last executing test programs:

4m3.168705433s ago: executing program 32 (id=1667):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

3m54.315774577s ago: executing program 33 (id=1492):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0xffffff9f, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

3m5.899836373s ago: executing program 34 (id=3192):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x87)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0xee01, 0x0)

2m56.225583935s ago: executing program 35 (id=3362):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000000380)=ANY=[], 0xfe, 0x152b, &(0x7f0000003e00)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
mkdir(0x0, 0x0)
utimes(&(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)

2m43.624073597s ago: executing program 36 (id=3672):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)

2m35.407575797s ago: executing program 37 (id=3828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0)

2m25.47289643s ago: executing program 38 (id=4002):
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)

2m17.34889349s ago: executing program 39 (id=3896):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f00000003c0)='d')

2m1.347678818s ago: executing program 40 (id=4451):
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001040), 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
write$selinux_validatetrans(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7661725f6c6f636b5f743a7330202f7573722f7362696e2f6375707364203030303030303030303032313437343833363438202f75e972"], 0x5c)

1m53.848543702s ago: executing program 41 (id=4596):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x12)

1m49.146408837s ago: executing program 42 (id=4420):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m38.833374603s ago: executing program 43 (id=5032):
r0 = socket$inet6(0xa, 0x80002, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)

1m37.420473203s ago: executing program 44 (id=5057):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000120001"], 0xfe87}, 0x1, 0x0, 0x0, 0x881}, 0x8000)
recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x66e}], 0x1, 0x2000, 0x0)

1m36.104014673s ago: executing program 45 (id=5081):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0)

1m35.030109341s ago: executing program 46 (id=5097):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10)
rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0)

1m34.218815886s ago: executing program 47 (id=5114):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
fstatfs(r1, &(0x7f0000000380)=""/179)

1m32.106784962s ago: executing program 48 (id=5150):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, r1}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)

1m30.822377381s ago: executing program 49 (id=5172):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))

1m22.92660485s ago: executing program 50 (id=5327):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6bdb7c03b5768397})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="1bbc54a6", 0x4}], 0x1, 0xa74a, 0x2, 0x0)

1m7.845496901s ago: executing program 51 (id=5627):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x6071, 0x0, 0xe7}}}}}}, 0x0)

1m6.805721568s ago: executing program 0 (id=5638):
io_setup(0x1, &(0x7f0000002500)=<r0=>0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000002680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffc, r1, &(0x7f0000002540)='\r', 0x1}])

1m6.715385209s ago: executing program 0 (id=5642):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400), 0x45, 0x7bf, &(0x7f0000000e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0)
fallocate(r1, 0x20, 0x0, 0x8000)

1m6.58435728s ago: executing program 0 (id=5644):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009e000040"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m4.751732803s ago: executing program 0 (id=5648):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x102)

1m4.733427774s ago: executing program 0 (id=5649):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

1m4.626844664s ago: executing program 0 (id=5653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1m4.579586444s ago: executing program 52 (id=5653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

54.861685236s ago: executing program 7 (id=5764):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfe, 0x0, 0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, 0x0, r1)
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0xfe)

54.044198352s ago: executing program 7 (id=5797):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="02", 0x1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

54.032155612s ago: executing program 7 (id=5790):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000305000000000000000006000000000000000800010002"], 0x20}}, 0x0)

54.011896422s ago: executing program 7 (id=5793):
r0 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @loopback={0xff00000000000000}}]}, 0x34}}, 0x0)

53.977873802s ago: executing program 7 (id=5794):
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

53.940405373s ago: executing program 7 (id=5795):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
inotify_rm_watch(r0, 0x0)

39.23793226s ago: executing program 53 (id=5795):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
inotify_rm_watch(r0, 0x0)

33.630632282s ago: executing program 5 (id=6126):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r0, 0x0, r1)
getsockopt$bt_BT_SECURITY(r2, 0x107, 0x17, 0x0, 0xfffffffffffffc9d)

33.574784742s ago: executing program 5 (id=6129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)

33.482713773s ago: executing program 5 (id=6133):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r2, r1, 0x0, 0x2c4d)

33.440751793s ago: executing program 5 (id=6135):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f00000006c0)={[{@dioread_nolock}, {@inlinecrypt}, {@noauto_da_alloc}, {@lazytime}, {@noquota}, {@journal_dev}]}, 0x1, 0x43c, &(0x7f0000000280)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x30000ad, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

33.352370264s ago: executing program 5 (id=6141):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

32.983671666s ago: executing program 5 (id=6148):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x200, &(0x7f00000010c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5807ff7f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006)

32.919057937s ago: executing program 54 (id=6148):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x200, &(0x7f00000010c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006)

32.858689177s ago: executing program 9 (id=6154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0)

31.510319227s ago: executing program 9 (id=6187):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20)

31.480140988s ago: executing program 9 (id=6188):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

31.438325708s ago: executing program 9 (id=6190):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f00000006c0)={[{@dioread_nolock}, {@inlinecrypt}, {@noauto_da_alloc}, {@lazytime}, {@noquota}, {@journal_dev}]}, 0x1, 0x43c, &(0x7f0000000280)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x30000ad, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

31.286623539s ago: executing program 9 (id=6196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

30.782723192s ago: executing program 9 (id=6205):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
set_robust_list(&(0x7f0000000400)={0x0, 0x3ff}, 0x18)

30.777052102s ago: executing program 55 (id=6205):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
set_robust_list(&(0x7f0000000400)={0x0, 0x3ff}, 0x18)

26.713847309s ago: executing program 1 (id=6321):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x32b}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)

26.66684767s ago: executing program 1 (id=6322):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

26.64813527s ago: executing program 1 (id=6324):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0xb, 0xfffffffffffffff4, 0x2, 0xfffffffffffff801, 0xffffffffffff5067, 0x900000000000, 0x2, 0x3}, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000400), 0x8})

26.59236733s ago: executing program 1 (id=6326):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3})

26.560142821s ago: executing program 1 (id=6328):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

26.527119641s ago: executing program 1 (id=6329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

12.201782698s ago: executing program 56 (id=6329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.226056785s ago: executing program 6 (id=6686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.095163966s ago: executing program 6 (id=6688):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
open(&(0x7f0000000000)='./file1\x00', 0x20040, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0)

1.932421607s ago: executing program 6 (id=6689):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xac022, 0x0)

1.854627467s ago: executing program 6 (id=6693):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x1, 0x5})

1.709140648s ago: executing program 6 (id=6694):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x107)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x9257, 0x48, 0x0, 0xffffff29)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @adiantum, 0x4, @desc1})

1.653010728s ago: executing program 6 (id=6695):
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "c5fba9f4ac236b58a955ad036df048268f5c73f92aa0e635cd944a9e02afe9bdf7072f59f8678c0d65aabec9709473d387cc229f6e6dda33ea1afa95d77459af", 0x22}, 0x48, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

1.074816093s ago: executing program 8 (id=6698):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r2, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006)

1.074310653s ago: executing program 8 (id=6699):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

1.049044313s ago: executing program 8 (id=6700):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setresgid(0x0, 0x0, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

1.048568803s ago: executing program 8 (id=6701):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)

1.035762373s ago: executing program 8 (id=6702):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
exit(0xffff)

790.413415ms ago: executing program 3 (id=6707):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3000004, &(0x7f00000006c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffcde}}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@nodots}]}, 0x1, 0x2ba, &(0x7f0000000400)="$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")
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0x22, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

694.067565ms ago: executing program 3 (id=6709):
syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x211, &(0x7f0000000880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000))

602.775176ms ago: executing program 3 (id=6713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

578.976826ms ago: executing program 2 (id=6714):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)

552.328906ms ago: executing program 2 (id=6715):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0)

544.873716ms ago: executing program 4 (id=6716):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
close(r0)

527.340326ms ago: executing program 3 (id=6717):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c)
setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29)

527.150396ms ago: executing program 4 (id=6718):
unshare(0x40400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000180))

526.709456ms ago: executing program 2 (id=6719):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

510.064996ms ago: executing program 4 (id=6720):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18)
getrlimit(0x1, &(0x7f0000000300))

492.052147ms ago: executing program 3 (id=6721):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000001c0)=0x8, 0x4)

488.997297ms ago: executing program 4 (id=6722):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

396.969717ms ago: executing program 2 (id=6723):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

359.539147ms ago: executing program 4 (id=6724):
mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x8, 0x0)
ptrace$poke(0x5, r0, &(0x7f00000004c0), 0xc000000000000005)

332.985568ms ago: executing program 2 (id=6725):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x24}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@bh}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

330.947928ms ago: executing program 4 (id=6726):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

227.962178ms ago: executing program 8 (id=6727):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c757365725f78617474722c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303031362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0084538367d8b9c04bebbf0f4ea4d5617c063f0a30b5325e5d939d497829d8452e38794f1563bf34cdaaf9b70591db2f2a066e339d0c0b7c189bac05d8e91e9d1f4670d79a57f83b67f1f98b905d3b06be7de7829439d0b21d1744d7fad3fe3f3f9b3361f4bfa2c2e375c048af0d6ecac62d07c6a85e2558b9e8639b050137830520aea2c9243f9f9eca12969def7d15c8bac687164c38cf349d738c"], 0x1, 0x5512, &(0x7f0000005a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xf504, 0x0)

224.382068ms ago: executing program 2 (id=6728):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r2, 0x1, 0x709d2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x840)

