last executing test programs:

1m42.663075586s ago: executing program 32 (id=73):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x6, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x94}]}, 0x2c}}, 0x4000080)

1m41.165816522s ago: executing program 33 (id=101):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2b01094, 0x0)

1m18.340420737s ago: executing program 34 (id=520):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0xea60})

1m18.118104073s ago: executing program 35 (id=526):
mount$incfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x4)

1m11.816430543s ago: executing program 36 (id=606):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000000c0)={0x6666666666667fd, 0x0, [{0x80000001, 0x1, 0x5, 0x3, 0x9, 0x6, 0x7fffffff}, {0x40000001, 0xff, 0x3, 0x3, 0x1, 0x368, 0x1}, {0x2, 0x0, 0x0, 0x400007, 0x8000, 0x5, 0x7}, {0x80000000, 0xb, 0x2, 0x80000001, 0xffffffff, 0xd3, 0x401}, {0x80000001, 0x8, 0x5, 0x0, 0x8, 0x5, 0xc6}]})
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)

40.806958194s ago: executing program 2 (id=1121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})

40.628509099s ago: executing program 2 (id=1130):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0xf5)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x7fff, 0x18)

40.526315351s ago: executing program 2 (id=1132):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

40.379915724s ago: executing program 2 (id=1137):
unshare(0x20000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

40.333030406s ago: executing program 37 (id=1137):
unshare(0x20000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

35.9557754s ago: executing program 9 (id=1226):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = open(&(0x7f00000002c0)='./file1\x00', 0x14937e, 0x80)
unshare(0x6020400)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r0, 0x0, 0x20})

35.387614664s ago: executing program 9 (id=1242):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00"], 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000100))

35.182742389s ago: executing program 9 (id=1234):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4af, &(0x7f0000000ec0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x5c)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

34.957391134s ago: executing program 9 (id=1239):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x6, {0xc, 0x6, "fdcd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0)

34.669039451s ago: executing program 9 (id=1243):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x0)

34.594825863s ago: executing program 38 (id=1243):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x0)

32.63738848s ago: executing program 1 (id=1274):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff2e)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r0}, 0xc)

32.6371836s ago: executing program 1 (id=1275):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="66440f38050666baf80cb844122e83ef66bafc0cedc7442400f3000000c744240201000000ff2c24440f20c0350b000000440f22c0c4821d932c68f742dfed0000000f8100780000660f3a417af1ed2e660fe9660166baf80cb8ff0ae78bef66bafc0cec", 0x64}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32.484676953s ago: executing program 1 (id=1276):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
ioctl$TCSETAF(r0, 0x5408, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
dup3(0xffffffffffffffff, r0, 0x0)

32.461581944s ago: executing program 1 (id=1277):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f00000002c0)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

32.309429247s ago: executing program 1 (id=1278):
r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

32.269630878s ago: executing program 1 (id=1280):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r1 = syz_open_pts(r0, 0xa0200)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

32.20439819s ago: executing program 39 (id=1280):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r1 = syz_open_pts(r0, 0xa0200)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

25.466510971s ago: executing program 6 (id=1403):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022260000008601002b3b340d93194d2a"], 0x0}, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)

23.372097471s ago: executing program 6 (id=1445):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=")
getuid()
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
chown(&(0x7f0000000080)='./file1\x00', r1, r2)

23.00145707s ago: executing program 6 (id=1451):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, 0x0}, 0x94)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff50, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0x11}, 0x401}], 0x27, 0x40000102, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0)

22.901438212s ago: executing program 6 (id=1452):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000240)='.\x00')

22.831148444s ago: executing program 6 (id=1454):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x4)
fchdir(r1)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')

22.767789596s ago: executing program 6 (id=1457):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x708a, &(0x7f0000000ac0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x356, &(0x7f0000000140)="$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")
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

22.718667377s ago: executing program 40 (id=1457):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x708a, &(0x7f0000000ac0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x356, &(0x7f0000000140)="$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")
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

6.751314508s ago: executing program 5 (id=1828):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000002080)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x104, 0x1)
getdents64(r0, 0x0, 0x4f)

6.640957271s ago: executing program 5 (id=1830):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x84)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001500)={0x8, {"b3bee32dac2e502e708c096ecc6de8a230b9e77543f14fad01357ddae768d969de429138357bad6f0e5b2c307febe0745f5ebe485c5175f5e44aed1701eca534cba0f7bdbdd89e69eea05afdc7e609f79da378fcddf538fb1605b93abc4facdb1651ea92dbf1ee5fbf926756181cc856a7180383cc8fa6bd779807ed2cb16313ed848fb31b4f2c1789cd778442ecc18e886a8f17e7324a0b0368a61e5a5b489b368b4ae94007be95171f76c7be5f1a79504db562ea5d4465ca40a0514ee3929ea8973f2973df10d799f2c4d47002614fde6574cffa43744b1bd2a86183fc0fcf6592323db188ee0e72e7a40376b6cd44b3ab2ea3e4f6ce96c17bd465b80ba41efdaa9bd8a707961c0544896d04574b35b49db03cb6a7ddf07d5832dbcebf635e9e24c306235096ed6002e81074a5742d219a167699633e988352e4c22d796bc39e18d24923b0db9a3a529d99cf737fcb5c706e91b4311e2c32508470fdbf7cb03cf6340ec808a5fd185913d017aaf0eb25b839d1a9099034b1bbe098121fcd5fb88f177fb9b2a28b20582b4045c53e63e2d72ef4bef4240cdf0a833aa69493ae3e9e6a7d65772f527b8ec51f42e3e2d7bf2bcf4a5c19f6f8ae852a1fc6e8441a1edbd9d62de39a821c1930afb1e857fb95a91e46473bd287a14443e9c0cc14b1619e29495206cafd727980489755691148a556b509e2a3fdd0aa8b698ef53563407b8a93c289ff8948c41a97abfe604dab2602398925169801fa0946725cdb5485cf1018ad1c1b73a31fdd792ee9928ad35faa0eba1d977735e773da5b2ab28f75a0c1a130b1bf116e73d0632e96d2e3897afada198467e0abcf5726b2b20b338a3f9e1ac005608eb83cbf51dde661ac6a246c77ff17b5a6339535fb38f114ce2eb6f06e4d57799e90ddec6083f2932dbe77d773d12fa787d60d702c2deaf90a03da94eccc5c5d13ac3a084b20b08c3052b79a47739e72465735c8816feebef828aabdaa3c4b79b58b15dc433b8e3fec32215ea566d3a0111b23065d6014fc457f255c399674525b5518c986d5815a9d1cf0b5117c9c11ce651898daa4e0f19f9c938e96bcc778bb1c47714ac9a86e86b1f6dd75f006eec9c9e915687a3d9d09e4ea5076199afdb08bc6cf7a49d4acb9b9fa9f0a5c216837454b8060753eb8f71c069c5b97a92b0a5ed9ebe991296e663ba444a597fe47808c43d9886fd2b4cf8e2452a1e2b0a16d24353d5c7dfee8c0d03b7b54c29df5dde6ea178e114144ffd12d2a90c7950516a81ca5a8a0ad1e3668452c89d28beffcf1749f19d9efb6314591c1fa24acc9e1da73a63fa0acb6567a726b491deb88906330ab050b9c61c92786c56350189c8a9f6b05e02c5fdae3b1627c67b3cc802a716badef6209eef87b4aa11857085ec16a46634c239f78df1cae1a1a2ebb803266d953701b6830993b866e1b88abef8d5c2a37dabe87b8b0ca6cdeebb0b3c02641476638320ec28d618acc0a598a890ae3fa98c651d23933b2033197b1eb229ff5ceb090465d850d58e243f111261fdab0c59418b5df50019d72bba63e3aa7fcb4ea4379dec68cafe1c637062e96889045a7da8487cf2060f5905edcc7f948a3682e7cafb958526d8fe0542971de1199fdc4634677a3cb185e7b3be5ae5f0d3afd1cf601d3523c94d629e65d3a919d5e6fc1d8cdafabd33fac406cda7f8b8c75b1329959f2abdf4095188d2c4e7d7941cc238289eb6c49cbed93fec57a06becf1fd3663ed1402d099aa2d1c9be2c6b10075dcb31e1f637ac6f53be7248ff9034ceda7390371da97cb9b19ae7778cce2c6d6e257321a7998251d6cee1bafbf247c325aca6c97c80e15b88161b3629684b3b1e8ba1c672faf5afbf3032ddfa9ca42eea58f9db4d17b8580f3dc80b044777b8bf558611a1fba1fe0ef4bf8e23f484f249a039f9a77fed952b09786db6f6c34326340d224d4c3da5bf3b270c1d6052795a0f55c124d8054b46067877c5aad46938a8c58365120b682eebb04bd91557e47e24d985309be71efbd7d28eda6a6b14e905872a42b977381acf7d5b82122aa1484a47a0647b6164ffe24e8b20f9b1abee8e1657da6cb07b116d4fc9445a602ce4b193ca2f6c1af91823c65a801c67ebc57c07ebf076964ec62ca355ae295c85a777a52198287c3d304ee21e11e16aa7751a133ded7324ef25fab7d2ff1c325d187330108370c00916391ff9568592b2c905d905a4603143d8f0cae8b654d9b7e90dedabb46a754050d8873b3cbb07eb92367b99542d346672296b838c36ad500b2f70ee413a36286d297d6b7eb050af2a245ec0b1574a597317b92b2ddc370baa5e661be5dbadc772ca95b29627444c12216127fa588a087dddb86399649fa21ac8ef2208736beeac20fdd76ab3c51c7997dab9d631385ad9a2150d35d61e565763e44db7f19a3d7021fe14e41258d17ccdd116c0c571f2c3dbaa48d4c461df279d486fa947fb91d03ade2ddadd57248f2b28379647cb9634fdd12667ba1a83e2c64f5a28844dc035246735f20c981e5d752751f4d8d4bda90bcd6eab87929c41ce0dbf1c2e093d7c5149344b40e855dfa15f9d5a4f5e5407dbb425b825a5651907d61a33aefad314a1aef754c75c37831aefe3e261dac8fec32087cb718ae25e236e9843d1e6e60159a0f751b8a41b767e511888c48c0df74ee3785ec574765cd1eddb4093b3d2708e4ee393791756964c25d915da8a6df7a4a7904e3a562ea40bfdaf3fb3b09a4545e9bcab101c5ef7a0d9901daa7279e26cae20ccefa60ebdb2908138c3c76463510fcb04f91a458a6585329af4975a79972e1b75368bb3e1d18ff6efc511b7f83b5270f2a82e9988ec21ad82b4b02a7d8085b84231c2d64969b058d27d66c76d078bab90d3ce03896af191139fbc6890b37fe9481cade168a4168bcd553cd3a0f896ee675d32802b5725e72bcdaa1aabcb1a8d8fab6ccc06736c8f0a74487677ce36354220116be220f3c691cafcc100b7f65d20b14c04ae283b870c5f9e0b16e0e132683619fffc71605b0c67c00ce0b92ba0138416bc8fa68fd48948cda247164839fef0783d7b35d7923c72d68bc23b7605376c31016384f7da438b1bdb467fe0e44c5525e86520a552dc731a23c3b0c876f35861288e688f1bcb54d2dfa260d72cd11d9ed1321b7342d9821c3a7c1d7c3da73b04c4a4f1806a0d48bc09240f4ac443b9839dd442f98a4f7acd8e95b19febd4924a4861770f2a21eda35c4b7a57f06c084e3b6d2322868a0bd73f698215c182af2a26676db8a883aedd2c898ec764fca0ee29ae3abbd6513e47ffaf4b406bb2c93c5a1e73c7cf2f275e7a5589f9f56be7d0fcf72faa02d7d50b7c7449f59eef5ca4f431317b1b4ade8a31e567ede969b9cfaa79d57a2f5fe01d4816e44e8db9fad25ace0a307d8a15a53c5d2aed77e0fcd9f65eef44e923e79dd57efc3c015fa3569145514f0b403646ea2d7132cbcc93a4b41b5268d93b1e53199e6606ac55d637840bd3b9e823c3591b7c64a81a2e9774d7a7df8017df5762c92e86d835f24593fba220f7b4d58d558dc9ca000fb7bf919b10c9ca964597b5b4aecc9f99fe99e828a9d2f2383dff1413d37f6d4afcf1f142e83b082dd4936686c8fa9a24df12170beefda55b4a51703b90794d19ba9df5b48ceca0529c1a0857c4b7aa3d9b8753cffb3d30aa9c62f6403b02bb3313e063c5463f214984df52dbfbdb423c262ebd1966a8877d7f3d9d7884fff58572be602d5e22c38ebb07461be565503505179b374e906147859cb4bd40add2b6eaec7afdb2f3f15b4a3430500878b87d234dc8df69ca7e4e5e6b5e14a4b5317e21700e38b23817e0d53df846a223ce537c199752dd57da7438da296afa80996fe26ed634f56b2fc550e3cf3ad5a804bb9e4554047e36b30960adfaa9e077c0d7266a830e307ab33326ac1818c8409e387ce8c0f52008a30e216073fb348eb0ebef24824d494f25ceac5823d8c49bf661a35e1a7faa7756d381a77309e6a0266b417ee44a2761407edd668cec580cb6f455bf6299a50c57ad9a59242d660f7bedf71e252812f4c7802469f08cf1daee90c55e28c43c56694337273c9d5653cbae45746a2a3d882f1289577c06fa99c177359ce5c79b16ca473c9834cfa9acca4cd5f3414a720a66b286cc9c63098118857f2746987179c32082a8af85da016d2365f349c00e14cc56246ae8d25e995321dac664406a2d5362bf606fdead8f0c380d4bc311275787395456223f4e490d5269b4c9a4b9daf5202d65c21fe5b7773bb2f3c220d6f0fd8279a61c781f7a7cfcc85f8085f46a6c974589fa0b9bcc209cdc4788e1df2c757a11623b3b06c126a88d21023748910674a03c6cb624f81835c15e2b8f362be470a190bfd619b1d479876b1f15160c32f356b6591c6eb4e65b736270a39d45500dd3f905a87a87df47cffb042d057f387dc30c5f25ea82b7a1110044833dd69dad0497f077aac15d805828e2e47964fa920d7f47b27c152a5071b33b69676245eff98753ea65d429c33d88a3b402147c0dd765c4b42c65e2ec8dd792c34700d584aa601c3e9452220caf6896914b94c1e26cd2531fc5e03af3c3632dbc0e6a067b5443fec51250a98312a1889e0dd5091362ed21fff83fe3b27b98308132ee0a4528a61d4042328057a47c72117f414e12272ed79a9a9089b4ae0077615b3162b33969584e87b56372793322fd1ab955e07491fbaa1d75975b9ef950c7872c614049484128546a4d1cb4f81234f0e3258d50185096fc8334e2a9011f523cc2244abc968591995674dc7b7b067fc5feb84c4262aaf0979e092d901e20d3d95da310415f02c0c8489c364c89561805e44aa793a4be5cb828a6a8a8ba6961c1e0f1e6eb19363c073b77c3f67e0be803c0867255080241e184fa51d5315023d96c0509feb253547a8a8ea729e341d5fa6e3c72dafd2ccb8409bc4d493898a91ba311c7dc0693cb5462c6018ed92e75f8a79ed625010e4b9b0691f3f51c083a24d9716c1ce306a67f20867c23f45b5104db9d901f2a1441a5357c4066b848c935e9292070c081f97560f5ca1edc54da20bba14060c976905bd279759ad1bb5b5271db952fbd9f4e13d23e3b9ac4e109a27c4c8fa60c6826dfcca5ff107618e825ed669e336d917011787ffd422a8713bca8596ad4b6a1215db9f35024045de5ab3a78c9ae7d9db0b1be47964e92566865e0d2434dad1627b9e07e5e9577198c43e955ec37527bd70e8ca22d13c7d07f6df4d4479d4436a4f0ee96ea266722a82d54ce596b5ab17cc8c1cbc94cda5f56a312e9c9155dd73ed7312ba0a86d667fac971c4009cb74d78ce18a14762b1d110d15361e4724b80fe07fb337b5ca4295d73e96975d79eb731fc4cace7c98d10b4fa1e749d2e198320c620d1354b6b7a251d96047f13b69a893c8422ca9fc4a945df6cb96f2c4df47d9af54b92d4c9863442637f5845f8f89e105558c17226fc8315b843e8350bd988df784b9d3cb4514f7adc27535c34caa5960244a7c8387982a74008dcc0b072c019a2d2efeb98be2451f5c93d42d0529d7c12c6d844601789f011aec5baa28ba26491ae58f9e5ade95c6211b8b8ed56b9106fd3356a7ac09706977a60488e9775b426e4c2f331a0c41923f90dd23d5cffb65cb12652ce6e7a6e6a011bc164b481bd1ee5be86cad39b346232a28181ea08773687729fe866b63f73fb0e5c8282c00328932cfdf8ddff2fffc21377d61c04b5842a9b6c1b246565eb0ec00", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)

