last executing test programs:

3m8.02268541s ago: executing program 32 (id=23):
unshare(0x22020600)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000340), 0x2, 0x0)
sendfile(r0, r2, &(0x7f0000000080)=0xd, 0x80)

3m8.001078091s ago: executing program 33 (id=24):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100000,allow_utime=000000000000000011,iocharset=maccyrillic,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,keep_last_dots,errors=remount-ro,discard,\x00\x00\x00\x00\x00\x00'], 0xff, 0x1531, &(0x7f0000001140)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2m57.759123763s ago: executing program 34 (id=133):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x1cb)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

2m57.670294278s ago: executing program 35 (id=134):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x4b5, 0x405})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x4, 0x30000, 0x401})
close(0x3)

2m40.367610979s ago: executing program 36 (id=389):
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x8, 0x0)
ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe)

2m34.335247788s ago: executing program 37 (id=478):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20)

2m31.378005918s ago: executing program 38 (id=500):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})

2m12.575469845s ago: executing program 39 (id=779):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r1, 0x0, 0x0, 0x8800000)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x2000003})

2m5.536713773s ago: executing program 40 (id=912):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf)
write$tun(0xffffffffffffffff, &(0x7f0000000940)={@void, @val={0x2, 0x0, 0x8, 0x1, 0x19, 0xc}, @ipv6=@icmpv6={0x6, 0x6, "644cfb", 0x30, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x3, '\x00', {0x4, 0x6, "00f1ff", 0x5, 0x2b, 0xff, @mcast2, @remote}}}}}, 0x62)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000001800210200000000000000001d01000008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x24}}, 0x0)

2m3.326370171s ago: executing program 41 (id=937):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

2m1.069660291s ago: executing program 42 (id=969):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500000000000000000000003ee54d9bdd7cb5fd821c304881a7c4381178a67fc49cf1943e99b1f8aeca7afa855fda156c0ecc3ef1754fd55a7e70861fffdd62f8dcaeaeb1329e574927514d4a629a5441327c95a0fc2498265fa054fdfc87a48bda5b483b528a57c15830e1ab1e", @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

1m59.582504847s ago: executing program 43 (id=991):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@test_dummy_encryption_v1}], [], 0x3d}, 0xfd, 0x464, &(0x7f0000001600)="$eJzs3M9vFFUcAPDvzLIF+VkVVH6o9Vck/qC0oHLwotHEgyYmekASD7UsBFnA0JoIIRaNwaPBeDceTfwLPOnF6Nmr3g0JMVxEL66Z2Zl2S3fbLt12K/v5JEvem3m7733nzRvevNltAANrJPsnidgaEb9l6TTPzmoUhbJyN29cmvz7xqXJJBqNt/5M8n1/3bg0WZYt37elyOxPI9LPktjbpt6pCxdPT9TrtfNFfnT6zAejUxcuPnvqzMTJ2sna2fEjRw4fGnvh+fHnehLntqytez4+t2/3a+9cfWPy6NX3fvkua+/WYn9rHL0yEiPzjmWrJ3pdWZ9ta0knG/rYELpSiYisu6r5+N8RlZjrvB3x6qd9bRywqhqNRmN7592XG8AdLImOuzYVFwjgjlT+R5/d/5avNZp6rAvXX2reAGVx3yxezT0bIi3KVG+5v+2l4WLd5Ojlf76OVVqHAABo9UM2/3mm3fxvOO5rKbc9Xw9uzlfujoh7IuLeiNgZEbsi8rL3R8QDXdY/ckt+4fwnvXZbgS1TNv97sXi2NX/+V8z+/m0MV4rctjz+anLiVL12sDgm+6O6McuPLVLHj6/8+kWnfSPF3K98ZfWXc8GiHdc2bJz/nuMT0xMri3rO9U/yW/yZhfHPPbnKUrsjYs9tfP6miDj11Lf7Ou1fOv5F9OA5U+ObiCeb/X85Fol/keeTo5uiXjs4Wp4Vrco7iCtvdqp/RfH3QNb/m9ue/7PxDyetz2unuq/jyu+fd7yn6eL8P1Zuyc7/oeTtPD1UbPtoYnr6/FjEUPL6wu3jc59W5svy17fuinis/fjPrnHZOZbFvzcispP4wYh4KCIeLtr+SEQ8GvlHtDNzMyJ+fvnx92dPhS7i7/CWnsr6//i8/o8l+r/7ROX0T993qn95/X84T+0vtizn+rfcBq7k2AEAAMD/RZp/Bz5JD8ym0/TAgeZ3+HfG5rR+bmr66RPnPjx7vPld+eGopuVK146W9dCxYm24zI/fkj9UrBt/Vbkrz28u1gaB/tnSYfxn/qj0u3XAqvN7LRhcxj8MLuMfBpfxD4NrueO/scrtANZeu/E/04d2AGvP/B8Gl/EPg8v4h8HVHP/H+t0MYG2t5Hf9EkskZnp8eIfWSVx5ItJ10Yx1kYhI8r+kv3ThajHu6rUv322m+t74Dol+XpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6578AAAD//6nq3AI=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
fchdir(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)

1m46.742467769s ago: executing program 44 (id=1189):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_clone3(&(0x7f0000000340)={0x400, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
lseek(r0, 0x2000, 0x0)

1m29.496761107s ago: executing program 45 (id=1491):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193df163e74963f86ddf08412e900092f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000080)="240000080016e21f5205090000000000000081005a63032558", 0x19}], 0x2)

1m6.584531691s ago: executing program 4 (id=1896):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x86)
fchdir(r1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x150d, 0x103)

1m6.542436703s ago: executing program 4 (id=1898):
pipe(&(0x7f0000000e00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000180)="4191062c1421f8d286fea25179d3bff47ffb95a24f597e0388f330e7dfb81fde917ae89f97d5fde0855ce2942ff541f21652a7409dad35f8886d587bb6e6dc67532c99235c3f4d65696cdb98986ca5f808b1b92c1a374dbcf9109eb576c388dca33df6129f9efd43ccbd58a93f146ce183a410b8959fe192652e32068e0d8e24d8eab4ecbd5ebaa165771a07c890804037074a1ebad3bcdd46b8f34ecb2f4a6e1bbc6ac3d80ea44fbfedf338583f63ba4607f430acc0a98b4fcbb501006052cb83625cbf60ebf28e9095458c1e9971417b2912bbe30037dd5c1ac06f612816e97ac304404619b0c75222e9339f6ba14eac3c1486ac997f919248498f073eb173a9b70dd4e2df0b14c490155bf06e801547ed96f1264b5c220cf3f65681d44cd20b1b2b2067fa91e1c30217b0e5f65358b8b0836d01da7c4349eeec41fd9a50c651d12551ceb6a6fd4989751a4bbb244b9d3d260ebeb8aad132df7ef16f67663238a327f0ab114f7241b4fb5fc9ea1813dfd2c9fba8858541166adf9cfaa6a4b7d77272d0698f742bdea73a6424f0b586cf40cf6dc0ad5a4f886231e736e2d15ae7b54e799376ddcfb2b9a8c25d1bdf50eaf8565c2b3927b5887a961fcf7ffd6847ddb974e774e3a4cd7a7766ca8500000000000000000000002129214dcb87f42ef16f8a2d2700023035345900ce23d2becdae44a3d81855b7582e8e2325d2912dab1265c5ed59ef80dde7330d145f407b18c9b5a342cafeb6ad832d43ef242a05208e92fdf9527677f02e0adb5c447c8bf9e5db137ed953da5f30e54a0fd48728c918a7dc21149ed5bb1f2b144d", 0x24e}, {&(0x7f0000000e40)="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", 0x27e}, {&(0x7f0000000840)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf60311fd29e60958434b6f595565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd000000000000000000000000003239e56a1b026ba99149a712f4817121372f3569277bfba7b29fb8dc50f4ceaa32b526c18885439e40f2f7fb2309521d9949b4a2324f3eda920dd580fda0debe5ab3cf7f7339a4d58875517a9dd823b0b0c66d3b9f023c216f104faab5aa1e2811e357e8d2c0cdb12f7d2511200492b37b69165ab7", 0xf5}], 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0)

1m6.507299996s ago: executing program 4 (id=1899):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003340)=""/4096, 0x1000}, 0x10800000}], 0x1, 0x1000400000de, 0x0)

1m6.447766749s ago: executing program 4 (id=1900):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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")
r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_open_procfs(r0, &(0x7f0000000040)='fd/3\x00')

1m6.0825341s ago: executing program 4 (id=1904):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4)

1m5.808486256s ago: executing program 4 (id=1907):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

1m5.760293159s ago: executing program 46 (id=1907):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

53.950326261s ago: executing program 0 (id=2119):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x40, &(0x7f0000000040)={0x0, 0x3c1c, 0xc000, 0x8003, 0x24})
io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x9ab, 0xc000, 0x3, 0x39})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x202, 0x0, r0})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2)

53.936082522s ago: executing program 0 (id=2120):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r0, 0x4)
accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c)
dup3(r0, r1, 0x0)

53.863766437s ago: executing program 0 (id=2124):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendto$inet6(r0, &(0x7f00000001c0)="0600000000000000f298aeb5a780fe6d6f7bf66caa", 0x15, 0x3b00, 0x0, 0x0)

53.813774679s ago: executing program 0 (id=2125):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x2}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x106}}, {@fmask={'fmask', 0x3d, 0x9}}, {@fmask={'fmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x3}}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)="d1"})
mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x80)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0))

53.713799846s ago: executing program 0 (id=2128):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x100, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xc}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008012}, 0x400c0)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f0003000000060010000200000005000400a200000014000300200100000000000000000000000000010400130008000700f5ffffff080002392cf0000006000f"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

53.320512018s ago: executing program 0 (id=2130):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

53.320295968s ago: executing program 47 (id=2130):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

47.57523315s ago: executing program 6 (id=2248):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000140)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf)

47.510473604s ago: executing program 6 (id=2249):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe1)
fadvise64(r0, 0x2, 0xc, 0x0)

47.471156836s ago: executing program 6 (id=2250):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

47.252469929s ago: executing program 6 (id=2256):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
setresuid(0x0, 0xee00, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

46.912395568s ago: executing program 6 (id=2262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0xb60}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

46.340559212s ago: executing program 6 (id=2272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

46.292040854s ago: executing program 48 (id=2272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

42.013846402s ago: executing program 7 (id=2329):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

41.155173681s ago: executing program 7 (id=2344):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000340)={0x3, 0x0, {[0x99c, 0x9, 0xe, 0x4, 0x2, 0x2, 0x5, 0xd6]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40.977207601s ago: executing program 7 (id=2347):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xd000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000584000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

40.842795939s ago: executing program 7 (id=2350):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
setresuid(0x0, 0xee00, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

40.672547649s ago: executing program 7 (id=2357):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xe808, 0x40000009, 0xfffffffd, 0x83, "00000000000000000000ffff00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x10002, 0xfffffffd, 0x8, 0x4, 0x5, "e315905446b300"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020)

40.600088894s ago: executing program 1 (id=2359):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x6}]})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

40.470460491s ago: executing program 1 (id=2373):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="17c68a5924858d0d08474417249cffb0fd597fd258aae8594b7f37b094e9396991640ecac454bfeae845e5d1832cccc202bda965a02ee7ea98241c37b8b3630deabffa7f21621acc62bca21ffb097aac76b61b7936f8aa5bb1fece03ef9700d6fe7a67712764826ee29ffa757d274c44ef43f9f0b921d21c33440732afc005107b1158a3322931e35fd6b59f316bd1af9428f76e3c33b820fdaa925b918672fc453d", 0xa2}, {&(0x7f0000000400)="724d7fd4b690504be5d1a8a4116bcf81686af3cf233cf316a852ff48d2865535d6c808b5ba748ab27c580593b3ba27a4a2d852f5f5de46197cf72b83d5e331afdb814efafa844499cdd93c671e0af53aee57caf13a60ecef4c1b1314523e", 0x5e}, {&(0x7f0000000240)="d5cd71ac8568d9a5df316460230357c3b8bf7f1d", 0x14}, {&(0x7f0000000480)="e84c8306bafad36774f61fc75f101503430235dd6b8d4bd990d7be456d528a23bd45669557a5b3351a933780cda3f3d46f1bbfaceee8d6771df95d5be9934a63d1be708368fa1e95060d99886b289b33dd78d248a88f1d33db134881d644f9c10e868b1a28a2e8ebc05b57da", 0x6c}], 0x4, &(0x7f0000000540)=ANY=[], 0x80}}], 0x1, 0x4000080)
close(0x3)

40.375646526s ago: executing program 1 (id=2366):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x37, 0xfffff034}, {0x20, 0x0, 0x0, 0x9e8}, {0x6}]}, 0x10)
r1 = socket(0x2, 0x3, 0x6)
bind$inet(r1, &(0x7f0000002140)={0x2, 0x4e21, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)

40.288271761s ago: executing program 1 (id=2368):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
setresuid(0x0, 0xee00, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

40.229724885s ago: executing program 7 (id=2369):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x9, 0x1}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40.030411136s ago: executing program 49 (id=2369):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x9, 0x1}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40.001343448s ago: executing program 1 (id=2377):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f2450f4d5709de7a00dff40f01ca0f01990018000066bad10466ed0f0f4909b40f32640f32c4a1a15f12", 0x2a}], 0x1, 0x7e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000140)=[@cr4={0x1, 0x40be6}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

39.478633498s ago: executing program 1 (id=2385):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCXONC(r1, 0x540a, 0x2)

39.345681426s ago: executing program 50 (id=2385):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCXONC(r1, 0x540a, 0x2)

22.035989907s ago: executing program 5 (id=2729):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

22.033816747s ago: executing program 5 (id=2731):
socket(0x10, 0x803, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r0, &(0x7f0000010840)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0xe, "04a1670000001438f4f35629"}]}}}], 0x40}}], 0x1, 0x40000)

21.997084679s ago: executing program 5 (id=2733):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4)

