last executing test programs:

1m28.753614837s ago: executing program 32 (id=728):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)

1m8.238953225s ago: executing program 33 (id=1350):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x56, 0x0, &(0x7f0000000180)="b8746999d1f3d6d851d9265d21bc0d32d6b3523d150d97713bbabba59a8a95ae3ad6fb25b88362dc061eaf03a714f7ea7de20f28652cdf5fd85a8786061a208c3a51dc49295361888cac39df7a414983a2c4d60fa02d", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m8.047984135s ago: executing program 1 (id=1357):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc})
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)

1m7.951835961s ago: executing program 1 (id=1359):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
socket(0x2, 0x3, 0xff)
syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0)

1m7.824180898s ago: executing program 1 (id=1361):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1, 0x2}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000a80)={0x2020}, 0x2020)

1m7.806501698s ago: executing program 1 (id=1362):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714)
inotify_rm_watch(r0, r1)

1m7.755645721s ago: executing program 1 (id=1365):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

1m7.736696553s ago: executing program 1 (id=1366):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x10, @empty, 0xf}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)

1m7.028158282s ago: executing program 5 (id=1377):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600"], 0x78)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1m6.991177334s ago: executing program 5 (id=1378):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]})
mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1014410, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9)

1m6.937127527s ago: executing program 5 (id=1382):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xd}}}}}}, 0x0)

1m6.88838156s ago: executing program 5 (id=1383):
io_setup(0x150, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x7, &(0x7f0000000100)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfa, 0x582, &(0x7f0000000640)="$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")

1m6.333093411s ago: executing program 5 (id=1392):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

1m6.279478654s ago: executing program 5 (id=1394):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)

1m5.917543704s ago: executing program 34 (id=1400):
io_setup(0x2, &(0x7f0000000080)=<r0=>0x0)
r1 = eventfd(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x8f5f, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r1}])

52.722586372s ago: executing program 35 (id=1366):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x10, @empty, 0xf}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)

51.126119571s ago: executing program 36 (id=1394):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)

42.056450779s ago: executing program 8 (id=1937):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000001100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)

42.007675121s ago: executing program 8 (id=1940):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "000000000000000000040200050000ff"}}}]}, 0x48}}, 0x0)

41.939392625s ago: executing program 8 (id=1941):
unshare(0x22020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e)

41.937835435s ago: executing program 8 (id=1945):
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000040)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s', 0xfffffffffffffffe)

41.906313407s ago: executing program 8 (id=1946):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
fstat(r0, &(0x7f0000000340))

41.905963986s ago: executing program 8 (id=1947):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0x3, 0x37c, &(0x7f0000000ec0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)

26.772477183s ago: executing program 37 (id=1947):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x37c, &(0x7f0000000ec0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)

24.157218239s ago: executing program 9 (id=2447):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)

24.005953007s ago: executing program 9 (id=2453):
syz_open_dev$usbmon(&(0x7f0000000080), 0x725e, 0x103840)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x2000000, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

23.891248854s ago: executing program 9 (id=2454):
r0 = gettid()
futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

23.026818423s ago: executing program 9 (id=2497):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1, 0x362, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

22.791074195s ago: executing program 9 (id=2510):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000009b80)=ANY=[@ANYBLOB='iocharset=macromanian,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c757466382c646973636172642c6b6565705f6c6173745f646f74732c666d61736b3d30303030303030303030303030303030303030303331372c6e616d65636173653d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030342c696f636861727365743d69736f383835392d322c0036b31d821d64f6269a45f32df22d1ca8bb2f562a2c947b9b1642d15000b2bfe919b892a8b2deb4ead6027b0215761d101255ca823e3e5b3ad9d42af3944b48687df1b9"], 0x1, 0x1522, &(0x7f0000000280)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

22.642376864s ago: executing program 9 (id=2517):
ptrace(0x10, 0x1)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0)

7.608956055s ago: executing program 38 (id=2517):
ptrace(0x10, 0x1)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0)

5.650503684s ago: executing program 0 (id=2880):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140))
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000300)={{0x8080000, 0xe000, 0x0, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x1, 0x7, 0x6, 0x6, 0x1, 0x6, 0xfa, 0x5}, {0xf000, 0x4, 0x4, 0x4, 0x50, 0xa, 0x4, 0x17, 0x5, 0x4, 0x92, 0x7e}, {0x10000, 0xf000, 0x10, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0x1000, 0xf, 0x8, 0x45, 0xa, 0xa, 0xf1, 0x2, 0x6e, 0x1, 0x8}, {0x3000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xc, 0x6, 0x9}, {0xeeee8000, 0x10000, 0x8, 0x9, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0x24, 0xb}, {0x80b6004, 0x7000, 0xf, 0xe, 0x9, 0x3c, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xbf81}, 0x60000010, 0x0, 0xffff1000, 0x240431, 0x5, 0x0, 0x8000000, 0x0, [0x6, 0x2, 0x7, 0x2]})

5.507844952s ago: executing program 0 (id=2885):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.455938154s ago: executing program 0 (id=2887):
r0 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000500))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x1, 0x1], 0x2)
io_uring_enter(r0, 0x7, 0x464f, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0x3961, 0x0, 0x0, 0x0, 0x0)

4.64097437s ago: executing program 0 (id=2890):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000840)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xfd, 0x2ca, &(0x7f0000000a40)="$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")
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x4, 0x80)
getdents64(r0, 0x0, 0x0)

4.567963775s ago: executing program 0 (id=2891):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80340, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000140))

4.454346021s ago: executing program 0 (id=2892):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f00000004c0)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0)

4.435689032s ago: executing program 39 (id=2892):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f00000004c0)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0)

1.218042802s ago: executing program 4 (id=2946):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18)

1.136795606s ago: executing program 2 (id=2950):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000100)="514e06f6679ce5", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10)

1.109910948s ago: executing program 2 (id=2951):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r1)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

1.097304478s ago: executing program 2 (id=2952):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @adapter={0xffe, 0x3ff, 0x8004, 0xbd7f, 0x1}}]})
write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x430f, 0x8)

1.051443751s ago: executing program 2 (id=2954):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002004000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37)

991.154034ms ago: executing program 2 (id=2958):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000b53000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000003c0)={0x2, 0x0, [{0x40000001, 0x1, 0x2, 0x31237648, 0x6, 0x7ff, 0x80}, {0x4000000a, 0x7, 0x4, 0x9, 0x18ea, 0x400, 0xffff}]})

869.562441ms ago: executing program 2 (id=2960):
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x326, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0)

753.979497ms ago: executing program 3 (id=2966):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="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", 0x281}], 0x1}}], 0x3, 0x8008800)

741.588898ms ago: executing program 3 (id=2967):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @loopback}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0)

730.282869ms ago: executing program 3 (id=2968):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x80, 0xffffdffc)
llistxattr(&(0x7f0000000080)='./file2\x00', 0x0, 0x0)

677.965962ms ago: executing program 3 (id=2969):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@discard_unit_segment}, {@jqfmt_vfsold}, {@disable_ext_identify}, {@compress_cache}, {@inline_xattr}, {@noinline_dentry}, {@prjjquota={'prjjquota', 0x3d, '7\x00\x00\x00\x00\x00\x00\xdd\xff\x00\x89\xc5\xa8+\xc9X\x15\xa0\n\xebU\xd4K\x96'}}, {@nogc_merge}, {@noheap}, {@test_dummy_encryption_v1}, {}, {@background_gc_on}, {@lfs_mode}, {@discard}]}, 0xfd, 0x5529, &(0x7f0000000600)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4068, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000024c0))

651.767843ms ago: executing program 6 (id=2970):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x10000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x810)

589.621217ms ago: executing program 6 (id=2971):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000"], 0x48)
r0 = socket$tipc(0x1e, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)

537.73811ms ago: executing program 6 (id=2972):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="05e4b8fb"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x21, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)

537.592769ms ago: executing program 6 (id=2973):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

536.8181ms ago: executing program 3 (id=2974):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, &(0x7f00000000c0))

534.16091ms ago: executing program 6 (id=2975):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x2000, 0x0}, 0x10)

499.045332ms ago: executing program 6 (id=2976):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8)
mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

496.018572ms ago: executing program 4 (id=2977):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mem_exclusive\x00', 0x2, 0x0)
readv(r1, &(0x7f0000001d00)=[{&(0x7f0000001b40)=""/178, 0xb2}], 0x1)

450.434754ms ago: executing program 4 (id=2978):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x4004, &(0x7f0000000200)={0x11, 0xc, r2, 0x1, 0xe0}, 0x14)

435.412086ms ago: executing program 4 (id=2979):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0xa0, 0x6, 0x0, 0x2001}, 0x8, 0x3, 0x0, 0x0, 0x2000, 0x200001, 0x0})
unshare(0x22020600)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0)

424.837996ms ago: executing program 4 (id=2980):
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0xe)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='ro\x00', &(0x7f0000000100)="b0", 0x1)

414.305367ms ago: executing program 4 (id=2981):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@barrier}]}, 0x1, 0x43e, &(0x7f0000001380)="$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")
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0xe)
capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120141010dd88320030450f80800000003010902120001000010000904"], 0x0)

288.035583ms ago: executing program 7 (id=2983):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
unshare(0x2a020480)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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")
ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f00000000c0)={0xd4, 0x0, 0x7})

238.742816ms ago: executing program 3 (id=2984):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4)
sendmsg$sock(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

184.749099ms ago: executing program 40 (id=2984):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4)
sendmsg$sock(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

112.108223ms ago: executing program 7 (id=2986):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

63.269726ms ago: executing program 7 (id=2987):
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x4ffffff)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0x40002)
ioctl$BLKDISCARD(r0, 0x800812a0, 0x0)
rename(0x0, &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0)

24.701999ms ago: executing program 7 (id=2988):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0)
readv(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1)

24.353648ms ago: executing program 7 (id=2989):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x3, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 7 (id=2990):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8881, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x29c500a, 0x0, 0x4, 0x0, &(0x7f0000000000))
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

kernel console output (not intermixed with test programs):