6.012749886s ago: executing program 5 (id=1839):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

5.701382203s ago: executing program 5 (id=1842):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x6}], {0x4, 0x6}, [], {0x10, 0x6}, {0x20, 0x7}}, 0x2c, 0x0)
llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)

5.556582967s ago: executing program 5 (id=1847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5.481395809s ago: executing program 5 (id=1848):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0)

5.460354459s ago: executing program 41 (id=1848):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0)

3.921062196s ago: executing program 4 (id=1856):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x42)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0)

3.832097898s ago: executing program 4 (id=1859):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000002d40)=ANY=[@ANYRES64=0x0, @ANYBLOB="eac49837f7dad974766edfbdcc13d21fce89444bb55ad3c2a6796c4ddce5b1d608d03196b9685bdd58c04e929d35e8f438aa5a08f9970eb7627fb48fbcdfe17780245b8b22f6fb0837e7211b3499adc73e9ac0be7ac498749273db81872383121f26f1af0ea38d4b1cbb6b79384933c8128a90a305cdaf3ab86f0c0f086a9cb198fbbdba0d7366792371e50578ba3cb22b", @ANYRESOCT, @ANYBLOB="21df2516ba76f3585d4e474d33d5d2c687b4f8a8dbf9aa8aa30904bd422650cfe8a73da42a09733bd5070b2e6bc408fb9e0d9dabd938c0a546e26dc5337865be3fd249312672cf1acb2bb29e0f8389fb75912f3d37073257dd5d2a789f2da17eaed1e6f79eb12d8edd04af657166480478f1f6423a2d42039b81f12237fdbaac7ad3a258656bc48983684c2c705f5c8c5a68eda6e86cb454d9bda059beaa2716ed1b566be4e1941e1f198cca85955f6e6a92ad761e1d196693c00ae63bee1365423076c811d926c2ea84b7f7a8708ee9427b344c84b27eec0f2cebe4c5f748090059", @ANYRESHEX, @ANYRES16=0x0, @ANYRES64, @ANYRESDEC, @ANYBLOB="24b7e96d0be91600bd3a05478c02e5d4b453a7e5de87631d0e209d6b64544bb000000000"], 0x2, 0x21b, &(0x7f0000000840)="$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")
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

3.624122533s ago: executing program 4 (id=1865):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000280)={@val={0xa, 0x6000}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@x25={0x86dd, {0x1, 0x7, 0xf3}}}}}, 0x19)

3.523364816s ago: executing program 4 (id=1868):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="696e6c696e6563727970742c6e6f696e6c696e655f64656e7472792c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c0068f9e42d819469a61b133518a2fdff195a02ab169551ec8e5d1038e2a29605e556230ac181b672b9c209ba0802faf4390229e2a44361d033a5adc3698e6b1f9c2b84471c360f284e6d3bb4a8982de0a25c2d0fee33d7260cfe3d81617bbb6b21b8108421eede4c63c25a7028efcded0aac8a5d128166077e0012231865289f00f7906b9c1bdab7792758b5b922106ac372d3ce2b35f8f4be09093c7e96e0ebe3c6", @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESOCT, @ANYBLOB="7b8b9e407affb4c312e2a794472ad84cb6c466fab71e08651e9b7ecae7453cebf85adb690af469c97f74c350de32a3b9609cc7faaafc642e8a27a1bed058f4cdcde1a99436bd2d18176dbc5ad2d06e812ddc896b5b6149a97bb3", @ANYRES32, @ANYRESOCT, @ANYRESDEC], 0xff, 0x105a0, &(0x7f0000013200)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})

2.557433319s ago: executing program 7 (id=1881):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4)

2.444538861s ago: executing program 4 (id=1883):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000000c0)=0x44, &(0x7f0000000100)=r2}, 0x20)

2.245277536s ago: executing program 7 (id=1886):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfdcf)

2.208920157s ago: executing program 7 (id=1888):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

2.182797528s ago: executing program 7 (id=1890):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000280)='./file0/../file0\x00')
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

2.159926778s ago: executing program 7 (id=1891):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

2.060768331s ago: executing program 3 (id=1894):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0xfffffffc, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x40000000000081, 0x9, 0x5f}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)

2.028493381s ago: executing program 7 (id=1895):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x277fffffffc, 0x0, 0x1, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x247577cf, 0x0, 0x1, r2, 0x5})

2.028155031s ago: executing program 3 (id=1896):
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00')
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="200a09000000090902"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.947465993s ago: executing program 42 (id=1895):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x277fffffffc, 0x0, 0x1, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x247577cf, 0x0, 0x1, r2, 0x5})

1.940900994s ago: executing program 4 (id=1898):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101})

1.877999095s ago: executing program 43 (id=1898):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101})

1.65104866s ago: executing program 0 (id=1903):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
io_submit(0x0, 0x1, &(0x7f0000002380)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x13b8, 0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x3}])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1)

1.613187121s ago: executing program 0 (id=1905):
socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}})

1.361325717s ago: executing program 0 (id=1910):
r0 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)

1.278377509s ago: executing program 0 (id=1913):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\xa0\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\x02\xb3\x1d\xfai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D')
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001d80)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3<r\xbc\xfe\x00\x00\x00\x04\xbb\x0642\x9c\x1aQ\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a  \x9a\x9f\xfc\"\xee\xc4\x93Q\x82,\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91')

1.263430509s ago: executing program 8 (id=1914):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

1.198330081s ago: executing program 0 (id=1915):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)

1.188178411s ago: executing program 8 (id=1916):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x406, r0)
r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = getpid()
kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, &(0x7f0000000100)={r1, r2})

1.067751704s ago: executing program 8 (id=1917):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r2, 0x4b3a, 0x1)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b2338f70e06d038e7ff7fc6e5539b3250078b089b3908386d090890e0878f0e1ac6e7049b3367959b619a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

1.033034235s ago: executing program 0 (id=1918):
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0xca460fbeb54f06a, 0x31, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.011859565s ago: executing program 8 (id=1919):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2229, &(0x7f0000002400)=ANY=[], 0x0)

982.696026ms ago: executing program 8 (id=1920):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x1000006, 0x800)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1})
io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x0, 0x0, 0x4, 0x0, 0x1, r1}])

885.257679ms ago: executing program 8 (id=1921):
r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=0x0], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x20, 0x7, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000c40)={0x20, 0x14, 0x1, 's'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x84, 0x1, "ec"}, 0x0})

317.099782ms ago: executing program 2 (id=1897):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000527000/0x4000)=nil, 0x4000}, 0x1})

288.467363ms ago: executing program 3 (id=1922):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

243.781134ms ago: executing program 3 (id=1923):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0)

80.219967ms ago: executing program 3 (id=1924):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='dummy_udc.0\n', 0xc)

72.599008ms ago: executing program 9 (id=1900):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x3c7)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="0000944c6802885ee602d43a4122aac4"}})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
setresuid(0xee00, 0xee00, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59)

408.36µs ago: executing program 3 (id=1925):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
pipe2(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x26)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x26, 0x0)

0s ago: executing program 2 (id=1926):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/fscaps', 0x0, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000400)='\x00?qv\x81P\x85\x83)p\x9d,\x9d\xef\xe9An\xe6\xcf\xd8\xe7o\xacV\x1b*\xc4\x16\x01\v\'', &(0x7f0000000300)='./file1\x00', r2)

kernel console output (not intermixed with test programs):

