last executing test programs:

29.656066393s ago: executing program 32 (id=44):
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x13, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x627bc785347a7e8}, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2c2, &(0x7f0000000a00)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c)

25.337659354s ago: executing program 33 (id=86):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
stat(&(0x7f0000000a40)='./file0\x00', 0x0)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)

24.276140084s ago: executing program 34 (id=96):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000100)={[{@user_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@nodiscard}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x6)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xff9c, 0x8001, 0x100000})

22.986501565s ago: executing program 35 (id=112):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0xfef, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote, 0x3}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)

21.875197677s ago: executing program 36 (id=122):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r3, 0x12)

19.951963977s ago: executing program 37 (id=134):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20a1, &(0x7f0000000200)={[{@bsdgroups}, {@nodelalloc}, {@nogrpid}, {@noblock_validity}, {@dax_inode}, {@prjquota}]}, 0x1, 0x654, &(0x7f0000000ec0)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108)

15.585920341s ago: executing program 38 (id=182):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='ramfs\x00', &(0x7f00000001c0)='h\x00', 0x2)

14.880531944s ago: executing program 39 (id=200):
open(&(0x7f00000001c0)='./file0\x00', 0x684ff, 0x8a)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x14)
fcntl$setlease(r0, 0x400, 0x0)

14.10520794s ago: executing program 40 (id=212):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002dc0)={0x1, [{0xb193268e94d4e7c6, 0x0, 0x45, 0x0}, {0x1, 0x8, 0x43, &(0x7f0000000280)="ca"}, {0x4, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x402ff, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x65, 0x0}, {0x0, 0x0, 0x80000000, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x4, 0x0, 0xd, 0x0}, {0x1, 0x0, 0x10000, 0x0}, {0x1, 0x0, 0x48e27445, 0x0}, {0x3, 0x0, 0xf048, 0x0}, {0x1, 0xa8, 0x206d, &(0x7f0000000040)="3e7bff15ffac766e1814ea24c752a47fb70bd5fb62"}, {0x2, 0x0, 0x2, 0x0}]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

13.144690995s ago: executing program 41 (id=219):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d)
recvfrom$inet(r0, &(0x7f0000000600)=""/44, 0x2c, 0x40000000, 0x0, 0x0)

11.922272272s ago: executing program 42 (id=228):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
futex$unlock_pi_list64(0x0, 0x207, 0x6, 0x0, 0x0, 0x100)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0x12, 0xd, "5e54f576401868b3cdbc32a0d5"}, 0x0, 0x0, &(0x7f0000000500), 0x0})
openat$dir(0xffffffffffffff9c, 0x0, 0x4a9c1, 0x6)

11.075400592s ago: executing program 6 (id=235):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x100, 0x0)
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000980)={0x11})

10.748035998s ago: executing program 6 (id=237):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010100, 0x2, 0x6c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x7f)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10)

10.704796699s ago: executing program 43 (id=237):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010100, 0x2, 0x6c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x7f)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10)

9.232042938s ago: executing program 44 (id=247):
r0 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb1004000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
r1 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x60})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000045000/0x4000)=nil, 0x400000, 0x1, 0x2})
mmap(&(0x7f0000667000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

8.55187737s ago: executing program 2 (id=256):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xb}, {0xfff3}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0xf, 0x5, 0x2, 0x0, 0xfd, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x3, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0x40b, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x8001, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x1ff, 0x3fe, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x48800)
close(0x3)

8.168093878s ago: executing program 2 (id=260):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.167881218s ago: executing program 9 (id=261):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x8004)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xb58a, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)

8.148067609s ago: executing program 45 (id=262):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r2, &(0x7f0000000080)=""/43, 0x2b)
getdents(r2, 0xfffffffffffffffd, 0xbb)

7.775501907s ago: executing program 9 (id=264):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80040, 0x0)
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0)

7.736836478s ago: executing program 9 (id=265):
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
sendto$unix(r3, 0x0, 0x0, 0x84, &(0x7f0000000300)=@file={0x7fc338224da5f62b, './file1\x00'}, 0x6e)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

7.263737381s ago: executing program 2 (id=267):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)

7.211868313s ago: executing program 2 (id=268):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f0000000140)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@nouser_xattr}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1")
chdir(&(0x7f0000000400)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0xe0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51)

6.959983925s ago: executing program 2 (id=269):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
chdir(0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x3, 0x48f, &(0x7f00000013c0)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

6.816630991s ago: executing program 9 (id=270):
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

6.504455706s ago: executing program 9 (id=272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)

6.389462462s ago: executing program 2 (id=274):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000440)={0x0, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0x80040}]})

6.371946452s ago: executing program 46 (id=274):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000440)={0x0, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0x80040}]})

6.364293763s ago: executing program 7 (id=276):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000002c0)={0x1f, @none, 0x3}, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

6.323600125s ago: executing program 9 (id=277):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
utime(&(0x7f0000000000)='./file0\x00', 0x0)

6.274802227s ago: executing program 47 (id=277):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
utime(&(0x7f0000000000)='./file0\x00', 0x0)

6.232252809s ago: executing program 7 (id=279):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x480d0, &(0x7f0000000040)={0xa, 0xfffd, 0x100c9, @mcast2}, 0x1c)

6.231878719s ago: executing program 7 (id=281):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004930000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.215277539s ago: executing program 7 (id=282):
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

6.034915648s ago: executing program 7 (id=283):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)

5.788317139s ago: executing program 7 (id=284):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

5.78234297s ago: executing program 48 (id=284):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

4.90688554s ago: executing program 5 (id=288):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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")
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x5, 0x200000000000000, 0x0, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x6, 0x8000000000005a, 0x3, 0x100000000000000})

4.906781031s ago: executing program 5 (id=289):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0)

4.809453985s ago: executing program 5 (id=290):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000700600000000000009000000731120000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.728647879s ago: executing program 5 (id=291):
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInllM1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmJuaDAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX8znd/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHG9+X3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//OwzmfQ==")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

4.420816054s ago: executing program 5 (id=293):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10)
pipe2$9p(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

4.345921337s ago: executing program 6 (id=285):
r0 = eventfd2(0xffffffff, 0x1)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x4})

4.268320321s ago: executing program 6 (id=296):
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10)
ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f00000001c0)=0x6)
syz_usb_connect$cdc_ecm(0x0, 0x69, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000402505a1a4400000000101090257000101004000090400001202060000052406000005240004000d240f01000000000000000000072413067fc09f152412", @ANYBLOB], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_clone3(0x0, 0x0)
memfd_create(0x0, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

4.040389921s ago: executing program 0 (id=300):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000100)={[{@i_version}, {@nobarrier}, {@errors_remount}, {@nodiscard}]}, 0xfe, 0x7ba, &(0x7f00000041c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168)

3.989185194s ago: executing program 0 (id=301):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00'}, 0x48)
r1 = memfd_create(0x0, 0x3)
fcntl$addseals(r1, 0x409, 0x8)
fallocate(r1, 0x3, 0x9100, 0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x20000004)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000001bc0)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6b6f69382d722c756e695f786c6174653d312c696f636861727365743d6370313235302c757466208cfc07591a9c383d312c757466383d312c757466383d302c666d61736b3d30303030303030303030303030303030303030303030352c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d322c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c696f636861727365743d63703933322c00"], 0x1, 0x36a, &(0x7f0000001840)="$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")
r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r3, 0x40304580, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
close(0x3)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1)
write$char_usb(r3, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a001c2c00fe8000000000000000000000000000bbff"], 0x0)

3.705013337s ago: executing program 5 (id=302):
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

3.686612258s ago: executing program 49 (id=302):
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInllM1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmJuaDAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX8znd/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHG9+X3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//OwzmfQ==")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

3.235775509s ago: executing program 1 (id=305):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000140)={0x3, 0x103, 0x0, 0xfffeffff, 0x3ff, 0x3})

2.696183594s ago: executing program 0 (id=323):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003e7c5008cb89e08f0", 0x0, 0xd5b2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.695100054s ago: executing program 4 (id=324):
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$fuse(0x0, 0x0, 0x2008020, 0x0, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115c00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setns(0xffffffffffffffff, 0x0)

2.660033446s ago: executing program 0 (id=325):
r0 = syz_clone(0x40000200, 0x0, 0x0, &(0x7f0000002840), &(0x7f0000002880), 0x0)
setpriority(0x0, r0, 0xba8e)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
unlink(0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x2804f1e, &(0x7f0000000000)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000240)="$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")
chdir(0x0)
setrlimit(0xe, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x180)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
listen(r1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
mount$9p_tcp(0x0, 0x0, 0x0, 0x8010, 0x0)
close(r1)

2.453108935s ago: executing program 0 (id=326):
setns(0xc9, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)

2.36030915s ago: executing program 6 (id=327):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x3, {0x0, 0x36, 0x6, 0x17, 0x3, 0x0, 0x1, 0x5a}})

2.328846641s ago: executing program 6 (id=328):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040050)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8804)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0)

1.93535359s ago: executing program 0 (id=329):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1ff4d)

1.843170914s ago: executing program 50 (id=329):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1ff4d)

1.71293929s ago: executing program 4 (id=331):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x4, 0x4)

1.678795532s ago: executing program 4 (id=332):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001a00)=""/4125, 0x101d}], 0x1)

1.652279083s ago: executing program 4 (id=333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a1400", 0xa)
socket(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
write$tun(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.528340119s ago: executing program 4 (id=334):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r0, 0xffffffffffffffff, 0xee01)

1.528165939s ago: executing program 4 (id=335):
syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x2, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x3, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10000, 0x6, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x3ff, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x6, 0x432, 0x12, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfd, 0x5, 0x1000005, 0xaff, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x4, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0xfffffff9, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x6, 0x6d03, 0xc00, 0xd, 0x800003, 0x3, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0x3800000, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x5, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x10, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.368208106s ago: executing program 3 (id=337):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x48, 0x33, 0x57}, {0x6, 0x6, 0x0, 0x5}]}, 0x10)
sendto$unix(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0)

1.099937229s ago: executing program 3 (id=338):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)

1.050717941s ago: executing program 3 (id=339):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @sack_perm, @window={0x3, 0x9, 0xff}, @window={0x3, 0x6, 0xff81}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8)
sendto$inet(r3, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

1.021888563s ago: executing program 1 (id=340):
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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")
r2 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0)
sendfile(r1, r2, 0x0, 0xade4)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000240)=0x4})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25)
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000240)='.\x00', 0x60000526)
mkdirat(0xffffffffffffff9c, 0x0, 0xcf)
utime(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r4, 0x20, 0x0, 0x8000)
bind$inet6(r0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140), 0x0, 0x20080058)

856.36607ms ago: executing program 1 (id=341):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)

856.21398ms ago: executing program 8 (id=330):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000000)={[{@inlinecrypt}, {@delalloc}]}, 0x89, 0x48f, &(0x7f0000000380)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

856.00065ms ago: executing program 3 (id=342):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

855.932ms ago: executing program 1 (id=343):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000440)={0x7, 0x3b, 0x2, 0x1d, 0xb, 0x0, 0x6, 0x2, 0x1})

855.73999ms ago: executing program 3 (id=344):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$cgroup_pid(r1, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

847.213361ms ago: executing program 1 (id=345):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xd, 0x80000000000008})

842.302541ms ago: executing program 3 (id=346):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198)
r2 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888)

731.289856ms ago: executing program 8 (id=347):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3004000, &(0x7f0000000100), 0x2, 0x7ba, &(0x7f0000000380)="$eJzs3c9rHFUcAPDvbHaT9GdSUbCKGvDQgpgmseAPFFLwKCKoJy8NybaUbn+QRLAhQovYk8eC4EUEwYs3xYsgpSdFvPQi/Q+kUqQIrdLDykwm6TbdTXeb3Uzjfj4w6Zt5s/PebPqdNz9e5gXQt8bSH6WI/RFxPokYyZcnEVHJUuWI6ZX1bt9cnv0nidkk6vV3/0qydW7dXJ6Nhs+kduUfG46Iq1eSeGzg/nIXzi2dnKnVqvP5/KHFU2cPLZxbevHEqZnj1ePV01NTU69OHZ58eWKqa/v6yTO/fnfn4tuffr732qU/r/6wN4np2J3nNe7HRsodlDcWY2vfyfptvNnBdh5lA/n+lBqWJeu/pOEtrhRtKzX8Dp+MkRho+B8+Ele+L7RyAEBP1NMJAOgzifYfAPrM6n2AWzeXZ1enYu9IAFvlxpGV57Np3N/Op5Wcckxn/w5n/QB2/p3c8+w7We07sEnpNr79oPJlOkUHz+GBzTt/IXvw36T9T7L4H807b6yP/4GI/PiwOeuPIeIfts5m4v+dLpQv/gEAAAAAAKB7Lh+JiFeaPf8rrfX/iSbP/4YiYqIL5T/4+V/peheKAZq4cSTi9fzdPvf2/1t7o8voQD63JyKeiEpy7EStOhF3st7DB6OSHiaqk803nx0y3r84+VOr8hv7/6VTWv5qX8C8HtfLQ/d+Zm5mcWaz+w1E3LgQ8VS5Wfwna+1/0qL/79E2y/hx+ZtnW+U9OP6BXql/FXGgaft/9811ycbv5zuUnQ+s/GxaxtLRNz5uVX5b8X/3z5SALkrb/50bx/9o0vi+zoXOy/js1sQXrfIe9vx/MHkve6voYL7so5nFxfnJiMHkrfuXN32FaH2o8z2B7W01HlbjJY3/g883v/7f6Py/EhFn2yzz658rv7fKG8si1fk/FCGN/7mO2v/OE//+9nTLQ0V77f/hrE0/mC9x/w821m6AFl1PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoplJE7I6kNL6WLpXGxyN2RcTjsbNUO7Ow+MKxMx+enkvzIkajUjp2oladiIiRlfkknZ/M0nfnp9bNvxQR+yLi0tCObH589kxtruidBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDcrhbj/6f+GGpYcbqoGgIAPTFcdAUAgC2n/QeA/qP9B4D+03H7/8ue3lQEANgyrv8BoP9o/wEAAAAAAAAAAAAAAAAAAAAAAACgp/Y9d/laEhHnX9uRTanBPK9SaM2AXisVXQGgMANFVwAoTLmdlZJk7ZoA+P9wjQ8kD8hvPUSIOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSPA/vbHf+/rZFCgW3E6H3Qv4z/D/3LWT30L+P/A70a/3/HQ9YHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeRQvnlk7O1GrVeYmuJeorifKjUp/q/EK9Xmg1hiKit0UMRzE7mMZQ0b/cPJF+yTHRtQ0WfWQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7+C8AAP//2P4O5Q==")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r0, r2, 0x0, 0x7ffff004)
fsmount(0xffffffffffffffff, 0x0, 0x80)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x20)