21.944047032s ago: executing program 5 (id=2735):
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ftruncate(r0, 0x8)

21.271832451s ago: executing program 5 (id=2760):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x807, 0x0)

20.974801998s ago: executing program 5 (id=2766):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]})

20.923979851s ago: executing program 51 (id=2766):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]})

9.156439711s ago: executing program 2 (id=2814):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0xfffffffe, 0x1)
unshare(0x22020600)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x1000000000082)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1})

7.579898753s ago: executing program 2 (id=2818):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x0, r1}, 0x10)

7.579663303s ago: executing program 8 (id=2819):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400})
socket$nl_route(0x10, 0x3, 0x0)

7.579416303s ago: executing program 3 (id=2820):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x3, 0x3}, 0x20)

7.579225643s ago: executing program 9 (id=2821):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12)
read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020)

5.869387392s ago: executing program 2 (id=2822):
r0 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040))
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r2, r3+10000000}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_simple={0x34, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "bba1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e, 0x0, 0x20040004}, 0x4000)

5.868974131s ago: executing program 8 (id=2823):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

5.868775651s ago: executing program 3 (id=2824):
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3e, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0)

5.868317552s ago: executing program 9 (id=2825):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)

4.016596828s ago: executing program 2 (id=2826):
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x404c0, 0x104)

4.016351928s ago: executing program 8 (id=2827):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xd)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.016089408s ago: executing program 3 (id=2828):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0x6, 0x80001)
r3 = eventfd2(0x8931, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0xa, 0x2, r3})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x3, 0x1})

4.015823378s ago: executing program 9 (id=2829):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x900)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f00000000c0)=""/226, 0xe2)
read$FUSE(r2, 0x0, 0x0)

2.122988158s ago: executing program 2 (id=2830):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x40b4832, 0xffffffffffffffff, 0xb2993000)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10)

2.122627248s ago: executing program 8 (id=2831):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

2.122391048s ago: executing program 3 (id=2832):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd26, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0x6, 0xffff}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000811}, 0x4080)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect$uac1(0x6, 0x7d, 0x0, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

2.122098518s ago: executing program 9 (id=2833):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00')
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0)

96.140745ms ago: executing program 2 (id=2834):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x3e, 0xfffd, 0x4000, 0x1, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x40, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x4}]}}, {"7871edb5bd2531a06454"}}}}}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sync()
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

95.724526ms ago: executing program 8 (id=2835):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getdents(r1, &(0x7f0000000100)=""/24, 0x38)

95.572435ms ago: executing program 3 (id=2836):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
open$dir(&(0x7f00000000c0)='./control/file0\x00', 0x80040, 0x6d)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./control\x00', 0x200)

95.270265ms ago: executing program 9 (id=2837):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x21fffd, 0xc, 0x0, 0x2, 0xfffffffe})
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x3, 0x2500, 0x7, 0x20, 0xffffffffffffffff, 0x3}, 0x50)

520.941µs ago: executing program 9 (id=2838):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324901008200000001"], 0x50)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c)
setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc)

199.761µs ago: executing program 8 (id=2839):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0x2, 0x1, 0x7f5b, 0x3, 0x6, 0x2, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0xfffc, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000201, 0x0, 0xfffffffd, 0x4, 0x4, 0xa, 0xa, 0x1, 0x1, 0x5, 0x1, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x9550, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x800, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x0, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x3ff, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x4, 0x5, 0xffffffff, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x9, 0x7c83, 0xd, 0x1, 0x2, 0xf, 0x3, 0x47, 0x7, 0x0, 0x11, 0x3, 0xdfd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c, 0x2], [0x81, 0x3, 0x10, 0x4e26, 0x2, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc29, 0x9, 0x5, 0x5, 0x8000000a, 0x79a, 0x40, 0x40009, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1003, 0x10, 0xd, 0x6, 0x8000, 0x3ff, 0xf, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x100007, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)

0s ago: executing program 3 (id=2840):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00')
read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

