last executing test programs:

1m43.662603805s ago: executing program 32 (id=21):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x454, 0x4)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4)
sendto(r0, &(0x7f0000000000)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x44880, 0x0, 0x3a)

1m36.445469856s ago: executing program 33 (id=59):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a25004, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00')

1m35.726511194s ago: executing program 34 (id=65):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)={0x1, 0x7, 0xffffffff, 0x0, 0x1, 0x8, 0x0, 0x3, 0x4040c407})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)

1m29.380538414s ago: executing program 35 (id=91):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@empty, 0x34ff, 0x1, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

44.432850853s ago: executing program 8 (id=395):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

42.301334194s ago: executing program 8 (id=407):
unshare(0x22000600)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

42.04780766s ago: executing program 8 (id=413):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

41.674534609s ago: executing program 8 (id=414):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0xfffffffe, 0x56)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)

41.662071999s ago: executing program 36 (id=414):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0xfffffffe, 0x56)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)

32.966207516s ago: executing program 37 (id=502):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfd02, &(0x7f0000000000)=ANY=[], 0x0)

15.806279694s ago: executing program 38 (id=670):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300)
syz_emit_ethernet(0x46, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r5, 0x0, 0x0)

11.611180173s ago: executing program 5 (id=724):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$eJzs3EtvG1UbAOB3xk16+3L5Srn0AjUUREQhadICFWIDAqkbJCRYwDKkoQpNW9QEiVYVLQgVsUL8AmCJxC9gBRsErEBsYY+QKtQNhQUymvEMceIkOHZdN/XzSGOfM5ec887Mic/M8TiAvlXNXpKIWkT8HBEj9ezyFar1t+vXLs78ee3iTBK12ku/J/l6f1y7OFOuWm63s8iMpRHp+0nsW6XchfMXTk3Pz8+eK/ITi6ffnFg4f+GxudPTJ2dPzp6ZOnbs6JHJJ5+YevyGxDmU1XXvO2f37zn+6scvzNTite++yOr7v2J5Yxx1ox2XWY3q8n2ZG8xfH+r4r99ahhrSyZYeVoQNqUREdrgG8vY/EpVYOngj8fx7Pa0c0FW1Wq22tWlupUxcrgG3sSR6XQOgN8oP+uz6t5xuYvej564+U78AyuK+Xkz1JVsizd621a/Yh7pUfjUiXrn81yfZFKveh1jdti7VBwC4/X2V9X8eXa3/N5zc1bDecDE2NBoRhyJiV0TcERG7I+LOiMjWvTsi7tlg+dUV+eb+z4/b2wqsRVn/7+libGt5/y8tVxmtFLmhPP6B5PW5+dnDxT4Zi4GtWX5ynTK+fu6nj9Za1tj/y6as/LIvWNTjty0rbtCdmF6c7iTmRk/N1d+b41+6L5BExJ6I2Lt0udCybJ/NPfL5/iw9vLN5+X/Hv44bMM5U+yzi4Xr8l2NF/KWkXtJa45MT22J+9vBEeVY0+/6HKy825gca0h3FfwNcfTdixxrHP1c2g3K8dmHjZVz55YM1r2naPf8Hk5fz9GAx7+3pxcVzkxGDxYxl86eWti3z5fpZ/GMHV4t/ONkV8fenxXb7IiI7ie+NiPsi4kBR9/sj4oGIOLhO/N8+++Ab6++h3h7/E+sd/4jRpHG8vo1E5dQ3X65VfmvH/2ieGivmtPL/r9UKdrLvAAAAYLNI8+/AJ+n4v+k0HR+vf4d/d+xI588uLB6qxltnTtS/Kz8aA2l5p2uk4X7oZHFvuMxPrcgfiYj/53cUt+f58Zmz890aUwdas3ON9p/5tdLr2gFdt6FxtOYn2oBNzPOa0KcGtH/oZ9o/9C/tH/rXau3/UsT1HlQFuMl8/kP/0v6hf2n/0L+0f+hLzY/Elz+30s6T/kuJXcc72nxTJT6M9jbfnicqXapYNP5oRxcSkfZ+z7edSG+FahwoElsjotWtLnX1mK48fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa/fwIAAP//5w/pXg==")
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x2c)

11.461618017s ago: executing program 39 (id=725):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/21, 0xffffffffffffffa0}, 0x6}], 0x400000000000022, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

11.413272088s ago: executing program 5 (id=726):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x200000, &(0x7f00000001c0)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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")
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
open(&(0x7f0000000000)='./file0\x00', 0xa400, 0x1d2)

11.212127533s ago: executing program 5 (id=727):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000)=nil)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002000)={0x0, 0x0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.9302348s ago: executing program 5 (id=729):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000a80)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

10.89173179s ago: executing program 5 (id=730):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x8, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2002f00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.380157713s ago: executing program 5 (id=736):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a)
getdents64(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
getdents64(r0, &(0x7f0000000180)=""/88, 0x58)

10.318778074s ago: executing program 40 (id=736):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000240)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a)
getdents64(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
getdents64(r0, &(0x7f0000000180)=""/88, 0x58)

10.099685189s ago: executing program 3 (id=741):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
getdents64(r1, &(0x7f0000000180)=""/4097, 0x1001)

10.0774978s ago: executing program 3 (id=742):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc)
lseek(r2, 0x100000001, 0x3)

8.140172646s ago: executing program 1 (id=760):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000001c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

7.949007071s ago: executing program 1 (id=761):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c8, &(0x7f0000000180)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r1, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

7.877717342s ago: executing program 1 (id=762):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000640), 0x15)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000036c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r0, 0x15, 0x0, @void}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x28, 0xe000008, 0x0, &(0x7f00000000c0))

7.877605642s ago: executing program 1 (id=763):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

7.826579474s ago: executing program 1 (id=764):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="53000000ffb0c07f50d3fb010117"], 0x38}}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x301880, 0x20d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.821268313s ago: executing program 1 (id=765):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="65dc348b93ad260f20e06635000010000f22e00fc79e0e003e660f71f576660f388283abd93665c0a9c12e0e363e0fec2b66b95f0b00000f32660fc735", 0x3d}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x100000, 0x0, {}, 0x0, 0x6}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.810717274s ago: executing program 41 (id=765):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="65dc348b93ad260f20e06635000010000f22e00fc79e0e003e660f71f576660f388283abd93665c0a9c12e0e363e0fec2b66b95f0b00000f32660fc735", 0x3d}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x100000, 0x0, {}, 0x0, 0x6}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.380830444s ago: executing program 8 (id=775):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="b12a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0)

7.358639105s ago: executing program 8 (id=771):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.237502827s ago: executing program 6 (id=772):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa)

7.11889868s ago: executing program 6 (id=774):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4)
recvmmsg(r0, &(0x7f0000000140), 0x40000000000012a, 0x40002100, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000180)={0xcb2e, {{0xa, 0x4e22, 0x1000, @mcast1, 0x6}}}, 0x88)
write$binfmt_misc(r0, &(0x7f0000000300), 0x6)
syz_usb_connect$uac1(0x4, 0xe8, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0)

6.913835055s ago: executing program 3 (id=777):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fremovexattr(r2, &(0x7f0000000000)=@known='user.syz\x00')

6.529141174s ago: executing program 6 (id=779):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

6.426575887s ago: executing program 6 (id=780):
socket$inet6(0xa, 0x80002, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xa, &(0x7f0000001480)=ANY=[@ANYBLOB="64697361626c655f726f6c6c5f666f72776172642c6c617a7974696d652c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6e6f657874656e745f63616368652c6e6f657874656e745f63616368652c7768696e745f6d6f64653d66732d62617365642c636865636b706f696e743d64697361626c652c6a71666d743d76667376302c6a71666d743d7666736f6c642c6261636b67726f756e645f67633d6f66662c6e6f61636c2c646174615f666c7573682c009155f76df4d07ad6534d3588c19362f06435c912cf73b02e9946cfefd7b578c7029ce8c93b87feddd9bb7bb8924e6211c8b54dffa2d339edb64a6434663023894c1ae07c9ce2b93d95fbac8d5dbd8afb838537dbe757fdc7bf5cf39436f951f8f451e754a4bcb17e69c41e94995a3ae74e9dac87ec351b0f1e4f23af9301"], 0xfd, 0x553e, &(0x7f0000006b40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400)
creat(&(0x7f0000000140)='./file0/file2\x00', 0x14)

6.021342397s ago: executing program 6 (id=786):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000580)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xc404, &(0x7f0000000f00)=ANY=[@ANYBLOB="6e6f74732c757365467265ac720069643d", @ANYRESHEX=0x0, @ANYBLOB=',nfs=nostale_ro,dots,check=strict,nfs,nodots,dots,dots,dots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,sys_immutable,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blo', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0xfffe)
accept4(r3, &(0x7f0000000200), &(0x7f0000000280)=0x80, 0x80000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
syz_pidfd_open(r1, 0x0)
ftruncate(r4, 0xfff000)

5.970952778s ago: executing program 3 (id=787):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)

5.932302749s ago: executing program 2 (id=788):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SIOCGSKNS(r0, 0x894c, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)

5.932175269s ago: executing program 2 (id=789):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x80000001)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
lremovexattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00')

5.931858719s ago: executing program 2 (id=790):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)

5.89782848s ago: executing program 2 (id=791):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

5.824158682s ago: executing program 2 (id=792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000005f0ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66)

5.754606423s ago: executing program 3 (id=793):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x1, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}])
write(r0, 0x0, 0x0)

5.754439123s ago: executing program 2 (id=794):
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0xa, 0xb00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x1880}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x100)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5.734896184s ago: executing program 42 (id=794):
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0xa, 0xb00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x1880}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x100)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5.732701424s ago: executing program 6 (id=795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x5e, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "8bba"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x7ff, 0xf7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0x64, 0xa5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0xe, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x0, 0x14}}}}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101008002010208240505"], 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x4)

5.696237395s ago: executing program 43 (id=795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x5e, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "8bba"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x5, 0x7ff, 0xf7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0x64, 0xa5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0xe, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x0, 0x14}}}}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101008002010208240505"], 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x4)

5.678119995s ago: executing program 3 (id=797):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x28})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.64049615s ago: executing program 4 (id=803):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20008810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0)

4.542592432s ago: executing program 4 (id=800):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

4.486010394s ago: executing program 4 (id=802):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write(r0, &(0x7f0000001000)='8', 0x1)

4.437680495s ago: executing program 4 (id=804):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@orlov}]}, 0x4, 0xbc0, &(0x7f0000001900)="$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")
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)

4.19456726s ago: executing program 4 (id=805):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000580)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xc404, &(0x7f0000000f00)=ANY=[@ANYBLOB="6e6f74732c757365467265ac720069643d", @ANYRESHEX=0x0, @ANYBLOB=',nfs=nostale_ro,dots,check=strict,nfs,nodots,dots,dots,dots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,sys_immutable,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blo', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0xfffe)
accept4(r3, &(0x7f0000000200), &(0x7f0000000280)=0x80, 0x80000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
syz_pidfd_open(r1, 0x0)
ftruncate(r4, 0xfff000)

4.002267275s ago: executing program 9 (id=806):
socket(0x8000000010, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r3=>0x0})
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@norecovery}, {}, {@dioread_nolock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480)}, {0x0}], 0x3, 0x5000, 0x0, 0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x8201fffd)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005040)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24041091}, 0x844)
syz_clone3(&(0x7f0000000080)={0x210800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x2a)
openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
socket$tipc(0x1e, 0x2, 0x0)

3.942504276s ago: executing program 4 (id=807):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.876445418s ago: executing program 44 (id=807):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.270592152s ago: executing program 9 (id=809):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x4000, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)

3.252163603s ago: executing program 9 (id=810):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.077562447s ago: executing program 9 (id=811):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xba02, 0x1b, "ffff5300"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

3.025916478s ago: executing program 7 (id=808):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file0\x00', 0x3018000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09edb44848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESOCT, @ANYRES32=0x0], 0xa, 0x2eb, &(0x7f00000004c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
io_setup(0x2e, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x20000000400}])

2.822267543s ago: executing program 7 (id=813):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000580)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xc404, &(0x7f0000000f00)=ANY=[@ANYBLOB="6e6f74732c757365467265ac720069643d", @ANYRESHEX=0x0, @ANYBLOB=',nfs=nostale_ro,dots,check=strict,nfs,nodots,dots,dots,dots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,sys_immutable,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blo', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="2d00000090", 0x5}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0xfffe)
accept4(r3, &(0x7f0000000200), &(0x7f0000000280)=0x80, 0x80000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
syz_pidfd_open(r1, 0x0)
ftruncate(r4, 0xfff000)

2.162563898s ago: executing program 9 (id=818):
syz_usb_connect$uac3(0x0, 0x93, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x1d, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x402, 0x3, 0x3, 0x4, 0x5, 0x7ff, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffc, @private0, 0x8401}, 0x1c)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3)

1.920583294s ago: executing program 7 (id=820):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7})
syz_open_procfs(r0, &(0x7f0000000100)='auxv\x00')
lseek(0xffffffffffffffff, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.748847839s ago: executing program 0 (id=822):
fsopen(&(0x7f0000000640)='cifs\x00', 0x1)
syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000080)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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")
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x40)
rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000040)='./file0\x00')

1.68462656s ago: executing program 7 (id=823):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[], 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0)
r4 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x178, 0x0, 0x0, 0x178, 0x2d0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x6, 0x7, 0x0, 0x1, 0x5], 0x5, 0x3}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000013022100fdffffff0000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
ioctl$RTC_AIE_ON(r5, 0x7001)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000040)={0x5, 0xc, 0x16, 0x3, 0x4, 0x0, 0x3, 0x56, 0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
io_setup(0x239f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[], 0x1, 0x25a, &(0x7f0000000240)="$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")
mount$bind(&(0x7f0000000a00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2241099, 0x0)

1.652605551s ago: executing program 0 (id=824):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x1})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x6000, 0x4, 0x10, 0xd, 0x8, 0x9, 0x7, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xe000, 0x8000000, 0x0, 0x1e, 0x5, 0x7, 0x4, 0x20, 0x83, 0x9, 0x0, 0x2}, {0xeeee8000, 0x40000, 0xb, 0x0, 0x4, 0x9, 0x81, 0x7, 0x9, 0xfe, 0x5, 0x72}, {0x42000, 0x10000, 0x0, 0xff, 0x6, 0xaa, 0x21, 0x0, 0x0, 0x4, 0x84, 0x12}, {0x2000, 0x60000, 0x10, 0xff, 0x1, 0xc, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0x29000, 0x5000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x5, 0x7, 0x7f}, {0x3000, 0x0, 0x0, 0x1, 0xc, 0xc4, 0x4, 0x64, 0xe3, 0x1, 0x8, 0xe}, {0xffff1000, 0xd000, 0xa, 0x25, 0x5, 0x0, 0x8, 0xc7, 0x9e, 0x0, 0x41, 0xd}, {0xffffffff, 0xd}, {0x7000, 0x7}, 0x40000000, 0x0, 0x2c001, 0x40738, 0x8, 0x8801, 0xeeee0c00, [0x3, 0x5, 0x4, 0x8]})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"})

1.548080444s ago: executing program 0 (id=825):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe)