my_hcd
[   92.122018][ T4459] loop9: detected capacity change from 0 to 128
[   92.139326][ T4459] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.176435][ T4459] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.267596][  T928] device bridge_slave_1 left promiscuous mode
[   92.274017][  T928] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.286730][  T928] device bridge_slave_0 left promiscuous mode
[   92.293193][  T928] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.298673][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   92.302285][ T4470] overlayfs: upper fs does not support tmpfile.
[   92.318403][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.329506][  T928] device veth0_vlan left promiscuous mode
[   92.336724][    T6] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[   92.373032][ T4477] loop3: detected capacity change from 0 to 256
[   92.381564][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.405547][    T6] usb 5-1: config 0 descriptor??
[   92.423354][ T4477] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.436365][ T4477] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   92.451029][ T4477] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   92.484807][   T28] audit: type=1400 audit(2000000062.249:2113): avc:  denied  { remove_name } for  pid=4476 comm="syz.3.1704" name="bus" dev="loop3" ino=1048743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   92.494936][ T4480] loop8: detected capacity change from 0 to 128
[   92.509022][   T28] audit: type=1400 audit(2000000062.249:2114): avc:  denied  { rename } for  pid=4476 comm="syz.3.1704" name="bus" dev="loop3" ino=1048743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   92.519379][ T4480] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.550232][ T4480] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.604669][   T10] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.633059][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   92.825707][    T6] konepure 0003:1E7D:2DBE.000E: unknown main item tag 0x0
[   92.833619][    T6] konepure 0003:1E7D:2DBE.000E: unexpected long global item
[   92.841390][    T6] konepure 0003:1E7D:2DBE.000E: parse failed
[   92.847714][    T6] konepure: probe of 0003:1E7D:2DBE.000E failed with error -22
[   92.983382][ T4520] tap0: tun_chr_ioctl cmd 35108
[   93.043022][    T6] usb 5-1: USB disconnect, device number 9
[   93.605313][ T4538] loop9: detected capacity change from 0 to 4096
[   93.635722][ T4538] EXT4-fs: Ignoring removed bh option
[   93.661467][ T4538] EXT4-fs (loop9): Test dummy encryption mode enabled
[   93.706803][ T4538] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   93.714958][ T4538] System zones: 0-5
[   93.726531][ T4538] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   93.758897][ T4538] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   93.789566][ T4352] EXT4-fs (loop9): unmounting filesystem.
[   93.946392][ T1429] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   94.126385][ T1429] usb 8-1: Using ep0 maxpacket: 16
[   94.134102][ T1429] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   94.143271][ T1429] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.151288][ T1429] usb 8-1: Product: syz
[   94.155434][ T1429] usb 8-1: Manufacturer: syz
[   94.160070][ T1429] usb 8-1: SerialNumber: syz
[   94.165671][ T1429] r8152-cfgselector 8-1: config 0 descriptor??
[   94.373681][ T1429] r8152-cfgselector 8-1: Unknown version 0x0000
[   94.380671][ T1429] r8152-cfgselector 8-1: Unknown version 0x0000
[   94.387104][ T1429] r8152-cfgselector 8-1: bad CDC descriptors
[   94.595288][ T1429] usb 8-1: USB disconnect, device number 2
[   94.696401][  T948] Bluetooth: hci0: command 0x1003 tx timeout
[   94.696403][  T949] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   95.144972][  T360] I/O error, dev loop3, sector 8421248 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.173520][  T360] I/O error, dev loop3, sector 8421248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.186686][  T360] Buffer I/O error on dev loop3p17, logical block 4080, async page read
[   95.206703][  T360] I/O error, dev loop3, sector 8421248 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.226374][  T360] I/O error, dev loop3, sector 8421248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.246318][  T360] Buffer I/O error on dev loop3p17, logical block 4080, async page read
[   95.296734][  T360] I/O error, dev loop3, sector 8421248 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.313454][  T360] I/O error, dev loop3, sector 8421248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   95.328664][  T360] Buffer I/O error on dev loop3p17, logical block 4080, async page read
[   95.448422][ T4600] loop3: detected capacity change from 0 to 256
[   95.456620][  T360] udevd[360]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory
[   95.490378][   T28] audit: type=1400 audit(2000000065.259:2115): avc:  denied  { append } for  pid=4605 comm="syz.9.1755" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   95.536763][ T4610] 9p: Unknown access argument : -22
[   95.545064][   T28] audit: type=1400 audit(2000000065.309:2116): avc:  denied  { map } for  pid=4611 comm="syz.9.1759" path="socket:[33658]" dev="sockfs" ino=33658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   95.581669][ T4617] loop9: detected capacity change from 0 to 512
[   95.586050][   T28] audit: type=1400 audit(2000000065.309:2117): avc:  denied  { read accept } for  pid=4611 comm="syz.9.1759" path="socket:[33658]" dev="sockfs" ino=33658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   95.596137][ T4617] EXT4-fs: Ignoring removed i_version option
[   95.660649][   T28] audit: type=1400 audit(2000000065.429:2118): avc:  denied  { sqpoll } for  pid=4629 comm="syz.7.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   95.693664][ T4617] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   95.719303][ T4617] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.771636][ T4352] EXT4-fs (loop9): unmounting filesystem.
[   95.873708][   T28] audit: type=1400 audit(2000000065.639:2119): avc:  denied  { mounton } for  pid=4651 comm="syz.9.1776" path="/32/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.970012][   T28] audit: type=1400 audit(2000000065.679:2120): avc:  denied  { getattr } for  pid=4651 comm="syz.9.1776" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   96.035390][ T4679] loop3: detected capacity change from 0 to 512
[   96.062082][   T28] audit: type=1326 audit(2000000065.829:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.9.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958ab9aeb9 code=0x7ffc0000
[   96.092943][   T28] audit: type=1326 audit(2000000065.829:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.9.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958ab9aeb9 code=0x7ffc0000
[   96.156058][ T4679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   96.172981][ T4679] ext4 filesystem being mounted at /400/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.184434][   T28] audit: type=1326 audit(2000000065.829:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.9.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958ab9aeb9 code=0x7ffc0000
[   96.211334][   T28] audit: type=1326 audit(2000000065.829:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.9.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f958ab9aeb9 code=0x7ffc0000
[   96.235880][  T283] EXT4-fs (loop3): unmounting filesystem.
[   96.281817][ T4710] 9p: Unknown access argument : -22
[   96.356385][ T3423] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   96.557974][ T4746] incfs: iterate_incfs_dir / -22
[   96.567701][ T3423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.592825][ T3423] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.613397][ T3423] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   96.633366][ T3423] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   96.641539][ T3423] usb 10-1: Manufacturer: syz
[   96.650283][ T3423] usb 10-1: config 0 descriptor??
[   96.671284][ T4750] loop3: detected capacity change from 0 to 16
[   96.688465][ T4750] erofs: (device loop3): mounted with root inode @ nid 36.
[   96.936390][ T1429] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[   96.985044][ T4766] loop7: detected capacity change from 0 to 512
[   97.008777][ T4770] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   97.049565][ T4766] EXT4-fs (loop7): 1 truncate cleaned up
[   97.055381][ T4766] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   97.059989][ T4738] loop8: detected capacity change from 0 to 131072
[   97.071385][ T4738] F2FS-fs (loop8): Invalid log sectorsize (67108873)
[   97.083621][ T4738] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[   97.099228][ T3724] EXT4-fs (loop7): unmounting filesystem.
[   97.100989][ T4738] F2FS-fs (loop8): invalid crc value
[   97.128383][ T1429] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   97.131812][ T4738] F2FS-fs (loop8): Found nat_bits in checkpoint
[   97.144600][ T1429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.163194][ T1429] usb 5-1: config 0 descriptor??
[   97.175730][ T1429] asix: probe of 5-1:0.0 failed with error -22
[   97.205775][ T4738] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[   97.219672][ T4738] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[   97.308677][ T4795] loop7: detected capacity change from 0 to 256
[   97.346801][ T4738] F2FS-fs (loop8): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[   97.424175][ T4803] xt_hashlimit: size too large, truncated to 1048576
[   97.431610][ T4803] xt_hashlimit: max too large, truncated to 1048576
[   97.465316][ T3423] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71
[   97.483438][ T3423] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71
[   97.501324][ T3423] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71
[   97.527198][ T3423] uclogic 0003:256C:006D.000F: failed probing parameters: -71
[   97.534947][ T3423] uclogic: probe of 0003:256C:006D.000F failed with error -71
[   97.558227][ T3423] usb 10-1: USB disconnect, device number 2
[   97.640797][ T4820] binder: BINDER_SET_CONTEXT_MGR already set
[   97.648621][ T4820] binder: 4818:4820 ioctl 40046207 0 returned -16
[   97.666753][ T4825] loop8: detected capacity change from 0 to 256
[   97.817105][ T4839] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   97.993002][ T4843] loop7: detected capacity change from 0 to 512
[   98.022631][ T4843] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   98.048663][ T4847] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1861'.
[   98.209579][  T360] I/O error, dev loop3, sector 8421248 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   98.220119][  T360] I/O error, dev loop3, sector 8421248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.230521][  T360] Buffer I/O error on dev loop3p17, logical block 4080, async page read
[   98.238727][ T4827] loop3: detected capacity change from 0 to 131072
[   98.248588][ T4827] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[   98.255653][ T4827] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   98.264656][ T4827] F2FS-fs (loop3): invalid crc value
[   98.272202][ T4827] F2FS-fs (loop3): Found nat_bits in checkpoint
[   98.297089][  T360] udevd[360]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory
[   98.310009][ T4827] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   98.318211][ T4827] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   98.354948][ T4827] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[   98.754711][ T4884] xt_hashlimit: size too large, truncated to 1048576
[   98.761605][ T4884] xt_hashlimit: max too large, truncated to 1048576
[   98.765170][ T4886] binder: BINDER_SET_CONTEXT_MGR already set
[   98.774762][ T4886] binder: 4885:4886 ioctl 40046207 0 returned -16
[   98.784818][ T4888] loop3: detected capacity change from 0 to 512
[   98.808806][ T4888] EXT4-fs (loop3): 1 truncate cleaned up
[   98.822530][ T4888] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   98.844568][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1877'.
[   98.855591][  T283] EXT4-fs (loop3): unmounting filesystem.
[   98.875072][ T4899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1878'.
[   98.889311][ T4899] device ip6gre1 entered promiscuous mode
[   99.021167][ T4925] loop9: detected capacity change from 0 to 256
[   99.042519][ T4925] FAT-fs (loop9): Directory bread(block 1285) failed
[   99.051997][ T4925] FAT-fs (loop9): Directory bread(block 1286) failed
[   99.060647][ T4925] FAT-fs (loop9): Directory bread(block 1287) failed
[   99.071555][ T4925] FAT-fs (loop9): Directory bread(block 1288) failed
[   99.103026][ T4925] FAT-fs (loop9): Directory bread(block 1285) failed
[   99.112205][ T4925] FAT-fs (loop9): Directory bread(block 1286) failed
[   99.128636][ T4925] FAT-fs (loop9): Directory bread(block 1287) failed
[   99.138180][ T4925] FAT-fs (loop9): Directory bread(block 1288) failed
[   99.150484][ T4925] FAT-fs (loop9): Directory bread(block 1285) failed
[   99.164286][ T4925] FAT-fs (loop9): Directory bread(block 1286) failed
[   99.245378][ T4958] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1909'.
[   99.260105][ T4958] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1909'.
[   99.272052][ T4958] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1909'.
[   99.387154][ T4969] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   99.398036][ T4969] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.438555][ T4981] device ipip0 entered promiscuous mode
[   99.448366][ T4352] EXT4-fs (loop9): unmounting filesystem.
[   99.477199][ T4986] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   99.673996][ T3423] usb 5-1: USB disconnect, device number 10
[   99.814482][ T5041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1949'.
[   99.871264][ T5045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1951'.
[   99.891951][ T5045] netem: change failed
[   99.960912][ T5056] netlink: 'syz.4.1955': attribute type 12 has an invalid length.
[  100.064455][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'.
[  100.417221][ T5101] tap0: tun_chr_ioctl cmd 1074025677
[  100.437468][ T5101] tap0: linktype set to 776
[  100.587013][ T5118] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  100.593510][   T28] kauditd_printk_skb: 45 callbacks suppressed
[  100.593524][   T28] audit: type=1400 audit(2000000070.359:2170): avc:  denied  { connect } for  pid=5120 comm="syz.4.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.843695][   T28] audit: type=1400 audit(2000000070.609:2171): avc:  denied  { read } for  pid=5143 comm="syz.4.1995" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  100.875383][ T5140] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  100.889376][ T5140] EXT4-fs error (device loop9): htree_dirblock_to_tree:1083: inode #2: comm syz.9.1994: Directory hole found for htree leaf block 0
[  100.924907][ T5140] EXT4-fs (loop9): Remounting filesystem read-only
[  100.977270][ T4352] EXT4-fs (loop9): unmounting filesystem.
[  101.390353][ T5142] set_capacity_and_notify: 3 callbacks suppressed
[  101.390373][ T5142] loop3: detected capacity change from 0 to 131072
[  101.427333][ T5142] F2FS-fs (loop3): invalid crc value
[  101.448562][ T5142] F2FS-fs (loop3): Found nat_bits in checkpoint
[  101.456354][ T3423] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  101.508851][ T5142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  101.509045][ T5170] loop9: detected capacity change from 0 to 512
[  101.534269][ T5170] EXT4-fs: Ignoring removed orlov option
[  101.561856][ T5170] EXT4-fs: Ignoring removed mblk_io_submit option
[  101.586190][ T5170] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2200: inode #15: comm syz.9.2004: corrupted in-inode xattr
[  101.606623][ T5170] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2004: couldn't read orphan inode 15 (err -117)
[  101.634735][ T5170] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  101.659317][ T3423] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.674243][ T4352] EXT4-fs (loop9): unmounting filesystem.
[  101.680553][ T3423] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.690970][ T3423] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  101.705019][ T3423] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  101.732610][ T3423] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.762668][ T3423] usb 8-1: config 0 descriptor??
[  102.180805][ T3423] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  102.193387][ T3423] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  102.388365][ T3423] usb 8-1: USB disconnect, device number 3
[  102.704789][   T28] audit: type=1400 audit(2000000072.469:2172): avc:  denied  { bind } for  pid=5194 comm="syz.3.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  102.751464][   T28] audit: type=1400 audit(2000000072.519:2173): avc:  denied  { shutdown } for  pid=5202 comm="syz.3.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  102.798075][   T28] audit: type=1400 audit(2000000072.539:2174): avc:  denied  { getopt } for  pid=5206 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  102.891135][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2026'.
[  103.098976][   T28] audit: type=1400 audit(2000000072.869:2175): avc:  denied  { unmount } for  pid=3810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  103.126200][ T5240] Falling back ldisc for ttyS3.
[  103.141771][ T5234] loop3: detected capacity change from 0 to 8192
[  103.420846][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'.