0s ago: executing program 3 (id=6729):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.723290][T14019] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  257.738960][T14019] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28
[  257.739353][T12766] EXT4-fs (loop6): unmounting filesystem.
[  257.751894][T14019] EXT4-fs (loop9): This should not happen!! Data will be lost
[  257.751894][T14019] 
[  257.766910][T14019] EXT4-fs (loop9): Total free blocks count 0
[  257.773131][T14019] EXT4-fs (loop9): Free/Dirty block details
[  257.779194][T14019] EXT4-fs (loop9): free_blocks=4293918720
[  257.785046][T14019] EXT4-fs (loop9): dirty_blocks=64
[  257.790285][T14019] EXT4-fs (loop9): Block reservation details
[  257.796367][T14019] EXT4-fs (loop9): i_reserved_data_blocks=4
[  257.796447][T14026] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.809908][T14026] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.818027][T14026] device bridge_slave_0 entered promiscuous mode
[  257.818242][  T398] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:4: lblock 40 mapped to illegal pblock 8 (length 8)
[  257.825938][T14026] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.841281][ T9282] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  257.846147][T14026] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.861049][  T398] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117
[  257.876412][T14026] device bridge_slave_1 entered promiscuous mode
[  257.901175][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5664'.
[  257.919735][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5664'.
[  257.941322][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5664'.
[  257.950426][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5664'.
[  258.012025][   T10] device bridge_slave_1 left promiscuous mode
[  258.018372][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.026063][   T10] device bridge_slave_0 left promiscuous mode
[  258.039844][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.042901][ T9282] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  258.057140][ T9282] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  258.067379][   T10] device veth1_macvtap left promiscuous mode
[  258.073580][   T10] device veth0_vlan left promiscuous mode
[  258.074696][ T9282] usb 5-1: config 1 interface 0 has no altsetting 0
[  258.088878][ T9282] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  258.097973][ T9282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.106132][ T9282] usb 5-1: Product: syz
[  258.110478][ T9282] usb 5-1: Manufacturer: syz
[  258.115114][ T9282] usb 5-1: SerialNumber: syz
[  258.120540][T14013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  258.127997][T14013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  258.199655][T14026] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.206929][T14026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.214293][T14026] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.221360][T14026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.246137][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  258.254629][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.262228][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.272217][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  258.280613][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.287685][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.296825][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  258.305180][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.312265][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.326680][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  258.347296][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  258.356194][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  258.364264][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  258.372310][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  258.379951][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  258.389613][T14026] device veth0_vlan entered promiscuous mode
[  258.406739][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.415914][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.425883][T14026] device veth1_macvtap entered promiscuous mode
[  258.438169][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  258.445955][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  258.454444][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  258.472321][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  258.481602][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  258.500296][T14051] loop6: detected capacity change from 0 to 256
[  258.508329][T14051] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  258.755686][  T291] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  258.928662][  T291] usb 8-1: unable to get BOS descriptor or descriptor too short
[  258.937102][  T291] usb 8-1: config 6 has an invalid interface number: 200 but max is 0
[  258.945396][  T291] usb 8-1: config 6 has no interface number 0
[  258.951696][  T291] usb 8-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  258.962746][  T291] usb 8-1: config 6 interface 200 has no altsetting 0
[  258.971426][  T291] usb 8-1: string descriptor 0 read error: -22
[  258.977843][  T291] usb 8-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  258.986931][  T291] usb 8-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  259.093328][ T9282] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:e8:7e:33:0d:de
[  259.105029][ T9282] rtl8150 5-1:1.0: eth1: rtl8150 is detected
[  259.112336][ T9282] usb 5-1: USB disconnect, device number 24
[  261.363703][ T4370] usb 8-1: USB disconnect, device number 20
[  261.393733][T14072] loop3: detected capacity change from 0 to 1024
[  261.401104][   T28] audit: type=1400 audit(2000000091.784:2342): avc:  denied  { ioctl } for  pid=14068 comm="syz.9.5674" path="socket:[77308]" dev="sockfs" ino=77308 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  261.451021][   T28] audit: type=1400 audit(2000000091.826:2343): avc:  denied  { bind } for  pid=14078 comm="syz.4.5676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  261.472466][   T28] audit: type=1400 audit(2000000091.826:2344): avc:  denied  { accept } for  pid=14078 comm="syz.4.5676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  261.515098][T14072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  261.523977][T14072] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.539929][T14072] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  261.555033][T14072] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28
[  261.567852][T14072] EXT4-fs (loop3): This should not happen!! Data will be lost
[  261.567852][T14072] 
[  261.577939][T14072] EXT4-fs (loop3): Total free blocks count 0
[  261.583976][T14072] EXT4-fs (loop3): Free/Dirty block details
[  261.590458][T14072] EXT4-fs (loop3): free_blocks=4293918720
[  261.596276][T14072] EXT4-fs (loop3): dirty_blocks=64
[  261.601507][T14072] EXT4-fs (loop3): Block reservation details
[  261.614484][T14072] EXT4-fs (loop3): i_reserved_data_blocks=4
[  261.637671][T14098] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  261.646730][T14097] loop7: detected capacity change from 0 to 512
[  261.653888][   T28] audit: type=1400 audit(2000000092.056:2345): avc:  denied  { mounton } for  pid=14096 comm="syz.7.5688" path="/2/bus" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  261.654836][   T10] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:1: lblock 40 mapped to illegal pblock 8 (length 8)
[  261.686885][   T28] audit: type=1400 audit(2000000092.077:2346): avc:  denied  { unmount } for  pid=14026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  261.717952][   T10] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117
[  261.814643][T14120] loop6: detected capacity change from 0 to 2048
[  261.825442][T14120] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  261.845391][T12766] EXT4-fs (loop6): unmounting filesystem.
[  261.919451][T14133] loop7: detected capacity change from 0 to 1024
[  261.926415][T14133] EXT4-fs: Ignoring removed orlov option
[  261.932492][T14133] EXT4-fs: Ignoring removed nomblk_io_submit option
[  261.950142][T14133] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  261.967135][T14026] EXT4-fs (loop7): unmounting filesystem.
[  262.051611][ T4370] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  262.108928][ T9280] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  262.203993][ T9697] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  262.222983][ T4370] usb 4-1: Using ep0 maxpacket: 16
[  262.229357][ T4370] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  262.238129][ T4370] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.248254][ T4370] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.258653][ T4370] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  262.267780][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.275814][ T4370] usb 4-1: Product: syz
[  262.280001][ T4370] usb 4-1: Manufacturer: syz
[  262.284719][ T4370] usb 4-1: SerialNumber: syz
[  262.290903][ T9280] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.301143][ T9280] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  262.310092][ T9280] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  262.340358][ T9280] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  262.349997][ T9280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.359347][T14124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  262.369644][ T9280] hub 5-1:1.0: bad descriptor, ignoring hub
[  262.375614][ T9280] hub: probe of 5-1:1.0 failed with error -5
[  262.388483][ T9280] cdc_wdm 5-1:1.0: skipping garbage
[  262.392054][ T9697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.393755][ T9280] cdc_wdm 5-1:1.0: skipping garbage
[  262.410661][ T9280] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  262.415343][ T9697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.443382][ T9697] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  262.456297][ T9697] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  262.480992][ T9697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.490876][ T9697] usb 7-1: config 0 descriptor??
[  262.570947][T14124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.580354][T14124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.680537][ T4370] usb 4-1: 0:2 : does not exist
[  262.708914][   T60] usb 5-1: USB disconnect, device number 25
[  266.240894][ T4370] usb 4-1: 1:0: failed to get current value for ch 0 (-22)
[  266.255729][ T9697] usbhid 7-1:0.0: can't add hid device: -71
[  266.265806][ T9697] usbhid: probe of 7-1:0.0 failed with error -71
[  266.273632][ T9697] usb 7-1: USB disconnect, device number 17
[  266.294287][ T4370] usb 4-1: USB disconnect, device number 20
[  266.362782][   T28] audit: type=1400 audit(2000000096.991:2347): avc:  denied  { append } for  pid=14190 comm="syz.9.5731" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  266.468744][   T28] audit: type=1400 audit(2000000097.106:2348): avc:  denied  { write } for  pid=14208 comm="syz.9.5739" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  266.487532][T14181] loop6: detected capacity change from 0 to 40427
[  266.500328][T14181] F2FS-fs (loop6): fault_injection options not supported
[  266.508462][T14181] F2FS-fs (loop6): invalid crc value
[  266.534406][T14181] F2FS-fs (loop6): Found nat_bits in checkpoint
[  266.546999][T14222] loop7: detected capacity change from 0 to 512
[  266.557469][T14222] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  266.615434][T14222] EXT4-fs (loop7): 1 truncate cleaned up
[  266.641336][T14222] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  266.661085][T14181] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  266.686733][T14235] loop3: detected capacity change from 0 to 512
[  266.710717][T14026] EXT4-fs (loop7): unmounting filesystem.
[  266.738988][T12766] syz-executor: attempt to access beyond end of device
[  266.738988][T12766] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.759269][T14235] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  266.794639][T14235] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.826061][T14224] loop9: detected capacity change from 0 to 40427
[  266.842030][T14224] F2FS-fs (loop9): Invalid SB checksum offset: 0
[  266.850609][T13940] EXT4-fs (loop3): unmounting filesystem.
[  266.856477][T14224] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  266.879295][T14224] F2FS-fs (loop9): invalid crc value
[  266.916043][T14224] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  266.989659][T14224] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[  267.003809][T14224] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  267.013055][ T4370] kernel write not supported for file bpf-prog (pid: 4370 comm: kworker/1:4)
[  267.046271][T14271] loop7: detected capacity change from 0 to 1024
[  267.053052][T14271] EXT4-fs: Ignoring removed oldalloc option
[  267.059001][T14271] EXT4-fs: Ignoring removed bh option
[  267.064684][   T28] audit: type=1400 audit(2000000097.725:2349): avc:  denied  { map } for  pid=14223 comm="syz.9.5741" path="/105/file1/cpuset.memory_pressure" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  267.081569][T14273] loop6: detected capacity change from 0 to 2048
[  267.095420][T14271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.116407][T12806] syz-executor: attempt to access beyond end of device
[  267.116407][T12806] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  267.131560][T14271] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  267.159470][T14026] EXT4-fs (loop7): unmounting filesystem.
[  267.176671][T14273] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  267.185286][T14273] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.210414][   T28] audit: type=1400 audit(2000000097.883:2350): avc:  denied  { mounton } for  pid=14272 comm="syz.6.5758" path="/105/file0/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  267.253338][T14273] overlayfs: filesystem on './file0' not supported as upperdir
[  267.277300][   T28] audit: type=1400 audit(2000000097.935:2351): avc:  denied  { mounton } for  pid=14272 comm="syz.6.5758" path="/105/file0/file0" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  267.304429][   T28] audit: type=1400 audit(2000000097.988:2352): avc:  denied  { rmdir } for  pid=12766 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  267.335134][T12766] EXT4-fs (loop6): unmounting filesystem.
[  267.370277][   T28] audit: type=1400 audit(2000000098.019:2353): avc:  denied  { unlink } for  pid=12766 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  267.391465][ T4370] kernel write not supported for file /ppp (pid: 4370 comm: kworker/1:4)
[  267.393721][   T28] audit: type=1400 audit(2000000098.019:2354): avc:  denied  { rmdir } for  pid=12766 comm="syz-executor" name="volatile" dev="loop6" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  267.425480][T14266] loop3: detected capacity change from 0 to 40427
[  267.432533][T14266] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  267.440529][T14266] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  267.449723][T14266] F2FS-fs (loop3): invalid crc value
[  267.456560][T14266] F2FS-fs (loop3): Found nat_bits in checkpoint
[  267.492429][T14266] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  267.499564][T14266] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  267.520110][   T28] audit: type=1400 audit(2000000098.219:2355): avc:  denied  { read } for  pid=14299 comm="syz.4.5769" path="socket:[78867]" dev="sockfs" ino=78867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  267.544644][T14266] syz.3.5755: attempt to access beyond end of device
[  267.544644][T14266] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  267.559758][T14266] syz.3.5755: attempt to access beyond end of device
[  267.559758][T14266] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  267.580634][  T398] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  267.590055][  T398] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  267.707177][T14311] loop4: detected capacity change from 0 to 1024
[  267.713968][T14311] EXT4-fs: Ignoring removed i_version option
[  267.720551][T14311] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.740101][T14311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  267.744005][   T28] audit: type=1400 audit(2000000098.450:2356): avc:  denied  { read } for  pid=14316 comm="syz.3.5776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  267.766228][T14311] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.5774: Allocating blocks 497-513 which overlap fs metadata
[  267.782653][T14311] EXT4-fs (loop4): pa ffff88811138d498: logic 256, phys. 385, len 8
[  267.790788][T14311] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1
[  267.834574][T11377] EXT4-fs (loop4): unmounting filesystem.
[  267.885565][T14330] loop4: detected capacity change from 0 to 256
[  267.894912][T14330] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d)
[  267.968128][T14336] overlayfs: missing 'lowerdir'
[  267.995565][T14341] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.004796][T14341] FAT-fs (loop9): unable to read boot sector
[  268.721212][T14372] tmpfs: Unknown parameter '9'
[  268.780974][T14378] loop3: detected capacity change from 0 to 512
[  268.835172][T14378] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.5803: bad orphan inode 11862016
[  268.847470][T14378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  268.856874][T14378] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.879190][T14378] EXT4-fs (loop3): shut down requested (2)
[  268.926522][T13940] EXT4-fs (loop3): unmounting filesystem.
[  268.934281][T14392] loop4: detected capacity change from 0 to 1024
[  268.957953][T14392] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  268.988279][T14392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  269.020046][T11377] EXT4-fs (loop4): unmounting filesystem.
[  269.147137][T14407] overlayfs: invalid origin (0000)
[  269.177155][ T4370] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  269.387676][ T4370] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.403796][ T4370] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.421208][ T4370] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  269.443882][ T4370] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.463094][ T4370] usb 10-1: config 0 descriptor??
[  269.491190][ T1248] Bluetooth: hci0: command 0x1003 tx timeout
[  269.497287][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  269.720020][ T9697] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  269.729600][ T2266] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[  269.858417][ T4370] steelseries_srws1 0003:1038:1410.0041: collection stack underflow
[  269.866631][ T4370] steelseries_srws1 0003:1038:1410.0041: item 0 4 0 12 parsing failed
[  269.881314][ T4370] steelseries_srws1 0003:1038:1410.0041: parse failed
[  269.888225][ T4370] steelseries_srws1: probe of 0003:1038:1410.0041 failed with error -22
[  269.911541][ T2266] usb 5-1: config 0 has no interfaces?
[  269.917173][ T2266] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  269.926367][ T2266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.926544][ T9697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.936717][ T2266] usb 5-1: config 0 descriptor??
[  269.955439][ T9697] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  269.964875][ T9697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.983265][ T9697] usb 4-1: config 0 descriptor??
[  270.056055][ T4370] usb 10-1: USB disconnect, device number 11
[  270.146046][  T398] Bluetooth: hci0: Frame reassembly failed (-84)
[  270.182027][ T9697] usbhid 4-1:0.0: can't add hid device: -71
[  270.188187][ T9697] usbhid: probe of 4-1:0.0 failed with error -71
[  270.195697][ T9697] usb 4-1: USB disconnect, device number 21
[  270.205882][ T9280] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  270.377212][ T9280] usb 7-1: Using ep0 maxpacket: 16
[  270.383641][ T9280] usb 7-1: config 0 has no interfaces?
[  270.389266][ T9280] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  270.398781][ T9280] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.408497][ T9280] usb 7-1: config 0 descriptor??
[  270.607310][ T2266] usb 7-1: USB disconnect, device number 18
[  270.729786][ T9697] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  270.913972][ T9697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.925061][ T9697] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  270.934654][ T9697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.943488][ T9697] usb 4-1: config 0 descriptor??
[  271.198280][T14501] loop9: detected capacity change from 0 to 256
[  271.303907][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  271.303924][   T28] audit: type=1400 audit(2000000102.187:2372): avc:  denied  { getopt } for  pid=14498 comm="syz.6.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  271.333812][ T9697] usbhid 4-1:0.0: can't add hid device: -71
[  271.340850][ T9697] usbhid: probe of 4-1:0.0 failed with error -71
[  271.356277][ T9697] usb 4-1: USB disconnect, device number 22
[  271.599288][T14528] loop6: detected capacity change from 0 to 512
[  271.606727][T14528] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  271.615567][T14528] EXT4-fs (loop6): invalid journal inode
[  271.628811][T14528] EXT4-fs (loop6): can't get journal size
[  271.648022][T14528] EXT4-fs (loop6): 1 truncate cleaned up
[  271.653943][T14528] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  271.682917][T12766] EXT4-fs (loop6): unmounting filesystem.
[  271.933550][T14570] input: syz0 as /devices/virtual/input/input54
[  272.082442][ T1248] Bluetooth: hci0: command 0x1003 tx timeout
[  272.089023][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  272.099092][T14591] loop3: detected capacity change from 0 to 128
[  272.120403][ T9697] usb 5-1: USB disconnect, device number 26
[  272.225243][T14603] loop9: detected capacity change from 0 to 1024
[  272.271263][T14603] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  272.311402][T14603] EXT4-fs (loop9): shut down requested (2)
[  272.353224][T12806] EXT4-fs (loop9): unmounting filesystem.
[  272.427098][   T28] audit: type=1400 audit(2000000103.363:2373): avc:  denied  { append } for  pid=14616 comm="syz.9.5915" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  272.596088][T14624] IPv6: sit1: Disabled Multicast RS
[  272.676478][T14632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  272.756460][   T28] audit: type=1326 audit(2000000103.709:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.9.5920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd30ab8f6c9 code=0x0
[  272.818223][   T28] audit: type=1400 audit(2000000103.772:2375): avc:  denied  { map } for  pid=14650 comm="syz.4.5922" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  272.854636][T14653] loop6: detected capacity change from 0 to 256
[  272.858522][T14655] syz.3.5924[14655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  272.861011][T14655] syz.3.5924[14655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  272.894126][T14653] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  273.139448][ T4370] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  273.310819][ T4370] usb 4-1: Using ep0 maxpacket: 32
[  273.318776][ T4370] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf
[  273.328011][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.336948][ T4370] usb 4-1: Product: syz
[  273.341291][ T4370] usb 4-1: Manufacturer: syz
[  273.345993][ T4370] usb 4-1: SerialNumber: syz
[  273.352745][ T4370] usb 4-1: config 0 descriptor??
[  273.549920][ T4370] snd-usb-audio: probe of 4-1:0.0 failed with error -71
[  273.559561][ T4370] usb 4-1: USB disconnect, device number 23
[  282.997193][T14659] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.004355][T14659] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.011789][T14659] device bridge_slave_0 entered promiscuous mode
[  283.018741][T14659] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.025769][T14659] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.033936][T14659] device bridge_slave_1 entered promiscuous mode
[  283.087961][T14659] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.095032][T14659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.102285][T14659] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.109332][T14659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.133693][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  283.141343][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.149050][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.158387][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  283.166676][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.173748][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.184547][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  283.192765][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.199811][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.213187][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  283.225008][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  283.239779][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  283.251851][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  283.260195][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  283.267905][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  283.278188][T14659] device veth0_vlan entered promiscuous mode
[  283.289168][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  283.298555][T14659] device veth1_macvtap entered promiscuous mode
[  283.309081][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  283.321406][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  283.393527][T14681] loop4: detected capacity change from 0 to 512
[  283.418761][T14681] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  283.448161][T14681] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.5929: bad orphan inode 15
[  283.459980][T14681] ext4_test_bit(bit=14, block=5) = 0
[  283.467616][  T884] device bridge_slave_1 left promiscuous mode
[  283.473859][  T884] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.481219][T14681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  283.493892][  T884] device bridge_slave_0 left promiscuous mode
[  283.500245][  T884] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.501747][T14681] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.5929: reserved inode found cleared - inode=1
[  283.521267][T14697] input: syz1 as /devices/virtual/input/input56
[  283.528534][  T884] device veth1_macvtap left promiscuous mode
[  283.535154][  T884] device veth0_vlan left promiscuous mode
[  283.570511][T14681] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  283.608889][T14681] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  283.659106][T11377] EXT4-fs (loop4): unmounting filesystem.
[  283.669412][T14706] device veth0_to_bridge entered promiscuous mode
[  283.694667][T14704] device veth0_to_bridge left promiscuous mode
[  283.748373][T14722] loop3: detected capacity change from 0 to 1024
[  283.771490][T14722] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  283.775792][   T28] audit: type=1400 audit(2000000115.278:2376): avc:  denied  { connect } for  pid=14725 comm="syz.9.5948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  283.812440][   T28] audit: type=1400 audit(2000000115.310:2377): avc:  denied  { shutdown } for  pid=14725 comm="syz.9.5948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  283.839541][T14734] loop9: detected capacity change from 0 to 256
[  283.854411][T14722] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  283.871555][T14734] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  283.942064][T13940] EXT4-fs (loop3): unmounting filesystem.
[  283.974103][T14741] IPv6: sit1: Disabled Multicast RS
[  283.990946][T14747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5953'.
[  284.165352][T14779] loop3: detected capacity change from 0 to 256
[  284.174799][T14779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  284.258727][T14791] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5972'.
[  284.285183][T14793] IPv6: sit1: Disabled Multicast RS
[  284.386774][   T28] audit: type=1400 audit(2000000115.918:2378): avc:  denied  { create } for  pid=14806 comm="syz.4.5983" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  284.408145][   T28] audit: type=1400 audit(2000000115.918:2379): avc:  denied  { read write } for  pid=14806 comm="syz.4.5983" name="file1" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  284.433574][   T28] audit: type=1400 audit(2000000115.918:2380): avc:  denied  { open } for  pid=14806 comm="syz.4.5983" path="/290/file1" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  284.476303][T14781] loop5: detected capacity change from 0 to 40427
[  284.484110][T14781] F2FS-fs (loop5): invalid crc value
[  284.490824][T14781] F2FS-fs (loop5): Found nat_bits in checkpoint
[  284.511158][T14811] loop4: detected capacity change from 0 to 256
[  284.523370][T14812] IPv6: sit1: Disabled Multicast RS
[  284.535119][T14811] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  284.552129][T14781] F2FS-fs (loop5): Start checkpoint disabled!
[  284.571064][T14781] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  284.628208][ T4370] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  284.670098][T14781] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  284.685848][T14835] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5996'.
[  284.685848][   T28] audit: type=1400 audit(2000000116.233:2381): avc:  denied  { nlmsg_read } for  pid=14834 comm="syz.6.5996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  284.765050][  T884] kworker/u4:5: attempt to access beyond end of device
[  284.765050][  T884] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.826922][T14847] SELinux:  Context @ is not valid (left unmapped).
[  284.834000][   T28] audit: type=1400 audit(2000000116.380:2382): avc:  denied  { relabelto } for  pid=14846 comm="syz.9.6003" name="cgroup.controllers" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[  284.861944][ T4370] usb 4-1: unable to get BOS descriptor or descriptor too short
[  284.875133][ T4370] usb 4-1: not running at top speed; connect to a high speed hub
[  284.890113][   T28] audit: type=1400 audit(2000000116.412:2383): avc:  denied  { associate } for  pid=14846 comm="syz.9.6003" name="cgroup.controllers" dev="tmpfs" ino=954 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@"
[  284.918514][   T28] audit: type=1400 audit(2000000116.433:2384): avc:  denied  { unlink } for  pid=12806 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[  284.950290][ T4370] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.962845][ T4370] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.982368][ T4370] usb 4-1: string descriptor 0 read error: -22
[  284.991876][ T4370] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  285.008609][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.017096][T14854] netlink: 'syz.9.6006': attribute type 27 has an invalid length.
[  285.026735][ T4370] usb 4-1: 0:2 : does not exist
[  285.030555][T14854] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6006'.
[  285.068666][T14832] loop4: detected capacity change from 0 to 40427
[  285.087798][T14832] F2FS-fs (loop4): invalid crc value
[  285.098448][T14832] F2FS-fs (loop4): Found nat_bits in checkpoint
[  285.131342][T14832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  285.145634][T14832] syz.4.5994: attempt to access beyond end of device
[  285.145634][T14832] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  285.166285][T11377] syz-executor: attempt to access beyond end of device
[  285.166285][T11377] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  285.284318][T14871] loop4: detected capacity change from 0 to 256
[  285.298216][T14871] FAT-fs (loop4): Directory bread(block 64) failed
[  285.304957][T14871] FAT-fs (loop4): Directory bread(block 65) failed
[  285.311532][T14871] FAT-fs (loop4): Directory bread(block 66) failed
[  285.318408][T14871] FAT-fs (loop4): Directory bread(block 67) failed
[  285.325191][T14871] FAT-fs (loop4): Directory bread(block 68) failed
[  285.331733][T14871] FAT-fs (loop4): Directory bread(block 69) failed
[  285.338369][T14871] FAT-fs (loop4): Directory bread(block 70) failed
[  285.345316][T14871] FAT-fs (loop4): Directory bread(block 71) failed
[  285.351540][ T9282] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  285.352143][T14871] FAT-fs (loop4): Directory bread(block 72) failed
[  285.366339][T14871] FAT-fs (loop4): Directory bread(block 73) failed
[  285.487039][T14892] loop4: detected capacity change from 0 to 1024
[  285.494707][T14892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  285.524007][ T9282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.524472][T14892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  285.535251][ T9282] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  285.553361][ T9282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.562726][ T9282] usb 6-1: config 0 descriptor??
[  285.579403][T11377] EXT4-fs (loop4): unmounting filesystem.
[  285.602371][ T4370] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  285.610750][   T28] audit: type=1326 audit(2000000117.210:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14899 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66dff8f6c9 code=0x7ffc0000
[  285.640004][ T4370] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  285.650348][ T4370] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  285.670048][ T4370] usb 4-1: USB disconnect, device number 24
[  285.678452][T14904] loop6: detected capacity change from 0 to 2048
[  285.712496][T14904] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  285.723215][T14904] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.758089][T12766] EXT4-fs (loop6): unmounting filesystem.
[  285.957285][ T9282] keytouch 0003:0926:3333.0042: fixing up Keytouch IEC report descriptor
[  285.967521][ T9282] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0042/input/input57
[  286.029859][T14936] input: syz1 as /devices/virtual/input/input58
[  286.048795][ T9282] keytouch 0003:0926:3333.0042: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  286.065591][ T9865] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  286.094018][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6040'.
[  286.103377][T14941] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6040'.
[  286.203681][T14951] input: syz1 as /devices/virtual/input/input59
[  286.210128][T14951] input: failed to attach handler leds to device input59, error: -6
[  286.238289][ T9865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.248788][ T9865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  286.259496][ T9865] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  286.268807][ T9865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  286.277666][ T9865] usb 5-1: SerialNumber: syz
[  286.284319][T14957] loop6: detected capacity change from 0 to 128
[  286.291162][T14957] EXT4-fs: Ignoring removed nobh option
[  286.299052][T14957] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  286.307974][T14957] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  286.329093][T12766] EXT4-fs (loop6): unmounting filesystem.
[  286.367778][T14963] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.418072][ T9697] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  286.442433][   T60] usb 6-1: USB disconnect, device number 20
[  286.476001][ T9865] usb 5-1: 0:2 : does not exist
[  286.482509][ T9865] usb 5-1: USB disconnect, device number 27
[  286.594735][ T9697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.613631][ T9697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.628021][ T9697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  286.652773][ T9697] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  286.662319][ T9697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.673965][ T9697] usb 4-1: config 0 descriptor??
[  286.697817][T14991] netlink: 165 bytes leftover after parsing attributes in process `syz.9.6063'.
[  286.724066][T14993] device syz_tun left promiscuous mode
[  286.729774][T14993] bridge0: port 3(syz_tun) entered disabled state
[  286.737874][T14993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  286.747178][T14993] device bridge_slave_0 left promiscuous mode
[  286.753483][T14993] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.763134][T14993] device bridge_slave_1 left promiscuous mode
[  286.769485][T14993] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.161722][ T9697] plantronics 0003:047F:FFFF.0043: unknown main item tag 0xd
[  287.170720][ T9697] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving
[  287.179722][ T9697] plantronics 0003:047F:FFFF.0043: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  287.221469][T15010] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6071'.
[  287.235375][T15010] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6071'.
[  287.398055][T15040] loop9: detected capacity change from 0 to 512
[  287.404787][T15040] EXT4-fs: Ignoring removed nobh option
[  287.419479][ T2266] usb 4-1: USB disconnect, device number 25
[  287.428130][T15040] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.6086: corrupted inode contents
[  287.440788][T15040] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #3: comm syz.9.6086: mark_inode_dirty error
[  287.452762][T15040] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #3: comm syz.9.6086: corrupted inode contents
[  287.464832][T15040] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.6086: mark_inode_dirty error
[  287.477005][T15040] EXT4-fs error (device loop9): ext4_acquire_dquot:6803: comm syz.9.6086: Failed to acquire dquot type 0
[  287.488873][ T9280] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  287.489035][T15040] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #16: comm syz.9.6086: corrupted inode contents
[  287.509068][T15040] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #16: comm syz.9.6086: mark_inode_dirty error
[  287.520823][T15040] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #16: comm syz.9.6086: corrupted inode contents
[  287.533059][T15040] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.6086: mark_inode_dirty error
[  287.544719][T15040] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #16: comm syz.9.6086: corrupted inode contents
[  287.557110][T15040] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem
[  287.565975][T15040] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #16: comm syz.9.6086: corrupted inode contents
[  287.578181][T15040] EXT4-fs error (device loop9): ext4_truncate:4314: inode #16: comm syz.9.6086: mark_inode_dirty error
[  287.589778][T15040] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem
[  287.599337][T15040] EXT4-fs (loop9): 1 truncate cleaned up
[  287.605036][T15040] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  287.614090][T15040] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.648217][T12806] EXT4-fs (loop9): unmounting filesystem.
[  287.663562][T15045] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.667489][ T9280] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.673057][T15045] FAT-fs (loop19): unable to read boot sector
[  287.682975][ T9280] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  287.704019][ T9280] usb 5-1: config 0 interface 0 has no altsetting 0
[  287.713824][ T9280] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  287.723296][ T9280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.732210][ T9280] usb 5-1: config 0 descriptor??
[  288.123722][ T9280] nintendo 0003:057E:2009.0044: unknown main item tag 0x0
[  288.131250][ T9280] nintendo 0003:057E:2009.0044: unknown main item tag 0x0
[  288.139557][ T9280] nintendo 0003:057E:2009.0044: unknown main item tag 0x0
[  288.147546][ T9280] nintendo 0003:057E:2009.0044: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0
[  288.187396][T15106] loop9: detected capacity change from 0 to 512
[  288.194520][T15106] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  288.220061][T15106] EXT4-fs (loop9): 1 truncate cleaned up
[  288.225847][T15106] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  288.237651][ T9280] nintendo 0003:057E:2009.0044: failed reading SPI flash; ret=-38
[  288.246316][T15106] EXT4-fs (loop9): unmounting filesystem.
[  288.249943][ T9280] nintendo 0003:057E:2009.0044: using factory cal for left stick
[  288.264645][ T9280] nintendo 0003:057E:2009.0044: failed reading SPI flash; ret=-38
[  288.272803][ T9280] nintendo 0003:057E:2009.0044: using factory cal for right stick
[  288.280790][ T9280] nintendo 0003:057E:2009.0044: failed reading SPI flash; ret=-38
[  288.288674][ T9280] nintendo 0003:057E:2009.0044: Failed to read left stick cal, using defaults; e=-38
[  288.298315][ T9280] nintendo 0003:057E:2009.0044: failed reading SPI flash; ret=-38
[  288.308044][ T9280] nintendo 0003:057E:2009.0044: Failed to read right stick cal, using defaults; e=-38
[  288.318454][ T9280] nintendo 0003:057E:2009.0044: failed reading SPI flash; ret=-38
[  288.325684][T15120] loop9: detected capacity change from 0 to 512
[  288.326559][ T9280] nintendo 0003:057E:2009.0044: using factory cal for IMU
[  288.334291][T15123] input: syz1 as /devices/virtual/input/input61
[  288.339841][ T9280] nintendo 0003:057E:2009.0044: failed reading SPI flash; ret=-38
[  288.347343][T15123] input: failed to attach handler leds to device input61, error: -6
[  288.354107][ T9280] nintendo 0003:057E:2009.0044: Failed to read IMU cal, using defaults; ret=-38
[  288.371330][ T9280] nintendo 0003:057E:2009.0044: Unable to read IMU calibration data
[  288.372360][T15120] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.6121: casefold flag without casefold feature
[  288.379395][ T9280] nintendo 0003:057E:2009.0044: Failed to set report mode; ret=-38
[  288.400199][ T9280] nintendo 0003:057E:2009.0044: Failed to initialize controller; ret=-38
[  288.409125][T15120] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.6121: couldn't read orphan inode 15 (err -117)
[  288.409438][ T9280] nintendo 0003:057E:2009.0044: probe - fail = -38
[  288.427922][ T9280] nintendo: probe of 0003:057E:2009.0044 failed with error -38
[  288.428163][T15120] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  288.438559][ T9280] usb 5-1: USB disconnect, device number 28
[  288.472830][T12806] EXT4-fs (loop9): unmounting filesystem.
[  288.477089][T15127] loop6: detected capacity change from 0 to 512
[  288.565779][T15140] loop5: detected capacity change from 0 to 512
[  288.607236][T15140] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  288.616738][T15140] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.643647][T14659] EXT4-fs (loop5): unmounting filesystem.
[  288.689187][T15154] loop5: detected capacity change from 0 to 512
[  288.700454][T15154] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  288.713689][T15154] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  288.733843][T15154] EXT4-fs (loop5): 1 truncate cleaned up
[  288.739545][T15154] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  288.775674][T14659] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  288.779420][T15165] loop6: detected capacity change from 0 to 2048
[  288.803684][T14659] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  288.828632][T14659] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  288.849846][T14659] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  288.870837][T15165] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  288.877650][T15172] loop3: detected capacity change from 0 to 4096
[  288.883197][T15165] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  288.887092][T14659] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  288.922008][T14659] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  288.943619][T15172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  288.944650][T14659] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  288.976297][T14659] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  288.978183][T12766] EXT4-fs (loop6): unmounting filesystem.
[  289.002947][T14659] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  289.003398][T13940] EXT4-fs (loop3): unmounting filesystem.
[  289.023859][T14659] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  289.044285][T15178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  289.106423][T15181] loop6: detected capacity change from 0 to 512
[  289.121294][T15181] EXT4-fs (loop6): Test dummy encryption mode enabled
[  289.130683][T14659] EXT4-fs (loop5): unmounting filesystem.
[  289.163257][T15181] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #12: comm syz.6.6146: inline data xattr refers to an external xattr inode
[  289.206799][T15181] EXT4-fs (loop6): Remounting filesystem read-only
[  289.213696][T15181] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.6146: couldn't read orphan inode 12 (err -117)
[  289.249557][T15194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6153'.
[  289.276252][T15194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6153'.
[  289.289104][T15181] EXT4-fs (loop6): Remounting filesystem read-only
[  289.295712][T15181] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  289.309352][T15181] EXT4-fs (loop6): shut down requested (2)
[  289.337804][T12766] EXT4-fs (loop6): unmounting filesystem.
[  289.396280][T15199] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.409679][T15199] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.417362][T15199] device bridge_slave_0 entered promiscuous mode
[  289.424632][T15199] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.433511][T15199] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.441160][T15199] device bridge_slave_1 entered promiscuous mode
[  289.528368][T15199] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.535591][T15199] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.542947][T15199] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.550010][T15199] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.557498][ T4370] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  289.561789][ T9280] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  289.589650][T15206] loop6: detected capacity change from 0 to 40427
[  289.596240][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  289.602152][T15206] F2FS-fs (loop6): invalid crc value
[  289.604267][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  289.617553][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.624965][T15206] F2FS-fs (loop6): Found nat_bits in checkpoint
[  289.641936][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  289.650323][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.657408][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.667236][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  289.677863][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  289.686310][T15206] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  289.706096][  T884] device bridge_slave_1 left promiscuous mode
[  289.711434][T15206] syz.6.6158: attempt to access beyond end of device
[  289.711434][T15206] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  289.712387][  T884] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.733460][ T4370] usb 10-1: Using ep0 maxpacket: 16
[  289.739753][  T884] device bridge_slave_0 left promiscuous mode
[  289.746113][  T884] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.747369][T12766] syz-executor: attempt to access beyond end of device
[  289.747369][T12766] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  289.768564][  T884] device veth1_macvtap left promiscuous mode
[  289.772296][ T9280] usb 5-1: config 0 has no interfaces?
[  289.774917][  T884] device veth0_vlan left promiscuous mode
[  289.781009][ T9280] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  289.795613][ T9280] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  289.799942][ T4370] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  289.803799][ T9280] usb 5-1: Manufacturer: syz
[  289.818253][ T9280] usb 5-1: config 0 descriptor??
[  289.838051][ T4370] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.846987][ T4370] usb 10-1: Product: syz
[  289.851387][ T4370] usb 10-1: Manufacturer: syz
[  289.856284][ T4370] usb 10-1: SerialNumber: syz
[  289.877954][ T4370] usb 10-1: config 0 descriptor??
[  289.886341][ T4370] ums-onetouch 10-1:0.0: USB Mass Storage device detected
[  289.947301][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  289.963963][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  289.974669][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  289.982650][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  289.992137][T15199] device veth0_vlan entered promiscuous mode
[  290.005750][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.016226][T15199] device veth1_macvtap entered promiscuous mode
[  290.029442][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  290.037015][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.046708][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.053187][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  290.058386][ T2266] usb 5-1: USB disconnect, device number 29
[  290.086802][ T9697] usb 10-1: USB disconnect, device number 12
[  290.244999][T15264] support for cryptoloop has been removed.  Use dm-crypt instead.
[  290.333220][   T28] kauditd_printk_skb: 46 callbacks suppressed
[  290.333238][   T28] audit: type=1400 audit(2000000122.154:2430): avc:  denied  { read write } for  pid=12766 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  290.368274][   T28] audit: type=1400 audit(2000000122.154:2431): avc:  denied  { open } for  pid=12766 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  290.396057][   T28] audit: type=1400 audit(2000000122.196:2432): avc:  denied  { ioctl } for  pid=12766 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  290.422512][   T28] audit: type=1400 audit(2000000122.228:2433): avc:  denied  { mounton } for  pid=15275 comm="syz.6.6183" path="/220/file0" dev="tmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  290.447343][   T28] audit: type=1400 audit(2000000122.228:2434): avc:  denied  { mount } for  pid=15275 comm="syz.6.6183" name="/" dev="incremental-fs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  290.477351][  T291] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  290.478125][   T28] audit: type=1400 audit(2000000122.280:2435): avc:  denied  { read append } for  pid=15275 comm="syz.6.6183" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  290.510796][T15266] loop3: detected capacity change from 0 to 40427
[  290.514544][   T28] audit: type=1400 audit(2000000122.280:2436): avc:  denied  { open } for  pid=15275 comm="syz.6.6183" path="/220/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  290.520343][T15266] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  290.543627][   T28] audit: type=1400 audit(2000000122.312:2437): avc:  denied  { ioctl } for  pid=15255 comm="syz.1.6173" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  290.564231][T15266] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  290.574604][   T28] audit: type=1400 audit(2000000122.354:2438): avc:  denied  { unmount } for  pid=12766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  290.608973][T15266] F2FS-fs (loop3): invalid crc value
[  290.615567][   T28] audit: type=1400 audit(2000000122.385:2439): avc:  denied  { read } for  pid=15277 comm="syz.6.6184" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  290.643454][T15266] F2FS-fs (loop3): Found nat_bits in checkpoint
[  290.686169][  T291] usb 2-1: Using ep0 maxpacket: 16
[  290.692538][  T291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.709716][  T291] usb 2-1: config 0 has no interfaces?
[  290.711623][T15292] loop9: detected capacity change from 0 to 512
[  290.717083][  T291] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  290.731083][T15266] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  290.741419][T15292] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  290.742816][T15266] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  290.760613][  T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.773508][T15292] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  290.777108][  T291] usb 2-1: config 0 descriptor??
[  290.797774][T15292] EXT4-fs (loop9): 1 truncate cleaned up
[  290.804289][T15292] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  290.844330][T12806] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  290.866138][T12806] EXT4-fs error (device loop9): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  290.886253][T12806] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  290.907916][T12806] EXT4-fs error (device loop9): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  290.937373][T12806] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  290.971576][T12806] EXT4-fs error (device loop9): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  290.993794][T12806] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  291.015602][T12806] EXT4-fs error (device loop9): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  291.036006][T12806] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  291.056939][T12806] EXT4-fs error (device loop9): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  291.245129][  T291] usb 2-1: USB disconnect, device number 13
[  291.288574][T15121] EXT4-fs (loop9): unmounting filesystem.
[  291.478720][T15335] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.486003][T15335] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.493442][T15335] device bridge_slave_0 entered promiscuous mode
[  291.500566][T15335] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.508123][T15335] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.515987][T15335] device bridge_slave_1 entered promiscuous mode
[  291.544436][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6212'.
[  291.553589][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6212'.
[  291.618891][T15335] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.625997][T15335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.633311][T15335] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.640376][T15335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.669063][  T884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  291.677844][  T884] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.686152][  T884] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.698427][T15357] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6215'.
[  291.710878][  T884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  291.719538][  T884] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.726612][  T884] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.734338][  T884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  291.742694][  T884] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.749810][  T884] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.769637][  T884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  291.777988][  T884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  291.797489][  T884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  291.813976][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  291.822330][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  291.829888][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  291.838974][T15335] device veth0_vlan entered promiscuous mode
[  291.849587][   T10] device veth1_macvtap left promiscuous mode
[  291.855718][   T10] device veth0_vlan left promiscuous mode
[  292.063298][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  292.073943][T15335] device veth1_macvtap entered promiscuous mode
[  292.086412][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  292.109620][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  292.240332][T15388] loop8: detected capacity change from 0 to 128
[  292.249543][T15388] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  292.258411][T15388] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  292.280132][T15335] EXT4-fs (loop8): unmounting filesystem.
[  292.353683][T15399] serio: Serial port ptm0
[  292.459949][T15419] loop8: detected capacity change from 0 to 256
[  293.307489][T15472] loop3: detected capacity change from 0 to 131072
[  293.317507][T15472] F2FS-fs (loop3): invalid crc value
[  293.324374][T15472] F2FS-fs (loop3): Found nat_bits in checkpoint
[  293.364261][T15472] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  293.375210][T15489] loop4: detected capacity change from 0 to 512
[  293.382135][T15472] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[  293.389414][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[  293.389709][T15489] EXT4-fs: Ignoring removed oldalloc option
[  293.402859][T15472] F2FS-fs (loop3): recover xattr in inode (7), error(0)
[  293.403687][T15489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  293.410557][T15472] F2FS-fs (loop3): set inode (7) has corrupted xattr
[  293.428533][T15472] F2FS-fs (loop3): set inode (7) has corrupted xattr
[  293.432596][T15489] EXT4-fs (loop4): 1 truncate cleaned up
[  293.444338][T15489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  293.474456][T11377] EXT4-fs (loop4): unmounting filesystem.
[  293.484110][T15496] loop8: detected capacity change from 0 to 512
[  293.498373][T15496] EXT4-fs: Ignoring removed nobh option
[  293.531990][T15496] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #3: comm syz.8.6276: corrupted inode contents
[  293.544697][T15496] EXT4-fs error (device loop8): ext4_dirty_inode:6121: inode #3: comm syz.8.6276: mark_inode_dirty error
[  293.556654][T15496] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #3: comm syz.8.6276: corrupted inode contents
[  293.568777][T15496] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #3: comm syz.8.6276: mark_inode_dirty error
[  293.580918][T15496] EXT4-fs error (device loop8): ext4_acquire_dquot:6803: comm syz.8.6276: Failed to acquire dquot type 0
[  293.592924][T15496] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #16: comm syz.8.6276: corrupted inode contents
[  293.605085][T15496] EXT4-fs error (device loop8): ext4_dirty_inode:6121: inode #16: comm syz.8.6276: mark_inode_dirty error
[  293.616884][T15496] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #16: comm syz.8.6276: corrupted inode contents
[  293.629050][T15496] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.6276: mark_inode_dirty error
[  293.640587][T15496] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #16: comm syz.8.6276: corrupted inode contents
[  293.652721][T15496] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[  293.661485][T15496] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #16: comm syz.8.6276: corrupted inode contents
[  293.673925][T15496] EXT4-fs error (device loop8): ext4_truncate:4314: inode #16: comm syz.8.6276: mark_inode_dirty error
[  293.685253][T15496] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[  293.694612][T15496] EXT4-fs (loop8): 1 truncate cleaned up
[  293.700378][T15496] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  293.709497][T15496] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.784370][T15335] EXT4-fs (loop8): unmounting filesystem.
[  293.806415][T15513] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.831794][T15518] loop3: detected capacity change from 0 to 1024
[  293.838663][T15518] EXT4-fs: Ignoring removed orlov option
[  293.850160][T15518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  293.870082][T13940] EXT4-fs (loop3): unmounting filesystem.
[  293.980046][T15541] loop3: detected capacity change from 0 to 512
[  293.992238][T15541] EXT4-fs: Ignoring removed nobh option
[  294.012612][T15541] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.6293: corrupted inode contents
[  294.034509][T15541] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.6293: mark_inode_dirty error
[  294.047589][T15541] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.6293: corrupted inode contents
[  294.059844][T15541] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.6293: mark_inode_dirty error
[  294.071665][T15541] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.6293: Failed to acquire dquot type 0
[  294.083674][T15541] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.6293: corrupted inode contents
[  294.096350][T15541] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.6293: mark_inode_dirty error
[  294.108414][T15541] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.6293: corrupted inode contents
[  294.120674][T15541] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.6293: mark_inode_dirty error
[  294.138287][T15541] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.6293: corrupted inode contents
[  294.152218][T15541] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  294.162434][T15541] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.6293: corrupted inode contents
[  294.176620][T15541] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.6293: mark_inode_dirty error
[  294.188052][T15541] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  294.199084][T15541] EXT4-fs (loop3): 1 truncate cleaned up
[  294.204842][T15541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  294.214051][T15541] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.286950][T13940] EXT4-fs (loop3): unmounting filesystem.
[  294.318517][T15557] syz.6.6300[15557] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  294.318602][T15557] syz.6.6300[15557] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  294.639661][ T9865] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  294.659233][ T9697] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  294.689252][T15569] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  294.699214][T15569] SELinux: failed to load policy
[  294.848542][ T9697] usb 7-1: Using ep0 maxpacket: 32
[  294.854806][ T9865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.865898][ T9865] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  294.877204][ T9865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.886457][ T9697] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf
[  294.895536][ T9697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.904007][ T9865] usb 9-1: config 0 descriptor??
[  294.909128][ T9697] usb 7-1: Product: syz
[  294.913401][ T9697] usb 7-1: Manufacturer: syz
[  294.918781][ T9697] usb 7-1: SerialNumber: syz
[  294.924382][ T9697] usb 7-1: config 0 descriptor??
[  295.000051][T15584] loop3: detected capacity change from 0 to 40427
[  295.008609][T15584] F2FS-fs (loop3): invalid crc value
[  295.015229][T15584] F2FS-fs (loop3): Found nat_bits in checkpoint
[  295.050237][T15584] F2FS-fs (loop3): Start checkpoint disabled!
[  295.057437][T15584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  295.095077][T15584] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  295.111326][ T9865] usbhid 9-1:0.0: can't add hid device: -71
[  295.118223][ T9865] usbhid: probe of 9-1:0.0 failed with error -71
[  295.126029][ T9697] snd-usb-audio: probe of 7-1:0.0 failed with error -71
[  295.136042][ T9697] usb 7-1: USB disconnect, device number 19
[  295.142579][   T43] kworker/u4:2: attempt to access beyond end of device
[  295.142579][   T43] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  295.143754][ T9865] usb 9-1: USB disconnect, device number 9
[  295.288345][   T28] kauditd_printk_skb: 166 callbacks suppressed
[  295.288362][   T28] audit: type=1400 audit(2000000127.361:2602): avc:  denied  { connect } for  pid=15591 comm="syz.3.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  295.317213][   T28] audit: type=1400 audit(2000000127.361:2603): avc:  denied  { shutdown } for  pid=15591 comm="syz.3.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  295.337571][ T1248] Bluetooth: hci0: command 0x1003 tx timeout
[  295.343806][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  295.431564][   T28] audit: type=1400 audit(2000000127.519:2604): avc:  denied  { create } for  pid=15610 comm="syz.1.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  295.476415][   T28] audit: type=1400 audit(2000000127.550:2605): avc:  denied  { write } for  pid=15610 comm="syz.1.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  295.497799][   T28] audit: type=1400 audit(2000000127.550:2606): avc:  denied  { read } for  pid=15610 comm="syz.1.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  295.538273][   T28] audit: type=1326 audit(2000000127.624:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd684d8f6c9 code=0x7ffc0000
[  295.562114][   T28] audit: type=1326 audit(2000000127.624:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd684d8f6c9 code=0x7ffc0000
[  295.586105][   T28] audit: type=1326 audit(2000000127.634:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd684d8f6c9 code=0x7ffc0000
[  295.609657][   T28] audit: type=1326 audit(2000000127.634:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd684d8f6c9 code=0x7ffc0000
[  295.652864][   T28] audit: type=1326 audit(2000000127.634:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd684d8f6c9 code=0x7ffc0000
[  295.703389][T15633] x_tables: duplicate underflow at hook 4
[  295.705790][ T9865] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  295.897851][ T9865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.915390][ T9865] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  295.924493][ T9865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.954132][ T9865] usb 9-1: config 0 descriptor??
[  296.147561][T15643] loop6: detected capacity change from 0 to 40427
[  296.154762][T15643] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  296.162647][T15643] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  296.171994][T15643] F2FS-fs (loop6): invalid crc value
[  296.179152][T15643] F2FS-fs (loop6): Found nat_bits in checkpoint
[  296.224500][T15643] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  296.231703][T15643] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  296.269349][T15643] syz.6.6337: attempt to access beyond end of device
[  296.269349][T15643] loop6: rw=34817, sector=77824, nr_sectors = 32 limit=40427
[  296.342750][ T9865] usbhid 9-1:0.0: can't add hid device: -71
[  296.356010][ T9865] usbhid: probe of 9-1:0.0 failed with error -71
[  296.366010][ T9865] usb 9-1: USB disconnect, device number 10
[  296.391699][   T60] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  296.575772][   T60] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  296.592366][   T60] usb 5-1: config 0 interface 0 has no altsetting 0
[  296.605305][   T60] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  296.614711][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.624662][   T60] usb 5-1: config 0 descriptor??
[  296.630030][T15650] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  296.943906][ T9282] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  297.027897][   T60] ryos 0003:1E7D:3138.0045: unknown main item tag 0x0
[  297.035684][   T60] ryos 0003:1E7D:3138.0045: item fetching failed at offset 3/5
[  297.043934][   T60] ryos 0003:1E7D:3138.0045: parse failed
[  297.051448][   T60] ryos: probe of 0003:1E7D:3138.0045 failed with error -22
[  297.115358][ T9282] usb 4-1: Using ep0 maxpacket: 16
[  297.127846][ T9282] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  297.137035][ T9282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.145683][ T9282] usb 4-1: Product: syz
[  297.149938][ T9282] usb 4-1: Manufacturer: syz
[  297.154614][ T9282] usb 4-1: SerialNumber: syz
[  297.164063][ T9282] usb 4-1: config 0 descriptor??
[  297.183007][ T9282] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[  297.233804][ T9697] usb 5-1: USB disconnect, device number 30
[  297.273817][T15679] loop8: detected capacity change from 0 to 256
[  297.288749][T15679] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  297.300098][T15679] FAT-fs (loop8): Filesystem has been set read-only
[  297.307206][T15679] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  297.317476][T15679] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  297.327939][T15679] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  297.363466][T15681] loop8: detected capacity change from 0 to 128
[  297.365917][ T9282] usb 4-1: USB disconnect, device number 26
[  297.813852][T15718] tipc: Started in network mode
[  297.818944][T15718] tipc: Node identity 1, cluster identity 4711
[  297.825335][T15718] tipc: Node number set to 1