1.216831781s ago: executing program 0 (id=826):
close(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010101}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0x7b, 0xa, 0x3, 0xffd0}, @generic={0x7b, 0xa, 0x3, 0xffd8}, @generic={0x7b, 0xa, 0x3, 0xffe0}, @generic={0x7b, 0xa, 0x3, 0xffe8}, @generic={0x7b, 0xa, 0x3, 0xfff0}, @generic={0x7b, 0xa, 0x3, 0xfff8}, @generic={0xbf, 0x1, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.163967453s ago: executing program 0 (id=827):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x32, 0x790, 0x81000200006, 0x17e, 0x400000004, 0xffffffffffffffff, 0xf1, 0x7, 0xfffffffffffffd7e, 0x45, 0xfffffffffffffffc, 0x3bb, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

962.836567ms ago: executing program 0 (id=828):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x23)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

781.926542ms ago: executing program 7 (id=829):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5f, 0x3})

702.407573ms ago: executing program 7 (id=830):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[], 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x178, 0x0, 0x0, 0x178, 0x2d0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x6, 0x7, 0x0, 0x1, 0x5], 0x5, 0x3}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000013022100fdffffff0000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
ioctl$RTC_AIE_ON(r5, 0x7001)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000040)={0x5, 0xc, 0x16, 0x3, 0x4, 0x0, 0x3, 0x56, 0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
io_setup(0x239f, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[], 0x1, 0x25a, &(0x7f0000000240)="$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")
mount$bind(&(0x7f0000000a00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2241099, 0x0)

0s ago: executing program 9 (id=831):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
write(r0, &(0x7f00000003c0)='du', 0x2)

kernel console output (not intermixed with test programs):

