvl+0xee/0x150
[  157.530106][   T42]  ? show_regs_print_info+0x20/0x20
[  157.535315][   T42]  ? load_image+0x3a0/0x3a0
[  157.539823][   T42]  print_address_description+0x7f/0x2c0
[  157.545401][   T42]  ? __list_del_entry_valid+0xa6/0x120
[  157.550862][   T42]  kasan_report+0xf1/0x140
[  157.555276][   T42]  ? __list_del_entry_valid+0xa6/0x120
[  157.560862][   T42]  __asan_report_load8_noabort+0x14/0x20
[  157.566497][   T42]  __list_del_entry_valid+0xa6/0x120
[  157.571800][   T42]  process_one_work+0x453/0xba0
[  157.576674][   T42]  worker_thread+0xa59/0x1200
[  157.581590][   T42]  ? _raw_spin_lock_irqsave+0xb0/0x110
[  157.587081][   T42]  kthread+0x411/0x500
[  157.591161][   T42]  ? worker_clr_flags+0x190/0x190
[  157.596277][   T42]  ? kthread_blkcg+0xd0/0xd0
[  157.600874][   T42]  ret_from_fork+0x1f/0x30
[  157.605408][   T42]  </TASK>
[  157.608424][   T42] 
[  157.610743][   T42] Allocated by task 334:
[  157.614977][   T42]  __kasan_kmalloc+0xda/0x110
[  157.619673][   T42]  __kmalloc+0x13d/0x2c0
[  157.623917][   T42]  kvmalloc_node+0x206/0x300
[  157.628507][   T42]  alloc_netdev_mqs+0x8d/0xc90
[  157.633271][   T42]  alloc_etherdev_mqs+0x34/0x40
[  157.638121][   T42]  usbnet_probe+0x219/0x2860
[  157.642706][   T42]  usb_probe_interface+0x5ff/0xae0
[  157.647841][   T42]  really_probe+0x285/0x970
[  157.652344][   T42]  __driver_probe_device+0x198/0x280
[  157.657619][   T42]  driver_probe_device+0x54/0x3e0
[  157.662640][   T42]  __device_attach_driver+0x2a6/0x460
[  157.668005][   T42]  bus_for_each_drv+0x175/0x200
[  157.672851][   T42]  __device_attach+0x2a2/0x400
[  157.677609][   T42]  device_initial_probe+0x1a/0x20
[  157.682717][   T42]  bus_probe_device+0xc0/0x1e0
[  157.687477][   T42]  device_add+0xb31/0xed0
[  157.691799][   T42]  usb_set_configuration+0x19c2/0x1f10
[  157.697255][   T42]  usb_generic_driver_probe+0x91/0x150
[  157.702716][   T42]  usb_probe_device+0x148/0x260
[  157.707563][   T42]  really_probe+0x285/0x970
[  157.712162][   T42]  __driver_probe_device+0x198/0x280
[  157.717549][   T42]  driver_probe_device+0x54/0x3e0
[  157.722569][   T42]  __device_attach_driver+0x2a6/0x460
[  157.727937][   T42]  bus_for_each_drv+0x175/0x200
[  157.732803][   T42]  __device_attach+0x2a2/0x400
[  157.737585][   T42]  device_initial_probe+0x1a/0x20
[  157.742606][   T42]  bus_probe_device+0xc0/0x1e0
[  157.747366][   T42]  device_add+0xb31/0xed0
[  157.751692][   T42]  usb_new_device+0xd06/0x1620
[  157.756452][   T42]  hub_event+0x29c4/0x4480
[  157.760864][   T42]  process_one_work+0x6be/0xba0
[  157.765709][   T42]  worker_thread+0xa59/0x1200
[  157.770386][   T42]  kthread+0x411/0x500
[  157.774507][   T42]  ret_from_fork+0x1f/0x30
[  157.778921][   T42] 
[  157.781240][   T42] Freed by task 334:
[  157.785135][   T42]  kasan_set_track+0x4a/0x70
[  157.789727][   T42]  kasan_set_free_info+0x23/0x40
[  157.794664][   T42]  ____kasan_slab_free+0x125/0x160
[  157.799859][   T42]  __kasan_slab_free+0x11/0x20
[  157.804631][   T42]  slab_free_freelist_hook+0xc2/0x190
[  157.810001][   T42]  kfree+0xc4/0x270
[  157.813800][   T42]  kvfree+0x35/0x40
[  157.817599][   T42]  netdev_freemem+0x3f/0x60
[  157.822099][   T42]  netdev_release+0x7f/0xb0
[  157.826596][   T42]  device_release+0x96/0x1c0
[  157.831298][   T42]  kobject_put+0x18a/0x270
[  157.835709][   T42]  put_device+0x1f/0x30
[  157.839947][   T42]  free_netdev+0x34b/0x450
[  157.844366][   T42]  usbnet_disconnect+0x24b/0x3a0
[  157.849310][   T42]  usb_unbind_interface+0x212/0x8c0
[  157.854512][   T42]  device_release_driver_internal+0x4c1/0x760
[  157.860590][   T42]  device_release_driver+0x19/0x20
[  157.865715][   T42]  bus_remove_device+0x2dd/0x340
[  157.870651][   T42]  device_del+0x696/0xe90
[  157.874979][   T42]  usb_disable_device+0x3a8/0x750
[  157.880137][   T42]  usb_disconnect+0x31e/0x850