555.187674ms ago: executing program 8 (id=348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0)
bind$netlink(r0, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc)

455.705229ms ago: executing program 8 (id=349):
unshare(0x4a000200)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, <r3=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
capget(0x0, &(0x7f0000000780)={0x3, 0x5, 0x1, 0xb6, 0xf, 0xfffffffb})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000380), &(0x7f00000002c0)=r2}, 0x20)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)

392.030592ms ago: executing program 8 (id=350):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50e, &(0x7f0000000200)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x300c249, &(0x7f0000000600)={[{@sb={'sb', 0x3d, 0x293}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@user_xattr}, {@nodelalloc}, {@data_err_ignore}, {@noblock_validity}, {@noquota}, {@journal_checksum}]}, 0x1, 0x60d, &(0x7f0000000800)="$eJzs3c9rG9kdAPDvjGzXTtw6KSU0gVJDDwmU+EcaSNtTkktz6CHQHErpISa2g4mcmNiBJg3UuTXQQym9lpJL/4HeS+i1t1Joe9vzQnZZvOxhd4mWGc0kWllyFMX64cznA5LevBnpva+enueNxk8TQGXNZ3dpxOmIuJlEzLWsm43myvliu71PHt/Kbkk0Gr/4OImkyCu3f1k8Hs/ukojpiPj31Yhv1/aXu/3w0Z2VeqPpdxGLO5tbi9sPH53f2Fy5vXZ77e7yhR9fvLT0k+WLy4cSZxnXdPG4/p/6+SQux43J365GWxyHZT7m42URYmv+RERcyhId3pejpgwhGXE96E+t+DxORsSpmItavtQ0Fxt/GGnlgIFq1CIaQEUl+j9UVDkOKI/tB3EcPM5eXGkeAO2Pf6L53UhM58dGx/aSliOj5vHuiUMoPyvjy8dn/pLdosv3EBOHUE43u08i4rud4k/yup0ovjE5tpdG2vK8LL0UEVPFe5H2Wf582/KwP39vE39rO2TxXi4es/yrfZY/6vgBqKbnV4od+W629Hr/l40My/FPdBj/zHbYd/Vj1Pu/7uO/cn8/nX9HnraNw7Ixz/XOLznZnvHB02t/6lZ+6/gvu2Xll2PBYXjxJOJMW/y/zwdzyav2Tzq0f7bJzR7L+Nl/P7rWbV3/8R/OGafGs4izHY9/kq+VtLizuVXmtZ2fXFzfqK8tNe87lvGPf/36b93KH4f2jy7xH9T+Wd5Wj2X8/fqzzW7rZt8Yf/rhVHIjT00VOb9Z2dm5vxwxlfy82KQl/8LBdSm3KV8ji//cDzr3/wPizxt6t8f4t355Z6+Z2v+Z7bn99/1Vyb1s9FiHbrL4V/ts/z/2WMZnv3rwvbasmTJxUPwz+18q6fU9BwAAAAAAgCpK83OwSbrwKp2mCwvNObzfiWNp/d72zg/X7z24uxpxLv9/yMm0PNM911xOsuXl4v9hy+ULbcs/ioiTEfHn2ky+vHDrXn111MEDAAAAAAAAAAAAAAAAAADAmDhezP8vr1P9aa05/78nO6cGXDtg4AZ5gTlgvOn/UF15/+/3Cq7AkWb/D9Wl/0N16f9QXfo/VJf+D9XVU/+fGnw9gOGz/4fq0v8BAAAA4L108vvP/59ExO5PZ/JbtJzpmxxpzYBBe/s+Pj+QegDDVxvq04Bx8urUv+n/UDk9jf8/L34ccPDVAUYg6ZSZDw4aB3f+5x2f2aun7/JkAAAAAAAAAAAAAKias6fN/4eqSuOfo64CMCLvMJHfbwDAEeen/6G6HOMDb5rFP91txbvN/wcAAAAAAAAAAAAA3sJsfkvSheISoLORpgsLEd+MiBMxmaxv1NeWIuJbEfG/2uQ3suXlUVcaAAAAAAAAAAAAAAAAAAAA3jPbDx/dWanX1+63Jr7Yl/N+J8qroI5LfVoTkQy/0JmIGIfYB5OYaMlJInazlh+Lit3fjrGoRppXY8R/mAAAAAAAAAAAAAAAAAAAoIJa5h53duavQ64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzf6+v/959I3vA6o44RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiavgoAAP//F1A3Eg==")
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0)

104.759606ms ago: executing program 8 (id=351):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffd, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac1414"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

0s ago: executing program 1 (id=352):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x2010002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='2', 0x1)
write(r0, &(0x7f00000002c0)='2', 0x1)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')

kernel console output (not intermixed with test programs):