[  103.477434][ T5254] loop9: detected capacity change from 0 to 40427
[  103.497351][ T5254] F2FS-fs (loop9): invalid crc value
[  103.527132][ T5254] F2FS-fs (loop9): Found nat_bits in checkpoint
[  103.578323][ T5254] F2FS-fs (loop9): Start checkpoint disabled!
[  103.590698][ T5254] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  103.622595][ T5254] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  103.748288][  T928] kworker/u4:6: attempt to access beyond end of device
[  103.748288][  T928] loop9: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  103.800549][ T5283] loop7: detected capacity change from 0 to 512
[  103.840010][ T5283] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  103.899103][ T5283] EXT4-fs (loop7): 1 truncate cleaned up
[  103.904869][ T5283] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  103.947930][   T28] audit: type=1400 audit(2000000073.719:2176): avc:  denied  { setopt } for  pid=5289 comm="syz.4.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  104.005433][ T5292] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2056'.
[  104.047185][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  104.236518][ T5308] tap0: tun_chr_ioctl cmd 1074025672
[  104.245382][ T5308] tap0: ignored: set checksum disabled
[  104.378209][   T28] audit: type=1326 audit(2000000074.149:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  104.432858][   T28] audit: type=1326 audit(2000000074.149:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  104.436455][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'.
[  104.482830][   T28] audit: type=1326 audit(2000000074.149:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  104.573636][ T5342] loop3: detected capacity change from 0 to 1024
[  104.603176][ T5342] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  104.644410][ T5342] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  104.699925][  T283] EXT4-fs (loop3): unmounting filesystem.
[  104.853219][ T5373] loop7: detected capacity change from 0 to 512
[  104.882507][ T5373] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  104.896856][ T5373] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.957933][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  104.966366][    T6] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  105.167516][    T6] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.193029][    T6] usb 10-1: config 0 interface 0 has no altsetting 0
[  105.210250][    T6] usb 10-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  105.240457][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.261495][    T6] usb 10-1: config 0 descriptor??
[  105.485591][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.522534][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.699216][ T5419] loop7: detected capacity change from 0 to 512
[  105.749488][    T6] hid (null): bogus close delimiter
[  105.768301][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.777356][ T5419] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  105.786037][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.794815][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.812494][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.816684][ T5419] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.830175][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.855394][ T5419] __quota_error: 14 callbacks suppressed
[  105.855410][ T5419] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  105.883875][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.906460][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.916500][ T5419] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 64512
[  105.936441][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.943991][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  105.956393][ T5419] EXT4-fs error (device loop7): ext4_acquire_dquot:6798: comm syz.7.2114: Failed to acquire dquot type 0
[  105.990999][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.012691][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.026333][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.033790][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.050125][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.065132][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.086372][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.093916][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.101831][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.112279][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.119994][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.127970][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.135399][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.143064][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.163244][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.170913][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.178529][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.193344][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.201466][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.212972][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.220779][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.236483][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.254256][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.261964][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.276365][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.283872][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.300611][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.309053][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.316933][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.324537][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.332406][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.340871][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.356806][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.365720][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.373941][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.381732][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.390089][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.397715][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.405217][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.413084][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.420714][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.428335][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.435740][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.443423][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.451183][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.458846][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.466448][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.473929][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.481643][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.489477][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x1
[  106.507766][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.516072][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x0
[  106.524448][    T6] hid-generic 0003:258A:0033.0011: unknown main item tag 0x4
[  106.539305][    T6] hid-generic 0003:258A:0033.0011: bogus close delimiter
[  106.546681][    T6] hid-generic 0003:258A:0033.0011: item 0 0 2 10 parsing failed
[  106.554535][    T6] hid-generic: probe of 0003:258A:0033.0011 failed with error -22
[  106.576297][    T6] usb 10-1: USB disconnect, device number 3
[  106.589130][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  106.636331][  T579] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  106.672452][   T28] audit: type=1400 audit(2000000076.439:2194): avc:  denied  { unmount } for  pid=3810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  106.795362][ T5452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2128'.
[  106.837420][  T579] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  106.849385][  T579] usb 4-1: config 0 has no interface number 0
[  106.862081][  T579] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  106.880675][  T579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.897520][  T579] usb 4-1: Product: syz
[  106.903548][  T579] usb 4-1: Manufacturer: syz
[  106.913855][  T579] usb 4-1: SerialNumber: syz
[  106.926664][  T579] usb 4-1: config 0 descriptor??
[  106.933424][   T28] audit: type=1326 audit(2000000076.699:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.4.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d12d9aeb9 code=0x7ffc0000
[  106.982548][   T28] audit: type=1326 audit(2000000076.699:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.4.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f3d12d9aeb9 code=0x7ffc0000
[  107.008286][   T28] audit: type=1326 audit(2000000076.699:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.4.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d12d9aeb9 code=0x7ffc0000
[  107.032450][   T28] audit: type=1326 audit(2000000076.699:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.4.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3d12d9aeb9 code=0x7ffc0000
[  107.056678][   T28] audit: type=1326 audit(2000000076.709:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.4.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d12d9aeb9 code=0x7ffc0000
[  107.080454][    T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  107.088227][   T28] audit: type=1326 audit(2000000076.709:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.4.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f3d12d9aeb9 code=0x7ffc0000
[  107.119214][   T28] audit: type=1326 audit(2000000076.709:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.4.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d12d9aeb9 code=0x7ffc0000
[  107.309382][    T6] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  107.319442][    T6] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  107.334077][    T6] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  107.349655][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  107.357920][    T6] usb 10-1: SerialNumber: syz
[  107.366630][ T5441] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  107.494535][ T5488] sch_tbf: burst 1885 is lower than device lo mtu (65550) !
[  107.576785][ T5441] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  107.738786][  T579] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  107.754776][  T579] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  107.766182][  T579] asix: probe of 4-1:0.251 failed with error -71
[  107.808816][  T579] usb 4-1: USB disconnect, device number 8
[  107.998365][    T6] cdc_ether: probe of 10-1:1.0 failed with error -22
[  108.154902][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2170'.
[  108.217533][    T6] usb 10-1: USB disconnect, device number 4
[  108.254553][ T5553] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  108.481034][ T5547] loop7: detected capacity change from 0 to 40427
[  108.504583][ T5547] F2FS-fs (loop7): invalid crc value
[  108.546954][ T5547] F2FS-fs (loop7): Found nat_bits in checkpoint
[  108.558177][ T5580] loop3: detected capacity change from 0 to 512
[  108.575195][ T5580] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  108.604465][ T5580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  108.612979][ T5580] EXT4-fs (loop3): orphan cleanup on readonly fs
[  108.619784][ T5580] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2187: bad orphan inode 3
[  108.631139][ T5580] EXT4-fs (loop3): Remounting filesystem read-only
[  108.637711][ T5580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  108.651072][ T5580] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.2187: dx entry: limit 0 != root limit 125
[  108.664212][ T5580] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2187: Corrupt directory, running e2fsck is recommended
[  108.680386][ T5547] F2FS-fs (loop7): Start checkpoint disabled!
[  108.688430][  T283] EXT4-fs (loop3): unmounting filesystem.
[  108.715930][ T5547] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  108.733529][ T5547] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  108.872475][   T10] kworker/u4:1: attempt to access beyond end of device
[  108.872475][   T10] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  109.279857][ T5627] loop7: detected capacity change from 0 to 128
[  109.377801][ T5629] loop7: detected capacity change from 0 to 256
[  109.407099][ T5629] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7c19779b, utbl_chksum : 0xe619d30d)
[  109.479679][ T5631] syzkaller0: tun_chr_ioctl cmd 1074025673
[  109.727400][ T5604] loop3: detected capacity change from 0 to 131072
[  109.746948][ T5604] F2FS-fs (loop3): Test dummy encryption mode enabled
[  109.765079][ T5604] F2FS-fs (loop3): invalid crc value
[  109.797150][ T5604] F2FS-fs (loop3): Found nat_bits in checkpoint
[  109.894758][ T5604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  109.967407][ T5660] loop9: detected capacity change from 0 to 256
[  109.995194][ T5660] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.026343][ T5660] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  110.048615][ T5660] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  110.509557][ T5677] loop3: detected capacity change from 0 to 512
[  110.520263][ T5677] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  110.535517][ T5677] EXT4-fs (loop3): 1 truncate cleaned up
[  110.541475][ T5677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  110.573775][  T283] EXT4-fs (loop3): unmounting filesystem.
[  110.581922][ T5681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2231'.
[  110.766346][ T5699] loop3: detected capacity change from 0 to 256
[  110.797296][ T5699] FAT-fs (loop3): Directory bread(block 64) failed
[  110.812609][ T5699] FAT-fs (loop3): Directory bread(block 65) failed
[  110.820718][ T5699] FAT-fs (loop3): Directory bread(block 66) failed
[  110.828271][ T5699] FAT-fs (loop3): Directory bread(block 67) failed
[  110.841042][ T5699] FAT-fs (loop3): Directory bread(block 68) failed
[  110.851018][ T5699] FAT-fs (loop3): Directory bread(block 69) failed
[  110.859355][ T5699] FAT-fs (loop3): Directory bread(block 70) failed
[  110.866041][ T5699] FAT-fs (loop3): Directory bread(block 71) failed
[  110.872761][ T5699] FAT-fs (loop3): Directory bread(block 72) failed
[  110.879562][ T5699] FAT-fs (loop3): Directory bread(block 73) failed
[  111.302544][ T5730] loop9: detected capacity change from 0 to 512
[  111.354898][ T5730] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  111.646386][    T6] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  111.766904][ T5743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2258'.
[  111.827502][    T6] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  111.846751][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  111.846791][   T28] audit: type=1400 audit(2000000081.619:2211): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  111.885993][    T6] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  111.910775][    T6] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  111.924864][   T28] audit: type=1400 audit(2000000081.649:2212): avc:  denied  { write } for  pid=5747 comm="syz.3.2260" path="socket:[39213]" dev="sockfs" ino=39213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  111.949135][    T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.959543][ T5730] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  111.996117][   T28] audit: type=1400 audit(2000000081.719:2213): avc:  denied  { mount } for  pid=5750 comm="syz.4.2263" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  112.059954][   T28] audit: type=1400 audit(2000000081.749:2214): avc:  denied  { unmount } for  pid=3810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  112.112837][   T28] audit: type=1400 audit(2000000081.879:2215): avc:  denied  { setopt } for  pid=5764 comm="syz.4.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  112.172349][   T28] audit: type=1400 audit(2000000081.919:2216): avc:  denied  { mounton } for  pid=5766 comm="syz.4.2270" path="/237/file0" dev="tmpfs" ino=1260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  112.181563][ T1429] usb 10-1: USB disconnect, device number 5
[  112.448547][ T5779] loop3: detected capacity change from 0 to 16
[  112.459346][ T5779] erofs: (device loop3): mounted with root inode @ nid 36.
[  112.497680][ T5779] syz.3.2275: attempt to access beyond end of device
[  112.497680][ T5779] loop3: rw=524288, sector=56, nr_sectors = 968 limit=16
[  112.554625][ T5779] syz.3.2275: attempt to access beyond end of device
[  112.554625][ T5779] loop3: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  112.575172][ T5738] F2FS-fs (loop7): Wrong NAT boundary, start(2560) end(3584) blocks(0)
[  112.596559][ T5779] syz.3.2275: attempt to access beyond end of device
[  112.596559][ T5779] loop3: rw=524288, sector=0, nr_sectors = 568 limit=16
[  112.602375][ T5738] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  112.622688][ T5738] F2FS-fs (loop7): invalid crc value
[  112.661526][ T5738] F2FS-fs (loop7): Found nat_bits in checkpoint
[  112.728067][ T4352] EXT4-fs (loop9): unmounting filesystem.
[  112.782196][ T5738] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  112.793024][ T5738] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  112.874319][   T28] audit: type=1400 audit(2000000082.639:2217): avc:  denied  { read write } for  pid=5815 comm="syz.3.2291" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  112.925537][   T28] audit: type=1400 audit(2000000082.639:2218): avc:  denied  { open } for  pid=5815 comm="syz.3.2291" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  113.158121][ T5832] FAT-fs (loop7): Directory bread(block 414) failed
[  113.164933][ T5832] FAT-fs (loop7): Directory bread(block 415) failed
[  113.181808][ T5832] FAT-fs (loop7): Directory bread(block 416) failed
[  113.195429][ T5832] FAT-fs (loop7): Directory bread(block 417) failed
[  113.202830][ T5832] FAT-fs (loop7): Directory bread(block 418) failed
[  113.219617][ T5832] FAT-fs (loop7): Directory bread(block 419) failed
[  113.226969][ T5832] FAT-fs (loop7): Directory bread(block 420) failed
[  113.235794][ T5832] FAT-fs (loop7): Directory bread(block 421) failed
[  113.252746][ T5832] FAT-fs (loop7): Directory bread(block 414) failed
[  113.265879][ T5832] FAT-fs (loop7): Directory bread(block 415) failed
[  113.559918][   T28] audit: type=1400 audit(2000000083.329:2219): avc:  denied  { bind } for  pid=5854 comm="syz.4.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  113.758530][   T28] audit: type=1400 audit(2000000083.529:2220): avc:  denied  { create } for  pid=5870 comm="syz.3.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  113.866326][ T1429] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  114.056339][ T1429] usb 5-1: Using ep0 maxpacket: 16
[  114.071909][ T1429] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.083566][ T5897] set_capacity_and_notify: 3 callbacks suppressed
[  114.083585][ T5897] loop3: detected capacity change from 0 to 256
[  114.106232][ T1429] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.108368][ T5899] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  114.122618][ T1429] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.146619][ T1429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.157731][ T5901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.166356][ T1429] usb 5-1: Product: syz
[  114.178059][ T5903] loop3: detected capacity change from 0 to 512
[  114.185571][ T5903] EXT4-fs: Ignoring removed orlov option
[  114.191604][ T1429] usb 5-1: Manufacturer: syz
[  114.196894][ T5903] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  114.205441][ T1429] usb 5-1: SerialNumber: syz
[  114.213444][ T5903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  114.232311][ T5903] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2200: inode #15: comm syz.3.2330: corrupted in-inode xattr
[  114.248733][ T5903] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2330: couldn't read orphan inode 15 (err -117)
[  114.263113][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  114.291716][  T283] EXT4-fs (loop3): unmounting filesystem.
[  114.581657][ T5933] loop9: detected capacity change from 0 to 512
[  114.617681][ T5933] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2342: bg 0: block 288: padding at end of block bitmap is not set
[  114.634916][ T1429] usb 5-1: 0:2 : does not exist
[  114.640123][ T5933] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  114.660545][ T5933] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.2342: attempt to clear invalid blocks 1024 len 1
[  114.689594][ T5933] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2342: invalid indirect mapped block 1819239214 (level 0)
[  114.716465][ T5933] EXT4-fs (loop9): 1 truncate cleaned up
[  114.728963][ T5933] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  114.792518][ T4352] EXT4-fs (loop9): unmounting filesystem.
[  114.840409][ T3423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=3423 comm=kworker/0:5
[  114.989962][ T5945] loop7: detected capacity change from 0 to 128
[  115.037705][ T1429] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  115.054119][ T1429] usb 5-1: USB disconnect, device number 12
[  115.070552][  T928] kworker/u4:6: attempt to access beyond end of device
[  115.070552][  T928] loop7: rw=1, sector=145, nr_sectors = 896 limit=128
[  115.119634][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.129753][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.132898][ T5955] loop7: detected capacity change from 0 to 512
[  115.152516][ T5946] device bridge_slave_0 entered promiscuous mode
[  115.156432][ T5955] EXT4-fs warning (device loop7): ext4_xattr_inode_get:509: inode #11: comm syz.7.2350: EA inode hash validation failed
[  115.161141][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.178838][ T5955] EXT4-fs error (device loop7): ext4_do_update_inode:5269: inode #15: comm syz.7.2350: corrupted inode contents
[  115.182972][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.191125][ T5955] EXT4-fs error (device loop7): ext4_dirty_inode:6134: inode #15: comm syz.7.2350: mark_inode_dirty error
[  115.199248][ T5946] device bridge_slave_1 entered promiscuous mode
[  115.216051][ T5955] EXT4-fs error (device loop7): ext4_do_update_inode:5269: inode #15: comm syz.7.2350: corrupted inode contents
[  115.241479][ T5955] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2968: inode #15: comm syz.7.2350: mark_inode_dirty error
[  115.266468][ T5955] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2971: inode #15: comm syz.7.2350: mark inode dirty (error -117)
[  115.279311][ T5955] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117)
[  115.288738][ T5955] EXT4-fs (loop7): 1 orphan inode deleted
[  115.294667][ T5955] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  115.354593][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  115.368554][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.375727][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.383226][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.390544][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.433339][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.442003][  T928] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.455156][  T928] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.468246][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.476959][  T928] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.484121][  T928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.502667][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.511192][  T928] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.518251][  T928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.526893][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.535029][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.548624][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  115.563940][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  115.579266][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  115.589480][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.598810][ T5946] device veth0_vlan entered promiscuous mode
[  115.613708][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.613928][ T5986] xt_hashlimit: max too large, truncated to 1048576
[  115.623575][ T5946] device veth1_macvtap entered promiscuous mode
[  115.640496][  T928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.662526][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.895539][ T6022] device bridge0 entered promiscuous mode
[  115.904483][ T6021] device bridge0 left promiscuous mode
[  115.957046][  T351] device bridge_slave_1 left promiscuous mode
[  115.963548][  T351] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.976485][   T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  115.987735][  T351] device bridge_slave_0 left promiscuous mode
[  116.000729][  T351] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.015856][  T351] device veth1_macvtap left promiscuous mode
[  116.023192][  T351] device veth0_vlan left promiscuous mode
[  116.152453][ T6040] loop0: detected capacity change from 0 to 512
[  116.160775][ T6040] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2378: bg 0: block 288: padding at end of block bitmap is not set
[  116.167621][   T60] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  116.175806][ T6040] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  116.192041][   T60] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  116.193254][ T6040] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2378: attempt to clear invalid blocks 1024 len 1
[  116.217793][   T60] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  116.231156][   T60] usb 5-1: config 220 has no interface number 2
[  116.237799][   T60] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  116.242739][ T6040] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2378: invalid indirect mapped block 1819239214 (level 0)
[  116.268935][   T60] usb 5-1: config 220 interface 0 has no altsetting 0
[  116.272613][ T6040] EXT4-fs (loop0): 1 truncate cleaned up
[  116.284116][   T60] usb 5-1: config 220 interface 76 has no altsetting 0
[  116.288641][ T6040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  116.297962][ T6054] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2386'.
[  116.319129][   T60] usb 5-1: config 220 interface 1 has no altsetting 0
[  116.329367][   T60] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  116.342237][   T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.365090][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  116.377877][   T60] usb 5-1: Product: syz
[  116.383284][   T60] usb 5-1: Manufacturer: syz
[  116.397894][   T60] usb 5-1: SerialNumber: syz
[  116.431914][ T6061] loop0: detected capacity change from 0 to 512
[  116.453842][ T6061] EXT4-fs: Ignoring removed nobh option
[  116.462233][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2397'.
[  116.472053][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2397'.
[  116.479074][ T6061] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  116.500640][ T6061] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2390: invalid indirect mapped block 256 (level 1)
[  116.517094][ T6061] EXT4-fs (loop0): Remounting filesystem read-only
[  116.523915][ T6061] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2390: invalid indirect mapped block 2683928664 (level 1)
[  116.537346][ T6075] SELinux: failed to load policy
[  116.541661][ T6077] xt_hashlimit: size too large, truncated to 1048576
[  116.550092][ T6061] EXT4-fs (loop0): Remounting filesystem read-only
[  116.556924][ T6061] EXT4-fs (loop0): 1 truncate cleaned up
[  116.557033][ T6077] xt_hashlimit: max too large, truncated to 1048576
[  116.562802][ T6061] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  116.607109][ T6083] loop3: detected capacity change from 0 to 512
[  116.618543][   T60] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  116.625233][   T60] usb 5-1: No valid video chain found.
[  116.631551][   T60] usb 5-1: selecting invalid altsetting 0
[  116.642866][ T6083] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2403: invalid indirect mapped block 256 (level 2)
[  116.659641][   T60] usb 5-1: USB disconnect, device number 13
[  116.666586][ T6083] EXT4-fs (loop3): 2 truncates cleaned up
[  116.673298][ T6083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  116.692461][   T41] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[  116.713637][   T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28
[  116.716807][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  116.736127][   T41] EXT4-fs (loop3): This should not happen!! Data will be lost
[  116.736127][   T41] 
[  116.756008][   T41] EXT4-fs (loop3): Total free blocks count 0
[  116.763654][   T41] EXT4-fs (loop3): Free/Dirty block details
[  116.769918][   T41] EXT4-fs (loop3): free_blocks=0
[  116.775033][   T41] EXT4-fs (loop3): dirty_blocks=8
[  116.781292][   T41] EXT4-fs (loop3): Block reservation details
[  116.786485][ T6092] input: syz0 as /devices/virtual/input/input16
[  116.787509][   T41] EXT4-fs (loop3): i_reserved_data_blocks=8
[  116.800694][  T283] EXT4-fs (loop3): unmounting filesystem.
[  116.848113][ T6100] bridge0: the hash_elasticity option has been deprecated and is always 16
[  116.917971][ T6116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6116 comm=syz.0.2428
[  116.962974][ T6122] loop0: detected capacity change from 0 to 512
[  116.978897][ T6122] EXT4-fs: Ignoring removed mblk_io_submit option
[  117.000864][ T6122] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  117.023657][ T6122] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2420: attempt to clear invalid blocks 2 len 1
[  117.056685][ T6122] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  117.092516][ T6122] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2420: invalid indirect mapped block 1819239214 (level 0)
[  117.126675][ T6122] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2420: invalid indirect mapped block 1819239214 (level 1)
[  117.128709][ T6125] loop3: detected capacity change from 0 to 40427
[  117.151220][ T6122] EXT4-fs (loop0): 1 truncate cleaned up
[  117.157133][ T6122] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  117.197618][ T6122] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  117.213134][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  117.220290][ T6125] F2FS-fs (loop3): Found nat_bits in checkpoint
[  117.256957][   T28] kauditd_printk_skb: 39 callbacks suppressed
[  117.256981][   T28] audit: type=1400 audit(2000000087.019:2260): avc:  denied  { getopt } for  pid=6134 comm="syz.7.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  117.296184][ T6125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  117.357080][ T6125] syz.3.2421: attempt to access beyond end of device
[  117.357080][ T6125] loop3: rw=2049, sector=53248, nr_sectors = 32 limit=40427
[  117.391335][   T28] audit: type=1400 audit(2000000087.159:2261): avc:  denied  { mount } for  pid=6153 comm="syz.7.2435" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  117.443750][ T6159] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  117.492218][ T6169] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2440'.
[  117.504062][  T283] syz-executor: attempt to access beyond end of device
[  117.504062][  T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.591895][ T6180] EXT4-fs (loop7): Test dummy encryption mode enabled
[  117.613456][ T6180] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  117.619546][ T6181] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  117.643706][ T6181] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.644164][ T6180] EXT4-fs (loop7): 1 truncate cleaned up
[  117.667471][   T28] audit: type=1326 audit(2000000087.439:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.4.2449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d12d9aeb9 code=0x0
[  117.697705][ T4352] EXT4-fs (loop9): unmounting filesystem.
[  117.764201][ T6180] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  117.773051][ T6197] usb usb8: usbfs: process 6197 (syz.9.2453) did not claim interface 0 before use
[  117.790523][ T6180] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.2445: Siphash requires key
[  117.844700][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  117.914929][ T6214] EXT4-fs: Ignoring removed nobh option
[  117.931077][ T6214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  117.943309][ T6214] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2461: iget: bad i_size value: 38620345925642
[  117.970007][ T6214] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2461: couldn't read orphan inode 15 (err -117)
[  117.990020][ T6214] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  117.990971][ T6226] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2464'.
[  118.028411][  T283] EXT4-fs (loop3): unmounting filesystem.
[  118.403849][ T6280] raw_sendmsg: syz.0.2488 forgot to set AF_INET. Fix it!
[  118.693986][ T6303] FAT-fs (loop9): Directory bread(block 64) failed
[  118.716534][ T6307] EXT4-fs: Ignoring removed oldalloc option
[  118.731966][ T6303] FAT-fs (loop9): Directory bread(block 65) failed
[  118.733869][ T6307] EXT4-fs: Ignoring removed orlov option
[  118.744793][ T6303] FAT-fs (loop9): Directory bread(block 66) failed
[  118.751506][ T6303] FAT-fs (loop9): Directory bread(block 67) failed
[  118.757948][ T6307] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  118.758482][ T6303] FAT-fs (loop9): Directory bread(block 68) failed
[  118.775269][ T6303] FAT-fs (loop9): Directory bread(block 69) failed
[  118.786652][ T6303] FAT-fs (loop9): Directory bread(block 70) failed
[  118.793838][ T6303] FAT-fs (loop9): Directory bread(block 71) failed
[  118.801430][ T6303] FAT-fs (loop9): Directory bread(block 72) failed
[  118.805589][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  118.809645][ T6303] FAT-fs (loop9): Directory bread(block 73) failed
[  118.826174][ T6314] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2502'.
[  118.903841][ T6328] device veth1_macvtap left promiscuous mode
[  118.924877][ T6330] input: syz1 as /devices/virtual/input/input17
[  118.949882][ T6334] exfat: Deprecated parameter 'utf8'
[  118.965315][ T6334] exfat: Deprecated parameter 'namecase'
[  118.984045][ T6334] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d)
[  119.126965][  T579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=579 comm=kworker/1:3
[  119.153764][ T6352] set_capacity_and_notify: 8 callbacks suppressed
[  119.153782][ T6352] loop7: detected capacity change from 0 to 512
[  119.156760][ T6354] input: syz1 as /devices/virtual/input/input18
[  119.190132][ T6352] EXT4-fs (loop7): 1 truncate cleaned up
[  119.196203][ T6352] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  119.205763][ T6352] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.220026][  T928] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  119.250063][ T6342] loop3: detected capacity change from 0 to 40427