5018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  137.616795][  T102] truncated
[  137.710903][  T376] udevd[376]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  137.721319][  T337] udevd[337]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  137.863189][   T40] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input28
[  137.876346][   T28] audit: type=1400 audit(1771528769.823:1033): avc:  denied  { bind } for  pid=5055 comm="syz.4.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  137.909459][   T28] audit: type=1400 audit(1771528769.823:1034): avc:  denied  { listen } for  pid=5055 comm="syz.4.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  137.945279][ T5058] xt_hashlimit: size too large, truncated to 1048576
[  138.001655][ T5049] F2FS-fs (loop5): invalid crc value
[  138.028842][ T5049] F2FS-fs (loop5): Found nat_bits in checkpoint
[  138.067012][ T5018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.089956][ T5018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.140857][ T5049] F2FS-fs (loop5): Start checkpoint disabled!
[  138.151879][ T5049] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  138.170458][ T5049] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  138.262899][ T3605] kworker/u4:10: attempt to access beyond end of device
[  138.262899][ T3605] loop5: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  138.277425][ T3605] kworker/u4:10: attempt to access beyond end of device
[  138.277425][ T3605] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  138.316856][  T334] usb 4-1: USB disconnect, device number 11
[  138.322843][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  138.322878][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  138.469433][ T5076] set_capacity_and_notify: 2 callbacks suppressed
[  138.469453][ T5076] loop5: detected capacity change from 0 to 512
[  138.482791][ T5076] EXT4-fs: Ignoring removed orlov option
[  138.489180][ T5076] EXT4-fs: Ignoring removed mblk_io_submit option
[  138.498251][ T5076] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2200: inode #15: comm syz.5.1674: corrupted in-inode xattr
[  138.510755][ T5076] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1674: couldn't read orphan inode 15 (err -117)
[  138.523021][ T5076] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  138.574821][ T5083] loop0: detected capacity change from 0 to 16
[  138.581349][   T19] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  138.592210][ T5083] erofs: (device loop0): mounted with root inode @ nid 36.
[  138.593745][ T2904] EXT4-fs (loop5): unmounting filesystem.
[  138.602239][ T5083] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  138.617440][ T5083] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  138.649187][ T5083] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  138.681096][   T10] tipc: Subscription rejected, illegal request
[  138.709214][   T28] audit: type=1400 audit(1771528770.664:1035): avc:  denied  { write } for  pid=5095 comm="syz.0.1685" path="socket:[39543]" dev="sockfs" ino=39543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  138.767333][   T19] usb 8-1: Using ep0 maxpacket: 32
[  138.777586][   T19] usb 8-1: unable to get BOS descriptor or descriptor too short
[  138.780865][ T5106] ------------[ cut here ]------------
[  138.786415][   T19] usb 8-1: unable to read config index 0 descriptor/start: -71
[  138.790794][ T5106] WARNING: CPU: 1 PID: 5106 at arch/x86/kvm/x86.c:11250 kvm_arch_vcpu_ioctl_run+0x1a8c/0x1fa0
[  138.799108][   T19] usb 8-1: can't read configurations, error -71
[  138.808660][ T5106] Modules linked in:
[  138.818840][ T5106] CPU: 1 PID: 5106 Comm: syz.0.1688 Tainted: G        W          syzkaller #0
[  138.827729][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  138.837820][ T5106] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1a8c/0x1fa0
[  138.844257][ T5106] Code: e8 19 58 a6 00 e9 a4 f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ef e8 ff ff 4c 89 ff e8 9e 57 a6 00 e9 e2 e8 ff ff e8 44 2a 61 00 <0f> 0b e9 93 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 09 ef
[  138.863954][ T5106] RSP: 0018:ffffc90003e77bf8 EFLAGS: 00010283
[  138.870084][ T5106] RAX: ffffffff811041cc RBX: ffff8881183d24c0 RCX: 0000000000080000
[  138.878123][ T5106] RDX: ffffc900031f1000 RSI: 000000000000003f RDI: 0000000000000040
[  138.886129][ T5106] RBP: ffffc90003e77cb0 R08: ffff88811ead8007 R09: 1ffff11023d5b000
[  138.894194][ T5106] R10: dffffc0000000000 R11: ffffed1023d5b001 R12: ffff88812730f000
[  138.902222][ T5106] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881183d2538
[  138.910310][ T5106] FS:  00007fbe672426c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  138.919377][ T5106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.925994][ T5106] CR2: 0000200000001000 CR3: 0000000117870000 CR4: 00000000003526a0
[  138.934057][ T5106] DR0: 0000000000000006 DR1: ffffffffffffff00 DR2: 0000000000000020
[  138.934528][ T5109] device syzkaller1 entered promiscuous mode
[  138.942077][ T5106] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  138.942096][ T5106] Call Trace:
[  138.942103][ T5106]  <TASK>
[  138.962335][ T5106]  ? mutex_lock_killable+0x93/0x1b0
[  138.967584][ T5106]  ? __cfi_mutex_lock_killable+0x10/0x10
[  138.973261][ T5106]  kvm_vcpu_ioctl+0x8f2/0xc00
[  138.977990][ T5106]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  138.983219][ T5106]  ? selinux_file_ioctl+0x3a0/0x4d0
[  138.988466][ T5106]  ? __cfi_do_futex+0x10/0x10
[  138.993161][ T5106]  ? kvm_uevent_notify_change+0x30b/0x3b0
[  138.998929][ T5106]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  139.004513][ T5106]  ? __fget_files+0x2d5/0x330
[  139.009239][ T5106]  ? security_file_ioctl+0x95/0xc0
[  139.014396][ T5106]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  139.017305][    T6] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  139.019693][ T5106]  __se_sys_ioctl+0x12f/0x1b0
[  139.031889][ T5106]  __x64_sys_ioctl+0x7b/0x90
[  139.036489][ T5106]  x64_sys_call+0x58b/0x9a0
[  139.041050][ T5106]  do_syscall_64+0x4c/0xa0
[  139.045486][ T5106]  ? clear_bhb_loop+0x30/0x80
[  139.050206][ T5106]  ? clear_bhb_loop+0x30/0x80
[  139.054906][ T5106]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.060849][ T5106] RIP: 0033:0x7fbe6639bf79
[  139.065284][ T5106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.084981][ T5106] RSP: 002b:00007fbe67242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  139.093444][ T5106] RAX: ffffffffffffffda RBX: 00007fbe66615fa0 RCX: 00007fbe6639bf79
[  139.101466][ T5106] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  139.109474][ T5106] RBP: 00007fbe664327e0 R08: 0000000000000000 R09: 0000000000000000
[  139.117515][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.125508][ T5106] R13: 00007fbe66616038 R14: 00007fbe66615fa0 R15: 00007ffeae9eeab8
[  139.133541][ T5106]  </TASK>
[  139.136576][ T5106] ---[ end trace 0000000000000000 ]---
[  139.208505][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.219555][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.229664][    T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  139.242787][    T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  139.252045][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.269534][    T6] usb 5-1: config 0 descriptor??
[  139.415184][ T5127] loop7: detected capacity change from 0 to 256
[  139.421901][ T5127] exfat: Deprecated parameter 'utf8'
[  139.427871][ T5127] exfat: Deprecated parameter 'utf8'
[  139.445774][ T5127] exfat: Deprecated parameter 'utf8'
[  139.459534][ T5127] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  139.522734][ T5137] loop5: detected capacity change from 0 to 512
[  139.678323][    T6] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  139.693705][    T6] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  139.969183][  T294] usb 5-1: USB disconnect, device number 16
[  139.985264][ T5189] input: syz1 as /devices/virtual/input/input29
[  140.048359][ T5166] loop0: detected capacity change from 0 to 40427
[  140.057493][ T5166] F2FS-fs (loop0): invalid crc value
[  140.065454][ T5166] F2FS-fs (loop0): Found nat_bits in checkpoint
[  140.079561][ T5194] kvm [5193]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  140.166126][ T5166] F2FS-fs (loop0): Start checkpoint disabled!
[  140.172815][ T5166] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  140.190984][ T5166] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  140.296773][   T19] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  140.313645][   T10] kworker/u4:1: attempt to access beyond end of device
[  140.313645][   T10] loop0: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  140.331024][   T10] kworker/u4:1: attempt to access beyond end of device
[  140.331024][   T10] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  140.408247][ T5203] loop7: detected capacity change from 0 to 16
[  140.432744][ T5203] erofs: (device loop7): mounted with root inode @ nid 36.
[  140.441825][ T5203] syz.7.1728: attempt to access beyond end of device
[  140.441825][ T5203] loop7: rw=524288, sector=88, nr_sectors = 48 limit=16
[  140.456123][ T5203] syz.7.1728: attempt to access beyond end of device
[  140.456123][ T5203] loop7: rw=524288, sector=8, nr_sectors = 80 limit=16
[  140.496492][   T19] usb 6-1: Using ep0 maxpacket: 16
[  140.502787][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.525413][ T5210] loop3: detected capacity change from 0 to 256
[  140.535416][   T19] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  140.565867][ T5212] loop7: detected capacity change from 0 to 256
[  140.574542][   T19] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  140.584700][   T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.597810][   T19] usb 6-1: config 0 descriptor??
[  140.680990][  T395] Bluetooth: hci0: Frame reassembly failed (-84)
[  140.699517][   T10] Bluetooth: hci1: Frame reassembly failed (-84)
[  141.007999][   T19] HID 045e:07da: Invalid code 65791 type 1
[  141.016974][   T19] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0013/input/input30
[  141.029660][   T19] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  141.116168][  T334] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  141.296053][  T334] usb 8-1: Using ep0 maxpacket: 32
[  141.302868][  T334] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[  141.312117][  T334] usb 8-1: config 0 has no interface number 0
[  141.318282][  T334] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  141.328336][  T334] usb 8-1: config 0 interface 196 has no altsetting 0
[  141.336641][  T334] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  141.345705][  T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.353900][  T334] usb 8-1: Product: syz
[  141.358148][  T334] usb 8-1: Manufacturer: syz
[  141.362771][  T334] usb 8-1: SerialNumber: syz
[  141.368498][  T334] usb 8-1: config 0 descriptor??
[  141.373797][ T5231] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  141.810849][   T19] usb 6-1: USB disconnect, device number 8
[  142.137133][  T334] ipheth 8-1:0.196: Apple iPhone USB Ethernet device attached
[  142.342256][   T28] audit: type=1400 audit(1771528774.296:1036): avc:  denied  { ioctl } for  pid=5253 comm="syz.5.1740" path="socket:[40623]" dev="sockfs" ino=40623 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  142.389290][ T5258] loop5: detected capacity change from 0 to 512
[  142.411432][ T5258] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1741: inode #1: comm syz.5.1741: iget: illegal inode #
[  142.425759][ T5258] EXT4-fs (loop5): Remounting filesystem read-only
[  142.433917][ T5258] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1741: error while reading EA inode 1 err=-117
[  142.447047][ T5258] EXT4-fs (loop5): Remounting filesystem read-only
[  142.453694][ T5258] EXT4-fs (loop5): 1 orphan inode deleted
[  142.459828][ T5258] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  142.494602][ T2904] EXT4-fs (loop5): unmounting filesystem.
[  142.644694][ T5278] xt_hashlimit: size too large, truncated to 1048576
[  142.745330][ T1106] Bluetooth: hci1: command 0x1003 tx timeout
[  142.745350][ T1656] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  142.745380][ T1106] Bluetooth: hci0: command 0x1003 tx timeout
[  142.763925][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  142.873292][ T5294] loop0: detected capacity change from 0 to 128
[  142.947064][ T5294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  142.962249][ T5294] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  142.987247][ T3736] EXT4-fs (loop0): unmounting filesystem.
[  143.176615][ T5321] SELinux: failed to load policy
[  143.241899][   T28] audit: type=1400 audit(1771528775.196:1037): avc:  denied  { ioctl } for  pid=5330 comm="syz.4.1773" path="socket:[40950]" dev="sockfs" ino=40950 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  143.471085][   T28] audit: type=1400 audit(1771528775.426:1038): avc:  denied  { getopt } for  pid=5353 comm="syz.0.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  143.674138][ T5364] set_capacity_and_notify: 1 callbacks suppressed
[  143.674156][ T5364] loop5: detected capacity change from 0 to 40427
[  143.701764][ T5364] F2FS-fs (loop5): invalid crc value
[  143.708554][ T5364] F2FS-fs (loop5): Found nat_bits in checkpoint
[  143.734301][ T5372] xt_hashlimit: size too large, truncated to 1048576
[  143.758368][ T5364] F2FS-fs (loop5): Start checkpoint disabled!
[  143.765180][ T5364] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  143.772758][ T5364] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  143.796936][   T19] ipheth 8-1:0.196: ipheth_carrier_set: usb_control_msg: -32
[  143.807800][   T19] usb 8-1: USB disconnect, device number 12
[  143.884853][   T19] ipheth 8-1:0.196: Apple iPhone USB Ethernet now disconnected
[  143.905201][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'.
[  144.010512][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'.
[  144.194751][    T6] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  144.229247][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'.
[  144.385958][    T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.404719][    T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.417307][    T6] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  144.433495][    T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.441722][    T6] usb 6-1: Product: syz
[  144.445957][    T6] usb 6-1: Manufacturer: syz
[  144.450575][    T6] usb 6-1: SerialNumber: syz
[  144.513037][   T28] audit: type=1400 audit(1771528776.467:1039): avc:  denied  { write } for  pid=5422 comm="syz.3.1804" name="usbmon1" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  144.676063][ T5432] SELinux: failed to load policy
[  144.824438][   T40] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  144.834314][  T334] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  144.901256][    T6] usb 6-1: 0:2 : does not exist
[  145.004202][  T287] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  145.011920][   T40] usb 5-1: Using ep0 maxpacket: 32
[  145.017158][  T334] usb 4-1: Using ep0 maxpacket: 16
[  145.023734][   T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.034739][  T334] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  145.043464][  T334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.053601][   T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.063386][  T334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  145.072330][   T40] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  145.081522][   T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.090799][   T40] usb 5-1: config 0 descriptor??
[  145.095987][  T334] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  145.105276][  T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.113365][  T334] usb 4-1: Product: syz
[  145.118240][   T40] hub 5-1:0.0: USB hub found
[  145.123008][  T334] usb 4-1: Manufacturer: syz
[  145.127722][  T334] usb 4-1: SerialNumber: syz
[  145.182866][ T5440] loop7: detected capacity change from 0 to 512
[  145.194674][ T5440] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.1812: inode #1: comm syz.7.1812: iget: illegal inode #
[  145.208030][ T5440] EXT4-fs (loop7): Remounting filesystem read-only
[  145.208882][  T287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.215222][ T5440] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.1812: error while reading EA inode 1 err=-117
[  145.236977][ T5440] EXT4-fs (loop7): Remounting filesystem read-only
[  145.243601][ T5440] EXT4-fs (loop7): 1 orphan inode deleted
[  145.245614][  T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.250360][ T5440] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  145.257550][  T287] usb 1-1: Product: syz
[  145.272907][  T287] usb 1-1: Manufacturer: syz
[  145.277931][  T287] usb 1-1: SerialNumber: syz
[  145.296330][ T3124] EXT4-fs (loop7): unmounting filesystem.
[  145.313528][    T6] usb 6-1: USB disconnect, device number 9
[  145.321343][   T40] hub 5-1:0.0: 1 port detected
[  145.537692][  T334] usb 4-1: 0:2 : does not exist
[  145.929415][  T466] hub 5-1:0.0: activate --> -90
[  145.939364][ T5450] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  146.036417][   T28] audit: type=1400 audit(1771528777.997:1040): avc:  denied  { read write } for  pid=5455 comm="syz.5.1819" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  146.050155][ T4232] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  146.073198][   T28] audit: type=1400 audit(1771528777.997:1041): avc:  denied  { open } for  pid=5455 comm="syz.5.1819" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  146.097224][ T4232] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  146.307418][  T287] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  146.313960][  T287] cdc_ncm 1-1:1.0: setting rx_max = 16384
[  146.338203][  T466] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  146.347141][   T28] audit: type=1400 audit(1771528778.308:1042): avc:  denied  { connect } for  pid=5468 comm="syz.5.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  146.354420][  T334] usb 5-1: USB disconnect, device number 17
[  146.373127][    T6] usb 4-1: USB disconnect, device number 12
[  146.504243][  T294] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  146.514101][  T287] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  146.522333][  T294] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  146.538784][  T287] usb 1-1: USB disconnect, device number 8
[  146.562118][  T287] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  146.808846][ T5519] loop5: detected capacity change from 0 to 2048
[  146.834889][ T5519] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  146.844521][ T5519] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.954911][ T5534] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1836: bg 0: block 345: padding at end of block bitmap is not set
[  146.969738][ T5534] EXT4-fs (loop5): Remounting filesystem read-only
[  147.100612][ T2904] EXT4-fs (loop5): unmounting filesystem.
[  147.354344][  T287] kernel read not supported for file /input/event2 (pid: 287 comm: kworker/1:2)
[  147.417416][ T5573] loop4: detected capacity change from 0 to 128
[  147.437758][ T5573] EXT4-fs (loop4): Test dummy encryption mode enabled
[  147.453122][ T5573] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 576460752303423507)!
[  147.480178][ T5573] EXT4-fs (loop4): group descriptors corrupted!
[  147.779806][    T6] kernel read not supported for file /input/event2 (pid: 6 comm: kworker/0:0)
[  147.857868][   T28] audit: type=1400 audit(1771528779.818:1043): avc:  denied  { getopt } for  pid=5610 comm="syz.0.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  148.039149][ T5606] loop4: detected capacity change from 0 to 32768
[  148.059564][ T5622] device veth0 entered promiscuous mode
[  148.068036][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'.
[  148.097396][ T5606]  loop4: p1 p3 < >
[  148.204102][   T28] audit: type=1400 audit(1771528780.169:1044): avc:  denied  { accept } for  pid=5625 comm="syz.4.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  148.268538][ T5637] loop0: detected capacity change from 0 to 512
[  148.292136][  T376] udevd[376]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  148.304596][  T337] udevd[337]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  148.324183][ T5637] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  148.333724][ T5637] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.368750][ T3736] EXT4-fs (loop0): unmounting filesystem.
[  148.390763][ T5583] loop5: detected capacity change from 0 to 131072
[  148.404940][ T5583] F2FS-fs (loop5): invalid crc value
[  148.429236][ T5648] tipc: Started in network mode
[  148.434482][ T5583] F2FS-fs (loop5): Found nat_bits in checkpoint
[  148.435189][ T5648] tipc: Node identity ac14140f, cluster identity 4711
[  148.447774][ T5648] tipc: New replicast peer: 255.255.255.255
[  148.454087][ T5648] tipc: Enabled bearer <udp:syz2>, priority 10
[  148.490028][ T5583] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  148.510304][ T5583] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753
[  148.526924][ T5583] F2FS-fs (loop5): Unexpected flush for atomic writes: ino=7, npages=2
[  149.009537][ T5654] loop3: detected capacity change from 0 to 131072
[  149.020088][ T5654] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  149.026961][ T5654] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  149.035824][ T5654] F2FS-fs (loop3): invalid crc value
[  149.066720][ T5654] F2FS-fs (loop3): Found nat_bits in checkpoint
[  149.086719][ T5660] SELinux: failed to load policy
[  149.132818][ T5654] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  149.139908][ T5654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  149.217371][ T5671] loop7: detected capacity change from 0 to 128
[  149.253554][ T5671] EXT4-fs (loop7): Test dummy encryption mode enabled
[  149.275872][ T5673] xt_hashlimit: size too large, truncated to 1048576
[  149.284119][ T5671] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  149.343325][ T5671] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.365667][ T5651] loop0: detected capacity change from 0 to 131072
[  149.414749][ T5651] F2FS-fs (loop0): Test dummy encryption mode enabled
[  149.450199][ T5651] F2FS-fs (loop0): invalid crc value
[  149.462023][  T334] tipc: Node number set to 2886997007
[  149.472821][ T3124] EXT4-fs (loop7): unmounting filesystem.
[  149.511376][ T5651] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.589470][ T5690] loop4: detected capacity change from 0 to 512
[  149.609374][ T5690] EXT4-fs: Ignoring removed nobh option
[  149.625703][ T5690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  149.643816][ T5651] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.656933][ T5690] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1900: iget: bad i_size value: 38620345925642
[  149.682095][ T5690] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1900: couldn't read orphan inode 15 (err -117)
[  149.725027][ T5694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  149.742148][ T5690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  149.775321][   T28] audit: type=1400 audit(1771528781.739:1045): avc:  denied  { link } for  pid=5650 comm="syz.0.1886" name="file0" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  149.838115][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  149.860878][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.892234][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  149.911048][   T28] audit: type=1326 audit(1771528781.869:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.3.1895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fc0d9bf79 code=0x0
[  149.934928][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.952363][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.978573][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.988397][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.996888][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.124430][ T5708] loop0: detected capacity change from 0 to 1024
[  150.131174][ T5708] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.140220][ T5696] EXT4-fs (loop4): unmounting filesystem.
[  150.151082][ T5708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  150.162700][ T5708] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  150.176290][ T5708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002]
[  150.187628][ T5708] System zones: 0-1, 3-36
[  150.193502][ T5708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  150.232018][ T3736] EXT4-fs (loop0): unmounting filesystem.
[  150.241609][  T287] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  150.402662][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.411161][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.418783][ T5718] device bridge_slave_0 entered promiscuous mode
[  150.427532][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.434720][  T287] usb 6-1: Using ep0 maxpacket: 8
[  150.440864][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.449081][ T5718] device bridge_slave_1 entered promiscuous mode
[  150.466340][  T287] usb 6-1: unable to get BOS descriptor or descriptor too short
[  150.477366][  T287] usb 6-1: unable to read config index 0 descriptor/start: -71
[  150.489420][  T287] usb 6-1: can't read configurations, error -71
[  150.535673][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.542798][ T5718] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.550111][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.557194][ T5718] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.583406][  T395] Bluetooth: hci0: Frame reassembly failed (-84)
[  150.591064][ T5731] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  150.604200][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.612897][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.621848][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.642865][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.654588][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.661692][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.669382][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.679059][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.686151][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.702263][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.710685][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.725973][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.737785][ T5718] device veth0_vlan entered promiscuous mode
[  150.745393][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.760924][ T5718] device veth1_macvtap entered promiscuous mode
[  150.768525][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.777553][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.785224][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.800753][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.812271][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.848009][ T5735] loop6: detected capacity change from 0 to 256
[  150.858352][ T5735] exfat: Deprecated parameter 'utf8'
[  150.866838][ T5735] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  150.965232][ T5743] overlayfs: failed to set xattr on upper
[  151.045518][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  151.068398][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.081446][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.088548][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.111573][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  151.130240][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  151.143485][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  151.161587][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  151.181325][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  151.189809][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  151.198476][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  151.207011][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  151.215036][  T466] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  151.320056][ T5717] loop0: detected capacity change from 0 to 131072
[  151.332936][ T5717] F2FS-fs (loop0): Test dummy encryption mode enabled
[  151.351355][ T5717] F2FS-fs (loop0): invalid crc value
[  151.369521][   T28] audit: type=1400 audit(1771528783.320:1047): avc:  denied  { attach_queue } for  pid=5757 comm="syz.5.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  151.392326][ T5717] F2FS-fs (loop0): Found nat_bits in checkpoint
[  151.421016][  T466] usb 7-1: Using ep0 maxpacket: 32
[  151.427575][  T466] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  151.433673][ T5717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  151.436672][  T466] usb 7-1: config 0 has no interface number 0
[  151.488341][  T466] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  151.517564][  T466] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.542556][  T466] usb 7-1: Product: syz
[  151.553980][  T466] usb 7-1: Manufacturer: syz
[  151.561544][  T466] usb 7-1: SerialNumber: syz
[  151.568577][  T466] usb 7-1: config 0 descriptor??
[  151.584419][  T466] smsc95xx v2.0.0
[  151.700340][ T5779] input: syz0 as /devices/virtual/input/input31
[  151.891917][ T5793] loop0: detected capacity change from 0 to 1024
[  151.898911][ T5793] EXT4-fs: Ignoring removed orlov option
[  151.917601][ T5793] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  151.964604][ T3736] EXT4-fs (loop0): unmounting filesystem.
[  151.989954][ T5797] SELinux:  unknown common 
[  151.997242][ T5802] loop0: detected capacity change from 0 to 1024
[  151.997649][ T5797] SELinux: failed to load policy
[  152.018137][ T5804] loop3: detected capacity change from 0 to 256
[  152.046697][ T5804] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  152.062256][ T5804] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  152.073639][ T5802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  152.082063][ T5802] System zones: 0-1, 3-8
[  152.086888][ T5802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  152.095554][ T5802] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.127673][ T5802] EXT4-fs error (device loop0): ext4_free_blocks:6221: comm syz.0.1939: Freeing blocks not in datazone - block = 0, count = 16
[  152.162854][ T3736] EXT4-fs (loop0): unmounting filesystem.
[  152.168632][   T28] audit: type=1326 audit(1771528784.110:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.5.1944" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe39119bf79 code=0x0
[  152.403363][   T28] audit: type=1400 audit(1771528784.361:1049): avc:  denied  { remount } for  pid=5827 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  152.528773][ T5839] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  152.595017][  T466] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  152.606255][  T466] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  152.617831][  T466] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  152.628773][  T466] smsc95xx: probe of 7-1:0.67 failed with error -71
[  152.645987][  T466] usb 7-1: USB disconnect, device number 4
[  152.660423][ T1128] Bluetooth: hci0: command 0x1003 tx timeout
[  152.665604][ T5285] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  152.729396][ T5851] SELinux: failed to load policy
[  152.811687][ T5855] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  152.839273][ T3124] EXT4-fs (loop7): unmounting filesystem.
[  153.048799][   T28] audit: type=1400 audit(1771528785.001:1050): avc:  denied  { write } for  pid=5871 comm="syz.5.1966" name="/" dev="configfs" ino=13316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  153.085024][   T28] audit: type=1326 audit(1771528785.041:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.5.1967" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe39119bf79 code=0x0
[  153.122518][  T287] kernel write not supported for file bpf-prog (pid: 287 comm: kworker/1:2)
[  153.159069][ T5880] exfat: Bad value for 'uid'
[  153.302647][ T5887] input: syz0 as /devices/virtual/input/input32
[  153.326891][ T5889] input: syz1 as /devices/virtual/input/input33
[  153.432617][ T5897] netlink: 'syz.6.1977': attribute type 2 has an invalid length.
[  153.441475][ T5897] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1977'.
[  153.482645][ T5900] SELinux: failed to load policy
[  153.593607][ T5910] syz_tun: refused to change device tx_queue_len
[  153.600169][ T5910] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  153.617693][ T5910] syz_tun: refused to change device tx_queue_len
[  153.624328][ T5910] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  153.653333][   T28] audit: type=1400 audit(1771528785.611:1052): avc:  denied  { map } for  pid=5911 comm="syz.0.1984" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  154.160206][ T5918] set_capacity_and_notify: 2 callbacks suppressed
[  154.160227][ T5918] loop7: detected capacity change from 0 to 131072
[  154.174023][ T5918] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1560) blocks(1024)
[  154.182979][ T5918] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  154.199774][ T5918] F2FS-fs (loop7): invalid crc value
[  154.213674][ T5916] loop0: detected capacity change from 0 to 131072
[  154.223982][ T5916] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  154.228377][ T5918] F2FS-fs (loop7): Found nat_bits in checkpoint
[  154.237837][ T5916] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  154.257764][ T5916] F2FS-fs (loop0): invalid crc value
[  154.284919][ T5916] F2FS-fs (loop0): Found nat_bits in checkpoint
[  154.303328][ T5918] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  154.319591][ T5918] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  154.340596][ T5916] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  154.378184][ T5916] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  154.386143][ T5916] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  154.807332][ T5937] loop3: detected capacity change from 0 to 40427
[  154.838938][ T5937] F2FS-fs (loop3): invalid crc value
[  154.883448][ T5937] F2FS-fs (loop3): Found nat_bits in checkpoint
[  154.990479][ T5937] F2FS-fs (loop3): Start checkpoint disabled!
[  155.002425][ T5937] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  155.019994][ T5937] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  155.117398][ T5954] loop0: detected capacity change from 0 to 512
[  155.125656][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.125656][ T5937] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  155.149721][ T5954] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1993: inode has both inline data and extents flags
[  155.154219][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.154219][ T5937] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  155.196576][ T5954] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1993: couldn't read orphan inode 15 (err -117)
[  155.209333][ T5954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  155.217811][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.217811][ T5937] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  155.233148][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.233148][ T5937] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  155.247891][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.247891][ T5937] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  155.262530][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.262530][ T5937] loop3: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  155.276688][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.276688][ T5937] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  155.293352][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.293352][ T5937] loop3: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  155.308211][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.308211][ T5937] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  155.322587][ T5937] syz.3.1992: attempt to access beyond end of device
[  155.322587][ T5937] loop3: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  155.388697][   T28] audit: type=1400 audit(1771528787.342:1053): avc:  denied  { getopt } for  pid=5964 comm="syz.5.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  155.431996][ T5968] loop7: detected capacity change from 0 to 512
[  155.450139][ T3736] EXT4-fs (loop0): unmounting filesystem.
[  155.461085][ T5968] EXT4-fs: Ignoring removed mblk_io_submit option
[  155.490909][ T5968] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  155.503099][ T5968] EXT4-fs (loop7): Test dummy encryption mode enabled
[  155.530423][ T5968] EXT4-fs (loop7): orphan cleanup on readonly fs
[  155.538522][ T5968] EXT4-fs error (device loop7): ext4_orphan_get:1399: comm syz.7.2000: inode #13: comm syz.7.2000: iget: illegal inode #
[  155.559172][ T5968] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2000: couldn't read orphan inode 13 (err -117)
[  155.608897][ T5968] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  155.649161][ T5968] EXT4-fs (loop7): shut down requested (2)
[  155.659568][   T28] audit: type=1400 audit(1771528787.622:1054): avc:  denied  { search } for  pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.700150][ T5968] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  155.759400][ T3124] EXT4-fs (loop7): unmounting filesystem.
[  155.812565][ T5984] loop7: detected capacity change from 0 to 512
[  155.870869][ T5984] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  155.890909][ T5984] ext4 filesystem being mounted at /179/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.950439][ T5984] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz.7.2007: invalid size
[  155.975032][ T5994] device syzkaller0 entered promiscuous mode
[  156.012621][ T3124] EXT4-fs (loop7): unmounting filesystem.
[  156.084611][ T5998] loop7: detected capacity change from 0 to 1024
[  156.099476][ T5998] EXT4-fs: Ignoring removed nobh option
[  156.115335][ T5998] EXT4-fs: Ignoring removed bh option
[  156.126139][ T5998] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  156.184381][ T5998] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  156.227457][ T6006] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3852: comm syz.7.2012: Allocating blocks 497-513 which overlap fs metadata
[  156.248644][ T6006] EXT4-fs (loop7): pa ffff88813888f3f0: logic 256, phys. 385, len 8
[  156.256717][ T6006] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1
[  156.289199][ T3124] EXT4-fs (loop7): unmounting filesystem.
[  156.599766][ T6025] loop6: detected capacity change from 0 to 40427
[  156.614426][ T6025] F2FS-fs (loop6): heap/no_heap options were deprecated
[  156.644636][ T6025] F2FS-fs (loop6): fault_injection options not supported
[  156.652982][ T6025] F2FS-fs (loop6): fault_type options not supported
[  156.661276][ T6025] F2FS-fs (loop6): invalid crc value
[  156.698954][ T6025] F2FS-fs (loop6): Found nat_bits in checkpoint
[  156.761841][ T6025] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  156.897833][ T6044] loop7: detected capacity change from 0 to 256
[  156.917637][ T6044] exfat: Deprecated parameter 'utf8'
[  156.929534][ T6044] exfat: Deprecated parameter 'namecase'
[  156.935302][ T6044] exfat: Deprecated parameter 'namecase'
[  156.943240][ T6044] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  157.037074][ T6015] loop0: detected capacity change from 0 to 131072
[  157.052564][ T6015] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  157.059500][ T6015] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  157.069049][ T6015] F2FS-fs (loop0): invalid crc value
[  157.085909][ T6015] F2FS-fs (loop0): Found nat_bits in checkpoint
[  157.128804][ T6055] netlink: 'syz.6.2033': attribute type 12 has an invalid length.
[  157.142998][ T6015] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  157.150339][ T6015] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  157.168256][    T6] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  157.238160][   T19] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  157.359163][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.370093][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2035'.
[  157.379301][    T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  157.388998][    T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  157.398739][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  157.406818][    T6] usb 4-1: SerialNumber: syz
[  157.427985][   T19] usb 8-1: Using ep0 maxpacket: 16
[  157.438022][   T19] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  157.446302][   T19] usb 8-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config