ectory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   33.987893][  T287] EXT4-fs (loop1): Remounting filesystem read-only
[   33.994591][  T287] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   34.006756][  T287] EXT4-fs (loop1): Remounting filesystem read-only
[   34.013966][  T287] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   34.025630][  T287] EXT4-fs (loop1): Remounting filesystem read-only
[   34.032322][    T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   34.223026][  T567] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.230225][  T567] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.237889][  T567] device bridge_slave_0 entered promiscuous mode
[   34.244816][  T567] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.252344][  T567] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.260245][  T567] device bridge_slave_1 entered promiscuous mode
[   34.281006][   T30] audit: type=1400 audit(1789646781.739:218): avc:  denied  { create } for  pid=571 comm="syz.5.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   34.361475][  T567] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.368700][  T567] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.376035][  T567] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.383120][  T567] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.396431][    T6] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.423494][    T6] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.433789][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.443618][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.452404][    T6] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   34.465704][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.487618][    T6] usb 7-1: config 0 interface 0 has no altsetting 0
[   34.494365][    T6] usb 7-1: New USB device found, idVendor=045e, idProduct=6bdb, bcdDevice= 0.00
[   34.504260][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.509296][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.521524][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.528653][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.529395][    T6] usb 7-1: config 0 descriptor??
[   34.547007][  T581] loop5: detected capacity change from 0 to 512
[   34.554715][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.563237][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.575153][  T581] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #11: block 8: comm syz.5.101: lblock 0 mapped to illegal pblock 8 (length 1)
[   34.589977][  T581] EXT4-fs (loop5): Remounting filesystem read-only
[   34.590372][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.597711][  T581] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   34.619598][  T581] EXT4-fs error (device loop5): ext4_do_update_inode:5260: inode #15: comm syz.5.101: corrupted inode contents
[   34.631763][  T581] EXT4-fs (loop5): Remounting filesystem read-only
[   34.638536][  T567] device veth0_vlan entered promiscuous mode
[   34.645748][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.653603][  T581] EXT4-fs error (device loop5): ext4_dirty_inode:6108: inode #15: comm syz.5.101: mark_inode_dirty error
[   34.656662][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.666058][  T581] EXT4-fs (loop5): Remounting filesystem read-only
[   34.673812][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.681167][  T581] EXT4-fs error (device loop5): ext4_do_update_inode:5260: inode #15: comm syz.5.101: corrupted inode contents
[   34.698322][  T581] EXT4-fs (loop5): Remounting filesystem read-only
[   34.704935][  T581] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2954: inode #15: comm syz.5.101: mark_inode_dirty error
[   34.705697][    T8] device bridge_slave_1 left promiscuous mode
[   34.718314][  T581] EXT4-fs (loop5): Remounting filesystem read-only
[   34.723276][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.730269][  T581] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2957: inode #15: comm syz.5.101: mark inode dirty (error -117)
[   34.749359][    T8] device bridge_slave_0 left promiscuous mode
[   34.749359][  T581] EXT4-fs (loop5): Remounting filesystem read-only
[   34.749378][  T581] EXT4-fs warning (device loop5): ext4_evict_inode:305: xattr delete (err -117)
[   34.755649][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.763055][  T581] EXT4-fs (loop5): 1 orphan inode deleted
[   34.784924][  T581] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,errors=remount-ro,. Quota mode: none.
[   34.807445][    T8] device veth1_macvtap left promiscuous mode
[   34.813710][    T8] device veth0_vlan left promiscuous mode
[   34.920140][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.928884][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.940520][  T567] device veth1_macvtap entered promiscuous mode
[   34.951716][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.960561][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.969211][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.987361][    T6] hid-generic 0003:045E:6BDB.0004: item fetching failed at offset 11/24
[   34.997655][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.006036][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.014965][    T6] hid-generic: probe of 0003:045E:6BDB.0004 failed with error -22
[   35.067827][   T30] audit: type=1400 audit(1789646782.529:219): avc:  denied  { read } for  pid=591 comm="syz.7.97" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   35.093824][  T594] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #11: comm syz.5.105: unexpected EA_INODE flag
[   35.108344][  T594] EXT4-fs (loop5): Remounting filesystem read-only
[   35.115211][  T594] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.105: couldn't read orphan inode 11 (err -117)
[   35.127360][   T30] audit: type=1400 audit(1789646782.549:220): avc:  denied  { open } for  pid=591 comm="syz.7.97" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   35.150554][  T594] EXT4-fs (loop5): Remounting filesystem read-only
[   35.157861][  T594] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   35.188887][  T434] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   35.209562][   T30] audit: type=1400 audit(1789646782.559:221): avc:  denied  { ioctl } for  pid=591 comm="syz.7.97" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   35.234174][  T434] EXT4-fs (loop5): Remounting filesystem read-only
[   35.240870][  T434] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   35.254382][    T6] usb 7-1: USB disconnect, device number 2
[   35.256230][  T434] EXT4-fs (loop5): Remounting filesystem read-only
[   35.267065][  T434] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   35.278605][  T434] EXT4-fs (loop5): Remounting filesystem read-only
[   35.437781][  T607] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   35.451925][  T607] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.539790][  T611] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.547121][  T611] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.554590][  T611] device bridge_slave_0 entered promiscuous mode
[   35.565854][  T611] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.568625][  T613] EXT4-fs (loop7): Test dummy encryption mode enabled
[   35.573699][  T611] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.587906][  T611] device bridge_slave_1 entered promiscuous mode
[   35.596973][  T613] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #11: comm syz.7.114: casefold flag without casefold feature
[   35.611862][  T613] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.114: couldn't read orphan inode 11 (err -117)
[   35.624034][  T613] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[   35.641301][  T613] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.114: bg 0: block 7: invalid block bitmap
[   35.697214][  T620] set_capacity_and_notify: 4 callbacks suppressed
[   35.697231][  T620] loop7: detected capacity change from 0 to 512
[   35.713417][  T611] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.720558][  T611] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.727952][  T611] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.735118][  T611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.761674][  T620] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   35.774104][  T620] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.790456][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   35.807808][  T590] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.815442][  T590] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.836893][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   35.839348][  T627] loop6: detected capacity change from 0 to 512
[   35.858412][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.865571][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.873698][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   35.882018][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.889125][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.899512][  T627] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #11: comm syz.6.117: unexpected EA_INODE flag
[   35.911273][  T627] EXT4-fs (loop6): Remounting filesystem read-only
[   35.918121][  T627] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.117: couldn't read orphan inode 11 (err -117)
[   35.930297][  T627] EXT4-fs (loop6): Remounting filesystem read-only
[   35.937134][  T627] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   35.974590][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   35.983095][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   35.985354][  T541] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   35.994730][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   36.015086][  T541] EXT4-fs (loop6): Remounting filesystem read-only
[   36.021017][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   36.026946][  T541] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   36.045387][  T541] EXT4-fs (loop6): Remounting filesystem read-only
[   36.045493][    T8] device bridge_slave_1 left promiscuous mode
[   36.057428][  T541] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   36.061002][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.072092][  T541] EXT4-fs (loop6): Remounting filesystem read-only
[   36.086643][    T8] device bridge_slave_0 left promiscuous mode
[   36.094020][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.102501][    T8] device veth1_macvtap left promiscuous mode
[   36.108775][    T8] device veth0_vlan left promiscuous mode
[   36.228505][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   36.237274][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   36.250546][  T611] device veth0_vlan entered promiscuous mode
[   36.257677][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   36.267419][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   36.276664][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   36.287446][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   36.325351][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   36.369362][    T6] usb 3-1: USB disconnect, device number 2
[   36.401389][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   36.448427][  T611] device veth1_macvtap entered promiscuous mode
[   36.511273][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   36.520335][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   36.530093][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   36.554324][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   36.563094][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   36.628529][  T641] loop8: detected capacity change from 0 to 512
[   36.639013][  T643] loop2: detected capacity change from 0 to 2048
[   36.680425][  T641] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.113: bg 0: block 127: padding at end of block bitmap is not set
[   36.698885][  T641] EXT4-fs error (device loop8): ext4_xattr_block_set:2197: inode #15: comm syz.8.113: bad block 0
[   36.710265][  T641] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.113: iget: bad extra_isize 58 (inode size 256)
[   36.711472][  T643] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,errors=remount-ro,nodiscard,. Quota mode: none.
[   36.725255][  T641] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.113: error while reading EA inode 11 err=-117
[   36.752015][  T641] EXT4-fs (loop8): 1 orphan inode deleted
[   36.757915][  T641] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,min_batch_time=0x0000000000000040,debug_want_extra_isize=0x000000000000005a,noquota,max_batch_time=0x0000000000000010,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: none.
[   36.790800][  T643] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   36.806791][  T644] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.814053][  T643] EXT4-fs (loop2): Remounting filesystem read-only
[   36.814362][  T644] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.828599][  T644] device bridge_slave_0 entered promiscuous mode
[   36.840107][  T644] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.848251][  T641] EXT4-fs error (device loop8): __ext4_iget:4950: inode #14: block 1886221359: comm syz.8.113: invalid block
[   36.851636][  T644] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.867991][  T644] device bridge_slave_1 entered promiscuous mode
[   36.904550][  T652] loop2: detected capacity change from 0 to 1024
[   36.950063][  T654] loop8: detected capacity change from 0 to 1024
[   36.976633][  T654] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   36.988625][  T652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   36.993029][  T654] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.014698][  T652] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.028754][  T652] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.126: lblock 0 mapped to illegal pblock 0 (length 6)
[   37.040132][  T654] EXT4-fs error (device loop8): ext4_map_blocks:742: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 3)
[   37.059229][  T654] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   37.066617][  T652] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.126: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   37.072663][  T654] EXT4-fs (loop8): This should not happen!! Data will be lost
[   37.072663][  T654] 
[   37.106270][  T659] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.120641][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.129053][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.136914][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   37.144579][  T659] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.146957][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   37.167593][  T653] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.169611][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.190693][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.199984][  T653] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.205860][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   37.219179][  T659] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.223525][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   37.244399][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.249839][  T654] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.251582][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.273739][  T659] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.316281][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   37.338039][  T654] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.339643][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   37.361264][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   37.367980][  T665] loop2: detected capacity change from 0 to 512
[   37.376377][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   37.386743][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   37.401605][  T653] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.127: lblock 3 mapped to illegal pblock 3 (length 1)
[   37.417812][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   37.427590][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   37.446981][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   37.455372][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   37.465128][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   37.473577][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   37.482917][  T644] device veth0_vlan entered promiscuous mode
[   37.497239][  T665] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #11: comm syz.2.128: unexpected EA_INODE flag
[   37.508976][  T665] EXT4-fs (loop2): Remounting filesystem read-only
[   37.521208][  T665] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.128: couldn't read orphan inode 11 (err -117)
[   37.539413][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   37.547797][  T665] EXT4-fs (loop2): Remounting filesystem read-only
[   37.550129][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   37.554905][  T665] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   37.593951][  T644] device veth1_macvtap entered promiscuous mode
[   37.604619][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   37.616874][  T285] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   37.637542][  T285] EXT4-fs (loop2): Remounting filesystem read-only
[   37.637824][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   37.645643][  T285] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   37.655541][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   37.672332][  T285] EXT4-fs (loop2): Remounting filesystem read-only
[   37.678535][  T285] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   37.690300][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   37.698540][  T285] EXT4-fs (loop2): Remounting filesystem read-only
[   37.704780][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   37.717137][    T8] device bridge_slave_1 left promiscuous mode
[   37.726448][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.734504][    T8] device bridge_slave_0 left promiscuous mode
[   37.740842][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.751009][    T8] device bridge_slave_1 left promiscuous mode
[   37.757895][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.767093][    T8] device bridge_slave_0 left promiscuous mode
[   37.773365][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.783633][    T8] device veth1_macvtap left promiscuous mode
[   37.790278][    T8] device veth0_vlan left promiscuous mode
[   37.797206][    T8] device veth1_macvtap left promiscuous mode
[   37.803566][    T8] device veth0_vlan left promiscuous mode
[   38.084031][  T673] loop7: detected capacity change from 0 to 128
[   38.116067][  T673] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   38.131238][  T673] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   38.175875][   T30] kauditd_printk_skb: 11 callbacks suppressed
[   38.175892][   T30] audit: type=1400 audit(1789646785.629:233): avc:  denied  { write open } for  pid=672 comm="syz.7.132" path="/12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   38.293831][  T673] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   38.316399][  T673] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3894: comm syz.7.132: Allocating blocks 19-20 which overlap fs metadata
