last executing test programs:

32.454854846s ago: executing program 4 (id=335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000200000002000000010000000000000078913b0a000010009188"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32.312406948s ago: executing program 4 (id=336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000014000380100003800c00018008000100000000f0180001801400020069705f76746930"], 0x40}}, 0x0)

32.269369841s ago: executing program 4 (id=337):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

32.176515629s ago: executing program 4 (id=340):
fremovexattr(0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51f, &(0x7f0000000700)="$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")
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)

32.049667489s ago: executing program 4 (id=346):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
setuid(0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)

31.481539174s ago: executing program 4 (id=361):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18)
io_uring_setup(0x7ac9, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r1})

31.40480368s ago: executing program 32 (id=361):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18)
io_uring_setup(0x7ac9, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r1})

29.630978703s ago: executing program 3 (id=410):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0xc}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

29.595131286s ago: executing program 3 (id=411):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000240)={0x0})
madvise(&(0x7f000008f000/0x4000)=nil, 0x4000, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

29.312886669s ago: executing program 3 (id=413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38)

29.254622813s ago: executing program 3 (id=416):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)

28.966919716s ago: executing program 3 (id=424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
pivot_root(0x0, 0x0)

28.836421926s ago: executing program 3 (id=429):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee6889900", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

28.827028967s ago: executing program 33 (id=429):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee6889900", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

23.138295133s ago: executing program 6 (id=555):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)={0x20, 0x17, 0x1, "0e"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

20.927959151s ago: executing program 6 (id=596):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6)
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)

20.861463246s ago: executing program 6 (id=597):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x100000, 0xeeef0000, 0x3, 0xa9, 0x3, 0xd2, 0x81, 0x4, 0x0, 0x2b, 0x9}, {0x4000, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x2b, 0x3, 0x6}, {0x3000, 0x1, 0x8, 0x5, 0x1, 0x1, 0x40, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0x80a0000, 0x100000, 0xd, 0xe7, 0x3, 0x2, 0x1, 0xf8, 0x8, 0x7, 0xe, 0x8f}, {0xdddd0000, 0x2000, 0x8, 0x43, 0x5, 0x6, 0xa, 0x7f, 0x1, 0x0, 0xf7, 0x3}, {0x1000, 0x80a0000, 0x3, 0x80, 0xb0, 0x8, 0x1, 0x80, 0x80, 0xf, 0x1, 0x8}, {0xeeee8000, 0xeeee8000, 0xc, 0x5, 0x93, 0x5, 0x1, 0x3, 0x5, 0x81, 0x3, 0x4}, {0x100000, 0x1, 0x0, 0x5, 0x5, 0x7, 0x1, 0x37, 0x2, 0x8, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0xeeee0000, 0x2004, 0xa, 0x0, 0x2000, [0x8000000000000000, 0x5, 0x15e, 0x3]})

20.745186745s ago: executing program 6 (id=598):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc000, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)

20.397443883s ago: executing program 6 (id=599):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff)
sendfile(r0, r1, 0x0, 0x110003)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0xf36, 0x8, "f494bfeba3160200160000000000006d004000"})

20.008413064s ago: executing program 6 (id=605):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

19.93912333s ago: executing program 34 (id=605):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

18.69790125s ago: executing program 1 (id=638):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10)
setuid(0xee01)

18.550698031s ago: executing program 1 (id=641):
mkdir(&(0x7f00000009c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

18.466602858s ago: executing program 1 (id=643):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000003c0)="25c6", 0x2, 0x2400c0c1, 0x0, 0x0)

18.428737701s ago: executing program 1 (id=644):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc000, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)

17.854179757s ago: executing program 1 (id=666):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x406, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x60000006})
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)

17.502881655s ago: executing program 1 (id=667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x18)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0)

17.459120329s ago: executing program 35 (id=667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x18)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0)

2.202093402s ago: executing program 0 (id=992):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000069003c000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r0], 0x0)

2.123737589s ago: executing program 8 (id=996):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x8, 0x0)
ptrace$setsig(0x4203, r0, 0x7, &(0x7f0000000300)={0x21, 0x7, 0x7})

2.097654241s ago: executing program 8 (id=997):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[], 0x0)

2.083465432s ago: executing program 8 (id=998):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @void}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5)

2.068504974s ago: executing program 8 (id=999):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r0}, 0x38)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2.027668947s ago: executing program 8 (id=1000):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

1.554219345s ago: executing program 8 (id=1013):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xa, 0x2070, 0x1000, 0x9, 0x5, 0x8000, 0x0, 0x8, 0x7, 0xfffc, 0x8000, 0xf}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.375558719s ago: executing program 2 (id=1020):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="1d1a", 0x2}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8)

1.353425951s ago: executing program 2 (id=1021):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe)

1.337406242s ago: executing program 2 (id=1022):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r1}, 0x10)
socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0))

1.322865384s ago: executing program 2 (id=1023):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0)
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)

1.301202835s ago: executing program 2 (id=1025):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e01000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.280624107s ago: executing program 2 (id=1026):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

1.001612169s ago: executing program 5 (id=1033):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

985.526401ms ago: executing program 5 (id=1034):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x200400c1)

969.018942ms ago: executing program 5 (id=1035):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000500)={0x1c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0)

953.454243ms ago: executing program 5 (id=1036):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace(0x11, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]})

882.826859ms ago: executing program 0 (id=1039):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10)
mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
umount2(&(0x7f0000000680)='./file0\x00', 0x9)

840.346513ms ago: executing program 0 (id=1040):
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

797.348826ms ago: executing program 0 (id=1041):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
r2 = inotify_init()
r3 = inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x25000001)
inotify_rm_watch(r2, r3)

768.665188ms ago: executing program 0 (id=1042):
r0 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

734.301691ms ago: executing program 0 (id=1043):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000096231306e53c070900be0083000000002bc83de8319205"], 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)

638.586509ms ago: executing program 7 (id=1045):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000001280)="$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")
r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

486.138971ms ago: executing program 7 (id=1046):
r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
setrlimit(0x7, &(0x7f0000000400))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

464.915753ms ago: executing program 7 (id=1047):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x4, 0x3)

443.019645ms ago: executing program 7 (id=1048):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50)

416.140297ms ago: executing program 7 (id=1049):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf251c000000180001801400020065727370616e30"], 0x2c}}, 0x4000000)

386.294519ms ago: executing program 7 (id=1050):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000069003c000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r0], 0x0)