[  297.860554][ T9282] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  297.891338][T15727] 9pnet: p9_errstr2errno: server reported unknown error �@00000000000000000000004D��0xffffffffffffffff
[  298.048885][ T9282] usb 9-1: Using ep0 maxpacket: 32
[  298.055193][ T9282] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.066412][ T9282] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.080259][ T9282] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  298.090022][ T9282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.099160][ T9282] usb 9-1: config 0 descriptor??
[  298.239391][ T2266] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  298.411235][ T9865] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  298.431105][ T2266] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.441152][ T2266] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  298.454554][ T2266] usb 4-1: config 0 interface 0 has no altsetting 0
[  298.461257][ T2266] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  298.470452][ T2266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.479360][ T2266] usb 4-1: config 0 descriptor??
[  298.490748][ T9282] savu 0003:1E7D:2D5A.0046: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  298.582440][ T9865] usb 5-1: Using ep0 maxpacket: 16
[  298.590482][ T9865] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  298.599719][ T9865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.608197][ T9865] usb 5-1: Product: syz
[  298.612522][ T9865] usb 5-1: Manufacturer: syz
[  298.617267][ T9865] usb 5-1: SerialNumber: syz
[  298.622838][ T9865] usb 5-1: config 0 descriptor??
[  298.628708][ T9865] ums-onetouch 5-1:0.0: USB Mass Storage device detected
[  298.714685][T15755] loop6: detected capacity change from 0 to 16
[  298.721682][T15755] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[  298.761945][ T9865] usb 9-1: USB disconnect, device number 11
[  298.825569][ T9282] usb 5-1: USB disconnect, device number 31
[  298.869417][ T2266] nintendo 0003:057E:2009.0047: unknown main item tag 0x0
[  298.876712][ T2266] nintendo 0003:057E:2009.0047: unknown main item tag 0x0
[  298.884038][ T2266] nintendo 0003:057E:2009.0047: unknown main item tag 0x0
[  298.892640][ T2266] nintendo 0003:057E:2009.0047: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0
[  298.963705][ T2266] nintendo 0003:057E:2009.0047: failed reading SPI flash; ret=-38
[  298.971701][ T2266] nintendo 0003:057E:2009.0047: using factory cal for left stick
[  298.979637][ T2266] nintendo 0003:057E:2009.0047: failed reading SPI flash; ret=-38
[  298.987622][ T2266] nintendo 0003:057E:2009.0047: using factory cal for right stick
[  298.995510][ T2266] nintendo 0003:057E:2009.0047: failed reading SPI flash; ret=-38
[  299.003486][ T2266] nintendo 0003:057E:2009.0047: Failed to read left stick cal, using defaults; e=-38
[  299.013148][ T2266] nintendo 0003:057E:2009.0047: failed reading SPI flash; ret=-38
[  299.021205][ T2266] nintendo 0003:057E:2009.0047: Failed to read right stick cal, using defaults; e=-38
[  299.032052][ T2266] nintendo 0003:057E:2009.0047: failed reading SPI flash; ret=-38
[  299.039927][ T2266] nintendo 0003:057E:2009.0047: using factory cal for IMU
[  299.047208][ T2266] nintendo 0003:057E:2009.0047: failed reading SPI flash; ret=-38
[  299.057178][ T2266] nintendo 0003:057E:2009.0047: Failed to read IMU cal, using defaults; ret=-38
[  299.067054][ T2266] nintendo 0003:057E:2009.0047: Unable to read IMU calibration data
[  299.075164][ T2266] nintendo 0003:057E:2009.0047: Failed to set report mode; ret=-38
[  299.083259][ T2266] nintendo 0003:057E:2009.0047: Failed to initialize controller; ret=-38
[  299.106325][ T2266] nintendo 0003:057E:2009.0047: probe - fail = -38
[  299.112905][ T2266] nintendo: probe of 0003:057E:2009.0047 failed with error -38
[  299.122507][ T2266] usb 4-1: USB disconnect, device number 27
[  299.581246][T15762] loop8: detected capacity change from 0 to 512
[  299.673883][T15776] loop4: detected capacity change from 0 to 1024
[  299.685960][T15762] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  299.710070][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6396'.
[  299.737582][T15776] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  299.746845][T15335] EXT4-fs (loop8): unmounting filesystem.
[  299.764647][T15784] device veth3 entered promiscuous mode
[  299.809700][T11377] EXT4-fs (loop4): unmounting filesystem.
[  309.996218][   T28] kauditd_printk_skb: 32 callbacks suppressed
[  309.996236][   T28] audit: type=1400 audit(2000000142.804:2644): avc:  denied  { mounton } for  pid=15805 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  310.041689][T15805] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.049028][T15805] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.056616][T15805] device bridge_slave_0 entered promiscuous mode
[  310.066474][T15805] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.073570][T15805] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.080974][T15805] device bridge_slave_1 entered promiscuous mode
[  310.133740][T15805] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.140839][T15805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.148116][T15805] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.155135][T15805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.178179][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  310.186595][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.193983][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.203243][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  310.211774][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.218831][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.229374][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  310.237693][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.244745][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.257113][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  310.266953][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  310.283923][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  310.296284][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  310.304486][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  310.312460][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  310.320980][T15805] device veth0_vlan entered promiscuous mode
[  310.333783][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  310.343308][T15805] device veth1_macvtap entered promiscuous mode
[  310.353565][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  310.363978][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  310.381833][   T28] audit: type=1400 audit(2000000143.203:2645): avc:  denied  { mounton } for  pid=15805 comm="syz-executor" path="/root/syzkaller.DaCGgB/syz-tmp" dev="sda1" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  310.406982][   T28] audit: type=1400 audit(2000000143.203:2646): avc:  denied  { mount } for  pid=15805 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  310.429418][   T28] audit: type=1400 audit(2000000143.203:2647): avc:  denied  { mount } for  pid=15805 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  310.476441][   T28] audit: type=1400 audit(2000000143.203:2648): avc:  denied  { mounton } for  pid=15805 comm="syz-executor" path="/root/syzkaller.DaCGgB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  310.492295][T15826] loop4: detected capacity change from 0 to 512
[  310.534241][T15832] loop6: detected capacity change from 0 to 1024
[  310.557392][   T28] audit: type=1400 audit(2000000143.203:2649): avc:  denied  { mounton } for  pid=15805 comm="syz-executor" path="/root/syzkaller.DaCGgB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=87136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  310.580106][T15826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  310.592051][   T28] audit: type=1400 audit(2000000143.234:2650): avc:  denied  { mounton } for  pid=15805 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  310.602935][T15826] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.623994][   T28] audit: type=1400 audit(2000000143.287:2651): avc:  denied  { read } for  pid=15817 comm="syz.3.6410" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  310.656316][T15843] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6418'.
[  310.667483][T15832] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  310.691711][T11377] EXT4-fs (loop4): unmounting filesystem.
[  310.698274][   T28] audit: type=1400 audit(2000000143.287:2652): avc:  denied  { open } for  pid=15817 comm="syz.3.6410" path="/140/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  310.728893][T12766] EXT4-fs (loop6): unmounting filesystem.
[  310.734096][   T28] audit: type=1400 audit(2000000143.297:2653): avc:  denied  { watch } for  pid=15815 comm="syz.6.6407" path="/279/file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  310.771704][   T10] device bridge_slave_1 left promiscuous mode
[  310.778072][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.803621][   T10] device bridge_slave_0 left promiscuous mode
[  310.809973][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.837250][   T10] device veth1_macvtap left promiscuous mode
[  310.847334][T15864] loop2: detected capacity change from 0 to 2048
[  310.847841][   T10] device veth0_vlan left promiscuous mode
[  310.881860][T15864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  310.976953][T15864] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6427: bg 0: block 234: padding at end of block bitmap is not set
[  310.991935][T15864] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2002 with error 117
[  311.004637][T15864] EXT4-fs (loop2): This should not happen!! Data will be lost
[  311.004637][T15864] 
[  311.052900][T15890] loop7: detected capacity change from 0 to 7
[  311.071527][  T398] loop: Write error at byte offset 4, length 3584.
[  311.078126][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  311.087584][    C0] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  311.099212][ T9282] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  311.113010][  T398] loop: Write error at byte offset 4, length 3584.
[  311.122759][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  311.127606][ T9865] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  311.132239][    C0] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  311.149883][T15805] EXT4-fs (loop2): unmounting filesystem.
[  311.217093][T15902] loop2: detected capacity change from 0 to 2048
[  311.236182][T15902] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  311.244804][T15902] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.268820][T15805] EXT4-fs (loop2): unmounting filesystem.
[  311.319230][ T9282] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  311.335875][ T9282] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  311.345180][ T9282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  311.346616][ T9865] usb 9-1: Using ep0 maxpacket: 16
[  311.367846][ T9865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.373910][ T9282] usb 5-1: SerialNumber: syz
[  311.399684][ T9865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.412192][ T9865] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  311.426389][ T9865] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  311.445660][ T9865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.455958][ T9865] usb 9-1: config 0 descriptor??
[  311.514266][T15922] loop6: detected capacity change from 0 to 2048
[  311.549361][T15922] Alternate GPT is invalid, using primary GPT.
[  311.555703][T15922]  loop6: p2 p3 p7
[  311.854694][ T9865] microsoft 0003:045E:07DA.0048: ignoring exceeding usage max
[  311.865521][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.873079][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.880406][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.887803][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.895215][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.902621][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.910002][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.917604][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.924956][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.932452][ T9865] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  311.945918][ T9865] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0048/input/input62
[  311.967039][ T9282] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[  312.033560][ T9865] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  312.048274][ T9865] usb 9-1: USB disconnect, device number 12
[  312.353685][ T9865] usb 5-1: USB disconnect, device number 32
[  312.360225][ T9865] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
[  312.777582][T15972] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  312.823117][ T9280] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  312.984434][T15996] device wireguard0 entered promiscuous mode
[  312.994964][ T9280] usb 9-1: Using ep0 maxpacket: 32
[  313.001695][ T9280] usb 9-1: config 2 has an invalid interface number: 88 but max is 0
[  313.013937][ T9280] usb 9-1: config 2 has no interface number 0
[  313.022299][ T9280] usb 9-1: config 2 interface 88 has no altsetting 0
[  313.033885][ T9280] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  313.046927][T16004] loop4: detected capacity change from 0 to 128
[  313.053304][ T9280] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.053334][ T9280] usb 9-1: Product: syz
[  313.053348][ T9280] usb 9-1: Manufacturer: syz
[  313.053364][ T9280] usb 9-1: SerialNumber: syz
[  313.077923][T16004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  313.087257][T16004] ext4 filesystem being mounted at /366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  313.155217][T11377] EXT4-fs (loop4): unmounting filesystem.
[  313.208700][T16018] tap0: tun_chr_ioctl cmd 1074025675
[  313.214422][T16018] tap0: persist enabled
[  313.247047][T16026] loop2: detected capacity change from 0 to 1024
[  313.254380][T16026] EXT4-fs: Ignoring removed bh option
[  313.273077][T16026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  313.310679][T15805] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 18: block 81:freeing already freed block (bit 5); block bitmap corrupt.
[  313.325543][T15805] EXT4-fs (loop2): Remounting filesystem read-only
[  313.334547][T15805] EXT4-fs (loop2): unmounting filesystem.
[  313.361660][T16043] loop9: detected capacity change from 0 to 7
[  313.405822][T16047] xt_connbytes: Forcing CT accounting to be enabled
[  313.443477][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  313.846438][T16074] netlink: 'syz.3.6514': attribute type 6 has an invalid length.
[  314.009474][T16088] device batadv_slave_1 entered promiscuous mode
[  314.017247][T16086] device batadv_slave_1 left promiscuous mode
[  314.027731][ T9280] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  314.041430][ T9280] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  314.059061][ T9280] asix: probe of 9-1:2.88 failed with error -71
[  314.075162][ T9280] usb 9-1: USB disconnect, device number 13
[  314.191796][T16090] loop3: detected capacity change from 0 to 40427
[  314.200322][T16090] F2FS-fs (loop3): invalid crc value
[  314.206683][T16090] F2FS-fs (loop3): Found nat_bits in checkpoint
[  314.244755][T16090] F2FS-fs (loop3): Start checkpoint disabled!
[  314.258222][T16090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  314.269057][T16108] loop4: detected capacity change from 0 to 512
[  314.283683][T16108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  314.305443][T11377] EXT4-fs (loop4): unmounting filesystem.
[  314.322169][   T10] kworker/u4:1: attempt to access beyond end of device
[  314.322169][   T10] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  314.376838][T16116] incfs: Options parsing error. -22
[  314.382155][T16116] incfs: mount failed -22
[  314.511644][T16136] loop3: detected capacity change from 0 to 2048
[  314.544157][T16136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  314.582542][T13940] EXT4-fs (loop3): unmounting filesystem.
[  314.600257][T16144] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6545'.
[  314.663366][T16150] loop2: detected capacity change from 0 to 512
[  314.695953][T16150] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.6547: casefold flag without casefold feature
[  314.733177][T16150] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.6547: couldn't read orphan inode 15 (err -117)
[  314.754744][T16158] loop3: detected capacity change from 0 to 128
[  314.761350][T16150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  314.781187][T16158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  314.801660][T15805] EXT4-fs (loop2): unmounting filesystem.
[  314.804843][T16142] loop8: detected capacity change from 0 to 40427
[  314.814979][T16142] F2FS-fs (loop8): fault_injection options not supported
[  314.830346][T16158] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  314.830568][T16142] F2FS-fs (loop8): invalid crc value
[  314.864553][T16142] F2FS-fs (loop8): Found nat_bits in checkpoint
[  314.881330][T13940] EXT4-fs (loop3): unmounting filesystem.