[  119.260180][  T928] EXT4-fs error (device loop7): ext4_release_dquot:6834: comm kworker/u4:6: Failed to release dquot type 1
[  119.267022][ T6342] F2FS-fs (loop3): invalid crc value
[  119.278124][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  119.311731][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.315999][ T6342] F2FS-fs (loop3): Found nat_bits in checkpoint
[  119.376384][ T6342] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  119.432949][  T283] syz-executor: attempt to access beyond end of device
[  119.432949][  T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.572893][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2530'.
[  119.774135][ T6387] loop0: detected capacity change from 0 to 4096
[  119.801349][ T6387] EXT4-fs: Conflicting test_dummy_encryption options
[  119.821963][ T6383] loop7: detected capacity change from 0 to 40427
[  119.846227][ T6383] F2FS-fs (loop7): Found nat_bits in checkpoint
[  119.914107][ T6383] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  120.014576][ T6385] loop3: detected capacity change from 0 to 131072
[  120.033438][ T6385] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name
[  120.041685][ T6385] F2FS-fs (loop3): invalid crc value
[  120.056170][ T6385] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  120.087481][ T6385] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[  120.099096][ T6383] syz.7.2532: attempt to access beyond end of device
[  120.099096][ T6383] loop7: rw=2049, sector=53248, nr_sectors = 32 limit=40427
[  120.163289][ T3724] syz-executor: attempt to access beyond end of device
[  120.163289][ T3724] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  120.380623][ T6416] loop3: detected capacity change from 0 to 2048
[  120.387318][ T6418] loop7: detected capacity change from 0 to 256
[  120.411375][ T6418] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  120.433737][   T28] audit: type=1400 audit(2000000090.199:2263): avc:  denied  { unlink } for  pid=6417 comm="syz.7.2543" name="file0" dev="incremental-fs" ino=1048771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  120.459724][   T28] audit: type=1400 audit(2000000090.229:2264): avc:  denied  { rmdir } for  pid=3724 comm="syz-executor" name=".index" dev="loop7" ino=1048769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  120.483123][ T6416]  loop3: p1 < >
[  120.526648][  T103]  loop3: p1 < >
[  120.549169][ T6425] loop7: detected capacity change from 0 to 512
[  120.567103][ T6425] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  120.567186][  T283] __loop_clr_fd: partition scan of loop3 failed (rc=-16)
[  120.585958][  T360] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.599413][  T360] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  120.619514][  T360] Buffer I/O error on dev loop3p1, logical block 0, async page read
[  120.627998][  T360] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  120.637378][  T360] Buffer I/O error on dev loop3p1, logical block 0, async page read
[  120.645634][  T360] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  120.655392][  T360] Buffer I/O error on dev loop3p1, logical block 0, async page read
[  120.665068][  T360] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  120.674422][  T360] Buffer I/O error on dev loop3p1, logical block 0, async page read
[  120.692340][  T360] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  120.704298][  T360] Buffer I/O error on dev loop3p1, logical block 0, async page read
[  120.743000][  T360] udevd[360]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  120.758043][  T360] udevd[360]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  120.772129][  T360] udevd[360]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  120.788374][  T360] udevd[360]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  120.846339][    T6] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  120.869240][ T6438] loop3: detected capacity change from 0 to 512
[  120.885379][ T6438] EXT4-fs (loop3): Test dummy encryption mode enabled
[  120.892394][ T6438] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  120.909582][ T6438] EXT4-fs (loop3): 1 truncate cleaned up
[  120.916718][ T6438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  120.921097][ T6423] loop0: detected capacity change from 0 to 131072
[  120.940073][ T6423] F2FS-fs (loop0): Test dummy encryption mode enabled
[  120.941644][ T6438] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.2553: Siphash requires key
[  120.953987][ T6423] F2FS-fs (loop0): invalid crc value
[  120.971969][ T6423] F2FS-fs (loop0): Found nat_bits in checkpoint
[  120.973260][  T283] EXT4-fs (loop3): unmounting filesystem.
[  121.020408][ T6423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  121.037495][    T6] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  121.048818][    T6] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  121.059209][    T6] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  121.069394][    T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.080097][ T6425] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  121.204214][ T6454] xt_hashlimit: max too large, truncated to 1048576
[  121.224828][ T6456] input: syz0 as /devices/virtual/input/input19
[  121.301482][  T579] usb 8-1: USB disconnect, device number 4
[  121.322703][   T28] audit: type=1326 audit(2000000091.089:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6468 comm="syz.4.2565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d12d9aeb9 code=0x0
[  121.808318][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  122.011919][ T6485] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  122.018789][ T6485] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  122.042170][ T6485] F2FS-fs (loop7): Found nat_bits in checkpoint
[  122.085352][ T6485] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  122.096148][ T6485] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  122.197504][ T6503] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  122.244865][ T6506] device erspan0 entered promiscuous mode
[  122.261189][ T6506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  122.290548][ T3724] syz-executor: attempt to access beyond end of device
[  122.290548][ T3724] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  122.291187][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.340303][  T351] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.347406][  T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.376684][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  122.385026][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.393968][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  122.416534][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.435574][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.450492][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.460410][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.467941][ T6515] EXT4-fs (loop7): 1 truncate cleaned up
[  122.468899][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.478289][ T6515] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  122.482986][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.535214][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  122.563041][   T28] audit: type=1326 audit(2000000092.329:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.589058][   T28] audit: type=1326 audit(2000000092.329:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.614016][   T28] audit: type=1326 audit(2000000092.359:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.644691][   T28] audit: type=1326 audit(2000000092.359:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.676005][   T28] audit: type=1326 audit(2000000092.359:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.702141][   T28] audit: type=1326 audit(2000000092.379:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.726992][   T28] audit: type=1326 audit(2000000092.379:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.754004][   T28] audit: type=1326 audit(2000000092.379:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.778853][   T28] audit: type=1326 audit(2000000092.379:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.803499][ T6526] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  122.803655][   T28] audit: type=1326 audit(2000000092.379:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.3.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68af9aeb9 code=0x7ffc0000
[  122.836407][ T6526] FAT-fs (loop3): Filesystem has been set read-only
[  122.930612][ T6512] F2FS-fs (loop0): invalid crc value
[  122.984608][ T6512] F2FS-fs (loop0): Found nat_bits in checkpoint
[  123.065553][ T6512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  123.073641][ T6532] F2FS-fs (loop7): invalid crc value
[  123.101446][ T6546] netlink: 'syz.3.2597': attribute type 15 has an invalid length.
[  123.128667][ T6532] F2FS-fs (loop7): Found nat_bits in checkpoint
[  123.183779][ T6553] input: syz0 as /devices/virtual/input/input20
[  123.193756][ T6532] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  123.243556][ T6547] f2fs_ckpt-7:7: attempt to access beyond end of device
[  123.243556][ T6547] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.326323][  T975] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  123.420214][ T6562] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  123.458160][ T6572] random: crng reseeded on system resumption
[  123.468770][  T283] EXT4-fs (loop3): unmounting filesystem.
[  123.507691][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.517761][ T6576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  123.527909][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.530635][ T6576] ext4 filesystem being mounted at /607/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.580766][  T975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  123.597056][  T283] EXT4-fs (loop3): unmounting filesystem.
[  123.602987][  T975] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  123.612493][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.623674][  T975] usb 5-1: config 0 descriptor??
[  123.660552][ T6593] xt_hashlimit: size too large, truncated to 1048576
[  123.856533][  T579] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  123.886363][   T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  124.035216][  T975] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd
[  124.036356][  T579] usb 1-1: Using ep0 maxpacket: 32
[  124.044124][  T975] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  124.049200][  T579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.057901][  T975] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  124.066803][   T37] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  124.086826][  T579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.097171][  T579] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  124.106881][  T579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.114987][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.126311][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.136904][  T579] usb 1-1: config 0 descriptor??
[  124.143488][   T60] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  124.152626][   T60] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  124.160638][   T60] usb 4-1: Manufacturer: syz
[  124.166062][   T60] usb 4-1: config 0 descriptor??
[  124.297300][   T37] usb 8-1: Using ep0 maxpacket: 32
[  124.303618][   T37] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  124.312448][   T37] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.322824][   T37] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  124.338161][   T24] usb 5-1: USB disconnect, device number 14
[  124.345256][   T37] usb 8-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd
[  124.358073][   T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.367916][   T37] usb 8-1: Product: syz
[  124.372130][   T37] usb 8-1: Manufacturer: syz
[  124.377084][   T37] usb 8-1: SerialNumber: syz
[  124.382389][   T37] usb 8-1: config 0 descriptor??
[  124.388485][   T37] rndis_host 8-1:0.0: skipping garbage
[  124.393992][   T37] usb 8-1: bad CDC descriptors
[  124.399201][   T37] cdc_acm 8-1:0.0: skipping garbage
[  124.404525][   T37] cdc_acm 8-1:0.0: Control and data interfaces are not separated!
[  124.412723][   T37] cdc_acm 8-1:0.0: This needs exactly 3 endpoints
[  124.419439][   T37] cdc_acm: probe of 8-1:0.0 failed with error -22
[  124.546551][  T579] savu 0003:1E7D:2D5A.0013: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  124.607714][ T6596] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2617'.
[  124.618012][  T579] usb 8-1: USB disconnect, device number 5
[  124.817082][   T24] usb 1-1: USB disconnect, device number 3
[  124.957586][ T6608] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2621'.
[  124.980058][   T60] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0014/input/input22
[  124.991799][   T60] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0014/input/input23
[  125.003708][   T60] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0014/input/input24
[  125.017185][   T60] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0014/input/input25
[  125.030115][   T60] uclogic 0003:256C:006D.0014: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0
[  125.196475][  T975] usb 4-1: USB disconnect, device number 9
[  125.577000][ T6665] 9pnet: p9_errstr2errno: server reported unknown error D��r9�ք܇�����
[  125.760263][ T6676] set_capacity_and_notify: 9 callbacks suppressed
[  125.760281][ T6676] loop3: detected capacity change from 0 to 256
[  125.783848][ T6630] loop7: detected capacity change from 0 to 131072
[  125.799093][ T6676] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  125.810674][ T6630] F2FS-fs (loop7): invalid crc value
[  125.843932][ T6630] F2FS-fs (loop7): Found nat_bits in checkpoint
[  125.895861][ T6630] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  125.906296][   T60] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  126.087358][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.098358][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.109021][   T60] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  126.118277][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.129220][   T60] usb 5-1: config 0 descriptor??
[  126.246787][ T6706] input: syz1 as /devices/virtual/input/input26
[  126.374448][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2669'.
[  126.547184][   T60] petalynx 0003:18B1:0037.0015: unknown global tag 0xe
[  126.554102][   T60] petalynx 0003:18B1:0037.0015: item 0 0 1 14 parsing failed
[  126.561944][   T60] petalynx 0003:18B1:0037.0015: parse failed
[  126.569531][   T60] petalynx: probe of 0003:18B1:0037.0015 failed with error -22
[  126.746134][ T6738] loop7: detected capacity change from 0 to 40427
[  126.761804][  T975] usb 5-1: USB disconnect, device number 15
[  126.773178][ T6738] F2FS-fs (loop7): Found nat_bits in checkpoint
[  126.797756][ T6738] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  126.829922][ T6738] syz.7.2677: attempt to access beyond end of device
[  126.829922][ T6738] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  126.850669][ T3724] syz-executor: attempt to access beyond end of device
[  126.850669][ T3724] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  126.970979][ T6756] loop0: detected capacity change from 0 to 512
[  126.993175][ T6756] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2200: inode #15: comm syz.0.2685: corrupted in-inode xattr
[  127.005579][ T6756] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2685: couldn't read orphan inode 15 (err -117)
[  127.017843][ T6756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  127.050802][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  127.067433][  T928] Bluetooth: hci0: Frame reassembly failed (-84)
[  127.233394][ T6776] loop3: detected capacity change from 0 to 16
[  127.241572][ T6776] erofs: (device loop3): mounted with root inode @ nid 36.
[  127.254783][ T6776] syz.3.2692: attempt to access beyond end of device
[  127.254783][ T6776] loop3: rw=524288, sector=1342177272, nr_sectors = 2056 limit=16
[  127.270439][ T6776] syz.3.2692: attempt to access beyond end of device
[  127.270439][ T6776] loop3: rw=524288, sector=1342179328, nr_sectors = 504 limit=16
[  127.329395][ T6784] tap0: tun_chr_ioctl cmd 1074812117
[  127.335146][ T6784] tap0: tun_chr_ioctl cmd 21731
[  127.408227][ T6790] 9pnet: p9_errstr2errno: server reported unknown error �
[  127.453803][ T6794] binfmt_misc: register: failed to install interpreter file ./file2
[  127.616327][  T975] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  127.797466][  T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.807971][  T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.818156][  T975] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  127.827463][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  127.835773][  T975] usb 4-1: SerialNumber: syz
[  128.025567][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  128.025581][   T28] audit: type=1326 audit(2000000097.789:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79abf9aeb9 code=0x7fc00000
[  128.059176][  T975] usb 4-1: 0:2 : does not exist
[  128.069143][  T975] usb 4-1: USB disconnect, device number 10
[  128.454147][  T928] Bluetooth: hci1: Frame reassembly failed (-84)
[  128.466837][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  128.988576][ T6829] loop3: detected capacity change from 0 to 256
[  129.000936][ T6829] FAT-fs (loop3): Directory bread(block 64) failed
[  129.008464][ T6829] FAT-fs (loop3): Directory bread(block 65) failed