:object_r:proc_net_t tclass=file permissive=1
[   78.291853][ T1391] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.313: couldn't read orphan inode 15 (err -117)
[   78.314969][ T1391] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   78.405178][ T1397] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[   78.420062][ T1397] FAT-fs (loop5): Filesystem has been set read-only
[   78.433016][ T1399] EXT4-fs (loop8): Ignoring removed bh option
[   78.439442][ T1399] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.452931][ T1399] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[   78.506642][   T25] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71
[   78.526665][   T25] smsc95xx: probe of 8-1:0.67 failed with error -71
[   78.536989][   T25] usb 8-1: USB disconnect, device number 2
[   78.586643][  T409] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   78.608118][ T1414] EXT4-fs (loop6): Ignoring removed bh option
[   78.615206][ T1414] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.629346][ T1414] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[   78.976706][  T409] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   78.996543][  T409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.026630][  T409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.101401][  T409] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   79.196871][  T409] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   79.217108][  T409] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   79.225591][  T409] usb 5-1: Manufacturer: syz
[   79.574276][  T409] usb 5-1: config 0 descriptor??
[   79.736970][ T1425] F2FS-fs (loop6): Invalid SB checksum offset: 0
[   79.776605][  T375] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   79.805537][ T1425] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[   79.936086][ T1425] F2FS-fs (loop6): invalid crc value
[   79.956859][ T1425] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   80.016780][ T1425] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[   80.024077][ T1425] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   80.136567][   T24] audit: type=1400 audit(1785635106.090:289): avc:  denied  { write } for  pid=1441 comm="syz.5.327" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   80.168392][  T409] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[   80.183804][  T409] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[   80.201144][  T409] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[   80.214189][  T508] attempt to access beyond end of device
[   80.214189][  T508] loop6: rw=2049, want=45104, limit=40427
[   80.246829][  T375] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   80.257000][  T375] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   80.338566][ T1448] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   80.343115][ T1451] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   80.365360][ T1448] EXT4-fs (loop5): 1 truncate cleaned up
[   80.373743][ T1448] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,dioread_lock,errors=remount-ro,noquota,
[   80.396637][   T24] audit: type=1400 audit(1785635106.370:290): avc:  denied  { map } for  pid=1447 comm="syz.5.330" path="/61/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   80.422300][   T24] audit: type=1400 audit(1785635106.380:291): avc:  denied  { read } for  pid=1455 comm="syz.6.332" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   80.427887][ T1451] EXT4-fs (loop7): 1 truncate cleaned up
[   80.446237][   T24] audit: type=1400 audit(1785635106.380:292): avc:  denied  { open } for  pid=1455 comm="syz.6.332" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   80.452264][  T409] usb 5-1: USB disconnect, device number 3
[   80.474619][   T24] audit: type=1400 audit(1785635106.380:293): avc:  denied  { ioctl } for  pid=1455 comm="syz.6.332" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   80.480490][  T375] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   80.505108][   T24] audit: type=1400 audit(1785635106.380:294): avc:  denied  { write } for  pid=1455 comm="syz.6.332" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   80.518072][ T1451] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,errors=continue,noload,noquota,,errors=continue
[   80.574796][  T375] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.583196][  T375] usb 9-1: Product: syz
[   80.587819][  T375] usb 9-1: Manufacturer: syz
[   80.592403][  T375] usb 9-1: SerialNumber: syz
[   80.680545][ T1461] EXT4-fs (loop5): Ignoring removed bh option
[   80.682221][ T1464] input: syz1 as /devices/virtual/input/input7
[   80.705793][ T1461] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,nombcache,noquota,sysvgroups,errors=remount-ro,nodioread_nolock,bh,
[   80.721325][ T1461] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.744189][ T1461] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.334: bg 0: block 112: padding at end of block bitmap is not set
[   80.758921][ T1461] EXT4-fs (loop5): Remounting filesystem read-only
[   80.765629][ T1461] EXT4-fs error (device loop5) in ext4_evict_inode:260: Readonly filesystem
[   80.837631][ T1468] EXT4-fs (loop6): Ignoring removed nobh option
[   80.848091][  T375] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   80.878027][ T1468] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue
[   80.894621][ T1468] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.346380][ T1484] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   81.473607][ T1480] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   81.515951][ T1480] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.575433][ T1484] EXT4-fs (loop4): 1 truncate cleaned up
[   81.663660][ T1484] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,errors=remount-ro,data_err=abort,noload,data_err=ignore,noblock_validity,
[   81.832257][ T1484] overlayfs: upper fs needs to support d_type.
[   81.860412][ T1484] overlayfs: upper fs needs to support d_type.
[   81.889526][  T281] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   81.921757][  T281] EXT4-fs (loop4): Remounting filesystem read-only
[   81.936140][  T281] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[   81.963394][   T24] audit: type=1400 audit(1785635107.830:295): avc:  denied  { read write } for  pid=1433 comm="syz.8.326" name="lp0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   81.977294][  T281] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[   81.987241][   T24] audit: type=1400 audit(1785635107.830:296): avc:  denied  { open } for  pid=1433 comm="syz.8.326" path="/dev/usb/lp0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   82.046168][   T24] audit: type=1400 audit(1785635107.830:297): avc:  denied  { read } for  pid=1482 comm="syz.4.341" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   82.066889][  T375] usb 9-1: USB disconnect, device number 3
[   82.097889][   T24] audit: type=1400 audit(1785635108.080:298): avc:  denied  { unlink } for  pid=1496 comm="syz.5.345" name="#d" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   82.121112][  T375] usblp0: removed
[   82.159774][  T437] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 345: padding at end of block bitmap is not set
[   82.174782][  T437] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 28
[   82.187732][  T437] EXT4-fs (loop6): This should not happen!! Data will be lost
[   82.187732][  T437] 
[   82.198791][  T437] EXT4-fs (loop6): Total free blocks count 0
[   82.204846][  T437] EXT4-fs (loop6): Free/Dirty block details
[   82.210974][  T437] EXT4-fs (loop6): free_blocks=0
[   82.216107][  T437] EXT4-fs (loop6): dirty_blocks=3408
[   82.221569][  T437] EXT4-fs (loop6): Block reservation details
[   82.227791][  T437] EXT4-fs (loop6): i_reserved_data_blocks=213
[   82.250055][  T437] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1347 with error 28
[   82.262954][  T437] EXT4-fs (loop6): This should not happen!! Data will be lost
[   82.262954][  T437] 
[   82.687732][ T1509] EXT4-fs (loop7): Test dummy encryption mode enabled
[   82.998902][ T1509] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[   83.172896][ T1518] device ip6gre1 entered promiscuous mode
[   83.179328][ T1509] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   83.190741][ T1509] System zones: 0-5
[   83.195931][ T1521] netlink: 64 bytes leftover after parsing attributes in process `syz.6.353'.
[   83.212320][ T1509] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,
[   83.397300][ T1527] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5
[   83.397300][ T1527] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   83.397300][ T1527] 
[   83.541888][ T1527] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,nouser_xattr,quota,,errors=continue
[   83.583046][ T1527] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.623695][ T1557] netlink: 'syz.5.366': attribute type 1 has an invalid length.
[   83.641627][ T1557] netlink: 'syz.5.366': attribute type 11 has an invalid length.
[   83.654947][ T1557] netlink: 'syz.5.366': attribute type 11 has an invalid length.
[   83.715968][ T1543] F2FS-fs (loop4): fault_injection options not supported
[   83.735557][ T1546] EXT4-fs (loop8): Ignoring removed bh option
[   83.742479][ T1546] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   83.749597][ T1543] F2FS-fs (loop4): fault_type options not supported
[   83.795919][ T1543] F2FS-fs (loop4): invalid crc value
[   83.824938][ T1546] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[   83.839187][ T1543] F2FS-fs (loop4): Found nat_bits in checkpoint
[   84.387733][ T1543] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   84.836113][ T1577] attempt to access beyond end of device
[   84.836113][ T1577] loop4: rw=1, want=53248, limit=40427
[   84.851864][ T1577] attempt to access beyond end of device
[   84.851864][ T1577] loop4: rw=1, want=45064, limit=40427
[   84.976377][ T1583] kvm: MWAIT instruction emulated as NOP!
[   84.979134][ T1577] attempt to access beyond end of device
[   84.979134][ T1577] loop4: rw=1, want=77824, limit=40427
[   85.026943][ T1590] using random self ethernet address
[   85.034482][ T1590] using random host ethernet address
[   85.042368][ T1577] attempt to access beyond end of device
[   85.042368][ T1577] loop4: rw=1, want=85760, limit=40427
[   85.114988][  T281] attempt to access beyond end of device
[   85.114988][  T281] loop4: rw=2049, want=85768, limit=40427
[   85.179588][ T1600] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   85.251905][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.360438][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.399005][ T1597] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.378: inode has both inline data and extents flags
[   85.415560][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.426265][ T1597] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.378: couldn't read orphan inode 15 (err -117)
[   85.427691][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.438865][ T1597] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue
[   85.449194][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.468996][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.479386][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.490090][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.502862][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.513361][ T1594] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   85.563357][   T24] kauditd_printk_skb: 11 callbacks suppressed
[   85.563370][   T24] audit: type=1400 audit(1785635111.540:310): avc:  denied  { unmount } for  pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   85.681153][ T1606] EXT4-fs (loop4): Ignoring removed oldalloc option
[   85.744030][ T1606] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled
[   85.754417][ T1604] IPv6: Can't replace route, no match found
[   85.762452][ T1604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=1604 comm=syz.5.381
[   85.805994][ T1606] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,grpjquota=./file1,quota,,errors=continue
[   85.831758][ T1606] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.007570][ T1606] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27
[   86.049693][ T1613] EXT4-fs (loop7): Ignoring removed bh option
[   86.071554][ T1613] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   86.090289][ T1606] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #2: comm syz.4.379: mark_inode_dirty error
[   86.103561][ T1613] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[   86.113123][ T1606] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27
[   87.073156][   T24] audit: type=1400 audit(1785635113.010:311): avc:  denied  { create } for  pid=1612 comm="syz.7.382" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   87.118508][   T24] audit: type=1400 audit(1785635113.100:312): avc:  denied  { write open } for  pid=1612 comm="syz.7.382" path="/74/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   87.144417][   T24] audit: type=1400 audit(1785635113.100:313): avc:  denied  { bind } for  pid=1626 comm="syz.8.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   87.178540][ T1642] netlink: 'syz.5.389': attribute type 4 has an invalid length.
[   87.197801][   T24] audit: type=1400 audit(1785635113.100:314): avc:  denied  { name_bind } for  pid=1626 comm="syz.8.386" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   87.229836][ T1644] netlink: 'syz.5.389': attribute type 4 has an invalid length.
[   87.236946][   T24] audit: type=1400 audit(1785635113.100:315): avc:  denied  { node_bind } for  pid=1626 comm="syz.8.386" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   87.614323][ T1652] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[   87.713692][   T24] audit: type=1400 audit(1785635113.690:316): avc:  denied  { mounton } for  pid=1651 comm="syz.8.392" path="/46/file0/bus" dev="loop8" ino=1048670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.739096][ T1652] exFAT-fs (loop8): error, invalid size(size(1) > aligned(9223372036854777344)
[   87.739096][ T1652] 
[   87.766534][ T1652] exFAT-fs (loop8): Filesystem has been set read-only
[   87.971470][ T1657] IPv6: Can't replace route, no match found
[   87.979728][ T1657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=1657 comm=syz.5.394
[   88.017898][ T1643] F2FS-fs (loop4): invalid crc value
[   88.024672][ T1643] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   88.045231][ T1643] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[   88.052259][ T1643] F2FS-fs (loop4): Start checkpoint disabled!
[   88.059351][ T1643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   88.060756][ T1668] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   88.074247][   T24] audit: type=1400 audit(1785635114.050:317): avc:  denied  { create } for  pid=1666 comm="syz.6.396" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[   88.162357][   T24] audit: type=1400 audit(1785635114.050:318): avc:  denied  { associate } for  pid=1666 comm="syz.6.396" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   88.250136][   T24] audit: type=1400 audit(1785635114.050:319): avc:  denied  { mounton } for  pid=1666 comm="syz.6.396" path="/56/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   88.338541][   T15] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   88.443451][ T1646] F2FS-fs (loop7): Test dummy encryption mode enabled
[   88.461295][ T1646] F2FS-fs (loop7): invalid crc value
[   88.501316][ T1646] F2FS-fs (loop7): Found nat_bits in checkpoint
[   88.645485][ T1646] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   88.689944][ T1681] attempt to access beyond end of device
[   88.689944][ T1681] loop6: rw=2049, want=140, limit=128
[   88.736717][ T1679] attempt to access beyond end of device
[   88.736717][ T1679] loop6: rw=2049, want=140, limit=128
[   88.756807][ T1679] Buffer I/O error on dev loop6, logical block 69, lost async page write
[   88.791839][ T1676] F2FS-fs (loop5): invalid crc value
[   88.806596][   T15] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.816827][   T15] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.826958][   T15] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   88.836475][ T1676] F2FS-fs (loop5): Found nat_bits in checkpoint
[   88.849664][   T15] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   88.886594][ T1676] F2FS-fs (loop5): Start checkpoint disabled!
[   88.899254][ T1676] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   89.056682][   T15] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   89.070265][   T15] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.090477][   T15] usb 9-1: Product: syz
[   89.094733][   T15] usb 9-1: Manufacturer: syz
[   89.112570][   T15] usb 9-1: SerialNumber: syz
[   89.177724][   T15] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   89.203889][   T15] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   89.223983][   T15] usbserial_generic 9-1:1.0: generic converter detected
[   89.238891][   T15] usb 9-1: generic converter now attached to ttyUSB0
[   89.272217][    T9] attempt to access beyond end of device
[   89.272217][    T9] loop5: rw=2049, want=40976, limit=40427
[   89.399540][  T375] usb 9-1: USB disconnect, device number 4
[   89.410526][  T375] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   89.438158][  T375] usbserial_generic 9-1:1.0: device disconnected
[   89.543770][ T1699] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   89.567541][ T1699] FAT-fs (loop5): Filesystem has been set read-only
[   89.738360][ T1689] EXT4-fs (loop7): Ignoring removed bh option
[   89.744761][ T1689] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   89.759261][ T1689] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[   89.827239][ T1687] F2FS-fs (loop6): Test dummy encryption mode enabled
[   89.848433][ T1687] F2FS-fs (loop6): invalid crc value
[   89.885035][ T1687] F2FS-fs (loop6): Found nat_bits in checkpoint
[   89.896636][ T1703] IPv6: Can't replace route, no match found
[   89.904918][ T1703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=1703 comm=syz.5.406
[   89.995757][ T1687] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   90.057966][ T1713] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[   90.069798][ T1713] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue
[   90.181757][  T608] EXT4-fs error (device loop8): ext4_lookup:1830: inode #17: comm syz-executor: iget: bogus i_mode (70755)
[   90.202678][  T608] EXT4-fs error (device loop8): ext4_lookup:1830: inode #17: comm syz-executor: iget: bogus i_mode (70755)
[   90.258781][ T1722] EXT4-fs (loop7): Ignoring removed oldalloc option
[   90.266808][ T1722] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   90.289646][ T1722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[   90.298777][ T1722] EXT4-fs (loop7): orphan cleanup on readonly fs
[   90.305264][ T1722] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.411: bad orphan inode 267
[   90.329533][ T1722] EXT4-fs (loop7): Remounting filesystem read-only
[   90.336129][ T1722] EXT4-fs (loop7): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime
[   90.360803][ T1727] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.389406][ T1727] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue
[   90.418496][ T1732] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.410: inode has both inline data and extents flags
[   90.431938][ T1732] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.410: couldn't read orphan inode 15 (err -117)
[   90.433858][ T1722] EXT4-fs warning (device loop7): dx_probe:860: inode #2: comm syz.7.411: dx entry: limit 0 != root limit 125
[   90.443994][ T1732] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue
[   90.471407][ T1722] EXT4-fs warning (device loop7): dx_probe:946: inode #2: comm syz.7.411: Corrupt directory, running e2fsck is recommended
[   90.534922][ T1718] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[   90.607161][ T1741] device ip6gre1 entered promiscuous mode
[   90.768468][ T1744] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.777199][ T1744] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.785419][ T1744] device bridge_slave_0 entered promiscuous mode
[   90.797014][ T1744] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.805013][ T1744] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.815562][ T1746] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue
[   90.846206][ T1744] device bridge_slave_1 entered promiscuous mode
[   90.948240][ T1744] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.955529][ T1744] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.963040][ T1744] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.970113][ T1744] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.008578][   T24] kauditd_printk_skb: 17 callbacks suppressed
[   91.008592][   T24] audit: type=1400 audit(1785635116.990:337): avc:  denied  { read } for  pid=1768 comm="syz.4.425" name="Loopback.0" dev="configfs" ino=21161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   91.038079][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.055015][   T24] audit: type=1400 audit(1785635117.020:338): avc:  denied  { open } for  pid=1768 comm="syz.4.425" path="/90/config/usb_gadget/g1/functions/Loopback.0" dev="configfs" ino=21161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   91.055582][    T9] attempt to access beyond end of device