367.333101ms ago: executing program 5 (id=1051):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000005c0), 0x1, 0x50c, &(0x7f0000001000)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=1052):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000880)="4a8e"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, &(0x7f0000000740)="38ee"})

kernel console output (not intermixed with test programs):

id=0, s_resgid=60929 w/o reserve_root
[   32.551382][  T618] F2FS-fs (loop0): Found nat_bits in checkpoint
[   32.584225][  T635] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ£—
[   32.598755][  T618] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   32.606020][  T618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   32.643334][  T638] device bridge0 entered promiscuous mode
[   32.653799][  T638] device macsec0 entered promiscuous mode
[   32.665986][  T638] bridge0: port 3(macsec0) entered blocking state
[   32.673540][  T638] bridge0: port 3(macsec0) entered disabled state
[   32.680606][  T288] syz-executor: attempt to access beyond end of device
[   32.680606][  T288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   32.702378][  T638] device bridge0 left promiscuous mode
[   32.883010][   T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   32.894430][   T39] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   32.904604][  T651] loop3: detected capacity change from 0 to 1024
[   32.927456][  T649] loop0: detected capacity change from 0 to 2048
[   32.940206][  T372] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   32.958513][  T649] EXT4-fs: Ignoring removed bh option
[   32.969676][  T652] fido_id[652]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   33.008795][  T654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   33.021862][  T649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   33.031695][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   33.052799][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.061999][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   33.070837][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.079513][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.080059][  T649] SELinux:  Context : is not valid (left unmapped).
[   33.088117][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.103031][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.111515][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.127444][  T649] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   33.160603][  T288] EXT4-fs (loop0): unmounting filesystem.
[   33.384908][  T695] Illegal XDP return value 4294967294 on prog  (id 94) dev N/A, expect packet loss!
[   33.424226][  T699] tipc: Started in network mode
[   33.429613][  T699] tipc: Node identity ac1414bb, cluster identity 4711
[   33.436833][  T699] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   33.600331][  T724] loop4: detected capacity change from 0 to 1024
[   33.608528][  T725] serio: Serial port ttyS3
[   33.620550][  T724] EXT4-fs: Ignoring removed bh option
[   33.627976][  T724] EXT4-fs: Ignoring removed nobh option
[   33.637010][    T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   33.641091][  T724] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   33.679161][  T724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   33.718641][  T283] EXT4-fs (loop4): unmounting filesystem.
[   33.827833][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.847312][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.873261][    T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   33.901694][    T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   33.921147][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.937461][    T6] usb 4-1: config 0 descriptor??
[   33.955602][  T739] loop1: detected capacity change from 0 to 40427
[   33.974424][  T739] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   33.990918][  T739] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   34.022185][  T739] F2FS-fs (loop1): fault_injection options not supported
[   34.047095][  T739] F2FS-fs (loop1): invalid crc value
[   34.067374][  T739] F2FS-fs (loop1): Found nat_bits in checkpoint
[   34.158032][  T739] F2FS-fs (loop1): Start checkpoint disabled!
[   34.185142][  T739] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   34.194952][  T739] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   34.247571][  T751] loop0: detected capacity change from 0 to 40427
[   34.263120][  T738] syz.1.165: attempt to access beyond end of device
[   34.263120][  T738] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[   34.280085][  T751] F2FS-fs (loop0): invalid crc value
[   34.286146][  T739] syz.1.165: attempt to access beyond end of device
[   34.286146][  T739] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   34.301234][  T751] F2FS-fs (loop0): Found nat_bits in checkpoint
[   34.346278][  T334] kworker/u4:3: attempt to access beyond end of device
[   34.346278][  T334] loop1: rw=1, sector=53248, nr_sectors = 8 limit=40427
[   34.363184][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.367895][  T751] F2FS-fs (loop0): Start checkpoint disabled!
[   34.376388][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.386599][  T751] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   34.394427][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.415082][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.433558][  T334] kworker/u4:3: attempt to access beyond end of device
[   34.433558][  T334] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   34.448346][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.455864][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.493921][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.504012][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.526424][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.533894][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.560255][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.578203][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.587897][  T758] loop2: detected capacity change from 0 to 40427
[   34.594979][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.608197][  T758] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512)
[   34.617161][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.625398][    T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   34.633825][  T758] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   34.656481][    T6] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   34.668186][  T758] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root
[   34.679112][    T6] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   34.694091][    T6] usb 4-1: USB disconnect, device number 2
[   34.716034][  T764] loop1: detected capacity change from 0 to 256
[   34.724788][  T758] F2FS-fs (loop2): Found nat_bits in checkpoint
[   34.746595][  T764] FAT-fs (loop1): bogus number of FAT sectors
[   34.753305][  T764] FAT-fs (loop1): Can't find a valid FAT filesystem
[   34.800519][  T768] fido_id[768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   34.828029][  T758] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   34.835573][  T758] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   34.847599][    T8] kworker/u4:0: attempt to access beyond end of device
[   34.847599][    T8] loop0: rw=1, sector=77824, nr_sectors = 2096 limit=40427
[   34.868310][    T8] kworker/u4:0: attempt to access beyond end of device
[   34.868310][    T8] loop0: rw=1, sector=79920, nr_sectors = 2000 limit=40427
[   34.912423][    T8] kworker/u4:0: attempt to access beyond end of device
[   34.912423][    T8] loop0: rw=1, sector=49152, nr_sectors = 1504 limit=40427
[   34.937459][    T8] kworker/u4:0: attempt to access beyond end of device
[   34.937459][    T8] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   35.436516][    T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   35.506439][  T201] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   35.646449][    T6] usb 4-1: Using ep0 maxpacket: 16
[   35.652715][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.664751][    T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   35.687902][    T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   35.705625][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.713825][  T201] usb 3-1: Using ep0 maxpacket: 32
[   35.722114][  T201] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   35.731832][    T6] usb 4-1: Product: syz
[   35.736047][    T6] usb 4-1: Manufacturer: syz
[   35.745017][  T201] usb 3-1: config 0 has no interface number 0
[   35.752171][    T6] usb 4-1: SerialNumber: syz
[   35.761202][  T201] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   35.779158][  T201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.793267][  T201] usb 3-1: Product: syz
[   35.802096][  T201] usb 3-1: Manufacturer: syz
[   35.811168][  T201] usb 3-1: SerialNumber: syz
[   35.821827][  T201] usb 3-1: config 0 descriptor??
[   35.836762][  T201] smsc95xx v2.0.0
[   35.976390][    T6] usb 4-1: 0:2 : does not exist
[   35.993142][    T6] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   36.008978][   T28] kauditd_printk_skb: 37 callbacks suppressed
[   36.008993][   T28] audit: type=1400 audit(1754518961.440:214): avc:  denied  { load_policy } for  pid=809 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   36.037838][  T810] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   36.045799][  T810] SELinux: failed to load policy
[   36.056573][    T6] usb 4-1: USB disconnect, device number 3
[   36.238333][  T201] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   36.238524][  T805] loop4: detected capacity change from 0 to 131072
[   36.257933][  T805] F2FS-fs (loop4): invalid crc value
[   36.267334][  T805] F2FS-fs (loop4): Found nat_bits in checkpoint
[   36.267997][  T201] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   36.284046][  T201] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   36.299401][  T201] smsc95xx: probe of 3-1:0.67 failed with error -71
[   36.310620][  T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   36.326733][  T805] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   36.357017][  T201] usb 3-1: USB disconnect, device number 2
[   36.416849][  T351] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   36.555122][  T824] loop0: detected capacity change from 0 to 512
[   36.565617][  T824] EXT4-fs: Ignoring removed orlov option
[   36.601628][   T28] audit: type=1400 audit(1754518962.030:215): avc:  denied  { ioctl } for  pid=828 comm="syz.4.195" path="socket:[18556]" dev="sockfs" ino=18556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   36.627931][   T28] audit: type=1400 audit(1754518962.030:216): avc:  denied  { bind } for  pid=828 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   36.656056][  T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.669391][  T824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   36.672670][   T28] audit: type=1400 audit(1754518962.100:217): avc:  denied  { append } for  pid=833 comm="syz.4.200" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   36.701557][  T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.701801][  T824] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.722154][  T351] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   36.722185][  T351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.725511][  T351] usb 2-1: config 0 descriptor??
[   36.751401][  T827] syz.3.199 (827) used greatest stack depth: 20064 bytes left
[   36.797434][   T28] audit: type=1400 audit(1754518962.230:218): avc:  denied  { create } for  pid=837 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   36.846075][   T28] audit: type=1400 audit(1754518962.250:219): avc:  denied  { setopt } for  pid=837 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   36.899175][  T288] EXT4-fs (loop0): unmounting filesystem.
[   37.089764][  T858] loop3: detected capacity change from 0 to 256
[   37.116418][  T813] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   37.124564][  T858] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   37.142362][  T858] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   37.153483][  T858] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[   37.187460][   T28] audit: type=1400 audit(1754518962.620:220): avc:  denied  { read append open } for  pid=857 comm="syz.3.209" path="/36/file0/cpu.stat" dev="loop3" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.223314][  T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   37.228553][   T28] audit: type=1400 audit(1754518962.620:221): avc:  denied  { map } for  pid=857 comm="syz.3.209" path="/36/file0/cpu.stat" dev="loop3" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.254708][  T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   37.262184][  T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   37.269004][   T28] audit: type=1400 audit(1754518962.620:222): avc:  denied  { getopt } for  pid=857 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.269037][   T28] audit: type=1400 audit(1754518962.700:223): avc:  denied  { mounton } for  pid=871 comm="syz.0.216" path="/proc/98/task" dev="proc" ino=18604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   37.320138][  T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   37.327854][  T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   37.335014][  T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   37.343214][  T813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   37.358671][  T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[   37.366633][  T813] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[   37.381641][  T875] 9pnet: p9_errstr2errno: server reported unknown error �@íÎhQ$I¸ñº6‚}hñEÒŒ¸i)
[   37.392863][  T351] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[   37.414508][  T813] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   37.434422][  T813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.443975][  T813] usb 3-1: config 0 descriptor??
[   37.450639][  T842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   37.643462][  T351] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device
[   37.660439][  T351] pyra 0003:1E7D:2CF6.0003: couldn't install mouse
[   37.669629][  T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.679633][  T351] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71
[   37.687423][  T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.706671][  T351] usb 2-1: USB disconnect, device number 2
[   37.714047][  T910] process 'syz.3.233' launched './file0' with NULL argv: empty string added
[   37.726845][  T813] usbhid 3-1:0.0: can't add hid device: -71
[   37.732946][  T813] usbhid: probe of 3-1:0.0 failed with error -71
[   37.747126][  T813] usb 3-1: USB disconnect, device number 3
[   37.813714][  T913] fido_id[913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   37.990406][  T927] loop0: detected capacity change from 0 to 512
[   38.009930][  T927] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.240: casefold flag without casefold feature
[   38.029927][  T927] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.240: couldn't read orphan inode 15 (err -117)
[   38.042252][  T927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   38.151837][  T288] EXT4-fs (loop0): unmounting filesystem.
[   38.212058][  T947] netem: incorrect ge model size
[   38.220808][  T947] netem: change failed
[   38.238027][  T951] loop0: detected capacity change from 0 to 512
[   38.254377][  T951] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   38.280573][  T951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002]
[   38.292347][  T951] System zones: 1-12
[   38.302401][  T951] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.251: corrupted in-inode xattr
[   38.314932][  T951] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.251: couldn't read orphan inode 15 (err -117)
[   38.328364][  T951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   38.337553][  T813] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   38.357420][  T288] EXT4-fs (loop0): unmounting filesystem.
[   38.512434][  T973] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.519823][  T973] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.556482][  T813] usb 3-1: Using ep0 maxpacket: 32
[   38.563022][  T813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11
[   38.583261][  T813] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[   38.596887][  T813] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   38.606113][  T813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.616216][  T813] usb 3-1: config 0 descriptor??
[   38.623546][  T813] hub 3-1:0.0: bad descriptor, ignoring hub
[   38.629895][  T813] hub: probe of 3-1:0.0 failed with error -5
[   38.678883][  T984] capability: warning: `syz.1.266' uses 32-bit capabilities (legacy support in use)
[   38.898141][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.905626][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.025680][  T813] hid-multitouch 0003:0EEF:72C4.0004: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0
[   39.090981][ T1030] loop0: detected capacity change from 0 to 1024
[   39.173822][ T1030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   39.194045][ T1030] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.213134][ T1030] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 13)
[   39.235938][ T1030] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   39.248676][ T1030] EXT4-fs (loop0): This should not happen!! Data will be lost
[   39.248676][ T1030] 
[   39.262456][ T1030] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.277278][ T1030] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.295998][ T1030] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.311597][ T1051] loop4: detected capacity change from 0 to 512
[   39.319483][ T1030] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.344666][ T1051] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   39.378646][   T39] usb 3-1: USB disconnect, device number 4
[   39.389476][ T1030] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.411436][ T1030] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.432020][ T1053] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.456417][  T813] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   39.465441][ T1030] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.485744][ T1053] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.288: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.637503][  T813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.659445][  T813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.670208][  T813] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   39.671868][ T1062] loop4: detected capacity change from 0 to 40427
[   39.679625][  T813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.695665][  T813] usb 2-1: config 0 descriptor??
[   39.706442][ T1062] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   39.714374][ T1062] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   39.761821][ T1062] F2FS-fs (loop4): Found nat_bits in checkpoint
[   39.865421][ T1062] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   39.875292][ T1062] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   40.044940][ T1080] loop3: detected capacity change from 0 to 2048
[   40.082523][ T1080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   40.100419][ T1080] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.117834][  T813] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   40.125403][  T813] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   40.133216][  T813] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   40.140788][  T813] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   40.148124][  T813] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0
[   40.156840][ T1080] EXT4-fs (loop3): shut down requested (0)
[   40.165906][  T813] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[   40.184057][  T290] EXT4-fs (loop3): unmounting filesystem.
[   40.318698][  T813] usb 2-1: USB disconnect, device number 3
[   40.332371][ T1090] loop4: detected capacity change from 0 to 2048
[   40.345586][ T1087] fido_id[1087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   40.395912][ T1090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   40.407022][ T1097] loop3: detected capacity change from 0 to 512
[   40.415022][ T1097] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   40.433309][ T1097] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   40.440938][ T1090] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   40.457846][ T1097] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   40.458181][ T1090] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[   40.480592][ T1090] EXT4-fs (loop4): This should not happen!! Data will be lost
[   40.480592][ T1090] 
[   40.490488][ T1090] EXT4-fs (loop4): Total free blocks count 0
[   40.491977][ T1099] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   40.496902][ T1090] EXT4-fs (loop4): Free/Dirty block details
[   40.509979][ T1099] EXT4-fs (loop4): This should not happen!! Data will be lost
[   40.509979][ T1099] 
[   40.516540][ T1097] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   40.535393][ T1099] EXT4-fs (loop4): Total free blocks count 0
[   40.541616][ T1099] EXT4-fs (loop4): Free/Dirty block details
[   40.542791][ T1090] EXT4-fs (loop4): free_blocks=2415919104
[   40.558426][ T1097] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.313: iget: bad i_size value: 360287970189639680
[   40.592509][ T1097] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.313: couldn't read orphan inode 15 (err -117)
[   40.605037][ T1097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   40.657156][ T1097] EXT4-fs (loop3): unmounting filesystem.
[   40.946403][  T815] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   41.084134][ T1120] 9pnet: p9_errstr2errno: server reported unknown error œæçâ̼§6†Gµ)D»ÉoèÉï'óÖ)=0‹O]|”[
[   41.136422][  T813] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   41.137596][  T815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.160326][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   41.170225][  T815] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   41.193562][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   41.195926][  T815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.204141][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   41.234448][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   41.250387][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   41.250534][  T815] usb 3-1: config 0 descriptor??
[   41.267564][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   41.283531][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   41.299598][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   41.315905][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   41.337666][  T813] usb 2-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config
[   41.359527][  T813] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.375292][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[   41.398348][  T813] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   41.408723][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[   41.417087][  T813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.425640][  T813] usb 2-1: Product: syz
[   41.430651][  T813] usb 2-1: Manufacturer: syz
[   41.435489][  T813] usb 2-1: SerialNumber: syz
[   41.665976][  T813] usb 2-1: 0:2 : does not exist
[   41.675072][  T813] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   41.700604][  T815] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[   41.720874][  T815] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input4
[   41.727142][  T813] usb 2-1: USB disconnect, device number 4
[   41.809021][   T28] kauditd_printk_skb: 22 callbacks suppressed
[   41.809037][   T28] audit: type=1400 audit(1754518967.240:246): avc:  denied  { read } for  pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=705 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   41.838514][  T815] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   41.963487][   T28] audit: type=1400 audit(1754518967.240:247): avc:  denied  { open } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=705 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   41.965402][ T1106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.001259][ T1106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.024620][   T28] audit: type=1400 audit(1754518967.240:248): avc:  denied  { ioctl } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=705 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   42.112237][  T288] EXT4-fs (loop0): unmounting filesystem.
[   42.131023][   T28] audit: type=1326 audit(1754518967.560:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ccf8ebe9 code=0x7ffc0000
[   42.165253][   T28] audit: type=1326 audit(1754518967.580:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ccf8ebe9 code=0x7ffc0000
[   42.189668][   T28] audit: type=1326 audit(1754518967.580:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65ccf8ebe9 code=0x7ffc0000
[   42.221771][   T28] audit: type=1326 audit(1754518967.580:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ccf8ebe9 code=0x7ffc0000
[   42.245721][   T28] audit: type=1326 audit(1754518967.580:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ccf8ebe9 code=0x7ffc0000
[   42.280401][ T1139] __nla_validate_parse: 3 callbacks suppressed
[   42.280420][ T1139] netlink: 96 bytes leftover after parsing attributes in process `syz.1.331'.
[   42.302902][   T28] audit: type=1326 audit(1754518967.590:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65ccf8ebe9 code=0x7ffc0000
[   42.352752][   T28] audit: type=1326 audit(1754518967.590:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ccf8ebe9 code=0x7ffc0000
[   42.391339][ T1141] loop0: detected capacity change from 0 to 8192
[   42.405613][ T1141] bio_check_eod: 1 callbacks suppressed
[   42.405655][ T1141] syz.0.332: attempt to access beyond end of device
[   42.405655][ T1141] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   42.440099][  T311] usb 3-1: USB disconnect, device number 5
[   42.464878][ T1141] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   42.485293][ T1141] FAT-fs (loop0): Filesystem has been set read-only
[   42.509297][ T1141] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   42.518450][ T1141] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   42.645087][ T1160] loop4: detected capacity change from 0 to 512
[   42.669815][ T1160] EXT4-fs (loop4): 1 orphan inode deleted
[   42.675781][ T1160] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   42.687923][   T10] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1
[   42.706385][ T1160] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.750974][ T1173] loop3: detected capacity change from 0 to 512
[   42.762960][  T283] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /105/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   42.786215][  T283] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   42.820202][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   42.833087][  T283] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /105/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   42.855964][  T283] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   42.876511][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   42.888403][ T1173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   42.901008][ T1173] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.901317][  T283] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /105/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   42.942225][  T283] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   42.963056][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   42.986136][  T283] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /105/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   43.009257][  T283] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   43.015014][  T290] EXT4-fs (loop3): unmounting filesystem.
[   43.031469][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   43.045693][  T283] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /105/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[   43.069268][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   43.081912][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   43.095389][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   43.112611][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   43.125256][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   43.144423][  T283] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   43.282768][ T1228] input: syz1 as /devices/virtual/input/input5
[   43.295128][  T283] EXT4-fs (loop4): unmounting filesystem.
[   43.428302][ T1241] loop0: detected capacity change from 0 to 256
[   43.454148][ T1241] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   43.459740][ T1242] device syzkaller0 entered promiscuous mode
[   43.479165][ T1239] input: syz1 as /devices/virtual/input/input6
[   43.496276][ T1241] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   43.513397][ T1241] FAT-fs (loop0): Filesystem has been set read-only
[   43.680829][ T1257] loop2: detected capacity change from 0 to 1024
[   43.701630][ T1257] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.774919][ T1257] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.373: bad orphan inode 11
[   43.797197][ T1257] EXT4-fs (loop2): Remounting filesystem read-only
[   43.803852][ T1257] ext4_test_bit(bit=10, block=4) = 1
[   43.810055][ T1257] is_bad_inode(inode)=0
[   43.814330][ T1257] NEXT_ORPHAN(inode)=3254779904
[   43.819867][ T1257] max_ino=32
[   43.823133][ T1257] i_nlink=0
[   43.841308][ T1257] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.373: lblock 2 mapped to illegal pblock 2 (length 1)
[   43.856138][ T1282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.385'.
[   43.865255][ T1282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.385'.
[   43.886569][ T1257] EXT4-fs (loop2): Remounting filesystem read-only
[   43.893254][ T1257] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.373: lblock 0 mapped to illegal pblock 48 (length 1)
[   43.913145][ T1257] EXT4-fs (loop2): Remounting filesystem read-only
[   43.920146][ T1257] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.373: Failed to acquire dquot type 0
[   43.932210][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.939802][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.966892][ T1257] EXT4-fs (loop2): Remounting filesystem read-only
