last executing test programs:

2m14.983944754s ago: executing program 32 (id=638):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0xfffffffffffffffe)

2m10.511347256s ago: executing program 0 (id=843):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000300)=""/168, 0xa8}], 0x2}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)

2m10.477143127s ago: executing program 0 (id=844):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4)
write$cgroup_subtree(r1, &(0x7f0000000f40)=ANY=[@ANYBLOB="7cf4da93"], 0x6)

2m10.452735957s ago: executing program 0 (id=845):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

2m10.395267338s ago: executing program 0 (id=846):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0xcf}}, {@namecase}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}]}, 0x1, 0x1524, &(0x7f0000007640)="$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")
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)

2m10.374141238s ago: executing program 0 (id=847):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0x238, 0xfeffffff, 0x0, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @broadcast, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_CPUID2(r1, 0xc008ae09, &(0x7f00000001c0)=ANY=[@ANYRES16])

2m9.244581564s ago: executing program 0 (id=849):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000080)={[{@data_journal}]}, 0x3e, 0x517, &(0x7f00000013c0)="$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")

2m9.225753084s ago: executing program 33 (id=849):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000080)={[{@data_journal}]}, 0x3e, 0x517, &(0x7f00000013c0)="$eJzs3c9vI1cdAPDvTOJtdjfdpIJDqUSJaFFSQexkQ7cRh4VKiFslULkvIXGiKE4cxU67iSo2EX8AEkKAxIkTB5D4A5BQ/wSEVAnuCBAIwRYOHKCDPLbTrGOTdOtkJOfzkcZ+b35934vHz34zL54Arq2ZiLgbER9kWdbKT51alrYekog4aq/3/uN3VltTEln25t+TfFEr31pt7tR2t9ubxPxslvt2cjZu4+Bwa6VWq+518pXm9m6lcXA4v7m9slHdqO4sLS3eW35t+dXlhaHUczIi7n/1zz/83s++dv/XX3j7Dw/+OvedpFO9OFWPofj5h8n2/ksxcWrxeETsDS1YscY69Smdv+rknSfzM30OCwAALlnamT4bEa/EVIzl3+YAAACAUZJ9eTL+k0RkZ/SZ1cczPflS9NsXAAAAUKQ0HxubpOXOOIDJSNNyuT2G95NxK63VG83Pr9f3d9baY2ino5Sub9aqC52xwtNRSlr5xTz9Yf5uT34pIp6LiB9M3czz5dV6ba3okx8AAABwTdzu6f//a6rd/wcAAABGzHTRBQAAAAAunf4/AAAAjD79fwAAABhpX3/jjdaUde9/vfbWwf5W/a35tWpjq7y9v1rO6nu75Y16fSP/zb7t8/ZXq9d3vxg7+w8rzWqjWWkcHD7Yru/vNB9sPnELbAAAAOAKPfeZd3+fRMTRl27mU8uNogsFXInxk4cL+NPllgW4WmNFFwAozEU/+oHRUyq6AEDhknOWDxy885vhlwUAALgcs5/qf/0/OffcwFF6RUUELonzf3B9uf4P19dTXP/3f7wwIkoxFjrycL1d/vX/LPtIBQIAAIZuMp+StByRnweYjDQtlyOezW8LUErWN2vVhYi4ExG/myo908ov5lsm5/YZAAAAAAAAAAAAAAAAAAAAAAAAAIC2LEsiAwAAAEZaRPqXpHP/r9mplyd7zw/cSP49lT9HxNs/efNHD1eazb3F1vx/nMxv/rgz/257m6e4pygAAAAwRN1+ercfDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADD9P7jd1a701XG/dvrETHdL/54TOTPE1GKiFv/TGL81HZJRIwNIf7RcUQ83y9+0ipWTHdK0S/+zQLjpxFxewjx4Tp7t9X+fKXf+y+Nmfy5//vvXt5CfXwD27+ku8ZE3s71a3+evWCMF977ZWVg/OOIF8b7tz/d9jfpxL/TE/+lPvt7/f7Zed/65uHhoPjZTyNm+37+JE/EqjS3dyuNg8P5ze2VjepGdWdpafHe8mvLry4vVNY3a9XO46kmeeYk9f1P/+qDgfXPHsWtAfGne+rf+/d/edBOe/z3vYePP9FOls7EP46Ye6n/8ff8gPhp57Pvc510a/lsN33UTp/24i9+++LA+h9HrLXrP37e699b/7kL1v+Vb3z3jxdcFQC4Ao2Dw62VWq26V2BiLIqM3kp8rL9G62vRBVZO42kKdlT4qzPKiUeFRr9xkcPmJJE9ah+jQ37rDdxhgY0SAABwKRoHSdFFAAAAAAAAAAAAAAAAAAAAgGvvKn9dr+uomKoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxf/wsAAP//WhPMbg==")

2m4.250962924s ago: executing program 4 (id=991):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x23, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000180001000000000000000000020000000000ff"], 0x48}}, 0x0)

2m4.222498625s ago: executing program 4 (id=994):
io_setup(0x7, &(0x7f0000000100)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r0, 0x2, &(0x7f00000035c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xfb, 0x0, 0x2}])

2m4.130542266s ago: executing program 4 (id=1000):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x453, 0x4, 0x70bd2f, 0xa0000000, "af"}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

2m3.992218418s ago: executing program 4 (id=1005):
unshare(0x2040400)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x508, &(0x7f0000000a00)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ0SOHbUicKIodR7FTmrCH7JE7EpU4wYkzByQOSD1xR+IANy7lgFRgBWqQOBjN2N46f7yx0thu499PevKbeba/99aa97yflXkBTK1bEXEYEdci4u2IWOieT7olXu+U7HkfPXqwevTowWoS7fZb/0zy9uxc9L0m81T3PYsR8YM3In6UnAj6p4jm/sHWSq1W3e2eKrfqO+Xm/sHdzfrKRnWjul2pLC8tL75675XKpY31hfpvPrweEb//3Zc/+OPht36SdWu+29Y/jsvUGfrc4ziZ2Yj43iiCTcBMdzzXLvLiC72Iy5RGxOci4sX8+l+ImfzTPO74x/TtMfYOABiFdnsh2gv9xwDAVZfmObAkLXVzAfORpqVSJ4f3XNxIa41m6856Y297rZMruxlz6fpmrbrYzRXejLlkfXO2upTXe8e1auXE8b2IeDYifla4nh+XVhu1tUl+8QGAKfbUifX/P4XO+g8AXHHFj6uFSfYDABif4qQ7AACMnfUfAKaP9R8Apo/1HwCmj/UfAKaP9R8Apsr333wzK+2j7v2v197Z39tqvHN3rdrcKtX3Vkurjd2d0kajsZHfs6d+3vvVGo2dpZdj791yq9pslZv7B/frjb3t1v38vt73q3NjGRUA8CTPvvD+X5KIOHztel6i737/567Vz4+6d8AopZPuADAxM5PuADAxp3f7AqaFfDzQt0Xvw77TxVOVk94b6u1T+4bCp8/tL36C/D/wmSb/D9PrYvl/3+XhKpD/h+nVbif2/AeAKSPHD5yn//f/xXbfwXC//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVNJ+XJC119wKfjzQtlSKejoibMZesb9aqixHxTET8uTBXyI6XIsK+QQDwWZb+PYmIrNxeeGn+ZOu1wn8L+WNE/PgXb/383ZVWa3cp4lryr8fnW+91z1cm0X8A4Dy9dbq3jvd89OjBaq+Msz8ffqezuWgW96hbOi2zMZs/FvNcw41/J93jjuz7yswlxD98GBFfOGv8SZ4budnd+fRk/Cz202ONnx6Ln+Ztncfs3+Lzl9AXmDbvZ/PP62ddf2ncyh/Pvv6L+Qz1yfXmv6NT81/6eP6bGTD/3Ro2xst/+O6pk+2FTtvDiC/NRhz13rxv/unFTwbEf2nI+H99/isvDmpr/zLidpw1/uRYrHKrvlNu7h/c3ayvbFQ3qtuVyvLS8uKr916plPMcdbmXqT7tH6/deWZQ/Gz8NwbEL54z/q8POf5f/e/tH371CfG/+bWzP//nnhA/WxO/MWT8lRu/LQ5qy+KvDRj/eZ//nSHjf/C3g7UhnwoAjEFz/2BrpVar7o66ks6MPEReSSIOxzCcTqXw65++Ma5YI6zEp6MbKsNXsv8TDvXkuYuGmPTMBIzaxxf9pHsCAAAAAAAAAAAAAAAMMo6/WJr0GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/h8AAP//AKfR8g==")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0)

2m3.740239821s ago: executing program 4 (id=1015):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

2m3.617838333s ago: executing program 4 (id=1017):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20)

2m0.963289761s ago: executing program 3 (id=1078):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2020000, &(0x7f0000000840)=ANY=[], 0x0, 0x2d5, &(0x7f00000000c0)="$eJzs3E1rE10UwPHT9C1NaZPFwyMK0oNudDO00bUYpAUxYKmN+ALCtJ1oyJiUTKikiLUrt+KHcFG67K6g/QLduNONG3fdCC7sQoxkXtq0TWlTk4za/w/C3OTek7l35iacO2Syde/103zWMbJmWSJRlS4RkW2RhEQk0OVvI265T+q9lMuD3z6ev3P/wa1UOj0+pTqRmr6SVNXhkXfPng/4zdb7ZTPxaOtr8svm/5tnt35OP8k5mnO0UCyrqTPFz2VzxrZ0LufkDdVJ2zIdS3MFxyp59UWvPmsX5+crahbmhmLzJctx1CxUNG9VtFzUcqmi5mMzV1DDMHQoJjhKZmVqykydMHi2xZ1Bm5RKKbNbRAYO1GRWQukQAAAI1f78P1JL6VuX/69e2CgP3l0b9vP/9b5G+f/VT9577cn/oyLS9vz/YEZ0ujSX/0fb2xm0SS3/j/mfX9fyw9VRt0D+DwAAAAAAAAAAAAAAAAAAAADA32C7Wo1Xq9V4sA0e/f79HsHzsPuJ9mjy/Hf1hNxftNbujXs9wyL2q4XMQsbb+g02RMQWS0YlLj/c+eCrlYN7AbUmIe/tJT9+aSHT7dakspJz48ckLon98dXqxM30+Jh69sb3Sqw+Pilx+a9xfLJhfJ9culgXb0hcPsxKUWyZc+f1bvyLMdUbt9P74gfcdgAAAAAA/AsM3dFw/W4Yh9V78Tvr64bXB7z19WjD9XmPnONiEgAAAAAAHeFUFvOmbVul4xQGm2nsxEXk2I1bXwhGeNyo4LcMIXR1MR/svK7q0LOzHOZRDQoROUnUSG1K6O/uPbhsdFgbmWzRSCPNTokzb95+b91xvrYWPWKkbSv0duwLCAAAAEDH7Cb9wSvXw+0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnUCf+TizsMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/il8BAAD//4pXCwI=")
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0))

2m0.096269573s ago: executing program 3 (id=1092):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
getpgid(0x0)

2m0.003148684s ago: executing program 3 (id=1093):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x17)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")

1m48.21312363s ago: executing program 34 (id=1017):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20)

1m47.717055376s ago: executing program 3 (id=1098):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
unlink(&(0x7f0000000100)='./file0/file0\x00')

1m47.47326545s ago: executing program 3 (id=1101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
request_key(&(0x7f0000002280)='asymmetric\x00', &(0x7f0000002200)={'syz', 0x2}, &(0x7f0000002240)='vfat\x00', 0xffffffffffffffff)

1m46.575270222s ago: executing program 3 (id=1131):
r0 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1f5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
sync_file_range(r0, 0xa, 0x4, 0x3)

1m46.476828414s ago: executing program 35 (id=1131):
r0 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1f5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
sync_file_range(r0, 0xa, 0x4, 0x3)

1m32.673907998s ago: executing program 6 (id=1553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="c000f2060a000200aaaaaaaaaa0c000004000e80"], 0x2c}}, 0x0)

1m32.657679408s ago: executing program 6 (id=1555):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xa00)

1m32.617268568s ago: executing program 6 (id=1556):
r0 = getpid()
syz_pidfd_open(r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000300)=""/246, 0xf6, 0x0)

1m32.559331779s ago: executing program 6 (id=1557):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
mount(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0x800800, 0x0)

1m32.378117562s ago: executing program 6 (id=1561):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r1, 0x0, 0x0, 0xe7b, 0x1, 0x15)

1m32.251597484s ago: executing program 6 (id=1569):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000004100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1m32.195483284s ago: executing program 36 (id=1569):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000004100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

7.700860253s ago: executing program 8 (id=4018):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=ANY=[], 0x1001, 0x0)

7.595224165s ago: executing program 8 (id=4019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0)

7.547298285s ago: executing program 8 (id=4020):
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)

7.514401906s ago: executing program 8 (id=4021):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000300)={[{@test_dummy_encryption_v1}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@min_batch_time={'min_batch_time', 0x3d, 0xc}}, {@sysvgroups}, {@user_xattr}, {@journal_dev}, {@commit}]}, 0x3, 0x455, &(0x7f0000000f00)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, &(0x7f0000000140)='usrjquota=')

7.139504081s ago: executing program 8 (id=4026):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b595e9ffffff000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ff"], 0x2c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.915855654s ago: executing program 8 (id=4031):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
getrlimit(0x2, &(0x7f00000002c0))

6.830523335s ago: executing program 37 (id=4031):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
getrlimit(0x2, &(0x7f00000002c0))

1.47700701s ago: executing program 2 (id=4234):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

1.44199558s ago: executing program 7 (id=4237):
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setreuid(0x0, r0)
r1 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xa)
setfsgid(r2)