814][  T922] usb 8-1: config 0 has an invalid interface number: 31 but max is 0
[   99.271599][  T922] usb 8-1: config 0 has no interface number 0
[   99.291285][  T922] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   99.314544][  T922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.334051][  T922] usb 8-1: Product: syz
[   99.338282][  T922] usb 8-1: Manufacturer: syz
[   99.354253][  T922] usb 8-1: SerialNumber: syz
[   99.360800][  T922] usb 8-1: config 0 descriptor??
[   99.599621][ T3680] loop8: detected capacity change from 0 to 131072
[   99.607705][ T3680] F2FS-fs (loop8): invalid crc value
[   99.627868][ T3680] F2FS-fs (loop8): Found nat_bits in checkpoint
[   99.708893][ T3680] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   99.725560][ T3718] loop1: detected capacity change from 0 to 128
[   99.740161][ T3680] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[   99.766975][   T28] audit: type=1400 audit(1784944913.660:463): avc:  denied  { mounton } for  pid=3717 comm="syz.1.1277" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   99.792422][  T922] usb 8-1: Found UVC 0.04 device syz (046d:08c3)
[   99.809080][  T922] uvcvideo 8-1:0.31: Entity type for entity Output 6 was not initialized!
[   99.818836][  T922] usb 8-1: Failed to create links for entity 5
[   99.825199][  T922] usb 8-1: Failed to register entities (-22).
[   99.840484][  T922] usb 8-1: USB disconnect, device number 4
[  100.135593][ T3730] loop8: detected capacity change from 0 to 512
[  100.148008][ T3730] EXT4-fs (loop8): Test dummy encryption mode enabled
[  100.155400][ T3730] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  100.181247][ T3730] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  100.197201][ T3730] EXT4-fs (loop8): orphan cleanup on readonly fs
[  100.204777][ T3730] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:511: comm syz.8.1279: Block bitmap for bg 0 marked uninitialized
[  100.218898][ T3730] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:511: comm syz.8.1279: Block bitmap for bg 0 marked uninitialized
[  100.232194][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.233308][ T3730] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:511: comm syz.8.1279: Block bitmap for bg 0 marked uninitialized
[  100.240548][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.254517][ T3730] EXT4-fs (loop8): 1 truncate cleaned up
[  100.265394][ T3730] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  100.271285][ T3724] device bridge_slave_0 entered promiscuous mode
[  100.294060][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.306133][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.313973][ T3724] device bridge_slave_1 entered promiscuous mode
[  100.403063][ T3743] loop7: detected capacity change from 0 to 256
[  100.409731][ T3743] exfat: Deprecated parameter 'utf8'
[  100.415435][ T3743] exfat: Deprecated parameter 'utf8'
[  100.420871][ T3743] exfat: Deprecated parameter 'utf8'
[  100.439740][ T3743] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  100.452086][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.459174][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.466515][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.473671][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.501650][   T10] device bridge_slave_1 left promiscuous mode
[  100.512826][   T28] audit: type=1400 audit(1784944914.410:464): avc:  denied  { remount } for  pid=3742 comm="syz.7.1288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  100.516902][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.541444][   T28] audit: type=1400 audit(1784944914.440:465): avc:  denied  { reparent } for  pid=3742 comm="syz.7.1288" name="file0" dev="loop7" ino=1048867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  100.564873][   T10] device bridge_slave_0 left promiscuous mode
[  100.571781][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.582701][   T10] device veth1_macvtap left promiscuous mode
[  100.588857][   T10] device veth0_vlan left promiscuous mode
[  100.754839][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.766560][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.774214][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.793190][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.801780][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.808886][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.824413][ T1671] EXT4-fs (loop8): unmounting filesystem.
[  100.830787][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  100.847589][ T3757] input: syz0 as /devices/virtual/input/input15
[  100.856295][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.863400][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.872640][ T3759] 9pnet: p9_errstr2errno: server reported unknown error 
[  100.884201][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  100.906264][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  100.920244][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  100.948157][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  100.956766][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  100.964875][  T769] Bluetooth: hci0: command 0x1003 tx timeout
[  100.964916][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  100.982140][ T3724] device veth0_vlan entered promiscuous mode
[  100.990636][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  101.009180][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  101.018669][ T3769] loop7: detected capacity change from 0 to 256
[  101.026150][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  101.045702][ T3769] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  101.057159][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  101.070204][ T3769] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  101.080592][ T3769] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  101.105281][ T3724] device veth1_macvtap entered promiscuous mode
[  101.118533][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  101.129192][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  101.141766][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  101.160992][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  101.170050][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  101.179015][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  101.188070][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  101.228261][ T3772] loop3: detected capacity change from 0 to 256
[  101.235023][ T3772] exfat: Deprecated parameter 'namecase'
[  101.244034][ T3772] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[  101.313633][ T3780] loop8: detected capacity change from 0 to 256
[  101.328478][ T3780] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  101.351190][ T3780] incfs: ino conflict with backing FS 1
[  101.358742][ T3780] syz.8.1303: attempt to access beyond end of device
[  101.358742][ T3780] loop8: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  101.373444][ T3780] syz.8.1303: attempt to access beyond end of device
[  101.373444][ T3780] loop8: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  101.490432][  T922] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  101.511313][ T3787] loop4: detected capacity change from 0 to 512
[  101.533643][ T3787] EXT4-fs (loop4): Test dummy encryption mode enabled
[  101.551404][ T3787] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  101.561682][ T3787] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  101.572420][ T3787] EXT4-fs (loop4): orphan cleanup on readonly fs
[  101.579141][ T3787] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.1305: Block bitmap for bg 0 marked uninitialized
[  101.592807][ T3787] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.1305: Block bitmap for bg 0 marked uninitialized
[  101.608869][ T3787] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.1305: Block bitmap for bg 0 marked uninitialized
[  101.622651][ T3787] EXT4-fs (loop4): 1 truncate cleaned up
[  101.628382][ T3787] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  101.680453][  T922] usb 8-1: Using ep0 maxpacket: 16
[  101.693432][  T922] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.715096][ T3791] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.722258][  T922] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  101.732388][ T3791] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.739921][ T3791] device bridge_slave_0 entered promiscuous mode
[  101.746529][  T922] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  101.756982][  T922] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  101.779665][  T922] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  101.784142][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.801139][  T922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  101.810540][  T922] usb 8-1: SerialNumber: syz
[  101.817380][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.824401][ T3774] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  101.824483][ T3774] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  101.829922][  T922] hub 8-1:1.0: bad descriptor, ignoring hub
[  101.847589][ T3791] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.855039][  T922] hub: probe of 8-1:1.0 failed with error -5
[  101.862249][ T3791] device bridge_slave_1 entered promiscuous mode
[  101.868947][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  101.874385][  T340] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  101.885059][  T340] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  101.895958][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.904482][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  101.912839][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.931166][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.949969][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.958417][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  101.967791][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.026540][ T3774] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  102.040765][ T3774] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  102.109987][   T28] audit: type=1400 audit(1784944916.000:466): avc:  denied  { connect } for  pid=3807 comm="syz.3.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  102.138024][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.155542][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.180631][ T3812] EXT4-fs (loop3): Test dummy encryption mode enabled
[  102.192945][ T3636] EXT4-fs (loop4): unmounting filesystem.
[  102.210569][ T3812] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1314: inode has both inline data and extents flags
[  102.224194][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.232568][ T3812] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1314: couldn't read orphan inode 15 (err -117)
[  102.256880][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.261744][ T3812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  102.270317][  T322] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.280874][  T322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.294839][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.306658][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.315192][  T322] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.322288][  T322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.331337][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.344097][ T3819] device sit0 entered promiscuous mode
[  102.352587][ T3812] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  102.360155][   T28] audit: type=1400 audit(1784944916.250:467): avc:  denied  { reparent } for  pid=3811 comm="syz.3.1314" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  102.368441][ T3819] netlink: 'syz.6.1318': attribute type 1 has an invalid length.
[  102.390321][ T3819] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1318'.
[  102.412165][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.420256][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.428867][ T3724] EXT4-fs (loop3): unmounting filesystem.
[  102.457456][  T922] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42
[  102.487533][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.523687][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.547946][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.558755][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.574997][ T3791] device veth0_vlan entered promiscuous mode
[  102.634831][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.647951][ T3829] incfs: ino conflict with backing FS 1
[  102.672424][ T3791] device veth1_macvtap entered promiscuous mode
[  102.685005][ T3724] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  102.696419][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.728536][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  102.737623][ T3724] FAT-fs (loop3): Filesystem has been set read-only
[  102.780495][  T294] usb 8-1: USB disconnect, device number 5
[  102.786912][  T294] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device
[  102.871651][ T3852] EXT4-fs (loop8): Test dummy encryption mode enabled
[  102.881197][ T3849] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1328'.
[  102.907916][ T3852] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.1330: inode has both inline data and extents flags
[  102.927745][ T3854] EXT4-fs (loop3): Test dummy encryption mode enabled
[  102.948302][ T3854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.977970][ T3852] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1330: couldn't read orphan inode 15 (err -117)
[  102.981776][ T3854] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  102.999844][ T3852] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  103.031109][ T3854] EXT4-fs (loop3): orphan cleanup on readonly fs
[  103.040241][ T3854] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.1327: Block bitmap for bg 0 marked uninitialized
[  103.060247][ T3852] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[  103.091113][    T8] device bridge_slave_1 left promiscuous mode
[  103.097301][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.114367][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  103.121163][ T3854] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.1327: Block bitmap for bg 0 marked uninitialized
[  103.135830][    T8] device bridge_slave_0 left promiscuous mode
[  103.166430][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.179064][ T3854] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.1327: Block bitmap for bg 0 marked uninitialized
[  103.226631][    T8] device veth1_macvtap left promiscuous mode
[  103.241761][    T8] device veth0_vlan left promiscuous mode
[  103.249113][ T3854] EXT4-fs (loop3): 1 truncate cleaned up
[  103.255035][ T3853] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  103.262173][ T3854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  103.270032][ T3853] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  103.280313][ T3853] F2FS-fs (loop4): fault_injection options not supported
[  103.287918][ T3853] F2FS-fs (loop4): fault_type options not supported
[  103.295462][ T3853] F2FS-fs (loop4): invalid crc value
[  103.322972][ T3853] F2FS-fs (loop4): Found nat_bits in checkpoint
[  103.403108][ T3853] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  103.410279][ T3853] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  103.463093][ T3853] syz.4.1329: attempt to access beyond end of device
[  103.463093][ T3853] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  103.490626][  T294] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  103.508791][ T3636] syz-executor: attempt to access beyond end of device
[  103.508791][ T3636] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  103.523730][  T294] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  103.682394][  T351] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  103.713373][ T3906] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  103.728113][ T3898] hid-generic 0000:0000:0000.0012: pid 3898 passed too short report
[  103.744386][ T3906] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  103.806592][ T1660] EXT4-fs (loop7): unmounting filesystem.
[  103.848324][ T3904] F2FS-fs (loop4): invalid crc value
[  103.851737][ T3724] EXT4-fs (loop3): unmounting filesystem.
[  103.866343][ T3904] F2FS-fs (loop4): Found nat_bits in checkpoint
[  103.890451][  T351] usb 7-1: Using ep0 maxpacket: 32
[  103.897364][  T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.928582][  T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.948609][  T351] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  103.966418][  T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.980198][ T3904] F2FS-fs (loop4): Start checkpoint disabled!
[  103.987649][  T351] usb 7-1: config 0 descriptor??
[  103.993661][ T3904] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  104.007888][  T351] hub 7-1:0.0: USB hub found
[  104.013250][ T3904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  104.180444][   T40] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  104.208600][  T351] hub 7-1:0.0: 1 port detected
[  104.211435][   T28] audit: type=1400 audit(1784944918.110:468): avc:  denied  { read write } for  pid=3930 comm="syz.8.1349" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  104.278673][   T28] audit: type=1400 audit(1784944918.140:469): avc:  denied  { open } for  pid=3930 comm="syz.8.1349" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  104.332663][ T3943] set_capacity_and_notify: 8 callbacks suppressed
[  104.332685][ T3943] loop8: detected capacity change from 0 to 1024
[  104.359674][ T3943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  104.371806][   T40] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.390576][   T40] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  104.401896][   T40] usb 8-1: config 1 has no interface number 0
[  104.408059][   T40] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  104.427353][   T40] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  104.444131][ T3943] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  104.450620][   T40] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  104.490669][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  104.503556][   T40] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.518384][   T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.537393][   T40] usb 8-1: Product: syz
[  104.541764][   T40] usb 8-1: Manufacturer: syz
[  104.546384][   T40] usb 8-1: SerialNumber: syz
[  104.571052][ T3915] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  104.615512][  T351] usb 7-1: USB disconnect, device number 12
[  104.646943][   T28] audit: type=1400 audit(1784944918.540:470): avc:  denied  { mount } for  pid=3957 comm="syz.4.1359" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  104.681024][ T3960] loop8: detected capacity change from 0 to 256
[  104.687746][ T3960] exfat: Deprecated parameter 'utf8'
[  104.721628][ T3960] exfat: Deprecated parameter 'utf8'
[  104.732225][ T3960] exfat: Deprecated parameter 'utf8'
[  104.747442][ T3960] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  104.793759][ T3968] loop4: detected capacity change from 0 to 128