[  157.456784][   T19] usb 8-1: config 0 has no interface number 0
[  157.472182][   T19] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  157.481504][   T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.491803][   T19] usb 8-1: Product: syz
[  157.496266][   T19] usb 8-1: Manufacturer: syz
[  157.501102][   T19] usb 8-1: SerialNumber: syz
[  157.507258][   T19] usb 8-1: config 0 descriptor??
[  157.518906][   T19] usb 8-1: Found UVC 0.00 device syz (046d:08f3)
[  157.525359][   T19] usb 8-1: No valid video chain found.
[  157.616409][    T6] usb 4-1: 0:2 : does not exist
[  157.623904][    T6] usb 4-1: USB disconnect, device number 13
[  157.651332][ T6069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  157.671721][ T3736] EXT4-fs (loop0): unmounting filesystem.
[  157.721448][   T19] usb 8-1: USB disconnect, device number 13
[  157.839579][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  157.855556][ T6077] netlink: 'syz.6.2041': attribute type 12 has an invalid length.
[  158.177611][ T1106] Bluetooth: hci0: command 0x1003 tx timeout
[  158.178671][ T5285] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  158.208314][ T6084] capability: warning: `syz.5.2044' uses 32-bit capabilities (legacy support in use)
[  158.440454][   T28] audit: type=1400 audit(1771528790.404:1055): avc:  denied  { associate } for  pid=6110 comm="syz.5.2055" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  158.561405][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  158.603811][ T6107] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  158.617297][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  158.617531][ T6107] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  158.634121][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.645012][ T6107] F2FS-fs (loop3): invalid crc value
[  158.652414][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  158.661613][ T6107] F2FS-fs (loop3): Found nat_bits in checkpoint
[  158.671672][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.691343][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.713902][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.722655][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.731219][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.740785][   T19] ip6_tunnel: 7 xmit: Local address not yet configured!
[  158.780132][ T6107] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  158.787550][ T6107] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  158.865382][ T6132] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request.  Check SNMP counters.
[  159.202848][ T6135] set_capacity_and_notify: 3 callbacks suppressed
[  159.202868][ T6135] loop0: detected capacity change from 0 to 40427
[  159.228297][ T6135] F2FS-fs (loop0): invalid crc value
[  159.262335][ T6135] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  159.345670][ T6135] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  159.354621][ T6137] loop6: detected capacity change from 0 to 40427
[  159.374165][ T6137] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  159.390796][ T6137] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  159.411110][ T6137] F2FS-fs (loop6): invalid crc value
[  159.430249][ T6137] F2FS-fs (loop6): Found nat_bits in checkpoint
[  159.508834][ T6137] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  159.532111][ T6137] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  159.623542][   T28] audit: type=1400 audit(1771528791.584:1056): avc:  denied  { quotaon } for  pid=6136 comm="syz.6.2064" name="/" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.806645][ T6113] loop5: detected capacity change from 0 to 131072
[  159.830040][ T6113] F2FS-fs (loop5): Test dummy encryption mode enabled
[  159.851624][ T6113] F2FS-fs (loop5): invalid crc value
[  159.872452][ T6113] F2FS-fs (loop5): Found nat_bits in checkpoint
[  159.877058][  T287] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  159.922473][ T6113] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  159.925147][ T6184] loop7: detected capacity change from 0 to 256
[  159.939298][ T6184] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  160.066660][  T287] usb 4-1: Using ep0 maxpacket: 32
[  160.072964][  T287] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  160.090695][  T287] usb 4-1: config 0 has no interface number 0
[  160.106683][  T287] usb 4-1: config 0 interface 184 has no altsetting 0
[  160.128063][  T287] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  160.147266][  T287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.158372][  T287] usb 4-1: Product: syz
[  160.178020][  T287] usb 4-1: Manufacturer: syz
[  160.182670][  T287] usb 4-1: SerialNumber: syz
[  160.207233][  T287] usb 4-1: config 0 descriptor??
[  160.213536][  T287] smsc75xx v1.0.0
[  160.755640][ T6217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6217 comm=syz.6.2091
[  160.880032][ T6225] loop5: detected capacity change from 0 to 128
[  160.888650][ T6225] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.920437][ T6225] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  160.997735][ T6233] netlink: 'syz.0.2099': attribute type 4 has an invalid length.
[  161.035399][ T6237] loop0: detected capacity change from 0 to 512
[  161.052256][ T6237] EXT4-fs: Ignoring removed nobh option
[  161.059128][ T6237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  161.073284][ T6237] EXT4-fs (loop0): 1 truncate cleaned up
[  161.080405][ T6237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  161.109761][ T3736] EXT4-fs (loop0): unmounting filesystem.
[  161.176436][   T19] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  161.215821][  T287] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  161.263596][ T6254] loop0: detected capacity change from 0 to 16
[  161.273672][ T6254] erofs: (device loop0): mounted with root inode @ nid 36.
[  161.285864][ T6254] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=46
[  161.295098][ T6254] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=46
[  161.304410][ T6254] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=46
[  161.313636][ T6254] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=46
[  161.323176][   T28] audit: type=1400 audit(1771528793.295:1057): avc:  denied  { rmdir } for  pid=6253 comm="syz.0.2107" name="file0" dev="overlay" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  161.367157][   T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.377625][   T19] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.391745][   T19] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  161.401773][   T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  161.410297][   T19] usb 7-1: SerialNumber: syz
[  161.418154][  T287] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  161.430950][  T287] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  161.440893][  T287] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  161.451391][  T287] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  161.460968][  T287] smsc75xx: probe of 4-1:0.184 failed with error -71
[  161.475607][  T287] usb 4-1: USB disconnect, device number 14
[  161.631878][   T19] usb 7-1: 0:2 : does not exist
[  161.640385][   T19] usb 7-1: USB disconnect, device number 5
[  161.889219][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  162.194792][ T6301] loop0: detected capacity change from 0 to 256
[  162.218968][ T6301] exfat: Deprecated parameter 'namecase'
[  162.246369][ T6301] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  162.275574][   T28] audit: type=1400 audit(1771528794.236:1058): avc:  denied  { setattr } for  pid=6300 comm="syz.0.2125" name="11000000000000000000000000000000" dev="loop0" ino=1048802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  162.399441][  T446] tipc: Disabling bearer <udp:syz2>
[  162.404885][  T446] tipc: Left network mode
[  162.655392][    C0] ip6_tunnel: 7 xmit: Local address not yet configured!
[  162.688314][ T6303] loop3: detected capacity change from 0 to 131072
[  162.700716][ T6303] F2FS-fs (loop3): invalid crc value
[  162.736338][ T6303] F2FS-fs (loop3): Found nat_bits in checkpoint
[  162.784371][ T6303] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  162.937292][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.944439][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.953025][ T6321] device bridge_slave_0 entered promiscuous mode
[  162.962411][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.976938][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.984784][ T6321] device bridge_slave_1 entered promiscuous mode
[  163.146693][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.153804][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.161245][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.168325][ T6321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.213143][ T6353] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[
[  163.213143][ T6353] Q&|xùX
[  163.277858][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  163.299308][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.318717][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.345963][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.363158][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.370300][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.391003][  T446] device bridge_slave_1 left promiscuous mode
[  163.398696][  T446] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.407098][  T446] device bridge_slave_0 left promiscuous mode
[  163.413524][  T446] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.430813][  T446] device veth1_macvtap left promiscuous mode
[  163.437136][  T446] device veth0_vlan left promiscuous mode
[  163.571177][   T28] audit: type=1400 audit(1771528795.536:1059): avc:  denied  { read } for  pid=6371 comm="syz.5.2151" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  163.606653][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.616570][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.623669][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.638646][   T28] audit: type=1400 audit(1771528795.536:1060): avc:  denied  { open } for  pid=6371 comm="syz.5.2151" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  163.641879][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.680326][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.696758][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.705061][   T28] audit: type=1400 audit(1771528795.536:1061): avc:  denied  { ioctl } for  pid=6371 comm="syz.5.2151" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  163.706066][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.760812][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  163.775568][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.785449][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  163.793700][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.802984][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.810886][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.824474][ T6321] device veth0_vlan entered promiscuous mode
[  163.845398][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  163.855124][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  163.896257][ T6321] device veth1_macvtap entered promiscuous mode
[  163.907190][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  163.915303][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  163.930764][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  163.962616][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  163.987901][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  164.107265][   T28] audit: type=1400 audit(1771528796.076:1062): avc:  denied  { connect } for  pid=6387 comm="syz.7.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  164.240338][ T6401] overlayfs: failed to verify origin (newroot/278, ino=1508, err=-1)
[  164.249550][ T6401] overlayfs: failed to verify upper root origin
[  164.499021][ T6428] netlink: 'syz.7.2174': attribute type 4 has an invalid length.
[  164.510636][ T6428] netlink: 'syz.7.2174': attribute type 4 has an invalid length.
[  164.544463][   T19] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  164.690659][ T6443] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2181'.
[  164.734327][   T19] usb 4-1: Using ep0 maxpacket: 32
[  164.740885][   T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.751996][   T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.761839][   T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  164.771600][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.784093][   T19] usb 4-1: config 0 descriptor??
[  164.864389][  T294] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  165.044225][  T294] usb 8-1: Using ep0 maxpacket: 8
[  165.050549][  T294] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.069101][  T294] usb 8-1: config 0 has no interfaces?
[  165.088342][ T6458] loop6: detected capacity change from 0 to 40427
[  165.095069][  T294] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  165.104365][  T294] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.112505][  T294] usb 8-1: Product: syz
[  165.116963][  T294] usb 8-1: Manufacturer: syz
[  165.122949][ T6458] F2FS-fs (loop6): invalid crc value
[  165.133420][  T294] usb 8-1: SerialNumber: syz
[  165.145469][ T6458] F2FS-fs (loop6): Found nat_bits in checkpoint
[  165.155530][  T294] usb 8-1: config 0 descriptor??
[  165.199392][   T19] savu 0003:1E7D:2D5A.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  165.215552][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  165.235438][ T6458] F2FS-fs (loop6): Start checkpoint disabled!
[  165.242622][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2191'.
[  165.248582][ T6458] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  165.260177][ T6458] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  165.317309][ T6458] bio_check_eod: 183 callbacks suppressed
[  165.317332][ T6458] syz.6.2187: attempt to access beyond end of device
[  165.317332][ T6458] loop6: rw=2049, sector=45096, nr_sectors = 96 limit=40427
[  165.339525][ T6458] syz.6.2187: attempt to access beyond end of device
[  165.339525][ T6458] loop6: rw=0, sector=45184, nr_sectors = 8 limit=40427
[  165.377036][  T334] usb 8-1: USB disconnect, device number 14
[  165.389746][  T446] kworker/u4:5: attempt to access beyond end of device
[  165.389746][  T446] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  165.495136][   T19] usb 4-1: USB disconnect, device number 15
[  165.512630][ T6477] loop6: detected capacity change from 0 to 2048
[  165.526605][ T6477] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  165.591069][ T6477] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2193: bg 0: block 234: padding at end of block bitmap is not set
[  165.605678][ T6477] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  165.618566][ T6477] EXT4-fs (loop6): This should not happen!! Data will be lost
[  165.618566][ T6477] 
[  165.629407][ T6477] EXT4-fs (loop6): Total free blocks count 0
[  165.635548][ T6477] EXT4-fs (loop6): Free/Dirty block details
[  165.641533][ T6477] EXT4-fs (loop6): free_blocks=0
[  165.646618][ T6477] EXT4-fs (loop6): dirty_blocks=3248
[  165.651923][ T6477] EXT4-fs (loop6): Block reservation details
[  165.658137][ T6477] EXT4-fs (loop6): i_reserved_data_blocks=203
[  165.682244][ T6482] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1024 with error 28
[  165.920879][ T6488] loop7: detected capacity change from 0 to 128
[  165.933255][ T6488] syz.7.2197: attempt to access beyond end of device
[  165.933255][ T6488] loop7: rw=2049, sector=145, nr_sectors = 35 limit=128
[  166.000857][   T28] audit: type=1400 audit(1771528797.967:1063): avc:  denied  { module_load } for  pid=6487 comm="syz.7.2197" path="/219/file0/bus" dev="loop7" ino=1048812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1
[  166.098341][ T6497] loop3: detected capacity change from 0 to 2048
[  166.120187][ T6497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  166.129193][ T6497] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.181369][ T4536] EXT4-fs (loop3): unmounting filesystem.
[  166.389619][ T6528] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2525290536 (5050581072 ns) > initial count (447779868 ns). Using initial count to start timer.
[  166.506184][ T6535] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  166.603409][  T334] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  166.743352][  T287] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  166.784458][ T6539] loop3: detected capacity change from 0 to 40427
[  166.791753][ T6539] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  166.798485][ T6539] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  166.808130][ T6539] F2FS-fs (loop3): invalid crc value
[  166.815284][  T334] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.816357][ T6539] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  166.836988][  T334] usb 8-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  166.866236][  T334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.884282][  T334] usb 8-1: config 0 descriptor??
[  166.896025][ T6539] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  166.903126][ T6539] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  166.939716][ T6539] syz.3.2218: attempt to access beyond end of device
[  166.939716][ T6539] loop3: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[  166.964446][  T287] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  166.974437][ T4536] syz-executor: attempt to access beyond end of device
[  166.974437][ T4536] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.988575][  T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.009564][  T287] usb 2-1: config 0 descriptor??
[  167.158423][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2221'.
[  167.167565][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2221'.
[  167.293325][ T5285] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  167.308874][  T334] lenovo 0003:17EF:60A3.0017: unbalanced collection at end of report description
[  167.324615][  T334] lenovo 0003:17EF:60A3.0017: hid_parse failed
[  167.330996][  T334] lenovo: probe of 0003:17EF:60A3.0017 failed with error -22
[  167.417656][  T287] pantherlord 0003:0F30:0111.0018: hidraw0: USB HID v0.02 Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0
[  167.433002][  T287] pantherlord 0003:0F30:0111.0018: no output reports found
[  167.486559][ T6563] kvm [6562]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[  167.529826][   T19] usb 8-1: USB disconnect, device number 15
[  167.619088][  T287] usb 2-1: USB disconnect, device number 7
[  168.055034][ T6580] loop6: detected capacity change from 0 to 1024
[  168.093066][ T6580] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  168.101889][ T6580] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.124702][ T6580] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2234: bg 0: block 112: padding at end of block bitmap is not set
[  168.140547][ T6580] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 117
[  168.153086][ T6580] EXT4-fs (loop6): This should not happen!! Data will be lost
[  168.153086][ T6580] 
[  168.179009][ T5718] EXT4-fs (loop6): unmounting filesystem.
[  168.492956][ T6618] SELinux: failed to load policy
[  168.778939][ T6637] loop6: detected capacity change from 0 to 512
[  168.832497][ T6637] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  168.842040][ T6637] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.891150][ T6648] loop7: detected capacity change from 0 to 1024
[  168.944794][ T6648] EXT4-fs: Ignoring removed nobh option
[  168.961974][ T6648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  169.031225][ T6648] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102]
[  169.046675][ T6648] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  169.064370][ T6637] syz.6.2256 (6637) used greatest stack depth: 19904 bytes left
[  169.105434][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.122263][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.132312][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.151124][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.168008][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.221089][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.237666][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.250177][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.262195][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.281871][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.290327][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.326388][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.336861][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.341287][ T3124] EXT4-fs (loop7): unmounting filesystem.