[   91.055582][    T9] loop5: rw=1, want=5336, limit=512
[   91.091390][   T24] audit: type=1400 audit(1785635117.030:339): avc:  denied  { remove_name } for  pid=1768 comm="syz.4.425" name="Loopback.0" dev="configfs" ino=21161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   91.115593][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   91.126847][   T24] audit: type=1400 audit(1785635117.030:340): avc:  denied  { rmdir } for  pid=1768 comm="syz.4.425" name="Loopback.0" dev="configfs" ino=21161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   91.153007][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.153349][    T9] attempt to access beyond end of device
[   91.153349][    T9] loop5: rw=1, want=9352, limit=512
[   91.177128][    T9] attempt to access beyond end of device
[   91.177128][    T9] loop5: rw=1, want=13096, limit=512
[   91.203730][   T24] audit: type=1400 audit(1785635117.180:341): avc:  denied  { create } for  pid=1772 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   91.224735][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.226728][    T9] attempt to access beyond end of device
[   91.226728][    T9] loop5: rw=1, want=16464, limit=512
[   91.236892][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   91.244342][   T24] audit: type=1400 audit(1785635117.210:342): avc:  denied  { getopt } for  pid=1772 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   91.273828][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.282638][ T1775] netlink: 260 bytes leftover after parsing attributes in process `syz.6.429'.
[   91.283134][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   91.300304][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.308339][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.320412][ T1775] netlink: 104 bytes leftover after parsing attributes in process `syz.6.429'.
[   91.325938][ T1744] device veth0_vlan entered promiscuous mode
[   91.337540][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.429'.
[   91.361878][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.372855][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.383540][ T1744] device veth1_macvtap entered promiscuous mode
[   91.396272][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.411553][   T24] audit: type=1400 audit(1785635117.390:343): avc:  denied  { read } for  pid=1787 comm="syz.4.432" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   91.441488][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.450411][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.459164][   T24] audit: type=1400 audit(1785635117.390:344): avc:  denied  { open } for  pid=1787 comm="syz.4.432" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   91.492910][   T24] audit: type=1400 audit(1785635117.470:345): avc:  denied  { write } for  pid=1787 comm="syz.4.432" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   91.521069][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.526768][   T24] audit: type=1400 audit(1785635117.470:346): avc:  denied  { ioctl } for  pid=1787 comm="syz.4.432" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   91.870646][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.588826][ T1806] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[   92.633025][ T1807] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[   92.649971][ T1807] EXT4-fs (loop9): Ignoring removed orlov option
[   92.668050][ T1807] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue
[   92.676543][   T15] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   92.750111][ T1807] EXT4-fs (loop9): shut down requested (2)
[   92.926548][   T15] usb 8-1: Using ep0 maxpacket: 16
[   92.948155][    T7] device bridge_slave_1 left promiscuous mode
[   92.955112][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.986953][    T7] device bridge_slave_0 left promiscuous mode
[   93.001656][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.020880][    T7] device veth1_macvtap left promiscuous mode
[   93.035112][    T7] device veth0_vlan left promiscuous mode
[   93.046633][   T15] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.060004][   T15] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.063663][ T1804] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[   93.076607][   T15] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   93.104016][   T15] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   93.123463][   T15] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.160215][   T15] usb 8-1: config 0 descriptor??
[   93.445922][    T9] attempt to access beyond end of device
[   93.445922][    T9] loop4: rw=1, want=5512, limit=512
[   93.481758][    T9] attempt to access beyond end of device
[   93.481758][    T9] loop4: rw=1, want=9960, limit=512
[   93.503802][    T9] attempt to access beyond end of device
[   93.503802][    T9] loop4: rw=1, want=16464, limit=512
[   93.589609][ T1823] F2FS-fs (loop5): Test dummy encryption mode enabled
[   93.598095][ T1823] F2FS-fs (loop5): invalid crc value
[   93.608787][ T1823] F2FS-fs (loop5): Found nat_bits in checkpoint
[   93.643134][   T15] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0003/input/input8
[   93.651200][ T1834] option changes via remount are deprecated (pid=1832 comm=syz.4.444)
[   93.663890][ T1834] cgroup: option or name mismatch, new: 0x2 "noprefix", old: 0x0 ""
[   93.664167][ T1823] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   93.672706][ T1826] F2FS-fs (loop9): Test dummy encryption mode enabled
[   93.689290][ T1826] F2FS-fs (loop9): invalid crc value
[   93.718426][   T15] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[   93.763125][ T1826] F2FS-fs (loop9): Found nat_bits in checkpoint
[   93.806944][ T1826] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   93.860390][   T15] usb 8-1: USB disconnect, device number 3
[   93.886875][ T1843] kvm: emulating exchange as write
[   94.318182][ T1860] EXT4-fs (loop9): Ignoring removed nobh option
[   94.328554][ T1860] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue
[   94.340200][ T1860] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   94.368691][ T1858] EXT4-fs (loop5): Ignoring removed bh option
[   94.390870][ T1858] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   94.410880][ T1858] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[   94.457053][ T1870] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   94.481444][ T1870] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.758943][ T1883] EXT4-fs (loop5): Test dummy encryption mode enabled
[   94.765834][ T1883] EXT4-fs (loop5): Ignoring removed orlov option
[   94.773152][ T1880] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[   94.787837][ T1880] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   94.790274][ T1883] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue
[   94.803927][ T1880] EXT4-fs (loop7): 1 truncate cleaned up
[   94.823335][ T1880] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue
[   94.888973][ T1883] EXT4-fs (loop5): Online defrag not supported with bigalloc
[   95.001311][ T1892] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[   95.010332][ T1892] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   95.091471][ T1892] EXT4-fs error (device loop9): dx_make_map:1303: inode #2: block 34: comm syz.9.459: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[   95.121264][ T1892] EXT4-fs error (device loop9) in do_split:2059: Corrupt filesystem
[   95.168157][ T1898] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   95.194259][ T1898] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.228033][ T1905] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   95.237398][ T1905] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.270744][ T1876] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[   95.330051][ T1905] EXT4-fs (loop5): re-mounted. Opts: (null)
[   95.456723][ T1925] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,
[   95.481325][ T1925] ext4 filesystem being mounted at /100/file3 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.503884][ T1925] EXT4-fs (loop4): resizing filesystem from 128 to 2 blocks
[   95.518039][ T1925] EXT4-fs warning (device loop4): ext4_resize_fs:1982: can't shrink FS - resize aborted
[   95.594672][    T7] attempt to access beyond end of device
[   95.594672][    T7] loop6: rw=1, want=5040, limit=512
[   95.652833][ T1921] EXT4-fs (loop9): Ignoring removed bh option
[   95.659723][ T1921] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   95.673355][ T1923] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   95.688491][ T1921] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[   95.746891][ T1923] EXT4-fs error (device loop5): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   95.786761][ T1923] EXT4-fs error (device loop5) in ext4_setattr:5745: error 28
[   96.006590][ T1953] erofs: (device loop5): mounted with root inode @ nid 36.
[   96.078869][ T1953] attempt to access beyond end of device
[   96.078869][ T1953] loop5: rw=524288, want=32, limit=16
[   96.109386][ T1953] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096]
[   96.158916][   T24] kauditd_printk_skb: 6 callbacks suppressed
[   96.158929][   T24] audit: type=1400 audit(1785635122.140:353): avc:  denied  { execute } for  pid=1952 comm="syz.5.475" path="/102/file1/file2" dev="loop5" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   96.191317][ T1953] attempt to access beyond end of device
[   96.191317][ T1953] loop5: rw=0, want=24, limit=16
[   96.205309][ T1953] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000]
[   96.223453][ T1953] attempt to access beyond end of device
[   96.223453][ T1953] loop5: rw=0, want=24, limit=16
[   96.234319][ T1953] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000]
[   96.838142][ T1953] attempt to access beyond end of device
[   96.838142][ T1953] loop5: rw=0, want=24, limit=16
[   96.989429][    T9] attempt to access beyond end of device
[   96.989429][    T9] loop7: rw=1, want=5000, limit=512
[   97.041737][    T9] attempt to access beyond end of device
[   97.041737][    T9] loop7: rw=1, want=8040, limit=512
[   97.063965][ T1953] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000]
[   97.127720][    T9] attempt to access beyond end of device
[   97.127720][    T9] loop7: rw=1, want=12112, limit=512
[   97.142255][    T9] attempt to access beyond end of device
[   97.142255][    T9] loop7: rw=1, want=16464, limit=512
[   97.149147][ T1953] attempt to access beyond end of device
[   97.149147][ T1953] loop5: rw=0, want=24, limit=16
[   97.211612][ T1953] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000]
[   97.528121][ T1971] F2FS-fs (loop6): invalid crc value
[   97.554541][ T1971] F2FS-fs (loop6): Found nat_bits in checkpoint
[   97.618233][ T1971] F2FS-fs (loop6): Start checkpoint disabled!
[   97.626281][ T1971] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   97.706530][  T438] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   97.737516][ T1987] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5
[   97.737516][ T1987] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   97.737516][ T1987] 
[   97.768574][ T1987] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouser_xattr,grpquota,lazytime,noblock_validity,,errors=continue
[   97.851522][ T1956] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[   97.877208][ T1966] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[   97.946541][  T438] usb 8-1: Using ep0 maxpacket: 16
[   97.972981][ T2002] device syzkaller1 entered promiscuous mode
[   97.977552][ T1999] exfat: Deprecated parameter 'namecase'
[   97.984818][ T1999] exfat: Deprecated parameter 'namecase'
[   97.994905][ T1999] exfat: Deprecated parameter 'utf8'
[   98.002925][ T1999] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[   98.066561][  T438] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[   98.074936][  T438] usb 8-1: config 0 has no interface number 0
[   98.087467][  T438] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   98.123148][  T438] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   98.189233][ T2006] EXT4-fs (loop6): Ignoring removed bh option
[   98.197285][ T2006] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   98.210972][ T2006] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[   98.316870][  T438] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   98.329712][  T438] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.352127][  T438] usb 8-1: Product: syz
[   98.369791][  T438] usb 8-1: Manufacturer: syz
[   98.374485][  T438] usb 8-1: SerialNumber: syz
[   98.380977][  T438] usb 8-1: config 0 descriptor??
[   98.396595][ T1980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   98.403605][ T1980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   98.410579][   T53] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   98.482682][ T2020] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   98.491375][ T2020] ±ÿ: renamed from team_slave_1
[   98.717860][ T1980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   98.725977][ T1980] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   98.763331][ T2019] netlink: 64 bytes leftover after parsing attributes in process `syz.6.496'.
[   98.780491][   T24] audit: type=1400 audit(1785635124.760:354): avc:  denied  { ioctl } for  pid=2018 comm="syz.6.496" path="socket:[22175]" dev="sockfs" ino=22175 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   98.856686][   T53] usb 6-1: Using ep0 maxpacket: 32
[   98.946604][  T438] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   98.977341][ T2028] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   98.979786][   T53] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[   98.984103][ T2028] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   98.993001][   T53] usb 6-1: config 0 has no interface number 0
[   99.001609][ T2028] F2FS-fs (loop4): invalid crc value
[   99.007470][   T53] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[   99.022724][   T53] usb 6-1: config 0 interface 184 has no altsetting 0
[   99.029148][ T2028] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   99.050747][ T2028] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   99.058070][ T2028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   99.077394][   T24] audit: type=1400 audit(1785635125.060:355): avc:  denied  { read } for  pid=2027 comm="syz.4.499" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   99.106554][  T409] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   99.156643][  T438] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   99.167272][  T438] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0
[   99.211044][   T53] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   99.224524][  T438] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   99.236120][   T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.244549][   T53] usb 6-1: Product: syz
[   99.248951][   T53] usb 6-1: Manufacturer: syz
[   99.253744][   T53] usb 6-1: SerialNumber: syz
[   99.264205][   T53] usb 6-1: config 0 descriptor??
[   99.278532][ T2035] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[   99.286660][ T2004] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   99.307015][   T53] smsc75xx v1.0.0
[   99.325379][ T2035] EXT4-fs error (device loop9): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   99.346527][  T409] usb 7-1: Using ep0 maxpacket: 16
[   99.347851][ T2035] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 242 with error 28
[   99.364751][ T2035] EXT4-fs (loop9): This should not happen!! Data will be lost
[   99.364751][ T2035] 
[   99.368610][ T2040] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.381783][ T2035] EXT4-fs (loop9): Total free blocks count 0
[   99.381922][ T2040] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.388427][ T2035] EXT4-fs (loop9): Free/Dirty block details
[   99.396030][ T2040] device bridge_slave_0 entered promiscuous mode
[   99.401113][ T2035] EXT4-fs (loop9): free_blocks=4096
[   99.408397][ T2040] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.419907][ T2035] EXT4-fs (loop9): dirty_blocks=256
[   99.425120][ T2035] EXT4-fs (loop9): Block reservation details
[   99.425237][ T2040] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.438616][ T2035] EXT4-fs (loop9): i_reserved_data_blocks=16
[   99.445131][ T2040] device bridge_slave_1 entered promiscuous mode
[   99.486583][  T438] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   99.498172][    T9] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28
[   99.509069][ T2004] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   99.510760][  T438] asix: probe of 8-1:0.34 failed with error -71
[   99.521482][ T2040] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.523943][    T9] EXT4-fs (loop9): This should not happen!! Data will be lost
[   99.523943][    T9] 
[   99.530845][ T2040] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.530927][ T2040] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.541845][  T438] usb 8-1: USB disconnect, device number 4
[   99.547791][ T2040] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.574959][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   99.583205][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.591339][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.612546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   99.621145][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.628329][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.635941][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   99.646711][  T409] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   99.655910][  T409] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.661148][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.667360][  T409] usb 7-1: Product: syz
[   99.671765][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.675982][  T409] usb 7-1: Manufacturer: syz
[   99.688775][  T409] usb 7-1: SerialNumber: syz
[   99.696894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   99.705213][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   99.725289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   99.739447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   99.748114][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   99.755995][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   99.764604][ T2040] device veth0_vlan entered promiscuous mode
[   99.779967][  T558] device bridge_slave_1 left promiscuous mode
[   99.787617][  T558] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.808299][  T558] device bridge_slave_0 left promiscuous mode
[   99.814776][  T558] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.824417][ T2050] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   99.837053][  T558] device veth1_macvtap left promiscuous mode
[   99.843267][  T558] device veth0_vlan left promiscuous mode
[  100.006574][   T53] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  100.018958][   T53] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  100.072940][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  100.085188][ T2040] device veth1_macvtap entered promiscuous mode
[  100.096356][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  100.107006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  100.115252][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  100.173710][ T2053] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13
[  100.182645][ T2053] EXT4-fs error (device loop7): ext4_iget_extra_inode:4692: inode #15: comm syz.7.506: corrupted in-inode xattr
[  100.197196][ T2053] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.506: couldn't read orphan inode 15 (err -117)
[  100.209353][ T2053] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue
[  100.476752][  T409] snd-usb-audio: probe of 7-1:1.0 failed with error -71
[  100.493539][  T409] usb 7-1: USB disconnect, device number 4
[  100.506688][   T53] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  100.527356][   T53] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  100.560709][   T53] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  100.583238][   T53] smsc75xx: probe of 6-1:0.184 failed with error -71
[  100.601832][   T53] usb 6-1: USB disconnect, device number 3
[  100.656469][ T2075] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  101.166562][  T438] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  101.364628][ T2082] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  101.426952][ T2087] EXT4-fs (loop5): Ignoring removed bh option
[  101.433105][ T2087] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  101.460711][ T2091] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request.  Check SNMP counters.
[  101.497735][ T2092] FAT-fs (loop9): Directory bread(block 32) failed
[  101.531027][ T2087] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[  101.557254][  T438] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.560048][ T2092] FAT-fs (loop9): Directory bread(block 33) failed
[  101.575615][  T438] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.586006][  T438] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  101.599359][  T438] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  101.608581][  T438] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.617987][  T438] usb 8-1: config 0 descriptor??
[  101.655610][ T2092] FAT-fs (loop9): Directory bread(block 34) failed
[  101.662910][ T2092] FAT-fs (loop9): Directory bread(block 35) failed
[  101.669831][ T2092] FAT-fs (loop9): Directory bread(block 36) failed
[  101.676552][ T2092] FAT-fs (loop9): Directory bread(block 37) failed
[  101.683097][ T2092] FAT-fs (loop9): Directory bread(block 38) failed
[  101.690558][ T2092] FAT-fs (loop9): Directory bread(block 39) failed
[  101.712892][ T2092] FAT-fs (loop9): Directory bread(block 40) failed
[  101.737804][  T558] handle_bad_sector: 7 callbacks suppressed
[  101.737818][  T558] attempt to access beyond end of device
[  101.737818][  T558] loop6: rw=1, want=4992, limit=512
[  101.741220][ T2092] FAT-fs (loop9): Directory bread(block 41) failed
[  101.748109][  T558] attempt to access beyond end of device
[  101.748109][  T558] loop6: rw=1, want=8408, limit=512
[  101.816296][  T558] attempt to access beyond end of device
[  101.816296][  T558] loop6: rw=1, want=13192, limit=512
[  101.830849][  T558] attempt to access beyond end of device
[  101.830849][  T558] loop6: rw=1, want=16464, limit=512
[  101.853212][ T2092] netlink: 24 bytes leftover after parsing attributes in process `syz.9.518'.
[  101.884308][ T2107] EXT4-fs (loop5): Test dummy encryption mode enabled
[  101.897153][ T2107] EXT4-fs (loop5): Ignoring removed orlov option
[  101.904179][ T2110] IPv6: Can't replace route, no match found
[  101.912468][ T2110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2110 comm=syz.0.525
[  101.922439][ T2107] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue
[  102.057987][ T2113] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  102.097304][ T2120] all: renamed from bond_slave_1
[  102.097422][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.151982][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.934122][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.942294][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.950153][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.958137][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.965659][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.973565][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.981276][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  102.997904][  T438] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  103.008013][  T438] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  103.038031][  T438] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  103.071049][  T438] usb 8-1: USB disconnect, device number 5
[  103.103184][ T2126] fido_id[2126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  103.157918][ T2132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.532'.
[  103.170191][   T24] audit: type=1400 audit(1785635129.150:356): avc:  denied  { mmap_zero } for  pid=2129 comm="syz.6.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  103.636582][ T2139] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  103.677121][ T2137] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  103.757235][ T2135] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  103.846607][  T438] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  104.216821][  T438] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  104.287499][  T438] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  104.445011][  T438] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.776980][  T438] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  104.786235][  T438] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  104.795204][  T438] usb 8-1: Product: syz
[  104.802409][  T438] usb 8-1: Manufacturer: syz
[  104.807135][  T438] usb 8-1: SerialNumber: syz
[  104.947550][   T24] audit: type=1400 audit(1785635130.930:357): avc:  denied  { remount } for  pid=2168 comm="syz.6.542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  105.020907][ T2175] Mass Storage Function, version: 2009/09/11
[  105.028515][ T2175] LUN: removable file: (no medium)
[  105.034807][   T24] audit: type=1400 audit(1785635131.010:358): avc:  denied  { read } for  pid=2174 comm="syz.5.543" name="file" dev="configfs" ino=23632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  105.051620][ T2175] mass_storage.0/lun.0: file too small: file0
[  105.067278][  T438] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  105.166910][ T2181] IPv6: Can't replace route, no match found
[  105.174953][ T2181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2181 comm=syz.9.541
[  105.350069][   T24] audit: type=1400 audit(1785635131.330:359): avc:  denied  { map } for  pid=2183 comm="syz.5.546" path="socket:[23643]" dev="sockfs" ino=23643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  105.532749][ T2187] EXT4-fs (loop5): Ignoring removed bh option
[  105.539005][ T2187] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  105.566795][ T2187] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[  106.609939][   T25] usb 8-1: USB disconnect, device number 6
[  106.623820][   T25] usblp0: removed
[  106.644304][   T24] audit: type=1400 audit(1785635132.620:360): avc:  denied  { connect } for  pid=2211 comm="syz.7.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  106.746123][  T112] tipc: Subscription rejected, illegal request
[  107.047455][ T2206] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  107.295992][ T2237] IPv6: Can't replace route, no match found
[  107.323586][ T2237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2237 comm=syz.7.562
[  107.425922][    T9] attempt to access beyond end of device
[  107.425922][    T9] loop5: rw=1, want=16464, limit=512
[  107.617968][ T2200] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  107.660994][   T24] audit: type=1400 audit(1785635133.640:361): avc:  denied  { remount } for  pid=2243 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  107.754915][ T2252] netlink: 'syz.5.567': attribute type 4 has an invalid length.
[  107.987938][ T2265] EXT4-fs (loop5): Ignoring removed bh option
[  107.994181][ T2265] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  108.088775][ T2265] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[  108.227378][  T437] attempt to access beyond end of device
[  108.227378][  T437] loop6: rw=1, want=5624, limit=512
[  108.241560][   T24] audit: type=1400 audit(1785635134.220:362): avc:  denied  { append } for  pid=2287 comm="syz.9.580" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  109.158953][  T437] attempt to access beyond end of device
[  109.158953][  T437] loop6: rw=1, want=8272, limit=512
[  109.193378][  T437] attempt to access beyond end of device
[  109.193378][  T437] loop6: rw=1, want=12360, limit=512
[  109.262058][ T2295] IPv6: Can't replace route, no match found
[  109.275102][  T437] attempt to access beyond end of device
[  109.275102][  T437] loop6: rw=1, want=15944, limit=512
[  109.409835][ T2295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2295 comm=syz.0.578
[  109.449011][ T2305] netlink: 51 bytes leftover after parsing attributes in process `syz.5.586'.
[  109.556945][ T2314] Illegal XDP return value 4294967294, expect packet loss!
[  109.749761][ T2301] xt_hashlimit: size too large, truncated to 1048576
[  109.808552][   T24] audit: type=1400 audit(1785635135.740:363): avc:  denied  { read } for  pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  109.855471][  T273] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  109.870459][   T24] audit: type=1400 audit(1785635135.740:364): avc:  denied  { search } for  pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.891995][   T24] audit: type=1400 audit(1785635135.740:365): avc:  denied  { read } for  pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=4963 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  109.931385][   T24] audit: type=1400 audit(1785635135.740:366): avc:  denied  { open } for  pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4963 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  109.985693][   T24] audit: type=1400 audit(1785635135.740:367): avc:  denied  { getattr } for  pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4963 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  110.028372][   T24] audit: type=1400 audit(1785635135.850:368): avc:  denied  { read } for  pid=2332 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.095186][   T24] audit: type=1400 audit(1785635135.850:369): avc:  denied  { open } for  pid=2332 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.146513][  T273] usb 7-1: Using ep0 maxpacket: 32
[  110.175373][   T24] audit: type=1400 audit(1785635135.850:370): avc:  denied  { getattr } for  pid=2332 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.236701][   T24] audit: type=1400 audit(1785635136.060:371): avc:  denied  { write } for  pid=2328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.276590][  T273] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  110.289890][  T273] usb 7-1: config 0 has no interface number 0
[  110.305198][  T273] usb 7-1: config 0 interface 184 has no altsetting 0
[  110.321693][ T2335] F2FS-fs (loop9): Invalid SB checksum offset: 0
[  110.338604][ T2335] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  110.358121][ T2335] F2FS-fs (loop9): invalid crc value
[  110.392389][ T2335] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  110.446817][ T2335] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[  110.456812][ T2335] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  110.506572][  T273] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  110.525804][  T273] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.556086][  T273] usb 7-1: Product: syz
[  110.560964][  T273] usb 7-1: Manufacturer: syz
[  110.565580][  T273] usb 7-1: SerialNumber: syz
[  110.586811][  T273] usb 7-1: config 0 descriptor??
[  110.647006][  T273] smsc75xx v1.0.0
[  111.008805][ T2385] EXT4-fs (loop7): Ignoring removed bh option
[  111.038257][ T1744] attempt to access beyond end of device
[  111.038257][ T1744] loop9: rw=2049, want=45104, limit=40427
[  111.040977][ T2385] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  111.051629][ T2393] overlayfs: failed to resolve './file0': -2
[  111.090129][ T2374] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  111.118031][ T2374] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  111.127802][ T2385] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[  111.165296][ T2374] F2FS-fs (loop5): invalid crc value
[  111.195541][ T2374] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  111.270061][ T2398] IPv6: Can't replace route, no match found
[  111.278184][ T2398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2398 comm=syz.0.608
[  111.293842][ T2374] F2FS-fs (loop5): Start checkpoint disabled!
[  111.340671][ T2374] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  111.357039][ T2374] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  111.433766][ T2374] attempt to access beyond end of device
[  111.433766][ T2374] loop5: rw=2049, want=55304, limit=40427
[  111.463956][ T2374] attempt to access beyond end of device
[  111.463956][ T2374] loop5: rw=2049, want=57344, limit=40427
[  111.508641][ T2374] attempt to access beyond end of device
[  111.508641][ T2374] loop5: rw=2049, want=126976, limit=40427
[  111.530945][ T2374] attempt to access beyond end of device
[  111.530945][ T2374] loop5: rw=2049, want=90112, limit=40427
[  111.612171][ T2419] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  111.628009][ T2419] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  111.645551][ T2419] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  111.674028][ T2419] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  111.688523][ T2419] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  111.698547][ T2419] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  111.722433][ T2419] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  112.180790][ T2446] IPv6: Can't replace route, no match found
[  112.189214][ T2446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2446 comm=syz.9.624
[  112.286594][  T273] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  112.306531][  T273] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  112.336618][  T273] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  112.359995][ T2440] EXT4-fs (loop5): Ignoring removed bh option
[  112.364187][  T273] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  112.375588][ T2440] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  112.376045][  T273] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  112.398168][  T273] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  112.408090][  T273] smsc75xx: probe of 7-1:0.184 failed with error -71
[  112.423119][  T273] usb 7-1: USB disconnect, device number 5
[  112.448051][ T2440] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[  112.732921][ T2474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2474 comm=syz.0.630
[  113.040196][ T2479] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  113.065217][ T2479] EXT4-fs error (device loop6): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  113.079929][ T2479] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28
[  113.092737][ T2479] EXT4-fs (loop6): This should not happen!! Data will be lost
[  113.092737][ T2479] 
[  113.102840][ T2479] EXT4-fs (loop6): Total free blocks count 0
[  113.109116][ T2479] EXT4-fs (loop6): Free/Dirty block details
[  113.115477][ T2479] EXT4-fs (loop6): free_blocks=4096
[  113.121174][ T2479] EXT4-fs (loop6): dirty_blocks=512
[  113.126660][ T2479] EXT4-fs (loop6): Block reservation details
[  113.132898][ T2479] EXT4-fs (loop6): i_reserved_data_blocks=32
[  113.142176][ T2479] EXT4-fs error (device loop6) in ext4_setattr:5745: error 28
[  113.256553][  T409] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  113.438056][ T2500] F2FS-fs (loop6): fault_injection options not supported
[  113.445465][ T2500] F2FS-fs (loop6): fault_type options not supported
[  113.452834][ T2500] F2FS-fs (loop6): invalid crc value
[  113.460791][ T2500] F2FS-fs (loop6): Found nat_bits in checkpoint
[  113.482269][ T2500] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  113.509947][ T2514] IPv6: Can't replace route, no match found
[  113.518549][ T2514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2514 comm=syz.5.643
[  113.531410][   T24] kauditd_printk_skb: 13 callbacks suppressed
[  113.531421][   T24] audit: type=1400 audit(1785635139.500:385): avc:  denied  { create } for  pid=2499 comm="syz.6.641" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  113.560788][   T24] audit: type=1400 audit(1785635139.500:386): avc:  denied  { read write } for  pid=2499 comm="syz.6.641" name="bus" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  113.583966][   T24] audit: type=1400 audit(1785635139.510:387): avc:  denied  { open } for  pid=2499 comm="syz.6.641" path="/93/file0/bus" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  113.599378][  T112] handle_bad_sector: 3 callbacks suppressed
[  113.599391][  T112] attempt to access beyond end of device
[  113.599391][  T112] loop6: rw=2049, want=45104, limit=40427
[  113.624421][ T2500] VFS:Filesystem freeze failed
[  113.649597][  T409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.661045][  T409] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.671333][  T409] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  113.681013][  T409] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.690240][  T409] usb 10-1: config 0 descriptor??
[  113.846581][  T302] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  114.439514][  T409] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  114.478081][  T409] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0005/input/input9
[  114.750004][  T409] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0
[  114.786794][  T409] usb 10-1: USB disconnect, device number 2
[  114.863216][ T2539] fido_id[2539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  114.917594][ T2541] erofs: (device loop6): mounted with root inode @ nid 36.
[  115.006104][ T2557] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[  115.016797][ T2557] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  115.106887][  T302] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  115.118449][  T302] usb 8-1: config 0 interface 0 has no altsetting 0
[  115.126748][   T24] audit: type=1400 audit(1785635141.100:388): avc:  denied  { read write } for  pid=2564 comm="syz.5.663" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  115.136552][  T302] usb 8-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  115.181379][   T24] audit: type=1400 audit(1785635141.110:389): avc:  denied  { open } for  pid=2564 comm="syz.5.663" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  115.192331][  T302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.231853][   T15] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  115.278720][   T15] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  115.301034][  T302] usb 8-1: config 0 descriptor??
[  115.306854][   T24] audit: type=1400 audit(1785635141.280:390): avc:  denied  { unmount } for  pid=1744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  115.326902][ T2518] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  115.879828][ T2574] fido_id[2574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  116.011202][   T24] audit: type=1400 audit(1785635141.990:391): avc:  denied  { view } for  pid=2515 comm="syz.7.645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  116.610198][ T2601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=2601 comm=syz.6.668
[  116.796520][ T2589] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.806550][  T302] usb 8-1: string descriptor 0 read error: -71
[  116.826574][ T2589] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.829657][ T2598] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  116.834185][ T2589] device bridge_slave_0 entered promiscuous mode
[  116.857854][  T302] uclogic 0003:5543:0045.0007: failed retrieving string descriptor #200: -71
[  116.867824][ T2598] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.881131][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.889951][ T2589] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.894345][  T302] uclogic 0003:5543:0045.0007: failed retrieving pen parameters: -71
[  116.899831][ T2589] device bridge_slave_1 entered promiscuous mode
[  116.924123][  T302] uclogic 0003:5543:0045.0007: failed probing pen v2 parameters: -71
[  116.932888][  T302] uclogic 0003:5543:0045.0007: failed probing parameters: -71
[  116.940922][  T302] uclogic: probe of 0003:5543:0045.0007 failed with error -71
[  116.959692][  T302] usb 8-1: USB disconnect, device number 7
[  116.962372][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.972819][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.980123][ T2589] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.987183][ T2589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.020478][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.031422][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.039479][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.055254][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  117.073122][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.080426][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.097748][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  117.106391][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.113522][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.134564][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  117.148818][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  117.164711][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.185702][ T2589] device veth0_vlan entered promiscuous mode
[  117.245636][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.278530][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.308409][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.326906][ T2589] device veth1_macvtap entered promiscuous mode
[  117.348058][ T2612] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  117.370435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.392788][ T2612] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  117.406891][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.464202][   T24] audit: type=1400 audit(1785635143.440:392): avc:  denied  { create } for  pid=2611 comm="syz.7.679" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  117.480674][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.517032][   T24] audit: type=1400 audit(1785635143.490:393): avc:  denied  { rename } for  pid=2611 comm="syz.7.679" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  117.569211][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.578820][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.597565][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.606338][ T2622] Disabled LAPIC found during irq injection