[  157.884819][   T42]  hub_event+0x1a96/0x4480
[  157.889244][   T42]  process_one_work+0x6be/0xba0
[  157.894102][   T42]  worker_thread+0xd7b/0x1200
[  157.898783][   T42]  kthread+0x411/0x500
[  157.902850][   T42]  ret_from_fork+0x1f/0x30
[  157.907436][   T42] 
[  157.909763][   T42] Last potentially related work creation:
[  157.915464][   T42]  kasan_save_stack+0x3a/0x60
[  157.920134][   T42]  __kasan_record_aux_stack+0xd2/0x100
[  157.925588][   T42]  kasan_record_aux_stack_noalloc+0xb/0x10
[  157.931382][   T42]  insert_work+0x51/0x310
[  157.935706][   T42]  __queue_work+0x8e5/0xc60
[  157.940202][   T42]  queue_work_on+0xd2/0x140
[  157.944698][   T42]  usbnet_link_change+0x189/0x1b0
[  157.949806][   T42]  usbnet_probe+0x1dfd/0x2860
[  157.954656][   T42]  usb_probe_interface+0x5ff/0xae0
[  157.959771][   T42]  really_probe+0x285/0x970
[  157.964290][   T42]  __driver_probe_device+0x198/0x280
[  157.969593][   T42]  driver_probe_device+0x54/0x3e0
[  157.974624][   T42]  __device_attach_driver+0x2a6/0x460
[  157.980012][   T42]  bus_for_each_drv+0x175/0x200
[  157.984871][   T42]  __device_attach+0x2a2/0x400
[  157.989625][   T42]  device_initial_probe+0x1a/0x20
[  157.994642][   T42]  bus_probe_device+0xc0/0x1e0
[  157.999398][   T42]  device_add+0xb31/0xed0
[  158.003718][   T42]  usb_set_configuration+0x19c2/0x1f10
[  158.009170][   T42]  usb_generic_driver_probe+0x91/0x150
[  158.014622][   T42]  usb_probe_device+0x148/0x260
[  158.019472][   T42]  really_probe+0x285/0x970
[  158.024056][   T42]  __driver_probe_device+0x198/0x280
[  158.029336][   T42]  driver_probe_device+0x54/0x3e0
[  158.034353][   T42]  __device_attach_driver+0x2a6/0x460
[  158.039717][   T42]  bus_for_each_drv+0x175/0x200
[  158.044565][   T42]  __device_attach+0x2a2/0x400
[  158.049327][   T42]  device_initial_probe+0x1a/0x20
[  158.054347][   T42]  bus_probe_device+0xc0/0x1e0
[  158.059109][   T42]  device_add+0xb31/0xed0
[  158.063443][   T42]  usb_new_device+0xd06/0x1620
[  158.068205][   T42]  hub_event+0x29c4/0x4480
[  158.072627][   T42]  process_one_work+0x6be/0xba0
[  158.077475][   T42]  worker_thread+0xa59/0x1200
[  158.082160][   T42]  kthread+0x411/0x500
[  158.086372][   T42]  ret_from_fork+0x1f/0x30
[  158.090798][   T42] 
[  158.093129][   T42] The buggy address belongs to the object at ffff888118b7e000
[  158.093129][   T42]  which belongs to the cache kmalloc-4k of size 4096
[  158.107183][   T42] The buggy address is located 3184 bytes inside of
[  158.107183][   T42]  4096-byte region [ffff888118b7e000, ffff888118b7f000)
[  158.120637][   T42] The buggy address belongs to the page:
[  158.126261][   T42] page:ffffea000462de00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118b78
[  158.136489][   T42] head:ffffea000462de00 order:3 compound_mapcount:0 compound_pincount:0
[  158.144808][   T42] flags: 0x4000000000010200(slab|head|zone=1)
[  158.150888][   T42] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380
[  158.159466][   T42] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  158.168240][   T42] page dumped because: kasan: bad access detected
[  158.174654][   T42] page_owner tracks the page as allocated
[  158.180366][   T42] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 334, ts 155068396520, free_ts 148835388742
[  158.202705][   T42]  post_alloc_hook+0x192/0x1b0
[  158.207486][   T42]  prep_new_page+0x1c/0x110
[  158.211989][   T42]  get_page_from_freelist+0x2cc5/0x2d50
[  158.217532][   T42]  __alloc_pages+0x18f/0x440
[  158.222668][   T42]  new_slab+0xa1/0x4d0
[  158.226871][   T42]  ___slab_alloc+0x381/0x810
[  158.231513][   T42]  __slab_alloc+0x49/0x90
[  158.235943][   T42]  __kmalloc+0x16a/0x2c0
[  158.240212][   T42]  kvmalloc_node+0x206/0x300
[  158.244932][   T42]  alloc_netdev_mqs+0x8d/0xc90
[  158.249812][   T42]  alloc_etherdev_mqs+0x34/0x40