[   38.371429][  T673] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   38.381333][  T673] EXT4-fs error (device loop7): ext4_dirty_inode:6108: inode #13: comm syz.7.132: mark_inode_dirty error
[   38.391268][   T30] audit: type=1400 audit(1789646785.729:234): avc:  denied  { append } for  pid=672 comm="syz.7.132" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.418249][  T673] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   38.441081][  T673] EXT4-fs error (device loop7): ext4_mkdir:3087: inode #13: comm syz.7.132: mark_inode_dirty error
[   38.452173][   T30] audit: type=1400 audit(1789646785.729:235): avc:  denied  { map } for  pid=672 comm="syz.7.132" path="/dev/loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.452210][   T30] audit: type=1400 audit(1789646785.829:236): avc:  denied  { wake_alarm } for  pid=678 comm="syz.9.133" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   38.499309][  T673] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   38.509016][  T673] EXT4-fs error (device loop7): ext4_evict_inode:285: inode #13: comm syz.7.132: mark_inode_dirty error
[   38.527465][  T673] EXT4-fs warning (device loop7): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[   38.560082][  T666] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   38.574462][  T666] EXT4-fs (loop8): This should not happen!! Data will be lost
[   38.574462][  T666] 
[   38.634286][  T687] loop9: detected capacity change from 0 to 1024
[   38.647971][  T689] loop8: detected capacity change from 0 to 256
[   38.668216][  T687] EXT4-fs (loop9): Ignoring removed orlov option
[   38.674776][  T687] EXT4-fs (loop9): Ignoring removed bh option
[   38.681330][  T687] EXT4-fs (loop9): Ignoring removed bh option
[   38.704474][  T689] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d)
[   38.717864][  T685] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.726026][  T689] exFAT-fs (loop8): failed to load alloc-bitmap
[   38.733515][  T689] exFAT-fs (loop8): failed to recognize exfat type
[   38.740984][  T685] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.748933][  T685] device bridge_slave_0 entered promiscuous mode
[   38.749024][  T687] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,orlov,nolazytime,debug_want_extra_isize=0x0000000000000080,bh,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[   38.759158][  T685] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.785756][  T685] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.793588][  T685] device bridge_slave_1 entered promiscuous mode
[   38.838566][   T30] audit: type=1400 audit(1789646786.299:237): avc:  denied  { ioctl } for  pid=688 comm="syz.8.137" path="/2/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.870783][  T694] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   38.899886][  T694] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.917479][   T30] audit: type=1400 audit(1789646786.379:238): avc:  denied  { read } for  pid=692 comm="syz.7.139" path="/13/file1/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   38.972010][  T685] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.979158][  T685] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.986527][  T685] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.993587][  T685] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.997859][   T30] audit: type=1400 audit(1789646786.399:239): avc:  denied  { map } for  pid=692 comm="syz.7.139" path="/13/file1/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   39.023677][   T30] audit: type=1400 audit(1789646786.399:240): avc:  denied  { execute } for  pid=692 comm="syz.7.139" path="/13/file1/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   39.069086][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.085614][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.104794][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.126371][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.136698][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.143801][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.151797][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.160537][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.167642][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.187257][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.195732][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.247284][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.291215][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   39.299841][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   39.309390][  T719] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   39.322185][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   39.331593][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   39.389954][  T720] 9pnet: p9_fd_create_tcp (720): problem connecting socket to 127.0.0.1
[   39.449819][  T685] device veth0_vlan entered promiscuous mode
[   39.467324][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   39.475822][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.488844][  T685] device veth1_macvtap entered promiscuous mode
[   39.500080][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   39.505734][  T724] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   39.509239][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.518181][  T438] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   39.529709][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.550672][   T30] audit: type=1400 audit(1789646787.009:241): avc:  denied  { mounton } for  pid=723 comm="syz.7.151" path="/18/file2/file0" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   39.553693][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.583041][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.591583][   T30] audit: type=1400 audit(1789646787.039:242): avc:  denied  { remove_name } for  pid=723 comm="syz.7.151" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   39.719227][  T734] EXT4-fs (loop7): Ignoring removed oldalloc option
[   39.737629][    T8] device bridge_slave_1 left promiscuous mode
[   39.740787][  T734] EXT4-fs (loop7): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback.
[   39.744185][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.765614][  T734] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.765980][    T8] device bridge_slave_0 left promiscuous mode
[   39.785730][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.793505][  T438] usb 9-1: Using ep0 maxpacket: 8
[   39.803315][    T8] device veth1_macvtap left promiscuous mode
[   39.809655][    T8] device veth0_vlan left promiscuous mode
[   39.906298][  T384] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   39.956624][  T438] usb 9-1: unable to get BOS descriptor or descriptor too short
[   40.009995][  T748] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   40.022165][  T748] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[   40.032748][  T748] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   40.046440][  T438] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   40.069565][  T438] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[   40.146148][  T384] usb 4-1: Using ep0 maxpacket: 8
[   40.209219][  T759] EXT4-fs (loop7): Test dummy encryption mode enabled
[   40.230065][  T759] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   40.256482][  T438] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   40.266341][  T384] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   40.279128][  T384] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   40.287568][  T438] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.293389][  T384] usb 4-1: config 0 interface 0 has no altsetting 0
[   40.307102][  T759] EXT4-fs (loop7): SIPHASH is not a valid default hash value
[   40.314763][  T438] usb 9-1: Product: syz
[   40.317040][  T384] usb 4-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.00
[   40.320353][  T438] usb 9-1: Manufacturer: syz
[   40.329869][  T384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.340831][  T438] usb 9-1: SerialNumber: syz
[   40.348848][  T438] usb 9-1: config 0 descriptor??
[   40.356386][  T384] usb 4-1: config 0 descriptor??
[   40.374705][  T759] EXT4-fs (loop7): Test dummy encryption mode enabled
[   40.383086][  T759] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   40.397105][  T438] snd-usb-audio: probe of 9-1:0.0 failed with error -2
[   40.405947][  T759] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.163: bad orphan inode 131083
[   40.419482][  T759] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,init_itable,dioread_lock,,errors=continue. Quota mode: none.
[   40.506990][  T768] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   40.517756][  T768] EXT4-fs (loop7): barriers disabled
[   40.523113][  T768] JBD2: no valid journal superblock found
[   40.529165][  T768] EXT4-fs (loop7): error loading journal
[   40.616259][  T383] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   40.843740][  T384] input: HID 045e:071d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:071D.0005/input/input8
[   40.926876][  T384] microsoft 0003:045E:071D.0005: input,hiddev96,hidraw0: USB HID v0.10 Device [HID 045e:071d] on usb-dummy_hcd.3-1/input0
[   41.016299][  T383] usb 5-1: unable to get BOS descriptor or descriptor too short
[   41.106183][  T383] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.131673][  T383] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.326859][  T383] usb 5-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40
[   41.350505][  T383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.358806][  T383] usb 5-1: Product: syz
[   41.363089][  T383] usb 5-1: Manufacturer: syz
[   41.367930][  T383] usb 5-1: SerialNumber: syz
[   41.459679][  T776] netlink: 4 bytes leftover after parsing attributes in process `syz.9.167'.
[   41.469078][  T773] netlink: 4 bytes leftover after parsing attributes in process `syz.9.167'.
[   41.623092][  T781] set_capacity_and_notify: 8 callbacks suppressed
[   41.623110][  T781] loop9: detected capacity change from 0 to 256
[   41.658688][  T781] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   41.716168][  T384] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   41.756547][  T383] usb 5-1: unit 255 not found!
[   41.785443][  T383] usb 5-1: USB disconnect, device number 3
[   41.801183][  T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   41.870834][   T20] usb 9-1: USB disconnect, device number 2
[   42.116193][  T384] usb 8-1: unable to get BOS descriptor or descriptor too short
[   42.196408][  T384] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 192, changing to 7
[   42.258680][  T786] loop4: detected capacity change from 0 to 512
[   42.303541][  T786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   42.442152][  T786] EXT4-fs (loop4): shut down requested (1)
[   42.474840][  T789] loop8: detected capacity change from 0 to 256
[   42.496207][  T384] usb 8-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40
[   42.505879][  T789] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   42.509470][  T384] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.525256][  T384] usb 8-1: Product: syz
[   42.529888][  T384] usb 8-1: Manufacturer: syz
[   42.535056][  T384] usb 8-1: SerialNumber: syz
[   42.544632][  T786] fs-verity: sha256 using implementation "sha256-avx2"
[   42.555765][  T792] loop9: detected capacity change from 0 to 512
[   42.563100][  T286] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=16
[   42.575391][  T286] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=16
[   42.584624][  T286] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=16
[   42.597945][  T792] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   42.610870][  T792] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.643242][   T26] usb 4-1: USB disconnect, device number 3
[   42.675667][  T800] loop3: detected capacity change from 0 to 4096
[   42.711399][  T800] EXT4-fs (loop3): Test dummy encryption mode enabled
[   42.726957][  T800] EXT4-fs (loop3): Ignoring removed orlov option
[   42.798436][  T800] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x00000000000000b6,minixdf,orlov,,errors=continue. Quota mode: writeback.
[   42.896216][  T384] usb 8-1: unit 1 not found!
[   42.907415][  T384] usb 8-1: USB disconnect, device number 2
[   42.950123][  T824] loop8: detected capacity change from 0 to 512
[   42.983310][  T818] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.991147][  T818] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.999001][  T818] device bridge_slave_0 entered promiscuous mode
[   43.006708][  T818] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.014022][  T818] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.022167][  T818] device bridge_slave_1 entered promiscuous mode
[   43.025796][  T824] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #11: comm syz.8.190: unexpected EA_INODE flag
[   43.066670][  T824] EXT4-fs (loop8): Remounting filesystem read-only
[   43.073327][  T824] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.190: couldn't read orphan inode 11 (err -117)
[   43.090798][  T824] EXT4-fs (loop8): Remounting filesystem read-only
[   43.109819][  T824] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   43.138560][  T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   43.154942][  T818] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.162027][  T818] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.169367][  T818] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.176532][  T818] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.207715][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.223957][  T611] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   43.224177][  T666] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.247911][  T611] EXT4-fs (loop8): Remounting filesystem read-only
[   43.257210][   T39] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[   43.265531][  T611] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   43.277296][  T611] EXT4-fs (loop8): Remounting filesystem read-only
[   43.283965][  T611] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   43.295735][  T611] EXT4-fs (loop8): Remounting filesystem read-only
[   43.302814][  T666] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.363061][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.381645][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.388787][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.399084][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.407758][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.414830][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.440848][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.457992][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.502213][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.525014][  T855] loop3: detected capacity change from 0 to 512
[   43.538025][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.548710][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.556910][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.567226][  T818] device veth0_vlan entered promiscuous mode
[   43.588085][  T855] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #11: comm syz.3.202: unexpected EA_INODE flag
[   43.602190][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.610759][  T855] EXT4-fs (loop3): Remounting filesystem read-only
[   43.618013][  T855] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.202: couldn't read orphan inode 11 (err -117)
[   43.643508][  T818] device veth1_macvtap entered promiscuous mode
[   43.649972][   T39] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.667903][   T39] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[   43.679034][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   43.687524][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.689113][   T39] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   43.695872][  T855] EXT4-fs (loop3): Remounting filesystem read-only
[   43.713404][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   43.721730][  T855] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   43.732020][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.763496][  T864] loop7: detected capacity change from 0 to 512
[   43.783641][  T685] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   43.804201][  T685] EXT4-fs (loop3): Remounting filesystem read-only
[   43.817840][  T864] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   43.833888][  T685] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   43.845980][  T685] EXT4-fs (loop3): Remounting filesystem read-only
[   43.846620][  T864] EXT4-fs (loop7): 1 truncate cleaned up
[   43.852973][  T685] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   43.875272][  T864] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,errors=remount-ro,usrquota,usrquota,. Quota mode: writeback.
[   43.875426][  T685] EXT4-fs (loop3): Remounting filesystem read-only
[   43.891197][   T39] usb 10-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[   43.918467][   T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.926822][   T39] usb 10-1: Product: syz
[   43.931275][   T39] usb 10-1: Manufacturer: syz
[   43.935990][   T39] usb 10-1: SerialNumber: syz
[   43.941147][  T867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'.
[   43.953405][  T867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'.
[   43.962477][   T30] kauditd_printk_skb: 31 callbacks suppressed
[   43.962498][   T30] audit: type=1400 audit(1789646791.409:274): avc:  denied  { append } for  pid=863 comm="syz.7.205" path="/36/file1/cpuset.effective_mems" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.006397][  T870] EXT4-fs (loop7): shut down requested (1)
[   44.006425][   T30] audit: type=1400 audit(1789646791.469:275): avc:  denied  { ioctl } for  pid=863 comm="syz.7.205" path="/36/file1/cpuset.effective_mems" dev="loop7" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.036032][  T862] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.045017][  T862] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.053308][  T862] device bridge_slave_0 entered promiscuous mode
[   44.063554][  T862] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.070969][  T862] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.078736][  T862] device bridge_slave_1 entered promiscuous mode
[   44.112770][  T875] loop0: detected capacity change from 0 to 2048
[   44.132203][  T875] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   44.151466][   T30] audit: type=1400 audit(1789646791.609:276): avc:  denied  { append } for  pid=878 comm="syz.7.208" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   44.152093][  T875] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   44.250929][  T883] loop0: detected capacity change from 0 to 512
[   44.261262][  T862] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.268382][  T862] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.275876][  T862] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.282989][  T862] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.296769][   T39] snd-usb-audio: probe of 10-1:1.0 failed with error -90
[   44.314525][   T39] usb 10-1: USB disconnect, device number 2