1.409489681s ago: executing program 5 (id=4238):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1)
io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0)

1.409223321s ago: executing program 7 (id=4239):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
unshare(0x46060480)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0)

1.348787971s ago: executing program 5 (id=4241):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x40)
setreuid(0xee01, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0)

1.247166763s ago: executing program 5 (id=4242):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.207927024s ago: executing program 5 (id=4243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000002c0)={{0x0, 0x0, 0xfee0, {0x0, 0x1000}}, "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", "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"})

1.179772724s ago: executing program 7 (id=4244):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000002e98000000000000000000000000000000000a"], 0xb8}}, 0x0)

1.161988444s ago: executing program 7 (id=4245):
r0 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x5, 0x4, 0x1)

1.132234064s ago: executing program 5 (id=4246):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

954.263147ms ago: executing program 1 (id=4249):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64=0x0], 0x21, 0x14fd, &(0x7f00000006c0)="$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")
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

900.100958ms ago: executing program 1 (id=4250):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='signal_deliver\x00', r1}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

899.824067ms ago: executing program 5 (id=4251):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x3, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x2, {0x2, 0x9}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

877.255188ms ago: executing program 1 (id=4253):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x2009}, 0xff3f)
bind$bt_sco(r0, &(0x7f0000000400), 0x8)
listen(r0, 0x0)
shutdown(r0, 0x0)

876.768968ms ago: executing program 1 (id=4254):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
open(0x0, 0x101040, 0x0)
epoll_create1(0x0)

851.565148ms ago: executing program 1 (id=4256):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0xfc, 0x1000000, 0x0})

710.8836ms ago: executing program 2 (id=4263):
mkdir(0x0, 0x0)
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39ddc8)

701.178381ms ago: executing program 2 (id=4264):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
getitimer(0xe, 0x0)

663.191261ms ago: executing program 2 (id=4266):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='\x00', 0xfffffffffffffffd)

662.770381ms ago: executing program 2 (id=4267):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18)
io_uring_setup(0xeb3, &(0x7f0000000000))

645.189841ms ago: executing program 2 (id=4269):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d0001000000000904000005030002000921000033012205000905810300000c000709050203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x7, {0x7, 0x10, "60d4115e4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

561.621452ms ago: executing program 9 (id=4273):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8)
faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100)

507.246213ms ago: executing program 9 (id=4274):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x4e)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pi6   \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10)
syz_clone(0x9040000, 0x0, 0x0, 0x0, 0x0, 0x0)

503.868653ms ago: executing program 9 (id=4275):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x80002, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xa2, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000bc0)={0x1d, "0fab12613bc44071cce0b0fa775d257dc5eb19440512b5e71441453c3c411c5745cad3db366524ee8cfdca2a82b4bb0ace6cbba01a532790d33bd73fe8f9c3278895022c57996c648a51b1a92c35b582296f7a45334e97163dcbd82cba8949bdc2b288c2bd2caf631baf503e33ae5dbea92ea76a80da4b33b3a066f53d303d3ca5932ecdc23165b3612d95a1b610b686a61d25ddf199a7852de3193b14952dbdd5d9e73c5f636385cdff417ee05b028d7b2470c31007448449384468657318c015fa4619a6637eb6641760b4b1b6be91a3e0b6cff1a011424272de43fe1de4d44d0d659af72d8009ee9c18b474f9ed8ec84b6bd49d7968db842bb8bf55ca22933e7ed0e4fcd2437b842cbbf5f42e40abc4f423c9c638b2c4718d9cb33a46eaf098eb70e1121e25d3a923b530bf0f938b2796ff250773b1dff2f282117561933da91b8e63bb539c9c6597e0a0a4bb809fca37695e1fbe5b611847bf68176d2394915d6710aeebcd25f3aa3dffbfb930276fcb414a186b9add5334c285bebf7c3126f1fb7ed83a024413ed76b28a00c8afedfa3148089389af1ac37208cbe51fc7827988a525f08751b0ba528e409880428aa69ce9175c64bb9604b9c7ee2812e013cafe0abbdc8e5803e6fd47844d784cbd6cd68faff42662e045963bf18fc383cb626d095d3af71d73e63944c823d01da6787c3f5102dc7f45f67d3d820ea9c3"})

374.689605ms ago: executing program 9 (id=4276):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x88, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x44}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x200}]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

359.223235ms ago: executing program 9 (id=4277):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
open$dir(&(0x7f00000004c0)='./file0/../file0\x00', 0x103000, 0x4)

307.165876ms ago: executing program 9 (id=4278):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

280.817406ms ago: executing program 7 (id=4279):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='mmap_lock_acquire_returned\x00', r1}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

20.60993ms ago: executing program 7 (id=4280):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r2, 0x7, 0x70bd21, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0)

0s ago: executing program 1 (id=4281):
syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000040)={[], [{@permit_directio}, {@seclabel}]}, 0x1, 0x793, &(0x7f0000001700)="$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")
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0xa541, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x40106726, 0x0)

kernel console output (not intermixed with test programs):