[   43.973828][ T1257] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem
[   43.975267][ T1252] device bridge_slave_0 entered promiscuous mode
[   43.992711][ T1257] EXT4-fs (loop2): Remounting filesystem read-only
[   43.997583][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.006827][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.014557][ T1257] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.373: mark_inode_dirty error
[   44.031508][ T1252] device bridge_slave_1 entered promiscuous mode
[   44.050018][ T1257] EXT4-fs (loop2): Remounting filesystem read-only
[   44.057938][ T1257] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   44.069964][ T1257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   44.100170][  T354] device bridge_slave_1 left promiscuous mode
[   44.116588][  T354] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.137946][  T354] device bridge_slave_0 left promiscuous mode
[   44.144169][  T354] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.153059][  T354] device veth1_macvtap left promiscuous mode
[   44.153735][  T286] EXT4-fs (loop2): unmounting filesystem.
[   44.166574][  T354] device veth0_vlan left promiscuous mode
[   44.179204][  T286] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[   44.212729][  T286] EXT4-fs (loop2): Remounting filesystem read-only
[   44.229470][  T286] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem
[   44.254145][  T286] EXT4-fs (loop2): Remounting filesystem read-only
[   44.262764][ T1306] loop0: detected capacity change from 0 to 512
[   44.264554][  T286] EXT4-fs error (device loop2): ext4_quota_off:7107: inode #3: comm syz-executor: mark_inode_dirty error
[   44.287417][  T286] EXT4-fs (loop2): Remounting filesystem read-only
[   44.325585][ T1308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1308 comm=syz.2.393
[   44.344154][ T1306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   44.372872][ T1306] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.423709][  T288] EXT4-fs (loop0): unmounting filesystem.
[   44.639419][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.647614][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.672435][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.685049][ T1312] loop2: detected capacity change from 0 to 40427
[   44.692341][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.707563][ T1312] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   44.714736][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.722031][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.730278][ T1312] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   44.738985][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.747301][ T1312] F2FS-fs (loop2): fault_injection options not supported
[   44.754482][ T1312] F2FS-fs (loop2): fault_type options not supported
[   44.769416][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.784021][ T1312] F2FS-fs (loop2): fault_type options not supported
[   44.792343][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.800258][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.810965][ T1312] F2FS-fs (loop2): invalid crc value
[   44.837532][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.846229][ T1312] F2FS-fs (loop2): Found nat_bits in checkpoint
[   44.855679][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.875933][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.913447][ T1252] device veth0_vlan entered promiscuous mode
[   44.930819][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.946906][ T1312] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   44.954635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.966399][ T1312] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   44.977309][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.995420][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.042809][ T1344] loop1: detected capacity change from 0 to 256
[   45.051606][  T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.067697][ T1344] FAT-fs (loop1): bogus number of FAT sectors
[   45.077493][ T1252] device veth1_macvtap entered promiscuous mode
[   45.094892][ T1344] FAT-fs (loop1): Can't find a valid FAT filesystem
[   45.111739][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.137385][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.150991][ T1312] syz.2.397: attempt to access beyond end of device
[   45.150991][ T1312] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   45.572798][ T1360] loop5: detected capacity change from 0 to 128
[   45.583440][ T1363] loop3: detected capacity change from 0 to 512
[   45.612273][ T1363] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   45.622439][ T1360] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   45.642243][ T1360] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   45.698151][ T1363] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   45.714702][ T1363] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.735342][ T1252] EXT4-fs (loop5): unmounting filesystem.
[   45.806547][ T1363] loop3: detected capacity change from 512 to 64
[   45.814697][ T1383] EXT4-fs warning (device loop3): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18
[   45.915299][  T290] EXT4-fs (loop3): unmounting filesystem.
[   46.007442][ T1400] loop1: detected capacity change from 0 to 256
[   46.019590][ T1400] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   46.056418][  T813] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   46.146471][    T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   46.160470][ T1411] loop2: detected capacity change from 0 to 256
[   46.179453][ T1411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'.
[   46.202915][ T1411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'.
[   46.235976][ T1409] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.243309][ T1409] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.252558][ T1409] device bridge_slave_0 entered promiscuous mode
[   46.259537][  T813] usb 1-1: Using ep0 maxpacket: 16
[   46.260064][ T1409] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.272136][ T1409] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.280289][ T1409] device bridge_slave_1 entered promiscuous mode
[   46.287217][  T813] usb 1-1: config 0 interface 0 has no altsetting 0
[   46.293870][  T813] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   46.303079][  T813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.318960][  T813] usb 1-1: config 0 descriptor??
[   46.374389][ T1409] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.381670][ T1409] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.389163][ T1409] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.396405][ T1409] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.403938][    T6] usb 6-1: Using ep0 maxpacket: 16
[   46.410725][    T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.422323][    T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   46.435567][    T6] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   46.445329][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.454429][    T6] usb 6-1: config 0 descriptor??
[   46.461465][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.469851][  T334] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.477569][   T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   46.477978][  T334] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.496862][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.505450][  T334] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.512843][  T334] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.522264][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.530935][ T1380] loop0: detected capacity change from 0 to 512
[   46.530945][  T334] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.530962][  T334] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.556966][ T1380] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.421: inode #1: comm syz.0.421: iget: illegal inode #
[   46.571083][ T1380] EXT4-fs (loop0): Remounting filesystem read-only
[   46.577886][ T1380] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.421: error while reading EA inode 1 err=-117
[   46.590855][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   46.599304][ T1380] EXT4-fs (loop0): Remounting filesystem read-only
[   46.599603][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   46.606071][ T1380] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   46.614956][   T10] device bridge_slave_1 left promiscuous mode
[   46.627399][ T1380] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.421: inode #1: comm syz.0.421: iget: illegal inode #
[   46.633656][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.646740][ T1380] EXT4-fs (loop0): Remounting filesystem read-only
[   46.656544][   T39] usb 2-1: Using ep0 maxpacket: 16
[   46.660273][ T1380] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.421: error while reading EA inode 1 err=-117
[   46.666186][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.677634][   T10] device bridge_slave_0 left promiscuous mode
[   46.688060][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.694513][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.704446][   T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   46.712876][ T1380] EXT4-fs (loop0): Remounting filesystem read-only
[   46.725124][   T39] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   46.732677][ T1380] EXT4-fs (loop0): 1 orphan inode deleted
[   46.741314][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.748938][ T1380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   46.760446][   T39] usb 2-1: config 0 descriptor??
[   46.765048][   T10] device veth0_vlan left promiscuous mode
[   46.867381][    T6] HID 045e:07da: Invalid code 65791 type 1
[   46.879477][    T6] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input7
[   46.894071][    T6] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[   46.900931][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   46.922569][ T1409] device veth0_vlan entered promiscuous mode
[   46.933126][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   46.946314][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   46.966220][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   46.974466][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   46.982558][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   46.991371][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   47.001994][ T1409] device veth1_macvtap entered promiscuous mode
[   47.010484][  T813] hid (null): global environment stack underflow
[   47.017408][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   47.025374][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   47.033915][  T813] hid (null): unknown global tag 0x8d
[   47.035066][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   47.039843][  T813] hid (null): unknown global tag 0x35
[   47.051160][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   47.063376][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.179880][   T39] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max
[   47.194060][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   47.218650][   T39] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input8
[   47.235698][  T311] usb 1-1: USB disconnect, device number 3
[   47.238411][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   47.252192][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   47.272335][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   47.287747][    T6] usb 6-1: USB disconnect, device number 2
[   47.294247][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   47.303782][   T39] microsoft 0003:045E:07DA.0009: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   47.310930][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   47.331949][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   47.359139][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   47.378716][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   47.465133][  T311] usb 2-1: USB disconnect, device number 5
[   47.558017][   T28] kauditd_printk_skb: 35 callbacks suppressed
[   47.558033][   T28] audit: type=1400 audit(1754518972.990:287): avc:  denied  { create } for  pid=1449 comm="syz.6.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   47.594722][ T1454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'.
[   47.785831][  T288] EXT4-fs (loop0): unmounting filesystem.
[   47.852905][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.456'.
[   47.889944][ T1470] 9pnet: p9_errstr2errno: server reported unknown error �@íÎÇpî‘AçÁ›
¬ž;
KZì44§/@®qæžkøp
[   47.889944][ T1470] éC<+
[   47.907091][ T1468] SELinux: failed to load policy
[   48.071898][   T28] audit: type=1400 audit(1754518973.500:288): avc:  denied  { map } for  pid=1486 comm="syz.1.466" path="socket:[21223]" dev="sockfs" ino=21223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   48.142964][   T28] audit: type=1400 audit(1754518973.570:289): avc:  denied  { read write } for  pid=1499 comm="syz.2.471" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   48.167493][ T1498] netlink: 'syz.0.470': attribute type 4 has an invalid length.
[   48.192790][ T1498] netlink: 'syz.0.470': attribute type 4 has an invalid length.
[   48.210701][   T28] audit: type=1400 audit(1754518973.570:290): avc:  denied  { open } for  pid=1499 comm="syz.2.471" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   48.276453][   T28] audit: type=1400 audit(1754518973.570:291): avc:  denied  { ioctl } for  pid=1499 comm="syz.2.471" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   48.568025][ T1541] netlink: 220 bytes leftover after parsing attributes in process `syz.5.488'.
[   48.586426][ T1541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.488'.
[   48.627301][ T1541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.488'.
[   48.631652][ T1546] loop1: detected capacity change from 0 to 512
[   48.636698][ T1541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.488'.
[   48.663514][ T1546] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   48.670809][ T1541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.488'.
[   48.706724][ T1546] EXT4-fs (loop1): failed to initialize system zone (-117)
[   48.728846][ T1546] EXT4-fs (loop1): mount failed
[   48.740030][ T1550] netlink: 24 bytes leftover after parsing attributes in process `syz.6.491'.
[   48.764410][ T1555] netlink: 24 bytes leftover after parsing attributes in process `syz.6.491'.
[   48.852033][ T1565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'.
[   48.881661][ T1569] loop1: detected capacity change from 0 to 256
[   48.893325][ T1569] FAT-fs (loop1): bogus number of FAT sectors
[   48.899321][ T1567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   48.900436][ T1569] FAT-fs (loop1): Can't find a valid FAT filesystem
[   48.924524][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   48.941036][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   48.951254][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   48.959832][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   48.968365][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.977298][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.986122][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.995872][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.286360][    T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   49.457103][ T1586] loop1: detected capacity change from 0 to 40427
[   49.468353][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.479999][ T1586] F2FS-fs (loop1): heap/no_heap options were deprecated
[   49.487672][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.498464][ T1586] F2FS-fs (loop1): fault_injection options not supported
[   49.505673][ T1586] F2FS-fs (loop1): fault_type options not supported
[   49.512972][    T6] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   49.515288][ T1586] F2FS-fs (loop1): invalid crc value
[   49.522819][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.540667][    T6] usb 1-1: config 0 descriptor??
[   49.543723][ T1586] F2FS-fs (loop1): Found nat_bits in checkpoint
[   49.588237][ T1586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   49.650050][  T284] syz-executor: attempt to access beyond end of device
[   49.650050][  T284] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   49.953346][    T6] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[   49.961036][    T6] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[   49.969261][    T6] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[   49.977169][    T6] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[   49.984729][    T6] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[   49.993087][    T6] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[   50.187274][    T6] usb 1-1: USB disconnect, device number 4
[   50.412653][ T1622] loop6: detected capacity change from 0 to 512
[   50.434955][ T1622] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   50.578232][    T8] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   50.775623][ T1644] loop0: detected capacity change from 0 to 512
[   50.785749][ T1644] EXT4-fs (loop0): #blocks per group too big: 16809984
[   50.875731][   T28] audit: type=1400 audit(1754518976.300:292): avc:  denied  { map } for  pid=1647 comm="syz.0.533" path="socket:[21507]" dev="sockfs" ino=21507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   50.906830][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   50.907114][   T28] audit: type=1400 audit(1754518976.340:293): avc:  denied  { read accept } for  pid=1647 comm="syz.0.533" path="socket:[21507]" dev="sockfs" ino=21507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   51.056474][    T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   51.236394][    T6] usb 3-1: Using ep0 maxpacket: 32
[   51.242974][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.268121][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.281083][    T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   51.290792][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.312330][    T6] usb 3-1: config 0 descriptor??
[   51.331827][    T6] hub 3-1:0.0: USB hub found
[   51.334636][   T28] audit: type=1400 audit(1754518976.760:294): avc:  denied  { getopt } for  pid=1666 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   51.484780][ T1675] input: syz1 as /devices/virtual/input/input9
[   51.526158][    T6] hub 3-1:0.0: 1 port detected
[   51.536494][  T311] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   51.552258][ T1680] loop0: detected capacity change from 0 to 256
[   51.737632][  T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.748598][  T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.758947][  T311] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   51.768908][  T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.777805][  T311] usb 6-1: config 0 descriptor??
[   51.946426][  T351] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[   52.016429][  T813] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   52.129704][    T6] hub 3-1:0.0: activate --> -90
[   52.135838][  T351] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   52.145572][  T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.155138][  T351] usb 7-1: config 0 descriptor??
[   52.188726][  T311] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   52.196147][  T311] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   52.196405][  T813] usb 1-1: Using ep0 maxpacket: 16
[   52.204015][  T311] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   52.210395][  T813] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.215953][  T311] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   52.227607][  T813] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.234313][  T311] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0
[   52.235582][  T311] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[   52.245181][  T813] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   52.276983][  T813] usb 1-1: config 0 interface 0 has no altsetting 0
[   52.283752][  T813] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   52.293277][  T813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.302362][  T813] usb 1-1: config 0 descriptor??
[   52.404384][  T815] usb 6-1: USB disconnect, device number 3
[   52.531373][    T6] usb 3-1-port1: cannot disable (err = -71)
[   52.539036][    T6] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[   52.545564][   T39] usb 3-1: USB disconnect, device number 6