[  314.906852][T16175] loop2: detected capacity change from 0 to 2048
[  314.927110][T16179] device erspan0 entered promiscuous mode
[  314.928628][T16142] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  314.953302][T16185] loop3: detected capacity change from 0 to 512
[  314.968077][T16175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  314.977766][   T28] kauditd_printk_skb: 140 callbacks suppressed
[  314.977783][   T28] audit: type=1400 audit(2000000148.032:2794): avc:  denied  { write } for  pid=16187 comm="syz.6.6562" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  315.007519][   T28] audit: type=1400 audit(2000000148.032:2795): avc:  denied  { lock } for  pid=16174 comm="syz.2.6557" path="/33/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  315.039864][T15805] EXT4-fs (loop2): unmounting filesystem.
[  315.045868][   T28] audit: type=1400 audit(2000000148.032:2796): avc:  denied  { link } for  pid=16174 comm="syz.2.6557" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  315.070022][T16185] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  315.089462][T16185] EXT4-fs (loop3): orphan cleanup on readonly fs
[  315.103947][T16185] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  315.115054][T16185] EXT4-fs warning (device loop3): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  315.129787][T16185] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  315.144659][T16185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6561: bg 0: block 40: padding at end of block bitmap is not set
[  315.175949][T16185] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  315.190384][T16185] EXT4-fs (loop3): 1 truncate cleaned up
[  315.194678][T16204] loop8: detected capacity change from 0 to 2048
[  315.203496][T16185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  315.203517][T16204] EXT4-fs (loop8): Test dummy encryption mode enabled
[  315.222357][T16204] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  315.231461][   T28] audit: type=1400 audit(2000000148.284:2797): avc:  denied  { read } for  pid=16183 comm="syz.3.6561" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  315.252586][ T2266] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  315.260624][T13940] EXT4-fs (loop3): unmounting filesystem.
[  315.266708][   T28] audit: type=1400 audit(2000000148.326:2798): avc:  denied  { read write } for  pid=16205 comm="syz.2.6570" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  315.291552][   T28] audit: type=1400 audit(2000000148.326:2799): avc:  denied  { open } for  pid=16205 comm="syz.2.6570" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  315.292191][T15335] EXT4-fs (loop8): unmounting filesystem.
[  315.336438][   T28] audit: type=1400 audit(2000000148.410:2800): avc:  denied  { create } for  pid=16212 comm="syz.4.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  315.356195][   T28] audit: type=1400 audit(2000000148.410:2801): avc:  denied  { setopt } for  pid=16212 comm="syz.4.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  315.381308][   T28] audit: type=1400 audit(2000000148.410:2802): avc:  denied  { write } for  pid=16212 comm="syz.4.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  315.388555][T16211] loop3: detected capacity change from 0 to 2048
[  315.439471][ T2266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.456057][T16211]  loop3: p2 p3 p7
[  315.459885][ T2266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.484246][ T2266] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  315.497538][ T2266] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  315.506873][ T2266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.516933][ T2266] usb 7-1: config 0 descriptor??
[  315.692823][T16223] loop4: detected capacity change from 0 to 40427
[  315.707519][T16223] F2FS-fs (loop4): Found nat_bits in checkpoint
[  315.770893][T16225] loop2: detected capacity change from 0 to 40427
[  315.781790][T16225] F2FS-fs (loop2): Invalid segment/section count (31, 0 x 1)
[  315.793035][T16225] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  315.801738][T16223] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  315.814701][T16225] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (0, 24)
[  315.823014][T16225] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  315.834171][T11377] syz-executor: attempt to access beyond end of device
[  315.834171][T11377] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  315.907748][ T2266] plantronics 0003:047F:FFFF.0049: unbalanced collection at end of report description
[  315.929143][ T2266] plantronics 0003:047F:FFFF.0049: parse failed
[  315.935451][ T2266] plantronics: probe of 0003:047F:FFFF.0049 failed with error -22
[  315.969028][T16257] bridge0: port 3(gretap0) entered blocking state
[  315.975530][T16257] bridge0: port 3(gretap0) entered disabled state
[  315.982583][T16257] device gretap0 entered promiscuous mode
[  315.988457][T16257] bridge0: port 3(gretap0) entered blocking state
[  315.994880][T16257] bridge0: port 3(gretap0) entered forwarding state
[  316.104435][ T9280] usb 7-1: USB disconnect, device number 20
[  316.157048][  T291] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  316.195589][T16265] loop4: detected capacity change from 0 to 40427
[  316.202730][T16265] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  316.207505][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6594'.
[  316.214939][T16265] F2FS-fs (loop4): invalid crc value
[  316.227628][T16265] F2FS-fs (loop4): Found nat_bits in checkpoint
[  316.269599][T16265] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  316.285251][T16265] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  316.292286][T16278] SELinux: failed to load policy
[  316.301646][T11377] syz-executor: attempt to access beyond end of device
[  316.301646][T11377] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  316.338167][  T291] usb 4-1: Using ep0 maxpacket: 32
[  316.346656][  T291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.358189][  T291] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.369494][  T291] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.380474][  T291] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  316.393599][  T291] usb 4-1: config 0 interface 0 has no altsetting 0
[  316.400292][  T291] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  316.409452][  T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.421074][  T291] usb 4-1: config 0 descriptor??
[  316.496340][T16293] loop2: detected capacity change from 0 to 256
[  316.690572][ T9697] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  316.813744][  T291] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0
[  316.821848][  T291] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0
[  316.829938][  T291] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0
[  316.837946][  T291] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0
[  316.845994][  T291] hid-thrustmaster 0003:044F:B65D.004A: unknown main item tag 0x0
[  316.855299][  T291] hid-thrustmaster 0003:044F:B65D.004A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  316.867652][  T291] hid-thrustmaster 0003:044F:B65D.004A: Wrong number of endpoints?
[  316.872652][ T9697] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.885845][ T9697] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  316.895620][ T9697] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  316.904852][ T9697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  316.912998][ T9697] usb 5-1: SerialNumber: syz
[  316.947680][ T9865] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  317.015995][    C0] hid-thrustmaster 0003:044F:B65D.004A: Unknown packet type 0x0, unable to proceed further with wheel init
[  317.111299][ T9697] usb 5-1: 0:2 : does not exist
[  317.120282][ T9697] usb 5-1: USB disconnect, device number 33
[  317.120361][ T9865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.139077][ T9865] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  317.149421][ T9865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.158564][ T9865] usb 3-1: config 0 descriptor??
[  317.215327][  T291] usb 4-1: USB disconnect, device number 28
[  317.549128][ T9865] keytouch 0003:0926:3333.004B: fixing up Keytouch IEC report descriptor
[  317.570774][ T9865] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.004B/input/input63
[  317.670723][ T9865] keytouch 0003:0926:3333.004B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  317.694150][T16367] loop8: detected capacity change from 0 to 512
[  317.704048][T16367] EXT4-fs: Ignoring removed oldalloc option
[  317.734491][T16367] EXT4-fs (loop8): 1 truncate cleaned up
[  317.748619][T16367] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  317.760445][T16312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.772460][T16312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.798900][T15335] EXT4-fs (loop8): unmounting filesystem.
[  317.806859][    C1] Mem-Info:
[  317.810032][    C1] active_anon:4446 inactive_anon:642 isolated_anon:0
[  317.810032][    C1]  active_file:25917 inactive_file:2719 isolated_file:0
[  317.810032][    C1]  unevictable:0 dirty:306 writeback:0
[  317.810032][    C1]  slab_reclaimable:7433 slab_unreclaimable:77457
[  317.810032][    C1]  mapped:28965 shmem:228 pagetables:558
[  317.810032][    C1]  sec_pagetables:0 bounce:0
[  317.810032][    C1]  kernel_misc_reclaimable:0
[  317.810032][    C1]  free:1499774 free_pcp:9625 free_cma:0
[  317.854922][    C1] Node 0 active_anon:19184kB inactive_anon:2568kB active_file:103668kB inactive_file:10876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115860kB dirty:1224kB writeback:0kB shmem:912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:6108kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no
[  317.887487][    C1] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974188kB mlocked:0kB bounce:0kB free_pcp:5656kB local_pcp:0kB free_cma:0kB
[  317.915520][    C1] lowmem_reserve[]: 0 3932 3932 3932
[  317.920876][    C1] Normal free:3030564kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:21084kB inactive_anon:2568kB active_file:103668kB inactive_file:10876kB unevictable:0kB writepending:1224kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:29520kB local_pcp:12804kB free_cma:0kB
[  317.951155][    C1] lowmem_reserve[]: 0 0 0 0
[  317.955706][    C1] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB
[  317.971176][    C1] Normal: 299*4kB (UE) 1605*8kB (UME) 809*16kB (UME) 1612*32kB (UME) 751*64kB (UME) 111*128kB (UME) 80*256kB (UME) 40*512kB (UME) 22*1024kB (M) 10*2048kB (UM) 685*4096kB (UM) = 3030564kB
[  317.989675][    C1] 29501 total pagecache pages
[  317.994381][    C1] 670 pages in swap cache
[  317.998708][    C1] Free swap  = 121636kB
[  318.002857][    C1] Total swap = 124996kB
[  318.007006][    C1] 2097051 pages RAM
[  318.010808][    C1] 0 pages HighMem/MovableOnly
[  318.015475][    C1] 346840 pages reserved
[  318.019629][    C1] 0 pages cma reserved
[  318.249608][T16394] netlink: 'syz.3.6646': attribute type 6 has an invalid length.
[  318.289167][T16398] mmap: syz.3.6648 (16398): VmData 29069312 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  318.332959][ T9282] usb 3-1: USB disconnect, device number 15
[  318.467839][T16412] loop6: detected capacity change from 0 to 1024
[  318.493206][T16412] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  318.539424][T12766] EXT4-fs (loop6): unmounting filesystem.
[  318.681861][T16424] loop3: detected capacity change from 0 to 128
[  318.740230][T16422] loop6: detected capacity change from 0 to 40427
[  318.744395][T16424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  318.756924][T16422] F2FS-fs (loop6): invalid crc value
[  318.761628][T16424] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  318.773305][T16422] F2FS-fs (loop6): Found nat_bits in checkpoint
[  318.789152][T16432] loop4: detected capacity change from 0 to 512
[  318.796321][T16432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  318.813211][T16422] F2FS-fs (loop6): Start checkpoint disabled!
[  318.820617][T16422] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  318.822448][T16432] EXT4-fs (loop4): 1 truncate cleaned up
[  318.830228][T13940] EXT4-fs (loop3): unmounting filesystem.
[  318.839849][T16432] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  318.857306][T16436] loop3: detected capacity change from 0 to 128
[  318.864908][T16436] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  318.923848][T11377] EXT4-fs (loop4): unmounting filesystem.
[  318.983558][T16452] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  319.008829][T16455] netlink: 'syz.4.6672': attribute type 7 has an invalid length.
[  319.026114][ T9865] hid-generic 0000:0004:0000.004C: unknown main item tag 0x0
[  319.036086][T16455] netlink: 'syz.4.6672': attribute type 8 has an invalid length.
[  319.043953][ T9865] hid-generic 0000:0004:0000.004C: unknown main item tag 0x0
[  319.051648][ T9865] hid-generic 0000:0004:0000.004C: unknown main item tag 0x0
[  319.059557][T16455] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6672'.
[  319.069280][ T9865] hid-generic 0000:0004:0000.004C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  319.223547][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  319.815628][T16480] loop2: detected capacity change from 0 to 131072
[  319.822769][T16480] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  319.829517][T16480] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  319.837912][ T9282] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  319.846042][T16480] F2FS-fs (loop2): invalid crc value
[  319.853354][T16480] F2FS-fs (loop2): Found nat_bits in checkpoint
[  319.895895][T16480] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  319.903046][T16480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  319.958603][   T28] kauditd_printk_skb: 627 callbacks suppressed
[  319.958619][   T28] audit: type=1400 audit(2000000153.270:3430): avc:  denied  { remove_name } for  pid=16479 comm="syz.2.6683" name="file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  319.988479][T16480] F2FS-fs (loop2): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:10232
[  320.016405][ T9282] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  320.034285][ T9282] usb 4-1: config 0 interface 0 has no altsetting 0
[  320.040945][ T9282] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  320.045228][T16494] loop6: detected capacity change from 0 to 128
[  320.050166][   T28] audit: type=1400 audit(2000000153.270:3431): avc:  denied  { unlink } for  pid=16479 comm="syz.2.6683" name="file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  320.080339][T16494] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  320.091572][ T9282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.096911][T16494] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  320.100354][ T9282] usb 4-1: config 0 descriptor??
[  320.142116][   T28] audit: type=1400 audit(2000000153.312:3432): avc:  denied  { append } for  pid=16479 comm="syz.2.6683" path="/57/file0/blkio.bfq.io_serviced_recursive" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  320.168505][T12766] EXT4-fs (loop6): unmounting filesystem.
[  320.187139][   T28] audit: type=1400 audit(2000000153.501:3433): avc:  denied  { mount } for  pid=16496 comm="syz.6.6689" name="/" dev="incremental-fs" ino=1820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  320.201503][T16461] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  320.236926][   T28] audit: type=1400 audit(2000000153.512:3434): avc:  denied  { ioctl } for  pid=16498 comm="syz.8.6690" path="socket:[89662]" dev="sockfs" ino=89662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  320.262693][   T28] audit: type=1400 audit(2000000153.512:3435): avc:  denied  { remount } for  pid=16496 comm="syz.6.6689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  320.283494][   T28] audit: type=1400 audit(2000000153.543:3436): avc:  denied  { create } for  pid=16500 comm="syz.8.6692" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  320.305124][   T28] audit: type=1400 audit(2000000153.554:3437): avc:  denied  { ioctl } for  pid=16500 comm="syz.8.6692" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=89670 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  320.331795][   T28] audit: type=1400 audit(2000000153.554:3438): avc:  denied  { read } for  pid=16500 comm="syz.8.6692" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=89670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  320.356644][   T28] audit: type=1400 audit(2000000153.554:3439): avc:  denied  { unmount } for  pid=12766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  320.420586][T16509] loop6: detected capacity change from 0 to 128
[  320.435746][T16509] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  320.444652][T16509] ext4 filesystem being mounted at /349/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  320.470196][T12766] EXT4-fs (loop6): unmounting filesystem.
[  320.625174][ T9282] ryos 0003:1E7D:3138.004D: unknown main item tag 0x0
[  320.632216][ T9282] ryos 0003:1E7D:3138.004D: item fetching failed at offset 3/5
[  320.640011][ T9282] ryos 0003:1E7D:3138.004D: parse failed