[  117.611601][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.674878][   T24] audit: type=1326 audit(1785635143.650:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2628 comm="syz.7.682" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe269ae1019 code=0x0
[  117.720269][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  117.738857][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  117.749590][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  117.758126][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  117.766904][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  117.775199][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  117.794231][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  117.811589][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  117.940064][  T375] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  118.062933][ T2638] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  118.157371][  T437] device bridge_slave_1 left promiscuous mode
[  118.163579][  T437] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.184484][  T437] device bridge_slave_0 left promiscuous mode
[  118.186515][  T375] usb 1-1: Using ep0 maxpacket: 32
[  118.201515][  T437] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.219674][  T437] device veth1_macvtap left promiscuous mode
[  118.237718][  T437] device veth0_vlan left promiscuous mode
[  118.306767][  T375] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  118.330534][  T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.359330][  T375] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  118.390023][  T375] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  118.415699][  T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.442706][  T375] usb 1-1: config 0 descriptor??
[  118.830493][  T558] attempt to access beyond end of device
[  118.830493][  T558] loop5: rw=1, want=5152, limit=512
[  118.842948][ T2678] tipc: Started in network mode
[  118.851687][ T2678] tipc: Own node identity 2007ff, cluster identity 4711
[  118.863762][  T558] attempt to access beyond end of device
[  118.863762][  T558] loop5: rw=1, want=8776, limit=512
[  118.885022][ T2678] tipc: 32-bit node address hash set to 2007ff
[  118.894251][  T558] attempt to access beyond end of device
[  118.894251][  T558] loop5: rw=1, want=13360, limit=512
[  118.927939][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  118.936088][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  118.947634][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  118.955906][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  118.965686][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  118.999314][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.009413][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.026056][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.035813][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.056641][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.075231][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.083792][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.106669][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.115174][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.126971][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x2
[  119.135122][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.156554][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.164697][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.173489][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.181770][  T375] logitech-djreceiver 0003:046D:C517.0008: unknown main item tag 0x0
[  119.191713][  T375] logitech-djreceiver 0003:046D:C517.0008: hidraw0: USB HID v5.40 Device [HID 046d:c517] on usb-dummy_hcd.0-1/input0
[  119.268539][  T375] usb 1-1: USB disconnect, device number 2
[  119.302043][ T2696] fido_id[2696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  119.354156][ T2684] F2FS-fs (loop5): invalid crc value
[  119.386151][ T2684] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  119.416175][ T2699] fuse: root generation should be zero
[  119.422575][ T2684] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  119.436551][ T1827] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  119.545771][   T24] kauditd_printk_skb: 4 callbacks suppressed
[  119.545783][   T24] audit: type=1400 audit(1785635145.520:399): avc:  denied  { create } for  pid=2707 comm="syz.6.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  119.585969][ T2684] overlayfs: failed to resolve './file1/file0': -2
[  119.601589][   T24] audit: type=1400 audit(1785635145.550:400): avc:  denied  { connect } for  pid=2707 comm="syz.6.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  119.631000][  T371] attempt to access beyond end of device
[  119.631000][  T371] loop5: rw=2049, want=45120, limit=40427
[  119.816958][ T1827] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  119.940680][ T2692] F2FS-fs (loop7): Test dummy encryption mode enabled
[  119.977692][ T2692] F2FS-fs (loop7): invalid crc value
[  120.016610][ T1827] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  120.045710][ T1827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  120.055574][ T2692] F2FS-fs (loop7): Found nat_bits in checkpoint
[  120.077660][ T1827] usb 2-1: Product: syz
[  120.081872][ T1827] usb 2-1: Manufacturer: syz
[  120.099614][ T1827] usb 2-1: SerialNumber: syz
[  120.100762][ T2692] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  120.196366][   T24] audit: type=1400 audit(1785635146.170:401): avc:  denied  { link } for  pid=2691 comm="syz.7.702" name="file1" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  120.242384][  T518] F2FS-fs (loop7): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix.
[  120.334705][ T2723] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  120.367284][ T1827] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  120.505514][   T24] audit: type=1400 audit(1785635146.480:402): avc:  denied  { listen } for  pid=2744 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  120.527304][   T24] audit: type=1400 audit(1785635146.510:403): avc:  denied  { connect } for  pid=2744 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  120.547847][   T24] audit: type=1400 audit(1785635146.510:404): avc:  denied  { write } for  pid=2744 comm="syz.0.720" path="socket:[27005]" dev="sockfs" ino=27005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  120.684452][ T1827] usb 2-1: USB disconnect, device number 3
[  120.691071][ T2756] EXT4-fs (loop5): Ignoring removed nobh option
[  120.697469][    C0] usblp0: nonzero write bulk status received: -71
[  120.728029][ T2756] fscrypt (loop5, inode 2): Error -61 getting encryption context
[  120.729408][ T1827] usblp0: removed
[  120.735991][ T2756] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61
[  120.748533][ T2756] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #13: comm syz.5.724: inode has both inline data and extents flags
[  120.762932][ T2756] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.724: couldn't read orphan inode 13 (err -117)
[  120.775247][ T2756] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue
[  120.807366][    T7] tipc: Left network mode
[  120.889648][ T2765] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  120.910250][ T2765] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  120.910808][ T2761] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.931534][ T2765] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  120.936284][ T2761] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.964396][ T2761] device bridge_slave_0 entered promiscuous mode
[  120.975055][ T2761] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.977293][   T24] audit: type=1400 audit(1785635146.950:405): avc:  denied  { mounton } for  pid=2762 comm="syz.5.726" path="/159/bus/file0" dev="loop5" ino=1048745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  120.998782][ T2761] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.023457][ T2761] device bridge_slave_1 entered promiscuous mode
[  121.097672][ T2753] F2FS-fs (loop6): invalid crc value
[  121.104188][   T24] audit: type=1400 audit(1785635147.080:406): avc:  denied  { rmdir } for  pid=371 comm="syz-executor" name="file0" dev="loop5" ino=1048745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  121.157672][ T2753] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  121.227050][ T2761] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.234163][ T2761] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.241589][ T2761] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.249089][ T2761] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.275652][ T2753] F2FS-fs (loop6): Start checkpoint disabled!
[  121.286740][ T2753] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  121.335025][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  121.346231][  T558] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.358822][  T558] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.367695][  T437] attempt to access beyond end of device
[  121.367695][  T437] loop6: rw=2049, want=45120, limit=40427
[  121.393398][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.401952][  T558] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.409018][  T558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.417091][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.425428][  T558] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.432834][  T558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.447239][    T7] device bridge_slave_1 left promiscuous mode
[  121.453637][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.463129][    T7] device bridge_slave_0 left promiscuous mode
[  121.469702][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.496603][    T7] device veth1_macvtap left promiscuous mode
[  121.502846][    T7] device veth0_vlan left promiscuous mode
[  121.687550][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.699752][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.723133][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.741616][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.756944][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  121.767748][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.809740][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.827072][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.837474][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.851735][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.860496][ T2761] device veth0_vlan entered promiscuous mode
[  121.885276][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.895773][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.910567][ T2761] device veth1_macvtap entered promiscuous mode
[  121.922345][   T24] audit: type=1400 audit(1785635147.900:407): avc:  denied  { mounton } for  pid=2791 comm="syz.0.738" path="/56/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  121.945068][ T2792] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  121.957955][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  121.980366][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.000564][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.029215][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.050765][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.153786][ T2797] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.160997][ T2797] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.168724][ T2797] device bridge_slave_0 entered promiscuous mode
[  122.176303][ T2797] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.185034][ T2797] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.193282][   T24] audit: type=1400 audit(1785635148.170:408): avc:  denied  { mounton } for  pid=2806 comm="syz.3.742" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  122.195949][ T2797] device bridge_slave_1 entered promiscuous mode
[  122.256570][ T1827] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  122.276534][  T438] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  122.290738][ T2797] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.297854][ T2797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.305243][ T2797] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.312525][ T2797] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.338348][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.348103][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.355482][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.372176][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.380880][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.387973][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.396008][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.405051][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.412150][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.429115][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.437210][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.445165][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.453446][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.466228][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.474917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.494262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.503119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.511618][ T2797] device veth0_vlan entered promiscuous mode
[  122.518896][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.527063][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.542821][ T2797] device veth1_macvtap entered promiscuous mode
[  122.552310][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  122.560976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  122.569297][ T1827] usb 7-1: Using ep0 maxpacket: 32
[  122.572644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  122.585757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.594373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.612927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.631016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.639273][  T438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.639288][  T438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.639306][  T438] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  122.639329][  T438] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  122.639342][  T438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.667900][  T438] usb 1-1: config 0 descriptor??
[  122.726284][ T2824] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=632447684 (1264895368 ns) > initial count (260906836 ns). Using initial count to start timer.
[  122.729261][ T2827] device syzkaller0 entered promiscuous mode
[  122.744276][ T1827] usb 7-1: config 2 has an invalid interface number: 88 but max is 0
[  122.759419][ T1827] usb 7-1: config 2 has no interface number 0
[  122.765641][ T1827] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  122.778239][ T1827] usb 7-1: config 2 interface 88 has no altsetting 0
[  122.956751][ T1827] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  122.966136][ T1827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  122.974476][ T1827] usb 7-1: Product: syz
[  122.978930][ T1827] usb 7-1: Manufacturer: syz
[  122.983600][ T1827] usb 7-1: SerialNumber: syz
[  123.006630][ T2794] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  123.066744][    T5] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  123.167596][  T438] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  123.177282][  T438] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  123.228863][ T2794] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  123.436614][    T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  123.448017][    T5] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  123.457659][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.480404][    T5] usb 3-1: config 0 descriptor??
[  123.498401][ T2829] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  123.823225][ T2846] xt_hashlimit: size too large, truncated to 1048576
[  123.957707][    T5] kye 0003:0458:5015.000A: unknown main item tag 0x0
[  123.964757][    T5] kye 0003:0458:5015.000A: unknown main item tag 0x0
[  123.972273][    T5] kye 0003:0458:5015.000A: unknown main item tag 0x0
[  123.979541][    T5] kye 0003:0458:5015.000A: unknown main item tag 0x0
[  123.986678][    T5] kye 0003:0458:5015.000A: unknown main item tag 0x0
[  123.993795][    T5] kye 0003:0458:5015.000A: unknown main item tag 0x0
[  124.000902][    T5] kye 0003:0458:5015.000A: unknown main item tag 0x0
[  124.007689][    T5] kye 0003:0458:5015.000A: item fetching failed at offset 10/40
[  124.016127][    T5] kye 0003:0458:5015.000A: parse failed
[  124.022211][    T5] kye: probe of 0003:0458:5015.000A failed with error -22
[  124.126675][ T1827] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  124.137120][ T1827] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  124.148493][ T1827] asix: probe of 7-1:2.88 failed with error -71
[  124.156206][ T1827] usb 7-1: USB disconnect, device number 6
[  124.180225][    T5] usb 3-1: USB disconnect, device number 3
[  124.471121][ T2867] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.478350][ T2867] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.485777][ T2867] device bridge_slave_0 entered promiscuous mode
[  124.492908][ T2867] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.497273][ T1827] usb 1-1: USB disconnect, device number 3
[  124.501089][ T2867] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.513330][ T2867] device bridge_slave_1 entered promiscuous mode
[  124.563868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  124.571781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  124.581380][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  124.590149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  124.598557][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.605606][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.613711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  124.624481][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  124.632873][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  124.641629][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.648723][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.678265][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  124.686866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  124.705919][ T2867] device veth0_vlan entered promiscuous mode
[  124.716895][ T2872] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  124.724705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.734202][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.743531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.751308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.757502][ T2872] EXT4-fs (loop6): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue
[  124.771211][ T2872] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.789954][  T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.799899][ T2867] device veth1_macvtap entered promiscuous mode
[  124.810797][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.824878][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.967486][    T7] device bridge_slave_1 left promiscuous mode
[  124.973811][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.981301][    T7] device bridge_slave_0 left promiscuous mode
[  124.987691][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.995520][    T7] device veth1_macvtap left promiscuous mode
[  125.001974][    T7] device veth0_vlan left promiscuous mode
[  125.016830][ T1827] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  125.132088][   T24] kauditd_printk_skb: 2 callbacks suppressed
[  125.132101][   T24] audit: type=1400 audit(1785635151.110:411): avc:  denied  { setopt } for  pid=2896 comm="syz.6.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  125.163990][   T24] audit: type=1400 audit(1785635151.120:412): avc:  denied  { read } for  pid=2896 comm="syz.6.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  125.296551][ T1827] usb 3-1: Using ep0 maxpacket: 32
[  125.436605][ T1827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.446964][ T1827] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  125.456159][ T1827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.467995][ T1827] usb 3-1: config 0 descriptor??
[  125.518933][ T1827] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  125.721191][   T24] audit: type=1400 audit(1785635151.700:413): avc:  denied  { ioctl } for  pid=2879 comm="syz.2.769" path="socket:[28005]" dev="sockfs" ino=28005 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  125.749144][ T1827] usb 3-1: USB disconnect, device number 4
[  125.973506][ T2912] F2FS-fs (loop6): invalid crc value
[  125.996876][ T2912] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  126.085709][ T2912] F2FS-fs (loop6): Start checkpoint disabled!
[  126.098564][ T2912] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  126.203043][  T508] attempt to access beyond end of device