[   52.546141][    T6] usb 3-1-port1: connect-debounce failed
[   52.714033][  T813] hid (null): report_id 0 is invalid
[   52.948582][ T1698] loop0: detected capacity change from 0 to 16
[   52.966231][ T1698] erofs: Unexpected value for 'acl'
[   52.998317][  T813] usb 1-1: USB disconnect, device number 5
[   53.059382][ T1712] netlink: 'syz.2.563': attribute type 12 has an invalid length.
[   53.094974][ T1719] loop1: detected capacity change from 0 to 256
[   53.121312][ T1719] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.152811][ T1719] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   53.161588][ T1719] FAT-fs (loop1): Filesystem has been set read-only
[   53.348521][ T1739] overlayfs: failed to set xattr on upper
[   53.369028][  T351] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   53.388513][  T351] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   53.412905][  T351] asix: probe of 7-1:0.0 failed with error -71
[   53.426384][  T351] usb 7-1: USB disconnect, device number 2
[   53.505681][   T28] audit: type=1400 audit(1754518978.930:295): avc:  denied  { mount } for  pid=1753 comm="syz.2.582" name="/" dev="ramfs" ino=22791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   53.667822][   T28] audit: type=1400 audit(1754518979.100:296): avc:  denied  { set_context_mgr } for  pid=1767 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   53.813473][ T1776] loop5: detected capacity change from 0 to 2048
[   54.227965][ T1793] loop6: detected capacity change from 0 to 40427
[   54.239842][ T1793] F2FS-fs (loop6): invalid crc value
[   54.247311][ T1793] F2FS-fs (loop6): Found nat_bits in checkpoint
[   54.288979][ T1793] F2FS-fs (loop6): Start checkpoint disabled!
[   54.289770][ T1793] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   54.353074][   T28] audit: type=1400 audit(1754518979.780:297): avc:  denied  { create } for  pid=1792 comm="syz.6.598" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   54.374331][ T1409] syz-executor: attempt to access beyond end of device
[   54.374331][ T1409] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   54.374787][   T28] audit: type=1400 audit(1754518979.790:298): avc:  denied  { mounton } for  pid=1792 comm="syz.6.598" path="/32/file0/file0" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   54.389405][ T1409] syz-executor: attempt to access beyond end of device
[   54.389405][ T1409] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   54.413474][   T28] audit: type=1400 audit(1754518979.790:299): avc:  denied  { setattr } for  pid=1792 comm="syz.6.598" name="work" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   54.466365][   T28] audit: type=1400 audit(1754518979.790:300): avc:  denied  { remove_name } for  pid=1792 comm="syz.6.598" name="#e" dev="loop6" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   54.466401][   T28] audit: type=1400 audit(1754518979.790:301): avc:  denied  { rename } for  pid=1792 comm="syz.6.598" name="#e" dev="loop6" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   54.466438][   T28] audit: type=1400 audit(1754518979.790:302): avc:  denied  { unlink } for  pid=1792 comm="syz.6.598" name="#e" dev="loop6" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   54.466465][   T28] audit: type=1400 audit(1754518979.790:303): avc:  denied  { unlink } for  pid=1792 comm="syz.6.598" name="#f" dev="loop6" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   54.466490][   T28] audit: type=1400 audit(1754518979.790:304): avc:  denied  { link } for  pid=1792 comm="syz.6.598" name="file1" dev="overlay" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   54.477839][   T10] kworker/u4:1: attempt to access beyond end of device
[   54.477839][   T10] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[   54.552005][ T1797] loop0: detected capacity change from 0 to 512
[   54.605434][ T1797] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   54.738625][  T365] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   54.945195][ T1817] input: syz1 as /devices/virtual/input/input10
[   54.972287][ T1819] __nla_validate_parse: 3 callbacks suppressed
[   54.972308][ T1819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'.
[   55.034535][ T1824] loop5: detected capacity change from 0 to 256
[   55.066861][ T1824] FAT-fs (loop5): Directory bread(block 64) failed
[   55.073532][ T1824] FAT-fs (loop5): Directory bread(block 65) failed
[   55.102285][ T1827] SELinux: failed to load policy
[   55.110747][ T1824] FAT-fs (loop5): Directory bread(block 66) failed
[   55.122834][ T1824] FAT-fs (loop5): Directory bread(block 67) failed
[   55.132849][ T1824] FAT-fs (loop5): Directory bread(block 68) failed
[   55.143701][ T1824] FAT-fs (loop5): Directory bread(block 69) failed
[   55.159974][ T1824] FAT-fs (loop5): Directory bread(block 70) failed
[   55.169840][ T1824] FAT-fs (loop5): Directory bread(block 71) failed
[   55.179384][ T1824] FAT-fs (loop5): Directory bread(block 72) failed
[   55.186068][ T1824] FAT-fs (loop5): Directory bread(block 73) failed
[   55.195170][ T1829] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.207162][ T1829] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.215198][ T1829] device bridge_slave_0 entered promiscuous mode
[   55.222749][ T1829] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.235695][ T1829] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.245625][ T1824] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[   55.257438][ T1829] device bridge_slave_1 entered promiscuous mode
[   55.264751][   T10] device bridge_slave_1 left promiscuous mode
[   55.273756][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.286243][    T8] kworker/u4:0: attempt to access beyond end of device
[   55.286243][    T8] loop5: rw=1, sector=1224, nr_sectors = 4 limit=256
[   55.300517][   T10] device bridge_slave_0 left promiscuous mode
[   55.301343][ T1847] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   55.314281][ T1847] overlayfs: failed to set xattr on upper
[   55.314304][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.321105][ T1847] overlayfs: ...falling back to xino=off.
[   55.355549][   T10] device veth1_macvtap left promiscuous mode
[   55.362132][   T10] device veth0_vlan left promiscuous mode
[   55.511585][ T1846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'.
[   55.563170][ T1858] loop2: detected capacity change from 0 to 40427
[   55.574596][ T1858] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   55.589981][ T1865] bridge0: port 3(vlan2) entered blocking state
[   55.594464][ T1858] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   55.604624][ T1865] bridge0: port 3(vlan2) entered disabled state
[   55.612869][ T1865] device vlan2 entered promiscuous mode
[   55.619201][ T1865] bridge0: mtu less than device minimum
[   55.624968][ T1858] F2FS-fs (loop2): invalid crc value
[   55.649993][ T1858] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   55.676513][ T1858] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   55.706625][  T311] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   55.712314][ T1874] loop1: detected capacity change from 0 to 512
[   55.745577][ T1876] loop0: detected capacity change from 0 to 4096
[   55.756628][ T1874] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.634: inode #1: comm syz.1.634: iget: illegal inode #
[   55.774952][ T1874] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.634: error while reading EA inode 1 err=-117
[   55.779556][ T1858] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   55.795165][ T1874] EXT4-fs (loop1): 1 orphan inode deleted
[   55.801388][ T1874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   55.807388][ T1876] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   55.820805][ T1858] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   55.896435][  T311] usb 6-1: Using ep0 maxpacket: 16
[   55.903210][  T288] EXT4-fs (loop0): unmounting filesystem.
[   55.910533][  T311] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[   55.928019][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.945411][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.947324][  T311] usb 6-1: config 0 has no interface number 0
[   55.960796][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.969853][ T1888] syz.2.627: attempt to access beyond end of device
[   55.969853][ T1888] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   55.970139][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.984396][  T311] usb 6-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30
[   55.992879][  T365] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.010412][  T365] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.011006][ T1858] syz.2.627: attempt to access beyond end of device
[   56.011006][ T1858] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   56.018289][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.032795][  T311] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   56.051187][  T311] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   56.062295][  T311] usb 6-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171
[   56.085934][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.094229][  T311] usb 6-1: config 0 interface 41 has no altsetting 0
[   56.101357][  T365] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.108572][  T365] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.117839][  T284] EXT4-fs (loop1): unmounting filesystem.
[   56.127548][  T311] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   56.146227][  T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.155015][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.163199][  T311] usb 6-1: Product: syz
[   56.167350][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.185990][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.186483][  T311] usb 6-1: Manufacturer: syz
[   56.202094][  T311] usb 6-1: SerialNumber: syz
[   56.207583][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.217622][  T311] usb 6-1: config 0 descriptor??
[   56.222914][ T1860] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   56.239792][ T1860] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   56.266101][ T1829] device veth0_vlan entered promiscuous mode