[  104.826743][ T3968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  104.840640][ T3968] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  104.918528][   T28] audit: type=1400 audit(1784944918.810:471): avc:  denied  { checkpoint_restore } for  pid=3972 comm="syz.8.1365" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  104.967548][ T3962] loop3: detected capacity change from 0 to 40427
[  104.979161][ T3962] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  104.981104][ T3915] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  104.996553][ T3962] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  105.010592][ T3962] F2FS-fs (loop3): fault_injection options not supported
[  105.022137][ T3962] F2FS-fs (loop3): fault_type options not supported
[  105.037522][ T3962] F2FS-fs (loop3): invalid crc value
[  105.056707][ T3636] EXT4-fs (loop4): unmounting filesystem.
[  105.096615][ T3962] F2FS-fs (loop3): Found nat_bits in checkpoint
[  105.204991][ T3962] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  105.224150][ T3962] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  105.278518][ T3999] loop4: detected capacity change from 0 to 512
[  105.306083][ T3962] syz.3.1360: attempt to access beyond end of device
[  105.306083][ T3962] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  105.348926][ T3724] syz-executor: attempt to access beyond end of device
[  105.348926][ T3724] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  105.632875][   T40] cdc_ncm 8-1:1.1: bind() failure
[  105.648353][   T40] usb 8-1: USB disconnect, device number 6
[  105.878036][ T4046] loop4: detected capacity change from 0 to 128
[  105.930707][ T4046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  105.948914][ T4046] System zones: 1-3, 19-19, 35-36
[  105.954805][ T4046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  106.000809][ T4046] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  106.128372][ T3636] EXT4-fs (loop4): unmounting filesystem.
[  106.174452][ T4048] loop6: detected capacity change from 0 to 40427
[  106.209213][ T4048] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  106.216971][ T4055] loop4: detected capacity change from 0 to 512
[  106.250508][ T4048] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  106.269593][ T4048] F2FS-fs (loop6): invalid crc value
[  106.270620][ T4055] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 8: comm syz.4.1399: lblock 0 mapped to illegal pblock 8 (length 1)
[  106.290380][ T4050] loop3: detected capacity change from 0 to 40427
[  106.307319][ T4050] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  106.315236][ T4050] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  106.324972][ T4050] F2FS-fs (loop3): invalid crc value
[  106.340413][ T4055] EXT4-fs (loop4): Remounting filesystem read-only
[  106.347928][ T4055] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.1399: error -117 reading directory block
[  106.347969][ T4048] F2FS-fs (loop6): Found nat_bits in checkpoint
[  106.367149][ T4055] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  106.375424][ T4055] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 8: comm syz.4.1399: lblock 0 mapped to illegal pblock 8 (length 1)
[  106.390436][ T4055] EXT4-fs (loop4): Remounting filesystem read-only
[  106.420045][ T4055] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.1399: error -117 reading directory block
[  106.434143][ T4050] F2FS-fs (loop3): Found nat_bits in checkpoint
[  106.450426][ T4055] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  106.468912][ T4055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  106.513623][ T3636] EXT4-fs (loop4): unmounting filesystem.
[  106.532476][ T4048] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  106.539617][ T4048] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  106.554511][ T4050] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  106.570435][ T4050] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  106.580824][ T4029] loop8: detected capacity change from 0 to 131072
[  106.641173][ T4048] syz.6.1397: attempt to access beyond end of device
[  106.641173][ T4048] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.656918][ T4029] F2FS-fs (loop8): invalid crc value
[  106.698742][ T4029] F2FS-fs (loop8): Found nat_bits in checkpoint
[  106.737118][ T4057] F2FS-fs (loop7): invalid crc value
[  106.755252][  T308] kworker/u4:3: attempt to access beyond end of device
[  106.755252][  T308] loop6: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  106.782665][ T4057] F2FS-fs (loop7): Found nat_bits in checkpoint
[  106.800415][ T4029] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  106.841618][ T4029] syz.8.1388 (pid 4029) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  106.921455][ T4057] F2FS-fs (loop7): Start checkpoint disabled!
[  106.930948][ T4057] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  106.950605][ T4057] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  107.247412][ T4087] journal_path: Lookup failure for './file0'
[  107.270432][ T4087] EXT4-fs: error: could not find journal device path
[  107.280571][    T6] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  107.480393][    T6] usb 7-1: Using ep0 maxpacket: 16
[  107.489001][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.510127][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.562107][ T4068] F2FS-fs (loop4): invalid crc value
[  107.580405][    T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  107.594177][ T4068] F2FS-fs (loop4): Found nat_bits in checkpoint
[  107.600498][    T6] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  107.600528][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.618592][    T6] usb 7-1: config 0 descriptor??
[  107.676822][ T4068] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  107.732534][ T4119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  107.751056][ T4119] EXT4-fs (loop3): 1 truncate cleaned up
[  107.760325][ T4119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  107.776610][ T4119] EXT4-fs (loop3): shut down requested (1)
[  107.808580][ T3724] EXT4-fs (loop3): unmounting filesystem.
[  108.034873][    T6] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[  108.044375][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.051842][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.059393][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.066875][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.074491][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.081959][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.089290][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.096573][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.103889][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.111185][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.118489][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.126079][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.133593][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.140920][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.148285][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.155590][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.163171][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.170477][   T40] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  108.170899][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.185454][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.193120][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.200710][    T6] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  108.208229][    T6] microsoft 0003:045E:07DA.0013: No inputs registered, leaving
[  108.218052][    T6] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  108.229658][    T6] microsoft 0003:045E:07DA.0013: no inputs found
[  108.242961][    T6] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway
[  108.253848][    T6] usb 7-1: USB disconnect, device number 13
[  108.287229][ T4147] fido_id[4147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  108.360465][   T40] usb 4-1: Using ep0 maxpacket: 32
[  108.367857][   T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.379438][ T4154] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  108.388183][   T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.398311][ T4154] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  108.408800][   T40] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  108.431232][   T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.432177][ T4154] fscrypt (loop8, inode 12): Unsupported encryption flags (0x0b)
[  108.449216][   T40] usb 4-1: config 0 descriptor??
[  108.457041][   T40] hub 4-1:0.0: USB hub found
[  108.469351][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  108.530044][ T4164] incfs: ino conflict with backing FS 1
[  108.571237][ T3791] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  108.589638][ T3791] FAT-fs (loop8): Filesystem has been set read-only
[  108.603675][ T4170] erofs: (device loop4): mounted with root inode @ nid 36.
[  108.628954][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  108.648127][ T4175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  108.656953][   T40] hub 4-1:0.0: 1 port detected
[  108.661693][ T4175] System zones: 1-3, 19-19, 35-36
[  108.670340][ T4175] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  108.682762][ T4175] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  108.720164][ T4175] EXT4-fs warning (device loop8): verify_group_input:151: Cannot add at group 1718843763 (only 1 groups)
[  108.748613][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  108.752713][  T922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.807889][ T4179] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.819859][ T4179] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  108.840782][ T4181] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  108.849971][ T4181] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.862591][   T40] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  108.870695][   T40] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  108.883117][ T4179] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  108.898259][   T40] usbhid 4-1:0.0: can't add hid device: -71
[  108.906070][   T40] usbhid: probe of 4-1:0.0 failed with error -71
[  108.930327][ T4181] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1445: corrupted xattr block 32
[  108.942600][   T40] usb 4-1: USB disconnect, device number 6
[  108.949455][ T4181] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  108.963992][ T4181] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1445: corrupted xattr block 32
[  108.981576][ T4181] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1445: corrupted xattr block 32
[  109.038138][ T4181] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  109.047379][   T28] audit: type=1400 audit(1784944922.950:472): avc:  denied  { setattr } for  pid=4180 comm="syz.6.1445" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  109.072193][ T4181] EXT4-fs error (device loop6): ext4_get_inode_usage:835: inode #15: comm syz.6.1445: corrupted xattr block 32
[  109.092251][ T4190] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1449: inode has both inline data and extents flags
[  109.122182][ T3210] EXT4-fs (loop6): unmounting filesystem.
[  109.171102][ T4190] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1449: couldn't read orphan inode 15 (err -117)
[  109.187338][ T4195] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  109.197578][ T4195] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  109.230134][ T4190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  109.298357][ T3636] EXT4-fs (loop4): unmounting filesystem.
[  109.337235][ T1660] EXT4-fs (loop7): unmounting filesystem.
[  109.600567][  T922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.640688][   T28] audit: type=1400 audit(1784944923.540:473): avc:  denied  { ioctl } for  pid=4222 comm="syz.3.1465" path="/35/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  109.666716][  T532] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  109.691364][ T4225] set_capacity_and_notify: 12 callbacks suppressed
[  109.691381][ T4225] loop3: detected capacity change from 0 to 512
[  109.748913][ T4225] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  109.788037][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.795941][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.803530][ T4221] device bridge_slave_0 entered promiscuous mode
[  109.810043][ T4225] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.822923][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.829980][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.845648][ T4225] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.1466: corrupted inode contents
[  109.846114][ T4221] device bridge_slave_1 entered promiscuous mode
[  109.865200][  T532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.871007][ T4225] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #2: comm syz.3.1466: mark_inode_dirty error
[  109.876604][  T532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.907450][ T4225] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.1466: corrupted inode contents
[  109.920407][  T532] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  109.928786][ T4188] loop8: detected capacity change from 0 to 131072
[  109.933547][  T532] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.949202][ T4225] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1466: mark_inode_dirty error
[  109.961546][  T532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.973520][  T532] usb 5-1: config 0 descriptor??
[  109.980071][ T4188] F2FS-fs (loop8): invalid crc value
[  110.006064][ T4188] F2FS-fs (loop8): Found nat_bits in checkpoint
[  110.011908][ T3724] EXT4-fs (loop3): unmounting filesystem.
[  110.037513][   T43] device bridge_slave_1 left promiscuous mode
[  110.060560][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.078400][   T43] device bridge_slave_0 left promiscuous mode
[  110.093345][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.117384][   T43] device veth1_macvtap left promiscuous mode
[  110.123545][ T4188] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  110.141454][   T43] device veth0_vlan left promiscuous mode
[  110.160691][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.210244][ T4249] loop7: detected capacity change from 0 to 512
[  110.228857][ T4249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  110.241186][ T4188] F2FS-fs (loop8): Start checkpoint disabled!
[  110.261359][ T4188] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  110.269178][ T4249] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  110.296513][ T4249] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.341118][ T1660] EXT4-fs (loop7): unmounting filesystem.
[  110.382104][  T532] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  110.389564][  T532] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  110.402245][   T28] audit: type=1400 audit(1784944924.300:474): avc:  denied  { attach_queue } for  pid=4253 comm="syz.7.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  110.402989][ T4242] loop3: detected capacity change from 0 to 40427
[  110.440412][  T532] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  110.447904][  T532] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  110.462723][  T532] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  110.470482][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  110.477801][  T532] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  110.485449][  T532] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  110.489070][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  110.501356][ T4242] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  110.508078][ T4242] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  110.518944][  T532] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  110.532046][ T4242] F2FS-fs (loop3): invalid crc value
[  110.543683][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.571413][ T4242] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  110.574550][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.630628][  T322] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.637753][  T322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.656336][ T4262] input: syz0 as /devices/virtual/input/input16
[  110.666010][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.679045][ T4242] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  110.681688][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.697186][ T4242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  110.704845][  T532] usb 5-1: USB disconnect, device number 2
[  110.711739][  T322] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.718840][  T322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.742454][ T4265] loop7: detected capacity change from 0 to 256
[  110.761561][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.779584][ T4265] FAT-fs (loop7): Directory bread(block 64) failed
[  110.780271][ T4242] syz.3.1469: attempt to access beyond end of device
[  110.780271][ T4242] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  110.800126][ T4265] FAT-fs (loop7): Directory bread(block 65) failed
[  110.815687][ T3724] syz-executor: attempt to access beyond end of device
[  110.815687][ T3724] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  110.840790][ T4265] FAT-fs (loop7): Directory bread(block 66) failed
[  110.847397][ T4265] FAT-fs (loop7): Directory bread(block 67) failed
[  110.862402][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  110.872745][ T4265] FAT-fs (loop7): Directory bread(block 68) failed
[  110.879295][ T4265] FAT-fs (loop7): Directory bread(block 69) failed
[  110.892647][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  110.916062][ T4265] FAT-fs (loop7): Directory bread(block 70) failed
[  110.924538][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  110.940917][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  110.952087][ T4265] FAT-fs (loop7): Directory bread(block 71) failed
[  110.958662][ T4265] FAT-fs (loop7): Directory bread(block 72) failed
[  110.965946][ T4265] FAT-fs (loop7): Directory bread(block 73) failed
[  110.978161][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1473'.
[  110.997474][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  111.013423][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  111.024627][ T4221] device veth0_vlan entered promiscuous mode
[  111.031713][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1473'.
[  111.042852][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1473'.
[  111.052441][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  111.060003][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  111.067776][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1473'.
[  111.082645][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  111.095513][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  111.112335][ T4221] device veth1_macvtap entered promiscuous mode
[  111.133106][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  111.145557][ T4273] program syz.7.1480 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.151663][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  111.163747][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.185312][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.206030][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.240095][ T4277] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  111.339747][ T4271] loop8: detected capacity change from 0 to 40427