[  126.203043][  T508] loop6: rw=524288, want=45072, limit=40427
[  126.216194][  T508] attempt to access beyond end of device
[  126.216194][  T508] loop6: rw=0, want=45072, limit=40427
[  126.246707][    T7] attempt to access beyond end of device
[  126.246707][    T7] loop6: rw=2049, want=40992, limit=40427
[  126.302715][   T24] audit: type=1400 audit(1785635152.280:414): avc:  denied  { setattr } for  pid=2936 comm="syz.2.790" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  126.626563][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.633756][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.643122][ T2946] device bridge_slave_0 entered promiscuous mode
[  126.660233][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.667919][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.675678][ T2946] device bridge_slave_1 entered promiscuous mode
[  126.715933][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.723603][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.731672][ T2947] device bridge_slave_0 entered promiscuous mode
[  126.748784][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.755978][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.763769][ T2947] device bridge_slave_1 entered promiscuous mode
[  126.828285][    T7] device bridge_slave_1 left promiscuous mode
[  126.834681][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.842910][    T7] device bridge_slave_0 left promiscuous mode
[  126.849213][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.867340][    T7] device veth1_macvtap left promiscuous mode
[  126.873492][    T7] device veth0_vlan left promiscuous mode
[  126.936597][  T470] Bluetooth: hci0: command 0x1003 tx timeout
[  126.943013][ T2890] Bluetooth: hci0: sending frame failed (-49)
[  127.002682][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.009788][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.017257][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.024304][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.068614][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.075710][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.083046][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.090204][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.101690][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.110495][  T437] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.118011][  T437] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.125438][  T437] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.134407][  T437] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.152463][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.161182][  T437] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.168313][  T437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.175886][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.184988][  T437] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.192128][  T437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.219488][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.228110][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.236158][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.259111][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.268257][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.277091][  T437] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.284141][  T437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.292440][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.300630][   T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  127.308450][  T437] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.315498][  T437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.337771][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.358870][ T2946] device veth0_vlan entered promiscuous mode
[  127.368530][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.378153][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.386288][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.395270][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.403583][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.415596][ T2947] device veth0_vlan entered promiscuous mode
[  127.422304][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  127.431184][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.439022][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.458437][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.468309][ T2946] device veth1_macvtap entered promiscuous mode
[  127.482113][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.492414][ T2947] device veth1_macvtap entered promiscuous mode
[  127.510005][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.519421][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.539005][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.548119][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.556900][   T25] usb 1-1: Using ep0 maxpacket: 16
[  127.690215][ T2965] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.801: iget: bad i_size value: 38620345925642
[  127.703995][ T2965] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.801: couldn't read orphan inode 15 (err -117)
[  127.716310][ T2965] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[  127.846584][   T25] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  127.858544][    T7] device bridge_slave_1 left promiscuous mode
[  127.863657][ T2974] EXT4-fs (loop4): Ignoring removed orlov option
[  127.871360][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.874863][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.886689][   T25] usb 1-1: Product: syz
[  127.890930][   T25] usb 1-1: Manufacturer: syz
[  127.895718][   T25] usb 1-1: SerialNumber: syz
[  127.905030][    T7] device bridge_slave_0 left promiscuous mode
[  127.912949][ T2974] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,,errors=continue
[  127.938083][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.959822][ T2965] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.801: bg 0: block 5: invalid block bitmap
[  127.981057][    T7] device veth1_macvtap left promiscuous mode
[  127.993758][    T7] device veth0_vlan left promiscuous mode
[  128.009981][ T2965] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  128.045921][ T2946] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  128.071426][ T2965] EXT4-fs (loop9): This should not happen!! Data will be lost
[  128.071426][ T2965] 
[  128.086889][ T2965] EXT4-fs (loop9): Total free blocks count 0
[  128.103178][ T2946] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  128.116630][ T2965] EXT4-fs (loop9): Free/Dirty block details
[  128.142683][ T2965] EXT4-fs (loop9): free_blocks=0
[  128.156216][ T2965] EXT4-fs (loop9): dirty_blocks=3300
[  128.163501][ T2965] EXT4-fs (loop9): Block reservation details
[  128.172887][ T2965] EXT4-fs (loop9): i_reserved_data_blocks=3300
[  128.222941][  T437] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1244 with error 28
[  128.236098][  T437] EXT4-fs (loop9): This should not happen!! Data will be lost
[  128.236098][  T437] 
[  128.505806][ T2980] EXT4-fs (loop9): Ignoring removed bh option
[  128.516779][ T2980] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  128.544179][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.560994][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.574178][ T2982] device bridge_slave_0 entered promiscuous mode
[  128.588543][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.588657][ T2980] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,,errors=continue
[  128.596815][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.629477][ T2982] device bridge_slave_1 entered promiscuous mode
[  128.722942][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.733607][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.778420][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.792321][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.796633][   T25] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[  128.811202][  T437] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.818441][  T437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.819133][   T25] usb 1-1: USB disconnect, device number 4
[  128.837290][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.855578][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.872115][  T437] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.879317][  T437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.912797][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.923025][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.932705][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.958607][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  128.978996][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  128.997127][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.016527][  T470] Bluetooth: hci0: command 0x1001 tx timeout
[  129.023123][ T2890] Bluetooth: hci0: sending frame failed (-49)
[  129.029665][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.038881][ T2982] device veth0_vlan entered promiscuous mode
[  129.069352][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.098433][ T2982] device veth1_macvtap entered promiscuous mode
[  129.138542][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.168777][  T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  129.238571][ T2994] EXT4-fs (loop9): Test dummy encryption mode enabled
[  129.250557][ T2994] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue
[  129.271760][ T2994] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  129.282925][    T7] device bridge_slave_1 left promiscuous mode
[  129.295116][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.303938][    T7] device bridge_slave_0 left promiscuous mode
[  129.310670][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.325411][    T7] device veth1_macvtap left promiscuous mode
[  129.332959][    T7] device veth0_vlan left promiscuous mode
[  129.343079][   T24] audit: type=1400 audit(1785635155.320:415): avc:  denied  { watch watch_reads } for  pid=2996 comm="syz.7.808" path="/0/file0" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  129.740946][ T3006] tmpfs: Unknown parameter 'nr_blo00000000000000000000'
[  130.272289][ T3025] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40
[  130.311053][  T558] attempt to access beyond end of device
[  130.311053][  T558] loop7: rw=1, want=8128, limit=512
[  130.328465][  T558] attempt to access beyond end of device
[  130.328465][  T558] loop7: rw=1, want=14320, limit=512
[  130.340018][  T375] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  130.359274][  T558] attempt to access beyond end of device
[  130.359274][  T558] loop7: rw=1, want=16464, limit=512
[  130.516686][   T24] audit: type=1400 audit(1785635156.490:416): avc:  denied  { mounton } for  pid=3029 comm="syz.7.820" path="/proc/8/task" dev="proc" ino=28466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  130.621172][ T3038] APIC base relocation is unsupported by KVM
[  130.766587][  T375] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  130.808016][ T3043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=3043 comm=syz.7.823
[  130.871599][  T375] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  131.031993][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'.
[  131.046339][ T3046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'.
[  131.089988][ T3048] kvm: pic: non byte read
[  131.094601][ T3048] kvm: pic: non byte read
[  131.099371][  T470] Bluetooth: hci0: command 0x1009 tx timeout
[  131.105810][ T3048] kvm: pic: level sensitive irq not supported
[  131.105866][ T3048] kvm: pic: non byte read
[  131.116758][ T3048] kvm: pic: level sensitive irq not supported
[  131.116814][ T3048] kvm: pic: non byte read
[  131.127858][ T3048] kvm: pic: level sensitive irq not supported
[  131.127912][ T3048] kvm: pic: non byte read
[  131.136643][  T375] usb 10-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40
[  131.139112][ T3048] kvm: pic: level sensitive irq not supported
[  131.148033][ T3048] kvm: pic: non byte read
[  131.155061][  T375] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.159225][ T3048] kvm: pic: level sensitive irq not supported
[  131.167404][ T3048] kvm: pic: non byte read
[  131.178300][ T3048] kvm: pic: level sensitive irq not supported
[  131.178355][ T3048] kvm: pic: non byte read
[  131.179489][  T375] usb 10-1: Product: syz
[  131.184749][ T3048] kvm: pic: level sensitive irq not supported
[  131.193693][ T3048] kvm: pic: non byte read
[  131.199162][  T375] usb 10-1: Manufacturer: syz
[  131.200126][ T3048] kvm: pic: level sensitive irq not supported
[  131.209228][ T3048] kvm: pic: non byte read
[  131.209281][  T375] usb 10-1: SerialNumber: syz
[  131.215618][ T3048] kvm: pic: level sensitive irq not supported
[  131.225068][ T3048] kvm: pic: level sensitive irq not supported
[  131.660236][  T375] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  131.686574][  T375] usb 10-1: unit 3 not found!
[  131.691317][  T375] usb 10-1: unit 4 not found!
[  131.729777][  T375] usb 10-1: USB disconnect, device number 3
[  131.790060][ T3059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=3059 comm=syz.7.830
[  132.098667][  T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  132.241056][ T3062] ==================================================================
[  132.249194][ T3062] BUG: KASAN: use-after-free in kobject_get+0x113/0x120
[  132.256161][ T3062] Read of size 1 at addr ffff88810ad5083c by task syz.9.831/3062
[  132.263882][ T3062] 
[  132.266322][ T3062] CPU: 1 PID: 3062 Comm: syz.9.831 Not tainted syzkaller #0
[  132.273620][ T3062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  132.284098][ T3062] Call Trace:
[  132.287462][ T3062]  __dump_stack+0x21/0x24
[  132.291824][ T3062]  dump_stack_lvl+0x1a7/0x208
[  132.296613][ T3062]  ? show_regs_print_info+0x18/0x18
[  132.301839][ T3062]  ? thaw_kernel_threads+0x220/0x220
[  132.307151][ T3062]  print_address_description+0x7f/0x2c0
[  132.312810][ T3062]  ? kobject_get+0x113/0x120
[  132.317429][ T3062]  kasan_report+0x100/0x140
[  132.321956][ T3062]  ? kobject_get+0x113/0x120
[  132.326580][ T3062]  __asan_report_load1_noabort+0x14/0x20
[  132.332331][ T3062]  kobject_get+0x113/0x120
[  132.336777][ T3062]  device_add+0x331/0xc00
[  132.341308][ T3062]  ? kobject_set_name_vargs+0xca/0x110
[  132.346973][ T3062]  device_create+0x26c/0x300
[  132.351687][ T3062]  ? root_device_unregister+0x80/0x80
[  132.357091][ T3062]  create_function_device+0x60/0x70
[  132.362309][ T3062]  f_midi_alloc_inst+0x1a8/0x380
[  132.367370][ T3062]  usb_get_function_instance+0xe2/0x2f0
[  132.372938][ T3062]  function_make+0x118/0x350
[  132.377559][ T3062]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  132.383911][ T3062]  ? mutex_trylock+0xb0/0xb0
[  132.388652][ T3062]  ? configfs_mkdir+0x504/0xd90
[  132.393523][ T3062]  configfs_mkdir+0x5d2/0xd90
[  132.398226][ T3062]  ? show_sid+0x1b0/0x1b0
[  132.402767][ T3062]  ? configfs_lookup+0x500/0x500
[  132.407859][ T3062]  ? __lookup_hash+0x122/0x250
[  132.412662][ T3062]  ? security_inode_mkdir+0xbd/0x110
[  132.418149][ T3062]  vfs_mkdir+0x42c/0x600
[  132.422558][ T3062]  do_mkdirat+0x14c/0x340
[  132.426914][ T3062]  __x64_sys_mkdirat+0x7b/0x90
[  132.431701][ T3062]  do_syscall_64+0x31/0x40
[  132.436141][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  132.442055][ T3062] RIP: 0033:0x7efed9076019
[  132.446505][ T3062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.466355][ T3062] RSP: 002b:00007efed7acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  132.474969][ T3062] RAX: ffffffffffffffda RBX: 00007efed92fdfa0 RCX: 00007efed9076019
[  132.483049][ T3062] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  132.491346][ T3062] RBP: 00007efed910d00c R08: 0000000000000000 R09: 0000000000000000
[  132.499335][ T3062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.507325][ T3062] R13: 00007efed92fe038 R14: 00007efed92fdfa0 R15: 00007ffff51e5728
[  132.515317][ T3062] 
[  132.517770][ T3062] Allocated by task 2761:
[  132.522126][ T3062]  __kasan_slab_alloc+0xb7/0xe0
[  132.527187][ T3062]  slab_post_alloc_hook+0x5d/0x2f0
[  132.532350][ T3062]  kmem_cache_alloc+0x15a/0x2d0
[  132.537303][ T3062]  getname_flags+0xba/0x510
[  132.541827][ T3062]  __x64_sys_unlink+0x3c/0x50
[  132.546619][ T3062]  do_syscall_64+0x31/0x40
[  132.551056][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  132.556999][ T3062] 
[  132.559339][ T3062] Freed by task 2761:
[  132.563336][ T3062]  kasan_set_track+0x4a/0x70
[  132.567938][ T3062]  kasan_set_free_info+0x23/0x40
[  132.572893][ T3062]  ____kasan_slab_free+0x125/0x160
[  132.578020][ T3062]  __kasan_slab_free+0x11/0x20
[  132.582810][ T3062]  slab_free_freelist_hook+0xc5/0x190
[  132.588204][ T3062]  kmem_cache_free+0x100/0x2d0
[  132.592986][ T3062]  do_unlinkat+0x5e1/0x670
[  132.597425][ T3062]  __x64_sys_unlink+0x49/0x50
[  132.602208][ T3062]  do_syscall_64+0x31/0x40
[  132.606667][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  132.612568][ T3062] 
[  132.615001][ T3062] The buggy address belongs to the object at ffff88810ad50000
[  132.615001][ T3062]  which belongs to the cache names_cache of size 4096
[  132.629332][ T3062] The buggy address is located 2108 bytes inside of
[  132.629332][ T3062]  4096-byte region [ffff88810ad50000, ffff88810ad51000)
[  132.642791][ T3062] The buggy address belongs to the page:
[  132.648453][ T3062] page:ffffea00042b5400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ad50
[  132.658749][ T3062] head:ffffea00042b5400 order:3 compound_mapcount:0 compound_pincount:0
[  132.667105][ T3062] flags: 0x4000000000010200(slab|head)
[  132.672623][ T3062] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018bc80
[  132.681234][ T3062] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
[  132.689915][ T3062] page dumped because: kasan: bad access detected
[  132.696347][ T3062] page_owner tracks the page as allocated
[  132.702092][ T3062] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2761, ts 131301921702, free_ts 131294476015
[  132.722747][ T3062]  prep_new_page+0x176/0x190
[  132.727768][ T3062]  get_page_from_freelist+0x225f/0x23f0
[  132.733306][ T3062]  __alloc_pages_nodemask+0x29a/0x640
[  132.738675][ T3062]  new_slab+0x84/0x3f0
[  132.742827][ T3062]  ___slab_alloc+0x2f8/0x4c0
[  132.747501][ T3062]  __slab_alloc+0x63/0xa0
[  132.751829][ T3062]  kmem_cache_alloc+0x1a4/0x2d0
[  132.756673][ T3062]  getname_flags+0xba/0x510
[  132.761187][ T3062]  getname+0x19/0x20
[  132.765084][ T3062]  do_sys_openat2+0xde/0x750
[  132.769674][ T3062]  __x64_sys_openat+0x136/0x160
[  132.774525][ T3062]  do_syscall_64+0x31/0x40
[  132.779024][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  132.784991][ T3062] page last free stack trace:
[  132.789663][ T3062]  __free_pages_ok+0x80b/0x830
[  132.794468][ T3062]  __free_pages+0xd8/0x390
[  132.798886][ T3062]  __free_slab+0xcf/0x190
[  132.803294][ T3062]  unfreeze_partials+0x150/0x180
[  132.808313][ T3062]  put_cpu_partial+0xc1/0x180
[  132.813089][ T3062]  __slab_free+0x2c9/0x3a0
[  132.817499][ T3062]  ___cache_free+0x10e/0x130
[  132.822180][ T3062]  qlink_free+0x50/0x90
[  132.826340][ T3062]  qlist_free_all+0x5f/0xb0
[  132.830846][ T3062]  kasan_quarantine_reduce+0x14a/0x160
[  132.836370][ T3062]  __kasan_slab_alloc+0x2f/0xe0
[  132.841303][ T3062]  slab_post_alloc_hook+0x5d/0x2f0
[  132.846408][ T3062]  kmem_cache_alloc+0x15a/0x2d0
[  132.851253][ T3062]  getname_flags+0xba/0x510
[  132.856008][ T3062]  __x64_sys_unlink+0x3c/0x50
[  132.860680][ T3062]  do_syscall_64+0x31/0x40
[  132.865175][ T3062] 
[  132.867501][ T3062] Memory state around the buggy address:
[  132.873125][ T3062]  ffff88810ad50700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.881178][ T3062]  ffff88810ad50780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.889233][ T3062] >ffff88810ad50800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.897409][ T3062]                                         ^
[  132.903308][ T3062]  ffff88810ad50880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.911371][ T3062]  ffff88810ad50900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.919435][ T3062] ==================================================================
[  132.927517][ T3062] Disabling lock debugging due to kernel taint
[  132.943844][ T3062] ------------[ cut here ]------------
[  132.953988][ T3062] kobject: '(null)' (ffff88810ad50800): is not initialized, yet kobject_get() is being called.
[  132.979114][ T3062] WARNING: CPU: 1 PID: 3062 at lib/kobject.c:666 kobject_get+0x7c/0x120
[  132.987973][ T3062] Modules linked in:
[  132.991981][ T3062] CPU: 1 PID: 3062 Comm: syz.9.831 Tainted: G    B             syzkaller #0
[  133.001647][ T3062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  133.012022][ T3062] RIP: 0010:kobject_get+0x7c/0x120
[  133.018213][ T3062] Code: 0a ff 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 16 31 45 ff 48 8b 33 48 c7 c7 c0 9b 41 85 48 89 da e8 e4 fc 1e 02 <0f> 0b eb 0c e8 db bb 0a ff eb 4c e8 d4 bb 0a ff 4c 8d 73 38 4c 89
[  133.038107][ T3062] RSP: 0018:ffffc9000126f970 EFLAGS: 00010246