[  169.358568][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2266'.
[  169.367891][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.383018][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.390319][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.390403][ T6668] loop1: detected capacity change from 0 to 2048
[  169.399302][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.424268][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2266'.
[  169.435694][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.449100][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.462534][ T6668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  169.471127][ T6668] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.477452][ T5718] EXT4-fs (loop6): Remounting filesystem read-only
[  169.500361][ T5718] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  169.515673][   T28] audit: type=1400 audit(1771528801.489:1064): avc:  denied  { map } for  pid=6667 comm="syz.1.2269" path="/14/file0/bus/file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  169.566288][ T6321] EXT4-fs (loop1): unmounting filesystem.
[  169.651900][  T466] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  169.854419][  T466] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  169.881772][  T466] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  169.901790][  T466] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  169.931856][  T466] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  169.953165][  T466] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  169.965717][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.971831][  T466] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.980823][  T466] usb 8-1: Product: syz
[  169.981167][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.985051][  T466] usb 8-1: Manufacturer: syz
[  169.996754][  T466] usb 8-1: SerialNumber: syz
[  170.003279][ T6670] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  170.011093][  T466] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  170.018642][ T6685] device bridge_slave_0 entered promiscuous mode
[  170.025074][  T466] cdc_ncm 8-1:1.0: bind() failure
[  170.032240][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.039408][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.046871][  T466] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  170.053772][  T466] cdc_ncm 8-1:1.1: bind() failure
[  170.067561][ T6685] device bridge_slave_1 entered promiscuous mode
[  170.142827][ T6690] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns
[  170.169165][ T6690] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  170.216925][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.224048][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.231429][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.238557][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.280172][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.291949][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.309173][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.330736][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.348573][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.355773][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.381233][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.398120][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.405263][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.439063][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.464106][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.481841][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.514922][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  170.526738][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.540996][ T6685] device veth0_vlan entered promiscuous mode
[  170.548276][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  170.558032][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.574786][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.582888][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.590588][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.599661][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.610587][ T6685] device veth1_macvtap entered promiscuous mode
[  170.624253][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.644335][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.653254][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.664641][ T6701] xt_hashlimit: size too large, truncated to 1048576
[  170.673478][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.688502][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.878723][ T6684] loop5: detected capacity change from 0 to 131072
[  170.889688][ T6684] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  170.901273][ T6684] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  170.938821][ T6684] F2FS-fs (loop5): invalid crc value
[  170.963713][ T6684] F2FS-fs (loop5): Found nat_bits in checkpoint
[  171.010208][ T6684] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  171.018450][ T6684] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  171.434748][ T6719] loop1: detected capacity change from 0 to 40427
[  171.460944][ T6719] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  171.478894][ T6719] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  171.493304][ T6719] F2FS-fs (loop1): invalid crc value
[  171.523588][ T6719] F2FS-fs (loop1): Found nat_bits in checkpoint
[  171.556697][ T6728] loop5: detected capacity change from 0 to 16
[  171.575759][ T6728] erofs: (device loop5): mounted with root inode @ nid 36.
[  171.583833][ T6719] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  171.595053][ T6719] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.719237][ T6717] loop3: detected capacity change from 0 to 131072
[  171.736666][ T6717] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  171.759473][ T6717] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  171.774099][ T6717] F2FS-fs (loop3): invalid crc value
[  171.810250][ T6717] F2FS-fs (loop3): Found nat_bits in checkpoint
[  171.862612][ T6717] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  171.889231][ T6744] loop9: detected capacity change from 0 to 256
[  171.897694][ T6717] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  171.905851][ T6717] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  171.929523][   T28] audit: type=1400 audit(1771528803.890:1065): avc:  denied  { read } for  pid=6746 comm="syz.1.2291" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  171.984250][   T28] audit: type=1400 audit(1771528803.890:1066): avc:  denied  { open } for  pid=6746 comm="syz.1.2291" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  172.012223][   T28] audit: type=1400 audit(1771528803.890:1067): avc:  denied  { write } for  pid=6746 comm="syz.1.2291" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  172.035331][   T28] audit: type=1400 audit(1771528803.980:1068): avc:  denied  { read write } for  pid=6716 comm="syz.3.2281" name="file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  172.058026][   T28] audit: type=1400 audit(1771528803.980:1069): avc:  denied  { open } for  pid=6716 comm="syz.3.2281" path="/161/file1/file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  172.185725][   T28] audit: type=1400 audit(1771528804.151:1070): avc:  denied  { watch } for  pid=6755 comm="syz.9.2294" path="/8/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  172.391824][  T466] usb 8-1: USB disconnect, device number 16
[  172.460355][ T6759] loop9: detected capacity change from 0 to 40427
[  172.467457][ T6759] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  172.475529][ T6759] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  172.499647][ T6759] F2FS-fs (loop9): invalid crc value
[  172.547359][ T6759] F2FS-fs (loop9): Found nat_bits in checkpoint
[  172.609906][ T6759] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  172.617124][ T6759] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  172.636192][   T28] audit: type=1400 audit(1771528804.601:1071): avc:  denied  { mount } for  pid=6778 comm="syz.3.2295" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  172.662434][ T6780] netlink: 'syz.7.2300': attribute type 13 has an invalid length.
[  172.678787][ T6780] netlink: 'syz.7.2300': attribute type 17 has an invalid length.
[  172.717121][ T6780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  172.910880][ T6793] loop9: detected capacity change from 0 to 512
[  172.921095][ T6793] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  172.957110][ T6793] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2200: inode #15: comm syz.9.2303: corrupted in-inode xattr
[  173.002575][ T6793] EXT4-fs (loop9): 1 orphan inode deleted
[  173.008387][ T6793] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  173.054679][ T6800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  173.075695][ T6800] kvm [6799]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  173.091948][ T6800] kvm [6799]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  173.295246][ T6811] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~	
[  173.389975][  T466] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  173.581164][  T466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.596602][  T466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.617394][  T466] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  173.636419][  T466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.653500][  T466] usb 2-1: config 0 descriptor??
[  173.779036][ T6685] EXT4-fs (loop9): unmounting filesystem.
[  174.038653][ T6852] loop3: detected capacity change from 0 to 1024
[  174.057045][ T6852] ext4: Unknown parameter 'nojournal'
[  174.126998][ T6852] loop3: detected capacity change from 0 to 256
[  174.300880][ T6866] loop5: detected capacity change from 0 to 512
[  174.353782][ T6866] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  174.391942][ T6866] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  174.408586][   T28] audit: type=1400 audit(1771528806.382:1072): avc:  denied  { setopt } for  pid=6872 comm="syz.3.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  174.450932][ T6866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  174.468330][ T6866] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  174.519995][ T2904] EXT4-fs (loop5): unmounting filesystem.
[  174.589061][ T6875] kvm [6874]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[  174.667859][  T466] uclogic 0003:256C:006D.0019: interface is invalid, ignoring
[  174.874274][  T466] usb 2-1: USB disconnect, device number 8
[  174.945785][ T6893] FAT-fs (loop3): Unrecognized mount option "urrors=remount-ro" or missing value
[  175.148717][   T28] audit: type=1400 audit(1771528807.112:1073): avc:  denied  { accept } for  pid=6900 comm="syz.3.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  175.183536][   T28] audit: type=1400 audit(1771528807.132:1074): avc:  denied  { read } for  pid=6900 comm="syz.3.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  175.232936][ T6903] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  175.242075][ T6903] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  175.306585][   T28] audit: type=1400 audit(1771528807.272:1075): avc:  denied  { setattr } for  pid=6902 comm="syz.7.2350" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  175.342251][   T28] audit: type=1400 audit(1771528807.302:1076): avc:  denied  { write open } for  pid=6902 comm="syz.7.2350" path=2F202864656C6574656429 dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  175.373554][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.384309][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.391255][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.401974][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.418227][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.432440][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.447898][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.465468][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2362'.
[  175.475618][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2362'.
[  175.490003][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.496901][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.514616][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.527019][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.551085][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.557777][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.568731][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.575805][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.588410][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.595708][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.608766][ T6933] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  175.624166][ T3124] EXT4-fs (loop7): Remounting filesystem read-only
[  175.631785][ T3124] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  175.652905][   T28] audit: type=1400 audit(1771528807.622:1077): avc:  denied  { name_bind } for  pid=6935 comm="syz.1.2366" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  175.690984][ T6933] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2364: inode has both inline data and extents flags
[  175.726419][ T6933] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2364: couldn't read orphan inode 15 (err -117)
[  175.744802][ T6933] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  175.788636][ T6685] EXT4-fs (loop9): unmounting filesystem.
[  175.818018][ T6945] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  175.831163][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  175.846403][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  175.856475][ T6945] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  175.861253][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.876980][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  175.885248][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  175.897768][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.906631][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.914959][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.923412][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.020823][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.061833][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.083538][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.110551][ T6961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  176.116972][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.147988][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.158857][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.168974][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.188785][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.195492][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.208741][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.215448][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.232375][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.253144][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.284031][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.294758][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.310909][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.317695][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.328546][ T6321] EXT4-fs (loop1): Remounting filesystem read-only
[  176.335252][ T6321] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  176.391549][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.398870][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.406498][ T6968] device bridge_slave_0 entered promiscuous mode
[  176.414800][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.422288][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.430335][ T6968] device bridge_slave_1 entered promiscuous mode
[  176.492409][   T10] device bridge_slave_1 left promiscuous mode
[  176.499743][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.527845][   T10] device bridge_slave_0 left promiscuous mode
[  176.545843][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.554736][ T6981] set_capacity_and_notify: 4 callbacks suppressed
[  176.554756][ T6981] loop9: detected capacity change from 0 to 256
[  176.569100][   T10] device veth1_macvtap left promiscuous mode
[  176.578452][   T10] device veth0_vlan left promiscuous mode
[  176.590543][ T6981] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.615250][ T6981] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  176.640049][ T6981] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  176.883897][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.891580][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.908953][ T6983] device bridge_slave_0 entered promiscuous mode
[  176.926043][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.933346][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.941032][ T6983] device bridge_slave_1 entered promiscuous mode
[  176.947661][ T6967] loop5: detected capacity change from 0 to 131072
[  176.958358][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.966167][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.973980][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.983020][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.991585][  T446] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.998706][  T446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.000247][ T6967] F2FS-fs (loop5): invalid crc value
[  177.031738][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.042305][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.050879][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.059661][  T446] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.066754][  T446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.089606][ T6967] F2FS-fs (loop5): Found nat_bits in checkpoint
[  177.099131][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.101615][ T6996] loop3: detected capacity change from 0 to 512
[  177.109304][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.138879][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.155729][ T6996] EXT4-fs: Ignoring removed mblk_io_submit option
[  177.158766][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  177.170552][ T6996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  177.176557][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  177.190865][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  177.198348][ T6967] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  177.222485][ T6968] device veth0_vlan entered promiscuous mode
[  177.240923][ T6996] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  177.259339][ T6996] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002]
[  177.267593][ T6996] System zones: 0-1, 15-15, 18-18, 34-34
[  177.276555][ T6996] EXT4-fs (loop3): orphan cleanup on readonly fs
[  177.285123][ T6996] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.2388: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  177.304297][ T6996] EXT4-fs error (device loop3): ext4_quota_enable:7009: comm syz.3.2388: Bad quota inode: 4, type: 1
[  177.315727][ T6996] EXT4-fs warning (device loop3): ext4_enable_quotas:7050: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  177.337372][ T6996] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  177.344275][ T6996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  177.372087][ T6996] EXT4-fs (loop3): shut down requested (2)
[  177.378834][ T6996] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[  177.386061][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  177.387709][ T6996] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[  177.404398][ T6968] device veth1_macvtap entered promiscuous mode
[  177.412001][   T28] audit: type=1400 audit(1771528809.383:1078): avc:  denied  { read } for  pid=6995 comm="syz.3.2388" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  177.452009][ T4536] EXT4-fs (loop3): unmounting filesystem.