[  111.368374][ T4271] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  111.390407][ T4271] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  111.409336][ T4271] F2FS-fs (loop8): invalid crc value
[  111.430019][ T4271] F2FS-fs (loop8): Found nat_bits in checkpoint
[  111.497315][ T4294] loop5: detected capacity change from 0 to 2048
[  111.520458][  T532] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  111.541023][ T4271] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  111.551101][ T4271] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  111.553861][ T4294] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  111.599191][ T4294] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.607425][ T4285] loop7: detected capacity change from 0 to 40427
[  111.626732][ T4285] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  111.646101][ T4285] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  111.659883][ T4271] syz.8.1479: attempt to access beyond end of device
[  111.659883][ T4271] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.682778][ T4221] EXT4-fs (loop5): unmounting filesystem.
[  111.689410][ T4285] F2FS-fs (loop7): invalid crc value
[  111.712141][  T532] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.725158][  T322] kworker/u4:4: attempt to access beyond end of device
[  111.725158][  T322] loop8: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  111.739794][ T4285] F2FS-fs (loop7): Found nat_bits in checkpoint
[  111.760472][  T532] usb 4-1: config 0 has no interfaces?
[  111.772750][  T532] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.792118][  T532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.809836][  T532] usb 4-1: Product: syz
[  111.816516][  T532] usb 4-1: Manufacturer: syz
[  111.822333][  T532] usb 4-1: SerialNumber: syz
[  111.827714][ T4285] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  111.835535][  T532] usb 4-1: config 0 descriptor??
[  111.840770][ T4285] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  112.053768][  T532] usb 4-1: USB disconnect, device number 7
[  112.064568][ T4305] loop5: detected capacity change from 0 to 40427
[  112.089026][ T4305] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  112.096887][ T4305] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  112.120538][ T4305] F2FS-fs (loop5): invalid crc value
[  112.146221][ T4305] F2FS-fs (loop5): Found nat_bits in checkpoint
[  112.152718][ T4333] IPv6: addrconf: prefix option has invalid lifetime
[  112.179875][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'.
[  112.190744][ T4335] bridge0: port 3(vlan2) entered blocking state
[  112.197021][ T4335] bridge0: port 3(vlan2) entered disabled state
[  112.204137][ T4335] device vlan2 entered promiscuous mode
[  112.209726][ T4335] device macsec0 entered promiscuous mode
[  112.214826][ T4305] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  112.222743][ T4305] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  112.268057][ T4338] loop4: detected capacity change from 0 to 512
[  112.322128][ T4338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  112.351738][  T351] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  112.364264][ T4338] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.382182][ T4338] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1501: corrupted xattr block 32
[  112.399429][ T4338] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  112.410985][ T4338] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1501: corrupted xattr block 32
[  112.431696][ T4338] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.1501: corrupted xattr block 32
[  112.450765][ T4338] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  112.465223][ T4338] EXT4-fs error (device loop4): ext4_get_inode_usage:835: inode #15: comm syz.4.1501: corrupted xattr block 32
[  112.527539][ T3636] EXT4-fs (loop4): unmounting filesystem.
[  112.541627][  T351] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.590528][  T351] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.611367][  T351] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  112.628731][  T351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  112.641651][ T4357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  112.656707][  T351] usb 9-1: SerialNumber: syz
[  112.676700][ T3636] EXT4-fs (loop4): unmounting filesystem.
[  112.721144][   T28] audit: type=1400 audit(1784944926.620:475): avc:  denied  { read } for  pid=4367 comm="syz.3.1514" path="socket:[37339]" dev="sockfs" ino=37339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  112.845074][ T4378] input: syz1 as /devices/virtual/input/input17
[  112.852997][ T4378] input: failed to attach handler leds to device input17, error: -6
[  112.882460][  T351] usb 9-1: 0:2 : does not exist
[  112.892005][  T351] usb 9-1: USB disconnect, device number 7
[  113.043231][   T28] audit: type=1400 audit(1784944926.940:476): avc:  denied  { create } for  pid=4395 comm="syz.4.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  113.093377][   T28] audit: type=1400 audit(1784944926.980:477): avc:  denied  { sys_admin } for  pid=4395 comm="syz.4.1527" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  113.121258][  T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  113.173297][   T28] audit: type=1400 audit(1784944927.010:478): avc:  denied  { sys_nice } for  pid=4395 comm="syz.4.1527" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  113.257090][ T4409] FAT-fs (loop4): Directory bread(block 64) failed
[  113.277680][ T4409] FAT-fs (loop4): Directory bread(block 65) failed
[  113.299646][ T4409] FAT-fs (loop4): Directory bread(block 66) failed
[  113.319781][ T4409] FAT-fs (loop4): Directory bread(block 67) failed
[  113.327651][ T4409] FAT-fs (loop4): Directory bread(block 68) failed
[  113.357546][ T4409] FAT-fs (loop4): Directory bread(block 69) failed
[  113.361563][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.374708][ T4409] FAT-fs (loop4): Directory bread(block 70) failed
[  113.390422][ T4409] FAT-fs (loop4): Directory bread(block 71) failed
[  113.421852][ T4415] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1534: inode has both inline data and extents flags
[  113.421873][ T4409] FAT-fs (loop4): Directory bread(block 72) failed
[  113.421897][ T4409] FAT-fs (loop4): Directory bread(block 73) failed
[  113.448485][ T4415] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1534: couldn't read orphan inode 15 (err -117)
[  113.475987][ T4415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  113.548883][ T4221] EXT4-fs (loop5): unmounting filesystem.
[  113.634233][   T28] audit: type=1400 audit(1784944927.530:479): avc:  denied  { remount } for  pid=4423 comm="syz.4.1537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  113.709991][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'.
[  113.747891][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'.
[  113.795179][ T4413] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  113.807681][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'.
[  113.810816][ T4413] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  113.843231][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'.
[  113.866693][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'.
[  113.876068][ T4413] F2FS-fs (loop7): invalid crc value
[  113.921387][ T4413] F2FS-fs (loop7): Found nat_bits in checkpoint
[  113.931667][ T4438] IPv6: addrconf: prefix option has invalid lifetime
[  113.990728][ T4442] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  113.991967][ T4442] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.024876][ T4447] netlink: 'syz.4.1543': attribute type 1 has an invalid length.
[  114.047515][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  114.083833][ T4413] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  114.083860][ T4413] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  114.127404][ T4451] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.127844][ T4451] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  114.144317][ T4451] EXT4-fs (loop8): 1 truncate cleaned up
[  114.144345][ T4451] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  114.155455][ T4451] EXT4-fs warning (device loop8): verify_group_input:151: Cannot add at group 37749075 (only 1 groups)
[  114.420886][  T351] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  114.453451][ T4466] FAT-fs (loop4): Directory bread(block 64) failed
[  114.460148][ T4466] FAT-fs (loop4): Directory bread(block 65) failed
[  114.466865][   T28] audit: type=1400 audit(1784944928.360:480): avc:  denied  { execute_no_trans } for  pid=4467 comm="syz.7.1555" path=2F6D656D66643A2D42D54E343A29202864656C6574656429 dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  114.493731][ T4466] FAT-fs (loop4): Directory bread(block 66) failed
[  114.500291][ T4466] FAT-fs (loop4): Directory bread(block 67) failed
[  114.508190][ T4466] FAT-fs (loop4): Directory bread(block 68) failed
[  114.522181][ T4427] F2FS-fs (loop5): invalid crc value
[  114.533895][ T4466] FAT-fs (loop4): Directory bread(block 69) failed
[  114.547613][   T28] audit: type=1400 audit(1784944928.440:481): avc:  denied  { lock } for  pid=4473 comm="syz.7.1557" path="socket:[38259]" dev="sockfs" ino=38259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  114.573247][ T4466] FAT-fs (loop4): Directory bread(block 70) failed
[  114.580112][ T4466] FAT-fs (loop4): Directory bread(block 71) failed
[  114.588174][ T4427] F2FS-fs (loop5): Found nat_bits in checkpoint
[  114.594784][ T4466] FAT-fs (loop4): Directory bread(block 72) failed
[  114.611555][  T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.613370][ T4466] FAT-fs (loop4): Directory bread(block 73) failed
[  114.630439][  T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.640235][  T351] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.658418][  T351] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.680682][  T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.695821][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  114.711246][  T351] usb 4-1: config 0 descriptor??
[  114.716312][ T4427] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  114.732534][ T4466] syz.4.1554: attempt to access beyond end of device
[  114.732534][ T4466] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  114.756582][ T4466] syz.4.1554: attempt to access beyond end of device
[  114.756582][ T4466] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256
[  114.892677][ T4484] set_capacity_and_notify: 11 callbacks suppressed
[  114.892696][ T4484] loop8: detected capacity change from 0 to 512
[  114.946110][ T4484] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  114.960009][ T4484] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.991978][ T4484] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #15: comm syz.8.1562: corrupted xattr block 33
[  115.016455][ T4484] EXT4-fs (loop8): Remounting filesystem read-only
[  115.031062][ T4484] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  115.040496][ T4484] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #15: comm syz.8.1562: corrupted xattr block 33
[  115.053079][ T4484] EXT4-fs (loop8): Remounting filesystem read-only
[  115.059899][ T4484] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  115.069214][ T4484] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #15: comm syz.8.1562: corrupted xattr block 33
[  115.100499][ T4484] EXT4-fs (loop8): Remounting filesystem read-only
[  115.109306][ T4484] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #15: comm syz.8.1562: corrupted xattr block 33
[  115.122857][  T351] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  115.130622][  T351] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  115.137362][ T4484] EXT4-fs (loop8): Remounting filesystem read-only
[  115.138328][  T351] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  115.147892][ T4484] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  115.152589][  T351] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  115.169114][  T351] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  115.176786][  T351] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  115.178497][ T4484] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #15: comm syz.8.1562: corrupted xattr block 33
[  115.193687][  T351] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  115.197476][ T4484] EXT4-fs (loop8): Remounting filesystem read-only
[  115.211774][ T4484] fscrypt (loop8, inode 15): Error -117 getting encryption context
[  115.229532][  T351] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  115.265277][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  115.300278][ T4496] program syz.8.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.360556][ T4500] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  115.411335][    T6] usb 4-1: USB disconnect, device number 8
[  115.448699][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  115.499432][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  115.521208][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  115.549910][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  115.580178][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  115.593897][   T28] audit: type=1400 audit(1784944929.490:482): avc:  denied  { lock } for  pid=4522 comm="syz.4.1578" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.627961][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  115.647822][   T28] audit: type=1400 audit(1784944929.540:483): avc:  denied  { search } for  pid=4528 comm="syz.7.1580" name="/" dev="configfs" ino=14169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  115.659082][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  115.690208][ T4531] loop4: detected capacity change from 0 to 256
[  115.699863][   T28] audit: type=1400 audit(1784944929.540:484): avc:  denied  { setattr } for  pid=4528 comm="syz.7.1580" name="/" dev="configfs" ino=14169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  115.723613][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  115.733878][ T4531] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  115.746489][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  115.755243][ T4533] loop5: detected capacity change from 0 to 128
[  115.792461][ T4537] device sit0 entered promiscuous mode
[  115.799115][ T4537] netlink: 'syz.4.1584': attribute type 1 has an invalid length.
[  115.810037][ T4537] device tunl0 entered promiscuous mode
[  115.824802][ T4537] netlink: 'syz.4.1584': attribute type 4 has an invalid length.
[  115.868913][ T4546] device batadv_slave_1 entered promiscuous mode
[  115.876447][ T4545] device batadv_slave_1 left promiscuous mode
[  115.977430][ T4563] loop3: detected capacity change from 0 to 128
[  116.106244][ T4585] device batadv_slave_0 entered promiscuous mode
[  116.116650][ T4581] loop4: detected capacity change from 0 to 1024
[  116.123038][ T4584] device batadv_slave_0 left promiscuous mode
[  116.129861][ T4581] EXT4-fs: Ignoring removed orlov option
[  116.136649][ T4581] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  116.171470][ T4581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  116.197297][   T28] audit: type=1400 audit(1784944930.090:485): avc:  denied  { unlink } for  pid=4580 comm="syz.4.1604" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  116.221138][ T4596] loop3: detected capacity change from 0 to 256
[  116.237775][ T3636] EXT4-fs (loop4): unmounting filesystem.
[  116.243676][   T28] audit: type=1400 audit(1784944930.090:486): avc:  denied  { link } for  pid=4580 comm="syz.4.1604" name="#20" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  116.268914][ T4598] loop8: detected capacity change from 0 to 2048
[  116.317063][ T4598]  loop8: p1 p2 p3 < > p4 < p5 p6 >
[  116.331399][ T4598] loop8: partition table partially beyond EOD, truncated
[  116.339717][ T4602] loop3: detected capacity change from 0 to 4096
[  116.348881][ T4598] loop8: p1 size 393216 extends beyond EOD, truncated
[  116.356926][ T4602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  116.359028][ T4598] loop8: p3 start 4225 is beyond EOD, truncated
[  116.380626][ T4598] loop8: p5 size 393216 extends beyond EOD, truncated
[  116.450459][  T351] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  116.459182][ T3724] EXT4-fs (loop3): unmounting filesystem.
[  116.477510][ T1781] udevd[1781]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  116.478366][ T2579] udevd[2579]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory
[  116.495127][  T353] udevd[353]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory
[  116.503499][  T310] udevd[310]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  116.509015][ T1872] udevd[1872]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  116.554291][  T310] udevd[310]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  116.566703][ T1872] udevd[1872]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  116.593286][ T4616] loop8: detected capacity change from 0 to 1024
[  116.603014][ T4616] EXT4-fs: Ignoring removed oldalloc option
[  116.609483][ T4616] EXT4-fs: Ignoring removed bh option
[  116.636832][ T4616] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  116.650437][ T4616] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.664033][ T4616] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 3)
[  116.672047][  T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.689214][ T4616] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  116.721242][  T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.740425][ T4616] EXT4-fs (loop8): This should not happen!! Data will be lost
[  116.740425][ T4616] 
[  116.750237][  T351] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  116.770798][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  116.790396][  T351] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.809703][  T351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.818284][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  116.835590][ T4614] loop3: detected capacity change from 0 to 40427
[  116.845457][ T4614] F2FS-fs (loop3): heap/no_heap options were deprecated
[  116.857560][  T351] usb 6-1: config 0 descriptor??
[  116.872955][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  116.891569][ T4614] F2FS-fs (loop3): fault_injection options not supported
[  116.908920][ T4614] F2FS-fs (loop3): fault_type options not supported
[  116.917864][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  116.930128][ T4614] F2FS-fs (loop3): invalid crc value
[  116.937769][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  116.953703][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  116.969565][ T4614] F2FS-fs (loop3): Found nat_bits in checkpoint
[  116.993743][ T4618] F2FS-fs (loop4): invalid crc value
[  117.009350][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  117.024448][ T4618] F2FS-fs (loop4): Found nat_bits in checkpoint
[  117.038258][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  117.051634][ T4614] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  117.080480][ T4621] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1619: lblock 3 mapped to illegal pblock 3 (length 1)
[  117.101391][   T43] kworker/u4:2: attempt to access beyond end of device