[   44.325708][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.352527][  T666] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.360979][  T883] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.211: bg 0: block 5: invalid block bitmap
[   44.373663][  T666] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.377245][  T883] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   44.392795][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.406439][  T666] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.413544][  T666] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.425073][  T883] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.211: invalid indirect mapped block 3 (level 2)
[   44.448704][  T883] EXT4-fs (loop0): 1 orphan inode deleted
[   44.454569][  T883] EXT4-fs (loop0): 1 truncate cleaned up
[   44.460324][  T883] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   44.481074][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.490317][  T666] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.497434][  T666] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.504936][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.506499][   T20] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   44.539228][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.570279][  T889] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #11: comm syz.0.214: unexpected EA_INODE flag
[   44.582313][  T889] EXT4-fs (loop0): Remounting filesystem read-only
[   44.589150][  T889] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.214: couldn't read orphan inode 11 (err -117)
[   44.602974][  T889] EXT4-fs (loop0): Remounting filesystem read-only
[   44.610749][  T889] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   44.637198][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.646314][    T8] device bridge_slave_1 left promiscuous mode
[   44.652490][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.666482][    T8] device bridge_slave_0 left promiscuous mode
[   44.672692][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.682429][  T818] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   44.703716][  T818] EXT4-fs (loop0): Remounting filesystem read-only
[   44.703834][    T8] device bridge_slave_1 left promiscuous mode
[   44.710668][  T818] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   44.717627][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.729762][  T818] EXT4-fs (loop0): Remounting filesystem read-only
[   44.742515][  T818] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   44.754778][    T8] device bridge_slave_0 left promiscuous mode
[   44.765630][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.772981][  T818] EXT4-fs (loop0): Remounting filesystem read-only
[   44.776237][   T20] usb 8-1: Using ep0 maxpacket: 32
[   44.791104][  T895] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d)
[   44.804183][    T8] device veth1_macvtap left promiscuous mode
[   44.818425][    T8] device veth0_vlan left promiscuous mode
[   44.824544][    T8] device veth1_macvtap left promiscuous mode
[   44.830870][    T8] device veth0_vlan left promiscuous mode
[   44.907711][   T20] usb 8-1: config index 0 descriptor too short (expected 539, got 27)
[   44.933180][   T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   45.062652][  T887] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.069791][  T887] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.077619][  T887] device bridge_slave_0 entered promiscuous mode
[   45.084664][  T887] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.091954][  T887] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.099261][   T20] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[   45.100369][  T887] device bridge_slave_1 entered promiscuous mode
[   45.114819][   T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.123058][   T20] usb 8-1: Product: syz
[   45.127363][   T20] usb 8-1: Manufacturer: syz
[   45.132026][   T20] usb 8-1: SerialNumber: syz
[   45.142422][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.150192][   T20] usb 8-1: config 0 descriptor??
[   45.151011][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.163680][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.171469][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.184186][  T862] device veth0_vlan entered promiscuous mode
[   45.188404][   T20] hub 8-1:0.0: bad descriptor, ignoring hub
[   45.198158][   T20] hub: probe of 8-1:0.0 failed with error -5
[   45.221182][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.234558][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.248925][  T862] device veth1_macvtap entered promiscuous mode
[   45.271176][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.279491][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.288029][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.306146][   T26] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   45.322986][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.342652][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.415747][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   45.423641][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   45.446496][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   45.467795][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   45.477042][  T666] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.481756][  T906] FAULT_INJECTION: forcing a failure.
[   45.481756][  T906] name failslab, interval 1, probability 0, space 0, times 0
[   45.484261][  T666] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.484962][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   45.507554][  T906] CPU: 0 PID: 906 Comm: syz.1.221 Not tainted syzkaller #0
[   45.515227][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   45.520752][  T906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.520771][  T906] Call Trace:
[   45.520778][  T906]  <TASK>
[   45.520788][  T906]  __dump_stack+0x21/0x30
[   45.520817][  T906]  dump_stack_lvl+0x110/0x170
[   45.520836][  T906]  ? show_regs_print_info+0x20/0x20
[   45.520857][  T906]  ? stack_trace_save+0xa6/0xf0
[   45.520886][  T906]  ? xas_create+0x13d3/0x1560
[   45.520908][  T906]  ? __stack_depot_save+0x34/0x480
[   45.520933][  T906]  dump_stack+0x15/0x20
[   45.520950][  T906]  should_fail+0x3ab/0x500
[   45.520971][  T906]  __should_failslab+0xa4/0xe0
[   45.530590][  T666] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.539837][  T906]  should_failslab+0x9/0x20
[   45.539876][  T906]  slab_pre_alloc_hook+0x39/0xd0
[   45.543268][  T666] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.546217][  T906]  ? __d_alloc+0x2d/0x690
[   45.546238][  T906]  kmem_cache_alloc+0x44/0x260
[   45.606740][   T26] usb 10-1: Using ep0 maxpacket: 8
[   45.612892][  T906]  __d_alloc+0x2d/0x690
[   45.632583][  T906]  d_alloc_pseudo+0x1d/0x70
[   45.637110][  T906]  alloc_file_pseudo+0xe0/0x200
[   45.642098][  T906]  ? alloc_empty_file_noaccount+0x80/0x80
[   45.648292][  T906]  ? _raw_spin_unlock+0x4d/0x70
[   45.653172][  T906]  ? alloc_fd+0x4c2/0x570
[   45.657509][  T906]  anon_inode_getfile+0xa6/0x180
[   45.662451][  T906]  do_eventfd+0x17b/0x2e0
[   45.666783][  T906]  __x64_sys_eventfd2+0x5a/0x70
[   45.671643][  T906]  x64_sys_call+0x7c2/0x9a0
[   45.676255][  T906]  do_syscall_64+0x4c/0xa0
[   45.680677][  T906]  ? clear_bhb_loop+0x50/0xa0
[   45.685482][  T906]  ? clear_bhb_loop+0x50/0xa0
[   45.690181][  T906]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   45.696230][  T906] RIP: 0033:0x7f04e61c8159
[   45.700763][  T906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.720382][  T906] RSP: 002b:00007f04e4c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122
[   45.728954][  T906] RAX: ffffffffffffffda RBX: 00007f04e644ffa0 RCX: 00007f04e61c8159
[   45.737177][  T906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   45.745166][  T906] RBP: 00007f04e625f06b R08: 0000000000000000 R09: 0000000000000000
[   45.753160][  T906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.761237][  T906] R13: 00007f04e6450038 R14: 00007f04e644ffa0 R15: 00007ffd7ee361f8
[   45.769231][  T906]  </TASK>
[   45.773253][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   45.776600][   T20] usb 8-1: USB disconnect, device number 3
[   45.788084][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   45.823346][  T904] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.830482][  T904] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.838592][  T904] device bridge_slave_0 entered promiscuous mode
[   45.845458][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   45.855330][  T911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.222'.
[   45.865946][  T911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.222'.
[   45.875174][  T904] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.877000][  T911] Zero length message leads to an empty skb
[   45.882721][   T26] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[   45.898828][  T904] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.906915][  T904] device bridge_slave_1 entered promiscuous mode
[   45.916433][   T26] usb 10-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[   45.926854][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.940280][  T887] device veth0_vlan entered promiscuous mode
[   45.950807][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.959170][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.966980][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.980259][  T913] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #11: comm syz.1.223: unexpected EA_INODE flag
[   45.992173][  T913] EXT4-fs (loop1): Remounting filesystem read-only
[   45.998813][  T913] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.223: couldn't read orphan inode 11 (err -117)
[   46.014968][  T913] EXT4-fs (loop1): Remounting filesystem read-only
[   46.022293][  T913] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   46.051526][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.065316][  T887] device veth1_macvtap entered promiscuous mode
[   46.073397][  T862] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   46.095128][  T862] EXT4-fs (loop1): Remounting filesystem read-only
[   46.116758][  T862] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   46.128488][   T30] audit: type=1400 audit(1789646793.579:277): avc:  denied  { ioctl } for  pid=915 comm="syz.7.225" path="socket:[20316]" dev="sockfs" ino=20316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   46.139369][   T26] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3
[   46.171027][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.179849][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.188312][  T862] EXT4-fs (loop1): Remounting filesystem read-only
[   46.194961][  T862] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   46.199032][   T26] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.208985][  T862] EXT4-fs (loop1): Remounting filesystem read-only
[   46.215513][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.230325][  T918] using random self ethernet address
[   46.235658][  T918] using random host ethernet address
[   46.237962][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.241290][   T26] usb 10-1: Product: syz
[   46.253588][   T26] usb 10-1: Manufacturer: syz
[   46.258545][   T26] usb 10-1: SerialNumber: syz
[   46.262296][   T30] audit: type=1400 audit(1789646793.719:278): avc:  denied  { create } for  pid=917 comm="syz.7.226" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[   46.284026][   T30] audit: type=1400 audit(1789646793.719:279): avc:  denied  { write } for  pid=917 comm="syz.7.226" name="UDC" dev="configfs" ino=20331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   46.306978][   T30] audit: type=1400 audit(1789646793.719:280): avc:  denied  { open } for  pid=917 comm="syz.7.226" path="/40/config/usb_gadget/g1/UDC" dev="configfs" ino=20331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   46.336835][  T918] usb0: HOST MAC 32:15:a9:6f:6d:77
[   46.346294][  T918] usb0: MAC 86:40:55:10:d3:a9
[   46.346430][   T30] audit: type=1400 audit(1789646793.799:281): avc:  denied  { read } for  pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   46.373336][   T30] audit: type=1400 audit(1789646793.799:282): avc:  denied  { search } for  pid=139 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   46.442315][   T30] audit: type=1400 audit(1789646793.799:283): avc:  denied  { read } for  pid=139 comm="dhcpcd" name="n15" dev="tmpfs" ino=2297 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   46.507091][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   46.521552][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.530087][  T924] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[   46.544815][  T924] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[   46.554971][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   46.565193][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.574576][  T924] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,nomblk_io_submit,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,lazytime,. Quota mode: none.
[   46.576392][   T26] r8152-cfgselector 10-1: Unknown version 0x0000
[   46.600068][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.612248][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.619851][  T293] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   46.646290][  T384] android_work: sent uevent USB_STATE=CONNECTED
[   46.667912][   T26] r8152-cfgselector 10-1: USB disconnect, device number 3
[   46.676878][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   46.704914][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   46.713244][   T39] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   46.738077][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.752260][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.759438][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.767035][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   46.788823][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   46.815135][  T904] device veth0_vlan entered promiscuous mode
[   46.825372][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   46.834279][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   46.842497][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   46.852998][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   46.873721][  T904] device veth1_macvtap entered promiscuous mode
[   46.896895][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.916213][  T293] usb 1-1: Dual-Role OTG device on HNP port
[   46.927834][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.936851][  T293] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15
[   46.947369][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.960086][  T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.988681][  T384] android_work: sent uevent USB_STATE=CONFIGURED
[   47.012197][    T8] device bridge_slave_1 left promiscuous mode
[   47.020390][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.034887][    T8] device bridge_slave_0 left promiscuous mode
[   47.073150][  T953] set_capacity_and_notify: 5 callbacks suppressed
[   47.073171][  T953] loop9: detected capacity change from 0 to 256
[   47.086487][   T39] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[   47.096261][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.101398][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.112363][    T8] device veth1_macvtap left promiscuous mode
[   47.122798][    T8] device veth0_vlan left promiscuous mode
[   47.130889][  T955] loop6: detected capacity change from 0 to 512
[   47.198413][  T953] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   47.220242][  T955] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #11: comm syz.6.232: unexpected EA_INODE flag
[   47.248962][  T955] EXT4-fs (loop6): Remounting filesystem read-only
[   47.256633][  T955] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.232: couldn't read orphan inode 11 (err -117)
[   47.279103][  T955] EXT4-fs (loop6): Remounting filesystem read-only
[   47.285695][  T955] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   47.352651][  T904] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   47.373858][  T904] EXT4-fs (loop6): Remounting filesystem read-only
[   47.377775][   T39] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[   47.381003][  T904] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   47.411407][  T904] EXT4-fs (loop6): Remounting filesystem read-only
[   47.428670][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready
[   47.446335][  T904] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   47.462452][  T293] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 32:15:a9:6f:6d:77
[   47.474772][  T936] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.484331][  T936] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.494467][  T904] EXT4-fs (loop6): Remounting filesystem read-only
[   47.502924][  T936] device bridge_slave_0 entered promiscuous mode
[   47.538334][  T936] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.545820][  T936] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.554042][  T936] device bridge_slave_1 entered promiscuous mode
[   47.686137][  T384] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   47.710247][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   47.722722][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   47.756940][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   47.766200][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   47.774769][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.782198][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.791376][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   47.802114][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   47.810800][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.817901][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.825678][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.835124][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.867561][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   47.877080][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.900276][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.909617][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   47.917556][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   47.925665][  T936] device veth0_vlan entered promiscuous mode
[   47.936146][  T384] usb 10-1: Using ep0 maxpacket: 16
[   47.963434][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   47.985091][  T936] device veth1_macvtap entered promiscuous mode
[   48.006052][  T976] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.013214][  T976] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.021051][  T976] device bridge_slave_0 entered promiscuous mode
[   48.029318][  T976] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.036418][  T976] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.043975][  T976] device bridge_slave_1 entered promiscuous mode
[   48.056442][  T384] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   48.068093][  T384] usb 10-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   48.081363][  T384] usb 10-1: config 0 interface 0 has no altsetting 0