[  129.015072][ T6829] FAT-fs (loop3): Directory bread(block 66) failed
[  129.022237][ T6829] FAT-fs (loop3): Directory bread(block 67) failed
[  129.029050][ T6829] FAT-fs (loop3): Directory bread(block 68) failed
[  129.035852][ T6829] FAT-fs (loop3): Directory bread(block 69) failed
[  129.042477][ T6829] FAT-fs (loop3): Directory bread(block 70) failed
[  129.049146][ T6829] FAT-fs (loop3): Directory bread(block 71) failed
[  129.055797][ T6829] FAT-fs (loop3): Directory bread(block 72) failed
[  129.062561][ T6829] FAT-fs (loop3): Directory bread(block 73) failed
[  129.096330][  T948] Bluetooth: hci0: command 0x1003 tx timeout
[  129.096456][  T949] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  129.109053][ T6764] Bluetooth: hci0: Opcode 0x080f failed: -22
[  129.231130][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  129.235564][ T6848] loop0: detected capacity change from 0 to 1024
[  129.244914][ T6846] device veth1_macvtap entered promiscuous mode
[  129.252748][ T6846] device erspan0 entered promiscuous mode
[  129.259992][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  129.269907][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.277085][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.285415][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  129.294900][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  129.303422][ T6848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  129.305911][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  129.330516][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  129.339324][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  129.353055][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  129.363322][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  129.372219][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  129.372227][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  129.386993][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  129.455659][ T6865] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2731'.
[  129.505511][ T6872] loop0: detected capacity change from 0 to 128
[  129.515747][ T6874] loop3: detected capacity change from 0 to 1024
[  129.547649][ T6874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  129.588970][ T6874] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.2735: Allocating blocks 497-513 which overlap fs metadata
[  129.605940][ T6874] EXT4-fs (loop3): pa ffff888116d00888: logic 256, phys. 385, len 8
[  129.614050][ T6874] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1
[  129.655590][  T283] EXT4-fs (loop3): unmounting filesystem.
[  130.473286][   T45] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  130.706847][   T28] audit: type=1326 audit(2000000100.479:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.0.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14279aeb9 code=0x7fc00000
[  131.116266][    C1] sched: RT throttling activated
[  131.199107][   T28] audit: type=1400 audit(2000000100.959:2297): avc:  denied  { mounton } for  pid=6923 comm="syz.4.2756" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  131.255268][   T28] audit: type=1400 audit(2000000101.019:2298): avc:  denied  { setopt } for  pid=6935 comm="syz.4.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  131.348757][ T6949] loop3: detected capacity change from 0 to 512
[  131.373658][ T6951] loop0: detected capacity change from 0 to 512
[  131.394004][ T6951] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2769: bg 0: block 393: padding at end of block bitmap is not set
[  131.396211][ T6949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  131.418705][ T6951] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  131.428365][ T6949] ext4 filesystem being mounted at /638/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  131.451328][ T6960] loop7: detected capacity change from 0 to 512
[  131.458049][ T6960] EXT4-fs: Ignoring removed mblk_io_submit option
[  131.482455][ T6960] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  131.488247][ T6951] EXT4-fs (loop0): 2 truncates cleaned up
[  131.496351][ T6951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  131.496837][ T6960] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.2771: attempt to clear invalid blocks 2 len 1
[  131.518961][  T283] EXT4-fs (loop3): unmounting filesystem.
[  131.525275][ T6960] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  131.541003][ T6960] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2771: invalid indirect mapped block 1819239214 (level 0)
[  131.541726][ T6951] overlayfs: failed to set xattr on upper
[  131.555692][ T6960] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2771: invalid indirect mapped block 1819239214 (level 1)
[  131.579884][   T28] audit: type=1400 audit(2000000101.349:2299): avc:  denied  { setattr } for  pid=6950 comm="syz.0.2769" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.602613][   T28] audit: type=1400 audit(2000000101.349:2300): avc:  denied  { write open } for  pid=6950 comm="syz.0.2769" path=2F202864656C6574656429 dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.609235][ T6960] EXT4-fs (loop7): 1 truncate cleaned up
[  131.651807][ T6960] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  131.687137][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  131.711027][ T6971] loop3: detected capacity change from 0 to 512
[  131.732263][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  131.777489][ T6971] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  131.798364][ T6971] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  131.824860][ T6971] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.2787: iget: bad i_size value: 12154757448730
[  131.842437][ T6971] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2787: couldn't read orphan inode 13 (err -117)
[  131.889034][ T6971] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  131.912064][ T6989] loop0: detected capacity change from 0 to 1024
[  131.952997][ T6989] EXT4-fs: Ignoring removed orlov option
[  131.965336][ T6971] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  131.975636][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  131.984654][  T283] EXT4-fs (loop3): unmounting filesystem.
[  131.991868][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  132.001645][ T6989] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  132.009521][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  132.045232][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  132.054010][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  132.058805][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  132.062629][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  132.074015][   T60] kernel write not supported for file /rfkill (pid: 60 comm: kworker/1:2)
[  132.076046][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  132.093056][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.101315][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  132.129726][  T975] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  132.147051][  T975] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  132.376719][ T7020] loop3: detected capacity change from 0 to 2048
[  132.396597][ T7003] loop0: detected capacity change from 0 to 40427
[  132.406517][ T7003] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  132.426176][ T7003] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  132.454236][ T7020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  132.455680][ T7003] F2FS-fs (loop0): fault_type options not supported
[  132.471633][ T7003] F2FS-fs (loop0): fault_injection options not supported
[  132.479076][ T7003] F2FS-fs (loop0): Image doesn't support compression
[  132.485891][   T28] audit: type=1400 audit(2000000102.249:2301): avc:  denied  { append } for  pid=7019 comm="syz.3.2797" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  132.510429][ T7003] F2FS-fs (loop0): invalid crc value
[  132.526895][ T7003] F2FS-fs (loop0): Found nat_bits in checkpoint
[  132.550801][ T7038] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7038 comm=syz.7.2803
[  132.598858][ T7003] F2FS-fs (loop0): Start checkpoint disabled!
[  132.605664][ T7003] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  132.613595][ T7003] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  132.621181][ T7003] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  132.673817][  T928] kworker/u4:6: attempt to access beyond end of device
[  132.673817][  T928] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  133.200055][  T283] EXT4-fs (loop3): unmounting filesystem.
[  133.215766][ T7054] loop3: detected capacity change from 0 to 256
[  133.223638][ T7054] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.234568][ T7054] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  133.244695][ T7054] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  133.284599][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2811'.
[  133.608383][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'.
[  133.616412][  T975] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  133.644687][ T7086] loop0: detected capacity change from 0 to 1024
[  133.651549][ T7086] EXT4-fs: Ignoring removed nobh option
[  133.657541][ T7086] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  133.679019][ T7086] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  133.698798][ T7086] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.2824: Allocating blocks 497-513 which overlap fs metadata
[  133.713652][ T7086] EXT4-fs (loop0): pa ffff888116d00690: logic 256, phys. 385, len 8
[  133.721794][ T7086] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1
[  133.750919][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  133.766386][   T60] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  133.797891][  T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.828040][  T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.838606][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'.
[  133.843988][  T975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  133.865572][  T975] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  133.874718][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.885684][  T975] usb 4-1: config 0 descriptor??
[  133.902369][ T7111] loop0: detected capacity change from 0 to 512
[  133.902780][ T7112] input: syz0 as /devices/virtual/input/input27
[  133.930220][ T7111] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.941913][ T7111] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.956409][   T60] usb 8-1: Using ep0 maxpacket: 32
[  133.965293][ T7111] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  133.981091][ T7111] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  133.993939][ T7111] EXT4-fs (loop0): This should not happen!! Data will be lost
[  133.993939][ T7111] 
[  134.004315][ T7111] EXT4-fs (loop0): Total free blocks count 0
[  134.004414][   T60] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.021442][ T7111] EXT4-fs (loop0): Free/Dirty block details
[  134.021718][   T60] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  134.037411][ T7111] EXT4-fs (loop0): free_blocks=65280
[  134.042888][ T7111] EXT4-fs (loop0): dirty_blocks=33
[  134.048297][ T7111] EXT4-fs (loop0): Block reservation details
[  134.054357][ T7111] EXT4-fs (loop0): i_reserved_data_blocks=33
[  134.061295][   T60] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.070372][   T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.078609][   T60] usb 8-1: Product: syz
[  134.082780][   T60] usb 8-1: Manufacturer: syz
[  134.087608][   T60] usb 8-1: SerialNumber: syz
[  134.120236][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  134.198744][ T7124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  134.212649][ T7124] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.242447][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  134.285619][ T7131] EXT4-fs: Ignoring removed bh option
[  134.296120][  T975] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xd
[  134.305299][  T975] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  134.314915][ T7131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  134.325551][  T975] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  134.329220][ T7131] SELinux:  Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped).
[  134.349336][   T28] audit: type=1400 audit(2000000104.119:2302): avc:  denied  { relabelto } for  pid=7130 comm="syz.0.2842" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_disk_exec_t:s0"
[  134.384718][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.391918][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.399605][ T7127] device bridge_slave_0 entered promiscuous mode
[  134.406755][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.413788][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.421831][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  134.422039][ T7127] device bridge_slave_1 entered promiscuous mode
[  134.446303][  T346] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  134.509077][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.516144][ T7127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.523519][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.530568][ T7127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.553132][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  134.561260][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.569070][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.579745][   T24] usb 4-1: USB disconnect, device number 11
[  134.592984][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  134.601549][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.608649][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.617003][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  134.625368][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.632503][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.637387][  T346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.654511][  T346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.657465][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.676454][  T346] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  134.691485][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  134.699328][  T346] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  134.708614][  T346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.729535][  T346] usb 5-1: config 0 descriptor??
[  134.735994][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  134.751756][ T7127] device veth0_vlan entered promiscuous mode
[  134.766865][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  134.775003][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  134.783333][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  134.800746][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.817250][ T7127] device veth1_macvtap entered promiscuous mode
[  134.828384][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  134.837001][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  134.850203][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  134.859272][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  134.897456][  T975] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  134.917007][  T975] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  134.956916][  T928] device bridge_slave_1 left promiscuous mode
[  134.965892][  T928] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.986827][  T928] device bridge_slave_0 left promiscuous mode
[  134.993096][  T928] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.017722][  T928] device veth1_macvtap left promiscuous mode
[  135.033898][  T928] device veth0_vlan left promiscuous mode
[  135.102704][   T60] cdc_ncm 8-1:1.0: bind() failure
[  135.116985][   T60] cdc_ncm: probe of 8-1:1.1 failed with error -71
[  135.130567][   T60] cdc_mbim: probe of 8-1:1.1 failed with error -71
[  135.137872][  T346] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  135.151122][  T346] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  135.157175][   T60] usb 8-1: USB disconnect, device number 6
[  135.166331][  T346] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  135.177258][  T346] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  135.192061][  T346] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  135.214786][  T346] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  135.236088][  T346] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving
[  135.254680][  T346] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  135.288338][ T7170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2852'.
[  135.437676][  T346] usb 5-1: USB disconnect, device number 16
[  135.553043][ T7196] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2863'.
[  135.567072][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2863'.
[  135.704194][ T7207] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  135.714167][ T7213] EXT4-fs: Ignoring removed bh option
[  135.718087][ T7207] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.735745][ T7213] EXT4-fs: Ignoring removed nobh option
[  135.753327][ T7213] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  135.778181][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  135.789939][ T7213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  135.792563][ T7223] EXT4-fs: Ignoring removed mblk_io_submit option
[  135.807353][ T7213] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.2870: Allocating blocks 385-513 which overlap fs metadata