[  320.645833][ T9282] ryos: probe of 0003:1E7D:3138.004D failed with error -22
[  320.748380][ T9865] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  320.835329][ T9280] usb 4-1: USB disconnect, device number 29
[  320.920894][ T9865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.932069][ T9865] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  320.941353][ T9865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.950026][ T9865] usb 7-1: config 0 descriptor??
[  321.157991][ T1249] Bluetooth: hci0: command 0x1003 tx timeout
[  321.159546][T15595] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  321.170430][T16478] Bluetooth: hci0: Opcode 0x080f failed: -22
[  321.338389][ T9865] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor
[  321.347429][T16538] loop3: detected capacity change from 0 to 512
[  321.354496][T16538] FAT-fs (loop3): bogus logical sector size 63488
[  321.355435][ T9865] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.004E/input/input64
[  321.361111][T16538] FAT-fs (loop3): Can't find a valid FAT filesystem
[  321.434284][T16542] loop3: detected capacity change from 0 to 16
[  321.441058][ T9865] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  321.441284][T16542] erofs: (device loop3): mounted with root inode @ nid 36.
[  321.476059][T16542] syz.3.6709: attempt to access beyond end of device
[  321.476059][T16542] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16
[  321.492169][T16542] syz.3.6709: attempt to access beyond end of device
[  321.492169][T16542] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16
[  321.740712][T16573] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  321.808189][T16580] loop2: detected capacity change from 0 to 1024
[  321.815158][T16580] EXT4-fs: Ignoring removed bh option
[  321.821514][T16580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  321.838752][ T9865] usb 7-1: USB disconnect, device number 21
[  321.851338][T16580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  321.863886][T16580] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  321.898666][T15805] EXT4-fs (loop2): unmounting filesystem.
[  322.087222][T16585] loop8: detected capacity change from 0 to 40427
[  322.094573][T16585] F2FS-fs (loop8): fault_injection options not supported
[  322.101740][T16585] F2FS-fs (loop8): fault_type options not supported
[  322.109277][T16585] F2FS-fs (loop8): invalid crc value
[  322.122139][T16585] F2FS-fs (loop8): Found nat_bits in checkpoint
[  322.150289][  T291] ==================================================================
[  322.158417][  T291] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[  322.165484][  T291] Write of size 8 at addr ffff88812a2c4a00 by task kworker/0:2/291
[  322.173412][  T291] 
[  322.175767][  T291] CPU: 0 PID: 291 Comm: kworker/0:2 Not tainted syzkaller #0
[  322.183346][  T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  322.193438][  T291] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  322.199854][  T291] Call Trace:
[  322.203142][  T291]  <TASK>
[  322.206099][  T291]  __dump_stack+0x21/0x24
[  322.210431][  T291]  dump_stack_lvl+0xee/0x150
[  322.215113][  T291]  ? __cfi_dump_stack_lvl+0x8/0x8
[  322.220398][  T291]  ? debug_smp_processor_id+0x17/0x20
[  322.225782][  T291]  ? enqueue_timer+0xae/0x480
[  322.230490][  T291]  print_address_description+0x71/0x200
[  322.236075][  T291]  print_report+0x4a/0x60
[  322.240407][  T291]  kasan_report+0x122/0x150
[  322.244911][  T291]  ? enqueue_timer+0xae/0x480
[  322.249602][  T291]  __asan_report_store8_noabort+0x17/0x20
[  322.255315][  T291]  enqueue_timer+0xae/0x480
[  322.259908][  T291]  __mod_timer+0x79f/0xb30
[  322.264499][  T291]  mod_timer+0x1f/0x30
[  322.268569][  T291]  ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0
[  322.275943][  T291]  wg_timers_any_authenticated_packet_traversal+0x133/0x1a0
[  322.283343][  T291]  wg_packet_tx_worker+0x15e/0x4e0
[  322.288498][  T291]  process_one_work+0x71f/0xc40
[  322.293384][  T291]  worker_thread+0xa29/0x11f0
[  322.298063][  T291]  ? _raw_spin_lock_irqsave+0xb0/0x110
[  322.303525][  T291]  kthread+0x281/0x320
[  322.307596][  T291]  ? __cfi_worker_thread+0x10/0x10
[  322.312702][  T291]  ? __cfi_kthread+0x10/0x10
[  322.317285][  T291]  ret_from_fork+0x1f/0x30
[  322.321719][  T291]  </TASK>
[  322.324739][  T291] 
[  322.327061][  T291] Allocated by task 16478:
[  322.331481][  T291]  kasan_set_track+0x4b/0x70
[  322.336075][  T291]  kasan_save_alloc_info+0x25/0x30
[  322.341226][  T291]  __kasan_kmalloc+0x95/0xb0
[  322.345834][  T291]  __kmalloc+0xb1/0x1e0
[  322.349991][  T291]  hci_alloc_dev_priv+0x27/0x1bd0
[  322.355067][  T291]  hci_uart_tty_ioctl+0x3d6/0xa20
[  322.360106][  T291]  tty_ioctl+0x8ef/0xc60
[  322.364359][  T291]  __se_sys_ioctl+0x12f/0x1b0
[  322.369058][  T291]  __x64_sys_ioctl+0x7b/0x90
[  322.373640][  T291]  x64_sys_call+0x58b/0x9a0
[  322.378139][  T291]  do_syscall_64+0x4c/0xa0
[  322.382551][  T291]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.388458][  T291] 
[  322.390775][  T291] Freed by task 16478:
[  322.394831][  T291]  kasan_set_track+0x4b/0x70
[  322.399412][  T291]  kasan_save_free_info+0x31/0x50
[  322.404434][  T291]  ____kasan_slab_free+0x132/0x180
[  322.409542][  T291]  __kasan_slab_free+0x11/0x20
[  322.414300][  T291]  slab_free_freelist_hook+0xc2/0x190
[  322.419674][  T291]  __kmem_cache_free+0xb7/0x1b0
[  322.424520][  T291]  kfree+0x6f/0xf0
[  322.428255][  T291]  hci_release_dev+0x12a3/0x13b0
[  322.433203][  T291]  bt_host_release+0x82/0x90
[  322.437790][  T291]  device_release+0xa4/0x1d0
[  322.442372][  T291]  kobject_put+0x19d/0x280
[  322.446789][  T291]  put_device+0x1f/0x30
[  322.450942][  T291]  hci_dev_cmd+0x265/0x720
[  322.455347][  T291]  hci_sock_ioctl+0x41e/0x7f0
[  322.460052][  T291]  sock_do_ioctl+0x101/0x310
[  322.464657][  T291]  sock_ioctl+0x4d8/0x6e0
[  322.468981][  T291]  __se_sys_ioctl+0x12f/0x1b0
[  322.473660][  T291]  __x64_sys_ioctl+0x7b/0x90
[  322.478263][  T291]  x64_sys_call+0x58b/0x9a0
[  322.482775][  T291]  do_syscall_64+0x4c/0xa0
[  322.487191][  T291]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.493178][  T291] 
[  322.495496][  T291] Last potentially related work creation:
[  322.501231][  T291]  kasan_save_stack+0x3a/0x60
[  322.505998][  T291]  __kasan_record_aux_stack+0xb6/0xc0
[  322.511371][  T291]  kasan_record_aux_stack_noalloc+0xb/0x10
[  322.517184][  T291]  insert_work+0x51/0x300
[  322.521505][  T291]  __queue_work+0x9b1/0xd30
[  322.526029][  T291]  queue_work_on+0xd2/0x140
[  322.530530][  T291]  __hci_cmd_sync_sk+0xa3e/0xcf0
[  322.535469][  T291]  hci_cmd_sync_status+0x53/0x120
[  322.540490][  T291]  hci_dev_cmd+0x628/0x720
[  322.544902][  T291]  hci_sock_ioctl+0x41e/0x7f0
[  322.549575][  T291]  sock_do_ioctl+0x101/0x310
[  322.554166][  T291]  sock_ioctl+0x4d8/0x6e0
[  322.558491][  T291]  __se_sys_ioctl+0x12f/0x1b0
[  322.563171][  T291]  __x64_sys_ioctl+0x7b/0x90
[  322.567760][  T291]  x64_sys_call+0x58b/0x9a0
[  322.572279][  T291]  do_syscall_64+0x4c/0xa0
[  322.576690][  T291]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.582579][  T291] 
[  322.585048][  T291] Second to last potentially related work creation:
[  322.591636][  T291]  kasan_save_stack+0x3a/0x60
[  322.596322][  T291]  __kasan_record_aux_stack+0xb6/0xc0
[  322.601791][  T291]  kasan_record_aux_stack_noalloc+0xb/0x10
[  322.607614][  T291]  insert_work+0x51/0x300
[  322.611953][  T291]  __queue_work+0x9b1/0xd30
[  322.616508][  T291]  queue_work_on+0xd2/0x140
[  322.621063][  T291]  hci_cmd_timeout+0x191/0x200
[  322.625850][  T291]  process_one_work+0x71f/0xc40
[  322.630723][  T291]  worker_thread+0xa29/0x11f0
[  322.635440][  T291]  kthread+0x281/0x320
[  322.639521][  T291]  ret_from_fork+0x1f/0x30
[  322.644037][  T291] 
[  322.646356][  T291] The buggy address belongs to the object at ffff88812a2c4000
[  322.646356][  T291]  which belongs to the cache kmalloc-8k of size 8192
[  322.660400][  T291] The buggy address is located 2560 bytes inside of
[  322.660400][  T291]  8192-byte region [ffff88812a2c4000, ffff88812a2c6000)
[  322.673854][  T291] 
[  322.676182][  T291] The buggy address belongs to the physical page:
[  322.682694][  T291] page:ffffea0004a8b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a2c0
[  322.692927][  T291] head:ffffea0004a8b000 order:3 compound_mapcount:0 compound_pincount:0
[  322.701290][  T291] flags: 0x4000000000010200(slab|head|zone=1)
[  322.707385][  T291] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500
[  322.715971][  T291] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  322.724565][  T291] page dumped because: kasan: bad access detected
[  322.731095][  T291] page_owner tracks the page as allocated
[  322.736811][  T291] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 16474, tgid 16473 (syz.2.6682), ts 319219149834, free_ts 319189177242
[  322.759757][  T291]  post_alloc_hook+0x1f5/0x210
[  322.764551][  T291]  prep_new_page+0x1c/0x110
[  322.769071][  T291]  get_page_from_freelist+0x2c7b/0x2cf0
[  322.774650][  T291]  __alloc_pages+0x1c3/0x450
[  322.779298][  T291]  alloc_slab_page+0x6e/0xf0
[  322.783909][  T291]  new_slab+0x98/0x3d0
[  322.788023][  T291]  ___slab_alloc+0x6bd/0xb20
[  322.792625][  T291]  __slab_alloc+0x5e/0xa0
[  322.796971][  T291]  __kmem_cache_alloc_node+0x203/0x2c0
[  322.802559][  T291]  __kmalloc+0xa1/0x1e0
[  322.806725][  T291]  iovec_from_user+0x86/0x2e0
[  322.811403][  T291]  __import_iovec+0x71/0x470
[  322.815991][  T291]  import_iovec+0x7c/0xb0
[  322.820333][  T291]  ___sys_sendmsg+0x1e4/0x290
[  322.825005][  T291]  __sys_sendmmsg+0x274/0x460
[  322.829679][  T291]  __x64_sys_sendmmsg+0xa0/0xb0
[  322.834524][  T291] page last free stack trace:
[  322.839187][  T291]  free_unref_page_prepare+0x742/0x750
[  322.844643][  T291]  free_unref_page+0x8f/0x530
[  322.849316][  T291]  __free_pages+0x67/0x100
[  322.853738][  T291]  __free_slab+0xca/0x1a0
[  322.858073][  T291]  __unfreeze_partials+0x160/0x190
[  322.863196][  T291]  put_cpu_partial+0xa9/0x100
[  322.867958][  T291]  __slab_free+0x1c4/0x280
[  322.872381][  T291]  ___cache_free+0xbf/0xd0
[  322.876790][  T291]  qlist_free_all+0xc6/0x140
[  322.881476][  T291]  kasan_quarantine_reduce+0x14a/0x170
[  322.886928][  T291]  __kasan_slab_alloc+0x24/0x80
[  322.891775][  T291]  slab_post_alloc_hook+0x4f/0x2d0
[  322.896884][  T291]  kmem_cache_alloc+0x16e/0x330
[  322.901737][  T291]  getname_flags+0xb9/0x500
[  322.906233][  T291]  __x64_sys_unlink+0x3c/0x50
[  322.910914][  T291]  x64_sys_call+0x958/0x9a0
[  322.915423][  T291] 
[  322.917738][  T291] Memory state around the buggy address:
[  322.923375][  T291]  ffff88812a2c4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.931427][  T291]  ffff88812a2c4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.939475][  T291] >ffff88812a2c4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.947523][  T291]                    ^
[  322.951594][  T291]  ffff88812a2c4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.959644][  T291]  ffff88812a2c4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.967693][  T291] ==================================================================
[  322.975739][  T291] Disabling lock debugging due to kernel taint
[  322.992120][ T9697] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  322.999810][T16585] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  323.139437][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  323.151199][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  323.159639][    C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G    B              syzkaller #0
[  323.168140][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  323.178221][    C0] RIP: 0010:__queue_work+0x575/0xd30
[  323.183550][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 b0 09 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4f 6d 00 49 8b 7d 00 e8 93 05
[  323.203188][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[  323.209289][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500
[  323.217294][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  323.225298][    C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[  323.233298][    C0] R10: ffffed1025458939 R11: 1ffff11025458939 R12: dffffc0000000000
[  323.241298][    C0] R13: 0000000000000000 R14: ffff88812a2c49c8 R15: 0000000000000008
[  323.249287][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  323.253671][ T9697] usb 5-1: Using ep0 maxpacket: 32
[  323.258222][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.264884][ T9697] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  323.270103][    C0] CR2: 00007efee47b4198 CR3: 0000000120c69000 CR4: 00000000003506b0
[  323.270128][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  323.278588][ T9697] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  323.286436][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  323.286456][    C0] Call Trace:
[  323.286462][    C0]  <IRQ>
[  323.286476][    C0]  delayed_work_timer_fn+0x61/0x80
[  323.294579][ T9697] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  323.303041][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  323.303077][    C0]  call_timer_fn+0x46/0x2a0
[  323.303102][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  323.303125][    C0]  __run_timers+0x667/0x9a0
[  323.311257][ T9697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  323.314405][    C0]  ? calc_index+0x200/0x200
[  323.314439][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  323.317344][ T9697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  323.322392][    C0]  run_timer_softirq+0x6a/0xf0
[  323.322421][    C0]  handle_softirqs+0x1d7/0x600
[  323.331473][ T9697] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  323.337162][    C0]  ? irqtime_account_irq+0xc4/0x240
[  323.341826][ T9697] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  323.347670][    C0]  __irq_exit_rcu+0x52/0xf0
[  323.347702][    C0]  irq_exit_rcu+0x9/0x10
[  323.352345][ T9697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.361903][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  323.361947][    C0]  </IRQ>
[  323.361955][    C0]  <TASK>
[  323.367525][ T9697] usb 5-1: config 0 descriptor??
[  323.371770][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  323.371810][    C0] RIP: 0010:default_idle+0xf/0x20
[  323.462420][    C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d b3 0f 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[  323.482047][    C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257
[  323.488129][    C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: 2f90ba84b2c9ee00
[  323.496125][    C0] RDX: 0000000000000001 RSI: ffffffff85aa1580 RDI: ffffffff85aa1540
[  323.504128][    C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917
[  323.512135][    C0] R10: 0000000000000000 R11: ffffffff84f42280 R12: 0000000000000000
[  323.520138][    C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000
[  323.528160][    C0]  ? __cfi_default_idle+0x10/0x10
[  323.533216][    C0]  arch_cpu_idle+0x1c/0x20
[  323.537657][    C0]  default_idle_call+0x71/0x1d0
[  323.542528][    C0]  do_idle+0x1a7/0x520
[  323.546617][    C0]  ? ct_irq_exit+0x9/0x10
[  323.550962][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  323.556275][    C0]  cpu_startup_entry+0x43/0x60
[  323.561053][    C0]  rest_init+0x10a/0x130
[  323.565313][    C0]  ? __cfi_x86_late_time_init+0x8/0x8
[  323.570725][    C0]  arch_call_rest_init+0xe/0x10
[  323.574886][ T9697] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  323.575593][    C0]  start_kernel+0x482/0x4f0
[  323.589494][ T9697] usb 5-1: USB disconnect, device number 34
[  323.590930][    C0]  x86_64_start_reservations+0x2a/0x2c
[  323.597896][ T9697] usblp0: removed
[  323.602302][    C0]  x86_64_start_kernel+0x7c/0x81
[  323.610923][    C0]  secondary_startup_64_no_verify+0xce/0xdb
[  323.616845][    C0]  </TASK>
[  323.619950][    C0] Modules linked in:
[  323.623885][    C0] ---[ end trace 0000000000000000 ]---
[  323.629368][    C0] RIP: 0010:__queue_work+0x575/0xd30
[  323.634671][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 b0 09 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4f 6d 00 49 8b 7d 00 e8 93 05
[  323.654311][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[  323.660383][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500
[  323.668359][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  323.676360][    C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[  323.684353][    C0] R10: ffffed1025458939 R11: 1ffff11025458939 R12: dffffc0000000000
[  323.692326][    C0] R13: 0000000000000000 R14: ffff88812a2c49c8 R15: 0000000000000008
[  323.700301][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  323.709243][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.715871][    C0] CR2: 00007efee47b4198 CR3: 0000000120c69000 CR4: 00000000003506b0
[  323.723880][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  323.731888][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  323.739879][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  323.747228][    C0] Kernel Offset: disabled
[  323.751551][    C0] Rebooting in 86400 seconds..