[   48.088251][  T384] usb 10-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[   48.097840][  T384] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.103723][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   48.115536][  T384] usb 10-1: config 0 descriptor??
[   48.139412][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.195576][  T976] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.202906][  T976] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.210265][  T976] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.217329][  T976] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.243489][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.251761][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.259691][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.272618][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.281111][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.288210][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.297737][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.305991][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.313695][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.332021][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   48.341768][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.362306][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.378332][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.387078][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.394626][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.407411][  T976] device veth0_vlan entered promiscuous mode
[   48.419055][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.430458][  T976] device veth1_macvtap entered promiscuous mode
[   48.441027][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   48.450579][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   48.466431][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   48.474804][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.487246][    T8] device bridge_slave_1 left promiscuous mode
[   48.493481][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.502170][    T8] device bridge_slave_0 left promiscuous mode
[   48.508480][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.517374][    T8] device bridge_slave_1 left promiscuous mode
[   48.524098][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.532016][    T8] device bridge_slave_0 left promiscuous mode
[   48.538583][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.547531][    T8] device veth1_macvtap left promiscuous mode
[   48.553816][    T8] device veth0_vlan left promiscuous mode
[   48.560529][    T8] device veth1_macvtap left promiscuous mode
[   48.566934][    T8] device veth0_vlan left promiscuous mode
[   48.598163][  T384] input: HID 046d:c512 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:046D:C512.0006/input/input9
[   48.617592][  T384] logitech 0003:046D:C512.0006: input,hidraw0: USB HID v3.ff Joystick [HID 046d:c512] on usb-dummy_hcd.9-1/input0
[   48.816126][  T384] usb 10-1: USB disconnect, device number 4
[   48.859934][ T1002] loop4: detected capacity change from 0 to 512
[   48.910259][ T1002] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #11: comm syz.4.244: unexpected EA_INODE flag
[   48.922654][ T1002] EXT4-fs (loop4): Remounting filesystem read-only
[   48.931562][ T1002] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.244: couldn't read orphan inode 11 (err -117)
[   48.943944][ T1002] EXT4-fs (loop4): Remounting filesystem read-only
[   48.950957][ T1002] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   48.982936][  T976] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   49.003423][   T26] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   49.005444][  T976] EXT4-fs (loop4): Remounting filesystem read-only
[   49.019111][  T976] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   49.031575][  T976] EXT4-fs (loop4): Remounting filesystem read-only
[   49.041264][  T976] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   49.053326][  T976] EXT4-fs (loop4): Remounting filesystem read-only
[   49.247076][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.254179][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.261959][ T1008] device bridge_slave_0 entered promiscuous mode
[   49.277023][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.284478][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.292260][ T1008] device bridge_slave_1 entered promiscuous mode
[   49.342250][ T1015] loop9: detected capacity change from 0 to 256
[   49.354310][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.361481][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.368902][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.375964][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.400035][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.408162][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.415499][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.422785][   T26] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.433870][   T26] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.443709][   T26] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   49.452173][ T1015] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[   49.457754][   T26] usb 8-1: config 0 interface 0 has no altsetting 0
[   49.475544][   T26] usb 8-1: New USB device found, idVendor=045e, idProduct=6bdb, bcdDevice= 0.00
[   49.484734][   T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.499534][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.508358][   T26] usb 8-1: config 0 descriptor??
[   49.513680][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.522829][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.529964][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.539055][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   49.547979][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.556922][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.564086][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.578282][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   49.587408][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.607807][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   49.616609][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.627347][ T1017] loop9: detected capacity change from 0 to 2048
[   49.640197][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.649245][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.658030][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   49.660701][ T1017] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   49.666800][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.685383][ T1008] device veth0_vlan entered promiscuous mode
[   49.696355][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.704074][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.717719][ T1008] device veth1_macvtap entered promiscuous mode
[   49.725359][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.734115][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.742383][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.755815][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.776848][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.788765][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.798371][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.847070][    T8] device bridge_slave_1 left promiscuous mode
[   49.861293][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.864095][ T1031] loop8: detected capacity change from 0 to 512
[   49.878939][    T8] device bridge_slave_0 left promiscuous mode
[   49.885438][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.896572][ T1031] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #11: comm syz.8.255: unexpected EA_INODE flag
[   49.908943][    T8] device veth1_macvtap left promiscuous mode
[   49.915004][    T8] device veth0_vlan left promiscuous mode
[   49.922368][ T1031] EXT4-fs (loop8): Remounting filesystem read-only
[   49.948802][ T1031] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.255: couldn't read orphan inode 11 (err -117)
[   49.969049][ T1031] EXT4-fs (loop8): Remounting filesystem read-only
[   49.975789][ T1031] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   50.008870][ T1008] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   50.029300][   T26] hid (null): report_id 13821 is invalid
[   50.036056][   T26] hid-generic 0003:045E:6BDB.0007: report_id 13821 is invalid
[   50.044205][   T26] hid-generic 0003:045E:6BDB.0007: item 0 2 1 8 parsing failed
[   50.052116][ T1008] EXT4-fs (loop8): Remounting filesystem read-only
[   50.059146][ T1008] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   50.070718][   T26] hid-generic: probe of 0003:045E:6BDB.0007 failed with error -22
[   50.081570][ T1008] EXT4-fs (loop8): Remounting filesystem read-only
[   50.090876][ T1008] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   50.102552][ T1008] EXT4-fs (loop8): Remounting filesystem read-only
[   50.126464][ T1040] netlink: 4 bytes leftover after parsing attributes in process `syz.9.258'.
[   50.231780][   T39] usb 8-1: USB disconnect, device number 4
[   50.246733][ T1046] loop9: detected capacity change from 0 to 256
[   50.508326][ T1046] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   50.706996][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.714233][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.722050][ T1050] device bridge_slave_0 entered promiscuous mode
[   50.729433][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.736813][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.744505][ T1050] device bridge_slave_1 entered promiscuous mode
[   50.813432][ T1061] loop7: detected capacity change from 0 to 16
[   50.822378][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.829596][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.832612][ T1061] erofs: (device loop7): mounted with root inode @ nid 36.
[   50.837627][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.852053][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.153599][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.174701][ T1061] attempt to access beyond end of device
[   51.174701][ T1061] loop7: rw=0, want=40, limit=16
[   51.187727][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.201907][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   51.216045][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.219895][ T1067] loop2: detected capacity change from 0 to 512
[   51.226018][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.239445][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.249312][ T1067] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[   51.249312][ T1067] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   51.249312][ T1067] 
[   51.269306][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.277784][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.294953][ T1067] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.268: inode #1: comm syz.2.268: iget: illegal inode #
[   51.308431][ T1067] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.268: error while reading EA inode 1 err=-117
[   51.322743][ T1067] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.268: inode #1: comm syz.2.268: iget: illegal inode #
[   51.337547][ T1067] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.268: error while reading EA inode 1 err=-117
[   51.350266][ T1067] EXT4-fs (loop2): 1 orphan inode deleted
[   51.356355][ T1067] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,resgid=0x0000000000000000,noinit_itable,init_itable=0x0000000000000001,minixdf,data_err=abort,debug_want_extra_isize=0x0000000000000060,barrier,dioread_lock,noblock_validity,nouser_xattr,,errors=continue. Quota mode: none.
[   51.391568][   T30] kauditd_printk_skb: 16 callbacks suppressed
[   51.391583][   T30] audit: type=1400 audit(1789646798.849:300): avc:  denied  { mounton } for  pid=1066 comm="syz.2.268" path="/7/file0/file0/bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   51.424509][  T936] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   51.424836][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.446034][  T936] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216
[   51.465057][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.473701][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.475265][  T936] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216
[   51.480979][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.512035][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.520424][  T666] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.527514][  T666] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.535028][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.558885][ T1050] device veth0_vlan entered promiscuous mode
[   51.572331][ T1050] device veth1_macvtap entered promiscuous mode
[   51.601689][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.621865][ T1070] loop9: detected capacity change from 0 to 512
[   51.629054][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.638265][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   51.648674][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.658410][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.659196][ T1070] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #11: comm syz.9.270: unexpected EA_INODE flag
[   51.668998][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.688011][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   51.697094][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.706309][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   51.715988][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.719342][   T30] audit: type=1400 audit(1789646799.179:301): avc:  denied  { write } for  pid=1072 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   51.727611][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.753573][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.762722][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.773345][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.781463][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.789331][ T1070] EXT4-fs (loop9): Remounting filesystem read-only
[   51.796157][ T1070] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.270: couldn't read orphan inode 11 (err -117)
[   51.810179][ T1070] EXT4-fs (loop9): Remounting filesystem read-only
[   51.813944][   T30] audit: type=1400 audit(1789646799.269:302): avc:  denied  { create } for  pid=1074 comm="syz.3.271" dev="anon_inodefs" ino=23006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   51.824306][ T1070] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   51.873379][   T30] audit: type=1400 audit(1789646799.299:303): avc:  denied  { ioctl } for  pid=1074 comm="syz.3.271" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23006 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   51.901596][  T644] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   51.927148][  T644] EXT4-fs (loop9): Remounting filesystem read-only
[   51.934138][  T644] EXT4-fs error (device loop9): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   51.950187][  T644] EXT4-fs (loop9): Remounting filesystem read-only
[   51.957562][  T644] EXT4-fs error (device loop9): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   51.971541][  T644] EXT4-fs (loop9): Remounting filesystem read-only
[   52.028100][ T1078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.273'.
[   52.086416][ T1076] syz.3.271 (1076) used greatest stack depth: 20872 bytes left
[   52.221009][ T1091] loop7: detected capacity change from 0 to 512
[   52.231139][    T8] device bridge_slave_1 left promiscuous mode
[   52.237983][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.245871][    T8] device bridge_slave_0 left promiscuous mode
[   52.253464][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.261966][    T8] device veth1_macvtap left promiscuous mode
[   52.268289][    T8] device veth0_vlan left promiscuous mode
[   52.297407][ T1091] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #11: comm syz.7.282: unexpected EA_INODE flag
[   52.309343][ T1091] EXT4-fs (loop7): Remounting filesystem read-only
[   52.315934][ T1091] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.282: couldn't read orphan inode 11 (err -117)
[   52.329414][ T1091] EXT4-fs (loop7): Remounting filesystem read-only
[   52.336142][ T1091] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   52.371186][  T567] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   52.392892][  T567] EXT4-fs (loop7): Remounting filesystem read-only
[   52.400840][  T567] EXT4-fs error (device loop7): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   52.413137][  T567] EXT4-fs (loop7): Remounting filesystem read-only
[   52.420099][  T567] EXT4-fs error (device loop7): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   52.431789][  T567] EXT4-fs (loop7): Remounting filesystem read-only
[   52.438491][   T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   52.491090][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.498610][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.506956][ T1086] device bridge_slave_0 entered promiscuous mode
[   52.514215][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.521498][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.529598][ T1086] device bridge_slave_1 entered promiscuous mode
[   52.554591][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.561966][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.569495][ T1092] device bridge_slave_0 entered promiscuous mode
[   52.579343][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.586822][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.594707][ T1092] device bridge_slave_1 entered promiscuous mode
[   52.691036][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.698256][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.705572][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.712675][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.795410][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.802782][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.810372][ T1101] device bridge_slave_0 entered promiscuous mode
[   52.817802][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.824875][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.832520][ T1101] device bridge_slave_1 entered promiscuous mode
[   52.836514][   T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   52.849290][   T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   52.870022][  T666] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.877599][  T666] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.885759][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.893686][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.901667][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.911287][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.918984][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.928474][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.936901][  T666] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.944196][  T666] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.951968][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.960752][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.969141][  T666] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.976209][  T666] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.983924][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.010431][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.016517][   T26] usb 4-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00