[   T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  128.984133][   T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  128.992521][   T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  129.000328][   T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  129.007628][   T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  129.022078][   T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  129.039828][   T19] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[  129.064268][   T19] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0024/input/input36
[  129.140531][   T19] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[  129.187893][ T2268] usb 10-1: USB disconnect, device number 10
[  129.349707][ T1563] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  129.529724][ T1563] usb 9-1: Using ep0 maxpacket: 16
[  129.535936][ T7008] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2820'.
[  129.546896][ T1563] usb 9-1: unable to get BOS descriptor or descriptor too short
[  129.554622][ T1563] usb 9-1: no configurations
[  129.559211][ T1563] usb 9-1: can't read configurations, error -22
[  129.708801][ T7018] loop2: detected capacity change from 0 to 512
[  129.718358][ T7016] loop9: detected capacity change from 0 to 2048
[  129.725803][ T7016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  129.781120][ T7016] EXT4-fs (loop9): shut down requested (1)
[  129.854907][ T7034] loop2: detected capacity change from 0 to 256
[  129.945411][ T7054] loop7: detected capacity change from 0 to 2048
[  129.955597][ T7054] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  129.975032][ T7054] EXT4-fs (loop7): shut down requested (1)
[  130.019746][  T297] tipc: Node number set to 2886997007
[  130.078692][ T7076] tipc: Enabled bearer <udp:syz0>, priority 10
[  130.096732][ T7078] loop2: detected capacity change from 0 to 1024
[  130.103728][ T7078] EXT4-fs: Ignoring removed i_version option
[  130.111576][ T7078] EXT4-fs (loop2): Test dummy encryption mode enabled
[  130.179708][   T39] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  130.356762][ T7091] loop8: detected capacity change from 0 to 2048
[  130.363154][   T39] usb 6-1: Using ep0 maxpacket: 16
[  130.368605][ T7091] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  130.373600][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.391192][   T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.401940][   T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  130.403342][ T7091] EXT4-fs (loop8): shut down requested (1)
[  130.415264][   T39] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  130.429802][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.439890][   T39] usb 6-1: config 0 descriptor??
[  130.492696][ T7100] loop8: detected capacity change from 0 to 1024
[  130.499294][ T7100] EXT4-fs: Ignoring removed nobh option
[  130.505486][ T7100] EXT4-fs: Ignoring removed bh option
[  130.522925][   T28] audit: type=1400 audit(2000000049.060:738): avc:  denied  { mounton } for  pid=7099 comm="syz.8.2859" path="/296/file1/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  130.580080][   T28] audit: type=1400 audit(2000000049.120:739): avc:  denied  { unmount } for  pid=3472 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  130.619770][   T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  130.810764][   T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.820944][   T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.830539][   T19] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  130.839595][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  130.847609][   T19] usb 3-1: SerialNumber: syz
[  130.855281][   T39] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  130.865755][   T39] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  130.876605][   T39] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  130.886399][   T39] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  130.894207][   T39] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  130.901553][   T39] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  130.908767][   T39] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  130.916226][   T39] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  130.919709][ T1563] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  130.927277][   T39] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0025/input/input37
[  130.975289][ T7118] loop9: detected capacity change from 0 to 2048
[  130.982299][ T7118] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  131.003318][ T7118] EXT4-fs (loop9): shut down requested (1)
[  131.010910][   T39] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  131.067220][   T19] usb 3-1: 0:2 : does not exist
[  131.083429][   T19] usb 3-1: USB disconnect, device number 12
[  131.089880][   T28] audit: type=1400 audit(2000000049.630:740): avc:  denied  { create } for  pid=7125 comm="syz.9.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  131.112502][ T1563] usb 9-1: config 0 has an invalid interface number: 41 but max is 0
[  131.129906][ T1563] usb 9-1: config 0 has no interface number 0
[  131.137697][ T1563] usb 9-1: config 0 interface 41 has no altsetting 0
[  131.144928][   T39] usb 6-1: USB disconnect, device number 12
[  131.151805][ T1563] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  131.162065][ T1563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.170282][ T1563] usb 9-1: Product: syz
[  131.174585][ T1563] usb 9-1: Manufacturer: syz
[  131.179303][ T1563] usb 9-1: SerialNumber: syz
[  131.184774][ T1563] usb 9-1: config 0 descriptor??
[  131.273320][ T7134] loop9: detected capacity change from 0 to 512
[  131.284209][ T7134] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  131.295793][ T7134] EXT4-fs (loop9): 1 truncate cleaned up
[  131.357164][ T7140] bridge0: port 3(syz_tun) entered blocking state
[  131.363654][ T7140] bridge0: port 3(syz_tun) entered disabled state
[  131.370756][ T7140] device syz_tun entered promiscuous mode
[  131.378067][ T7140] bridge0: port 3(syz_tun) entered blocking state
[  131.384501][ T7140] bridge0: port 3(syz_tun) entered forwarding state
[  131.608553][ T7153] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) !
[  131.665052][ T7163] loop2: detected capacity change from 0 to 512
[  131.673242][ T7163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  131.677404][ T7159] tmpfs: Unknown parameter 'context'
[  131.708276][ T7167] syz.5.2890[7167] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.708376][ T7163] EXT4-fs (loop2): 1 truncate cleaned up
[  131.708413][ T7167] syz.5.2890[7167] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.722346][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4
[  131.750417][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x2
[  131.769558][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.777386][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.791251][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.802295][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.815022][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.822958][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.831072][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.838895][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.847163][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.855062][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.863029][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.870896][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.878676][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.886366][   T39] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0
[  131.894496][   T39] hid-generic 0000:3000000:0000.0026: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  131.933381][ T7183] fido_id[7183]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  132.200727][ T1563] CoreChips: probe of 9-1:0.41 failed with error -71
[  132.208301][ T1563] usb 9-1: USB disconnect, device number 11
[  132.722263][ T7201] loop8: detected capacity change from 0 to 512
[  132.731767][ T7201] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  132.764455][ T7201] EXT4-fs (loop8): 1 truncate cleaned up
[  132.767091][ T7208] loop5: detected capacity change from 0 to 512
[  132.770242][ T7201] EXT4-fs mount: 48 callbacks suppressed
[  132.770257][ T7201] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  132.799176][ T7206] loop2: detected capacity change from 0 to 2048
[  132.830259][ T7208] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2907: casefold flag without casefold feature
[  132.831358][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  132.842998][ T7208] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2907: couldn't read orphan inode 15 (err -117)
[  132.860751][ T7208] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  132.871020][ T7206] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  132.900360][  T285] EXT4-fs (loop2): unmounting filesystem.
[  132.909785][ T1821] EXT4-fs (loop5): unmounting filesystem.
[  132.979689][ T1563] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  132.982291][ T7227] loop8: detected capacity change from 0 to 1024
[  132.997298][ T7227] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  133.007187][ T7227] EXT4-fs (loop8): orphan cleanup on readonly fs
[  133.013832][ T7227] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #3: comm syz.8.2916: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  133.031870][ T7227] EXT4-fs error (device loop8): ext4_quota_enable:6983: comm syz.8.2916: Bad quota inode: 3, type: 0
[  133.043327][ T7227] EXT4-fs warning (device loop8): ext4_enable_quotas:7024: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  133.059823][ T7227] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  133.066872][ T7227] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  133.083866][ T7227] syz.8.2916[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  133.083932][ T7227] syz.8.2916[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  133.096609][ T7227] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  133.121687][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  133.156025][ T7241] loop8: detected capacity change from 0 to 256
[  133.169688][ T1563] usb 10-1: Using ep0 maxpacket: 32
[  133.176192][ T1563] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.198478][ T1563] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.209589][ T1563] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  133.218798][ T1563] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  133.227221][ T1563] usb 10-1: Product: syz
[  133.232083][ T1563] usb 10-1: Manufacturer: syz
[  133.240109][ T1563] hub 10-1:4.0: USB hub found
[  133.369719][    T6] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  133.441350][ T1563] hub 10-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  133.559677][    T6] usb 6-1: Using ep0 maxpacket: 16
[  133.566050][    T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.576967][    T6] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  133.586010][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.594762][    T6] usb 6-1: config 0 descriptor??
[  133.759767][ T1563] usb 10-1: USB disconnect, device number 11
[  134.012937][   T28] audit: type=1326 audit(2000000052.550:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7265 comm="syz.7.2931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa92a18e969 code=0x0
[  134.065103][ T7268] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  134.086257][ T7268] FAT-fs (loop17): unable to read boot sector
[  134.094428][    T6] kye 0003:0458:5010.0027: unknown main item tag 0x0
[  134.106665][    T6] kye 0003:0458:5010.0027: unknown main item tag 0x0
[  134.120713][    T6] kye 0003:0458:5010.0027: unknown main item tag 0x0
[  134.127769][    T6] kye 0003:0458:5010.0027: unknown main item tag 0x0
[  134.134645][    T6] kye 0003:0458:5010.0027: unknown main item tag 0x0
[  134.144814][    T6] kye 0003:0458:5010.0027: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0
[  134.161287][    T6] kye 0003:0458:5010.0027: tablet-enabling feature report not found
[  134.169308][    T6] kye 0003:0458:5010.0027: tablet enabling failed
[  134.191107][  T297] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  134.203273][  T297] hid-generic 0000:0000:0000.0028: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  134.241687][ T7282] fido_id[7282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  134.279852][ T7288] loop2: detected capacity change from 0 to 1024
[  134.287258][ T7288] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  134.298873][ T7288] EXT4-fs (loop2): orphan cleanup on readonly fs
[  134.305551][ T7288] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.2939: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  134.324710][ T7288] EXT4-fs error (device loop2): ext4_quota_enable:6983: comm syz.2.2939: Bad quota inode: 3, type: 0
[  134.337001][ T7288] EXT4-fs warning (device loop2): ext4_enable_quotas:7024: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  134.342039][ T2268] usb 6-1: USB disconnect, device number 13
[  134.351835][ T7288] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  134.364377][ T7288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  134.382596][ T7288] syz.2.2939[7288] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.382645][ T7288] syz.2.2939[7288] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.395588][ T7288] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  134.421140][  T285] EXT4-fs (loop2): unmounting filesystem.
[  134.429794][ T7291] loop9: detected capacity change from 0 to 512
[  134.449767][    T6] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  134.459308][ T7291] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  134.468501][ T7291] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  134.483680][ T7291] EXT4-fs error (device loop9): ext4_do_update_inode:5226: inode #2: comm syz.9.2950: corrupted inode contents
[  134.495750][ T7291] EXT4-fs error (device loop9): ext4_dirty_inode:6091: inode #2: comm syz.9.2950: mark_inode_dirty error
[  134.507425][ T7291] EXT4-fs error (device loop9): ext4_do_update_inode:5226: inode #2: comm syz.9.2950: corrupted inode contents
[  134.519512][ T7291] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.2950: mark_inode_dirty error
[  134.553854][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  134.640715][    T6] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.650977][    T6] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.667804][    T6] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  134.677017][    T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  134.690689][    T6] usb 9-1: SerialNumber: syz
[  134.718948][ T7306] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) !
[  134.908350][ T7321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7321 comm=syz.7.2949
[  134.925871][    T6] usb 9-1: 0:2 : does not exist
[  134.960277][    T6] usb 9-1: USB disconnect, device number 12
[  134.986403][ T7331] tipc: Enabled bearer <udp:syz0>, priority 10
[  135.019680][ T2268] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  135.118127][ T7345] tmpfs: Unknown parameter 'context'
[  135.136845][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x4
[  135.145450][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x2
[  135.153302][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.166331][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.174327][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.184294][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.192161][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.199917][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.207571][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.209694][ T2268] usb 3-1: Using ep0 maxpacket: 16
[  135.215465][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.221611][ T2268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.228007][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.239536][ T2268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.246720][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.256602][ T2268] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  135.263952][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.276933][ T2268] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  135.284431][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.293632][ T2268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.301108][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.309964][ T2268] usb 3-1: config 0 descriptor??
[  135.317711][  T297] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0
[  135.329885][  T297] hid-generic 0000:3000000:0000.0029: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  135.387727][ T7354] fido_id[7354]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  135.731236][ T2268] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[  135.738481][ T2268] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[  135.746478][ T2268] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[  135.755118][ T2268] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[  135.755153][ T7373] tipc: Started in network mode
[  135.762521][ T2268] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[  135.762559][ T2268] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[  135.762580][ T2268] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[  135.781910][ T7373] tipc: Node identity ac14140f, cluster identity 4711
[  135.789269][ T2268] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[  135.806559][ T2268] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002A/input/input38
[  135.816300][ T7373] tipc: Enabled bearer <udp:syz0>, priority 10
[  135.892153][ T2268] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  135.917824][ T7391] loop8: detected capacity change from 0 to 256
[  136.046161][    T6] usb 3-1: USB disconnect, device number 13
[  136.073692][ T7409] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2989'.
[  136.083007][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2989'.
[  136.126531][ T7413] tipc: Started in network mode
[  136.131469][ T7413] tipc: Node identity ac14140f, cluster identity 4711
[  136.142083][ T7413] tipc: Enabled bearer <udp:syz0>, priority 10
[  136.143397][ T7415] kvm [7414]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x4c
[  136.212733][ T7429] loop9: detected capacity change from 0 to 256
[  136.252508][ T7437] loop5: detected capacity change from 0 to 1024
[  136.259131][ T7437] EXT4-fs: Ignoring removed nobh option
[  136.265827][ T7437] EXT4-fs: Ignoring removed bh option
[  136.281187][ T7437] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  136.327222][ T1821] EXT4-fs (loop5): unmounting filesystem.