[  177.502817][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.534597][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.548572][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.631631][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.639604][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.658926][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.680216][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.700298][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.707392][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.719409][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.738245][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.746648][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.753759][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.761376][  T334] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  177.769975][   T28] audit: type=1400 audit(1771528809.743:1079): avc:  denied  { link } for  pid=7022 comm="syz.2.2396" name="#a1" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  177.782767][ T7023] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  177.795024][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.813801][   T28] audit: type=1400 audit(1771528809.743:1080): avc:  denied  { rename } for  pid=7022 comm="syz.2.2396" name="#a2" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  177.843077][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.857237][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.876535][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.897537][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.943634][ T6983] device veth0_vlan entered promiscuous mode
[  177.949933][   T28] audit: type=1400 audit(1771528809.923:1081): avc:  denied  { watch_reads } for  pid=7030 comm="syz.2.2399" path="/proc/12/task/13" dev="proc" ino=50927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  177.962229][  T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  177.982569][  T334] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  177.994464][  T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.997319][  T334] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.012097][  T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.027141][  T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.036128][  T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.050140][  T334] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  178.054110][  T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.067026][  T334] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.076301][   T10] device bridge_slave_1 left promiscuous mode
[  178.083197][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.091071][   T10] device bridge_slave_0 left promiscuous mode
[  178.091091][  T334] usb 10-1: config 0 descriptor??
[  178.098162][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.110045][  T334] hub 10-1:0.0: USB hub found
[  178.115601][   T10] device veth1_macvtap left promiscuous mode
[  178.121815][   T10] device veth0_vlan left promiscuous mode
[  178.245134][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.253900][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.264381][ T6983] device veth1_macvtap entered promiscuous mode
[  178.278030][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  178.285822][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  178.294280][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  178.311540][  T334] hub 10-1:0.0: 1 port detected
[  178.311557][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  178.313786][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  178.342437][ T7041] loop3: detected capacity change from 0 to 256
[  178.365788][ T7041] FAT-fs (loop3): Directory bread(block 64) failed
[  178.372477][ T7041] FAT-fs (loop3): Directory bread(block 65) failed
[  178.381776][ T7043] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  178.389311][   T28] audit: type=1400 audit(1771528810.354:1082): avc:  denied  { mount } for  pid=7042 comm="syz.8.2387" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  178.389518][ T7041] FAT-fs (loop3): Directory bread(block 66) failed
[  178.423583][ T7041] FAT-fs (loop3): Directory bread(block 67) failed
[  178.430716][ T7041] FAT-fs (loop3): Directory bread(block 68) failed
[  178.437707][ T7041] FAT-fs (loop3): Directory bread(block 69) failed
[  178.444648][ T7041] FAT-fs (loop3): Directory bread(block 70) failed
[  178.451706][ T7041] FAT-fs (loop3): Directory bread(block 71) failed
[  178.458527][ T7041] FAT-fs (loop3): Directory bread(block 72) failed
[  178.465138][ T7041] FAT-fs (loop3): Directory bread(block 73) failed
[  178.570757][ T7053] xt_hashlimit: size too large, truncated to 1048576
[  178.612371][ T7054] loop5: detected capacity change from 0 to 16
[  178.636492][ T7054] erofs: (device loop5): mounted with root inode @ nid 36.
[  178.715496][ T7060] loop3: detected capacity change from 0 to 128
[  178.728064][ T7060] EXT4-fs: Ignoring removed orlov option
[  178.739939][ T7060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  178.748813][ T7060] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  178.803673][ T4536] EXT4-fs (loop3): unmounting filesystem.
[  178.817354][  T287] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  179.018100][  T287] usb 9-1: Using ep0 maxpacket: 16
[  179.025300][  T287] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.058291][  T287] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.080415][  T287] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  179.097106][  T287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.105174][  T287] usb 9-1: Product: syz
[  179.117110][  T287] usb 9-1: Manufacturer: syz
[  179.141391][  T287] usb 9-1: SerialNumber: syz
[  179.146117][   T40] hub 10-1:0.0: activate --> -90
[  179.347157][  T334] hub 10-1:0.0: hub_ext_port_status failed (err = -71)
[  179.354420][  T466] usb 10-1: USB disconnect, device number 2
[  179.377540][  T287] usb 9-1: 0:2 : does not exist
[  179.389257][  T287] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  179.412383][  T287] usb 9-1: USB disconnect, device number 8
[  179.457225][ T7103] loop2: detected capacity change from 0 to 128
[  179.496065][ T7103] syz.2.2428: attempt to access beyond end of device
[  179.496065][ T7103] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[  179.514666][ T7102] syz.2.2428: attempt to access beyond end of device
[  179.514666][ T7102] loop2: rw=524288, sector=138, nr_sectors = 112 limit=128
[  179.530324][ T7102] syz.2.2428: attempt to access beyond end of device
[  179.530324][ T7102] loop2: rw=0, sector=170, nr_sectors = 8 limit=128
[  179.543890][ T7102] syz.2.2428: attempt to access beyond end of device
[  179.543890][ T7102] loop2: rw=0, sector=170, nr_sectors = 8 limit=128
[  179.566418][ T7103] syz.2.2428: attempt to access beyond end of device
[  179.566418][ T7103] loop2: rw=0, sector=170, nr_sectors = 8 limit=128
[  179.580043][ T7103] syz.2.2428: attempt to access beyond end of device
[  179.580043][ T7103] loop2: rw=0, sector=170, nr_sectors = 8 limit=128
[  179.871675][ T7115] loop9: detected capacity change from 0 to 128
[  180.709587][  T287] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  180.733357][  T287] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  180.796544][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  180.796563][   T28] audit: type=1400 audit(1771528812.765:1102): avc:  denied  { mounton } for  pid=7154 comm="syz.5.2448" path="/338/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  180.845940][   T28] audit: type=1400 audit(1771528812.815:1103): avc:  denied  { unmount } for  pid=2904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  180.873435][ T7157] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96
[  180.957118][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2451'.
[  181.050882][ T7175] loop2: detected capacity change from 0 to 1024
[  181.072100][ T7175] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  181.090177][ T7175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  181.130866][ T7180] Source file dentry negative
[  181.136522][   T28] audit: type=1400 audit(1771528813.115:1104): avc:  denied  { mounton } for  pid=7174 comm="syz.2.2456" path="/22/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  181.145268][ T7175] Trying to write to read-only block-device loop2
[  181.208493][ T7175] Trying to write to read-only block-device loop2
[  181.215172][ T7175] Trying to write to read-only block-device loop2
[  181.221876][ T7175] Trying to write to read-only block-device loop2
[  181.228850][ T7175] Trying to write to read-only block-device loop2
[  181.235513][ T7175] Trying to write to read-only block-device loop2
[  181.242216][ T7175] Trying to write to read-only block-device loop2
[  181.248784][ T7175] Trying to write to read-only block-device loop2
[  181.256347][ T7175] Trying to write to read-only block-device loop2
[  181.256670][ T7186] loop5: detected capacity change from 0 to 128
[  181.263437][ T7175] Trying to write to read-only block-device loop2
[  181.285117][ T7186] EXT4-fs: Ignoring removed i_version option
[  181.305732][ T7186] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  181.315730][   T28] audit: type=1400 audit(1771528813.295:1105): avc:  denied  { unlink } for  pid=6968 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  181.338510][ T7186] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.352041][ T6968] EXT4-fs error (device loop2): mb_free_blocks:1826: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  181.373795][ T6968] EXT4-fs (loop2): Remounting filesystem read-only
[  181.382564][ T6968] EXT4-fs (loop2): unmounting filesystem.
[  181.498976][ T7205] EXT4-fs (loop9): 1 truncate cleaned up
[  181.504697][ T7205] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  181.518844][   T28] audit: type=1400 audit(1771528813.495:1106): avc:  denied  { rename } for  pid=7204 comm="syz.9.2469" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  181.552749][   T28] audit: type=1400 audit(1771528813.525:1107): avc:  denied  { ioctl } for  pid=7204 comm="syz.9.2469" path="/47/file1/file1" dev="loop9" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  181.577682][   T28] audit: type=1400 audit(1771528813.525:1108): avc:  denied  { map } for  pid=7204 comm="syz.9.2469" path="/47/file1/file1" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  181.655911][   T19] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  181.752910][  T287] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  181.771031][  T287] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  181.846119][   T19] usb 6-1: Using ep0 maxpacket: 16
[  181.852540][   T19] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.889790][   T19] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.910054][   T19] usb 6-1: config 0 interface 0 has no altsetting 0
[  181.930218][   T19] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  181.945705][   T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.973676][   T19] usb 6-1: config 0 descriptor??
[  182.335506][ T7062] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  182.387600][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.403587][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.416222][   T43] EXT4-fs (loop9): Delayed block allocation failed for inode 13 at logical offset 4 with max blocks 8 with error 28
[  182.429967][   T43] EXT4-fs (loop9): This should not happen!! Data will be lost
[  182.429967][   T43] 
[  182.432434][   T19] hid (null): report_id 41029 is invalid
[  182.441066][   T43] EXT4-fs (loop9): Total free blocks count 0
[  182.446689][   T19] hid (null): unknown global tag 0xe
[  182.452060][   T43] EXT4-fs (loop9): Free/Dirty block details
[  182.463763][   T43] EXT4-fs (loop9): free_blocks=0
[  182.465653][   T19] hid (null): unknown global tag 0xe
[  182.469315][   T43] EXT4-fs (loop9): dirty_blocks=8
[  182.474193][   T19] hid (null): unknown global tag 0x2b
[  182.479147][   T43] EXT4-fs (loop9): Block reservation details
[  182.479160][   T43] EXT4-fs (loop9): i_reserved_data_blocks=8
[  182.482646][ T6685] EXT4-fs (loop9): unmounting filesystem.
[  182.508472][   T19] hid (null): invalid report_count 297079340
[  182.514657][   T19] hid (null): unknown global tag 0xc
[  182.650667][   T19] usb 6-1: USB disconnect, device number 12
[  182.827698][ T7269] set_capacity_and_notify: 1 callbacks suppressed
[  182.827720][ T7269] loop9: detected capacity change from 0 to 40427
[  182.852736][ T7269] F2FS-fs (loop9): invalid crc value
[  182.869451][ T7269] F2FS-fs (loop9): Found nat_bits in checkpoint
[  182.914406][ T7269] F2FS-fs (loop9): Start checkpoint disabled!
[  182.921267][ T7269] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  182.929276][ T7269] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  182.955690][ T7269] F2FS-fs (loop9): ino:10, start:4096, end:12288, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  182.987823][ T7269] overlayfs: conflicting lowerdir path
[  183.000353][  T446] kworker/u4:5: attempt to access beyond end of device
[  183.000353][  T446] loop9: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  183.084815][ T7287] SELinux: failed to load policy
[  183.152677][ T7297] loop9: detected capacity change from 0 to 512
[  183.159923][ T7297] EXT4-fs: Ignoring removed i_version option
[  183.166011][ T7297] EXT4-fs: Ignoring removed bh option
[  183.184311][ T2904] EXT4-fs (loop5): unmounting filesystem.
[  183.207659][ T7297] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  183.217894][ T7297] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.250382][ T6685] EXT4-fs (loop9): unmounting filesystem.
[  183.265058][   T19] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  183.339688][   T28] audit: type=1400 audit(1771528815.316:1109): avc:  denied  { write } for  pid=7315 comm="syz.9.2515" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  183.465766][   T19] usb 3-1: Using ep0 maxpacket: 16
[  183.475963][   T19] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  183.490416][   T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.522563][   T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  183.547782][   T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.564226][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.572962][   T19] usb 3-1: Product: syz
[  183.580118][   T19] usb 3-1: Manufacturer: syz
[  183.584804][   T19] usb 3-1: SerialNumber: syz
[  183.904328][   T28] audit: type=1400 audit(1771528815.876:1110): avc:  denied  { create } for  pid=7371 comm="syz.5.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  183.954195][ T7376] xt_hashlimit: size too large, truncated to 1048576
[  184.001569][   T19] usb 3-1: 0:2 : does not exist
[  184.225649][   T28] audit: type=1400 audit(1771528816.207:1111): avc:  denied  { read } for  pid=7388 comm="syz.9.2544" path="socket:[53309]" dev="sockfs" ino=53309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  184.524741][ T7415] device pim6reg1 entered promiscuous mode
[  184.586839][ T7419] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2556'.
[  184.841699][ T7429] loop5: detected capacity change from 0 to 128
[  184.856311][ T7429] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  184.865284][ T7429] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.891353][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  184.896095][  T466] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  184.914784][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  184.923214][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  184.931645][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  184.941918][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  184.950268][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  184.958756][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  184.967222][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  184.975709][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  185.027851][ T7437] loop8: detected capacity change from 0 to 2048
[  185.029278][   T19] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  185.058014][ T7437] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  185.069427][   T19] usb 3-1: USB disconnect, device number 10
[  185.095270][  T466] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30
[  185.112954][  T466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.128554][  T466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.139537][  T466] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  185.162254][ T7437] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  185.168901][  T466] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  185.177493][ T7437] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1474 with error 28
[  185.198804][ T7437] EXT4-fs (loop8): This should not happen!! Data will be lost
[  185.198804][ T7437] 
[  185.208516][ T7437] EXT4-fs (loop8): Total free blocks count 0
[  185.214648][ T7437] EXT4-fs (loop8): Free/Dirty block details
[  185.216678][  T466] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.220619][ T7437] EXT4-fs (loop8): free_blocks=2415919504
[  185.234504][ T7437] EXT4-fs (loop8): dirty_blocks=1488
[  185.239847][ T7437] EXT4-fs (loop8): Block reservation details
[  185.247583][  T466] usb 10-1: config 0 descriptor??
[  185.252863][ T7437] EXT4-fs (loop8): i_reserved_data_blocks=93
[  185.298456][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  185.352496][ T6983] EXT4-fs (loop8): unmounting filesystem.
[  185.374885][ T7447] xt_hashlimit: size too large, truncated to 1048576
[  185.659145][  T466] wacom 0003:056A:0331.001D: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.9-1/input0
[  185.721281][ T2904] EXT4-fs (loop5): unmounting filesystem.
[  185.742618][ T7461] loop5: detected capacity change from 0 to 512
[  185.751900][ T7461] EXT4-fs: Ignoring removed i_version option
[  185.778134][ T7461] EXT4-fs: Ignoring removed bh option
[  185.793168][ T7466] loop2: detected capacity change from 0 to 256
[  185.804118][ T7466] /dev/loop2: Can't open blockdev
[  185.845254][ T7461] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  185.870975][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.872579][ T7461] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.889724][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.917037][ T2904] EXT4-fs (loop5): unmounting filesystem.
[  186.362296][ T7518] loop3: detected capacity change from 0 to 1024
[  186.379800][   T28] audit: type=1400 audit(1771528818.358:1112): avc:  denied  { create } for  pid=7519 comm="syz.5.2596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  186.393987][ T7518] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  186.425051][   T28] audit: type=1400 audit(1771528818.358:1113): avc:  denied  { connect } for  pid=7519 comm="syz.5.2596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  186.473489][ T7518] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  186.487394][   T28] audit: type=1400 audit(1771528818.358:1114): avc:  denied  { name_connect } for  pid=7519 comm="syz.5.2596" dest=20003 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  186.520038][ T7518] EXT4-fs error (device loop3): ext4_get_journal_inode:5719: inode #5: comm syz.3.2595: unexpected bad inode w/o EXT4_IGET_BAD
[  186.542314][ T7518] EXT4-fs (loop3): no journal found
[  186.547626][ T7518] EXT4-fs (loop3): can't get journal size
[  186.565600][ T7518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  186.569055][    T6] usb 10-1: USB disconnect, device number 3
[  186.609217][ T4536] EXT4-fs (loop3): unmounting filesystem.
[  186.931901][ T7554] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 1088)
[  186.965358][ T7554] SELinux: failed to load policy
[  187.116643][ T7546] loop3: detected capacity change from 0 to 40427
[  187.140978][ T7546] F2FS-fs (loop3): invalid crc value
[  187.157482][ T7546] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  187.194740][ T7546] F2FS-fs (loop3): Start checkpoint disabled!
[  187.201449][ T7546] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  187.209679][ T7570] loop9: detected capacity change from 0 to 512
[  187.217128][ T7546] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  187.261784][ T7570] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  187.281722][   T28] audit: type=1326 audit(1771528819.258:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.8.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4279bf79 code=0x7ffc0000