[   53.027386][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.027947][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.035408][   T26] usb 4-1: Product: syz
[   53.047812][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.047835][   T26] usb 4-1: Manufacturer: syz
[   53.057184][  T666] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.061763][   T26] usb 4-1: SerialNumber: syz
[   53.067487][  T666] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.098856][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.107432][  T666] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.114609][  T666] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.159567][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.188436][   T26] usb 6-1: USB disconnect, device number 3
[   53.194374][ T1086] device veth0_vlan entered promiscuous mode
[   53.215168][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.225906][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.234038][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.242639][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.253314][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.283651][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.293084][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.304848][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.313163][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.325401][ T1092] device veth0_vlan entered promiscuous mode
[   53.358055][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.367505][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.375991][  T666] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.383320][  T666] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.386604][ T1108] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   53.394015][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.406877][  T666] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.414067][  T666] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.422865][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.447059][ T1092] device veth1_macvtap entered promiscuous mode
[   53.463935][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.482262][ T1111] loop5: detected capacity change from 0 to 512
[   53.488864][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.503730][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.511964][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.521681][ T1086] device veth1_macvtap entered promiscuous mode
[   53.544323][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.565532][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.574489][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.583271][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.592665][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.610438][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.627583][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.652299][ T1101] device veth0_vlan entered promiscuous mode
[   53.664267][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.673442][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.683459][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.691019][ T1118] loop1: detected capacity change from 0 to 2048
[   53.693743][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.707629][ T1120] loop5: detected capacity change from 0 to 512
[   53.707664][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.722461][  T666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.750927][ T1101] device veth1_macvtap entered promiscuous mode
[   53.751133][ T1122] loop0: detected capacity change from 0 to 256
[   53.766046][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.775267][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.784786][ T1120] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #11: comm syz.5.291: unexpected EA_INODE flag
[   53.785871][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.805720][ T1120] EXT4-fs (loop5): Remounting filesystem read-only
[   53.816029][ T1120] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.291: couldn't read orphan inode 11 (err -117)
[   53.826146][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.837138][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.837209][ T1118] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   53.845467][ T1120] EXT4-fs (loop5): Remounting filesystem read-only
[   53.856783][ T1118] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.873766][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.875106][ T1120] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   53.893692][ T1118] fs-verity: sha512 using implementation "sha512-avx2"
[   53.911713][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.914297][   T30] audit: type=1400 audit(1789646807.363:304): avc:  denied  { mounton } for  pid=1119 comm="syz.5.291" path="/6/file0/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   53.948699][ T1122] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   53.959535][ T1122] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   53.974676][  T887] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   53.974710][ T1122] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   54.006547][  T887] EXT4-fs (loop5): Remounting filesystem read-only
[   54.017080][  T887] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   54.030046][  T887] EXT4-fs (loop5): Remounting filesystem read-only
[   54.036777][  T887] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag
[   54.084931][  T887] EXT4-fs (loop5): Remounting filesystem read-only
[   54.097356][    T8] device bridge_slave_1 left promiscuous mode
[   54.103776][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.135243][    T8] device bridge_slave_0 left promiscuous mode
[   54.143391][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.160637][    T8] device bridge_slave_1 left promiscuous mode
[   54.167647][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.175993][    T8] device bridge_slave_0 left promiscuous mode
[   54.182644][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.191221][    T8] device bridge_slave_1 left promiscuous mode
[   54.197853][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.205511][    T8] device bridge_slave_0 left promiscuous mode
[   54.212338][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.221417][    T8] device veth1_macvtap left promiscuous mode
[   54.227848][    T8] device veth0_vlan left promiscuous mode
[   54.233841][    T8] device veth1_macvtap left promiscuous mode
[   54.244693][    T8] device veth0_vlan left promiscuous mode
[   54.248041][ T1143] loop0: detected capacity change from 0 to 512
[   54.257467][    T8] device veth1_macvtap left promiscuous mode
[   54.263617][    T8] device veth0_vlan left promiscuous mode
[   54.280167][ T1143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   54.300134][ T1143] EXT4-fs (loop0): 1 truncate cleaned up
[   54.309755][ T1143] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[   54.387666][ T1148] loop0: detected capacity change from 0 to 2048
[   54.407719][ T1148] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobarrier,errors=remount-ro,nodiscard,. Quota mode: none.
[   54.417519][  T293] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   54.484552][ T1152] loop0: detected capacity change from 0 to 256
[   54.492439][ T1152] FAT-fs (loop0): Unrecognized mount option "utf ŒüYœ8=1" or missing value
[   54.506052][   T30] audit: type=1400 audit(1789646807.963:305): avc:  denied  { append } for  pid=1151 comm="syz.0.301" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   54.812263][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.819519][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.827480][ T1155] device bridge_slave_0 entered promiscuous mode
[   54.834585][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.841769][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.849599][ T1155] device bridge_slave_1 entered promiscuous mode
[   54.876231][  T293] usb 7-1: unable to get BOS descriptor or descriptor too short
[   54.905229][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.912551][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.920146][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.927311][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.949676][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.957363][  T293] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   54.968264][  T293] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   54.968939][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.989324][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.013089][ T1160] loop1: detected capacity change from 0 to 512
[   55.020984][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.029451][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.036635][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.044311][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.053676][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.060824][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.066712][  T293] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   55.070405][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.085752][  T293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   55.087605][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.103328][ T1160] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[   55.116230][ T1160] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.125368][  T293] usb 7-1: SerialNumber: syz
[   55.138777][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.151952][ T1155] device veth0_vlan entered promiscuous mode
[   55.159079][  T307] udevd[307]: incorrect ext4 checksum on /dev/loop1
[   55.176782][  T293] usb 7-1: bad CDC descriptors
[   55.182428][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.198282][  T383] usb 4-1: USB disconnect, device number 4
[   55.213226][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.225478][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.241029][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.250435][ T1155] device veth1_macvtap entered promiscuous mode
[   55.269862][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.281955][ T1166] tmpfs: Unknown parameter 'grpquota'
[   55.287515][   T30] audit: type=1400 audit(1789646808.733:306): avc:  denied  { remount } for  pid=1165 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   55.313151][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.355988][   T30] audit: type=1400 audit(1789646808.803:307): avc:  denied  { unmount } for  pid=1050 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   55.381231][  T293] usb 7-1: USB disconnect, device number 3
[   55.427937][ T1176] loop4: detected capacity change from 0 to 512
[   55.447110][ T1176] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22
[   55.457426][ T1176] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22
[   55.467478][ T1176] EXT4-fs (loop4): Unrecognized mount option "uid>00000000000000000000" or missing value
[   55.481951][ T1176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3544884928 (226872635392 ns) > initial count (137321081472 ns). Using initial count to start timer.
[   55.515124][   T30] audit: type=1400 audit(1789646808.963:308): avc:  denied  { read } for  pid=1179 comm="syz.3.311" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.546563][  T438] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   55.605527][   T30] audit: type=1400 audit(1789646809.053:309): avc:  denied  { search } for  pid=1189 comm="syz.4.316" name="/" dev="configfs" ino=13790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   55.704709][ T1203] futex_wake_op: syz.4.322 tries to shift op by 32; fix this program
[   55.806384][  T438] usb 2-1: Using ep0 maxpacket: 32
[   55.831416][ T1209] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.325: iget: bad extended attribute block 134217728
[   55.845067][ T1209] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.325: couldn't read orphan inode 15 (err -117)
[   55.857539][ T1209] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,,errors=continue. Quota mode: writeback.
[   55.871133][ T1209] process 'syz.0.325' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   55.878062][ T1086] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   55.926478][  T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.004003][ T1086] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad extended attribute block 134217728
[   56.024487][  T438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.035195][ T1086] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad extended attribute block 134217728
[   56.055095][  T438] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   56.087420][  T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.112636][  T438] usb 2-1: config 0 descriptor??
[   56.144660][    T8] device bridge_slave_1 left promiscuous mode
[   56.151511][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.163810][    T8] device bridge_slave_0 left promiscuous mode
[   56.171074][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.182198][    T8] device veth1_macvtap left promiscuous mode
[   56.191182][    T8] device veth0_vlan left promiscuous mode
[   56.396179][  T384] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   56.720420][  T438] savu 0003:1E7D:2D5A.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   56.728751][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.765567][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.785009][ T1220] device bridge_slave_0 entered promiscuous mode
[   56.791635][  T384] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.803439][  T384] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   56.812658][  T384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.821772][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.830019][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.830583][  T384] usb 7-1: config 0 descriptor??
[   56.843138][ T1220] device bridge_slave_1 entered promiscuous mode
[   56.887359][   T26] usb 2-1: USB disconnect, device number 5
[   56.921107][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.928451][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.936231][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.943305][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.968047][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.976981][  T667] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.984658][  T667] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.010874][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.019651][  T667] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.026953][  T667] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.034923][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.043503][  T667] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.050642][  T667] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.070985][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.079280][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.095779][ T1240] FAULT_INJECTION: forcing a failure.
[   57.095779][ T1240] name failslab, interval 1, probability 0, space 0, times 0
[   57.111151][ T1240] CPU: 0 PID: 1240 Comm: syz.3.338 Not tainted syzkaller #0
[   57.118612][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   57.128680][ T1240] Call Trace:
[   57.132090][ T1240]  <TASK>
[   57.135116][ T1240]  __dump_stack+0x21/0x30
[   57.139464][ T1240]  dump_stack_lvl+0x110/0x170
[   57.144151][ T1240]  ? show_regs_print_info+0x20/0x20
[   57.149380][ T1240]  ? trace_raw_output_vm_unmapped_area+0x210/0x210
[   57.155918][ T1240]  ? __vma_link_rb+0x58c/0x5a0
[   57.156638][  T358] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   57.160707][ T1240]  dump_stack+0x15/0x20
[   57.160733][ T1240]  should_fail+0x3ab/0x500
[   57.176787][ T1240]  __should_failslab+0xa4/0xe0
[   57.181601][ T1240]  should_failslab+0x9/0x20
[   57.186279][ T1240]  slab_pre_alloc_hook+0x39/0xd0
[   57.191266][ T1240]  ? vm_area_dup+0x26/0x210
[   57.195793][ T1240]  kmem_cache_alloc+0x44/0x260
[   57.200696][ T1240]  vm_area_dup+0x26/0x210
[   57.205041][ T1240]  __split_vma+0xac/0x3e0
[   57.209398][ T1240]  __do_munmap+0x43c/0x1090
[   57.213953][ T1240]  __vm_munmap+0x14e/0x280
[   57.218385][ T1240]  ? vm_munmap+0x30/0x30
[   57.222663][ T1240]  __x64_sys_munmap+0x6b/0x80
[   57.227382][ T1240]  x64_sys_call+0xc9/0x9a0
[   57.231811][ T1240]  do_syscall_64+0x4c/0xa0
[   57.236578][ T1240]  ? clear_bhb_loop+0x50/0xa0
[   57.241288][ T1240]  ? clear_bhb_loop+0x50/0xa0
[   57.245987][ T1240]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   57.251886][ T1240] RIP: 0033:0x7f0471f9bf87
[   57.256311][ T1240] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.276471][ T1240] RSP: 002b:00007f04709f3d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[   57.284951][ T1240] RAX: ffffffffffffffda RBX: 00007f046c000000 RCX: 00007f0471f9bf87
[   57.293016][ T1240] RDX: 0000000000000000 RSI: 00000000009d5000 RDI: 00007f0470000000
[   57.301019][ T1240] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[   57.309010][ T1240] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[   57.316992][ T1240] R13: 0000000000001000 R14: 00007f0470000000 R15: 000000000362b000
[   57.324975][ T1240]  </TASK>
[   57.331883][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.346661][ T1220] device veth0_vlan entered promiscuous mode
[   57.359290][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.368020][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.376186][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.388984][  T384] usbhid 7-1:0.0: can't add hid device: -71
[   57.395654][  T384] usbhid: probe of 7-1:0.0 failed with error -71
[   57.410910][ T1220] device veth1_macvtap entered promiscuous mode
[   57.423669][  T384] usb 7-1: USB disconnect, device number 4
[   57.431288][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.441461][ T1245] set_capacity_and_notify: 1 callbacks suppressed
[   57.441509][ T1245] loop1: detected capacity change from 0 to 16
[   57.458887][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.469434][ T1245] erofs: (device loop1): mounted with root inode @ nid 36.
[   57.478009][   T30] kauditd_printk_skb: 3 callbacks suppressed
[   57.478023][   T30] audit: type=1400 audit(1789646810.933:313): avc:  denied  { watch } for  pid=1244 comm="syz.1.340" path="/5/file3" dev="loop1" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.490796][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.542088][ T1248] loop8: detected capacity change from 0 to 512
[   57.585709][   T30] audit: type=1400 audit(1789646811.033:314): avc:  denied  { mounton } for  pid=1257 comm="syz.1.345" path="/8/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   57.619837][ T1248] EXT4-fs (loop8): 1 truncate cleaned up
[   57.625540][ T1248] EXT4-fs (loop8): mounted filesystem without journal. Opts: inlinecrypt,delalloc,,errors=continue. Quota mode: none.