[  133.044291][ T3062] RAX: acfcad224b26b000 RBX: ffff88810ad50800 RCX: 0000000000080000
[  133.056659][ T3062] RDX: ffffc9000a434000 RSI: 000000000006fbb6 RDI: 000000000006fbb7
[  133.064802][ T3062] RBP: ffffc9000126f988 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7
[  133.080605][ T3062] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: 0000000000000000
[  133.106929][ T3062] R13: ffff888136556068 R14: 0000000000000000 R15: dffffc0000000000
[  133.122641][ T3062] FS:  00007efed7acf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  133.141799][ T3062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.150702][ T3062] CR2: 00007f95e68bb000 CR3: 000000012660d000 CR4: 00000000003506a0
[  133.158960][ T3062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  133.167384][ T3062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  133.175466][ T3062] Call Trace:
[  133.179064][ T3062]  device_add+0x331/0xc00
[  133.183489][ T3062]  ? kobject_set_name_vargs+0xca/0x110
[  133.189089][ T3062]  device_create+0x26c/0x300
[  133.193765][ T3062]  ? root_device_unregister+0x80/0x80
[  133.199460][ T3062]  create_function_device+0x60/0x70
[  133.204858][ T3062]  f_midi_alloc_inst+0x1a8/0x380
[  133.210033][ T3062]  usb_get_function_instance+0xe2/0x2f0
[  133.215771][ T3062]  function_make+0x118/0x350
[  133.220509][ T3062]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  133.227058][ T3062]  ? mutex_trylock+0xb0/0xb0
[  133.232117][ T3062]  ? configfs_mkdir+0x504/0xd90
[  133.237098][ T3062]  configfs_mkdir+0x5d2/0xd90
[  133.241944][ T3062]  ? show_sid+0x1b0/0x1b0
[  133.246458][ T3062]  ? configfs_lookup+0x500/0x500
[  133.251529][ T3062]  ? __lookup_hash+0x122/0x250
[  133.256364][ T3062]  ? security_inode_mkdir+0xbd/0x110
[  133.261996][ T3062]  vfs_mkdir+0x42c/0x600
[  133.266438][ T3062]  do_mkdirat+0x14c/0x340
[  133.270900][ T3062]  __x64_sys_mkdirat+0x7b/0x90
[  133.275733][ T3062]  do_syscall_64+0x31/0x40
[  133.280289][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  133.286246][ T3062] RIP: 0033:0x7efed9076019
[  133.290800][ T3062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.310954][ T3062] RSP: 002b:00007efed7acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  133.319554][ T3062] RAX: ffffffffffffffda RBX: 00007efed92fdfa0 RCX: 00007efed9076019
[  133.327828][ T3062] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  133.336088][ T3062] RBP: 00007efed910d00c R08: 0000000000000000 R09: 0000000000000000
[  133.344494][ T3062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.352736][ T3062] R13: 00007efed92fe038 R14: 00007efed92fdfa0 R15: 00007ffff51e5728
[  133.360861][ T3062] ---[ end trace 91cf1029cc6e08f6 ]---
[  133.366612][ T3062] ------------[ cut here ]------------
[  133.373298][ T3062] refcount_t: addition on 0; use-after-free.
[  133.379932][ T3062] WARNING: CPU: 1 PID: 3062 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0
[  133.389601][ T3062] Modules linked in:
[  133.393627][ T3062] CPU: 1 PID: 3062 Comm: syz.9.831 Tainted: G    B   W         syzkaller #0
[  133.402532][ T3062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  133.412846][ T3062] RIP: 0010:refcount_warn_saturate+0x104/0x1a0
[  133.419245][ T3062] Code: 04 01 48 c7 c7 a0 49 40 85 e8 98 ca 3a 02 0f 0b eb df e8 8f 89 26 ff c6 05 cc 75 82 04 01 48 c7 c7 e0 48 40 85 e8 7c ca 3a 02 <0f> 0b eb c3 e8 73 89 26 ff c6 05 b1 75 82 04 01 48 c7 c7 40 49 40
[  133.439381][ T3062] RSP: 0018:ffffc9000126f950 EFLAGS: 00010246
[  133.445567][ T3062] RAX: acfcad224b26b000 RBX: 0000000000000002 RCX: 0000000000080000
[  133.453689][ T3062] RDX: ffffc9000a434000 RSI: 000000000007ffff RDI: 0000000000080000
[  133.461824][ T3062] RBP: ffffc9000126f960 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7
[  133.469982][ T3062] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: 0000000000000000
[  133.478101][ T3062] R13: ffff888136556068 R14: 0000000000000002 R15: 0000000000000000
[  133.486185][ T3062] FS:  00007efed7acf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  133.495485][ T3062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.503366][ T3062] CR2: 0000001b2d31bff8 CR3: 000000012660d000 CR4: 00000000003506a0
[  133.511457][ T3062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  133.519536][ T3062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  133.527714][ T3062] Call Trace:
[  133.531085][ T3062]  kobject_get+0xfb/0x120
[  133.535492][ T3062]  device_add+0x331/0xc00
[  133.539952][ T3062]  ? kobject_set_name_vargs+0xca/0x110
[  133.545688][ T3062]  device_create+0x26c/0x300
[  133.550650][ T3062]  ? root_device_unregister+0x80/0x80
[  133.556153][ T3062]  create_function_device+0x60/0x70
[  133.561484][ T3062]  f_midi_alloc_inst+0x1a8/0x380
[  133.566640][ T3062]  usb_get_function_instance+0xe2/0x2f0
[  133.572441][ T3062]  function_make+0x118/0x350
[  133.577271][ T3062]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  133.583897][ T3062]  ? mutex_trylock+0xb0/0xb0
[  133.588645][ T3062]  ? configfs_mkdir+0x504/0xd90
[  133.593630][ T3062]  configfs_mkdir+0x5d2/0xd90
[  133.598444][ T3062]  ? show_sid+0x1b0/0x1b0
[  133.602874][ T3062]  ? configfs_lookup+0x500/0x500
[  133.607965][ T3062]  ? __lookup_hash+0x122/0x250
[  133.612897][ T3062]  ? security_inode_mkdir+0xbd/0x110
[  133.618506][ T3062]  vfs_mkdir+0x42c/0x600
[  133.622832][ T3062]  do_mkdirat+0x14c/0x340
[  133.627383][ T3062]  __x64_sys_mkdirat+0x7b/0x90
[  133.632229][ T3062]  do_syscall_64+0x31/0x40
[  133.636870][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  133.642856][ T3062] RIP: 0033:0x7efed9076019
[  133.647894][ T3062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.668187][ T3062] RSP: 002b:00007efed7acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  133.676707][ T3062] RAX: ffffffffffffffda RBX: 00007efed92fdfa0 RCX: 00007efed9076019
[  133.684801][ T3062] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  133.692902][ T3062] RBP: 00007efed910d00c R08: 0000000000000000 R09: 0000000000000000
[  133.701159][ T3062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.709359][ T3062] R13: 00007efed92fe038 R14: 00007efed92fdfa0 R15: 00007ffff51e5728
[  133.717620][ T3062] ---[ end trace 91cf1029cc6e08f7 ]---
[  133.723165][ T3062] ------------[ cut here ]------------
[  133.728846][ T3062] kobject: '(null)' (ffff88810ad50800): is not initialized, yet kobject_get() is being called.
[  133.739539][ T3062] WARNING: CPU: 1 PID: 3062 at lib/kobject.c:666 kobject_add_internal+0x12e/0xde0
[  133.748930][ T3062] Modules linked in:
[  133.752994][ T3062] CPU: 1 PID: 3062 Comm: syz.9.831 Tainted: G    B   W         syzkaller #0
[  133.761793][ T3062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  133.772170][ T3062] RIP: 0010:kobject_add_internal+0x12e/0xde0
[  133.778275][ T3062] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 95 18 45 ff 49 8b 34 24 48 c7 c7 c0 9b 41 85 4c 89 e2 e8 62 e4 1e 02 <0f> 0b e9 04 01 00 00 e8 56 a3 0a ff b8 fe ff ff ff e9 b0 09 00 00
[  133.798452][ T3062] RSP: 0018:ffffc9000126f7d8 EFLAGS: 00010246
[  133.804720][ T3062] RAX: acfcad224b26b000 RBX: ffff888107bac500 RCX: 0000000000080000
[  133.812932][ T3062] RDX: ffffc9000a434000 RSI: 000000000007ffff RDI: 0000000000080000
[  133.821460][ T3062] RBP: ffffc9000126f830 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7
[  133.829779][ T3062] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: ffff88810ad50800
[  133.837886][ T3062] R13: ffff888107bac518 R14: 0000000000000000 R15: 1ffff11020f758a0
[  133.846290][ T3062] FS:  00007efed7acf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  133.855343][ T3062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.862073][ T3062] CR2: 0000001b2d31bff8 CR3: 000000012660d000 CR4: 00000000003506a0
[  133.870184][ T3062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  133.878613][ T3062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  133.886698][ T3062] Call Trace:
[  133.890081][ T3062]  ? kobject_set_name_vargs+0xca/0x110
[  133.895616][ T3062]  kobject_add+0x165/0x230
[  133.900339][ T3062]  ? kobject_init+0x1d0/0x1d0
[  133.905102][ T3062]  ? __kasan_check_write+0x14/0x20
[  133.910435][ T3062]  ? kobject_init+0x83/0x1d0
[  133.915100][ T3062]  get_device_parent+0x3a6/0x410
[  133.920182][ T3062]  device_add+0x349/0xc00
[  133.924590][ T3062]  ? kobject_set_name_vargs+0xca/0x110
[  133.930271][ T3062]  device_create+0x26c/0x300
[  133.934945][ T3062]  ? root_device_unregister+0x80/0x80
[  133.940449][ T3062]  create_function_device+0x60/0x70
[  133.945963][ T3062]  f_midi_alloc_inst+0x1a8/0x380
[  133.951592][ T3062]  usb_get_function_instance+0xe2/0x2f0
[  133.957293][ T3062]  function_make+0x118/0x350
[  133.962470][ T3062]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  133.969860][ T3062]  ? mutex_trylock+0xb0/0xb0
[  133.974628][ T3062]  ? configfs_mkdir+0x504/0xd90
[  133.981267][ T3062]  configfs_mkdir+0x5d2/0xd90
[  133.986191][ T3062]  ? show_sid+0x1b0/0x1b0
[  133.990712][ T3062]  ? configfs_lookup+0x500/0x500
[  133.995831][ T3062]  ? __lookup_hash+0x122/0x250
[  134.001029][ T3062]  ? security_inode_mkdir+0xbd/0x110
[  134.006614][ T3062]  vfs_mkdir+0x42c/0x600
[  134.010969][ T3062]  do_mkdirat+0x14c/0x340
[  134.015377][ T3062]  __x64_sys_mkdirat+0x7b/0x90
[  134.020573][ T3062]  do_syscall_64+0x31/0x40
[  134.025060][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  134.031096][ T3062] RIP: 0033:0x7efed9076019
[  134.035613][ T3062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.055371][ T3062] RSP: 002b:00007efed7acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  134.064079][ T3062] RAX: ffffffffffffffda RBX: 00007efed92fdfa0 RCX: 00007efed9076019
[  134.072282][ T3062] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  134.080403][ T3062] RBP: 00007efed910d00c R08: 0000000000000000 R09: 0000000000000000
[  134.088531][ T3062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.096609][ T3062] R13: 00007efed92fe038 R14: 00007efed92fdfa0 R15: 00007ffff51e5728
[  134.104757][ T3062] ---[ end trace 91cf1029cc6e08f8 ]---
[  134.110565][ T3062] ------------[ cut here ]------------
[  134.116635][ T3062] kobject: '(null)' (ffff88810ad50800): is not initialized, yet kobject_put() is being called.
[  134.127181][ T3062] WARNING: CPU: 1 PID: 3062 at lib/kobject.c:760 kobject_put+0x8a/0x270
[  134.135571][ T3062] Modules linked in:
[  134.140021][ T3062] CPU: 1 PID: 3062 Comm: syz.9.831 Tainted: G    B   W         syzkaller #0
[  134.149032][ T3062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.159306][ T3062] RIP: 0010:kobject_put+0x8a/0x270
[  134.164522][ T3062] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 e8 2f 45 ff 48 8b 33 48 c7 c7 40 9c 41 85 48 89 da e8 b6 fb 1e 02 <0f> 0b eb 0f e8 ad ba 0a ff e9 7c 01 00 00 e8 a3 ba 0a ff 4c 8d 7b
[  134.184543][ T3062] RSP: 0018:ffffc9000126f7a0 EFLAGS: 00010246
[  134.190757][ T3062] RAX: acfcad224b26b000 RBX: ffff88810ad50800 RCX: 0000000000080000
[  134.198955][ T3062] RDX: ffffc9000a434000 RSI: 000000000007ffff RDI: 0000000000080000
[  134.207041][ T3062] RBP: ffffc9000126f7c8 R08: ffffc9000126f127 R09: fffff5200024de58
[  134.215104][ T3062] R10: dffffc0000000000 R11: fffff5200024de25 R12: ffff88810ad50800
[  134.223347][ T3062] R13: ffff88810ad5083c R14: 1ffff110215aa107 R15: 0000000000000000
[  134.231457][ T3062] FS:  00007efed7acf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  134.240690][ T3062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.247377][ T3062] CR2: 0000001b2d31bff8 CR3: 000000012660d000 CR4: 00000000003506a0
[  134.255451][ T3062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  134.263551][ T3062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  134.271765][ T3062] Call Trace:
[  134.275171][ T3062]  kobject_add_internal+0xb52/0xde0
[  134.280516][ T3062]  kobject_add+0x165/0x230
[  134.285111][ T3062]  ? kobject_init+0x1d0/0x1d0
[  134.289941][ T3062]  ? __kasan_check_write+0x14/0x20
[  134.295194][ T3062]  ? kobject_init+0x83/0x1d0
[  134.300187][ T3062]  get_device_parent+0x3a6/0x410
[  134.305235][ T3062]  device_add+0x349/0xc00
[  134.309791][ T3062]  ? kobject_set_name_vargs+0xca/0x110
[  134.315331][ T3062]  device_create+0x26c/0x300
[  134.320072][ T3062]  ? root_device_unregister+0x80/0x80
[  134.325540][ T3062]  create_function_device+0x60/0x70
[  134.330980][ T3062]  f_midi_alloc_inst+0x1a8/0x380
[  134.336306][ T3062]  usb_get_function_instance+0xe2/0x2f0
[  134.342076][ T3062]  function_make+0x118/0x350
[  134.346789][ T3062]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  134.353377][ T3062]  ? mutex_trylock+0xb0/0xb0
[  134.358073][ T3062]  ? configfs_mkdir+0x504/0xd90
[  134.363023][ T3062]  configfs_mkdir+0x5d2/0xd90
[  134.367813][ T3062]  ? show_sid+0x1b0/0x1b0
[  134.372307][ T3062]  ? configfs_lookup+0x500/0x500
[  134.377672][ T3062]  ? __lookup_hash+0x122/0x250
[  134.382522][ T3062]  ? security_inode_mkdir+0xbd/0x110
[  134.387936][ T3062]  vfs_mkdir+0x42c/0x600
[  134.392260][ T3062]  do_mkdirat+0x14c/0x340
[  134.396720][ T3062]  __x64_sys_mkdirat+0x7b/0x90
[  134.401583][ T3062]  do_syscall_64+0x31/0x40
[  134.406169][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  134.412219][ T3062] RIP: 0033:0x7efed9076019
[  134.416722][ T3062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.436928][ T3062] RSP: 002b:00007efed7acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  134.445436][ T3062] RAX: ffffffffffffffda RBX: 00007efed92fdfa0 RCX: 00007efed9076019
[  134.453549][ T3062] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  134.461735][ T3062] RBP: 00007efed910d00c R08: 0000000000000000 R09: 0000000000000000
[  134.469981][ T3062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.478176][ T3062] R13: 00007efed92fe038 R14: 00007efed92fdfa0 R15: 00007ffff51e5728
[  134.486236][ T3062] ---[ end trace 91cf1029cc6e08f9 ]---
[  134.491829][ T3062] ------------[ cut here ]------------
[  134.497428][ T3062] refcount_t: underflow; use-after-free.
[  134.503245][ T3062] WARNING: CPU: 1 PID: 3062 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[  134.512980][ T3062] Modules linked in:
[  134.517049][ T3062] CPU: 1 PID: 3062 Comm: syz.9.831 Tainted: G    B   W         syzkaller #0
[  134.525798][ T3062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.536088][ T3062] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[  134.542546][ T3062] Code: 04 01 48 c7 c7 e0 48 40 85 e8 7c ca 3a 02 0f 0b eb c3 e8 73 89 26 ff c6 05 b1 75 82 04 01 48 c7 c7 40 49 40 85 e8 60 ca 3a 02 <0f> 0b eb a7 e8 57 89 26 ff c6 05 92 75 82 04 01 48 c7 c7 60 48 40
[  134.562968][ T3062] RSP: 0018:ffffc9000126f780 EFLAGS: 00010246
[  134.569169][ T3062] RAX: acfcad224b26b000 RBX: 0000000000000003 RCX: 0000000000080000
[  134.577437][ T3062] RDX: ffffc9000a434000 RSI: 000000000007ffff RDI: 0000000000080000
[  134.585605][ T3062] RBP: ffffc9000126f790 R08: ffff8881f7127453 R09: 1ffff1103ee24e8a
[  134.593796][ T3062] R10: dffffc0000000000 R11: ffffed103ee24e8b R12: 00000000c0000000
[  134.601980][ T3062] R13: ffff88810ad5083c R14: 0000000000000003 R15: ffff88810ad50838
[  134.610071][ T3062] FS:  00007efed7acf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  134.623419][ T3062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.630270][ T3062] CR2: 0000001b2d31bff8 CR3: 000000012660d000 CR4: 00000000003506a0
[  134.639212][ T3062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  134.647864][ T3062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  134.656207][ T3062] Call Trace:
[  134.659628][ T3062]  kobject_put+0x231/0x270
[  134.664125][ T3062]  kobject_add_internal+0xb52/0xde0
[  134.669447][ T3062]  kobject_add+0x165/0x230
[  134.674056][ T3062]  ? kobject_init+0x1d0/0x1d0
[  134.678866][ T3062]  ? __kasan_check_write+0x14/0x20
[  134.684054][ T3062]  ? kobject_init+0x83/0x1d0
[  134.688767][ T3062]  get_device_parent+0x3a6/0x410
[  134.693858][ T3062]  device_add+0x349/0xc00
[  134.698724][ T3062]  ? kobject_set_name_vargs+0xca/0x110
[  134.704409][ T3062]  device_create+0x26c/0x300
[  134.709213][ T3062]  ? root_device_unregister+0x80/0x80
[  134.714757][ T3062]  create_function_device+0x60/0x70
[  134.720138][ T3062]  f_midi_alloc_inst+0x1a8/0x380
[  134.725169][ T3062]  usb_get_function_instance+0xe2/0x2f0
[  134.731083][ T3062]  function_make+0x118/0x350
[  134.735763][ T3062]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  134.742247][ T3062]  ? mutex_trylock+0xb0/0xb0
[  134.746957][ T3062]  ? configfs_mkdir+0x504/0xd90
[  134.751887][ T3062]  configfs_mkdir+0x5d2/0xd90
[  134.756780][ T3062]  ? show_sid+0x1b0/0x1b0
[  134.761357][ T3062]  ? configfs_lookup+0x500/0x500
[  134.766595][ T3062]  ? __lookup_hash+0x122/0x250
[  134.771469][ T3062]  ? security_inode_mkdir+0xbd/0x110
[  134.777049][ T3062]  vfs_mkdir+0x42c/0x600
[  134.781537][ T3062]  do_mkdirat+0x14c/0x340
[  134.785937][ T3062]  __x64_sys_mkdirat+0x7b/0x90
[  134.790824][ T3062]  do_syscall_64+0x31/0x40
[  134.795327][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  134.801363][ T3062] RIP: 0033:0x7efed9076019
[  134.805853][ T3062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.825696][ T3062] RSP: 002b:00007efed7acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  134.834268][ T3062] RAX: ffffffffffffffda RBX: 00007efed92fdfa0 RCX: 00007efed9076019
[  134.842374][ T3062] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  134.850464][ T3062] RBP: 00007efed910d00c R08: 0000000000000000 R09: 0000000000000000
[  134.858570][ T3062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.866659][ T3062] R13: 00007efed92fe038 R14: 00007efed92fdfa0 R15: 00007ffff51e5728
[  134.874839][ T3062] ---[ end trace 91cf1029cc6e08fa ]---
[  134.880452][ T3062] kobject_add_internal failed for android_usb (error: -2 parent: (null))
[  134.888993][ T3062] ------------[ cut here ]------------
[  134.894655][ T3062] kobject: '(null)' (ffff88810ad50800): is not initialized, yet kobject_put() is being called.
[  134.905244][ T3062] WARNING: CPU: 1 PID: 3062 at lib/kobject.c:760 kobject_put+0x8a/0x270
[  134.913705][ T3062] Modules linked in:
[  134.917728][ T3062] CPU: 1 PID: 3062 Comm: syz.9.831 Tainted: G    B   W         syzkaller #0
[  134.927013][ T3062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.937419][ T3062] RIP: 0010:kobject_put+0x8a/0x270
[  134.942709][ T3062] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 e8 2f 45 ff 48 8b 33 48 c7 c7 40 9c 41 85 48 89 da e8 b6 fb 1e 02 <0f> 0b eb 0f e8 ad ba 0a ff e9 7c 01 00 00 e8 a3 ba 0a ff 4c 8d 7b
[  134.962821][ T3062] RSP: 0018:ffffc9000126f960 EFLAGS: 00010246
[  134.969213][ T3062] RAX: acfcad224b26b000 RBX: ffff88810ad50800 RCX: 0000000000080000
[  134.977714][ T3062] RDX: ffffc9000a434000 RSI: 000000000007ffff RDI: 0000000000080000
[  134.986199][ T3062] RBP: ffffc9000126f988 R08: ffffc9000126f2e7 R09: fffff5200024de90
[  134.994295][ T3062] R10: dffffc0000000000 R11: fffff5200024de5d R12: fffffffffffffffe
[  135.002521][ T3062] R13: ffff88810ad5083c R14: 1ffff110215aa107 R15: 0000000000000000
[  135.010644][ T3062] FS:  00007efed7acf6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  135.021127][ T3062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.028011][ T3062] CR2: 0000001b2d31bff8 CR3: 000000012660d000 CR4: 00000000003506a0
[  135.036068][ T3062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  135.044171][ T3062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  135.052255][ T3062] Call Trace:
[  135.055621][ T3062]  device_add+0x36f/0xc00
[  135.060059][ T3062]  ? kobject_set_name_vargs+0xca/0x110
[  135.065672][ T3062]  device_create+0x26c/0x300
[  135.070385][ T3062]  ? root_device_unregister+0x80/0x80
[  135.075825][ T3062]  create_function_device+0x60/0x70
[  135.081233][ T3062]  f_midi_alloc_inst+0x1a8/0x380
[  135.086250][ T3062]  usb_get_function_instance+0xe2/0x2f0
[  135.091921][ T3062]  function_make+0x118/0x350
[  135.096972][ T3062]  ? gadget_dev_desc_max_speed_store+0x240/0x240
[  135.103944][ T3062]  ? mutex_trylock+0xb0/0xb0
[  135.110199][ T3062]  ? configfs_mkdir+0x504/0xd90
[  135.119528][ T3062]  configfs_mkdir+0x5d2/0xd90
[  135.124426][ T3062]  ? show_sid+0x1b0/0x1b0
[  135.129061][ T3062]  ? configfs_lookup+0x500/0x500
[  135.134188][ T3062]  ? __lookup_hash+0x122/0x250
[  135.139457][ T3062]  ? security_inode_mkdir+0xbd/0x110
[  135.144844][ T3062]  vfs_mkdir+0x42c/0x600
[  135.149533][ T3062]  do_mkdirat+0x14c/0x340
[  135.153942][ T3062]  __x64_sys_mkdirat+0x7b/0x90
[  135.158966][ T3062]  do_syscall_64+0x31/0x40
[  135.163559][ T3062]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  135.169663][ T3062] RIP: 0033:0x7efed9076019
[  135.174160][ T3062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.194135][ T3062] RSP: 002b:00007efed7acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  135.202759][ T3062] RAX: ffffffffffffffda RBX: 00007efed92fdfa0 RCX: 00007efed9076019
[  135.210855][ T3062] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  135.218950][ T3062] RBP: 00007efed910d00c R08: 0000000000000000 R09: 0000000000000000
[  135.227060][ T3062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.235260][ T3062] R13: 00007efed92fe038 R14: 00007efed92fdfa0 R15: 00007ffff51e5728
[  135.243374][ T3062] ---[ end trace 91cf1029cc6e08fb ]---
[  140.216745][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!