[  135.831020][   T28] audit: type=1400 audit(2000000361.594:2303): avc:  denied  { ioctl } for  pid=7224 comm="syz.7.2874" path="socket:[44522]" dev="sockfs" ino=44522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  135.858112][ T7213] EXT4-fs (loop3): pa ffff888116d005e8: logic 16, phys. 129, len 24
[  135.866320][ T7213] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 8
[  135.879942][ T7223] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  135.894966][ T7228] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  135.900210][ T7223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002]
[  135.910439][  T283] EXT4-fs (loop3): unmounting filesystem.
[  135.913918][ T7223] System zones: 1-12
[  135.921863][ T7228] EXT4-fs (loop7): 1 truncate cleaned up
[  135.928783][ T7223] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2200: inode #15: comm syz.0.2875: corrupted in-inode xattr
[  135.929009][ T7228] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  135.952366][ T7223] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2875: couldn't read orphan inode 15 (err -117)
[  135.976341][ T7223] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  135.996337][ T7228] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.7.2876: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  136.016638][   T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  136.034887][ T7228] EXT4-fs (loop7): Remounting filesystem read-only
[  136.047324][ T7228] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem
[  136.057751][ T7228] EXT4-fs (loop7): Remounting filesystem read-only
[  136.065292][ T7228] EXT4-fs warning (device loop7): ext4_rename_delete:3778: inode #2: comm syz.7.2876: Deleting old file: nlink 5, error=-117
[  136.066446][ T5946] EXT4-fs (loop0): unmounting filesystem.
[  136.095903][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  136.146201][ T7247] EXT4-fs: Ignoring removed i_version option
[  136.160400][ T7247] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  136.169250][ T7247] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.184473][ T7247] EXT4-fs (loop7): re-mounted. Quota mode: none.
[  136.198714][ T7247] EXT4-fs (loop7): re-mounted. Quota mode: none.
[  136.212814][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  136.224361][   T60] usb 3-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30
[  136.225975][  T975] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  136.252045][   T60] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.263275][   T60] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.281163][   T60] usb 3-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127
[  136.297186][   T60] usb 3-1: config 0 interface 0 has no altsetting 0
[  136.303817][   T60] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  136.313058][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.321743][   T60] usb 3-1: config 0 descriptor??
[  136.425826][  T975] usb 4-1: Using ep0 maxpacket: 32
[  136.432278][  T975] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  136.443434][  T975] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  136.454579][  T975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.464311][  T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.472354][  T975] usb 4-1: Product: syz
[  136.476555][  T975] usb 4-1: Manufacturer: syz
[  136.481238][  T975] usb 4-1: SerialNumber: syz
[  136.605761][   T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  136.785657][   T24] usb 8-1: Using ep0 maxpacket: 16
[  136.791889][   T24] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  136.801844][   T24] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  136.811729][   T24] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  136.824719][   T24] usb 8-1: config 1 interface 0 has no altsetting 0
[  136.832785][   T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  136.841902][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.849933][   T24] usb 8-1: Product: syz
[  136.854113][   T24] usb 8-1: Manufacturer: syz
[  136.858854][   T24] usb 8-1: SerialNumber: syz
[  136.929870][   T60] usb 3-1: string descriptor 0 read error: -71
[  136.936537][   T60] uclogic 0003:5543:004D.001A: failed retrieving string descriptor #200: -71
[  136.945370][   T60] uclogic 0003:5543:004D.001A: failed retrieving pen parameters: -71
[  136.953575][   T60] uclogic 0003:5543:004D.001A: failed probing pen v2 parameters: -71
[  136.961914][   T60] uclogic 0003:5543:004D.001A: failed probing parameters: -71
[  136.969473][   T60] uclogic: probe of 0003:5543:004D.001A failed with error -71
[  136.978280][   T60] usb 3-1: USB disconnect, device number 5
[  137.067544][   T24] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  137.068959][ T7266] set_capacity_and_notify: 7 callbacks suppressed
[  137.068975][ T7266] loop0: detected capacity change from 0 to 128
[  137.092314][ T7266] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.105288][ T7266] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.120783][ T7266] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  137.134819][ T5946] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  137.142623][ T5946] FAT-fs (loop0): Filesystem has been set read-only
[  137.149613][ T5946] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  137.163360][ T6278] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.278060][   T28] audit: type=1400 audit(2000000363.045:2304): avc:  denied  { read write } for  pid=7258 comm="syz.7.2886" name="lp0" dev="devtmpfs" ino=1902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  137.302853][   T28] audit: type=1400 audit(2000000363.075:2305): avc:  denied  { open } for  pid=7258 comm="syz.7.2886" path="/dev/usb/lp0" dev="devtmpfs" ino=1902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  137.330012][   T28] audit: type=1400 audit(2000000363.075:2306): avc:  denied  { ioctl } for  pid=7258 comm="syz.7.2886" path="/dev/usb/lp0" dev="devtmpfs" ino=1902 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  137.358070][ T7259] usblp0:failed reading printer status (-71)
[  137.358734][  T346] usb 8-1: USB disconnect, device number 7
[  137.364253][   T28] audit: type=1400 audit(2000000363.095:2307): avc:  denied  { module_request } for  pid=7268 comm="syz-executor" kmod="netdev-nr6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  137.404146][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.411344][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.419055][ T7268] device bridge_slave_0 entered promiscuous mode
[  137.428796][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.436062][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.443773][ T7268] device bridge_slave_1 entered promiscuous mode
[  137.570850][  T975] cdc_ncm 4-1:1.0: bind() failure
[  137.571247][ T7258] usblp0: removed
[  137.577481][  T975] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  137.586807][  T975] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  137.607595][  T975] usb 4-1: USB disconnect, device number 12
[  137.650282][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.657463][ T7268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.664739][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.672103][ T7268] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.703470][   T28] audit: type=1400 audit(2000000363.465:2308): avc:  denied  { mounton } for  pid=7285 comm="syz.2.2897" path="/proc/26/task" dev="proc" ino=44572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  137.711331][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.736909][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.748973][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.765822][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.774279][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.781371][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.798617][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.806906][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.813961][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.814127][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.841431][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.842884][ T7294] loop2: detected capacity change from 0 to 256
[  137.858116][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  137.867095][ T7294] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.880200][ T7268] device veth0_vlan entered promiscuous mode
[  137.892746][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  137.908709][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  137.917642][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  137.925712][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  137.934046][ T7268] device veth1_macvtap entered promiscuous mode
[  137.941532][ T7294] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  137.950285][ T7294] FAT-fs (loop2): Filesystem has been set read-only
[  137.957159][ T7294] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  137.957705][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  137.966826][ T7294] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  137.973760][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  138.008962][  T928] device bridge_slave_1 left promiscuous mode
[  138.015631][  T928] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.023155][  T928] device bridge_slave_0 left promiscuous mode
[  138.029619][  T928] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.037938][  T928] device veth1_macvtap left promiscuous mode
[  138.044569][  T928] device veth0_vlan left promiscuous mode
[  138.114813][ T7298] loop7: detected capacity change from 0 to 512
[  138.130692][ T7298] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  138.141319][ T7298] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  138.243350][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2909'.
[  138.267724][ T7320] loop3: detected capacity change from 0 to 2048
[  138.274649][ T7320] EXT4-fs: Ignoring removed i_version option
[  138.299474][ T7320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  138.308596][ T7320] ext4 filesystem being mounted at /668/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.311816][ T7325] loop6: detected capacity change from 0 to 1024
[  138.328001][ T7325] EXT4-fs (loop6): Invalid log cluster size: 32
[  138.343358][ T7320] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  138.355541][ T7320] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  138.366842][ T6615] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  138.381441][  T283] EXT4-fs (loop3): unmounting filesystem.
[  138.388210][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[  138.390252][  T949] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  138.491292][  T928] Bluetooth: hci0: Frame reassembly failed (-84)
[  138.714711][ T3423] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  138.894695][ T3423] usb 5-1: Using ep0 maxpacket: 32
[  138.901083][ T3423] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  138.909372][ T3423] usb 5-1: config 0 has no interface number 0
[  138.917035][ T3423] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  138.926159][ T3423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.934240][ T3423] usb 5-1: Product: syz
[  138.938595][ T3423] usb 5-1: Manufacturer: syz
[  138.943204][ T3423] usb 5-1: SerialNumber: syz
[  138.949345][ T3423] usb 5-1: config 0 descriptor??
[  138.955197][ T3423] smsc95xx v2.0.0
[  139.358850][ T3423] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  139.369676][ T3423] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  139.432088][ T7384] loop7: detected capacity change from 0 to 256
[  139.445597][ T7384] FAT-fs (loop7): Directory bread(block 64) failed
[  139.452307][ T7384] FAT-fs (loop7): Directory bread(block 65) failed
[  139.458941][ T7384] FAT-fs (loop7): Directory bread(block 66) failed
[  139.465774][ T7384] FAT-fs (loop7): Directory bread(block 67) failed
[  139.472340][ T7384] FAT-fs (loop7): Directory bread(block 68) failed
[  139.478915][ T7384] FAT-fs (loop7): Directory bread(block 69) failed
[  139.485817][ T7384] FAT-fs (loop7): Directory bread(block 70) failed
[  139.492432][ T7384] FAT-fs (loop7): Directory bread(block 71) failed
[  139.495316][  T975] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  139.499214][ T7384] FAT-fs (loop7): Directory bread(block 72) failed
[  139.513255][ T7384] FAT-fs (loop7): Directory bread(block 73) failed
[  139.625202][ T7386] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  139.685196][  T975] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  139.693471][  T975] usb 3-1: config 0 has no interface number 0
[  139.699747][  T975] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023
[  139.711058][  T975] usb 3-1: config 0 interface 128 has no altsetting 0
[  139.719301][  T975] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91
[  139.729044][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.737355][  T975] usb 3-1: Product: syz
[  139.741555][  T975] usb 3-1: Manufacturer: syz
[  139.746319][  T975] usb 3-1: SerialNumber: syz
[  139.752161][  T975] usb 3-1: config 0 descriptor??
[  139.758198][  T975] usbhid 3-1:0.128: couldn't find an input interrupt endpoint
[  139.782806][ T3423] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  139.793699][ T3423] smsc95xx: probe of 5-1:0.67 failed with error -71
[  139.801541][ T3423] usb 5-1: USB disconnect, device number 17
[  139.936702][ T7396] loop3: detected capacity change from 0 to 40427
[  139.945727][   T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  139.953723][ T7396] F2FS-fs (loop3): fault_injection options not supported
[  139.966235][ T7396] F2FS-fs (loop3): fault_type options not supported
[  139.973675][ T7396] F2FS-fs (loop3): invalid crc value
[  139.977123][  T975] usb 3-1: USB disconnect, device number 6
[  139.981162][ T7396] F2FS-fs (loop3): Found nat_bits in checkpoint
[  140.008518][ T7396] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.038757][  T283] syz-executor: attempt to access beyond end of device
[  140.038757][  T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.155453][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.166414][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.178991][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  140.191998][   T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  140.201062][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.209940][   T24] usb 8-1: config 0 descriptor??
[  140.533776][  T949] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  140.533943][  T982] Bluetooth: hci0: command 0x1003 tx timeout
[  140.546849][ T7348] Bluetooth: hci0: Opcode 0x080f failed: -22
[  140.566096][   T28] audit: type=1400 audit(2000000366.337:2309): avc:  denied  { mounton } for  pid=7413 comm="syz.6.2949" path=2F382FE91F7189591E9233614B dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  140.618029][   T24] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving
[  140.631819][   T24] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  140.678952][   T28] audit: type=1400 audit(2000000366.447:2310): avc:  denied  { connect } for  pid=7430 comm="syz.6.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  140.841139][ T7439] 9pnet: p9_errstr2errno: server reported unknown error 
[  140.885684][   T24] usb 8-1: USB disconnect, device number 8
[  141.064727][ T7462] loop3: detected capacity change from 0 to 40427
[  141.071983][ T7462] F2FS-fs (loop3): Image doesn't support compression
[  141.079821][ T7462] F2FS-fs (loop3): invalid crc value
[  141.086892][ T7462] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  141.113525][ T3423] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  141.121342][ T7462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  141.163336][  T283] syz-executor: attempt to access beyond end of device
[  141.163336][  T283] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  141.178902][  T283] syz-executor: attempt to access beyond end of device
[  141.178902][  T283] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  141.213478][   T28] audit: type=1400 audit(2000000366.977:2311): avc:  denied  { mounton } for  pid=7477 comm="syz.6.2976" path="/24/file1" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  141.213562][    T8] kworker/u4:0: attempt to access beyond end of device
[  141.213562][    T8] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  141.294772][ T3423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.305821][ T3423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.321928][ T3423] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.335253][ T3423] usb 3-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00
[  141.344531][ T3423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.358706][ T3423] usb 3-1: config 0 descriptor??
[  141.430646][ T7493] loop7: detected capacity change from 0 to 1024
[  141.454046][ T7493] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  141.466502][ T7493] EXT4-fs (loop7): orphan cleanup on readonly fs
[  141.473150][ T7493] EXT4-fs error (device loop7): ext4_free_blocks:6221: comm syz.7.2983: Freeing blocks not in datazone - block = 0, count = 4096
[  141.487840][ T7493] EXT4-fs (loop7): 1 orphan inode deleted
[  141.495122][ T7493] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  141.589094][ T3724] EXT4-fs (loop7): unmounting filesystem.
[  141.593314][   T60] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  141.622825][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.630382][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.638321][ T7497] device bridge_slave_0 entered promiscuous mode
[  141.645735][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.652799][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.664829][ T7497] device bridge_slave_1 entered promiscuous mode
[  141.732159][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.739438][ T7497] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.746805][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.753860][ T7497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.764191][    T8] device bridge_slave_1 left promiscuous mode
[  141.770457][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.771991][ T3423] wacom 0003:056A:0326.001C: Unknown device_type for 'HID 056a:0326'. Ignoring.
[  141.783510][   T60] usb 5-1: Using ep0 maxpacket: 32
[  141.792448][    T8] device bridge_slave_0 left promiscuous mode
[  141.798686][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.806902][    T8] device veth1_macvtap left promiscuous mode
[  141.807502][   T60] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.08
[  141.813029][    T8] device veth0_vlan left promiscuous mode
[  141.822199][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  141.835820][   T60] usb 5-1: SerialNumber: syz
[  141.840538][    T8] ==================================================================
[  141.841130][   T60] usb 5-1: config 0 descriptor??
[  141.848645][    T8] BUG: KASAN: use-after-free in detach_if_pending+0x156/0x300
[  141.848676][    T8] Write of size 8 at addr ffff8881274dc9f8 by task kworker/u4:0/8
[  141.848689][    T8] 
[  141.848708][    T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G        W          syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  141.848724][    T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  141.848734][    T8] Workqueue: netns cleanup_net
[  141.854937][   T60] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  141.861362][    T8] 
[  141.861386][    T8] Call Trace:
[  141.869874][   T60] usb 5-1: Detected SIO
[  141.871482][    T8]  <TASK>
[  141.881108][   T60] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  141.890460][    T8]  __dump_stack+0x21/0x24
[  141.890495][    T8]  dump_stack_lvl+0x110/0x170
[  141.890513][    T8]  ? __cfi_dump_stack_lvl+0x8/0x8
[  141.890532][    T8]  ? detach_if_pending+0x156/0x300
[  141.890548][    T8]  print_address_description+0x71/0x200
[  141.890565][    T8]  print_report+0x4a/0x60
[  141.890579][    T8]  kasan_report+0x122/0x150
[  141.890596][    T8]  ? detach_if_pending+0x156/0x300
[  141.890613][    T8]  __asan_report_store8_noabort+0x17/0x20
[  141.890629][    T8]  detach_if_pending+0x156/0x300
[  141.972856][    T8]  del_timer_sync+0x136/0x1a0
[  141.977554][    T8]  wg_timers_stop+0x49/0x60
[  141.982039][    T8]  wg_stop+0x81/0x5d0
[  141.986002][    T8]  ? __cfi_wg_stop+0x10/0x10
[  141.990571][    T8]  __dev_close_many+0x293/0x360
[  141.995486][    T8]  ? dev_close_many+0x4d0/0x4d0
[  142.000325][    T8]  dev_close_many+0x21e/0x4d0
[  142.005007][    T8]  ? __cfi_dev_close_many+0x10/0x10
[  142.010183][    T8]  ? __kasan_check_read+0x11/0x20
[  142.015186][    T8]  unregister_netdevice_many+0x44f/0x18e0
[  142.020886][    T8]  ? __kasan_check_read+0x11/0x20
[  142.025884][    T8]  ? __cfi_unregister_netdevice_many+0x10/0x10
[  142.032010][    T8]  ? unregister_netdevice_queue+0x1aa/0x370
[  142.037894][    T8]  ? __cfi_unregister_netdevice_queue+0x10/0x10
[  142.044145][    T8]  ? br_dev_delete+0xfc/0x110
[  142.048816][    T8]  default_device_exit_batch+0x9dc/0xa70
[  142.054449][    T8]  ? idr_destroy+0x21e/0x290
[  142.059020][    T8]  ? __cfi_netdev_run_todo+0x10/0x10
[  142.064296][    T8]  ? __cfi_mutex_lock+0x10/0x10
[  142.069143][    T8]  ? __cfi_default_device_exit_batch+0x10/0x10
[  142.075378][    T8]  ? __cfi_xfrmi_exit_batch_net+0x10/0x10
[  142.081116][    T8]  ? rtnl_unlock+0xe/0x10
[  142.085423][    T8]  ? __cfi_default_device_exit_batch+0x10/0x10
[  142.091558][    T8]  cleanup_net+0x635/0xb10
[  142.096050][    T8]  ? __cfi_cleanup_net+0x10/0x10
[  142.100968][    T8]  process_one_work+0x71f/0xc40
[  142.105808][    T8]  worker_thread+0xa29/0x11e0
[  142.110480][    T8]  kthread+0x281/0x320
[  142.114522][    T8]  ? __cfi_worker_thread+0x10/0x10
[  142.119609][    T8]  ? __cfi_kthread+0x10/0x10
[  142.124201][    T8]  ret_from_fork+0x1f/0x30
[  142.128595][    T8]  </TASK>
[  142.131596][    T8] 
[  142.133905][    T8] Allocated by task 7348:
[  142.138220][    T8]  kasan_set_track+0x4b/0x70
[  142.142789][    T8]  kasan_save_alloc_info+0x25/0x30
[  142.147876][    T8]  __kasan_kmalloc+0x95/0xb0
[  142.152436][    T8]  __kmalloc+0xb1/0x1e0
[  142.156565][    T8]  hci_alloc_dev_priv+0x27/0x1bd0
[  142.161587][    T8]  hci_uart_tty_ioctl+0x3d6/0xa20
[  142.166595][    T8]  tty_ioctl+0x8ef/0xc60
[  142.170823][    T8]  __se_sys_ioctl+0x12f/0x1b0
[  142.175470][    T8]  __x64_sys_ioctl+0x7b/0x90
[  142.180031][    T8]  x64_sys_call+0x58b/0x9a0
[  142.184510][    T8]  do_syscall_64+0x4c/0xa0
[  142.188907][    T8]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  142.194797][    T8] 
[  142.197197][    T8] Freed by task 7348:
[  142.201163][    T8]  kasan_set_track+0x4b/0x70
[  142.205779][    T8]  kasan_save_free_info+0x31/0x50
[  142.210965][    T8]  ____kasan_slab_free+0x132/0x180
[  142.216055][    T8]  __kasan_slab_free+0x11/0x20
[  142.220824][    T8]  slab_free_freelist_hook+0xc2/0x190
[  142.226178][    T8]  __kmem_cache_free+0xb7/0x1b0
[  142.231008][    T8]  kfree+0x6f/0xf0
[  142.234791][    T8]  hci_release_dev+0x12a3/0x13b0
[  142.239827][    T8]  bt_host_release+0x82/0x90
[  142.244392][    T8]  device_release+0xa4/0x1d0
[  142.248967][    T8]  kobject_put+0x19d/0x280
[  142.253393][    T8]  put_device+0x1f/0x30
[  142.257529][    T8]  hci_dev_cmd+0x279/0x740
[  142.261933][    T8]  hci_sock_ioctl+0x41e/0x7f0
[  142.266863][    T8]  sock_do_ioctl+0x114/0x330
[  142.271481][    T8]  sock_ioctl+0x4ca/0x720
[  142.275847][    T8]  __se_sys_ioctl+0x12f/0x1b0
[  142.280589][    T8]  __x64_sys_ioctl+0x7b/0x90
[  142.285177][    T8]  x64_sys_call+0x58b/0x9a0
[  142.289680][    T8]  do_syscall_64+0x4c/0xa0
[  142.294263][    T8]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  142.300150][    T8] 
[  142.302461][    T8] Last potentially related work creation:
[  142.308149][    T8]  kasan_save_stack+0x3a/0x60
[  142.312809][    T8]  __kasan_record_aux_stack+0xb6/0xc0
[  142.318250][    T8]  kasan_record_aux_stack_noalloc+0xb/0x10
[  142.324044][    T8]  insert_work+0x51/0x300
[  142.328351][    T8]  __queue_work+0x9b1/0xd30
[  142.332831][    T8]  queue_work_on+0xde/0x150
[  142.337318][    T8]  __hci_cmd_sync_sk+0xa7f/0xd30
[  142.342254][    T8]  hci_cmd_sync_status+0x53/0x120
[  142.347273][    T8]  hci_dev_cmd+0x648/0x740
[  142.352320][    T8]  hci_sock_ioctl+0x41e/0x7f0
[  142.356996][    T8]  sock_do_ioctl+0x114/0x330
[  142.361590][    T8]  sock_ioctl+0x4ca/0x720
[  142.365957][    T8]  __se_sys_ioctl+0x12f/0x1b0
[  142.370722][    T8]  __x64_sys_ioctl+0x7b/0x90
[  142.375444][    T8]  x64_sys_call+0x58b/0x9a0
[  142.379957][    T8]  do_syscall_64+0x4c/0xa0
[  142.384368][    T8]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  142.390333][    T8] 
[  142.392820][    T8] Second to last potentially related work creation:
[  142.399751][    T8]  kasan_save_stack+0x3a/0x60
[  142.404607][    T8]  __kasan_record_aux_stack+0xb6/0xc0
[  142.410065][    T8]  kasan_record_aux_stack_noalloc+0xb/0x10
[  142.416288][    T8]  insert_work+0x51/0x300
[  142.420793][    T8]  __queue_work+0x9b1/0xd30
[  142.425734][    T8]  queue_work_on+0xde/0x150
[  142.430343][    T8]  hci_cmd_timeout+0x191/0x200
[  142.435105][    T8]  process_one_work+0x71f/0xc40
[  142.439960][    T8]  worker_thread+0xa29/0x11e0
[  142.444723][    T8]  kthread+0x281/0x320
[  142.448952][    T8]  ret_from_fork+0x1f/0x30
[  142.453350][    T8] 
[  142.455650][    T8] The buggy address belongs to the object at ffff8881274dc000
[  142.455650][    T8]  which belongs to the cache kmalloc-8k of size 8192
[  142.469678][    T8] The buggy address is located 2552 bytes inside of
[  142.469678][    T8]  8192-byte region [ffff8881274dc000, ffff8881274de000)
[  142.483116][    T8] 
[  142.485419][    T8] The buggy address belongs to the physical page:
[  142.491904][    T8] page:ffffea00049d3600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1274d8
[  142.502235][    T8] head:ffffea00049d3600 order:3 compound_mapcount:0 compound_pincount:0
[  142.510693][    T8] flags: 0x4000000000010200(slab|head|zone=1)
[  142.516863][    T8] raw: 4000000000010200 ffffea0004713a00 dead000000000005 ffff888100043500
[  142.525442][    T8] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  142.534000][    T8] page dumped because: kasan: bad access detected
[  142.540400][    T8] page_owner tracks the page as allocated
[  142.546177][    T8] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5933, tgid 5932 (syz.9.2342), ts 114609611091, free_ts 114600342283
[  142.569161][    T8]  post_alloc_hook+0x1f5/0x210
[  142.573928][    T8]  prep_new_page+0x1c/0x110
[  142.578563][    T8]  get_page_from_freelist+0x2d12/0x2d80
[  142.584113][    T8]  __alloc_pages+0x1d9/0x480
[  142.588703][    T8]  alloc_slab_page+0x6e/0xf0
[  142.593281][    T8]  new_slab+0x98/0x3d0
[  142.597348][    T8]  ___slab_alloc+0x6bd/0xb20
[  142.601923][    T8]  __slab_alloc+0x5e/0xa0
[  142.606383][    T8]  __kmem_cache_alloc_node+0x203/0x2c0
[  142.611821][    T8]  __kmalloc+0xa1/0x1e0
[  142.616051][    T8]  mb_cache_create+0x187/0x5a0
[  142.620905][    T8]  ext4_xattr_create_cache+0x13/0x20
[  142.626197][    T8]  ext4_fill_super+0x53a8/0x7a40
[  142.631151][    T8]  get_tree_bdev+0x447/0x690
[  142.635753][    T8]  ext4_get_tree+0x1c/0x20
[  142.640327][    T8]  vfs_get_tree+0x9a/0x270
[  142.644736][    T8] page last free stack trace:
[  142.649385][    T8]  free_unref_page_prepare+0x742/0x750
[  142.654824][    T8]  free_unref_page+0x95/0x540
[  142.659485][    T8]  __free_pages+0x67/0x100
[  142.663878][    T8]  __free_slab+0xca/0x1a0
[  142.668193][    T8]  __unfreeze_partials+0x160/0x190
[  142.673373][    T8]  put_cpu_partial+0xa9/0x100
[  142.678026][    T8]  __slab_free+0x1c4/0x280
[  142.682424][    T8]  ___cache_free+0xbf/0xd0
[  142.686902][    T8]  qlist_free_all+0xc6/0x140
[  142.691462][    T8]  kasan_quarantine_reduce+0x14a/0x170
[  142.697415][    T8]  __kasan_slab_alloc+0x24/0x80
[  142.702416][    T8]  slab_post_alloc_hook+0x4f/0x2d0
[  142.707605][    T8]  kmem_cache_alloc+0x16e/0x330
[  142.712629][    T8]  getname_flags+0xb9/0x500
[  142.717130][    T8]  getname+0x19/0x20
[  142.721041][    T8]  do_sys_openat2+0xeb/0x810
[  142.725637][    T8] 
[  142.727951][    T8] Memory state around the buggy address:
[  142.733685][    T8]  ffff8881274dc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.741748][    T8]  ffff8881274dc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.749886][    T8] >ffff8881274dc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.757934][    T8]                                                                 ^
[  142.766177][    T8]  ffff8881274dca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.774580][    T8]  ffff8881274dca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.782666][    T8] ==================================================================
[  142.790890][    T8] Disabling lock debugging due to kernel taint
[  142.797974][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  142.810053][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  142.818476][    C0] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G    B   W          syzkaller #0
[  142.827266][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  142.837337][    C0] Workqueue: netns cleanup_net
[  142.842231][    C0] RIP: 0010:__queue_work+0x575/0xd30
[  142.847539][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c 75 6e 00 49 8b 7d 00 e8 a3 2c
[  142.848053][   T37] usb 3-1: USB disconnect, device number 7
[  142.867328][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[  142.867354][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810029d100
[  142.867367][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  142.867377][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb
[  142.867389][    C0] R10: dffffc0000000000 R11: ffffed1024e9b939 R12: dffffc0000000000
[  142.867399][    C0] R13: 0000000000000000 R14: ffff8881274dc9c8 R15: 0000000000000008
[  142.867410][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  142.867424][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  142.867436][    C0] CR2: 00007f0a666ad6a0 CR3: 00000001271fd000 CR4: 00000000003506b0
[  142.867452][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  142.867461][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  142.867471][    C0] Call Trace:
[  142.867476][    C0]  <IRQ>
[  142.867485][    C0]  delayed_work_timer_fn+0x61/0x80
[  142.867511][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  142.867533][    C0]  call_timer_fn+0x46/0x2a0
[  142.867555][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  142.867575][    C0]  __run_timers+0x689/0x9f0
[  142.867596][    C0]  ? calc_index+0x200/0x200
[  142.867618][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  142.878670][   T28] audit: type=1400 audit(2000000367.688:2312): avc:  denied  { write } for  pid=275 comm="syz-executor" path="pipe:[8705]" dev="pipefs" ino=8705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  142.879729][    C0]  run_timer_softirq+0x6a/0xf0
[  143.029530][    C0]  handle_softirqs+0x1d7/0x600
[  143.034461][    C0]  ? irqtime_account_irq+0xc4/0x240
[  143.039662][    C0]  __irq_exit_rcu+0x52/0xf0
[  143.044174][    C0]  irq_exit_rcu+0x9/0x10
[  143.049470][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  143.055468][    C0]  </IRQ>
[  143.058400][    C0]  <TASK>
[  143.061329][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  143.067308][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[  143.073808][    C0] Code: 00 d5 0d 87 e8 ec 43 b6 fc 4c 89 f7 48 83 3d 31 7e 0d 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d6 4a 4c fc 65 8b 05 d7 16 02 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[  143.093934][    C0] RSP: 0018:ffffc900000876d8 EFLAGS: 00000206
[  143.100268][    C0] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: dffffc0000000000
[  143.108398][    C0] RDX: 0000000000000000 RSI: 0000000000000a02 RDI: 0000000000000001
[  143.116357][    C0] RBP: ffffc900000876e8 R08: ffffffff87b717e7 R09: 1ffffffff0f6e2fc
[  143.124313][    C0] R10: dffffc0000000000 R11: fffffbfff0f6e2fd R12: ffff8881323249c0
[  143.132281][    C0] R13: dffffc0000000000 R14: ffff8881f6e27c40 R15: ffff8881f6e27c48
[  143.140331][    C0]  ? _raw_spin_unlock_irqrestore+0x46/0x80
[  143.146141][    C0]  del_timer_sync+0x144/0x1a0
[  143.150817][    C0]  wg_timers_stop+0x49/0x60
[  143.155303][    C0]  wg_stop+0x81/0x5d0
[  143.159270][    C0]  ? __cfi_wg_stop+0x10/0x10
[  143.163843][    C0]  __dev_close_many+0x293/0x360
[  143.168725][    C0]  ? dev_close_many+0x4d0/0x4d0
[  143.173575][    C0]  dev_close_many+0x21e/0x4d0
[  143.178334][    C0]  ? __cfi_dev_close_many+0x10/0x10
[  143.183606][    C0]  ? __kasan_check_read+0x11/0x20
[  143.188639][    C0]  unregister_netdevice_many+0x44f/0x18e0
[  143.194386][    C0]  ? __kasan_check_read+0x11/0x20
[  143.199551][    C0]  ? __cfi_unregister_netdevice_many+0x10/0x10
[  143.205750][    C0]  ? unregister_netdevice_queue+0x1aa/0x370
[  143.211725][    C0]  ? __cfi_unregister_netdevice_queue+0x10/0x10
[  143.218038][    C0]  ? br_dev_delete+0xfc/0x110
[  143.222704][    C0]  default_device_exit_batch+0x9dc/0xa70
[  143.228406][    C0]  ? idr_destroy+0x21e/0x290
[  143.233077][    C0]  ? __cfi_netdev_run_todo+0x10/0x10
[  143.238617][    C0]  ? __cfi_mutex_lock+0x10/0x10
[  143.243457][    C0]  ? __cfi_default_device_exit_batch+0x10/0x10
[  143.249596][    C0]  ? __cfi_xfrmi_exit_batch_net+0x10/0x10
[  143.255394][    C0]  ? rtnl_unlock+0xe/0x10
[  143.259731][    C0]  ? __cfi_default_device_exit_batch+0x10/0x10
[  143.265871][    C0]  cleanup_net+0x635/0xb10
[  143.270279][    C0]  ? __cfi_cleanup_net+0x10/0x10
[  143.275300][    C0]  process_one_work+0x71f/0xc40
[  143.280149][    C0]  worker_thread+0xa29/0x11e0
[  143.284812][    C0]  kthread+0x281/0x320
[  143.288866][    C0]  ? __cfi_worker_thread+0x10/0x10
[  143.293960][    C0]  ? __cfi_kthread+0x10/0x10
[  143.298543][    C0]  ret_from_fork+0x1f/0x30
[  143.303040][    C0]  </TASK>
[  143.306049][    C0] Modules linked in:
[  143.309932][    C0] ---[ end trace 0000000000000000 ]---
[  143.315375][    C0] RIP: 0010:__queue_work+0x575/0xd30
[  143.320666][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c 75 6e 00 49 8b 7d 00 e8 a3 2c
[  143.340255][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[  143.346329][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88810029d100
[  143.354372][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  143.362336][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb
[  143.370290][    C0] R10: dffffc0000000000 R11: ffffed1024e9b939 R12: dffffc0000000000
[  143.378338][    C0] R13: 0000000000000000 R14: ffff8881274dc9c8 R15: 0000000000000008
[  143.386294][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  143.395296][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.401863][    C0] CR2: 00007f0a666ad6a0 CR3: 00000001271fd000 CR4: 00000000003506b0
[  143.409994][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  143.417945][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  143.426071][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  143.433675][    C0] Kernel Offset: disabled
[  143.437993][    C0] Rebooting in 86400 seconds..