[   57.669047][  T358] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.680042][    T8] device bridge_slave_1 left promiscuous mode
[   57.687446][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.701587][  T358] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.711868][    T8] device bridge_slave_0 left promiscuous mode
[   57.712504][  T358] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   57.719797][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.729784][  T358] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   57.748977][ T1265] loop8: detected capacity change from 0 to 1024
[   57.760261][    T8] device veth1_macvtap left promiscuous mode
[   57.768034][ T1265] EXT4-fs (loop8): Ignoring removed orlov option
[   57.772502][    T8] device veth0_vlan left promiscuous mode
[   57.797088][ T1265] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none.
[   57.816287][  T384] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   57.916220][  T358] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   57.925396][   T30] audit: type=1400 audit(1789646811.373:315): avc:  denied  { bind } for  pid=1269 comm="syz.8.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   57.946807][  T358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.954836][  T358] usb 5-1: Product: syz
[   57.959390][  T358] usb 5-1: Manufacturer: syz
[   57.964047][  T358] usb 5-1: SerialNumber: syz
[   58.006636][  T358] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   58.022565][ T1274] loop8: detected capacity change from 0 to 512
[   58.024884][  T358] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   58.052971][  T358] usbserial_generic 5-1:1.0: generic converter detected
[   58.067082][  T358] usb 5-1: generic converter now attached to ttyUSB0
[   58.086146][  T384] usb 7-1: Using ep0 maxpacket: 8
[   58.106948][ T1274] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.350: iget: bad i_size value: 38620345925642
[   58.121129][ T1274] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.350: couldn't read orphan inode 15 (err -117)
[   58.134696][ T1274] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[   58.179048][   T30] audit: type=1400 audit(1789646811.633:316): avc:  denied  { remount } for  pid=1273 comm="syz.8.350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   58.200972][ T1274] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring
[   58.207922][  T384] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.221716][  T384] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   58.233790][  T358] usb 5-1: USB disconnect, device number 4
[   58.236446][  T384] usb 7-1: config 0 interface 0 has no altsetting 0
[   58.247594][  T384] usb 7-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00
[   58.256707][  T384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.256816][  T358] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   58.267593][ T1274] EXT4-fs (loop8): re-mounted. Opts: sb=0x0000000000000293,journal_ioprio=0x0000000000000001,user_xattr,nodelalloc,data_err=ignore,noblock_validity,noquota,journal_checksum,. Quota mode: writeback.
[   58.293067][  T384] usb 7-1: config 0 descriptor??
[   58.299369][  T358] usbserial_generic 5-1:1.0: device disconnected
[   58.434807][   T30] audit: type=1400 audit(1789646811.883:317): avc:  denied  { write } for  pid=1280 comm="syz.1.352" name="functions" dev="configfs" ino=20325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   58.435104][ T1281] ==================================================================
[   58.465922][ T1281] BUG: KASAN: use-after-free in kobject_get+0x113/0x120
[   58.466544][   T30] audit: type=1400 audit(1789646811.883:318): avc:  denied  { add_name } for  pid=1280 comm="syz.1.352" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   58.472924][ T1281] Read of size 1 at addr ffff88811918a03c by task syz.1.352/1281
[   58.472945][ T1281] 
[   58.472959][ T1281] CPU: 0 PID: 1281 Comm: syz.1.352 Not tainted syzkaller #0
[   58.511360][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   58.521457][ T1281] Call Trace:
[   58.524792][ T1281]  <TASK>
[   58.527742][ T1281]  __dump_stack+0x21/0x30
[   58.532107][ T1281]  dump_stack_lvl+0x110/0x170
[   58.536900][ T1281]  ? show_regs_print_info+0x20/0x20
[   58.542135][ T1281]  ? load_image+0x3f0/0x3f0
[   58.546671][ T1281]  print_address_description+0x7f/0x2c0
[   58.553644][ T1281]  ? kobject_get+0x113/0x120
[   58.558331][ T1281]  kasan_report+0x10f/0x150
[   58.562872][ T1281]  ? kobject_get+0x113/0x120
[   58.567502][ T1281]  __asan_report_load1_noabort+0x14/0x20
[   58.573216][ T1281]  kobject_get+0x113/0x120
[   58.577669][ T1281]  device_add+0x2f0/0xe90
[   58.582040][ T1281]  device_create+0x26c/0x300
[   58.586682][ T1281]  ? root_device_unregister+0x80/0x80
[   58.592277][ T1281]  create_function_device+0x60/0x70
[   58.597712][ T1281]  f_midi_alloc_inst+0x1a8/0x380
[   58.602690][ T1281]  usb_get_function_instance+0xe2/0x2f0
[   58.608267][ T1281]  function_make+0x118/0x350
[   58.612872][ T1281]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[   58.619215][ T1281]  ? wait_for_completion_killable_timeout+0x10/0x10
[   58.625832][ T1281]  ? __kmalloc+0x13d/0x2c0
[   58.630270][ T1281]  ? configfs_mkdir+0x444/0x9c0
[   58.635145][ T1281]  configfs_mkdir+0x50a/0x9c0
[   58.639846][ T1281]  vfs_mkdir+0x38b/0x590
[   58.644119][ T1281]  do_mkdirat+0x174/0x4d0
[   58.648468][ T1281]  __x64_sys_mkdirat+0x89/0xa0
[   58.653269][ T1281]  x64_sys_call+0x37e/0x9a0
[   58.657795][ T1281]  do_syscall_64+0x4c/0xa0
[   58.662237][ T1281]  ? clear_bhb_loop+0x50/0xa0
[   58.666959][ T1281]  ? clear_bhb_loop+0x50/0xa0
[   58.671802][ T1281]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   58.677848][ T1281] RIP: 0033:0x7fb019220159
[   58.682294][ T1281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.702045][ T1281] RSP: 002b:00007fb017c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   58.710667][ T1281] RAX: ffffffffffffffda RBX: 00007fb0194a7fa0 RCX: 00007fb019220159
[   58.718659][ T1281] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[   58.726674][ T1281] RBP: 00007fb0192b706b R08: 0000000000000000 R09: 0000000000000000
[   58.734662][ T1281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.742692][ T1281] R13: 00007fb0194a8038 R14: 00007fb0194a7fa0 R15: 00007ffdddc36d48
[   58.750698][ T1281]  </TASK>
[   58.753742][ T1281] 
[   58.756095][ T1281] Allocated by task 1008:
[   58.760441][ T1281]  __kasan_kmalloc+0xd4/0x100
[   58.765165][ T1281]  __kmalloc_track_caller+0x13c/0x2c0
[   58.770562][ T1281]  __alloc_skb+0x210/0x730
[   58.775006][ T1281]  inet6_rt_notify+0x293/0x480
[   58.779809][ T1281]  fib6_add+0x223f/0x3d70
[   58.784153][ T1281]  ip6_ins_rt+0xd3/0x130
[   58.788421][ T1281]  __ipv6_ifa_notify+0x4df/0xe70
[   58.793378][ T1281]  add_addr+0x1a5/0x280
[   58.797555][ T1281]  add_v4_addrs+0x653/0xb20
[   58.802087][ T1281]  addrconf_init_auto_addrs+0x8da/0xbd0
[   58.807650][ T1281]  addrconf_notify+0x95d/0xe00
[   58.812437][ T1281]  raw_notifier_call_chain+0x90/0x100
[   58.817833][ T1281]  __dev_notify_flags+0x2f4/0x5b0
[   58.822891][ T1281]  dev_change_flags+0xe3/0x1a0
[   58.827796][ T1281]  do_setlink+0xc95/0x2970
[   58.832228][ T1281]  rtnl_newlink+0x1598/0x1900
[   58.836923][ T1281]  rtnetlink_rcv_msg+0x9fd/0xcb0
[   58.841884][ T1281]  netlink_rcv_skb+0x1e9/0x430
[   58.846671][ T1281]  rtnetlink_rcv+0x1c/0x20
[   58.851112][ T1281]  netlink_unicast+0x86c/0xa30
[   58.855894][ T1281]  netlink_sendmsg+0x879/0xb80
[   58.860679][ T1281]  __sys_sendto+0x46d/0x620
[   58.865206][ T1281]  __x64_sys_sendto+0xe5/0x100
[   58.869990][ T1281]  x64_sys_call+0x178/0x9a0
[   58.874518][ T1281]  do_syscall_64+0x4c/0xa0
[   58.878955][ T1281]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   58.884962][ T1281] 
[   58.887303][ T1281] The buggy address belongs to the object at ffff88811918a000
[   58.887303][ T1281]  which belongs to the cache kmalloc-1k of size 1024
[   58.901371][ T1281] The buggy address is located 60 bytes inside of
[   58.901371][ T1281]  1024-byte region [ffff88811918a000, ffff88811918a400)
[   58.914665][ T1281] The buggy address belongs to the page:
[   58.920323][ T1281] page:ffffea0004646200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811918f000 pfn:0x119188
[   58.931878][ T1281] head:ffffea0004646200 order:3 compound_mapcount:0 compound_pincount:0
[   58.940922][ T1281] flags: 0x4000000000010200(slab|head|zone=1)
[   58.947034][ T1281] raw: 4000000000010200 ffffea00042c6a08 ffffea00044d7408 ffff888100043080
[   58.955635][ T1281] raw: ffff88811918f000 0000000000100003 00000001ffffffff 0000000000000000
[   58.964229][ T1281] page dumped because: kasan: bad access detected
[   58.970650][ T1281] page_owner tracks the page as allocated
[   58.976472][ T1281] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 106, ts 6389003196, free_ts 0
[   58.994555][ T1281]  post_alloc_hook+0x192/0x1b0
[   58.999344][ T1281]  prep_new_page+0x1c/0x110
[   59.003864][ T1281]  get_page_from_freelist+0x2c3a/0x2cd0
[   59.009427][ T1281]  __alloc_pages+0x1a2/0x460
[   59.014035][ T1281]  new_slab+0xa0/0x4d0
[   59.018113][ T1281]  ___slab_alloc+0x3ac/0x840
[   59.022721][ T1281]  __slab_alloc+0x49/0x90
[   59.027069][ T1281]  __kmalloc_track_caller+0x169/0x2c0
[   59.032461][ T1281]  __alloc_skb+0x210/0x730
[   59.036993][ T1281]  netlink_sendmsg+0x611/0xb80
[   59.041769][ T1281]  ____sys_sendmsg+0x5be/0x8f0
[   59.046550][ T1281]  ___sys_sendmsg+0x236/0x2e0
[   59.051351][ T1281]  __x64_sys_sendmsg+0x201/0x2d0
[   59.056331][ T1281]  x64_sys_call+0x4b/0x9a0
[   59.060769][ T1281]  do_syscall_64+0x4c/0xa0
[   59.065203][ T1281]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   59.071116][ T1281] page_owner free stack trace missing
[   59.076596][ T1281] 
[   59.078944][ T1281] Memory state around the buggy address:
[   59.084590][ T1281]  ffff888119189f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   59.093245][ T1281]  ffff888119189f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   59.101328][ T1281] >ffff88811918a000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   59.109519][ T1281]                                         ^
[   59.115539][ T1281]  ffff88811918a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   59.123614][ T1281]  ffff88811918a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   59.131685][ T1281] ==================================================================
[   59.139768][ T1281] Disabling lock debugging due to kernel taint
[   59.192350][   T30] audit: type=1400 audit(1789646812.603:319): avc:  denied  { write } for  pid=276 comm="syz-executor" path="pipe:[14444]" dev="pipefs" ino=14444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   59.254463][ T1281] ------------[ cut here ]------------
[   59.260687][ T1281] kobject: '' (ffff88811918a000): is not initialized, yet kobject_get() is being called.
[   59.266523][  T384] usbhid 7-1:0.0: can't add hid device: -71
[   59.271560][ T1281] WARNING: CPU: 1 PID: 1281 at lib/kobject.c:666 kobject_get+0x7c/0x120
[   59.277010][  T384] usbhid: probe of 7-1:0.0 failed with error -71
[   59.285626][ T1281] Modules linked in:
[   59.299483][ T1281] CPU: 1 PID: 1281 Comm: syz.1.352 Tainted: G    B             syzkaller #0
[   59.308530][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   59.318852][ T1281] RIP: 0010:kobject_get+0x7c/0x120
[   59.332417][ T1281] Code: f9 fe 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 a6 53 39 ff 48 8b 33 48 c7 c7 a0 cd 64 85 48 89 da e8 34 54 3b 02 <0f> 0b eb 0c e8 8b dd f9 fe eb 4c e8 84 dd f9 fe 4c 8d 73 38 4c 89
[   59.346707][  T384] usb 7-1: USB disconnect, device number 5
[   59.360874][ T1281] RSP: 0018:ffffc90000e2fa18 EFLAGS: 00010246
[   59.367502][ T1281] RAX: f777e84b9c989700 RBX: ffff88811918a000 RCX: 0000000000080000
[   59.375516][ T1281] RDX: ffffc90005f5c000 RSI: 000000000007ffff RDI: 0000000000080000
[   59.384470][ T1281] RBP: ffffc90000e2fa30 R08: ffff8881f7132f3f R09: 1ffff1103ee265e7
[   59.394902][ T1281] R10: dffffc0000000000 R11: ffffed103ee265e8 R12: 1ffff110243fe90e
[   59.403698][ T1281] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[   59.412119][ T1281] FS:  00007fb017c796c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   59.421395][ T1281] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.428058][ T1281] CR2: 00007fb017c58d58 CR3: 000000012ae40000 CR4: 00000000003526a0
[   59.436216][ T1281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   59.444371][ T1281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   59.452737][ T1281] Call Trace:
[   59.456057][ T1281]  <TASK>
[   59.459175][ T1281]  device_add+0x2f0/0xe90
[   59.463546][ T1281]  device_create+0x26c/0x300
[   59.468550][ T1281]  ? root_device_unregister+0x80/0x80
[   59.474362][ T1281]  create_function_device+0x60/0x70
[   59.479919][ T1281]  f_midi_alloc_inst+0x1a8/0x380
[   59.484912][ T1281]  usb_get_function_instance+0xe2/0x2f0
[   59.490737][ T1281]  function_make+0x118/0x350
[   59.495416][ T1281]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[   59.502008][ T1281]  ? wait_for_completion_killable_timeout+0x10/0x10
[   59.508830][ T1281]  ? __kmalloc+0x13d/0x2c0
[   59.513334][ T1281]  ? configfs_mkdir+0x444/0x9c0
[   59.518428][ T1281]  configfs_mkdir+0x50a/0x9c0
[   59.523143][ T1281]  vfs_mkdir+0x38b/0x590
[   59.527788][ T1281]  do_mkdirat+0x174/0x4d0
[   59.532217][ T1281]  __x64_sys_mkdirat+0x89/0xa0
[   59.537235][ T1281]  x64_sys_call+0x37e/0x9a0
[   59.541817][ T1281]  do_syscall_64+0x4c/0xa0
[   59.546492][ T1281]  ? clear_bhb_loop+0x50/0xa0
[   59.551214][ T1281]  ? clear_bhb_loop+0x50/0xa0
[   59.555930][ T1281]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   59.562156][ T1281] RIP: 0033:0x7fb019220159
[   59.567914][ T1281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.587670][ T1281] RSP: 002b:00007fb017c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   59.596271][ T1281] RAX: ffffffffffffffda RBX: 00007fb0194a7fa0 RCX: 00007fb019220159
[   59.604356][ T1281] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[   59.612599][ T1281] RBP: 00007fb0192b706b R08: 0000000000000000 R09: 0000000000000000
[   59.620769][ T1281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.628882][ T1281] R13: 00007fb0194a8038 R14: 00007fb0194a7fa0 R15: 00007ffdddc36d48
[   59.636968][ T1281]  </TASK>
[   59.640021][ T1281] ---[ end trace 959af9177d4811de ]---
[   59.645616][ T1281] general protection fault, probably for non-canonical address 0xec27a5c9e92a886c: 0000 [#1] PREEMPT SMP KASAN
[   59.657358][ T1281] KASAN: maybe wild-memory-access in range [0x613d4e4f49544360-0x613d4e4f49544367]
[   59.666669][ T1281] CPU: 1 PID: 1281 Comm: syz.1.352 Tainted: G    B   W         syzkaller #0
[   59.675358][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   59.685429][ T1281] RIP: 0010:kobject_add_internal+0x5e3/0xde0
[   59.691547][ T1281] Code: 4c 89 e7 e8 7f 36 39 ff 4d 8b 24 24 4d 85 e4 0f 84 db 00 00 00 49 83 c4 20 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 4f 36 39 ff 49 8b 04 24 48 85 c0 0f
[   59.711299][ T1281] RSP: 0018:ffffc90000e2f898 EFLAGS: 00010206
[   59.717646][ T1281] RAX: 0c27a9c9e92a886c RBX: ffff888128f73d00 RCX: dffffc0000000000
[   59.725634][ T1281] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88811918a028
[   59.733617][ T1281] RBP: ffffc90000e2f8f0 R08: 0000000000000003 R09: 0000000000000004
[   59.741601][ T1281] R10: dffffc0000000000 R11: fffff520001c5f04 R12: 613d4e4f49544361
[   59.749602][ T1281] R13: ffff888128f73d18 R14: ffffffff86a49a00 R15: ffff88811918a000
[   59.757730][ T1281] FS:  00007fb017c796c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   59.766684][ T1281] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.773268][ T1281] CR2: 00007fb017c58d58 CR3: 000000012ae40000 CR4: 00000000003526a0
[   59.781255][ T1281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   59.789247][ T1281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   59.797244][ T1281] Call Trace:
[   59.800532][ T1281]  <TASK>
[   59.803477][ T1281]  kobject_add+0x165/0x230
[   59.808054][ T1281]  ? kobject_init+0x1d0/0x1d0
[   59.812769][ T1281]  ? kobject_init+0x83/0x1d0
[   59.817403][ T1281]  get_device_parent+0x3a6/0x410
[   59.822362][ T1281]  device_add+0x308/0xe90
[   59.826783][ T1281]  device_create+0x26c/0x300
[   59.831383][ T1281]  ? root_device_unregister+0x80/0x80
[   59.836765][ T1281]  create_function_device+0x60/0x70
[   59.841974][ T1281]  f_midi_alloc_inst+0x1a8/0x380
[   59.846914][ T1281]  usb_get_function_instance+0xe2/0x2f0
[   59.852465][ T1281]  function_make+0x118/0x350
[   59.857064][ T1281]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[   59.863428][ T1281]  ? wait_for_completion_killable_timeout+0x10/0x10
[   59.870044][ T1281]  ? __kmalloc+0x13d/0x2c0
[   59.874485][ T1281]  ? configfs_mkdir+0x444/0x9c0
[   59.879650][ T1281]  configfs_mkdir+0x50a/0x9c0
[   59.884347][ T1281]  vfs_mkdir+0x38b/0x590
[   59.888832][ T1281]  do_mkdirat+0x174/0x4d0
[   59.893342][ T1281]  __x64_sys_mkdirat+0x89/0xa0
[   59.898162][ T1281]  x64_sys_call+0x37e/0x9a0
[   59.902694][ T1281]  do_syscall_64+0x4c/0xa0
[   59.907127][ T1281]  ? clear_bhb_loop+0x50/0xa0
[   59.911806][ T1281]  ? clear_bhb_loop+0x50/0xa0
[   59.916503][ T1281]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   59.922443][ T1281] RIP: 0033:0x7fb019220159
[   59.926899][ T1281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.947032][ T1281] RSP: 002b:00007fb017c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   59.955554][ T1281] RAX: ffffffffffffffda RBX: 00007fb0194a7fa0 RCX: 00007fb019220159
[   59.963651][ T1281] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[   59.971643][ T1281] RBP: 00007fb0192b706b R08: 0000000000000000 R09: 0000000000000000
[   59.979907][ T1281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.987924][ T1281] R13: 00007fb0194a8038 R14: 00007fb0194a7fa0 R15: 00007ffdddc36d48
[   59.996130][ T1281]  </TASK>
[   59.999174][ T1281] Modules linked in:
[   60.004140][ T1281] ---[ end trace 959af9177d4811df ]---
[   60.009698][ T1281] RIP: 0010:kobject_add_internal+0x5e3/0xde0
[   60.015763][ T1281] Code: 4c 89 e7 e8 7f 36 39 ff 4d 8b 24 24 4d 85 e4 0f 84 db 00 00 00 49 83 c4 20 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 4f 36 39 ff 49 8b 04 24 48 85 c0 0f
[   60.035705][ T1281] RSP: 0018:ffffc90000e2f898 EFLAGS: 00010206
[   60.041869][ T1281] RAX: 0c27a9c9e92a886c RBX: ffff888128f73d00 RCX: dffffc0000000000
[   60.050355][ T1281] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88811918a028
[   60.059199][ T1281] RBP: ffffc90000e2f8f0 R08: 0000000000000003 R09: 0000000000000004
[   60.067405][ T1281] R10: dffffc0000000000 R11: fffff520001c5f04 R12: 613d4e4f49544361
[   60.075417][ T1281] R13: ffff888128f73d18 R14: ffffffff86a49a00 R15: ffff88811918a000
[   60.083616][ T1281] FS:  00007fb017c796c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   60.092834][ T1281] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   60.099523][ T1281] CR2: 00007ffc4798f808 CR3: 000000012ae40000 CR4: 00000000003526a0
[   60.107639][ T1281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   60.115989][ T1281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   60.124682][ T1281] Kernel panic - not syncing: Fatal exception
[   60.131085][ T1281] Kernel Offset: disabled
[   60.135429][ T1281] Rebooting in 86400 seconds..