[  117.101391][   T43] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.135020][ T4618] F2FS-fs (loop4): Start checkpoint disabled!
[  117.149583][ T4618] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  117.167310][ T4618] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  117.273579][  T351] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  117.287137][ T4629] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  117.299780][  T351] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  117.303759][ T4618] syz.4.1620: attempt to access beyond end of device
[  117.303759][ T4618] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  117.363738][ T4629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  117.377839][   T10] kworker/u4:1: attempt to access beyond end of device
[  117.377839][   T10] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  117.396980][   T43] kworker/u4:2: attempt to access beyond end of device
[  117.396980][   T43] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  117.453374][ T3724] EXT4-fs (loop3): unmounting filesystem.
[  117.461703][   T43] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  117.474482][   T43] EXT4-fs (loop8): This should not happen!! Data will be lost
[  117.474482][   T43] 
[  117.510115][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  117.551254][   T40] usb 6-1: USB disconnect, device number 6
[  117.692656][ T4645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  117.713847][ T4645] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.1629: lblock 2 mapped to illegal pblock 2 (length 1)
[  117.728100][ T4645] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  117.736385][ T4645] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.1629: Invalid inode table block 1 in block_group 0
[  117.749261][ T4645] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[  117.764908][ T4645] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1629: mark_inode_dirty error
[  117.776453][ T4645] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  117.785621][ T4645] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.1629: Failed to acquire dquot type 0
[  117.797161][ T4645] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[  117.809577][ T4645] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.1629: mark_inode_dirty error
[  117.824106][ T4645] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  117.834573][ T4645] EXT4-fs (loop3): 1 orphan inode deleted
[  117.854597][    T8] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  117.877180][ T4645] EXT4-fs (loop3): shut down requested (2)
[  117.883312][    T8] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  117.943541][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  118.195303][ T4677] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  118.212280][ T4676] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.365070][ T4639] F2FS-fs (loop4): invalid crc value
[  118.378120][ T4694] EXT4-fs: Ignoring removed orlov option
[  118.394891][ T4694] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  118.416908][ T4639] F2FS-fs (loop4): Found nat_bits in checkpoint
[  118.469330][ T4639] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  118.485935][ T4639] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  118.554541][ T4710] exfat: Deprecated parameter 'utf8'
[  118.560289][ T4710] exfat: Deprecated parameter 'utf8'
[  118.590509][ T4710] exfat: Deprecated parameter 'namecase'
[  118.596243][ T4710] exfat: Deprecated parameter 'namecase'
[  118.607376][ T4710] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  118.647283][ T4716] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.789031][ T4724] erofs: (device loop3): mounted with root inode @ nid 36.
[  118.811013][ T4724] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=86
[  118.822527][ T4724] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=86
[  118.963518][   T40] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  118.979300][ T4754] netlink: 'syz.3.1675': attribute type 3 has an invalid length.
[  118.990856][ T4754] netlink: 'syz.3.1675': attribute type 3 has an invalid length.
[  118.991825][   T40] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  119.007012][ T4754] netlink: 'syz.3.1675': attribute type 3 has an invalid length.
[  119.018705][ T4754] netlink: 'syz.3.1675': attribute type 3 has an invalid length.
[  119.313522][ T4752] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  119.322629][ T4782] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  119.329222][ T4752] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  119.355841][ T4782] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  119.366427][ T4752] F2FS-fs (loop7): invalid crc value
[  119.373241][ T4782] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  119.386850][ T4782] EXT4-fs (loop8): 1 truncate cleaned up
[  119.392784][ T4778]  loop5: p1 p2 p3 < > p4 < p5 p6 >
[  119.398081][ T4778] loop5: partition table partially beyond EOD, truncated
[  119.416852][ T4778] loop5: p1 size 393216 extends beyond EOD, truncated
[  119.418672][ T4752] F2FS-fs (loop7): Found nat_bits in checkpoint
[  119.430530][ T4778] loop5: p3 start 4225 is beyond EOD, truncated
[  119.460596][ T4778] loop5: p5 size 393216 extends beyond EOD, truncated
[  119.522453][ T4752] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  119.529649][ T4752] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  119.609134][ T1872] udevd[1872]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  119.612476][  T310] udevd[310]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  119.626493][ T1781] udevd[1781]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  119.633266][  T353] udevd[353]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  119.649502][ T2579] udevd[2579]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory
[  119.698266][ T4780] F2FS-fs (loop4): heap/no_heap options were deprecated
[  119.706056][ T1660] syz-executor: attempt to access beyond end of device
[  119.706056][ T1660] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  119.711823][ T4780] F2FS-fs (loop4): fault_injection options not supported
[  119.728503][ T4780] F2FS-fs (loop4): fault_type options not supported
[  119.741262][ T4796] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  119.762427][ T4780] F2FS-fs (loop4): invalid crc value
[  119.788981][ T4799] EXT4-fs (loop8): 1 truncate cleaned up
[  119.793285][ T4780] F2FS-fs (loop4): Found nat_bits in checkpoint
[  119.811815][ T4796] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.1690: lblock 2 mapped to illegal pblock 2 (length 1)
[  119.829116][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  119.829129][   T28] audit: type=1400 audit(1784944933.720:493): avc:  denied  { create } for  pid=4798 comm="syz.8.1692" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  119.857737][ T4796] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  119.885550][   T28] audit: type=1400 audit(1784944933.720:494): avc:  denied  { rename } for  pid=4798 comm="syz.8.1692" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  119.984809][ T4780] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  120.043531][ T4796] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.1690: Invalid inode table block 1 in block_group 0
[  120.078136][ T4796] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem
[  120.096944][ T4796] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1690: mark_inode_dirty error
[  120.139163][ T4796] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  120.156622][ T4796] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.1690: Failed to acquire dquot type 0
[  120.170494][ T4822] set_capacity_and_notify: 18 callbacks suppressed
[  120.170521][ T4822] loop8: detected capacity change from 0 to 256
[  120.183632][ T4796] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem
[  120.210608][ T4796] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.1690: mark_inode_dirty error
[  120.237499][ T4796] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  120.259670][ T4796] EXT4-fs (loop5): 1 orphan inode deleted
[  120.273028][   T43] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.310581][   T43] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  120.332097][   T43] EXT4-fs error (device loop5): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0
[  120.367995][ T4796] EXT4-fs (loop5): shut down requested (2)
[  120.412944][ T4830] loop7: detected capacity change from 0 to 8192
[  120.441613][ T4841] loop5: detected capacity change from 0 to 512
[  120.510091][ T4841] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1709: bad orphan inode 11862016
[  120.556120][ T4841] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.657746][ T4852] loop7: detected capacity change from 0 to 8192
[  120.749368][ T4853] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  121.084442][ T4891] loop8: detected capacity change from 0 to 1024
[  121.097519][ T4891] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  121.118552][ T4893] loop3: detected capacity change from 0 to 256
[  121.143443][ T4893] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  121.160034][ T4899] loop7: detected capacity change from 0 to 256
[  121.188214][   T28] audit: type=1400 audit(1784944935.080:495): avc:  denied  { lock } for  pid=4892 comm="syz.3.1730" path="/92/file0/file1" dev="loop3" ino=1048935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  121.260391][   T28] audit: type=1400 audit(1784944935.140:496): avc:  denied  { listen } for  pid=4905 comm="syz.3.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  121.289916][ T4908] loop4: detected capacity change from 0 to 256
[  121.300256][ T4910] loop5: detected capacity change from 0 to 256
[  121.309292][ T4908] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  121.383286][ T4914] __nla_validate_parse: 2 callbacks suppressed
[  121.383307][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'.
[  121.604360][ T4940] loop8: detected capacity change from 0 to 512
[  121.631028][ T4940] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  121.644471][ T4940] EXT4-fs (loop8): 1 truncate cleaned up
[  121.719118][ T4949] EXT4-fs: Ignoring removed orlov option
[  121.726638][ T4949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  121.771607][ T4949] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #16: comm syz.5.1752: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  121.814993][ T4949] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1752: couldn't read orphan inode 16 (err -117)
[  121.830418][   T40] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  121.843510][ T4949] EXT4-fs (loop5): 1 orphan inode deleted
[  121.876610][ T4945] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  121.884949][ T4945] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  121.896396][ T4945] F2FS-fs (loop4): invalid crc value
[  121.926800][ T4949] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  121.943293][ T4945] F2FS-fs (loop4): Found nat_bits in checkpoint
[  121.970447][ T4947] F2FS-fs (loop8): invalid crc value
[  121.991597][ T4947] F2FS-fs (loop8): Found nat_bits in checkpoint
[  122.014068][ T4945] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  122.022691][   T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.025551][ T4945] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  122.041072][   T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.041118][   T40] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  122.094567][   T40] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  122.107029][   T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.120449][ T4947] F2FS-fs (loop8): Start checkpoint disabled!
[  122.134237][ T4947] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  122.145433][   T40] usb 8-1: config 0 descriptor??
[  122.151781][ T4947] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  122.225800][   T43] kworker/u4:2: attempt to access beyond end of device
[  122.225800][   T43] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  122.239990][   T43] kworker/u4:2: attempt to access beyond end of device
[  122.239990][   T43] loop8: rw=2049, sector=40976, nr_sectors = 8 limit=40427
[  122.306649][ T4969] xt_hashlimit: size too large, truncated to 1048576
[  122.351925][   T28] audit: type=1400 audit(1784944936.250:497): avc:  denied  { module_request } for  pid=4968 comm="syz.3.1758" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  122.525852][ T4980] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  122.540517][ T4980] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  122.557465][ T4980] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.1761: Failed to acquire dquot type 1
[  122.570930][ T4980] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.1761: Failed to acquire dquot type 1
[  122.583348][   T40] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd
[  122.592591][   T40] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[  122.601662][   T40] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  122.603128][ T4980] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1761: bg 0: block 248: padding at end of block bitmap is not set
[  122.650306][ T4980] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  122.669501][ T4980] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.1761: Failed to acquire dquot type 1
[  122.690520][ T4980] EXT4-fs (loop4): 1 orphan inode deleted
[  122.698349][ T4980] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.730664][ T4980] EXT4-fs (loop4): shut down requested (2)
[  122.770901][ T4987] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  122.784051][ T4987] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  122.842267][ T4987] incfs: ino conflict with backing FS 1
[  122.867047][ T1364] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  122.891759][   T40] usb 8-1: USB disconnect, device number 7
[  122.920748][ T4991] netlink: 'syz.3.1765': attribute type 1 has an invalid length.
[  123.007888][ T4985] F2FS-fs (loop8): Wrong SSA boundary, start(3584) end(4096) blocks(3072)
[  123.016621][ T4985] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  123.028368][ T4985] F2FS-fs (loop8): fault_injection options not supported
[  123.059479][ T4985] F2FS-fs (loop8): invalid crc value
[  123.065106][ T4999] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[  123.091203][ T4985] F2FS-fs (loop8): Found nat_bits in checkpoint
[  123.141326][ T5007] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  123.203775][ T4985] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  123.211228][ T4985] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  123.286441][ T3791] syz-executor: attempt to access beyond end of device
[  123.286441][ T3791] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.317221][ T5014] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #12: block 2: comm syz.5.1774: lblock 0 mapped to illegal pblock 2 (length 1)
[  123.355814][ T5014] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #12: block 2: comm syz.5.1774: lblock 0 mapped to illegal pblock 2 (length 1)
[  123.390638][ T5014] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #12: block 2: comm syz.5.1774: lblock 0 mapped to illegal pblock 2 (length 1)
[  123.500456][ T5032] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  123.525759][ T5034] EXT4-fs: Ignoring removed oldalloc option
[  123.546520][ T5034] EXT4-fs: Ignoring removed bh option
[  123.563226][ T5037] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  123.588778][ T5032] EXT4-fs (loop3): 1 truncate cleaned up
[  123.617467][ T5034] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.635022][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 3)
[  123.649467][ T5034] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  123.661905][ T5034] EXT4-fs (loop5): This should not happen!! Data will be lost
[  123.661905][ T5034] 
[  123.695808][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.710216][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.724843][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.746208][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.761300][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.775739][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.790055][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.804508][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.818820][ T5034] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1780: lblock 3 mapped to illegal pblock 3 (length 1)
[  123.840532][    T6] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  123.955877][ T5049] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  123.964148][ T5049] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  123.975343][ T5049] F2FS-fs (loop8): invalid crc value
[  123.996769][ T5049] F2FS-fs (loop8): Found nat_bits in checkpoint
[  124.041457][    T6] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  124.057166][    T6] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  124.062264][ T5049] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  124.067683][    T6] usb 8-1: config 1 interface 0 has no altsetting 0
[  124.092676][ T5049] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  124.095335][    T6] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  124.130440][    T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.138499][    T6] usb 8-1: Product: syz
[  124.142802][    T6] usb 8-1: Manufacturer: syz
[  124.147418][    T6] usb 8-1: SerialNumber: syz
[  124.156732][ T5040] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  124.183637][ T5040] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  124.440576][ T1364] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  124.468299][ T1364] EXT4-fs (loop5): This should not happen!! Data will be lost
[  124.468299][ T1364] 
[  124.488382][ T5076] EXT4-fs: Ignoring removed orlov option
[  124.499433][ T5076] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  124.536965][ T5076] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.1797: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  124.585131][ T5076] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1797: couldn't read orphan inode 16 (err -117)
[  124.598681][ T5078] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.610430][ T5076] EXT4-fs (loop4): 1 orphan inode deleted
[  124.625226][ T5078] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.1798: corrupted inode contents
[  124.645259][ T5078] EXT4-fs (loop5): Remounting filesystem read-only
[  124.653106][ T5078] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.1798: mark_inode_dirty error
[  124.664735][ T5078] EXT4-fs (loop5): Remounting filesystem read-only
[  124.678183][ T5078] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.1798: corrupted inode contents
[  124.695771][ T5076] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  124.698528][ T5078] EXT4-fs (loop5): Remounting filesystem read-only
[  124.718740][ T5088] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.1798: corrupted inode contents
[  124.739360][ T5088] EXT4-fs (loop5): Remounting filesystem read-only
[  124.746192][ T5088] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.1798: mark_inode_dirty error
[  124.757922][ T5088] EXT4-fs (loop5): Remounting filesystem read-only
[  124.767915][ T5090] EXT4-fs: Ignoring removed bh option
[  124.775677][ T5088] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.1798: corrupted inode contents