[  158.254794][   T42]  usbnet_probe+0x219/0x2860
[  158.259555][   T42]  usb_probe_interface+0x5ff/0xae0
[  158.264771][   T42]  really_probe+0x285/0x970
[  158.269276][   T42]  __driver_probe_device+0x198/0x280
[  158.274562][   T42]  driver_probe_device+0x54/0x3e0
[  158.279591][   T42] page last free stack trace:
[  158.284253][   T42]  free_unref_page_prepare+0x542/0x550
[  158.289713][   T42]  free_unref_page+0xa2/0x550
[  158.294385][   T42]  __free_pages+0x6c/0x100
[  158.298798][   T42]  __free_slab+0xe8/0x1e0
[  158.303234][   T42]  __unfreeze_partials+0x160/0x190
[  158.308344][   T42]  put_cpu_partial+0xc6/0x120
[  158.313019][   T42]  __slab_free+0x1d4/0x290
[  158.317440][   T42]  ___cache_free+0x104/0x120
[  158.322028][   T42]  qlink_free+0x4d/0x90
[  158.326178][   T42]  qlist_free_all+0x5f/0xb0
[  158.330673][   T42]  kasan_quarantine_reduce+0x14a/0x170
[  158.336128][   T42]  __kasan_slab_alloc+0x2f/0xf0
[  158.340976][   T42]  slab_post_alloc_hook+0x4f/0x2b0
[  158.346085][   T42]  __kmalloc+0x120/0x2c0
[  158.350321][   T42]  iter_file_splice_write+0x17c/0xc30
[  158.355694][   T42]  direct_splice_actor+0xe9/0x120
[  158.360718][   T42] 
[  158.363039][   T42] Memory state around the buggy address:
[  158.368662][   T42]  ffff888118b7eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.376716][   T42]  ffff888118b7eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.384774][   T42] >ffff888118b7ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.392843][   T42]                                                              ^
[  158.400552][   T42]  ffff888118b7ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.408607][   T42]  ffff888118b7ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.416676][   T42] ==================================================================
[  158.424731][   T42] Disabling lock debugging due to kernel taint
[  158.440274][   T30] audit: type=1400 audit(1895232184.273:4121): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  158.442569][ T1417] usb 3-1: config 0 descriptor??
[  158.497634][ T7167] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  158.499718][   T30] audit: type=1400 audit(1895232184.303:4122): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  158.526506][ T7167] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  158.530771][   T30] audit: type=1400 audit(1895232184.303:4123): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  158.555719][   T30] audit: type=1400 audit(1895232184.303:4124): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  158.585692][   T30] audit: type=1400 audit(1895232184.303:4125): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  158.606398][   T30] audit: type=1400 audit(1895232184.303:4126): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  158.629776][   T30] audit: type=1400 audit(1895232184.303:4127): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  158.728775][   T60] sony 0003:054C:042F.002A: unknown main item tag 0x0
[  158.735623][   T60] sony 0003:054C:042F.002A: unknown main item tag 0x5
[  158.743222][   T60] sony 0003:054C:042F.002A: hidraw0: USB HID v10.01 Device [HID 054c:042f] on usb-dummy_hcd.7-1/input0
[  158.754449][   T60] sony 0003:054C:042F.002A: failed to claim input
[  158.762171][ T7167] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  158.769270][ T7167] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  158.935328][ T6459] usb 8-1: USB disconnect, device number 13
[  159.227679][ T1417] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  160.007644][ T1417] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  160.018027][ T1417] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, de:7c:09:e5:5b:30
[  160.033659][ T1417] usb 3-1: USB disconnect, device number 5
[  160.039975][ T1417] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet