last executing test programs:

21.316101034s ago: executing program 2 (id=3):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x5}, 0x5f)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

21.157254148s ago: executing program 2 (id=6):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20040004)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x350759, 0x1}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0xfffffffd, 0x200000, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {0x7}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff000000000000000000000000000000040000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000002"], 0xf8}}, 0x0)

21.140761088s ago: executing program 2 (id=7):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

20.289305779s ago: executing program 2 (id=23):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
utimes(&(0x7f0000000000)='./file7\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)

20.246205181s ago: executing program 2 (id=24):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x8000, &(0x7f0000000440)={[{@fat=@tz_utc}, {@fat=@errors_continue}, {@fat=@check_normal}, {@dots}, {@nodots}, {@fat=@debug}, {@nodots}, {@dots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@nfs}, {@dots}, {@nodots}, {@fat=@allow_utime}, {@nodots}, {@nodots}, {@fat=@quiet}]}, 0x21, 0x25c, &(0x7f0000000640)="$eJzs3cFqE1EUBuAzSdqmBbFrcTHgxlVR3yBIBHFAiGShKwPVTStCuomu8hg+g4/kY3TV3UgzwZRpK0UmuTXzfVDm0J/JnDshuQTuTT4+/nJy/PXsc/nrR/T7efQi5nERcRid6EYlWx47i3o3rpoHAPC/GY0mg9Q90KDs2n/2I2KyExF716Lxzw11BQAAAAAAAAAAQMOs/weA9rl1/X9n462wJtPpYHJw41Nq/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQzkVZPiz/8pe6PwCgeZfzfzfM/wDQJj7/A0D7mP8BoH3evf/wZlAUw1Ge9yPO57PxbFwdq/zV62L4LF84XJ11PpuNd5Z1MXxe5Xk9P1ic34kXN+a78fRJ9fiX2cu3RS3fi+PorXv4AAAAAAAAAAAAAAAAAAAAcC8c5X/U9vd3q/zotryqrnw/QG3/fi8e2b4PAAAAAAAAAAAAAAAAAAAAd3L27fvJ5PT003QTRdbQRR+kaH4Lijvfsf34h0v0I824Iu7J7d2uYvkay7JE70wAAAAAAAAAAAAAAAAAANA+q02/qTsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHRWv/+/viL1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2+B0AAP//4omFiQ==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300))
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180))
rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
chdir(&(0x7f0000000140)='./bus\x00')

20.128742114s ago: executing program 2 (id=25):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r0 = eventfd2(0x0, 0x0)
read$eventfd(r0, &(0x7f0000000000), 0x8)

20.111507244s ago: executing program 32 (id=25):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r0 = eventfd2(0x0, 0x0)
read$eventfd(r0, &(0x7f0000000000), 0x8)

18.300947939s ago: executing program 4 (id=46):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x9}, 0x8a03}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

18.228231191s ago: executing program 4 (id=49):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000001340))
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x2])

18.200981872s ago: executing program 4 (id=50):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'})
r0 = socket$inet(0x2, 0x3, 0x8)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140))
socket$inet(0x2, 0x3, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002010500000000000000000007020006040019"], 0x18}, 0x1, 0x0, 0x0, 0x200080d4}, 0x0)

18.183137342s ago: executing program 4 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00')

18.153722614s ago: executing program 4 (id=53):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb473, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000900000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

18.085613095s ago: executing program 4 (id=55):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
rt_sigsuspend(&(0x7f0000000080)={[0x9e1]}, 0x8)

18.046002496s ago: executing program 33 (id=55):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
rt_sigsuspend(&(0x7f0000000080)={[0x9e1]}, 0x8)

11.406488953s ago: executing program 5 (id=227):
r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xb)
fchdir(r1)
chroot(&(0x7f0000000300)='.\x00')
openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x8a6fe, 0x2)

11.386325743s ago: executing program 5 (id=229):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0)

11.369216864s ago: executing program 5 (id=230):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x5)

11.349262574s ago: executing program 5 (id=231):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0)
rename(&(0x7f00000002c0)='./bus\x00', &(0x7f0000002a80)='./file0\x00')

11.14917053s ago: executing program 5 (id=234):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)
listen(r0, 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000), 0x8)
listen(r1, 0x0)

11.037951822s ago: executing program 5 (id=238):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002400)={0x0, &(0x7f0000000100)=[@cpuid={0x64, 0x18, {0xff, 0x400}}], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x4e})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11.034418342s ago: executing program 34 (id=238):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002400)={0x0, &(0x7f0000000100)=[@cpuid={0x64, 0x18, {0xff, 0x400}}], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x4e})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.34484202s ago: executing program 3 (id=416):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)

2.299441081s ago: executing program 3 (id=418):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1)

2.284258132s ago: executing program 0 (id=419):
keyctl$unlink(0x9, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
syz_open_dev$tty1(0xc, 0x4, 0x1)

2.262944633s ago: executing program 3 (id=420):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

2.208644244s ago: executing program 0 (id=422):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

1.908538382s ago: executing program 0 (id=425):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x3, 0x8000000}}, 0xe8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4)
remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0)

1.796420635s ago: executing program 0 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="66b8d90000000f23d00f21f866350000000c0f23f80f23ce0f20e06635002000000f22e0ba2100b0dfee66b98709000066b88220000066ba000000000f30f7b0008036660febff660f383c43d60fff72000f35", 0x53}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.639929018s ago: executing program 0 (id=428):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

1.55861859s ago: executing program 0 (id=430):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200de5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

1.237058629s ago: executing program 1 (id=436):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x82316000)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800)

1.155572601s ago: executing program 1 (id=437):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)="4ef3", 0x2)

1.131910471s ago: executing program 1 (id=438):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x208010, &(0x7f00000000c0)=ANY=[], 0x0, 0x325, &(0x7f00000007c0)="$eJzs3U1oXFUYxvFnJh+9E00miAoW1Fe7UZGhyVqooSQqDlS0kWpXt+ZGh1xnQu4wOkUyEQrduHDj11oFkUKguBCEUhcuRBJK9+6668K6UvzokZt750tn2jFOjJL/b5E5vO95556cc3JJzoXM9Sfeff1X59yyX1VWGWWf1EYmDsSU2NCjb2xeuf+Fl15+dq5YnH/ebGHu5MysmU09eOn0Wxcevly948Uvpr46pK3prKRrW/du3Xf95snXSpGVIitXqubbmUql6p8JA1t6P1opmD0XBn4UWKkcBWtd+eWwsrpaN7+8dOfE6loQReaX67YS1K1asepa3fxX/VLZCoWCTU4It+BJF2ofzcXNbM8Oi5//7JxuVL9z7tCG0hX3/uVRYh9Z+tpe/3f6dz4+Kenb37tuDvhf67ipe1J4vrZYW0xek/zcskoKFeio8vpN8R5xH28m6x9/fXN2s3j1sW++NrNprYeNtL5RWxzprp9RXtNj6VXb9QsZzc9Yort+TBOd9bPK6+6kprn/duqfKc7P9qwf1yNHOuoLyuvqK6oo1Palh366duL8B8369Rmz4yeKO/VZNetzWmpOkqfPftyX1QEAAAAAAAAAYHcKydH5Tdfn/L4Qdzh31swmp7XefIoY55NWer6e6Xw+8Ofz+aM9z+dHdXh0/75vAAAAAAAOkqh+Lm3Vz674YRisRbtqxH/Kxw2vFcmlkXafe6a6I865xj+66LAanob4hlJ35JO3b1OlnJqRBxZufYkjx0a2dxbrojbaqbHOFRzXsKblsHPub1Rl1Df1y6nOSH7QzTYuqRWRN+gWHdVAY1Z6+hTm+o/HkzTS+klppbLq1Tk3yMw/PabWZvthKMuUScfXv89Tp7+/eNv3Gf/L/PRzea/uRQAAAAD2VvuX/mNqLH9Za5x6/L0BS11+j8cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBBsYt/Obb9Ya+UxY27Pm1GrnSkel44c4OPkQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8JfwQAAP//4lS9fA==")

1.073422563s ago: executing program 3 (id=439):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x2, &(0x7f00000005c0)=<r2=>0x0)
io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

920.830556ms ago: executing program 1 (id=441):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x174)
write$binfmt_script(r0, &(0x7f0000005b40)={'#! ', './file0'}, 0xb)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)

782.43671ms ago: executing program 3 (id=442):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)

733.913681ms ago: executing program 3 (id=443):
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

663.490883ms ago: executing program 1 (id=444):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="8bcceb216f624c06f5ff84087509000000000800", 0x14}, {&(0x7f0000000180)="c04b89ae113ec9356b14657f3b32f8675408c1cf30", 0x15}], 0x3)

576.066275ms ago: executing program 6 (id=446):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

518.086177ms ago: executing program 6 (id=448):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x14, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

509.749767ms ago: executing program 6 (id=449):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='1500\x00', 0x5)

494.424057ms ago: executing program 1 (id=450):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf8, 0x0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0xee640842aed3cc28, 0x7}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0xac, @string={0xac, 0x3, "a2f379c8ad6ce6725a0644ebd040c429b31d3c4f73e2234ec2373e07337f4945df3de1be6e3e05983b1aed8ad70738416346181cc9930b3b160047ef258642ae01ea0fd67c61b76eaa8383c5d0e356477d02b31419cf10a8c88a5255caf0af8b23325a42a6c74e47664a3ce76a9e81c2e4fede60116a0c4c7c4c0041531f3af9904affbdb5d8813493f400fce48cc750887d83a9454a0b1892a877c04508f5ee5700927e68c95b55b380"}}}, 0x0)

485.229347ms ago: executing program 7 (id=451):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000200"/20, @ANYRES32=0x1], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3})

472.674248ms ago: executing program 6 (id=452):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x6000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x4e22, 0x86dd, 0x8}}}}}}, 0x2e)

465.248098ms ago: executing program 7 (id=453):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
unshare(0x22020400)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000140)='bpf_lsm_socket_socketpair\x00')

436.344729ms ago: executing program 6 (id=454):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000100)={[{@nodioread_nolock}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@bh}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000131)
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

308.356602ms ago: executing program 6 (id=455):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x47e, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]})

161.851796ms ago: executing program 7 (id=456):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x80047453, 0x0)

134.953886ms ago: executing program 7 (id=457):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0xeeee8000, 0x2000, 0xb, 0xad, 0x3, 0x4, 0x7c, 0x7, 0x0, 0x2b, 0x9}, {0x100000, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0x22, 0x0, 0xa, 0x0, 0x5, 0xb}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0x3, 0x5, 0x85, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x50000, 0x6000, 0xb, 0x7c, 0x2, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3d}, {0xd000, 0x100002, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0x5000, 0x3000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x4, 0x0, 0x80a0000, [0x6, 0x7, 0x7, 0x3]})

3.83149ms ago: executing program 7 (id=458):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INTERRUPT(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xc1)

0s ago: executing program 7 (id=459):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000280)={[{@noquota}, {@nouid32}, {@auto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_writeback}]}, 0x20, 0x53d, &(0x7f0000000740)="$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")
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts.
[   20.777801][   T30] audit: type=1400 audit(1786028142.648:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.778913][  T277] cgroup: Unknown subsys name 'net'
[   20.800498][   T30] audit: type=1400 audit(1786028142.648:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.827737][   T30] audit: type=1400 audit(1786028142.678:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.827910][  T277] cgroup: Unknown subsys name 'devices'
[   20.941115][  T277] cgroup: Unknown subsys name 'hugetlb'
[   20.946706][  T277] cgroup: Unknown subsys name 'rlimit'
[   21.112622][   T30] audit: type=1400 audit(1786028142.988:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.135845][   T30] audit: type=1400 audit(1786028142.988:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.141203][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.160737][   T30] audit: type=1400 audit(1786028142.988:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.192227][   T30] audit: type=1400 audit(1786028143.038:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.217734][   T30] audit: type=1400 audit(1786028143.038:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.246532][   T30] audit: type=1400 audit(1786028143.128:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.272097][   T30] audit: type=1400 audit(1786028143.128:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.272203][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.695493][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.702726][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.710192][  T285] device bridge_slave_0 entered promiscuous mode
[   21.717085][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.724136][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.731677][  T285] device bridge_slave_1 entered promiscuous mode
[   21.824109][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.831190][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.838560][  T286] device bridge_slave_0 entered promiscuous mode
[   21.846293][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.853332][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.860739][  T286] device bridge_slave_1 entered promiscuous mode
[   21.960099][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.967140][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.974533][  T287] device bridge_slave_0 entered promiscuous mode
[   21.981415][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.988433][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.995717][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.002735][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.013837][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.020873][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.028110][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.035134][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.042958][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.050316][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.057576][  T288] device bridge_slave_0 entered promiscuous mode
[   22.064188][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.071433][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.078708][  T287] device bridge_slave_1 entered promiscuous mode
[   22.093062][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.100952][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.108372][  T288] device bridge_slave_1 entered promiscuous mode
[   22.120961][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.128002][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.135350][  T289] device bridge_slave_0 entered promiscuous mode
[   22.144988][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.152066][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.159429][  T289] device bridge_slave_1 entered promiscuous mode
[   22.233754][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.241253][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.248655][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.255897][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.263954][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.271356][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.304331][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.312886][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.321099][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.328130][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.335647][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.344020][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.351055][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.358364][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.366711][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.373738][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.410196][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.418314][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.425345][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.458245][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.465734][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.473926][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.482087][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.490199][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.508381][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.516697][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.524684][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.532160][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.554034][  T285] device veth0_vlan entered promiscuous mode
[   22.561017][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.569404][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.576420][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.584254][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.592583][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.599614][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.607150][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.615063][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   22.643015][  T285] device veth1_macvtap entered promiscuous mode
[   22.650037][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.658160][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.667520][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.675637][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.683156][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.690624][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.698745][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.706937][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.713956][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.721350][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.729563][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.736564][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.743902][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.752332][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.760270][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.768657][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   22.780109][  T286] device veth0_vlan entered promiscuous mode
[   22.792071][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.799561][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.806887][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.815253][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.823532][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.830586][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.837995][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.846298][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.854658][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   22.863012][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.871229][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.878236][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.885702][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   22.899532][  T286] device veth1_macvtap entered promiscuous mode
[   22.910069][  T288] device veth0_vlan entered promiscuous mode
[   22.918610][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   22.927016][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.935378][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.943115][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   22.951097][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.958956][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.966669][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.984066][  T288] device veth1_macvtap entered promiscuous mode
[   22.993858][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.002235][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.010371][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.018350][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.026479][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.034855][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.043246][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.051517][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.059799][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.067843][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.076179][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.083868][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.092224][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.100550][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.108666][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.123231][  T289] device veth0_vlan entered promiscuous mode
[   23.131435][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.140304][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.148536][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.157518][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.165908][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.173826][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.182470][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.190044][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.200714][  T287] device veth0_vlan entered promiscuous mode
[   23.211290][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.219608][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.227911][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.236428][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.244929][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.253010][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.261679][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.269135][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.287075][  T288] request_module fs-gadgetfs succeeded, but still no fs?
[   23.299373][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.307519][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.324529][  T289] device veth1_macvtap entered promiscuous mode
[   23.346408][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.364166][  T314] loop3: detected capacity change from 0 to 1024
[   23.366935][  T316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.380018][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.396418][  T314] =======================================================
[   23.396418][  T314] WARNING: The mand mount option has been deprecated and
[   23.396418][  T314]          and is ignored by this kernel. Remove the mand
[   23.396418][  T314]          option from the mount to silence this warning.
[   23.396418][  T314] =======================================================
[   23.426522][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.459749][  T287] device veth1_macvtap entered promiscuous mode
[   23.467130][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.483946][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.502273][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.519102][  T314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   23.531573][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.541941][  T329] binder: 328:329 ioctl c0306201 2000000001c0 returned -14
[   23.551717][  T314] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   23.562709][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.591451][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.614343][  T332] loop1: detected capacity change from 0 to 16
[   23.622039][  T314] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.4: path /0/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[   23.642880][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.651808][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.660292][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.695678][  T332] erofs: (device loop1): mounted with root inode @ nid 36.
[   23.725761][   T48] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   23.744054][  T332] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[   23.794078][  T339] loop4: detected capacity change from 0 to 16
[   23.846107][  T332] syz.1.9 (332) used greatest stack depth: 21696 bytes left
[   23.871570][  T339] erofs: (device loop4): mounted with root inode @ nid 36.
[   23.938696][  T352] binder: binder_mmap: 351 200000000000-200000400000 bad vm_flags failed -1
[   23.943043][  T350] loop0: detected capacity change from 0 to 2048
[   24.026980][  T350] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,lazytime,errors=remount-ro,mb_optimize_scan=0x0000000000000001,. Quota mode: none.
[   24.081805][  T350] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   24.104495][  T360] loop4: detected capacity change from 0 to 256
[   24.117749][  T350] EXT4-fs (loop0): Remounting filesystem read-only
[   24.133170][  T350] syz.0.15 (350) used greatest stack depth: 21000 bytes left
[   24.273349][   T63] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   24.354593][  T372] loop2: detected capacity change from 0 to 128
[   24.373560][  T372] incfs: ino conflict with backing FS 1
[   24.449242][   T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   24.609453][  T308] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   24.612505][  T374] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.624149][  T374] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.632535][  T374] device bridge_slave_0 entered promiscuous mode
[   24.641748][  T374] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.648788][  T374] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.655997][   T63] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   24.666703][  T374] device bridge_slave_1 entered promiscuous mode
[   24.673116][   T63] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   24.689331][   T20] usb 5-1: Using ep0 maxpacket: 16
[   24.694745][   T63] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   24.760808][  T374] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.767863][  T374] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.775187][  T374] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.782234][  T374] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.807777][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.815527][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.823499][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.839397][   T20] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   24.849259][  T308] usb 1-1: Using ep0 maxpacket: 8
[   24.858418][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.866637][   T20] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   24.876936][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.884043][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.892383][   T20] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   24.905631][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.913734][   T20] usb 5-1: config 0 interface 0 has no altsetting 0
[   24.920674][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.927709][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.935247][   T63] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[   24.944340][   T20] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   24.953478][   T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   24.953644][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.961541][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.969437][  T308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   24.977400][   T63] usb 2-1: Product: syz
[   24.992033][   T63] usb 2-1: Manufacturer: syz
[   24.998936][   T20] usb 5-1: config 0 descriptor??
[   25.002968][  T308] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   25.003995][   T63] usb 2-1: SerialNumber: syz
[   25.013502][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.036712][  T308] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   25.042352][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.055818][   T63] usb 2-1: Found UVC 1.00 device syz (046d:0821)
[   25.063101][   T63] usb 2-1: No streaming interface found for terminal 2.
[   25.087032][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.095112][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.102691][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.111747][  T322] device bridge_slave_1 left promiscuous mode
[   25.117924][  T322] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.126000][  T322] device bridge_slave_0 left promiscuous mode
[   25.132232][  T322] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.140690][  T322] device veth1_macvtap left promiscuous mode
[   25.147497][  T322] device veth0_vlan left promiscuous mode
[   25.199323][  T308] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   25.208539][  T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.216639][  T308] usb 1-1: Product: syz
[   25.220973][  T308] usb 1-1: Manufacturer: syz
[   25.225625][  T308] usb 1-1: SerialNumber: syz
[   25.232596][  T374] device veth0_vlan entered promiscuous mode
[   25.246491][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.264182][  T374] device veth1_macvtap entered promiscuous mode
[   25.278958][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.302189][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.491167][   T20] hid (null): unknown global tag 0x58
[   25.496770][   T20] hid (null): unknown global tag 0xc
[   25.504008][   T20] hid (null): invalid report_size -2094628929
[   25.617489][  T396] loop5: detected capacity change from 0 to 1024
[   25.649026][  T370] loop0: detected capacity change from 0 to 40427
[   25.649984][  T398] loop3: detected capacity change from 0 to 256
[   25.680894][  T396] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[   25.688294][  T396] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[   25.696155][  T396] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   25.709023][  T307] usb 5-1: USB disconnect, device number 2
[   25.720374][  T396] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none.
[   25.748216][  T396] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   25.767444][  T396] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.32: bg 0: block 112: padding at end of block bitmap is not set
[   25.784223][  T396] EXT4-fs (loop5): Remounting filesystem read-only
[   25.849869][  T408] loop3: detected capacity change from 0 to 16
[   25.858250][   T30] kauditd_printk_skb: 83 callbacks suppressed
[   25.858264][   T30] audit: type=1400 audit(1786028147.728:157): avc:  denied  { read } for  pid=369 comm="syz.0.22" dev="nsfs" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   25.887375][  T408] erofs: (device loop3): mounted with root inode @ nid 36.
[   25.891946][   T30] audit: type=1400 audit(1786028147.748:158): avc:  denied  { open } for  pid=369 comm="syz.0.22" path="net:[4026532639]" dev="nsfs" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   25.925660][  T408] attempt to access beyond end of device
[   25.925660][  T408] loop3: rw=524288, want=1342177528, limit=16
[   25.937650][  T408] attempt to access beyond end of device
[   25.937650][  T408] loop3: rw=0, want=1342177280, limit=16
[   25.953671][   T30] audit: type=1400 audit(1786028147.748:159): avc:  denied  { create } for  pid=409 comm="syz.5.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   25.979510][  T408] attempt to access beyond end of device
[   25.979510][  T408] loop3: rw=0, want=1342177280, limit=16
[   25.983206][   T30] audit: type=1400 audit(1786028147.748:160): avc:  denied  { setopt } for  pid=409 comm="syz.5.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   25.999502][  T415] attempt to access beyond end of device
[   25.999502][  T415] loop3: rw=0, want=1342177280, limit=16
[   26.010361][   T30] audit: type=1400 audit(1786028147.768:161): avc:  denied  { read } for  pid=409 comm="syz.5.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   26.033693][  T408] attempt to access beyond end of device
[   26.033693][  T408] loop3: rw=0, want=1342177280, limit=16
[   26.056152][   T30] audit: type=1400 audit(1786028147.798:162): avc:  denied  { execute } for  pid=407 comm="syz.3.36" path="/8/file2/file1" dev="loop3" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   26.069367][  T415] attempt to access beyond end of device
[   26.069367][  T415] loop3: rw=0, want=1342177280, limit=16
[   26.082650][   T30] audit: type=1400 audit(1786028147.818:163): avc:  denied  { execute } for  pid=411 comm="syz.5.38" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   26.109603][  T408] attempt to access beyond end of device
[   26.109603][  T408] loop3: rw=0, want=1342177280, limit=16
[   26.118186][   T30] audit: type=1400 audit(1786028147.858:164): avc:  denied  { create } for  pid=414 comm="syz.5.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.138051][  T415] attempt to access beyond end of device
[   26.138051][  T415] loop3: rw=0, want=1342177280, limit=16
[   26.148310][   T30] audit: type=1400 audit(1786028147.858:165): avc:  denied  { setopt } for  pid=414 comm="syz.5.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.176998][   T30] audit: type=1400 audit(1786028147.858:166): avc:  denied  { write } for  pid=414 comm="syz.5.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.196317][  T415] attempt to access beyond end of device
[   26.196317][  T415] loop3: rw=0, want=1342177280, limit=16
[   26.254012][  T421] futex_wake_op: syz.4.41 tries to shift op by 144; fix this program
[   26.337026][  T425] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   26.569387][  T308] usb 1-1: 1:1: cannot get freq (v2/v3): err -71
[   26.600972][  T308] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   26.644060][  T308] usb 1-1: USB disconnect, device number 2
[   26.716582][  T455] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.728743][  T455] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.739767][  T455] device bridge_slave_0 entered promiscuous mode
[   26.762392][  T455] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.771195][  T455] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.778655][  T455] device bridge_slave_1 entered promiscuous mode
[   26.860121][  T455] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.867198][  T455] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.874490][  T455] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.881521][  T455] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.921584][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.929426][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.936765][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.949476][   T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   26.957332][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.965766][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.972838][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.980405][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.988548][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.995602][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.009822][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   27.017827][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   27.032451][  T463] F2FS-fs (loop5): Found nat_bits in checkpoint
[   27.035856][  T455] device veth0_vlan entered promiscuous mode
[   27.045697][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.055159][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.063317][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.071001][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.075018][  T463] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   27.098387][  T455] device veth1_macvtap entered promiscuous mode
[   27.115457][   T63] usb 2-1: USB disconnect, device number 2
[   27.123874][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.137733][  T463] attempt to access beyond end of device
[   27.137733][  T463] loop5: rw=2049, want=53384, limit=40427
[   27.154887][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   27.185864][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.202102][   T20] usb 4-1: Using ep0 maxpacket: 16
[   27.283321][  T480] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none.
[   27.304044][  T480] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.335477][  T479] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.65: lblock 0 mapped to illegal pblock 0 (length 1)
[   27.348746][   T20] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.370833][   T20] usb 4-1: config 0 interface 0 has no altsetting 0
[   27.373402][  T478] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   27.377618][   T20] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   27.387733][  T478] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   27.400558][  T479] EXT4-fs (loop1): Remounting filesystem read-only
[   27.403820][  T478] F2FS-fs (loop6): invalid crc value
[   27.417911][  T479] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.65: lblock 0 mapped to illegal pblock 0 (length 1)
[   27.420519][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.431621][  T479] EXT4-fs (loop1): Remounting filesystem read-only
[   27.439122][  T375] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   27.449608][  T480] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #15: comm syz.1.65: lblock 0 mapped to illegal pblock 0 (length 1)
[   27.456124][  T478] F2FS-fs (loop6): Found nat_bits in checkpoint
[   27.466765][  T480] EXT4-fs (loop1): Remounting filesystem read-only
[   27.473501][  T488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.66'.
[   27.491916][   T20] usb 4-1: config 0 descriptor??
[   27.514590][  T478] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   27.521707][  T478] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   27.565676][   T45] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   27.574977][   T45] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   27.859318][  T375] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.869672][  T375] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.879569][  T375] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   27.889393][  T375] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   27.960676][   T20] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[   28.059321][  T375] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   28.068416][  T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.076480][  T473] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   28.084198][  T375] usb 1-1: Product: syz
[   28.088338][  T375] usb 1-1: Manufacturer: syz
[   28.092981][  T375] usb 1-1: SerialNumber: syz
[   28.129692][  T375] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   28.141027][  T375] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   28.151754][  T375] usbserial_generic 1-1:1.0: generic converter detected
[   28.159421][  T375] usb 1-1: generic converter now attached to ttyUSB0
[   28.343183][   T39] usb 1-1: USB disconnect, device number 3
[   28.349834][   T39] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   28.358031][   T39] usbserial_generic 1-1:1.0: device disconnected
[   28.447746][  T529] netlink: 51 bytes leftover after parsing attributes in process `syz.5.83'.
[   28.456782][  T473] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.467234][  T473] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.474561][  T308] usb 4-1: USB disconnect, device number 2
[   28.505755][  T535] set_capacity_and_notify: 3 callbacks suppressed
[   28.505769][  T535] loop5: detected capacity change from 0 to 256
[   28.549726][  T541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'.
[   28.559379][  T473] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   28.568476][  T473] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   28.576934][  T473] usb 7-1: SerialNumber: syz
[   28.685429][  T557] loop1: detected capacity change from 0 to 1024
[   28.730296][  T557] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,lazytime,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[   28.750116][  T557] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.765333][  T557] EXT4-fs (loop1): shut down requested (2)
[   28.810149][  T306] device bridge_slave_1 left promiscuous mode
[   28.816430][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.825597][  T306] device bridge_slave_0 left promiscuous mode
[   28.836384][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.844655][  T306] device veth1_macvtap left promiscuous mode
[   28.851329][  T473] usb 7-1: 0:2 : does not exist
[   28.865921][  T306] device veth0_vlan left promiscuous mode
[   28.873348][  T473] usb 7-1: USB disconnect, device number 2
[   28.889959][  T567] loop1: detected capacity change from 0 to 128
[   28.949283][   T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   28.978804][  T571] loop1: detected capacity change from 0 to 256
[   28.994606][  T571] exfat: Deprecated parameter 'utf8'
[   29.000204][  T571] exfat: Deprecated parameter 'namecase'
[   29.007998][  T571] exfat: Deprecated parameter 'utf8'
[   29.022040][  T571] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   29.111624][  T586] loop0: detected capacity change from 0 to 4096
[   29.121339][  T588] loop3: detected capacity change from 0 to 1024
[   29.150355][  T586] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   29.165192][  T586] EXT4-fs (loop0): shut down requested (2)
[   29.172008][  T586] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   29.189270][  T586] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   29.189461][  T588] EXT4-fs (loop3): Ignoring removed orlov option
[   29.209254][   T39] usb 6-1: Using ep0 maxpacket: 8
[   29.222561][  T588] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[   29.304763][  T600] IPv6: addrconf: prefix option has invalid lifetime
[   29.339276][   T39] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[   29.353533][   T39] usb 6-1: config 179 has no interface number 0
[   29.365988][   T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   29.378948][  T607] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4015170203 (32121361624 ns) > initial count (30716351936 ns). Using initial count to start timer.
[   29.396564][   T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1793, setting to 1024
[   29.396597][   T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   29.396619][   T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   29.396637][   T39] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   29.396665][   T39] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   29.396683][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.421637][  T553] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   29.492042][   T39] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input4
[   29.549733][  T598] loop0: detected capacity change from 0 to 40427
[   29.588014][  T598] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[   29.606384][  T598] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   29.617554][  T598] F2FS-fs (loop0): invalid crc value
[   29.624421][  T598] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   29.658633][  T598] F2FS-fs (loop0): Start checkpoint disabled!
[   29.675717][  T598] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   29.683062][  T598] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   29.772713][  T553] loop5: detected capacity change from 0 to 4096
[   29.792273][  T632] loop6: detected capacity change from 0 to 512
[   29.802232][  T553] EXT4-fs (loop5): Test dummy encryption mode enabled
[   29.812843][  T553] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[   29.825254][  T553] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   29.833531][  T553] System zones: 0-5
[   29.838448][  T553] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[   29.843589][  T375] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   29.869948][   T39] usb 6-1: USB disconnect, device number 2
[   29.878311][  T632] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   29.891803][  T632] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   29.900668][   T39] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   29.905792][  T632] EXT4-fs (loop6): 1 truncate cleaned up
[   29.917542][  T632] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   29.974643][  T638] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   29.982803][  T638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'.
[   29.992371][  T638] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.999564][  T638] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.048370][  T642] loop0: detected capacity change from 0 to 128
[   30.086102][  T642] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   30.152479][  T476] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   30.231295][  T375] usb 2-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   30.246589][  T375] usb 2-1: config 1 interface 0 has no altsetting 0
[   30.259058][  T653] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   30.280332][  T653] exFAT-fs (loop6): error, invalid size(size(4096) > aligned(9223372036854777344)
[   30.280332][  T653] 
[   30.291992][  T653] exFAT-fs (loop6): Filesystem has been set read-only
[   30.300459][  T653] exFAT-fs (loop6): error, invalid size(size(4096) > aligned(9223372036854777344)
[   30.300459][  T653] 
[   30.402115][  T658] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   30.412810][  T658] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.440730][  T658] fs-verity: sha512 using implementation "sha512-avx2"
[   30.489275][  T375] usb 2-1: string descriptor 0 read error: -22
[   30.495507][  T375] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40
[   30.508553][  T663] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   30.516086][  T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.526407][  T663] EXT4-fs (loop5): invalid journal inode
[   30.542202][  T663] EXT4-fs (loop5): can't get journal size
[   30.550257][  T663] EXT4-fs (loop5): 1 truncate cleaned up
[   30.555911][  T663] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   30.559303][  T622] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   30.576090][  T668] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   30.721687][  T686] erofs: (device loop3): mounted with root inode @ nid 36.
[   30.751182][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   30.780606][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   30.802633][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   30.838101][  T538] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   30.845886][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   30.854179][  T538] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   30.878700][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   30.902798][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   30.928105][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   30.966313][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   30.988984][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.013043][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.035420][  T473] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   31.043220][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.065914][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.089289][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.111730][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.139570][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.193330][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.227455][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.271092][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.295642][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.318778][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.341489][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.364776][  T375] cypress 0003:04B4:ED81.0004: unknown global tag 0xc
[   31.372696][  T375] cypress 0003:04B4:ED81.0004: item 0 0 1 12 parsing failed
[   31.380826][  T375] cypress 0003:04B4:ED81.0004: parse failed
[   31.386750][  T375] cypress: probe of 0003:04B4:ED81.0004 failed with error -22
[   31.397010][  T705] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   31.399897][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.468160][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.471060][   T30] kauditd_printk_skb: 92 callbacks suppressed
[   31.471072][   T30] audit: type=1400 audit(1786028153.348:259): avc:  denied  { map } for  pid=704 comm="syz.5.154" path="/30/file1/cgroup.stat" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   31.489382][  T705] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm syz.5.154: bg 0: bad block bitmap checksum
[   31.531394][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.554130][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.577116][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.591819][  T716] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   31.611481][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.619310][  T473] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   31.643370][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.665699][  T686] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192]
[   31.679403][  T473] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.704343][   T30] audit: type=1400 audit(1786028153.578:260): avc:  denied  { map } for  pid=715 comm="syz.0.159" path="/30/file0/memory.events.local" dev="loop0" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.719128][  T538] usb 2-1: USB disconnect, device number 3
[   31.746365][  T473] usb 7-1: Product: syz
[   31.750777][  T473] usb 7-1: Manufacturer: syz
[   31.755379][  T473] usb 7-1: SerialNumber: syz
[   31.780169][   T30] audit: type=1400 audit(1786028153.658:261): avc:  denied  { mount } for  pid=718 comm="syz.5.160" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   31.806872][   T30] audit: type=1400 audit(1786028153.658:262): avc:  denied  { search } for  pid=718 comm="syz.5.160" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   31.829107][   T30] audit: type=1400 audit(1786028153.658:263): avc:  denied  { write } for  pid=718 comm="syz.5.160" name="inject" dev="tracefs" ino=8077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   31.861108][   T30] audit: type=1400 audit(1786028153.678:264): avc:  denied  { create } for  pid=717 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   31.884326][   T30] audit: type=1400 audit(1786028153.678:265): avc:  denied  { connect } for  pid=717 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   31.922149][   T30] audit: type=1400 audit(1786028153.798:266): avc:  denied  { watch watch_reads } for  pid=732 comm="syz.5.167" path="/34" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   31.944854][   T30] audit: type=1400 audit(1786028153.808:267): avc:  denied  { watch watch_reads } for  pid=725 comm="syz.3.165" path=2F70726F632F35382F7461736B2F3539202864656C6574656429 dev="proc" ino=18146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   31.980675][  T731] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   31.991794][  T731] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.006411][  T731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'.
[   32.034622][  T738] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,lazytime,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[   32.054157][  T738] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.068680][  T738] EXT4-fs (loop5): shut down requested (2)
[   32.094135][   T30] audit: type=1400 audit(1786028153.968:268): avc:  denied  { getopt } for  pid=745 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.162057][  T748] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   32.172578][  T748] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0003]
[   32.180865][  T748] System zones: 0-5
[   32.192022][  T748] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nodioread_nolock,min_batch_time=0x0000000000000002,delalloc,noinit_itable,noquota,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[   32.275424][  T753] device syzkaller0 entered promiscuous mode
[   32.419326][  T767] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   32.454531][  T767] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback.
[   32.472574][  T767] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.645213][  T804] EXT4-fs (loop1): Test dummy encryption mode enabled
[   32.653305][  T804] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.196: inode has both inline data and extents flags
[   32.666669][  T804] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.196: couldn't read orphan inode 15 (err -117)
[   32.679114][  T804] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   32.742674][  T804] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   32.793947][  T814] EXT4-fs (loop3): unsupported inode size: 11776
[   32.802530][  T814] EXT4-fs (loop3): blocksize: 4096
[   32.889419][  T473] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42
[   32.896990][  T473] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   32.921417][  T473] cdc_ncm 7-1:1.0: setting rx_max = 2048
[   32.953717][  T814] syz.3.198 (814) used greatest stack depth: 20480 bytes left
[   33.061161][  T855] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8)
[   33.080428][  T855] FAT-fs (loop5): Filesystem has been set read-only
[   33.089240][  T855] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522)
[   33.131242][  T473] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42
[   33.164461][  T473] usb 7-1: USB disconnect, device number 3
[   33.181857][  T473] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM
[   33.269154][  T896] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,,errors=continue. Quota mode: none.
[   33.300172][  T915] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   33.311092][  T915] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[   33.326147][  T915] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   33.346805][  T902] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.228: bad orphan inode 15
[   33.357927][  T902] ext4_test_bit(bit=14, block=18) = 1
[   33.363842][  T902] is_bad_inode(inode)=0
[   33.373315][  T902] NEXT_ORPHAN(inode)=1023
[   33.377680][  T902] max_ino=32
[   33.379267][  T375] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   33.380922][  T902] i_nlink=0
[   33.394464][  T902] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #15: comm syz.0.228: corrupted xattr block 19
[   33.405576][  T915] incfs: ino conflict with backing FS 1
[   33.415440][  T915] exFAT-fs (loop5): error, found bogus dentry(18) beyond unused empty group(3) (start_clu : 5, cur_clu : 5)
[   33.420220][  T902] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117)
[   33.436106][  T902] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   33.436914][  T915] exFAT-fs (loop5): Filesystem has been set read-only
[   33.447223][  T902] ext4 filesystem being mounted at /42/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   33.532554][  T942] process 'syz.1.235' launched './file1' with NULL argv: empty string added
[   33.565823][  T946] set_capacity_and_notify: 18 callbacks suppressed
[   33.565840][  T946] loop0: detected capacity change from 0 to 128
[   33.624560][  T953] loop1: detected capacity change from 0 to 1024
[   33.653045][  T953] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   33.658983][  T949] loop0: detected capacity change from 0 to 4096
[   33.665104][  T953] EXT4-fs (loop1): Ignoring removed orlov option
[   33.695784][  T953] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[   33.728470][  T949] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   33.759306][  T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.772544][  T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.784053][  T375] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   33.800548][  T375] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   33.802528][  T965] loop6: detected capacity change from 0 to 512
[   33.809629][  T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.836439][  T958] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.843608][  T958] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.849565][  T375] usb 4-1: config 0 descriptor??
[   33.851279][  T958] device bridge_slave_0 entered promiscuous mode
[   33.862392][  T958] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.870270][  T958] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.878836][  T958] device bridge_slave_1 entered promiscuous mode
[   33.922599][  T965] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.244: iget: bad i_size value: 38620345925642
[   33.939239][  T965] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.244: couldn't read orphan inode 15 (err -117)
[   33.952052][  T965] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   33.982724][  T965] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.244: bg 0: block 5: invalid block bitmap
[   34.011265][  T958] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.018356][  T958] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.025660][  T958] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.032705][  T958] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.043355][  T965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 17 with error 28
[   34.055690][  T965] EXT4-fs (loop6): This should not happen!! Data will be lost
[   34.055690][  T965] 
[   34.081901][  T965] EXT4-fs (loop6): Total free blocks count 0
[   34.082147][  T987] using random self ethernet address
[   34.087928][  T965] EXT4-fs (loop6): Free/Dirty block details
[   34.087944][  T965] EXT4-fs (loop6): free_blocks=0
[   34.094784][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.099434][  T965] EXT4-fs (loop6): dirty_blocks=17
[   34.104686][  T987] using random host ethernet address
[   34.111645][  T965] EXT4-fs (loop6): Block reservation details
[   34.116904][  T322] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.122258][  T965] EXT4-fs (loop6): i_reserved_data_blocks=17
[   34.140925][  T322] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.173505][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.182020][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.191923][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.198963][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.207713][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.216074][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.224831][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.231911][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.239387][  T538] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   34.247372][  T476] device bridge_slave_1 left promiscuous mode
[   34.253538][  T476] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.261157][  T476] device bridge_slave_0 left promiscuous mode
[   34.267292][  T476] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.276221][  T476] device veth1_macvtap left promiscuous mode
[   34.287748][  T996] loop6: detected capacity change from 0 to 128
[   34.287846][  T476] device veth0_vlan left promiscuous mode
[   34.320305][  T375] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[   34.338574][  T375] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   34.346477][ T1002] overlayfs: invalid redirect (./file0/file1)
[   34.405810][ T1007] loop6: detected capacity change from 0 to 1024
[   34.459253][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.467411][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.472872][ T1009] loop0: detected capacity change from 0 to 2048
[   34.475634][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.489959][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.501345][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.509689][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.519676][  T538] usb 2-1: Using ep0 maxpacket: 32
[   34.528756][  T958] device veth0_vlan entered promiscuous mode
[   34.541335][  T958] device veth1_macvtap entered promiscuous mode
[   34.558787][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.567825][ T1009] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[   34.584536][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.593774][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.596924][ T1009] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.622550][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.630776][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.638482][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.646221][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.648158][  T473] usb 4-1: USB disconnect, device number 3
[   34.653805][  T538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.671272][  T538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.681347][  T538] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   34.691142][  T538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.693816][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.708337][  T538] usb 2-1: config 0 descriptor??
[   34.710507][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.721839][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.730280][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.749748][  T538] hub 2-1:0.0: USB hub found
[   34.768516][ T1020] loop0: detected capacity change from 0 to 128
[   34.795969][ T1020] Invalid ELF header len 1
[   34.801292][ T1022] syz.7.269 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   34.811755][ T1026] xt_hashlimit: size too large, truncated to 1048576
[   34.818363][ T1022] exfat: Deprecated parameter 'debug'
[   34.826046][ T1022] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.837389][ T1022] exFAT-fs (loop7): unable to read boot sector
[   34.847780][ T1022] exFAT-fs (loop7): failed to read boot sector
[   34.854115][ T1022] exFAT-fs (loop7): failed to recognize exfat type
[   34.892647][ T1033] loop0: detected capacity change from 0 to 1024
[   34.943157][ T1033] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,data_err=ignore,grpquota,,errors=continue. Quota mode: writeback.
[   34.959318][  T538] hub 2-1:0.0: 1 port detected
[   34.970690][ T1033] 9pnet_virtio: no channels available for device syz
[   34.985024][ T1033] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.0.273: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[   35.013629][ T1033] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1822: Corrupt filesystem
[   35.041561][ T1033] EXT4-fs error (device loop0): __ext4_new_inode:1082: comm syz.0.273: reserved inode found cleared - inode=2
[   35.107277][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.281'.
[   35.127752][ T1046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.281'.
[   35.260006][ T1069] netlink: 20 bytes leftover after parsing attributes in process `syz.7.289'.
[   35.269631][ T1069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   35.276860][ T1069] IPv6: NLM_F_CREATE should be set when creating new route
[   35.284093][ T1069] IPv6: NLM_F_CREATE should be set when creating new route
[   35.293715][ T1069] netlink: 20 bytes leftover after parsing attributes in process `syz.7.289'.
[   35.302617][ T1069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   35.466533][ T1083] loop0: detected capacity change from 0 to 40427
[   35.473399][  T307] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   35.572475][ T1083] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   35.580915][ T1083] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   35.609292][  T375] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   35.617004][ T1083] F2FS-fs (loop0): invalid crc value
[   35.619271][   T39] hub 2-1:0.0: activate --> -90
[   35.628484][ T1083] F2FS-fs (loop0): Found nat_bits in checkpoint
[   35.662831][ T1083] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   35.670062][ T1083] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   35.720352][ T1085] F2FS-fs (loop7): Invalid log sectorsize (0)
[   35.726505][ T1085] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   35.744245][ T1085] F2FS-fs (loop7): invalid crc value
[   35.770159][ T1085] F2FS-fs (loop7): Found nat_bits in checkpoint
[   35.794314][ T1085] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   35.801412][ T1085] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   35.859328][  T307] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[   35.869234][  T375] usb 4-1: Using ep0 maxpacket: 8
[   35.874330][  T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.885440][  T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.895391][  T307] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   35.908443][  T307] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   35.917753][  T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.926511][  T307] usb 7-1: config 0 descriptor??
[   36.009276][  T375] usb 4-1: config 3 has an invalid interface number: 219 but max is 0
[   36.017568][  T375] usb 4-1: config 3 has no interface number 0
[   36.023831][  T375] usb 4-1: config 3 interface 219 has no altsetting 0
[   36.051877][  T538] usb 2-1: USB disconnect, device number 4
[   36.180907][ T1101] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   36.192029][ T1101] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.213334][ T1101] EXT4-fs (loop7): shut down requested (2)
[   36.229353][  T375] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.15
[   36.238506][  T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.247215][  T375] usb 4-1: Product: syz
[   36.251428][  T375] usb 4-1: Manufacturer: syz
[   36.256022][  T375] usb 4-1: SerialNumber: syz
[   36.431050][  T307] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd
[   36.439998][  T307] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[   36.447616][  T307] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[   36.456771][  T307] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[   36.569607][  T375] ftdi_sio 4-1:3.219: FTDI USB Serial Device converter detected
[   36.597711][  T375] usb 4-1: Detected FT-X
[   36.619296][  T375] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   36.639269][  T375] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   36.659264][  T375] ftdi_sio 4-1:3.219: GPIO initialisation failed: -71
[   36.670134][ T1105] F2FS-fs (loop7): invalid crc value
[   36.680188][  T375] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   36.710146][ T1105] F2FS-fs (loop7): Found nat_bits in checkpoint
[   36.713745][  T375] usb 4-1: USB disconnect, device number 4
[   36.720098][   T39] usb 7-1: USB disconnect, device number 4
[   36.744599][  T375] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   36.765514][  T375] ftdi_sio 4-1:3.219: device disconnected
[   36.789270][ T1105] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[   36.853251][ T1105] F2FS-fs (loop7): Corrupted max_depth of 3: 16842753
[   37.077884][ T1111] F2FS-fs (loop0): Test dummy encryption mode enabled
[   37.099689][ T1111] F2FS-fs (loop0): invalid crc value
[   37.139985][ T1111] F2FS-fs (loop0): Found nat_bits in checkpoint
[   37.213056][ T1111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   37.246713][ T1135] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   37.310187][ T1116] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[   37.318923][ T1111] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   37.326960][ T1116] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   37.350706][ T1116] F2FS-fs (loop1): invalid crc value
[   37.371123][ T1116] F2FS-fs (loop1): Found nat_bits in checkpoint
[   37.418735][ T1116] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   37.438728][ T1116] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   37.467324][  T375] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   37.533845][   T30] kauditd_printk_skb: 68 callbacks suppressed
[   37.533859][   T30] audit: type=1400 audit(1786028159.408:337): avc:  denied  { load_policy } for  pid=1151 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   37.719217][  T375] usb 8-1: Using ep0 maxpacket: 16
[   37.773148][   T30] audit: type=1400 audit(1786028159.648:338): avc:  denied  { relabelfrom } for  pid=1164 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   37.794103][   T30] audit: type=1400 audit(1786028159.648:339): avc:  denied  { relabelto } for  pid=1164 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   37.859293][  T375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.876449][  T375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.897090][  T375] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   37.912244][  T375] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   37.921480][  T375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.930444][  T375] usb 8-1: config 0 descriptor??
[   38.151281][   T30] audit: type=1400 audit(1786028160.028:340): avc:  denied  { read } for  pid=1193 comm="syz.6.334" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   38.230469][ T1199] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.300784][ T1205] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   38.311861][ T1205] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.409942][  T375] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max
[   38.419097][  T375] microsoft 0003:045E:07DA.0007: unsupported Resolution Multiplier 0
[   38.440160][  T375] microsoft 0003:045E:07DA.0007: implement() called with n (152) > 32! (kworker/0:4)
[   38.450586][ T1214] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002]
[   38.459405][ T1214] System zones: 0-2, 18-18, 34-35
[   38.465464][ T1214] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,debug,sysvgroups,grpjquota=,. Quota mode: writeback.
[   38.479939][ T1214] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.504276][   T30] audit: type=1400 audit(1786028160.378:341): avc:  denied  { write } for  pid=1213 comm="syz.0.343" name="anycast6" dev="proc" ino=4026532685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   38.585788][   T30] audit: type=1400 audit(1786028160.458:342): avc:  denied  { name_bind } for  pid=1224 comm="syz.0.345" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   38.619600][  T375] microsoft 0003:045E:07DA.0007: No inputs registered, leaving
[   38.629018][  T375] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[   38.641111][  T375] microsoft 0003:045E:07DA.0007: no inputs found
[   38.647450][  T375] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[   38.671577][  T375] usb 8-1: USB disconnect, device number 2
[   38.932683][ T1240] set_capacity_and_notify: 9 callbacks suppressed
[   38.932699][ T1240] loop3: detected capacity change from 0 to 128
[   38.952948][   T30] audit: type=1400 audit(1786028160.828:343): avc:  denied  { mounton } for  pid=1239 comm="syz.3.352" path="/53/file1/file1" dev="loop3" ino=1048630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   39.043712][ T1244] loop3: detected capacity change from 0 to 128
[   39.113999][   T30] audit: type=1400 audit(1786028160.988:344): avc:  denied  { remount } for  pid=1243 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   39.200645][   T30] audit: type=1400 audit(1786028161.078:345): avc:  denied  { mount } for  pid=1247 comm="syz.3.355" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   39.258669][   T30] audit: type=1400 audit(1786028161.118:346): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   39.354198][ T1253] loop1: detected capacity change from 0 to 256
[   39.441726][ T1253] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   39.520795][ T1267] loop7: detected capacity change from 0 to 512
[   39.649735][ T1253] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[   39.669818][ T1232] loop0: detected capacity change from 0 to 262144
[   39.676727][ T1253] FAT-fs (loop1): Filesystem has been set read-only
[   39.684595][ T1267] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   39.686956][ T1232] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9)
[   39.697647][ T1253] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[   39.705934][ T1232] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   39.722393][ T1232] F2FS-fs (loop0): Unrecognized mount option "discard_unim7ӵԐt����!c�t=section" or missing value
[   39.735112][ T1267] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.765351][ T1267] capability: warning: `syz.7.364' uses 32-bit capabilities (legacy support in use)
[   39.786731][ T1242] loop6: detected capacity change from 0 to 131072
[   39.879822][ T1242] F2FS-fs (loop6): Test dummy encryption mode enabled
[   39.896930][ T1242] F2FS-fs (loop6): invalid crc value
[   39.938606][ T1242] F2FS-fs (loop6): Found nat_bits in checkpoint
[   39.999547][ T1283] ------------[ cut here ]------------
[   40.014281][ T1283] WARNING: CPU: 0 PID: 1283 at mm/page_alloc.c:5799 __alloc_pages+0x392/0x460
[   40.029535][ T1242] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   40.094433][ T1283] Modules linked in:
[   40.119308][ T1283] CPU: 1 PID: 1283 Comm: syz.3.369 Not tainted syzkaller #0
[   40.146445][ T1283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.179262][ T1283] RIP: 0010:__alloc_pages+0x392/0x460
[   40.184727][ T1283] Code: ff e8 82 f3 09 03 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 41 89 ff 4c 89 e7 e8 a6 cb 04 00 44 89 ff e9 59 fd ff ff <0f> 0b e9 16 ff ff ff 65 8b 05 a8 b6 5d 7e 89 44 24 08 c1 e8 06 48
[   40.208148][ T1291] loop1: detected capacity change from 0 to 4096
[   40.226125][ T1283] RSP: 0018:ffffc9000115f720 EFLAGS: 00010246
[   40.237850][ T1283] RAX: ffffc9000115f780 RBX: 000000000000000f RCX: 0000000000000000
[   40.258904][ T1283] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000115f798
[   40.259811][ T1291] EXT4-fs (loop1): Test dummy encryption mode enabled
[   40.292828][ T1283] RBP: ffffc9000115f808 R08: ffffc9000115f797 R09: ffffc9000115f780
[   40.309744][ T1291] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5
[   40.309744][ T1291] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   40.309744][ T1291] 
[   40.312385][ T1293] loop7: detected capacity change from 0 to 512
[   40.336169][ T1283] R10: dffffc0000000000 R11: fffff5200022bef3 R12: ffffc9000115f760
[   40.344244][ T1283] R13: dffffc0000000000 R14: 1ffff9200022bee8 R15: 0000000000000000
[   40.352482][ T1283] FS:  00007f4210e226c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   40.357256][ T1291] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   40.361474][ T1283] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   40.383620][ T1283] CR2: 00007ff6c0bdd000 CR3: 0000000115cce000 CR4: 00000000003506a0
[   40.391702][ T1283] DR0: 0000000000000007 DR1: 000000affffffffd DR2: 4000000000010022
[   40.399747][ T1283] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   40.400806][ T1291] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000026d9bdcd,test_dummy_encryption=v1,noacl,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,bsdgroups,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000005,,errors=continue. Quota mode: writeback.
[   40.407768][ T1283] Call Trace:
[   40.438244][ T1283]  <TASK>
[   40.442105][ T1293] EXT4-fs (loop7): Ignoring removed oldalloc option
[   40.442154][ T1283]  ? prep_new_page+0x110/0x110
[   40.452048][ T1293] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[   40.453475][ T1283]  kmalloc_order+0x4c/0x160
[   40.467302][ T1283]  ? slab_post_alloc_hook+0x6d/0x2b0
[   40.472636][ T1283]  kmalloc_order_trace+0x18/0xb0
[   40.477573][ T1283]  __kmalloc+0x199/0x2c0
[   40.481840][ T1283]  hashtab_init+0xca/0x160
[   40.486261][ T1283]  symtab_init+0x40/0x60
[   40.490534][ T1283]  policydb_read+0x9a6/0x2d10
[   40.495214][ T1283]  security_load_policy+0x158/0xf00
[   40.500518][ T1283]  ? irqentry_exit+0x37/0x40
[   40.505172][ T1283]  ? exc_page_fault+0x5e/0xb0
[   40.510157][ T1283]  ? asm_exc_page_fault+0x27/0x30
[   40.515197][ T1283]  ? selinux_policy_commit+0x560/0x560
[   40.516881][ T1293] EXT4-fs (loop7): mounted filesystem without journal. Opts: oldalloc,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   40.520833][ T1283]  ? copy_user_enhanced_fast_string+0xe/0x40
[   40.549405][ T1293] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.565825][ T1283]  ? _copy_from_user+0x95/0xd0
[   40.570992][ T1283]  sel_write_load+0x386/0x600
[   40.593685][ T1283]  ? sel_make_dir+0x270/0x270
[   40.606863][ T1283]  ? security_file_permission+0x83/0xa0
[   40.613370][ T1283]  ? sel_make_dir+0x270/0x270
[   40.618063][ T1283]  vfs_write+0x404/0xfd0
[   40.622757][ T1283]  ? file_end_write+0x1b0/0x1b0
[   40.627666][ T1283]  ? __kasan_check_write+0x14/0x20
[   40.632831][ T1283]  ? mutex_lock+0x9b/0x1c0
[   40.639349][ T1283]  ? wait_for_completion_killable_timeout+0x10/0x10
[   40.646144][ T1283]  ? __fget_files+0x2e1/0x340
[   40.661204][ T1283]  ? __fdget_pos+0x2d2/0x380
[   40.676017][ T1283]  ? ksys_write+0x70/0x260
[   40.680587][ T1283]  ksys_write+0x14a/0x260
[   40.691396][ T1304] loop1: detected capacity change from 0 to 256
[   40.697882][ T1283]  ? __ia32_sys_read+0x90/0x90
[   40.703051][ T1283]  ? __kasan_check_write+0x14/0x20
[   40.722741][ T1283]  ? switch_fpu_return+0x15d/0x2c0
[   40.777853][ T1283]  __x64_sys_write+0x7b/0x90
[   40.818080][ T1283]  x64_sys_call+0x8ef/0x9a0
[   40.831599][ T1310] input: syz1 as /devices/virtual/input/input5
[   40.838234][ T1283]  do_syscall_64+0x4c/0xa0
[   40.846465][ T1283]  ? clear_bhb_loop+0x50/0xa0
[   40.868566][ T1283]  ? clear_bhb_loop+0x50/0xa0
[   40.878553][ T1283]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   40.891334][ T1283] RIP: 0033:0x7f42123c90d9
[   40.895769][ T1283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.922449][ T1283] RSP: 002b:00007f4210e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   40.954346][ T1283] RAX: ffffffffffffffda RBX: 00007f4212650fa0 RCX: 00007f42123c90d9
[   40.971802][ T1283] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[   40.989370][ T1283] RBP: 00007f4212460024 R08: 0000000000000000 R09: 0000000000000000
[   41.012345][ T1325] loop7: detected capacity change from 0 to 512
[   41.018672][ T1283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   41.027474][ T1283] R13: 00007f4212651038 R14: 00007f4212650fa0 R15: 00007ffc700ed618
[   41.038513][ T1325] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   41.048585][ T1283]  </TASK>
[   41.051743][ T1283] ---[ end trace 336a3c68a3cf00fa ]---
[   41.057708][ T1283] SELinux: failed to load policy
[   41.063875][ T1325] EXT4-fs (loop7): 1 truncate cleaned up
[   41.069732][ T1325] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[   41.423356][ T1298] F2FS-fs (loop0): invalid crc value
[   41.441739][ T1300] F2FS-fs (loop6): Test dummy encryption mode enabled
[   41.470012][ T1298] F2FS-fs (loop0): Found nat_bits in checkpoint
[   41.478850][ T1300] F2FS-fs (loop6): invalid crc value
[   41.517943][ T1300] F2FS-fs (loop6): Found nat_bits in checkpoint
[   41.524559][ T1298] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   41.574903][ T1300] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   41.586762][ T1298] syz.0.375 (pid 1298) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   41.756088][ T1336] F2FS-fs (loop3): invalid crc value
[   41.803211][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.812374][ T1336] F2FS-fs (loop3): Found nat_bits in checkpoint
[   41.861618][ T1336] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   41.879398][ T1336] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   42.240574][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   42.253704][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   42.276805][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   42.295152][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   42.304661][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   42.318230][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   42.339417][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   42.355448][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   42.454747][ T1420] EXT4-fs (loop0): Ignoring removed orlov option
[   42.492510][ T1420] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[   42.601441][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   42.601456][   T30] audit: type=1400 audit(1786028164.478:360): avc:  denied  { rename } for  pid=1418 comm="syz.0.422" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   42.796241][ T1430] mmap: syz.0.425 (1430) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   42.903695][ T1395] F2FS-fs (loop7): invalid crc value
[   42.921435][ T1395] F2FS-fs (loop7): Found nat_bits in checkpoint
[   42.941094][   T30] audit: type=1400 audit(1786028164.808:361): avc:  denied  { read write } for  pid=1437 comm="syz.1.427" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   42.999941][ T1395] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   43.049242][   T30] audit: type=1400 audit(1786028164.808:362): avc:  denied  { open } for  pid=1437 comm="syz.1.427" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.129327][   T30] audit: type=1400 audit(1786028164.848:363): avc:  denied  { ioctl } for  pid=1437 comm="syz.1.427" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.184721][   T30] audit: type=1400 audit(1786028164.908:364): avc:  denied  { mounton } for  pid=1440 comm="syz.0.428" path="/100/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   43.241647][ T1451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'.
[   43.259418][   T30] audit: type=1400 audit(1786028164.978:365): avc:  denied  { setattr } for  pid=1394 comm="syz.7.412" name="/" dev="loop7" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.267962][ T1426] F2FS-fs (loop6): Test dummy encryption mode enabled
[   43.313613][   T30] audit: type=1400 audit(1786028164.978:366): avc:  denied  { mount } for  pid=1446 comm="syz.1.431" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   43.316595][ T1426] F2FS-fs (loop6): invalid crc value
[   43.359323][  T473] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   43.366010][   T30] audit: type=1400 audit(1786028164.988:367): avc:  denied  { remount } for  pid=1446 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   43.408521][ T1426] F2FS-fs (loop6): Found nat_bits in checkpoint
[   43.414895][   T30] audit: type=1400 audit(1786028165.008:368): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   43.454959][   T30] audit: type=1400 audit(1786028165.278:369): avc:  denied  { read } for  pid=1456 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.483433][ T1426] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   43.619254][  T473] usb 1-1: Using ep0 maxpacket: 32
[   43.625110][ T1469] EXT4-fs (loop3): Test dummy encryption mode enabled
[   43.631957][ T1469] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   43.655576][ T1469] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   43.679371][ T1469] System zones: 0-5
[   43.685549][ T1469] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[   43.789309][  T473] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   43.797499][  T473] usb 1-1: config 0 has no interface number 0
[   43.824244][ T1473] F2FS-fs (loop1): fault_injection options not supported
[   43.834660][ T1473] F2FS-fs (loop1): fault_type options not supported
[   43.852603][ T1473] F2FS-fs (loop1): invalid crc value
[   43.858985][ T1473] F2FS-fs (loop1): Found nat_bits in checkpoint
[   43.903570][ T1473] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   43.940930][ T1473] handle_bad_sector: 3 callbacks suppressed
[   43.940950][ T1473] attempt to access beyond end of device
[   43.940950][ T1473] loop1: rw=2049, want=45104, limit=40427
[   43.968694][  T285] attempt to access beyond end of device
[   43.968694][  T285] loop1: rw=2049, want=45112, limit=40427
[   43.980125][  T473] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   43.989170][  T473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.997596][  T473] usb 1-1: Product: syz
[   44.002237][  T473] usb 1-1: Manufacturer: syz
[   44.007829][  T473] usb 1-1: SerialNumber: syz
[   44.013104][  T473] usb 1-1: config 0 descriptor??
[   44.049753][  T473] smsc95xx v2.0.0
[   44.082884][ T1489] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   44.126944][ T1498] using random self ethernet address
[   44.135775][ T1498] using random host ethernet address
[   44.179285][  T308] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   44.203851][ T1509] set_capacity_and_notify: 10 callbacks suppressed
[   44.203867][ T1509] loop6: detected capacity change from 0 to 512
[   44.240069][ T1509] EXT4-fs (loop6): Ignoring removed bh option
[   44.246168][ T1509] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   44.267703][ T1509] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   44.281529][ T1509] EXT4-fs (loop6): 1 truncate cleaned up
[   44.287187][ T1509] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,bh,. Quota mode: writeback.
[   44.322987][  T455] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   44.344789][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.352007][  T455] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   44.372029][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.378741][  T455] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   44.400832][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.407457][  T455] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   44.409252][  T538] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   44.427396][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.434585][  T308] usb 4-1: Using ep0 maxpacket: 16
[   44.441381][  T455] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   44.468142][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.476761][  T455] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   44.497619][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.504249][  T473] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   44.504980][  T455] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   44.515439][  T473] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   44.537206][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.552608][  T455] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   44.572698][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.579390][  T455] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   44.601386][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.608203][  T455] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   44.628597][  T455] EXT4-fs (loop6): Remounting filesystem read-only
[   44.643282][ T1521] loop7: detected capacity change from 0 to 512
[   44.651806][ T1513] ==================================================================
[   44.659872][ T1513] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[   44.667931][ T1513] Read of size 4 at addr ffff88810dfbcc00 by task syz.7.456/1513
[   44.675628][ T1513] 
[   44.677932][ T1513] CPU: 0 PID: 1513 Comm: syz.7.456 Tainted: G        W         syzkaller #0
[   44.686583][ T1513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.696623][ T1513] Call Trace:
[   44.699894][ T1513]  <TASK>
[   44.702812][ T1513]  __dump_stack+0x21/0x30
[   44.707129][ T1513]  dump_stack_lvl+0x110/0x170
[   44.711787][ T1513]  ? show_regs_print_info+0x20/0x20
[   44.716972][ T1513]  ? load_image+0x3f0/0x3f0
[   44.721464][ T1513]  ? __local_bh_enable_ip+0x58/0x80
[   44.726654][ T1513]  print_address_description+0x7f/0x2c0
[   44.732186][ T1513]  ? pppol2tp_sock_to_session+0x1a0/0x1b0
[   44.737891][ T1513]  kasan_report+0x10f/0x150
[   44.742385][ T1513]  ? pppol2tp_sock_to_session+0x1a0/0x1b0
[   44.748086][ T1513]  __asan_report_load4_noabort+0x14/0x20
[   44.753699][ T1513]  pppol2tp_sock_to_session+0x1a0/0x1b0
[   44.759236][ T1513]  pppol2tp_release+0x150/0x2b0
[   44.764074][ T1513]  sock_close+0xb8/0x200
[   44.768300][ T1513]  ? sock_mmap+0xa0/0xa0
[   44.772522][ T1513]  __fput+0x22b/0x900
[   44.776492][ T1513]  ____fput+0x15/0x20
[   44.780451][ T1513]  task_work_run+0x127/0x190
[   44.785022][ T1513]  do_exit+0xb70/0x29a0
[   44.789161][ T1513]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[   44.794864][ T1513]  ? put_task_struct+0x90/0x90
[   44.799609][ T1513]  ? __kasan_check_write+0x14/0x20
[   44.804701][ T1513]  __x64_sys_exit+0x40/0x40
[   44.809186][ T1513]  x64_sys_call+0x44/0x9a0
[   44.813591][ T1513]  do_syscall_64+0x4c/0xa0
[   44.817987][ T1513]  ? clear_bhb_loop+0x50/0xa0
[   44.822643][ T1513]  ? clear_bhb_loop+0x50/0xa0
[   44.827300][ T1513]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   44.833176][ T1513] RIP: 0033:0x7ff6ca5650d9
[   44.837571][ T1513] Code: Unable to access opcode bytes at RIP 0x7ff6ca5650af.
[   44.844912][ T1513] RSP: 002b:00007ff6c8fbdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[   44.853302][ T1513] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff6ca5650d9
[   44.861259][ T1513] RDX: 00007ff6c8fbe9c8 RSI: 0000000000000000 RDI: 0000000000000000
[   44.869218][ T1513] RBP: 00007ff6ca5fc024 R08: 0000000000000000 R09: 0000000000000058
[   44.877184][ T1513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   44.885135][ T1513] R13: 00007ff6ca7ed038 R14: 00007ff6ca7ecfa0 R15: 00007ffef392eec8
[   44.893093][ T1513]  </TASK>
[   44.896189][ T1513] 
[   44.898493][ T1513] Allocated by task 1512:
[   44.902797][ T1513]  __kasan_kmalloc+0xd4/0x100
[   44.907459][ T1513]  __kmalloc+0x13d/0x2c0
[   44.911682][ T1513]  l2tp_session_create+0x39/0xb60
[   44.916692][ T1513]  pppol2tp_connect+0xbf5/0x1640
[   44.921610][ T1513]  __sys_connect+0x3cb/0x450
[   44.926181][ T1513]  __x64_sys_connect+0x7a/0x90
[   44.930925][ T1513]  x64_sys_call+0x7c/0x9a0
[   44.935321][ T1513]  do_syscall_64+0x4c/0xa0
[   44.939715][ T1513]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   44.945587][ T1513] 
[   44.947890][ T1513] Freed by task 306:
[   44.951759][ T1513]  kasan_set_track+0x4a/0x70
[   44.956329][ T1513]  kasan_set_free_info+0x23/0x40
[   44.961253][ T1513]  ____kasan_slab_free+0x125/0x160
[   44.966360][ T1513]  __kasan_slab_free+0x11/0x20
[   44.971115][ T1513]  slab_free_freelist_hook+0xc2/0x190
[   44.976475][ T1513]  kfree+0xc4/0x270
[   44.980266][ T1513]  l2tp_session_put+0xaf/0x1a0
[   44.985015][ T1513]  l2tp_session_delete+0x3a9/0x4a0
[   44.990116][ T1513]  l2tp_tunnel_del_work+0x180/0x3d0
[   44.995303][ T1513]  process_one_work+0x6c8/0xbb0
[   45.000136][ T1513]  worker_thread+0xaa0/0x1250
[   45.004797][ T1513]  kthread+0x3f5/0x4f0
[   45.008847][ T1513]  ret_from_fork+0x1f/0x30
[   45.013244][ T1513] 
[   45.015546][ T1513] Last potentially related work creation:
[   45.021237][ T1513]  kasan_save_stack+0x3a/0x60
[   45.025895][ T1513]  __kasan_record_aux_stack+0xd2/0x100
[   45.031333][ T1513]  kasan_record_aux_stack_noalloc+0xb/0x10
[   45.037130][ T1513]  kvfree_call_rcu+0xb6/0x860
[   45.041808][ T1513]  put_css_set_locked+0xa0a/0xa40
[   45.046815][ T1513]  cgroup_migrate_finish+0x155/0x300
[   45.052081][ T1513]  cgroup_attach_task+0x34c/0x520
[   45.057087][ T1513]  __cgroup1_procs_write+0x314/0x520
[   45.062351][ T1513]  cgroup1_procs_write+0x2a/0x40
[   45.067271][ T1513]  cgroup_file_write+0x294/0x560
[   45.072187][ T1513]  kernfs_fop_write_iter+0x2bd/0x400
[   45.077452][ T1513]  vfs_write+0x831/0xfd0
[   45.081675][ T1513]  ksys_write+0x14a/0x260
[   45.085982][ T1513]  __x64_sys_write+0x7b/0x90
[   45.090551][ T1513]  x64_sys_call+0x8ef/0x9a0
[   45.095036][ T1513]  do_syscall_64+0x4c/0xa0
[   45.099434][ T1513]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   45.105308][ T1513] 
[   45.107613][ T1513] The buggy address belongs to the object at ffff88810dfbcc00
[   45.107613][ T1513]  which belongs to the cache kmalloc-512 of size 512
[   45.121645][ T1513] The buggy address is located 0 bytes inside of
[   45.121645][ T1513]  512-byte region [ffff88810dfbcc00, ffff88810dfbce00)
[   45.134727][ T1513] The buggy address belongs to the page:
[   45.140346][ T1513] page:ffffea000437ef00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dfbc
[   45.150562][ T1513] head:ffffea000437ef00 order:2 compound_mapcount:0 compound_pincount:0
[   45.158865][ T1513] flags: 0x4000000000010200(slab|head|zone=1)
[   45.164917][ T1513] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00
[   45.173478][ T1513] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   45.182034][ T1513] page dumped because: kasan: bad access detected
[   45.188420][ T1513] page_owner tracks the page as allocated
[   45.194111][ T1513] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 20, ts 23294579567, free_ts 23182391004
[   45.210932][ T1513]  post_alloc_hook+0x192/0x1b0
[   45.215682][ T1513]  prep_new_page+0x1c/0x110
[   45.220163][ T1513]  get_page_from_freelist+0x2c3a/0x2cd0
[   45.225688][ T1513]  __alloc_pages+0x1a2/0x460
[   45.230255][ T1513]  new_slab+0xa0/0x4d0
[   45.234299][ T1513]  ___slab_alloc+0x3ac/0x840
[   45.238868][ T1513]  __slab_alloc+0x49/0x90
[   45.243177][ T1513]  __kmalloc+0x16a/0x2c0
[   45.247425][ T1513]  ___neigh_create+0x6fb/0x1c50
[   45.252256][ T1513]  __neigh_create+0x31/0x40
[   45.256740][ T1513]  ip6_finish_output2+0xae3/0x1790
[   45.261831][ T1513]  __ip6_finish_output+0x621/0x7e0
[   45.266920][ T1513]  ip6_finish_output+0x31/0x220
[   45.271752][ T1513]  ip6_output+0x1fa/0x410
[   45.276061][ T1513]  ndisc_send_skb+0x7f6/0xcf0
[   45.280719][ T1513]  ndisc_send_ns+0x879/0xb10
[   45.285288][ T1513] page last free stack trace:
[   45.289960][ T1513]  free_unref_page_prepare+0x5fa/0x600
[   45.295399][ T1513]  free_unref_page+0xae/0x540
[   45.300057][ T1513]  __free_pages+0x6c/0x100
[   45.304452][ T1513]  __free_slab+0xe5/0x1e0
[   45.308767][ T1513]  __unfreeze_partials+0x15a/0x190
[   45.313861][ T1513]  put_cpu_partial+0xc6/0x120
[   45.318521][ T1513]  __slab_free+0x1d4/0x290
[   45.322933][ T1513]  ___cache_free+0x104/0x120
[   45.327516][ T1513]  qlink_free+0x4d/0x90
[   45.331654][ T1513]  qlist_free_all+0x5f/0xb0
[   45.336136][ T1513]  kasan_quarantine_reduce+0x14a/0x170
[   45.341577][ T1513]  __kasan_slab_alloc+0x2f/0xe0
[   45.346689][ T1513]  slab_post_alloc_hook+0x4f/0x2b0
[   45.351797][ T1513]  kmem_cache_alloc+0xf7/0x260
[   45.356544][ T1513]  __alloc_skb+0xe4/0x730
[   45.360857][ T1513]  netlink_ack+0x35c/0xb10
[   45.365263][ T1513] 
[   45.367569][ T1513] Memory state around the buggy address:
[   45.373178][ T1513]  ffff88810dfbcb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   45.381222][ T1513]  ffff88810dfbcb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   45.389264][ T1513] >ffff88810dfbcc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   45.397302][ T1513]                    ^
[   45.401354][ T1513]  ffff88810dfbcc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   45.409478][ T1513]  ffff88810dfbcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   45.417513][ T1513] ==================================================================
[   45.425549][ T1513] Disabling lock debugging due to kernel taint
[   45.438253][ T1513] ------------[ cut here ]------------
[   45.444094][ T1513] WARNING: CPU: 1 PID: 1513 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[   45.454397][ T1513] Modules linked in:
[   45.458300][ T1513] CPU: 1 PID: 1513 Comm: syz.7.456 Tainted: G    B   W         syzkaller #0
[   45.467571][ T1513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.477676][ T1513] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[   45.484137][ T1513] Code: 5d c3 e8 9c 83 0b fd be 02 00 00 00 eb 0a e8 90 83 0b fd be 01 00 00 00 4c 89 f7 e8 33 02 f2 fd e9 0f ff ff ff e8 79 83 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 83 0b fd 4c 89 f7 be 03
[   45.493277][ T1521] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   45.503941][ T1513] RSP: 0018:ffffc90000c27bf0 EFLAGS: 00010293
[   45.519773][  T308] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   45.524408][ T1521] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   45.528828][ T1513] RAX: ffffffff845e3367 RBX: ffff88811015a000 RCX: ffff88811c0fe2c0
[   45.538929][ T1521] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   45.546587][  T538] usb 2-1: not running at top speed; connect to a high speed hub
[   45.557054][ T1521] EXT4-fs (loop7): revision level too high, forcing read-only mode
[   45.563924][  T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.573833][ T1521] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000]
[   45.579935][  T308] usb 4-1: Product: syz
[   45.588590][ T1521] EXT4-fs (loop7): failed to initialize system zone (-117)
[   45.591648][  T308] usb 4-1: Manufacturer: syz
[   45.599237][ T1521] EXT4-fs (loop7): mount failed
[   45.603458][ T1513] RDX: 0000000000000000 RSI: 000000001d0c1f80 RDI: 000000000c04eb7d
[   45.616595][  T308] usb 4-1: SerialNumber: syz
[   45.616687][ T1513] RBP: ffffc90000c27c10 R08: 0000000000000003 R09: 0000000000000004
[   45.630397][ T1513] R10: dffffc0000000000 R11: fffffbfff0e18e4c R12: dffffc0000000000
[   45.638913][ T1513] R13: dffffc0000000000 R14: 000000001d0c1f80 R15: ffff88810dfbcc00
[   45.647027][ T1513] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   45.656223][ T1513] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   45.662901][ T1513] CR2: 00007ffe82696d60 CR3: 0000000110a90000 CR4: 00000000003506b0
[   45.676791][ T1513] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000000d9
[   45.685071][ T1513] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   45.693926][ T1513] Call Trace:
[   45.697213][ T1513]  <TASK>
[   45.700385][ T1513]  pppol2tp_release+0x150/0x2b0
[   45.705252][ T1513]  sock_close+0xb8/0x200
[   45.712272][ T1513]  ? sock_mmap+0xa0/0xa0
[   45.716538][ T1513]  __fput+0x22b/0x900
[   45.720762][ T1513]  ____fput+0x15/0x20
[   45.724746][ T1513]  task_work_run+0x127/0x190
[   45.729540][ T1513]  do_exit+0xb70/0x29a0
[   45.733710][ T1513]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[   45.743100][ T1513]  ? put_task_struct+0x90/0x90
[   45.747878][ T1513]  ? __kasan_check_write+0x14/0x20
[   45.755690][ T1513]  __x64_sys_exit+0x40/0x40
[   45.760358][ T1513]  x64_sys_call+0x44/0x9a0
[   45.764787][ T1513]  do_syscall_64+0x4c/0xa0
[   45.769390][ T1513]  ? clear_bhb_loop+0x50/0xa0
[   45.774072][ T1513]  ? clear_bhb_loop+0x50/0xa0
[   45.778747][ T1513]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   45.784870][ T1513] RIP: 0033:0x7ff6ca5650d9
[   45.791608][ T1513] Code: Unable to access opcode bytes at RIP 0x7ff6ca5650af.
[   45.799037][ T1513] RSP: 002b:00007ff6c8fbdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[   45.807694][ T1513] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff6ca5650d9
[   45.815836][ T1513] RDX: 00007ff6c8fbe9c8 RSI: 0000000000000000 RDI: 0000000000000000
[   45.819290][  T538] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   45.823985][ T1513] RBP: 00007ff6ca5fc024 R08: 0000000000000000 R09: 0000000000000058
[   45.841198][  T538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.841344][ T1513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.857172][  T538] usb 2-1: Product: syz
[   45.857186][  T538] usb 2-1: Manufacturer: syz
[   45.857198][  T538] usb 2-1: SerialNumber: syz
[   45.862509][ T1513] R13: 00007ff6ca7ed038 R14: 00007ff6ca7ecfa0 R15: 00007ffef392eec8
[   45.880092][ T1513]  </TASK>
[   45.883128][ T1513] ---[ end trace 336a3c68a3cf00fb ]---
[   45.919258][  T473] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[   45.930113][  T473] smsc95xx: probe of 1-1:0.67 failed with error -71
[   45.945288][  T473] usb 1-1: USB disconnect, device number 4
[   46.009262][  T375] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   46.120042][   T10] device bridge_slave_1 left promiscuous mode
[   46.126190][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.134226][   T10] device bridge_slave_0 left promiscuous mode
[   46.140397][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.148501][   T10] device veth1_macvtap left promiscuous mode
[   46.154778][   T10] device veth0_vlan left promiscuous mode
[   46.389288][  T375] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   46.398462][  T375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.408803][  T375] usb 8-1: config 0 descriptor??
[   46.789369][  T538] usb 2-1: MIDIStreaming interface descriptor not found
[   46.999309][  T308] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[   47.016753][  T308] usb 4-1: USB disconnect, device number 5
[   47.038546][  T473] usb 2-1: USB disconnect, device number 5
[   47.689945][  T308] usb 8-1: USB disconnect, device number 3