[  124.787796][ T5090] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  124.788160][ T5088] EXT4-fs (loop5): Remounting filesystem read-only
[  124.803308][ T5090] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  124.816207][ T5090] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1800: Corrupt directory, running e2fsck is recommended
[  124.829993][ T5088] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1798: mark_inode_dirty error
[  124.841800][ T5090] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  124.850042][ T5090] EXT4-fs error (device loop8): ext4_iget_extra_inode:4765: inode #15: comm syz.8.1800: corrupted in-inode xattr
[  124.862624][ T5090] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1800: couldn't read orphan inode 15 (err -117)
[  124.871721][ T5088] EXT4-fs (loop5): Remounting filesystem read-only
[  124.883065][ T5088] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.1798: corrupted inode contents
[  124.896960][ T5090] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  124.908811][ T5090] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  124.919537][ T5090] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1800: Corrupt directory, running e2fsck is recommended
[  124.937348][ T5088] EXT4-fs (loop5): Remounting filesystem read-only
[  124.945914][ T5088] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.1798: mark_inode_dirty error
[  124.959077][ T5088] EXT4-fs (loop5): Remounting filesystem read-only
[  124.986201][ T5078] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.1798: corrupted inode contents
[  125.020756][ T5078] EXT4-fs (loop5): Remounting filesystem read-only
[  125.116747][ T5114] EXT4-fs (loop5): Test dummy encryption mode enabled
[  125.126356][ T5114] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.240944][    T6] rtl8150 8-1:1.0: couldn't reset the device
[  125.252526][    T6] rtl8150: probe of 8-1:1.0 failed with error -5
[  125.264110][    T6] usb 8-1: USB disconnect, device number 8
[  125.342369][ T5147] set_capacity_and_notify: 20 callbacks suppressed
[  125.342389][ T5147] loop8: detected capacity change from 0 to 512
[  125.360965][ T5147] EXT4-fs: Ignoring removed oldalloc option
[  125.383664][ T5147] EXT4-fs (loop8): Test dummy encryption mode enabled
[  125.387567][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'.
[  125.419026][ T5154] loop5: detected capacity change from 0 to 2048
[  125.443570][ T5154] EXT4-fs error (device loop5): ext4_read_inline_dir:1611: inode #12: block 9: comm syz.5.1828: path /69/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=45, inode=4195584, rec_len=0, size=80 fake=0
[  125.490410][  T299] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  125.503605][ T5160] loop5: detected capacity change from 0 to 256
[  125.523868][ T5160] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  125.542054][ T5160] syz.5.1830: attempt to access beyond end of device
[  125.542054][ T5160] loop5: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  125.556604][ T5160] syz.5.1830: attempt to access beyond end of device
[  125.556604][ T5160] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  125.570825][ T5160] syz.5.1830: attempt to access beyond end of device
[  125.570825][ T5160] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  125.584862][ T5160] syz.5.1830: attempt to access beyond end of device
[  125.584862][ T5160] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  125.599414][ T5160] syz.5.1830: attempt to access beyond end of device
[  125.599414][ T5160] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  125.613504][ T5160] syz.5.1830: attempt to access beyond end of device
[  125.613504][ T5160] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  125.627797][ T5161] exFAT-fs (loop5): hint_cluster is invalid (1)
[  125.634645][ T5161] syz.5.1830: attempt to access beyond end of device
[  125.634645][ T5161] loop5: rw=2049, sector=34359738488, nr_sectors = 8 limit=256
[  125.654251][ T5163] tipc: Started in network mode
[  125.659288][ T5163] tipc: Node identity ac14142f, cluster identity 4711
[  125.666518][ T5163] tipc: New replicast peer: 172.20.20.170
[  125.672849][ T5163] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.679628][ T5163] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:0000:0000
[  125.682224][ T5161] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000)
[  125.688357][  T299] usb 5-1: Using ep0 maxpacket: 8
[  125.714591][ T5161] exFAT-fs (loop5): Filesystem has been set read-only
[  125.721554][ T5161] exFAT-fs (loop5): error, failed to bmap (inode : ffff8881388400d0 iblock : 9, err : -5)
[  125.734199][  T299] usb 5-1: config 0 has no interfaces?
[  125.739720][  T299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  125.749722][  T299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.777834][  T299] usb 5-1: config 0 descriptor??
[  125.790105][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  125.790121][   T28] audit: type=1326 audit(1784944939.680:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c79de99 code=0x7ffc0000
[  125.823261][   T28] audit: type=1326 audit(1784944939.680:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c79de99 code=0x7ffc0000
[  125.848742][   T28] audit: type=1326 audit(1784944939.720:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c79de99 code=0x7ffc0000
[  125.878780][   T28] audit: type=1326 audit(1784944939.720:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2c79de99 code=0x7ffc0000
[  125.905323][   T28] audit: type=1326 audit(1784944939.720:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0e2c79de99 code=0x7ffc0000
[  125.931058][ T5170] loop8: detected capacity change from 0 to 4096
[  125.943969][   T28] audit: type=1326 audit(1784944939.720:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e2c79dc02 code=0x7ffc0000
[  125.968796][ T5170] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.969954][   T28] audit: type=1326 audit(1784944939.770:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e2c75e6ce code=0x7ffc0000
[  126.012066][   T28] audit: type=1326 audit(1784944939.800:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0e2c79dcc7 code=0x7ffc0000
[  126.021237][ T5170] EXT4-fs (loop8): Test dummy encryption mode enabled
[  126.048300][   T28] audit: type=1326 audit(1784944939.830:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e2c75e6ce code=0x7ffc0000
[  126.074935][ T5175] xt_hashlimit: size too large, truncated to 1048576
[  126.099625][   T28] audit: type=1326 audit(1784944939.830:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz.8.1834" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e2c79db2b code=0x7ffc0000
[  126.143954][ T5170] EXT4-fs mount: 44 callbacks suppressed
[  126.143973][ T5170] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  126.166718][ T5182] loop3: detected capacity change from 0 to 1024
[  126.191553][ T5184] loop5: detected capacity change from 0 to 128
[  126.240842][ T5182] EXT4-fs: Ignoring removed oldalloc option
[  126.246994][ T5182] EXT4-fs: Ignoring removed orlov option
[  126.262234][ T5184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  126.273061][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  126.279116][ T5184] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.298596][ T5182] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  126.347182][ T3724] EXT4-fs (loop3): unmounting filesystem.
[  126.363857][ T5190] loop8: detected capacity change from 0 to 128
[  126.402350][ T5190] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  126.416624][ T4221] EXT4-fs (loop5): unmounting filesystem.
[  126.423235][ T5190] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  126.483033][ T3791] EXT4-fs (loop8): unmounting filesystem.
[  126.504629][ T5199] loop5: detected capacity change from 0 to 512
[  126.524373][ T5199] EXT4-fs (loop5): Test dummy encryption mode enabled
[  126.531863][ T5199] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  126.555746][ T5199] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1842: bad orphan inode 131083
[  126.566546][ T5199] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  126.588440][ T5199] overlayfs: upper fs needs to support d_type.
[  126.632478][ T4221] EXT4-fs (loop5): unmounting filesystem.
[  126.742819][ T5205] loop7: detected capacity change from 0 to 40427
[  126.756161][ T5205] F2FS-fs (loop7): invalid crc value
[  126.771416][ T5205] F2FS-fs (loop7): Found nat_bits in checkpoint
[  126.809027][ T5205] F2FS-fs (loop7): Start checkpoint disabled!
[  126.815561][ T5205] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  126.828091][  T922] tipc: Node number set to 2886997039
[  126.830896][ T5205] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  126.889654][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.896878][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.904701][ T5209] device bridge_slave_0 entered promiscuous mode
[  126.912120][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.919234][ T5209] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.927281][ T5209] device bridge_slave_1 entered promiscuous mode
[  127.003756][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.010905][ T5209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.018217][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.025305][ T5209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.050932][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.058784][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.066762][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.082725][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.091044][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.098098][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.105822][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.114666][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.121754][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.142004][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.150296][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.164952][ T5209] device veth0_vlan entered promiscuous mode
[  127.172228][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.181619][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.189173][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.196779][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.213829][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.222557][ T5209] device veth1_macvtap entered promiscuous mode
[  127.234056][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.248616][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.261788][ T5215] loop7: detected capacity change from 0 to 40427
[  127.271839][ T5215] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  127.279766][ T5215] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  127.288893][ T5215] F2FS-fs (loop7): invalid crc value
[  127.305948][ T5215] F2FS-fs (loop7): Found nat_bits in checkpoint
[  127.360040][ T5220] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  127.376432][ T5220] EXT4-fs (loop0): Test dummy encryption mode enabled
[  127.387382][ T5220] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  127.395657][ T5220] System zones: 0-5
[  127.399828][ T5215] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  127.418744][ T5215] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  127.419811][ T5224] EXT4-fs: Ignoring removed oldalloc option
[  127.433892][ T5224] EXT4-fs: Ignoring removed bh option
[  127.443571][ T5220] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  127.506761][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  127.515902][ T1660] bio_check_eod: 2 callbacks suppressed
[  127.515919][ T1660] syz-executor: attempt to access beyond end of device
[  127.515919][ T1660] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  127.541163][ T5224] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.552868][    T8] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  127.565203][    T8] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  127.592623][ T5224] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 3)
[  127.641664][ T5224] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  127.654706][ T5209] EXT4-fs (loop0): unmounting filesystem.
[  127.667159][ T5224] EXT4-fs (loop3): This should not happen!! Data will be lost
[  127.667159][ T5224] 
[  127.690648][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  127.727780][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  127.780808][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  127.797083][ T5235] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.1852: iget: bad i_size value: 38620345925642
[  127.810155][ T5235] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1852: couldn't read orphan inode 15 (err -117)
[  127.813720][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  127.836324][ T5235] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  127.870946][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  127.896602][ T5238] erofs: (device loop0): mounted with root inode @ nid 36.
[  127.897483][ T5235] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1852: bg 0: block 5: invalid block bitmap
[  127.917033][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  127.928019][ T5238] syz.0.1854: attempt to access beyond end of device
[  127.928019][ T5238] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16
[  127.945344][ T5238] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096]
[  127.950036][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  127.956531][ T5235] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  127.983267][ T5235] EXT4-fs (loop7): This should not happen!! Data will be lost
[  127.983267][ T5235] 
[  127.993288][ T5238] syz.0.1854: attempt to access beyond end of device
[  127.993288][ T5238] loop0: rw=0, sector=16, nr_sectors = 8 limit=16
[  127.996127][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  128.008269][ T5238] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000]
[  128.032007][ T5231] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1851: lblock 3 mapped to illegal pblock 3 (length 1)
[  128.046101][ T5235] EXT4-fs (loop7): Total free blocks count 0
[  128.052258][ T5235] EXT4-fs (loop7): Free/Dirty block details
[  128.058220][ T5235] EXT4-fs (loop7): free_blocks=0
[  128.063212][ T5235] EXT4-fs (loop7): dirty_blocks=1
[  128.068368][ T5235] EXT4-fs (loop7): Block reservation details
[  128.074537][ T5235] EXT4-fs (loop7): i_reserved_data_blocks=1
[  128.081552][ T5238] syz.0.1854: attempt to access beyond end of device
[  128.081552][ T5238] loop0: rw=0, sector=16, nr_sectors = 8 limit=16
[  128.111211][ T5238] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000]
[  128.144685][ T5238] syz.0.1854: attempt to access beyond end of device
[  128.144685][ T5238] loop0: rw=0, sector=16, nr_sectors = 8 limit=16
[  128.157913][ T5238] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000]
[  128.168963][ T5238] syz.0.1854: attempt to access beyond end of device
[  128.168963][ T5238] loop0: rw=0, sector=16, nr_sectors = 8 limit=16
[  128.182925][ T5238] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000]
[  128.198031][ T1660] EXT4-fs (loop7): unmounting filesystem.
[  128.228532][  T922] usb 5-1: USB disconnect, device number 3
[  128.331578][ T5248] erofs: (device loop4): mounted with root inode @ nid 36.
[  128.363849][ T5244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  128.404140][ T5244] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.451142][   T43] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  128.477605][   T43] EXT4-fs (loop3): This should not happen!! Data will be lost
[  128.477605][   T43] 
[  128.490043][ T5248] erofs: (device loop4): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  128.500075][ T5209] EXT4-fs (loop0): unmounting filesystem.
[  128.502588][ T3724] EXT4-fs (loop3): unmounting filesystem.
[  128.513084][ T5248] erofs: (device loop4): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  128.676317][ T5226] F2FS-fs (loop8): Invalid log sectorsize (0)
[  128.691335][ T5226] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  128.741787][ T5226] F2FS-fs (loop8): invalid crc value
[  128.791364][ T5226] F2FS-fs (loop8): Found nat_bits in checkpoint
[  128.890029][ T5226] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  128.904409][ T5226] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  129.360216][ T5264] F2FS-fs (loop7): invalid crc value
[  129.402490][ T5264] F2FS-fs (loop7): Found nat_bits in checkpoint
[  129.508599][ T5264] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  129.569660][ T5269] F2FS-fs (loop4): Test dummy encryption mode enabled
[  129.585585][ T5269] F2FS-fs (loop4): invalid crc value
[  129.611344][ T5269] F2FS-fs (loop4): Found nat_bits in checkpoint
[  129.670154][ T5269] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  129.716296][ T3636] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix.
[  129.930661][ T5321] SELinux: failed to load policy
[  130.263293][ T1364] device vlan2 left promiscuous mode
[  130.268793][ T1364] device macsec0 left promiscuous mode
[  130.274475][ T1364] bridge0: port 3(vlan2) entered disabled state
[  130.298958][ T1364] device bridge_slave_1 left promiscuous mode
[  130.315344][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.325737][ T1364] device bridge_slave_0 left promiscuous mode
[  130.340584][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.359112][ T1364] device veth1_macvtap left promiscuous mode
[  130.368079][ T1364] device veth0_vlan left promiscuous mode
[  130.420495][  T532] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  130.561921][ T5358] set_capacity_and_notify: 10 callbacks suppressed
[  130.561939][ T5358] loop0: detected capacity change from 0 to 512
[  130.577439][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.588748][ T5358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  130.588752][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.606563][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1906'.
[  130.621527][ T5358] EXT4-fs (loop0): 1 truncate cleaned up
[  130.624959][ T5346] device bridge_slave_0 entered promiscuous mode
[  130.627571][ T5358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  130.644287][  T532] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  130.657029][  T532] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.666978][  T532] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  130.681955][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.689091][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.692037][  T532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.708986][  T532] hub 4-1:4.0: USB hub found
[  130.714183][ T5358] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5974: inode #15: comm syz.0.1905: bad extra_isize 62 (inode size 256)
[  130.733043][ T5346] device bridge_slave_1 entered promiscuous mode
[  130.734586][ T5358] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5974: inode #15: comm syz.0.1905: bad extra_isize 62 (inode size 256)
[  130.753246][ T5358] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5974: inode #15: comm syz.0.1905: bad extra_isize 62 (inode size 256)
[  130.767253][ T5366] EXT4-fs (loop0): shut down requested (1)
[  130.773535][ T5358] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5974: inode #15: comm syz.0.1905: bad extra_isize 62 (inode size 256)