[  136.566323][ T7452] tipc: Enabled bearer <udp:syz0>, priority 10
[  136.625884][ T7468] loop5: detected capacity change from 0 to 256
[  136.660490][ T7478] loop5: detected capacity change from 0 to 256
[  136.888134][  T289] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  136.896439][  T289] hid-generic 0000:0000:0000.002B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  136.929683][  T297] tipc: Node number set to 2886997007
[  136.938710][ T7516] fido_id[7516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  136.979760][   T39] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  137.059765][    T6] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  137.159684][   T39] usb 9-1: Using ep0 maxpacket: 16
[  137.165887][   T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.176779][   T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.186521][   T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  137.199313][   T39] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  137.208371][   T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.216938][   T39] usb 9-1: config 0 descriptor??
[  137.240720][    T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.250922][    T6] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.260579][    T6] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  137.269724][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  137.277779][    T6] usb 10-1: SerialNumber: syz
[  137.279685][  T289] tipc: Node number set to 2886997007
[  137.486367][    T6] usb 10-1: 0:2 : does not exist
[  137.496264][    T6] usb 10-1: USB disconnect, device number 12
[  137.625166][   T39] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0
[  137.632448][   T39] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0
[  137.639657][   T39] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0
[  137.646851][   T39] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0
[  137.654064][   T39] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0
[  137.661302][   T39] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0
[  137.668488][   T39] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0
[  137.675692][   T39] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0
[  137.685187][   T39] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.002C/input/input39
[  137.760699][   T39] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  137.835940][   T39] usb 9-1: USB disconnect, device number 13
[  138.339721][   T39] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  138.501516][ T7561] bridge0: port 1(bridge_slave_0) entered learning state
[  138.539691][   T39] usb 6-1: Using ep0 maxpacket: 16
[  138.546261][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3042'.
[  138.558608][   T39] usb 6-1: unable to get BOS descriptor or descriptor too short
[  138.566297][   T39] usb 6-1: no configurations
[  138.570920][   T39] usb 6-1: can't read configurations, error -22
[  138.769770][ T4096] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  138.950735][ T4096] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.960959][ T4096] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  138.974065][ T4096] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.988126][ T4096] usb 9-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40
[  138.997161][ T4096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.005209][ T4096] usb 9-1: Product: syz
[  139.009379][ T4096] usb 9-1: Manufacturer: syz
[  139.014161][ T4096] usb 9-1: SerialNumber: syz
[  139.020029][ T4096] cdc_ncm 9-1:1.0: skipping garbage
[  139.323221][ T7567] incfs: Options parsing error. -22
[  139.334961][ T7567] incfs: mount failed -22
[  140.022292][ T4096] cdc_ncm 9-1:1.0: bind() failure
[  140.028273][ T4096] cdc_ncm: probe of 9-1:1.1 failed with error -71
[  140.034993][ T4096] cdc_mbim: probe of 9-1:1.1 failed with error -71
[  140.044074][ T4096] usb 9-1: USB disconnect, device number 14
[  140.699699][   T28] audit: type=1326 audit(2000000059.230:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  140.738165][   T28] audit: type=1326 audit(2000000059.230:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  140.761537][   T28] audit: type=1326 audit(2000000059.230:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  140.788441][   T28] audit: type=1326 audit(2000000059.230:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  140.828597][   T28] audit: type=1326 audit(2000000059.230:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  140.866765][   T28] audit: type=1326 audit(2000000059.230:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  140.918266][   T28] audit: type=1326 audit(2000000059.230:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  140.963891][   T28] audit: type=1326 audit(2000000059.230:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  141.009697][   T28] audit: type=1326 audit(2000000059.230:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  141.034059][   T28] audit: type=1326 audit(2000000059.230:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.8.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d2172ab39 code=0x7ffc0000
[  141.109686][   T39] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  141.299735][   T39] usb 3-1: Using ep0 maxpacket: 16
[  141.304922][ T4096] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[  141.314132][ T7598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3073'.
[  141.325209][   T39] usb 3-1: unable to get BOS descriptor or descriptor too short
[  141.333005][   T39] usb 3-1: no configurations
[  141.337584][   T39] usb 3-1: can't read configurations, error -22
[  141.500743][ T4096] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.511009][ T4096] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  141.524030][ T4096] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.538338][ T4096] usb 10-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40
[  141.547491][ T4096] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.555575][ T4096] usb 10-1: Product: syz
[  141.559822][ T4096] usb 10-1: Manufacturer: syz
[  141.564498][ T4096] usb 10-1: SerialNumber: syz
[  141.570564][ T4096] cdc_ncm 10-1:1.0: skipping garbage
[  142.572848][ T4096] cdc_ncm 10-1:1.0: bind() failure
[  142.577060][ T4096] cdc_ncm: probe of 10-1:1.1 failed with error -71
[  142.578394][ T4096] cdc_mbim: probe of 10-1:1.1 failed with error -71
[  142.583067][ T4096] usb 10-1: USB disconnect, device number 13
[  142.671946][ T7656] bridge_slave_0: default FDB implementation only supports local addresses
[  142.829702][    T6] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  143.021896][    T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.032112][    T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.042060][    T6] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  143.051613][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  143.059764][    T6] usb 6-1: SerialNumber: syz
[  143.125172][ T7691] loop9: detected capacity change from 0 to 512
[  143.131900][ T7691] EXT4-fs: Ignoring removed mblk_io_submit option
[  143.138820][ T7691] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  143.154121][ T7691] EXT4-fs (loop9): 1 truncate cleaned up
[  143.161755][ T7691] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  143.194707][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  143.277423][    T6] usb 6-1: 0:2 : does not exist
[  143.286316][    T6] usb 6-1: USB disconnect, device number 16
[  143.311172][ T2865] udevd[2865]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  143.354210][ T7714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7714 comm=syz.9.3126
[  143.490323][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3134'.
[  143.502944][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3134'.
[  143.589720][   T19] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  143.791247][   T19] usb 9-1: config 0 has no interfaces?
[  143.796780][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3139'.
[  143.803881][   T19] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  143.815196][   T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.823658][   T19] usb 9-1: Product: syz
[  143.827988][   T19] usb 9-1: Manufacturer: syz
[  143.839070][   T19] usb 9-1: SerialNumber: syz
[  143.846441][   T19] r8152-cfgselector 9-1: config 0 descriptor??
[  144.055869][  T304] usb 9-1: config 0 descriptor??
[  144.260160][  T304] usb 9-1: can't set config #0, error -71
[  144.260193][  T289] usb 9-1: USB disconnect, device number 15
[  144.272829][ T4109] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  144.280446][ T4096] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  144.302947][ T7772] loop9: detected capacity change from 0 to 256
[  144.381366][ T7782] loop7: detected capacity change from 0 to 512
[  144.387830][ T7782] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.394355][ T7782] EXT4-fs: Ignoring removed i_version option
[  144.400631][ T7782] ext4: Unknown parameter 'smackfsroot'
[  144.460843][ T4109] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.471036][ T4096] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  144.479250][ T4096] usb 6-1: config 0 has no interface number 0
[  144.485963][ T4109] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.494991][ T4096] usb 6-1: config 0 interface 41 has no altsetting 0
[  144.503742][ T4109] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  144.513012][ T4109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  144.521279][ T4109] usb 3-1: SerialNumber: syz
[  144.526367][ T4096] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  144.536187][ T4096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.544647][ T4096] usb 6-1: Product: syz
[  144.549061][ T4096] usb 6-1: Manufacturer: syz
[  144.553908][ T4096] usb 6-1: SerialNumber: syz
[  144.560410][ T4096] usb 6-1: config 0 descriptor??
[  144.639912][   T19] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  144.749375][ T4109] usb 3-1: 0:2 : does not exist
[  144.757597][ T4109] usb 3-1: USB disconnect, device number 16
[  144.814054][ T7806] loop8: detected capacity change from 0 to 512
[  144.820385][   T19] usb 10-1: Using ep0 maxpacket: 16
[  144.826904][   T19] usb 10-1: config 0 has no interfaces?
[  144.833410][   T19] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.841796][ T7806] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  144.842987][   T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  144.852618][ T7806] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.865769][   T19] usb 10-1: SerialNumber: syz
[  144.878405][   T19] usb 10-1: config 0 descriptor??
[  144.882895][ T7806] fs-verity (loop8, inode 15): Unrecognized descriptor size: 0 bytes
[  144.896793][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  144.914724][ T7811] loop8: detected capacity change from 0 to 512
[  144.921756][ T7811] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.928210][ T7811] EXT4-fs: Ignoring removed i_version option
[  144.934306][ T7811] ext4: Unknown parameter 'smackfsroot'
[  145.087163][   T19] usb 10-1: USB disconnect, device number 14
[  145.297804][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3179'.
[  145.570452][ T4096] CoreChips: probe of 6-1:0.41 failed with error -71
[  145.581552][ T4096] usb 6-1: USB disconnect, device number 17
[  146.288417][   T28] kauditd_printk_skb: 712 callbacks suppressed
[  146.288432][   T28] audit: type=1326 audit(2000000064.820:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583e38e969 code=0x7ffc0000
[  146.323829][   T28] audit: type=1326 audit(2000000064.850:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.347659][   T28] audit: type=1326 audit(2000000064.850:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.401694][   T28] audit: type=1326 audit(2000000064.850:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.426921][   T28] audit: type=1326 audit(2000000064.850:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.450649][   T28] audit: type=1326 audit(2000000064.850:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.474179][   T28] audit: type=1326 audit(2000000064.850:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.498129][   T28] audit: type=1326 audit(2000000064.850:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.522134][   T28] audit: type=1326 audit(2000000064.850:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.545823][   T28] audit: type=1326 audit(2000000064.850:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f583e32ab39 code=0x7ffc0000
[  146.639759][ T4096] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  146.676774][ T7875] loop9: detected capacity change from 0 to 512
[  146.684165][ T7875] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  146.694052][   T19] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  146.695152][ T7875] EXT4-fs (loop9): 1 truncate cleaned up
[  146.707486][ T7875] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  146.729586][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  146.772286][ T7880] SELinux: failed to load policy
[  146.840753][ T4096] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.850891][ T4096] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.860416][ T4096] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  146.869474][ T4096] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  146.877486][ T4096] usb 9-1: SerialNumber: syz
[  146.890810][   T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.900953][   T19] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  146.913875][   T19] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.928094][   T19] usb 6-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40
[  146.937181][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.945189][   T19] usb 6-1: Product: syz
[  146.949338][   T19] usb 6-1: Manufacturer: syz
[  146.953931][   T19] usb 6-1: SerialNumber: syz
[  146.960223][   T19] cdc_ncm 6-1:1.0: skipping garbage
[  147.090034][ T4096] usb 9-1: 0:2 : does not exist
[  147.096418][ T4096] usb 9-1: USB disconnect, device number 16
[  147.300274][ T2865] udevd[2865]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  147.450765][ T7884] tmpfs: Unknown parameter 'n'
[  147.707540][ T7901] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3213'.
[  147.751557][ T7897] loop8: detected capacity change from 0 to 40427
[  147.751573][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3216'.
[  147.783480][ T7897] F2FS-fs (loop8): invalid crc value
[  147.802723][ T7897] F2FS-fs (loop8): Found nat_bits in checkpoint
[  147.838486][ T7897] F2FS-fs (loop8): Start checkpoint disabled!
[  147.845232][ T7897] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  147.901753][  T313] kworker/u4:4: attempt to access beyond end of device
[  147.901753][  T313] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  147.967289][   T19] cdc_ncm 6-1:1.0: bind() failure
[  147.973741][   T19] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  147.980681][   T19] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  147.990971][   T19] usb 6-1: USB disconnect, device number 18
[  148.159692][    T6] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  148.340674][    T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.351705][    T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.361528][    T6] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  148.374519][    T6] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  148.383684][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.392818][    T6] usb 10-1: config 0 descriptor??
[  148.584459][ T7938] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3228'.
[  148.810723][    T6] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving
[  148.819530][    T6] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  148.874911][ T7967] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3242'.
[  148.895819][ T7967] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3242'.
[  148.905382][ T7967] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3242'.
[  148.929736][ T2268] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  149.080999][  T289] usb 10-1: USB disconnect, device number 15
[  149.114755][ T7990] xt_hashlimit: size too large, truncated to 1048576
[  149.130698][ T2268] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.141079][ T2268] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  149.153045][ T2268] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.177778][ T2268] usb 6-1: New USB device found, idVendor=0525, idProduct=86a1, bcdDevice= 0.40
[  149.186932][ T2268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.195124][ T2268] usb 6-1: Product: syz
[  149.199337][ T2268] usb 6-1: Manufacturer: syz
[  149.204171][ T2268] usb 6-1: SerialNumber: syz
[  149.439696][ T1590] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  149.620700][ T1590] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.631623][ T1590] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.641462][ T1590] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  149.654344][ T1590] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  149.663387][ T1590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.672090][ T1590] usb 9-1: config 0 descriptor??
[  150.080282][ T1590] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving
[  150.089265][ T1590] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  150.215080][ T2268] cdc_ncm 6-1:1.0: bind() failure
[  150.220989][ T2268] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  150.227616][ T2268] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  150.235028][ T2268] usb 6-1: USB disconnect, device number 19
[  150.350234][ T4096] usb 9-1: USB disconnect, device number 17
[  150.880947][ T8031] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8031 comm=syz.7.3269
[  150.902393][ T8027] SELinux: failed to load policy
[  150.976237][ T8048] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3278'.
[  150.985457][ T8048] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3278'.
[  151.009698][ T2268] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  151.200657][ T2268] usb 10-1: config 0 has no interfaces?
[  151.207403][ T2268] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  151.216750][ T2268] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  151.224945][ T2268] usb 10-1: Product: syz
[  151.229191][ T2268] usb 10-1: Manufacturer: syz
[  151.234674][ T2268] usb 10-1: config 0 descriptor??
[  151.319678][ T4109] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  151.520817][ T4109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.531881][ T4109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.541638][ T4109] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  151.554544][ T4109] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  151.563618][ T4109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.579867][ T4109] usb 3-1: config 0 descriptor??
[  151.645897][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.654734][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.664510][ T4096] usb 10-1: USB disconnect, device number 16
[  151.810080][ T8064] loop7: detected capacity change from 0 to 256
[  151.814691][ T8060] SELinux: failed to load policy
[  151.834911][ T8064] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  151.988920][ T4109] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving
[  152.010212][ T4109] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  152.027933][ T8079] loop8: detected capacity change from 0 to 512
[  152.052662][ T8079] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  152.089347][ T8079] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.3292: bad orphan inode 131083
[  152.108563][ T8079] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  152.249364][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  152.261014][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3305'.
[  152.271776][ T4109] usb 3-1: USB disconnect, device number 17
[  152.280085][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3305'.
[  152.424296][ T8131] loop7: detected capacity change from 0 to 1024
[  152.467276][ T8131] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 2: comm syz.7.3313: lblock 2 mapped to illegal pblock 2 (length 1)
[  152.489879][ T8131] __quota_error: 202 callbacks suppressed
[  152.489895][ T8131] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  152.506873][ T8131] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 48: comm syz.7.3313: lblock 0 mapped to illegal pblock 48 (length 1)
[  152.511271][ T8142] loop8: detected capacity change from 0 to 256
[  152.529951][ T8131] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  152.539722][ T8131] EXT4-fs error (device loop7): ext4_acquire_dquot:6789: comm syz.7.3313: Failed to acquire dquot type 0
[  152.569770][ T8142] FAT-fs (loop8): Directory bread(block 64) failed
[  152.581167][ T8131] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5887: Corrupt filesystem
[  152.593104][ T8142] FAT-fs (loop8): Directory bread(block 65) failed
[  152.600965][ T8131] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #11: comm syz.7.3313: mark_inode_dirty error
[  152.613515][ T8142] FAT-fs (loop8): Directory bread(block 66) failed
[  152.621031][ T8131] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  152.631428][ T8142] FAT-fs (loop8): Directory bread(block 67) failed
[  152.644111][ T8142] FAT-fs (loop8): Directory bread(block 68) failed
[  152.651535][ T8131] EXT4-fs (loop7): 1 orphan inode deleted
[  152.659963][ T8131] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  152.668437][ T8142] FAT-fs (loop8): Directory bread(block 69) failed
[  152.675136][ T1853] EXT4-fs error (device loop7): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  152.692190][ T8142] FAT-fs (loop8): Directory bread(block 70) failed
[  152.698715][ T8142] FAT-fs (loop8): Directory bread(block 71) failed
[  152.710293][ T8142] FAT-fs (loop8): Directory bread(block 72) failed
[  152.716972][ T8142] FAT-fs (loop8): Directory bread(block 73) failed
[  152.726883][ T1853] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  152.745486][ T1853] EXT4-fs error (device loop7): ext4_release_dquot:6812: comm kworker/u4:6: Failed to release dquot type 0
[  152.767375][ T8131] EXT4-fs (loop7): re-mounted. Quota mode: none.
[  152.776494][ T8147] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.796816][ T8147] FAT-fs (loop19): unable to read boot sector
[  152.804307][ T2853] EXT4-fs (loop7): unmounting filesystem.
[  152.910522][ T8171] incfs: Options parsing error. -22
[  152.916312][ T8171] incfs: mount failed -22
[  152.997507][ T8194] loop8: detected capacity change from 0 to 256
[  153.039508][ T8200] SELinux:  Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped).
[  153.052793][   T28] audit: type=1400 audit(2000000071.590:1676): avc:  denied  { relabelto } for  pid=8199 comm="syz.5.3346" name="" dev="pipefs" ino=50185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:iptables_unit_file_t:s0"
[  153.289688][   T19] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  153.444535][ T8241] device veth0 entered promiscuous mode
[  153.450218][ T8241] device macsec3 entered promiscuous mode
[  153.457717][ T8241] device veth0 left promiscuous mode
[  153.469679][   T19] usb 9-1: Using ep0 maxpacket: 16
[  153.475849][   T19] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.487564][   T19] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.496806][   T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.504847][   T19] usb 9-1: Product: syz
[  153.509053][   T19] usb 9-1: Manufacturer: syz
[  153.513687][   T19] usb 9-1: SerialNumber: syz
[  153.553280][   T28] audit: type=1400 audit(2000000072.090:1677): avc:  denied  { relabelfrom } for  pid=8242 comm="syz.2.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  153.573218][   T28] audit: type=1400 audit(2000000072.090:1678): avc:  denied  { relabelto } for  pid=8242 comm="syz.2.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  153.922885][   T19] usb 9-1: 0:2 : does not exist
[  154.070087][ T8257] input: syz0 as /devices/virtual/input/input43
[  154.125805][   T28] audit: type=1400 audit(2000000072.660:1679): avc:  denied  { watch watch_reads } for  pid=8262 comm="syz.5.3374" path="/517/file0" dev="tmpfs" ino=2719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  154.154850][   T28] audit: type=1400 audit(2000000072.670:1680): avc:  denied  { ioctl } for  pid=8264 comm="syz.9.3375" path="socket:[49361]" dev="sockfs" ino=49361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  154.199680][  T289] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  154.326044][   T19] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  154.354881][   T19] usb 9-1: USB disconnect, device number 18
[  154.390992][  T289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.417630][  T289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  154.442506][  T289] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  154.464314][  T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  154.472516][  T289] usb 3-1: SerialNumber: syz
[  154.544852][   T28] audit: type=1400 audit(2000000073.080:1681): avc:  denied  { append } for  pid=8295 comm="syz.5.3390" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  154.702390][  T289] usb 3-1: 0:2 : does not exist
[  154.708726][  T289] usb 3-1: USB disconnect, device number 18
[  154.729748][    T6] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[  154.894948][ T8306] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  154.899658][   T28] audit: type=1400 audit(2000000073.430:1682): avc:  denied  { mount } for  pid=8305 comm="syz.8.3395" name="/" dev="pstore" ino=13818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  154.931472][    T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  154.942613][ T2865] udevd[2865]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  154.960698][ T8312] syz.8.3396[8312] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.960778][ T8312] syz.8.3396[8312] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.972159][    T6] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  155.009523][    T6] usb 10-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  155.018762][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.029046][ T8318] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  155.038419][    T6] usb 10-1: config 0 descriptor??
[  155.038433][ T8318] SELinux: failed to load policy
[  155.044984][ T8294] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  155.101952][   T43] tipc: Disabling bearer <udp:syz2>
[  155.107240][   T43] tipc: Disabling bearer <udp:syz0>
[  155.112640][   T43] tipc: Left network mode
[  155.235463][ T8332] overlayfs: failed to set xattr on upper
[  155.241335][ T8332] overlayfs: ...falling back to index=off,metacopy=off.
[  155.248348][ T8332] overlayfs: ...falling back to xino=off.
[  155.254224][ T8332] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  155.278271][    T6] usbhid 10-1:0.0: can't add hid device: -71
[  155.285520][    T6] usbhid: probe of 10-1:0.0 failed with error -71
[  155.290067][ T8337] 9pnet: p9_errstr2errno: server reported unknown error �@í΂Í(ÿ0x0000000000000004
[  155.300112][    T6] usb 10-1: USB disconnect, device number 17
[  155.307622][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.316439][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.324068][ T8328] device bridge_slave_0 entered promiscuous mode
[  155.332771][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.340173][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.347652][ T8328] device bridge_slave_1 entered promiscuous mode
[  155.402789][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.409852][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.417122][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.424171][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.457835][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.457963][ T8353] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[  155.474298][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.481630][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.495331][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.505184][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.512263][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.519775][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.528183][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.535240][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.545368][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.566836][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.581005][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  155.589321][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  155.597934][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.607063][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.615447][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  155.623249][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  155.631752][ T8328] device veth0_vlan entered promiscuous mode
[  155.647340][ T8328] device veth1_macvtap entered promiscuous mode
[  155.654243][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  155.662697][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  155.670946][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  155.690627][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  155.698887][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  155.711886][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  155.720412][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  155.734875][   T43] device bridge_slave_1 left promiscuous mode
[  155.741094][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.748605][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.756960][   T43] device veth1_macvtap left promiscuous mode
[  155.760840][ T8377] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3428'.
[  155.763700][   T43] device veth0_vlan left promiscuous mode
[  155.810283][ T8381] loop9: detected capacity change from 0 to 1024
[  155.831015][ T8381] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  155.846399][ T8381] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  155.861664][ T8381] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28
[  155.873972][ T8381] EXT4-fs (loop9): This should not happen!! Data will be lost
[  155.873972][ T8381] 
[  155.883816][ T8381] EXT4-fs (loop9): Total free blocks count 0
[  155.889855][ T8381] EXT4-fs (loop9): Free/Dirty block details
[  155.895818][ T8381] EXT4-fs (loop9): free_blocks=68451041280
[  155.901797][ T8381] EXT4-fs (loop9): dirty_blocks=16
[  155.906941][ T8381] EXT4-fs (loop9): Block reservation details
[  155.912986][ T8381] EXT4-fs (loop9): i_reserved_data_blocks=1
[  155.919204][ T8387] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28
[  156.198137][ T8402] loop8: detected capacity change from 0 to 40427
[  156.223415][ T8433] loop9: detected capacity change from 0 to 512
[  156.233664][ T8402] F2FS-fs (loop8): Found nat_bits in checkpoint
[  156.271649][ T8433] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  156.279249][ T8402] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  156.281484][ T8433] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.302055][ T8402] syz.8.3436: attempt to access beyond end of device
[  156.302055][ T8402] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  156.325258][ T3472] syz-executor: attempt to access beyond end of device
[  156.325258][ T3472] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  156.360594][ T8433] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz.9.3451: invalid size
[  156.396268][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  156.538515][ T8454] loop8: detected capacity change from 0 to 128
[  156.547720][ T8454] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  156.556542][ T8454] ext4 filesystem being mounted at /402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  156.590944][ T8454] EXT4-fs warning (device loop8): verify_group_input:151: Cannot add at group 1803188595 (only 1 groups)
[  156.607221][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  156.665946][ T8463] device gretap0 entered promiscuous mode
[  156.671998][ T8463] device gretap0 left promiscuous mode
[  156.720517][ T8473] overlayfs: missing 'lowerdir'
[  156.783252][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.907205][ T8515] input: syz1 as /devices/virtual/input/input44
[  156.952754][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3494'.
[  157.082042][ T8546] loop8: detected capacity change from 0 to 256
[  157.150858][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3508'.
[  157.170226][ T8561] fuse: Unknown parameter '0x0000000000000006'
[  157.224825][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3513'.
[  157.560480][ T8594] loop9: detected capacity change from 0 to 512
[  157.567405][ T8594] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  157.576358][ T8594] EXT4-fs (loop9): invalid journal inode
[  157.582170][ T8594] EXT4-fs (loop9): can't get journal size
[  157.588982][ T8594] EXT4-fs (loop9): 1 truncate cleaned up
[  157.594722][ T8594] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  157.606148][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  157.606162][   T28] audit: type=1400 audit(2000000076.140:1694): avc:  denied  { link } for  pid=8593 comm="syz.9.3524" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  157.657266][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  157.699182][   T28] audit: type=1400 audit(2000000076.230:1695): avc:  denied  { connect } for  pid=8600 comm="syz.9.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  157.718812][   T28] audit: type=1400 audit(2000000076.240:1696): avc:  denied  { read } for  pid=8600 comm="syz.9.3527" path="socket:[50011]" dev="sockfs" ino=50011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  157.791231][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3533'.
[  157.980421][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3546'.
[  158.135486][ T8646] tmpfs: Unknown parameter 'usrjquota'
[  158.431669][ T8680] loop8: detected capacity change from 0 to 40427
[  158.438529][ T8680] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  158.446314][ T8680] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  158.456563][ T8680] F2FS-fs (loop8): Found nat_bits in checkpoint
[  158.483919][ T8680] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  158.491039][ T8680] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  158.606923][ T8692] loop8: detected capacity change from 0 to 128
[  158.615375][ T8692] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  158.624210][ T8692] ext4 filesystem being mounted at /450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  158.657988][ T8692] EXT4-fs warning (device loop8): verify_group_input:169: Last group not full
[  158.673417][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  158.967116][ T8726] loop9: detected capacity change from 0 to 1024
[  158.981881][ T8726] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  159.001861][ T8726] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  159.017887][ T8726] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  159.030162][ T8726] EXT4-fs (loop9): This should not happen!! Data will be lost
[  159.030162][ T8726] 
[  159.041869][ T8726] EXT4-fs (loop9): Total free blocks count 0
[  159.047923][ T8726] EXT4-fs (loop9): Free/Dirty block details
[  159.053888][ T8726] EXT4-fs (loop9): free_blocks=68451041280
[  159.059752][ T8726] EXT4-fs (loop9): dirty_blocks=32
[  159.064890][ T8726] EXT4-fs (loop9): Block reservation details
[  159.071172][ T8726] EXT4-fs (loop9): i_reserved_data_blocks=2
[  159.079227][ T8725] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  159.351623][ T8773] xt_hashlimit: size too large, truncated to 1048576
[  159.609678][ T2268] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  159.656602][   T28] audit: type=1400 audit(2000000079.186:1697): avc:  denied  { shutdown } for  pid=8801 comm="syz.5.3616" laddr=127.0.0.1 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  159.789736][ T2268] usb 10-1: Using ep0 maxpacket: 16
[  159.803904][ T2268] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.825773][ T2268] usb 10-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  159.852380][ T2268] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.868793][ T2268] usb 10-1: config 0 descriptor??
[  159.960508][ T8844] device batadv_slave_0 entered promiscuous mode
[  159.968636][ T8843] device batadv_slave_0 left promiscuous mode
[  160.011330][ T8854] bridge0: port 3(vlan2) entered blocking state
[  160.017752][ T8854] bridge0: port 3(vlan2) entered disabled state
[  160.026584][ T8854] device vlan2 entered promiscuous mode
[  160.032206][ T8854] device vlan1 entered promiscuous mode
[  160.037912][ T8854] bridge0: port 3(vlan2) entered blocking state
[  160.044159][ T8854] bridge0: port 3(vlan2) entered forwarding state
[  160.087323][ T8862] incfs: Options parsing error. -22
[  160.092625][ T8862] incfs: mount failed -22
[  160.241496][ T8877] loop7: detected capacity change from 0 to 8192
[  160.251002][   T28] audit: type=1400 audit(2000000079.786:1698): avc:  denied  { remount } for  pid=8876 comm="syz.7.3648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  160.276871][ T2268] logitech 0003:046D:C295.0030: hidraw0: USB HID v1.01 Device [HID 046d:c295] on usb-dummy_hcd.9-1/input0
[  160.289345][ T2268] logitech 0003:046D:C295.0030: no inputs found
[  160.389666][ T4109] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  160.476654][   T19] usb 10-1: USB disconnect, device number 18
[  160.569703][ T4109] usb 9-1: Using ep0 maxpacket: 32
[  160.575915][ T4109] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  160.584113][ T4109] usb 9-1: config 0 has no interface number 0
[  160.591711][ T4109] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  160.600760][ T4109] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.608846][ T4109] usb 9-1: Product: syz
[  160.617086][ T4109] usb 9-1: Manufacturer: syz
[  160.622391][ T4109] usb 9-1: SerialNumber: syz
[  160.628956][ T8892] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3656'.
[  160.641733][ T4109] usb 9-1: config 0 descriptor??
[  160.650767][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3658'.
[  160.654353][ T4109] smsc95xx v2.0.0
[  160.740569][ T8906] device veth0 entered promiscuous mode
[  160.746244][ T8906] device macsec1 entered promiscuous mode
[  160.753424][ T8906] device veth0 left promiscuous mode
[  160.890974][ T8920] netlink: 'syz.7.3668': attribute type 1 has an invalid length.
[  160.962561][ T8931] netlink: 'syz.2.3673': attribute type 2 has an invalid length.
[  160.988512][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3676'.
[  161.004035][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3676'.
[  161.017470][ T8940] loop9: detected capacity change from 0 to 512
[  161.057333][ T8940] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  161.071674][ T8940] EXT4-fs warning (device loop9): dx_probe:869: inode #2: comm syz.9.3687: Unimplemented hash flags: 0x0001
[  161.088162][ T8940] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3687: Corrupt directory, running e2fsck is recommended
[  161.119361][ T8940] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 3: comm syz.9.3687: path /412/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  161.168776][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  161.226802][    T6] kernel write not supported for file [eventfd] (pid: 6 comm: kworker/0:0)
[  161.248599][   T28] audit: type=1400 audit(2000000080.776:1699): avc:  denied  { bpf } for  pid=8965 comm="syz.5.3689" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.294219][   T28] audit: type=1400 audit(2000000080.776:1700): avc:  denied  { read write } for  pid=4031 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  161.327881][ T8976] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  161.329710][   T28] audit: type=1400 audit(2000000080.776:1701): avc:  denied  { open } for  pid=4031 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  161.371395][   T28] audit: type=1400 audit(2000000080.776:1702): avc:  denied  { ioctl } for  pid=4031 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=127 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  161.397062][   T28] audit: type=1400 audit(2000000080.776:1703): avc:  denied  { map_create } for  pid=8967 comm="syz.7.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  161.453302][ T8982] xt_hashlimit: size too large, truncated to 1048576
[  161.470640][ T4109] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  161.599554][ T8994] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.611831][ T8978] loop7: detected capacity change from 0 to 40427
[  161.618802][ T8978] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  161.626787][ T8994] FAT-fs (loop11): unable to read boot sector
[  161.633258][ T8978] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  161.642450][ T8978] F2FS-fs (loop7): invalid crc value
[  161.663212][ T8978] F2FS-fs (loop7): Found nat_bits in checkpoint
[  161.671140][ T4109] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  161.693827][ T4109] smsc95xx: probe of 9-1:0.67 failed with error -71
[  161.703283][ T8978] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  161.710432][ T8978] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  161.712326][ T4109] usb 9-1: USB disconnect, device number 19
[  161.739996][ T8328] syz-executor: attempt to access beyond end of device
[  161.739996][ T8328] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  161.909534][ T9010] input: syz0 as /devices/virtual/input/input47
[  162.250704][ T9041] loop9: detected capacity change from 0 to 1024
[  162.284962][ T9041] EXT4-fs error (device loop9): ext4_map_blocks:634: inode #3: block 2: comm syz.9.3720: lblock 2 mapped to illegal pblock 2 (length 1)
[  162.299077][ T9041] EXT4-fs error (device loop9): ext4_map_blocks:634: inode #3: block 48: comm syz.9.3720: lblock 0 mapped to illegal pblock 48 (length 1)
[  162.305964][ T9050] loop8: detected capacity change from 0 to 1024
[  162.313340][ T9041] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.3720: Failed to acquire dquot type 0
[  162.330898][ T9041] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5887: Corrupt filesystem
[  162.350212][ T9041] EXT4-fs error (device loop9): ext4_evict_inode:279: inode #11: comm syz.9.3720: mark_inode_dirty error
[  162.376793][ T9041] EXT4-fs warning (device loop9): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  162.387011][ T9041] EXT4-fs (loop9): 1 orphan inode deleted
[  162.387803][ T9050] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  162.393173][ T9041] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  162.414164][  T313] EXT4-fs error (device loop9): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  162.431632][ T9050] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.445785][  T313] EXT4-fs error (device loop9): ext4_release_dquot:6812: comm kworker/u4:4: Failed to release dquot type 0
[  162.461478][ T9068] input: syz0 as /devices/virtual/input/input49
[  162.468752][ T9041] EXT4-fs (loop9): re-mounted. Quota mode: none.
[  162.486731][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  162.497294][ T9069] input: syz0 as /devices/virtual/input/input48
[  162.544060][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  162.612143][   T28] kauditd_printk_skb: 81 callbacks suppressed
[  162.612156][   T28] audit: type=1400 audit(2000000082.146:1782): avc:  denied  { write } for  pid=9082 comm="syz.7.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  162.639453][ T9083] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3739'.
[  162.648611][ T9083] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3739'.
[  162.695756][ T9089] loop9: detected capacity change from 0 to 512
[  162.708353][   T28] audit: type=1400 audit(2000000082.236:1783): avc:  denied  { read write } for  pid=9090 comm="syz.8.3742" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  162.734468][ T9093] loop7: detected capacity change from 0 to 1024
[  162.744780][ T9093] EXT4-fs: Ignoring removed nomblk_io_submit option
[  162.754579][   T28] audit: type=1400 audit(2000000082.236:1784): avc:  denied  { open } for  pid=9090 comm="syz.8.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  162.779572][   T28] audit: type=1400 audit(2000000082.286:1785): avc:  denied  { write } for  pid=9096 comm="syz.2.3746" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  162.804837][ T9089] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  162.814330][ T9089] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.825598][ T9093] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  162.841298][   T28] audit: type=1400 audit(2000000082.376:1786): avc:  denied  { read append } for  pid=9088 comm="syz.9.3743" path="/423/file0/cpu.stat" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  162.865119][   T28] audit: type=1400 audit(2000000082.376:1787): avc:  denied  { map } for  pid=9088 comm="syz.9.3743" path="/423/file0/cpu.stat" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  162.865796][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  162.888147][   T28] audit: type=1400 audit(2000000082.386:1788): avc:  denied  { setattr } for  pid=9092 comm="syz.7.3745" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  162.915799][   T28] audit: type=1400 audit(2000000082.386:1789): avc:  denied  { remove_name } for  pid=9092 comm="syz.7.3745" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  162.916518][ T8328] EXT4-fs (loop7): unmounting filesystem.
[  162.938858][   T28] audit: type=1400 audit(2000000082.386:1790): avc:  denied  { rename } for  pid=9092 comm="syz.7.3745" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  162.966670][   T28] audit: type=1400 audit(2000000082.386:1791): avc:  denied  { unlink } for  pid=9092 comm="syz.7.3745" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  163.029782][    T6] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  163.069700][   T19] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  163.210755][    T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.221729][    T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.235778][    T6] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.248775][    T6] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.257839][    T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.268985][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[  163.272508][ T9133] loop7: detected capacity change from 0 to 512
[  163.280429][    T6] usb 9-1: config 0 descriptor??
[  163.291692][ T9133] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  163.292981][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024
[  163.301114][ T9133] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  163.320664][ T9133] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended
[  163.320681][   T19] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  163.329782][ T9133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  163.339383][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.346692][ T9133] System zones: 0-2, 18-18, 34-34
[  163.354655][   T19] usb 6-1: Product: syz
[  163.363757][ T9133] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  163.363944][   T19] usb 6-1: Manufacturer: syz
[  163.378568][ T9133] EXT4-fs (loop7): 1 truncate cleaned up
[  163.382992][   T19] usb 6-1: SerialNumber: syz
[  163.388500][ T9133] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  163.394154][   T19] usb 6-1: config 0 descriptor??
[  163.406739][ T9100] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  163.417960][   T19] usb 6-1: Found UVC 0.00 device syz (18ec:3288)
[  163.428924][   T19] usb 6-1: No valid video chain found.
[  163.439851][ T8328] EXT4-fs (loop7): unmounting filesystem.
[  163.454612][ T9137] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  163.584022][ T9139] loop7: detected capacity change from 0 to 40427
[  163.590997][ T9139] F2FS-fs (loop7): heap/no_heap options were deprecated
[  163.597976][ T9139] F2FS-fs (loop7): heap/no_heap options were deprecated
[  163.605918][ T9139] F2FS-fs (loop7): invalid crc value
[  163.612111][ T9139] F2FS-fs (loop7): Found nat_bits in checkpoint
[  163.634344][  T289] usb 6-1: USB disconnect, device number 20
[  163.648632][ T9139] F2FS-fs (loop7): Start checkpoint disabled!
[  163.655405][ T9139] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  163.670139][ T9139] syz.7.3762: attempt to access beyond end of device
[  163.670139][ T9139] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.702304][   T10] kworker/u4:1: attempt to access beyond end of device
[  163.702304][   T10] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  163.723631][    T6] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving
[  163.741920][    T6] plantronics 0003:047F:FFFF.0031: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  163.872318][ T9156] loop9: detected capacity change from 0 to 512
[  163.888060][ T9156] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3769: invalid indirect mapped block 256 (level 2)
[  163.902098][ T9156] EXT4-fs (loop9): 2 truncates cleaned up
[  163.907854][ T9156] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  163.925389][ T9156] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.9.3769: path /427/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  163.949858][ T9159] netem: change failed
[  163.960355][ T9156] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.9.3769: path /427/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  163.986927][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  164.040492][ T1590] usb 9-1: USB disconnect, device number 20
[  164.053888][ T9173] device batadv_slave_1 entered promiscuous mode
[  164.060665][ T9172] device batadv_slave_1 left promiscuous mode
[  164.187554][ T9190] loop9: detected capacity change from 0 to 256
[  164.198803][ T9190] FAT-fs (loop9): Directory bread(block 64) failed
[  164.205439][ T9190] FAT-fs (loop9): Directory bread(block 65) failed
[  164.213555][ T9190] FAT-fs (loop9): Directory bread(block 66) failed
[  164.220218][ T9190] FAT-fs (loop9): Directory bread(block 67) failed
[  164.226876][ T9190] FAT-fs (loop9): Directory bread(block 68) failed
[  164.229682][  T289] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  164.233654][ T9190] FAT-fs (loop9): Directory bread(block 69) failed
[  164.247542][ T9190] FAT-fs (loop9): Directory bread(block 70) failed
[  164.254194][ T9190] FAT-fs (loop9): Directory bread(block 71) failed
[  164.260887][ T9190] FAT-fs (loop9): Directory bread(block 72) failed
[  164.267429][ T9190] FAT-fs (loop9): Directory bread(block 73) failed
[  164.323427][ T9197] loop9: detected capacity change from 0 to 2048
[  164.350956][ T9197] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  164.359558][ T9197] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.381604][ T9197] fs-verity: sha512 using implementation "sha512-avx2"
[  164.396683][ T4031] EXT4-fs (loop9): unmounting filesystem.
[  164.424780][  T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  164.436509][  T289] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  164.445928][  T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.460522][  T289] usb 3-1: config 0 descriptor??
[  164.467318][ T9163] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  164.759696][ T1563] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  164.870386][  T289] uclogic 0003:5543:0003.0032: item fetching failed at offset 0/1
[  164.878366][  T289] uclogic 0003:5543:0003.0032: parse failed
[  164.884302][  T289] uclogic: probe of 0003:5543:0003.0032 failed with error -22
[  164.939691][ T1590] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  164.948311][ T1563] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  164.956710][ T1563] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  164.967159][ T1563] usb 10-1: config 220 has no interface number 2
[  164.973514][ T1563] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  164.986743][ T1563] usb 10-1: config 220 interface 0 has no altsetting 0
[  164.993598][ T1563] usb 10-1: config 220 interface 76 has no altsetting 0
[  165.000563][ T1563] usb 10-1: config 220 interface 1 has no altsetting 0
[  165.008708][ T1563] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  165.017835][ T1563] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.025997][ T1563] usb 10-1: Product: syz
[  165.030249][ T1563] usb 10-1: Manufacturer: syz
[  165.034925][ T1563] usb 10-1: SerialNumber: syz
[  165.071835][    T6] usb 3-1: USB disconnect, device number 19
[  165.120907][ T1590] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.131865][ T1590] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.141630][ T1590] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  165.154508][ T1590] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  165.163548][ T1590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.172028][ T1590] usb 9-1: config 0 descriptor??
[  165.243547][ T1563] usb 10-1: selecting invalid altsetting 0
[  165.249423][ T1563] usb 10-1: Found UVC 7.01 device syz (8086:0b07)
[  165.255926][ T1563] usb 10-1: No valid video chain found.
[  165.263379][ T1563] usb 10-1: USB disconnect, device number 19
[  165.579410][ T1590] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving
[  165.583293][ T9250] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  165.589242][ T1590] plantronics 0003:047F:FFFF.0033: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  165.595774][ T9250] SELinux: failed to load policy
[  165.852273][ T4109] usb 9-1: USB disconnect, device number 21
[  165.865911][ T9285] SELinux:  Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped).
[  165.927739][ T9291] syz.9.3827[9291] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.927801][ T9291] syz.9.3827[9291] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  166.363843][ T9308] loop8: detected capacity change from 0 to 512
[  166.385935][ T9308] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  166.403773][ T9308] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.3834: Unimplemented hash flags: 0x0001
[  166.416054][ T9308] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3834: Corrupt directory, running e2fsck is recommended
[  166.429043][ T9308] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.3834: path /478/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  166.450136][ T1590] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  166.478152][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  166.629730][ T1590] usb 10-1: Using ep0 maxpacket: 32
[  166.637278][ T1590] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.648462][ T1590] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.658433][ T1590] usb 10-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  166.667626][ T1590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.692729][ T1590] usb 10-1: config 0 descriptor??
[  166.805324][ T9351] input: syz0 as /devices/virtual/input/input51
[  167.108082][ T1590] input: HID 054c:03d5 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:03D5.0034/input/input52
[  167.141635][ T1590] sony 0003:054C:03D5.0034: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.9-1/input0
[  167.150589][ T9367] device bridge0 entered promiscuous mode
[  167.171433][ T9366] device bridge0 left promiscuous mode
[  167.307317][  T289] usb 10-1: USB disconnect, device number 20
[  167.485454][ T9395] overlayfs: missing 'lowerdir'
[  167.547077][ T9408] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3875'.
[  167.569423][ T9408] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3875'.
[  167.617666][ T9420] bridge0: port 3(vlan2) entered blocking state
[  167.624637][ T9420] bridge0: port 3(vlan2) entered disabled state
[  167.631515][ T9420] device vlan2 entered promiscuous mode
[  167.641828][ T9420] device vlan1 entered promiscuous mode
[  167.647608][ T9420] bridge0: port 3(vlan2) entered blocking state
[  167.653880][ T9420] bridge0: port 3(vlan2) entered forwarding state
[  167.883250][ T9427] loop7: detected capacity change from 0 to 4096
[  167.893557][ T9433] loop9: detected capacity change from 0 to 16
[  167.920444][  T102] udevd[102]: worker [2865] terminated by signal 33 (Unknown signal 33)
[  167.929279][ T9433] erofs: (device loop9): mounted with root inode @ nid 36.
[  167.939704][  T102] udevd[102]: worker [2865] failed while handling '/devices/virtual/block/loop9'
[  167.951202][ T9427] EXT4-fs (loop7): Test dummy encryption mode enabled
[  167.977811][ T9427] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003]
[  167.992703][ T9427] System zones: 0-5
[  168.012676][ T9427] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  168.060933][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  168.060945][   T28] audit: type=1400 audit(2000000087.596:1820): avc:  denied  { setattr } for  pid=9426 comm="syz.7.3884" name=".pending_reads" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  168.064616][ T9439] loop8: detected capacity change from 0 to 512
[  168.106675][ T8328] EXT4-fs (loop7): unmounting filesystem.
[  168.123695][ T9439] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  168.135548][ T9439] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.173425][   T28] audit: type=1400 audit(2000000087.706:1821): avc:  denied  { create } for  pid=9438 comm="syz.8.3890" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  168.194153][ T9439] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #2: comm syz.8.3890: corrupted inode contents
[  168.221071][ T9439] EXT4-fs error (device loop8): ext4_dirty_inode:6091: inode #2: comm syz.8.3890: mark_inode_dirty error
[  168.250473][ T9439] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #2: comm syz.8.3890: corrupted inode contents
[  168.280688][ T9439] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.3890: mark_inode_dirty error
[  168.311917][   T28] audit: type=1400 audit(2000000087.846:1822): avc:  denied  { rename } for  pid=9438 comm="syz.8.3890" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  168.348740][ T3472] EXT4-fs (loop8): unmounting filesystem.
[  168.365244][   T28] audit: type=1400 audit(2000000087.866:1823): avc:  denied  { rmdir } for  pid=9438 comm="syz.8.3890" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  168.594735][   T28] audit: type=1400 audit(2000000088.126:1824): avc:  denied  { connect } for  pid=9449 comm="syz.8.3894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  168.599590][ T9451] bridge0: port 3(vlan2) entered blocking state
[  168.641213][ T9451] bridge0: port 3(vlan2) entered disabled state
[  168.649902][   T28] audit: type=1400 audit(2000000088.146:1825): avc:  denied  { ioctl } for  pid=9449 comm="syz.8.3894" path="socket:[55031]" dev="sockfs" ino=55031 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  168.680099][ T9451] device vlan2 entered promiscuous mode
[  168.693528][ T9451] device vlan1 entered promiscuous mode
[  168.705635][ T9451] bridge0: port 3(vlan2) entered blocking state
[  168.711932][ T9451] bridge0: port 3(vlan2) entered forwarding state
[  168.746048][ T9453] netlink: 10 bytes leftover after parsing attributes in process `syz.9.3893'.
[  168.775230][ T9453] netlink: 10 bytes leftover after parsing attributes in process `syz.9.3893'.
[  168.866390][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  168.946652][   T28] audit: type=1400 audit(2000000088.476:1826): avc:  denied  { create } for  pid=9483 comm="syz.7.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  168.970249][   T28] audit: type=1400 audit(2000000088.506:1827): avc:  denied  { sys_admin } for  pid=9483 comm="syz.7.3908" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  169.027629][   T28] audit: type=1400 audit(2000000088.536:1828): avc:  denied  { bind } for  pid=9489 comm="syz.5.3910" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  169.075519][   T28] audit: type=1400 audit(2000000088.536:1829): avc:  denied  { node_bind } for  pid=9489 comm="syz.5.3910" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  169.100192][ T9501] binder: 9500:9501 ioctl c0306201 200000000480 returned -14
[  169.230439][ T9518] loop7: detected capacity change from 0 to 256
[  169.266011][ T9518] FAT-fs (loop7): Directory bread(block 64) failed
[  169.278034][ T9518] FAT-fs (loop7): Directory bread(block 65) failed
[  169.289693][ T9518] FAT-fs (loop7): Directory bread(block 66) failed
[  169.299660][ T9518] FAT-fs (loop7): Directory bread(block 67) failed
[  169.306220][ T9518] FAT-fs (loop7): Directory bread(block 68) failed
[  169.317754][ T9492] loop9: detected capacity change from 0 to 40427
[  169.330413][ T9492] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  169.330590][ T9518] FAT-fs (loop7): Directory bread(block 69) failed
[  169.338500][ T9492] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  169.363388][ T9492] F2FS-fs (loop9): invalid crc value
[  169.369080][ T9518] FAT-fs (loop7): Directory bread(block 70) failed
[  169.375923][ T9518] FAT-fs (loop7): Directory bread(block 71) failed
[  169.383158][ T9518] FAT-fs (loop7): Directory bread(block 72) failed
[  169.390079][ T9492] F2FS-fs (loop9): Found nat_bits in checkpoint
[  169.406469][ T9518] FAT-fs (loop7): Directory bread(block 73) failed
[  169.434917][ T9520] loop8: detected capacity change from 0 to 40427
[  169.443241][ T9520] F2FS-fs (loop8): fault_type options not supported
[  169.451514][ T9520] F2FS-fs (loop8): invalid crc value
[  169.461043][ T9492] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  169.468077][ T9492] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  169.476055][ T9520] F2FS-fs (loop8): Found nat_bits in checkpoint
[  169.532301][ T9520] F2FS-fs (loop8): Start checkpoint disabled!
[  169.538944][ T9520] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  169.546946][ T4031] syz-executor: attempt to access beyond end of device
[  169.546946][ T4031] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  169.596511][   T10] kworker/u4:1: attempt to access beyond end of device
[  169.596511][   T10] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  169.909910][ T9553] loop8: detected capacity change from 0 to 256
[  170.189674][ T1590] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  170.329675][ T4109] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  170.369651][ T1590] usb 9-1: Using ep0 maxpacket: 16
[  170.375796][ T1590] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.386704][ T1590] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.396458][ T1590] usb 9-1: config 0 interface 0 has no altsetting 0
[  170.403099][ T1590] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  170.412140][ T1590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.420884][ T1590] usb 9-1: config 0 descriptor??
[  170.510768][ T4109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.521682][ T4109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.531431][ T4109] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  170.544302][ T4109] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  170.553353][ T4109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.561973][ T4109] usb 6-1: config 0 descriptor??
[  170.829050][ T1590] hid (null): invalid report_size 24934
[  170.836096][ T1590] hid (null): unknown global tag 0x9e
[  170.842467][ T1590] hid (null): unknown global tag 0xc
[  170.849009][ T1590] hid (null): unknown global tag 0xd
[  170.854461][ T1590] hid (null): bogus close delimiter
[  170.972138][ T4109] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving
[  170.980910][ T4109] plantronics 0003:047F:FFFF.0036: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  171.029119][ T1590] usb 9-1: USB disconnect, device number 22
[  171.087189][ T9604] netlink: 'syz.2.3957': attribute type 1 has an invalid length.
[  171.140676][ T9612] netlink: 'syz.2.3961': attribute type 4 has an invalid length.
[  171.260387][ T4109] usb 6-1: USB disconnect, device number 21
[  171.316992][ T9629] tipc: Enabling of bearer <ib:gretap0> rejected, media not registered
[  171.629681][ T4096] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  171.809681][ T4096] usb 3-1: Using ep0 maxpacket: 16
[  171.821398][ T4096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.849208][ T4096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.880606][ T4096] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  171.894178][ T4096] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00
[  171.905601][ T9677] netlink: 'syz.9.3990': attribute type 3 has an invalid length.
[  171.913483][ T4096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.921798][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3990'.
[  171.939022][ T4096] usb 3-1: config 0 descriptor??
[  171.944934][ T9679] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3992'.
[  172.363193][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.370347][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.395317][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.406219][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.413270][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.421051][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.428367][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.435261][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.442306][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.449249][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.456231][ T4096] wacom 0003:056A:0317.0037: unknown main item tag 0x0
[  172.463366][ T4096] wacom 0003:056A:0317.0037: Unknown device_type for 'HID 056a:0317'. Assuming pen.
[  172.482516][ T4096] wacom 0003:056A:0317.0037: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.2-1/input0
[  172.496719][ T4096] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0317.0037/input/input54
[  172.524639][ T9739] loop8: detected capacity change from 0 to 256
[  172.541417][ T9739] FAT-fs (loop8): bogus number of FAT sectors
[  172.547548][ T9739] FAT-fs (loop8): Can't find a valid FAT filesystem
[  172.566897][ T1590] usb 3-1: USB disconnect, device number 20
[  172.735956][ T9741] loop8: detected capacity change from 0 to 40427
[  172.750462][ T9741] F2FS-fs (loop8): invalid crc value
[  172.761556][ T9741] F2FS-fs (loop8): Found nat_bits in checkpoint
[  172.786588][ T9730] loop7: detected capacity change from 0 to 131072
[  172.798570][ T9730] F2FS-fs (loop7): Test dummy encryption mode enabled
[  172.808994][ T9741] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  172.817013][ T9730] F2FS-fs (loop7): invalid crc value
[  172.847770][ T9730] F2FS-fs (loop7): Found nat_bits in checkpoint
[  172.900243][ T9730] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  172.905128][   T10] kworker/u4:1: attempt to access beyond end of device
[  172.905128][   T10] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  172.964666][ T3472] syz-executor: attempt to access beyond end of device
[  172.964666][ T3472] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  172.978865][ T3472] syz-executor: attempt to access beyond end of device
[  172.978865][ T3472] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  173.102501][  T313] tipc: Disabling bearer <udp:syz2>
[  173.118067][  T313] tipc: Disabling bearer <udp:syz0>
[  173.132613][  T313] tipc: Left network mode
[  173.266680][   T28] kauditd_printk_skb: 83 callbacks suppressed
[  173.266704][   T28] audit: type=1400 audit(2000000605.795:1913): avc:  denied  { write } for  pid=9767 comm="syz.7.4025" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  173.324507][   T28] audit: type=1400 audit(2000000605.805:1914): avc:  denied  { write } for  pid=9760 comm="syz.5.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  173.418464][   T28] audit: type=1400 audit(2000000605.945:1915): avc:  denied  { mounton } for  pid=9787 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  173.440281][   T28] audit: type=1400 audit(2000000605.955:1916): avc:  denied  { module_request } for  pid=9785 comm="syz.5.4039" kmod="net-pf-16-proto-16-family-mptcp_pm" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  173.546468][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.559665][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.570518][ T9787] device bridge_slave_0 entered promiscuous mode
[  173.586545][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.597661][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.619080][   T28] audit: type=1400 audit(2000000606.145:1917): avc:  denied  { ioctl } for  pid=9792 comm="syz.2.4043" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56967 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  173.620035][ T9787] device bridge_slave_1 entered promiscuous mode
[  173.682778][   T28] audit: type=1400 audit(2000000606.185:1918): avc:  denied  { setopt } for  pid=9807 comm="syz.7.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  173.791369][   T28] audit: type=1400 audit(2000000606.325:1919): avc:  denied  { write } for  pid=9819 comm="syz.5.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  173.829415][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.836604][ T9787] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.839001][   T28] audit: type=1400 audit(2000000606.335:1920): avc:  denied  { create } for  pid=9825 comm="syz.7.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  173.843892][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.870329][ T9787] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.870616][   T28] audit: type=1400 audit(2000000606.335:1921): avc:  denied  { ioctl } for  pid=9825 comm="syz.7.4057" path="socket:[57015]" dev="sockfs" ino=57015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  173.904724][   T28] audit: type=1400 audit(2000000606.405:1922): avc:  denied  { unmount } for  pid=4031 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  173.946396][ T9837] IPv6: addrconf: prefix option has invalid lifetime
[  173.962259][ T9837] IPv6: addrconf: prefix option has invalid lifetime
[  173.971346][  T313] device vlan2 left promiscuous mode
[  173.976638][  T313] device vlan1 left promiscuous mode
[  173.988128][  T313] bridge0: port 3(vlan2) entered disabled state
[  173.996190][  T313] device bridge_slave_1 left promiscuous mode
[  174.002952][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.020415][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.038730][  T313] device veth1_macvtap left promiscuous mode
[  174.049689][  T313] device veth0_vlan left promiscuous mode
[  174.206906][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  174.224909][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.240731][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.265379][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.284095][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.302474][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.309533][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.334980][ T9848] loop9: detected capacity change from 0 to 40427
[  174.337251][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.360065][ T9848] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  174.370011][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.377243][ T9848] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  174.379994][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.393158][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.395166][ T9848] F2FS-fs (loop9): invalid crc value
[  174.424352][ T9848] F2FS-fs (loop9): Found nat_bits in checkpoint
[  174.440978][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  174.449347][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  174.457580][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  174.470655][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  174.483032][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  174.491597][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  174.504466][ T9787] device veth0_vlan entered promiscuous mode
[  174.518963][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  174.527198][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  174.559246][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  174.567288][ T9848] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  174.577080][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  174.579682][ T9848] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  174.585322][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  174.610001][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  174.629088][ T9787] device veth1_macvtap entered promiscuous mode
[  174.642361][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  174.654514][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.669889][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.701439][ T4031] syz-executor: attempt to access beyond end of device
[  174.701439][ T4031] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.723721][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.774747][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  175.064206][ T9903] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  175.085191][ T9903] incfs: Can't find or create .index dir in ./file0
[  175.098413][ T9903] incfs: mount failed -30
[  175.200459][ T9898] loop7: detected capacity change from 0 to 40427
[  175.238806][ T9898] F2FS-fs (loop7): fault_injection options not supported
[  175.257918][ T9898] F2FS-fs (loop7): invalid crc value
[  175.273879][ T9898] F2FS-fs (loop7): Found nat_bits in checkpoint
[  175.284969][ T9918] SELinux:  Context system_u:object_r:ipmi_device_t:s0 is not valid (left unmapped).
[  175.367301][ T9898] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  175.409567][ T8328] syz-executor: attempt to access beyond end of device
[  175.409567][ T8328] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.778271][ T9983] incfs: Options parsing error. -22
[  175.789973][ T9983] incfs: mount failed -22
[  176.145500][ T9985] syz.2.4125 (9985) used greatest stack depth: 21024 bytes left
[  176.355437][T10027] loop7: detected capacity change from 0 to 40427
[  176.371894][T10027] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  176.388554][T10027] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  176.414176][T10027] F2FS-fs (loop7): Found nat_bits in checkpoint
[  176.456961][T10027] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  176.464269][T10027] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  176.540070][ T8328] syz-executor: attempt to access beyond end of device
[  176.540070][ T8328] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  176.562639][    T6] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  176.580696][    T6] hid-generic 0000:0000:0000.0038: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  176.709724][ T2268] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  176.764894][T10093] loop7: detected capacity change from 0 to 512
[  176.771975][T10093] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  176.780942][T10093] EXT4-fs (loop7): invalid journal inode
[  176.786675][T10093] EXT4-fs (loop7): can't get journal size
[  176.793531][T10093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[  176.802027][T10093] System zones: 1-12, 13-13
[  176.807534][T10093] EXT4-fs (loop7): 1 truncate cleaned up
[  176.813402][T10093] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  176.830854][ T8328] EXT4-fs (loop7): unmounting filesystem.
[  176.900727][ T2268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  176.922386][ T2268] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  176.935973][ T2268] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  176.945955][ T2268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.954819][T10117] SELinux: failed to load policy
[  176.960487][ T2268] usb 3-1: config 0 descriptor??
[  176.966209][T10062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  176.998885][T10119] input: syz1 as /devices/virtual/input/input57
[  177.035161][T10121] loop9: detected capacity change from 0 to 256
[  177.115268][T10124] loop9: detected capacity change from 0 to 8192
[  177.121978][T10124] FAT-fs (loop9): Unrecognized mount option "017777777777777777777770x0000000000000000" or missing value
[  177.163963][T10130] loop9: detected capacity change from 0 to 256
[  177.208714][T10136] loop7: detected capacity change from 0 to 1024
[  177.215444][T10136] EXT4-fs: Ignoring removed orlov option
[  177.221189][T10136] EXT4-fs: Ignoring removed nomblk_io_submit option
[  177.229732][ T1563] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  177.231275][T10135] loop9: detected capacity change from 0 to 2048
[  177.239176][T10136] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  177.243739][  T289] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  177.274639][ T8328] EXT4-fs (loop7): unmounting filesystem.
[  177.304046][ T3028] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  177.384944][ T2268] cherry 0003:046A:0023.0039: hidraw0: USB HID vff.fa Device [HID 046a:0023] on usb-dummy_hcd.2-1/input0
[  177.385618][T10152] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4200'.
[  177.409789][ T1563] usb 2-1: Using ep0 maxpacket: 8
[  177.416791][ T1563] usb 2-1: config 0 has no interfaces?
[  177.427218][ T1563] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  177.440680][  T289] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  177.447552][ T1563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.457157][  T289] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  177.467552][ T1563] usb 2-1: Product: syz
[  177.477533][ T1563] usb 2-1: Manufacturer: syz
[  177.481391][  T289] usb 6-1: config 220 has no interface number 2
[  177.487619][ T1563] usb 2-1: SerialNumber: syz
[  177.498367][ T1563] usb 2-1: config 0 descriptor??
[  177.508125][T10157] loop9: detected capacity change from 0 to 256
[  177.508167][  T289] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  177.536212][  T289] usb 6-1: config 220 interface 0 has no altsetting 0
[  177.543139][  T289] usb 6-1: config 220 interface 76 has no altsetting 0
[  177.550111][  T289] usb 6-1: config 220 interface 1 has no altsetting 0
[  177.570167][  T289] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  177.579529][  T289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.593136][  T289] usb 6-1: Product: syz
[  177.597462][  T289] usb 6-1: Manufacturer: syz
[  177.598014][ T1563] usb 3-1: USB disconnect, device number 21
[  177.602116][  T289] usb 6-1: SerialNumber: syz
[  177.723748][ T1590] usb 2-1: USB disconnect, device number 3
[  177.817123][  T289] usb 6-1: selecting invalid altsetting 0
[  177.823511][  T289] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  177.830493][  T289] usb 6-1: No valid video chain found.
[  177.853140][  T289] usb 6-1: USB disconnect, device number 22
[  177.976867][T10182] loop7: detected capacity change from 0 to 4096
[  177.990811][T10182] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  178.003640][T10182] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #15: comm syz.7.4212: corrupted inode contents
[  178.016026][T10182] EXT4-fs error (device loop7): ext4_dirty_inode:6091: inode #15: comm syz.7.4212: mark_inode_dirty error
[  178.027722][T10182] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #15: comm syz.7.4212: corrupted inode contents
[  178.040298][T10182] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.4212: mark_inode_dirty error
[  178.051861][T10182] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #15: comm syz.7.4212: corrupted inode contents
[  178.064306][T10182] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.4212: mark_inode_dirty error
[  178.075898][T10182] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #15: comm syz.7.4212: corrupted inode contents
[  178.088103][T10182] EXT4-fs error (device loop7): ext4_truncate:4313: inode #15: comm syz.7.4212: mark_inode_dirty error
[  178.099512][T10182] EXT4-fs error (device loop7) in ext4_setattr:5630: Corrupt filesystem
[  178.108198][T10185] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #15: comm syz.7.4212: corrupted inode contents
[  178.134658][ T8328] EXT4-fs (loop7): unmounting filesystem.
[  178.243926][T10198] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  178.251667][T10198] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  178.258871][T10198] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  178.398526][   T28] kauditd_printk_skb: 139 callbacks suppressed
[  178.398541][   T28] audit: type=1400 audit(2000000610.925:2062): avc:  denied  { name_bind } for  pid=10213 comm="syz.2.4225" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  178.454442][   T28] audit: type=1400 audit(2000000610.985:2063): avc:  denied  { mount } for  pid=10219 comm="syz.1.4228" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  178.486241][   T28] audit: type=1400 audit(2000000611.015:2064): avc:  denied  { mounton } for  pid=10219 comm="syz.1.4228" path="/28/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  178.539688][   T28] audit: type=1400 audit(2000000611.045:2065): avc:  denied  { unmount } for  pid=9787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  178.634470][T10235] xt_hashlimit: size too large, truncated to 1048576
[  178.706863][   T28] audit: type=1400 audit(2000000611.235:2066): avc:  denied  { create } for  pid=10241 comm="syz.5.4238" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  178.779161][   T28] audit: type=1400 audit(2000000611.305:2067): avc:  denied  { create } for  pid=10247 comm="syz.5.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  178.814189][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4239'.
[  178.838701][   T28] audit: type=1400 audit(2000000611.335:2068): avc:  denied  { setopt } for  pid=10247 comm="syz.5.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  178.983927][   T28] audit: type=1400 audit(2000000611.515:2069): avc:  denied  { read write } for  pid=10257 comm="syz.7.4245" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  179.017238][   T28] audit: type=1400 audit(2000000611.545:2070): avc:  denied  { open } for  pid=10257 comm="syz.7.4245" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  179.096265][   T28] audit: type=1400 audit(2000000611.625:2071): avc:  denied  { create } for  pid=10261 comm="syz.1.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  179.423027][T10301] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  179.479686][ T4096] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  179.660790][ T4096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  179.671745][ T4096] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  179.680969][ T4096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.690334][ T4096] usb 6-1: config 0 descriptor??
[  179.696966][T10270] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  179.732009][  T289] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  179.756842][ T4031] ------------[ cut here ]------------
[  179.762739][ T4031] WARNING: CPU: 0 PID: 4031 at fs/inode.c:332 drop_nlink+0xc5/0x110
[  179.771084][ T4031] Modules linked in:
[  179.774971][ T4031] CPU: 0 PID: 4031 Comm: syz-executor Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[  179.785050][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  179.795170][ T4031] RIP: 0010:drop_nlink+0xc5/0x110
[  179.800307][ T4031] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 73 ee f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7b 99 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[  179.820006][ T4031] RSP: 0018:ffffc9000858fc38 EFLAGS: 00010293
[  179.826100][ T4031] RAX: ffffffff81c34d55 RBX: ffff888131026288 RCX: ffff888119c40000
[  179.834191][ T4031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  179.842293][ T4031] RBP: ffffc9000858fc60 R08: 0000000000000004 R09: 0000000000000003
[  179.850554][ T4031] R10: fffff520010b1f78 R11: 1ffff920010b1f78 R12: dffffc0000000000
[  179.858727][ T4031] R13: 1ffff11026204c5a R14: ffff8881310262d0 R15: 0000000000000000
[  179.866792][ T4031] FS:  000055558193e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  179.875833][ T4031] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.882497][ T4031] CR2: 00005555819614e8 CR3: 0000000129f47000 CR4: 00000000003506b0
[  179.890535][ T4031] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  179.898504][ T4031] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  179.906510][ T4031] Call Trace:
[  179.909824][ T4031]  <TASK>
[  179.912758][ T4031]  shmem_rmdir+0x5b/0x90
[  179.917028][ T4031]  vfs_rmdir+0x393/0x500
[  179.921381][ T4031]  incfs_kill_sb+0x105/0x220
[  179.926045][ T4031]  deactivate_locked_super+0xb5/0x120
[  179.931456][ T4031]  deactivate_super+0xaf/0xe0
[  179.932744][  T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.936140][ T4031]  cleanup_mnt+0x45f/0x4e0
[  179.936177][ T4031]  __cleanup_mnt+0x19/0x20
[  179.954731][ T4031]  task_work_run+0x1db/0x240
[  179.959321][ T4031]  ? __cfi_task_work_run+0x10/0x10
[  179.964469][ T4031]  ? __x64_sys_umount+0x125/0x160
[  179.969500][ T4031]  ? __cfi___x64_sys_umount+0x10/0x10
[  179.969552][  T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  179.974916][ T4031]  exit_to_user_mode_loop+0x9b/0xb0
[  179.990890][ T4031]  exit_to_user_mode_prepare+0x5a/0xa0
[  179.996354][ T4031]  syscall_exit_to_user_mode+0x1a/0x30
[  180.002088][ T4031]  do_syscall_64+0x58/0xa0
[  180.006696][ T4031]  ? clear_bhb_loop+0x15/0x70
[  180.011413][ T4031]  ? clear_bhb_loop+0x15/0x70
[  180.016095][ T4031]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.016330][  T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  180.022030][ T4031] RIP: 0033:0x7f1cbb78fc97
[  180.022122][ T4031] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  180.055801][ T4031] RSP: 002b:00007ffddcec7dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  180.057917][  T289] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  180.064247][ T4031] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1cbb78fc97
[  180.064265][ T4031] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddcec7e80
[  180.093112][ T4031] RBP: 00007ffddcec7e80 R08: 0000000000000000 R09: 0000000000000000
[  180.101128][ T4031] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddcec8f10
[  180.109110][ T4031] R13: 00007f1cbb81089d R14: 000000000002be11 R15: 00007ffddcec8f50
[  180.117132][ T4031]  </TASK>
[  180.120177][ T4031] ---[ end trace 0000000000000000 ]---
[  180.125731][ T4031] ==================================================================
[  180.133799][ T4031] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60
[  180.140056][ T4031] Write of size 4 at addr 0000000000000170 by task syz-executor/4031
[  180.148114][ T4031] 
[  180.150432][ T4031] CPU: 1 PID: 4031 Comm: syz-executor Tainted: G        W          6.1.134-syzkaller-00012-g646380b087a5 #0
[  180.161878][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  180.171928][ T4031] Call Trace:
[  180.175222][ T4031]  <TASK>
[  180.178139][ T4031]  __dump_stack+0x21/0x24
[  180.182481][ T4031]  dump_stack_lvl+0xee/0x150
[  180.187062][ T4031]  ? __cfi_dump_stack_lvl+0x8/0x8
[  180.192081][ T4031]  ? ihold+0x20/0x60
[  180.195975][ T4031]  ? ihold+0x20/0x60
[  180.199869][ T4031]  print_report+0x3d/0x60
[  180.204191][ T4031]  kasan_report+0x122/0x150
[  180.208687][ T4031]  ? ihold+0x20/0x60
[  180.212581][ T4031]  kasan_check_range+0x280/0x290
[  180.217504][ T4031]  __kasan_check_write+0x14/0x20
[  180.222450][ T4031]  ihold+0x20/0x60
[  180.226171][ T4031]  vfs_rmdir+0x25f/0x500
[  180.230409][ T4031]  incfs_kill_sb+0x105/0x220
[  180.234991][ T4031]  deactivate_locked_super+0xb5/0x120
[  180.240368][ T4031]  deactivate_super+0xaf/0xe0
[  180.245041][ T4031]  cleanup_mnt+0x45f/0x4e0
[  180.249454][ T4031]  __cleanup_mnt+0x19/0x20
[  180.253881][ T4031]  task_work_run+0x1db/0x240
[  180.258458][ T4031]  ? __cfi_task_work_run+0x10/0x10
[  180.263558][ T4031]  ? __x64_sys_umount+0x125/0x160
[  180.268573][ T4031]  ? __cfi___x64_sys_umount+0x10/0x10
[  180.273939][ T4031]  exit_to_user_mode_loop+0x9b/0xb0
[  180.279122][ T4031]  exit_to_user_mode_prepare+0x5a/0xa0
[  180.284565][ T4031]  syscall_exit_to_user_mode+0x1a/0x30
[  180.290017][ T4031]  do_syscall_64+0x58/0xa0
[  180.294429][ T4031]  ? clear_bhb_loop+0x15/0x70
[  180.299095][ T4031]  ? clear_bhb_loop+0x15/0x70
[  180.303756][ T4031]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.309641][ T4031] RIP: 0033:0x7f1cbb78fc97
[  180.314048][ T4031] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  180.333638][ T4031] RSP: 002b:00007ffddcec7dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  180.342044][ T4031] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1cbb78fc97
[  180.350002][ T4031] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddcec7e80
[  180.357961][ T4031] RBP: 00007ffddcec7e80 R08: 0000000000000000 R09: 0000000000000000
[  180.365921][ T4031] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddcec8f10
[  180.373882][ T4031] R13: 00007f1cbb81089d R14: 000000000002be11 R15: 00007ffddcec8f50
[  180.381845][ T4031]  </TASK>
[  180.384847][ T4031] ==================================================================
[  180.393753][ T4031] Disabling lock debugging due to kernel taint
[  180.395766][ T4096] uclogic 0003:5543:0003.003A: item fetching failed at offset 0/1
[  180.400817][ T4031] BUG: kernel NULL pointer dereference, address: 0000000000000170
[  180.415581][ T4031] #PF: supervisor write access in kernel mode
[  180.421636][ T4031] #PF: error_code(0x0002) - not-present page
[  180.427600][ T4031] PGD 12bea9067 P4D 12bea9067 PUD 0 
[  180.432878][ T4031] Oops: 0002 [#1] PREEMPT SMP KASAN
[  180.438057][ T4031] CPU: 0 PID: 4031 Comm: syz-executor Tainted: G    B   W          6.1.134-syzkaller-00012-g646380b087a5 #0
[  180.449487][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  180.459523][ T4031] RIP: 0010:ihold+0x26/0x60
[  180.464028][ T4031] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 90 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 b0 e5 f0 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1
[  180.483619][ T4031] RSP: 0018:ffffc9000858fc78 EFLAGS: 00010246
[  180.489673][ T4031] RAX: ffff888119c40000 RBX: 0000000000000000 RCX: ffff888119c40000
[  180.497643][ T4031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  180.505604][ T4031] RBP: ffffc9000858fc88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd
[  180.513566][ T4031] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff888131026294
[  180.521524][ T4031] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  180.529482][ T4031] FS:  000055558193e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  180.538398][ T4031] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.544991][ T4031] CR2: 0000000000000170 CR3: 0000000129f47000 CR4: 00000000003506b0
[  180.552971][ T4031] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  180.560930][ T4031] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  180.568887][ T4031] Call Trace:
[  180.572152][ T4031]  <TASK>
[  180.575070][ T4031]  vfs_rmdir+0x25f/0x500
[  180.579305][ T4031]  incfs_kill_sb+0x105/0x220
[  180.583885][ T4031]  deactivate_locked_super+0xb5/0x120
[  180.589243][ T4031]  deactivate_super+0xaf/0xe0
[  180.593908][ T4031]  cleanup_mnt+0x45f/0x4e0
[  180.598317][ T4031]  __cleanup_mnt+0x19/0x20
[  180.602724][ T4031]  task_work_run+0x1db/0x240
[  180.607305][ T4031]  ? __cfi_task_work_run+0x10/0x10
[  180.612409][ T4031]  ? __x64_sys_umount+0x125/0x160
[  180.617424][ T4031]  ? __cfi___x64_sys_umount+0x10/0x10
[  180.622791][ T4031]  exit_to_user_mode_loop+0x9b/0xb0
[  180.627979][ T4031]  exit_to_user_mode_prepare+0x5a/0xa0
[  180.633430][ T4031]  syscall_exit_to_user_mode+0x1a/0x30
[  180.638883][ T4031]  do_syscall_64+0x58/0xa0
[  180.643293][ T4031]  ? clear_bhb_loop+0x15/0x70
[  180.647955][ T4031]  ? clear_bhb_loop+0x15/0x70
[  180.652622][ T4031]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.658510][ T4031] RIP: 0033:0x7f1cbb78fc97
[  180.662908][ T4031] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  180.682586][ T4031] RSP: 002b:00007ffddcec7dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  180.690999][ T4031] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1cbb78fc97
[  180.698954][ T4031] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddcec7e80
[  180.706911][ T4031] RBP: 00007ffddcec7e80 R08: 0000000000000000 R09: 0000000000000000
[  180.714867][ T4031] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddcec8f10
[  180.722832][ T4031] R13: 00007f1cbb81089d R14: 000000000002be11 R15: 00007ffddcec8f50
[  180.730795][ T4031]  </TASK>
[  180.733800][ T4031] Modules linked in:
[  180.737691][ T4031] CR2: 0000000000000170
[  180.741856][ T4031] ---[ end trace 0000000000000000 ]---
[  180.747290][ T4031] RIP: 0010:ihold+0x26/0x60
[  180.751789][ T4031] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 90 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 b0 e5 f0 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1
[  180.771378][ T4031] RSP: 0018:ffffc9000858fc78 EFLAGS: 00010246
[  180.777427][ T4031] RAX: ffff888119c40000 RBX: 0000000000000000 RCX: ffff888119c40000
[  180.785383][ T4031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  180.793341][ T4031] RBP: ffffc9000858fc88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd
[  180.801295][ T4031] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff888131026294
[  180.809252][ T4031] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  180.817204][ T4031] FS:  000055558193e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  180.826120][ T4031] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.832691][ T4031] CR2: 0000000000000170 CR3: 0000000129f47000 CR4: 00000000003506b0
[  180.840656][ T4031] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  180.848610][ T4031] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  180.856572][ T4031] Kernel panic - not syncing: Fatal exception
[  180.862991][ T4031] Kernel Offset: disabled
[  180.867305][ T4031] Rebooting in 86400 seconds..