[  187.305163][ T7570] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.317138][   T28] audit: type=1326 audit(1771528819.258:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.8.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde4273d399 code=0x7ffc0000
[  187.327503][  T446] kworker/u4:5: attempt to access beyond end of device
[  187.327503][  T446] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.340691][   T28] audit: type=1326 audit(1771528819.258:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.8.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde4273d399 code=0x7ffc0000
[  187.378167][   T28] audit: type=1326 audit(1771528819.258:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.8.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde4273d399 code=0x7ffc0000
[  187.401603][   T28] audit: type=1326 audit(1771528819.258:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.8.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde4273d399 code=0x7ffc0000
[  187.432944][   T28] audit: type=1326 audit(1771528819.258:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.8.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde4273d399 code=0x7ffc0000
[  187.486894][   T28] audit: type=1326 audit(1771528819.258:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.8.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde4273d399 code=0x7ffc0000
[  187.498226][ T6685] EXT4-fs (loop9): unmounting filesystem.
[  188.051486][ T7620] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2635'.
[  188.347716][ T7628] loop5: detected capacity change from 0 to 40427
[  188.354302][    T6] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  188.382974][ T7628] F2FS-fs (loop5): invalid crc value
[  188.397162][ T7628] F2FS-fs (loop5): Found nat_bits in checkpoint
[  188.411973][ T7626] loop2: detected capacity change from 0 to 40427
[  188.529792][ T7633] binder: 7632:7633 ioctl c0306201 200000000540 returned -14
[  188.541043][ T7628] F2FS-fs (loop5): Start checkpoint disabled!
[  188.542624][ T7636] binder: 7632:7636 unknown command 0
[  188.553110][ T7628] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  188.562641][    T6] usb 4-1: Using ep0 maxpacket: 32
[  188.568299][ T7636] binder: 7632:7636 ioctl c0306201 200000000640 returned -22
[  188.569973][    T6] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  188.585510][ T7635] loop9: detected capacity change from 0 to 8192
[  188.602501][ T7628] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  188.647440][    T6] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  188.683801][    T6] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  188.719220][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.758450][    T8] kworker/u4:0: attempt to access beyond end of device
[  188.758450][    T8] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  188.772742][    T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  188.792307][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[  188.819158][ T7647] Invalid argument reading file caps for ./file0
[  188.832239][    T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  188.854686][    T6] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  188.891988][    T6] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  188.906355][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.915702][    T6] usb 4-1: config 0 descriptor??
[  188.921078][ T7622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  189.067761][ T7661] loop2: detected capacity change from 0 to 1024
[  189.093046][ T7661] /dev/loop2: Can't open blockdev
[  189.163661][    T6] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  189.292221][  T294] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  189.349564][ T7682] loop2: detected capacity change from 0 to 256
[  189.365491][    C0] usblp0: nonzero read bulk status received: -71
[  189.367242][ T7682] /dev/loop2: Can't open blockdev
[  189.382833][    T6] usb 4-1: USB disconnect, device number 16
[  189.408477][    T6] usblp0: removed
[  189.483029][  T294] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  189.501996][  T294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.512075][  T466] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  189.513840][  T294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.543816][  T294] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  189.567133][  T294] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.05
[  189.586182][  T294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.605538][  T294] usb 6-1: config 0 descriptor??
[  189.713006][  T466] usb 9-1: config 0 has no interfaces?
[  189.720646][  T466] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  189.734992][  T466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.753722][  T466] usb 9-1: Product: syz
[  189.760195][  T466] usb 9-1: Manufacturer: syz
[  189.768140][  T466] usb 9-1: SerialNumber: syz
[  189.781802][  T466] usb 9-1: config 0 descriptor??
[  189.904686][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  189.989637][    T6] usb 9-1: USB disconnect, device number 9
[  190.014172][  T294] holtek_kbd 0003:04D9:A055.001E: unknown main item tag 0x0
[  190.022579][  T294] holtek_kbd 0003:04D9:A055.001E: unknown main item tag 0x0
[  190.030009][  T294] holtek_kbd 0003:04D9:A055.001E: unknown main item tag 0x0
[  190.038219][  T294] holtek_kbd 0003:04D9:A055.001E: unknown main item tag 0x0
[  190.045804][  T294] holtek_kbd 0003:04D9:A055.001E: unknown main item tag 0x0
[  190.053491][  T294] holtek_kbd 0003:04D9:A055.001E: unknown main item tag 0x0
[  190.060908][  T294] holtek_kbd 0003:04D9:A055.001E: unknown main item tag 0x0
[  190.069362][  T294] holtek_kbd 0003:04D9:A055.001E: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.5-1/input0
[  190.141714][  T287] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  190.225139][  T466] usb 6-1: USB disconnect, device number 13
[  190.323263][  T287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.334312][  T287] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  190.343537][  T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.352330][  T287] usb 3-1: config 0 descriptor??
[  190.562806][  T287] usbhid 3-1:0.0: can't add hid device: -71
[  190.568919][  T287] usbhid: probe of 3-1:0.0 failed with error -71
[  190.578268][  T287] usb 3-1: USB disconnect, device number 11
[  190.655772][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2674'.
[  190.666275][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2674'.
[  191.051165][ T4232] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  191.131119][  T287] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  191.242668][ T4232] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  191.254260][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.265880][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.276339][ T4232] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  191.291980][ T4232] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  191.302138][ T4232] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  191.310286][ T4232] usb 6-1: Manufacturer: syz
[  191.315039][  T287] usb 3-1: Using ep0 maxpacket: 32
[  191.331036][  T287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.345701][ T4232] usb 6-1: config 0 descriptor??
[  191.350784][  T287] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  191.361023][  T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.381760][  T287] usb 3-1: config 0 descriptor??
[  191.680842][    T6] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  191.764783][ T4232] appleir 0003:05AC:8243.001F: unknown main item tag 0x0
[  191.772094][ T4232] appleir 0003:05AC:8243.001F: No inputs registered, leaving
[  191.781066][ T4232] appleir 0003:05AC:8243.001F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  191.794409][ T4232] usb 3-1: USB disconnect, device number 12
[  191.862012][    T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.872466][    T6] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.883034][    T6] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.892265][    T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.900425][    T6] usb 10-1: Product: syz
[  191.904718][    T6] usb 10-1: Manufacturer: syz
[  191.909413][    T6] usb 10-1: SerialNumber: syz
[  191.920746][ T1106] Bluetooth: hci0: command 0x1003 tx timeout
[  191.920744][ T5285] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  192.292855][ T7784] KVM: debugfs: duplicate directory 7784-4
[  192.468917][    T6] usb 10-1: cannot find UAC_HEADER
[  192.474371][ T7795] loop2: detected capacity change from 0 to 2048
[  192.483241][    T6] snd-usb-audio: probe of 10-1:1.0 failed with error -22
[  192.499617][ T7795] /dev/loop2: Can't open blockdev
[  192.507057][    T6] usb 10-1: USB disconnect, device number 4
[  192.517602][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  192.874031][ T7815] loop8: detected capacity change from 0 to 512
[  192.899847][ T7815] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2708: inode has both inline data and extents flags
[  192.925875][ T7815] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2708: couldn't read orphan inode 15 (err -117)
[  192.969928][ T7815] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  192.990219][  T294] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  193.076877][ T6983] EXT4-fs (loop8): unmounting filesystem.
[  193.181230][  T294] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  193.193060][  T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.210877][  T294] usb 4-1: config 0 descriptor??
[  193.395350][ T7838] loop8: detected capacity change from 0 to 2048
[  193.437498][ T7838] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  193.545765][ T7838] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2718: bg 0: block 234: padding at end of block bitmap is not set
[  193.560618][ T7838] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1592 with error 28
[  193.573352][ T7838] EXT4-fs (loop8): This should not happen!! Data will be lost
[  193.573352][ T7838] 
[  193.583131][ T7838] EXT4-fs (loop8): Total free blocks count 0
[  193.589281][ T7838] EXT4-fs (loop8): Free/Dirty block details
[  193.595323][ T7838] EXT4-fs (loop8): free_blocks=0
[  193.600659][ T7838] EXT4-fs (loop8): dirty_blocks=1600
[  193.607078][ T7838] EXT4-fs (loop8): Block reservation details
[  193.620843][ T7838] EXT4-fs (loop8): i_reserved_data_blocks=100
[  193.632453][  T294] pantherlord 0003:0F30:0111.0020: hidraw1: USB HID v0.02 Device [HID 0f30:0111] on usb-dummy_hcd.3-1/input0
[  193.650710][  T294] pantherlord 0003:0F30:0111.0020: no output reports found
[  193.837033][  T294] usb 4-1: USB disconnect, device number 17
[  193.843249][ T6983] EXT4-fs (loop8): unmounting filesystem.
[  193.910488][  T287] usb 6-1: USB disconnect, device number 14
[  194.063166][ T7882] loop5: detected capacity change from 0 to 2048
[  194.125237][ T7882] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  194.205297][ T7901] device batadv_slave_1 entered promiscuous mode
[  194.212762][ T7901] device batadv_slave_1 left promiscuous mode
[  194.223238][ T7882] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2735: bg 0: block 234: padding at end of block bitmap is not set
[  194.239308][ T7882] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  194.254302][   T28] kauditd_printk_skb: 2059 callbacks suppressed
[  194.254319][   T28] audit: type=1404 audit(1771528826.242:3181): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  194.259386][ T7882] EXT4-fs (loop5): This should not happen!! Data will be lost
[  194.259386][ T7882] 
[  194.286474][   T28] audit: type=1400 audit(1771528826.262:3182): avc:  denied  { bind } for  pid=7903 comm="syz.8.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  194.286696][ T7882] EXT4-fs (loop5): Total free blocks count 0
[  194.322463][   T28] audit: type=1400 audit(1771528826.292:3183): avc:  denied  { read write } for  pid=6968 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  194.327437][ T7882] EXT4-fs (loop5): Free/Dirty block details
[  194.353691][ T7882] EXT4-fs (loop5): free_blocks=0
[  194.374972][ T7882] EXT4-fs (loop5): dirty_blocks=2160
[  194.382673][   T28] audit: type=1400 audit(1771528826.302:3184): avc:  denied  { read write } for  pid=6983 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  194.391635][ T7882] EXT4-fs (loop5): Block reservation details
[  194.422496][ T7882] EXT4-fs (loop5): i_reserved_data_blocks=135
[  194.449450][   T28] audit: type=1400 audit(1771528826.302:3185): avc:  denied  { write } for  pid=7881 comm="syz.5.2735" name="hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=0
[  194.489442][   T28] audit: type=1400 audit(1771528826.342:3186): avc:  denied  { create } for  pid=7905 comm="syz.2.2745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=0
[  194.529159][   T28] audit: type=1400 audit(1771528826.342:3187): avc:  denied  { read write } for  pid=7905 comm="syz.2.2745" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  194.531356][ T7902] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 100 with error 28
[  194.596084][   T28] audit: type=1400 audit(1771528826.342:3188): avc:  denied  { read write } for  pid=7905 comm="syz.2.2745" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  194.644572][   T28] audit: type=1400 audit(1771528826.342:3189): avc:  denied  { remount } for  pid=7905 comm="syz.2.2745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0
[  194.689816][   T28] audit: type=1400 audit(1771528826.352:3190): avc:  denied  { read write } for  pid=4536 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  194.743040][ T2904] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /393/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  200.006530][   T28] kauditd_printk_skb: 157 callbacks suppressed
[  200.006548][   T28] audit: type=1400 audit(1771528831.984:3348): avc:  denied  { read write } for  pid=6968 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  200.169530][   T28] audit: type=1400 audit(1771528832.155:3349): avc:  denied  { bpf } for  pid=8016 comm="syz.9.2796" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  200.198596][   T28] audit: type=1400 audit(1771528832.155:3350): avc:  denied  { read write } for  pid=8015 comm="syz.8.2794" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  200.230118][   T28] audit: type=1400 audit(1771528832.175:3351): avc:  denied  { read write } for  pid=8016 comm="syz.9.2796" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  200.255146][   T28] audit: type=1400 audit(1771528832.175:3352): avc:  denied  { execmem } for  pid=8014 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  200.274675][   T28] audit: type=1400 audit(1771528832.205:3353): avc:  denied  { read write } for  pid=4536 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  200.298984][   T28] audit: type=1400 audit(1771528832.215:3354): avc:  denied  { bpf } for  pid=8021 comm="syz.2.2793" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  200.319778][   T28] audit: type=1400 audit(1771528832.215:3355): avc:  denied  { map_create } for  pid=8021 comm="syz.2.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  200.338965][   T28] audit: type=1400 audit(1771528832.215:3356): avc:  denied  { bpf } for  pid=8021 comm="syz.2.2793" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  200.359558][   T28] audit: type=1400 audit(1771528832.215:3357): avc:  denied  { read write } for  pid=6685 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  205.267951][   T28] kauditd_printk_skb: 39 callbacks suppressed
[  205.267969][   T28] audit: type=1400 audit(1771528837.257:3397): avc:  denied  { create } for  pid=8054 comm="syz.3.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  205.324137][   T28] audit: type=1400 audit(1771528837.257:3398): avc:  denied  { read } for  pid=8053 comm="syz.2.2809" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  205.347514][   T28] audit: type=1400 audit(1771528837.287:3399): avc:  denied  { read } for  pid=8058 comm="syz.8.2810" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  205.370339][   T28] audit: type=1400 audit(1771528837.287:3400): avc:  denied  { execmem } for  pid=8052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  205.389834][   T28] audit: type=1400 audit(1771528837.287:3401): avc:  denied  { bpf } for  pid=8054 comm="syz.3.2811" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  205.410493][   T28] audit: type=1400 audit(1771528837.287:3402): avc:  denied  { prog_load } for  pid=8054 comm="syz.3.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  205.429566][   T28] audit: type=1400 audit(1771528837.287:3403): avc:  denied  { bpf } for  pid=8054 comm="syz.3.2811" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  205.450315][   T28] audit: type=1400 audit(1771528837.297:3404): avc:  denied  { read write } for  pid=4536 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  205.474677][   T28] audit: type=1400 audit(1771528837.297:3405): avc:  denied  { read write } for  pid=6983 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  205.499067][   T28] audit: type=1400 audit(1771528837.307:3406): avc:  denied  { create } for  pid=8061 comm="syz.3.2813" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0
[  210.156372][ T8085] netlink: 'syz.2.2822': attribute type 7 has an invalid length.
[  210.164353][ T8085] netlink: 'syz.2.2822': attribute type 8 has an invalid length.
[  211.959861][   T28] kauditd_printk_skb: 57 callbacks suppressed
[  211.959878][   T28] audit: type=1400 audit(1771528843.950:3464): avc:  denied  { execmem } for  pid=8092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  212.010902][   T28] audit: type=1400 audit(1771528843.970:3465): avc:  denied  { read append } for  pid=8097 comm="syz.3.2828" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  212.048223][   T28] audit: type=1400 audit(1771528843.970:3466): avc:  denied  { read } for  pid=8098 comm="syz.8.2827" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  212.070978][   T28] audit: type=1400 audit(1771528843.980:3467): avc:  denied  { mount } for  pid=8093 comm="syz.2.2826" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=0
[  212.092918][   T28] audit: type=1400 audit(1771528843.980:3468): avc:  denied  { read write } for  pid=4536 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  212.117207][   T28] audit: type=1400 audit(1771528844.030:3469): avc:  denied  { read write } for  pid=6968 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  212.141726][   T28] audit: type=1400 audit(1771528844.030:3470): avc:  denied  { read write } for  pid=6983 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  212.218157][   T28] audit: type=1400 audit(1771528844.201:3471): avc:  denied  { read write } for  pid=6685 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  213.904693][   T28] audit: type=1400 audit(1771528845.891:3472): avc:  denied  { create } for  pid=8105 comm="syz.2.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0
[  213.925117][   T28] audit: type=1400 audit(1771528845.891:3473): avc:  denied  { read write } for  pid=8104 comm="syz.9.2833" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0
[  216.679114][   T10] device bridge_slave_1 left promiscuous mode
[  216.685242][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.692821][   T10] device bridge_slave_0 left promiscuous mode
[  216.699058][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.707064][   T10] device veth1_macvtap left promiscuous mode
[  216.713199][   T10] device veth0_vlan left promiscuous mode
[  217.528925][   T10] device bridge_slave_1 left promiscuous mode
[  217.535047][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.542622][   T10] device bridge_slave_0 left promiscuous mode
[  217.548839][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.556800][   T10] device bridge_slave_1 left promiscuous mode
[  217.563223][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.570818][   T10] device bridge_slave_0 left promiscuous mode
[  217.576929][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.585220][   T10] device veth1_macvtap left promiscuous mode
[  217.591452][   T10] device veth0_vlan left promiscuous mode
[  217.597547][   T10] device veth1_macvtap left promiscuous mode
[  217.603653][   T10] device veth0_vlan left promiscuous mode