[  130.803021][ T5209] EXT4-fs (loop0): unmounting filesystem.
[  130.816858][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  130.816875][   T28] audit: type=1400 audit(1784944944.710:536): avc:  denied  { getopt } for  pid=5369 comm="syz.8.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  130.888551][   T28] audit: type=1400 audit(1784944944.780:537): avc:  denied  { create } for  pid=5393 comm="syz.8.1912" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  130.911722][  T532] hub 4-1:4.0: 2 ports detected
[  130.916637][  T532] usb 4-1: selecting invalid altsetting 1
[  130.922742][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.929954][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.937107][  T532] hub 4-1:4.0: Using single TT (err -22)
[  130.985318][   T28] audit: type=1400 audit(1784944944.840:538): avc:  denied  { map } for  pid=5398 comm="syz.0.1913" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  131.010133][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.019852][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.028517][   T28] audit: type=1400 audit(1784944944.920:539): avc:  denied  { bind } for  pid=5403 comm="syz.0.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.031918][ T5347] device bridge_slave_0 entered promiscuous mode
[  131.054382][   T28] audit: type=1400 audit(1784944944.920:540): avc:  denied  { listen } for  pid=5403 comm="syz.0.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.054413][   T28] audit: type=1400 audit(1784944944.920:541): avc:  denied  { connect } for  pid=5403 comm="syz.0.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.098546][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.105902][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.113953][ T5347] device bridge_slave_1 entered promiscuous mode
[  131.237511][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.244733][ T5347] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.252111][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.259159][ T5347] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.303026][  T322] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.310667][  T322] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.319643][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  131.327598][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  131.327724][  T532] usb 4-1: USB disconnect, device number 9
[  131.355388][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  131.363844][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.372120][  T322] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.379190][  T322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.387156][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  131.395672][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  131.403967][  T322] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.411042][  T322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.418358][    T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  131.426050][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  131.434206][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.442372][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  131.461936][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  131.469543][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.478118][  T322] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.485204][  T322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.493058][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  131.501343][  T322] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.508409][  T322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.515990][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  131.524185][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.538076][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.555356][ T5346] device veth0_vlan entered promiscuous mode
[  131.560545][   T40] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  131.570212][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  131.578416][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  131.587038][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.603620][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.612103][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  131.620128][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  131.627960][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.629484][    T6] usb 1-1: unable to get BOS descriptor or descriptor too short
[  131.644888][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.654111][    T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.654255][ T5347] device veth0_vlan entered promiscuous mode
[  131.665349][    T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.684034][ T5346] device veth1_macvtap entered promiscuous mode
[  131.692665][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.692992][    T6] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  131.709747][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.717856][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.721504][    T6] usb 1-1: Product: syz
[  131.729326][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.738387][    T6] usb 1-1: Manufacturer: syz
[  131.743096][    T6] usb 1-1: SerialNumber: syz
[  131.746327][ T5347] device veth1_macvtap entered promiscuous mode
[  131.754313][   T40] usb 9-1: Using ep0 maxpacket: 16
[  131.758585][    T6] usb 1-1: selecting invalid altsetting 1
[  131.762876][   T40] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.765810][    T6] usb 1-1: unit 6 not found!
[  131.777788][   T40] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.791892][   T40] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  131.801172][   T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  131.809219][   T40] usb 9-1: SerialNumber: syz
[  131.823379][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  131.831783][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.845561][ T1364] device bridge_slave_1 left promiscuous mode
[  131.852368][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.868388][ T1364] device bridge_slave_0 left promiscuous mode
[  131.875509][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.895120][ T5419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1922'.
[  131.900488][ T1364] device veth1_macvtap left promiscuous mode
[  131.921067][ T1364] device veth0_vlan left promiscuous mode
[  132.054613][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  132.064154][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  132.104027][ T5425] loop9: detected capacity change from 0 to 128
[  132.116028][    T6] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2)
[  132.133516][    T6] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  132.134138][   T40] usb 9-1: 0:2 : does not exist
[  132.154921][    T6] usb 1-1: USB disconnect, device number 7
[  132.176786][ T5408] ==================================================================
[  132.184931][ T5408] BUG: KASAN: use-after-free in string+0x20f/0x2a0
[  132.191488][ T5408] Read of size 1 at addr ffff88810e63d600 by task syz.0.1918/5408
[  132.199325][ T5408] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  132.201698][ T5408] CPU: 0 PID: 5408 Comm: syz.0.1918 Not tainted syzkaller #0
[  132.209102][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  132.210543][   T28] audit: type=1400 audit(1784944946.100:542): avc:  denied  { write } for  pid=278 comm="syz-executor" path="pipe:[14516]" dev="pipefs" ino=14516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  132.219219][ T5408] Call Trace:
[  132.245964][ T5408]  <TASK>
[  132.248925][ T5408]  __dump_stack+0x21/0x24
[  132.253297][ T5408]  dump_stack_lvl+0x110/0x170
[  132.258111][ T5408]  ? __cfi_dump_stack_lvl+0x8/0x8
[  132.263168][ T5408]  ? string+0x20f/0x2a0
[  132.267373][ T5408]  print_address_description+0x71/0x200
[  132.272517][ T5425] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  132.272956][ T5408]  print_report+0x4a/0x60
[  132.286157][ T5408]  kasan_report+0x122/0x150
[  132.290698][ T5408]  ? string+0x20f/0x2a0
[  132.295015][ T5408]  __asan_report_load1_noabort+0x14/0x20
[  132.300679][ T5408]  string+0x20f/0x2a0
[  132.304712][ T5408]  vsnprintf+0xec5/0x1990
[  132.309092][ T5408]  snprintf+0xe5/0x140
[  132.313201][ T5408]  ? is_bpf_text_address+0x177/0x190
[  132.318531][ T5408]  ? __cfi_snprintf+0x10/0x10
[  132.323250][ T5408]  ? kernel_text_address+0xa0/0xd0
[  132.328401][ T5408]  ? __kernel_text_address+0xd/0x30
[  132.333635][ T5408]  ? unwind_get_return_address+0x4d/0x90
[  132.339328][ T5408]  ? dev_vprintk_emit+0x175/0x3e4
[  132.344383][ T5408]  dev_vprintk_emit+0x306/0x3e4
[  132.349277][ T5408]  ? __cfi_dev_vprintk_emit+0x8/0x8
[  132.354549][ T5408]  ? __stack_depot_save+0x36/0x490
[  132.359718][ T5408]  dev_printk_emit+0xeb/0x13c
[  132.364429][ T5408]  ? kasan_set_track+0x60/0x70
[  132.369232][ T5408]  ? kasan_set_track+0x4b/0x70
[  132.371242][ T5425] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.374035][ T5408]  ? memdup_user+0x2a/0xc0
[  132.388710][ T5408]  ? raw_ioctl+0x1d2e/0x3180
[  132.393365][ T5408]  ? __se_sys_ioctl+0x12f/0x1b0
[  132.398341][ T5408]  ? __cfi_dev_printk_emit+0x8/0x8
[  132.403501][ T5408]  __dev_printk+0x17f/0x1b0
[  132.408045][ T5408]  _dev_err+0x11b/0x16c
[  132.412248][ T5408]  ? __cfi__dev_err+0x8/0x8
[  132.416779][ T5408]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  132.422281][ T5408]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  132.428221][ T5408]  ? usb_ep_queue+0xe9/0x220
[  132.432854][ T5408]  raw_process_ep0_io+0x50f/0x7a0
[  132.437927][ T5408]  raw_ioctl+0x2078/0x3180
[  132.442388][ T5408]  ? ioctl_has_perm+0x1b8/0x4f0
[  132.447286][ T5408]  ? ioctl_has_perm+0x3a6/0x4f0
[  132.452177][ T5408]  ? __cfi_raw_ioctl+0x10/0x10
[  132.456982][ T5408]  ? has_cap_mac_admin+0x370/0x370
[  132.462139][ T5408]  ? hrtimer_init_sleeper+0x10c/0x370
[  132.467558][ T5408]  ? do_futex+0x2e2/0x430
[  132.471922][ T5408]  ? selinux_file_ioctl+0x3ad/0x4c0
[  132.477164][ T5408]  ? __cfi_do_futex+0x10/0x10
[  132.481878][ T5408]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  132.487582][ T5408]  ? __fget_files+0x2d1/0x330
[  132.492316][ T5408]  ? security_file_ioctl+0x95/0xc0
[  132.497478][ T5408]  ? __cfi_raw_ioctl+0x10/0x10
[  132.502293][ T5408]  __se_sys_ioctl+0x12f/0x1b0
[  132.507016][ T5408]  __x64_sys_ioctl+0x7b/0x90
[  132.511683][ T5408]  x64_sys_call+0x58b/0x9a0
[  132.516319][ T5408]  do_syscall_64+0x4c/0xa0
[  132.521128][ T5408]  ? clear_bhb_loop+0x30/0x80
[  132.525923][ T5408]  ? clear_bhb_loop+0x30/0x80
[  132.530644][ T5408]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.536602][ T5408] RIP: 0033:0x7f76f659db2b
[  132.538668][ T5425] EXT4-fs (loop9): shut down requested (2)
[  132.541049][ T5408] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  132.541072][ T5408] RSP: 002b:00007f76f74a7f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  132.541098][ T5408] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f76f659db2b
[  132.584421][ T5408] RDX: 00007f76f74a7fd0 RSI: 0000000040085503 RDI: 0000000000000003
[  132.592434][ T5408] RBP: 00007f76f74a7fd0 R08: 0000000000000005 R09: 0000000000000200
[  132.600441][ T5408] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f76f74a7fd8
[  132.608452][ T5408] R13: 0000000000000000 R14: 00007f76f6825fa0 R15: 00007ffde35d4198
[  132.616469][ T5408]  </TASK>
[  132.619515][ T5408] 
[  132.621859][ T5408] Allocated by task 1:
[  132.625972][ T5408]  kasan_set_track+0x4b/0x70
[  132.630602][ T5408]  kasan_save_alloc_info+0x1f/0x30
[  132.635741][ T5408]  __kasan_kmalloc+0x95/0xb0
[  132.640399][ T5408]  __kmalloc_node_track_caller+0xb1/0x1e0
[  132.646141][ T5408]  kvasprintf+0xe8/0x1a0
[  132.650412][ T5408]  kvasprintf_const+0xf2/0x240
[  132.655197][ T5408]  kobject_set_name_vargs+0x61/0x110
[  132.660513][ T5408]  dev_set_name+0xdf/0x130
[  132.664949][ T5408]  usb_add_gadget+0x3d4/0x620
[  132.669655][ T5408]  usb_add_gadget_udc+0x11a/0x150
[  132.674718][ T5408]  dummy_udc_probe+0x6e6/0x7f0
[  132.679522][ T5408]  platform_probe+0x16d/0x1f0
[  132.684226][ T5408]  really_probe+0x2d7/0x9a0
[  132.688776][ T5408]  __driver_probe_device+0x193/0x270
[  132.694090][ T5408]  driver_probe_device+0x54/0x3e0
[  132.699142][ T5408]  __device_attach_driver+0x2e9/0x4a0
[  132.704539][ T5408]  bus_for_each_drv+0x192/0x220
[  132.709418][ T5408]  __device_attach+0x2b0/0x420
[  132.714219][ T5408]  device_initial_probe+0x1a/0x20
[  132.719271][ T5408]  bus_probe_device+0xc0/0x1f0
[  132.724068][ T5408]  device_add+0xb0b/0xec0
[  132.728433][ T5408]  platform_device_add+0x474/0x6d0
[  132.733580][ T5408]  dummy_hcd_init+0xc26/0x1168
[  132.738376][ T5408]  do_one_initcall+0x1d6/0x580
[  132.743180][ T5408]  do_initcall_level+0x174/0x2df
[  132.748209][ T5408]  do_initcalls+0x50/0x92
[  132.752592][ T5408]  do_basic_setup+0x92/0x99
[  132.757136][ T5408]  kernel_init_freeable+0x2d1/0x42d
[  132.762353][ T5408]  kernel_init+0x1d/0x1c0
[  132.766705][ T5408]  ret_from_fork+0x1f/0x30
[  132.771150][ T5408] 
[  132.773497][ T5408] Freed by task 5427:
[  132.777578][ T5408]  kasan_set_track+0x4b/0x70
[  132.782285][ T5408]  kasan_save_free_info+0x2b/0x40
[  132.787333][ T5408]  ____kasan_slab_free+0x132/0x180
[  132.792473][ T5408]  __kasan_slab_free+0x11/0x20
[  132.797265][ T5408]  slab_free_freelist_hook+0xc2/0x190
[  132.802653][ T5408]  __kmem_cache_free+0xb7/0x1b0
[  132.807530][ T5408]  kfree+0x6f/0xf0
[  132.811260][ T5408]  kfree_const+0x39/0x40
[  132.815524][ T5408]  kobject_put+0x20e/0x280
[  132.819955][ T5408]  put_device+0x1f/0x30
[  132.824120][ T5408]  usb_del_gadget_udc+0x21/0x30
[  132.828987][ T5408]  dummy_udc_remove+0x58/0x60
[  132.833678][ T5408]  platform_remove+0xb8/0x110
[  132.838382][ T5408]  device_release_driver_internal+0x486/0x7e0
[  132.844461][ T5408]  device_driver_detach+0x3b/0x40
[  132.849506][ T5408]  unbind_store+0x2e5/0x300
[  132.854017][ T5408]  drv_attr_store+0x88/0xb0
[  132.858525][ T5408]  sysfs_kf_write+0x137/0x150
[  132.863284][ T5408]  kernfs_fop_write_iter+0x307/0x470
[  132.868598][ T5408]  vfs_write+0x5ef/0xd00
[  132.872848][ T5408]  ksys_write+0x14a/0x260
[  132.877192][ T5408]  __x64_sys_write+0x7b/0x90
[  132.881796][ T5408]  x64_sys_call+0x27b/0x9a0
[  132.886345][ T5408]  do_syscall_64+0x4c/0xa0
[  132.890777][ T5408]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.896695][ T5408] 
[  132.899027][ T5408] The buggy address belongs to the object at ffff88810e63d600
[  132.899027][ T5408]  which belongs to the cache kmalloc-16 of size 16
[  132.912915][ T5408] The buggy address is located 0 bytes inside of
[  132.912915][ T5408]  16-byte region [ffff88810e63d600, ffff88810e63d610)
[  132.925937][ T5408] 
[  132.928280][ T5408] The buggy address belongs to the physical page:
[  132.934720][ T5408] page:ffffea0004398f40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e63d
[  132.944973][ T5408] flags: 0x4000000000000200(slab|zone=1)
[  132.950630][ T5408] raw: 4000000000000200 0000000000000000 dead000000000001 ffff888100042480
[  132.959224][ T5408] raw: 0000000000000000 0000000000800080 00000001ffffffff 0000000000000000
[  132.967813][ T5408] page dumped because: kasan: bad access detected
[  132.974327][ T5408] page_owner tracks the page as allocated
[  132.980062][ T5408] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 3596986134, free_ts 0
[  132.996653][ T5408]  post_alloc_hook+0x1f5/0x210
[  133.001446][ T5408]  prep_new_page+0x1c/0x110
[  133.005971][ T5408]  get_page_from_freelist+0x2ca9/0x2d20
[  133.011539][ T5408]  __alloc_pages+0x1fa/0x610
[  133.016145][ T5408]  alloc_slab_page+0x6e/0xf0
[  133.020744][ T5408]  new_slab+0x98/0x3e0
[  133.025266][ T5408]  ___slab_alloc+0x70f/0xb70
[  133.029877][ T5408]  __slab_alloc+0x5e/0xa0
[  133.034221][ T5408]  __kmem_cache_alloc_node+0x204/0x2d0
[  133.039691][ T5408]  __kmalloc_node_track_caller+0xa1/0x1e0
[  133.045424][ T5408]  kstrdup_const+0x5a/0xa0
[  133.049845][ T5408]  __kernfs_new_node+0xa6/0x670
[  133.054712][ T5408]  kernfs_new_node+0x150/0x260
[  133.059505][ T5408]  kernfs_create_link+0xa4/0x200
[  133.064454][ T5408]  sysfs_do_create_link_sd+0x8a/0x110
[  133.069848][ T5408]  sysfs_create_link+0x68/0x80
[  133.074631][ T5408] page_owner free stack trace missing
[  133.080001][ T5408] 
[  133.082332][ T5408] Memory state around the buggy address:
[  133.087968][ T5408]  ffff88810e63d500: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 01 fc fc
[  133.096039][ T5408]  ffff88810e63d580: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc
[  133.104109][ T5408] >ffff88810e63d600: fa fb fc fc fa fb fc fc 00 04 fc fc 00 04 fc fc
[  133.112178][ T5408]                    ^
[  133.116256][ T5408]  ffff88810e63d680: 00 04 fc fc 00 05 fc fc 00 01 fc fc 00 04 fc fc
[  133.124351][ T5408]  ffff88810e63d700: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 01 fc fc
[  133.132424][ T5408] ==================================================================
[  133.158957][ T5347] EXT4-fs (loop9): unmounting filesystem.
[  133.227329][ T5408] Disabling lock debugging due to kernel taint
[  133.237180][ T5408] gadget : fail, usb_ep_queue returned -108
[  133.301043][  T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  133.370475][   T40] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5)
[  133.383119][   T40] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5)
[  133.399045][   T40] usb 9-1: USB disconnect, device number 8
[  133.991165][ T1364] device bridge_slave_1 left promiscuous mode
[  133.997314][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.004954][ T1364] device bridge_slave_0 left promiscuous mode
[  134.011311][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.019173][ T1364] device bridge_slave_1 left promiscuous mode
[  134.025430][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.032914][ T1364] device bridge_slave_0 left promiscuous mode
[  134.039040][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.047498][ T1364] device veth1_macvtap left promiscuous mode
[  134.053602][ T1364] device veth0_vlan left promiscuous mode
[  134.059751][ T1364] device veth1_macvtap left promiscuous mode
[  134.065969][ T1364] device veth0_vlan left promiscuous mode
[  134.643918][ T1364] tipc: Disabling bearer <udp:syz2>
[  134.649274][ T1364] tipc: Left network mode
[  135.141171][ T1364] device bridge_slave_1 left promiscuous mode
[  135.147330][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.154861][ T1364] device bridge_slave_0 left promiscuous mode
[  135.161104][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.168939][ T1364] device bridge_slave_1 left promiscuous mode
[  135.175179][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.182683][ T1364] device bridge_slave_0 left promiscuous mode
[  135.188798][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.196860][ T1364] device bridge_slave_1 left promiscuous mode
[  135.203173][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.210881][ T1364] device bridge_slave_0 left promiscuous mode
[  135.217023][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.225609][ T1364] device veth1_macvtap left promiscuous mode
[  135.231966][ T1364] device veth1_macvtap left promiscuous mode
[  135.238062][ T1364] device veth0_vlan left promiscuous mode
[  135.244269][ T1364] device veth1_macvtap left promiscuous mode
[  135.250330][ T1364] device veth0_vlan left promiscuous mode