[   56.274168][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.298147][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.314187][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.322630][  T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.331773][ T1829] device veth1_macvtap entered promiscuous mode
[   56.361737][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.374449][ T1905] loop2: detected capacity change from 0 to 512
[   56.389215][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.392206][ T1905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   56.447746][ T1905] EXT4-fs (loop2): 1 truncate cleaned up
[   56.453717][ T1905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   56.468589][ T1860] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   56.496265][ T1860] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   56.506903][ T1905] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   56.564062][  T286] EXT4-fs (loop2): unmounting filesystem.
[   56.633363][ T1924] loop0: detected capacity change from 0 to 512
[   56.667849][ T1908] loop1: detected capacity change from 0 to 40427
[   56.668136][ T1924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   56.681771][ T1908] F2FS-fs (loop1): invalid crc value
[   56.693577][ T1924] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[   56.724155][ T1908] F2FS-fs (loop1): Found nat_bits in checkpoint
[   56.810205][ T1908] F2FS-fs (loop1): Start checkpoint disabled!
[   56.823991][ T1908] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   56.916260][  T284] syz-executor: attempt to access beyond end of device
[   56.916260][  T284] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   56.941380][  T284] syz-executor: attempt to access beyond end of device
[   56.941380][  T284] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   57.023720][   T10] kworker/u4:1: attempt to access beyond end of device
[   57.023720][   T10] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[   57.091954][   T10] tipc: Left network mode
[   57.111005][ T1953] loop2: detected capacity change from 0 to 256
[   57.158745][  T311] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   57.175054][ T1953] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   57.190384][ T1955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.662'.
[   57.273270][ T1959] exFAT-fs (loop2): error, invalid size(size(21) > aligned(9223372036854777344)
[   57.273270][ T1959] 
[   57.288827][ T1959] exFAT-fs (loop2): Filesystem has been set read-only
[   57.389756][  T311] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   57.401085][  T311] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[   57.411603][  T311] CoreChips: probe of 6-1:0.41 failed with error -71
[   57.420529][  T311] usb 6-1: USB disconnect, device number 4
[   57.474332][ T1966] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.482933][ T1966] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.490953][ T1966] device bridge_slave_0 entered promiscuous mode
[   57.499741][ T1966] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.507814][ T1966] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.515631][ T1966] device bridge_slave_1 entered promiscuous mode
[   57.577998][   T10] device vlan2 left promiscuous mode
[   57.583782][   T10] bridge0: port 3(vlan2) entered disabled state
[   57.590958][   T10] device bridge_slave_1 left promiscuous mode
[   57.597351][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.605105][   T10] device bridge_slave_0 left promiscuous mode
[   57.611806][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.773375][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.781411][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.791392][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.801307][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.810619][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.817926][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.825760][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.835016][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.843747][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.852066][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.859265][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.871933][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.880451][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.890160][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.898787][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.914145][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.923362][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.942068][  T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.951158][  T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.959913][  T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.968416][  T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.989752][ T1966] device veth0_vlan entered promiscuous mode
[   58.016557][  T815] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   58.029505][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.040499][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.051386][ T1966] device veth1_macvtap entered promiscuous mode
[   58.065678][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.080265][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.095679][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.105381][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.227490][  T815] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.246416][  T815] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   58.267075][  T815] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   58.276264][  T815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.284617][  T815] usb 8-1: Product: syz
[   58.289536][  T815] usb 8-1: Manufacturer: syz
[   58.294297][  T815] usb 8-1: SerialNumber: syz
[   58.310000][ T2015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'.
[   58.521882][  T815] usb 8-1: 0:2 : does not exist
[   58.544614][  T815] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[   58.548985][ T2036] loop5: detected capacity change from 0 to 512
[   58.563641][  T815] usb 8-1: USB disconnect, device number 2
[   58.572171][ T2036] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   58.602182][ T2036] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   58.631843][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   58.653598][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   58.675783][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   58.697963][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   58.718699][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   58.739901][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   58.762991][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   58.782054][ T2041] loop0: detected capacity change from 0 to 40427
[   58.783966][ T2036] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 18: comm syz.5.693: lblock 23 mapped to illegal pblock 18 (length 1)
[   58.794650][ T2041] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   58.812544][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 19: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   58.813066][ T2036] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 20: comm syz.5.693: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[   58.840480][ T2041] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   58.854907][    T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   58.876530][ T2041] F2FS-fs (loop0): Found nat_bits in checkpoint
[   58.940291][ T2041] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   58.947835][ T2041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   58.995928][ T2041] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   58.995957][ T2041] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.004669][ T2041] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.012573][ T2041] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.020419][ T2041] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.028426][ T2041] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.036261][ T2041] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   59.057523][    T6] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   59.096437][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.115919][    T6] usb 3-1: config 0 descriptor??
[   59.292331][ T2051] loop7: detected capacity change from 0 to 40427
[   59.302551][ T2051] F2FS-fs (loop7): heap/no_heap options were deprecated
[   59.309767][ T2051] F2FS-fs (loop7): fault_injection options not supported
[   59.317066][ T2051] F2FS-fs (loop7): fault_type options not supported
[   59.324820][ T2051] F2FS-fs (loop7): invalid crc value
[   59.354207][ T2051] F2FS-fs (loop7): Found nat_bits in checkpoint
[   59.394435][ T2051] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   59.484124][ T1829] syz-executor: attempt to access beyond end of device
[   59.484124][ T1829] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   59.499934][ T1252] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   59.537321][ T1252] EXT4-fs (loop5): unmounting filesystem.
[   59.546039][    T6] usb 3-1: Cannot set MAC address
[   59.553272][    T6] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[   59.571299][ T2041] F2FS-fs (loop0): Start checkpoint disabled!
[   59.601567][    T6] usb 3-1: USB disconnect, device number 7
[   59.765426][ T2069] serio: Serial port ptm1
[   59.916452][  T311] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   60.097567][  T311] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   60.109358][  T311] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   60.121089][  T311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   60.132318][  T311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   60.150906][  T311] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   60.166834][  T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.175292][  T311] usb 6-1: Product: syz
[   60.179584][  T311] usb 6-1: Manufacturer: syz
[   60.184432][  T311] usb 6-1: SerialNumber: syz
[   60.190430][ T2061] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   60.198764][  T311] cdc_mbim 6-1:1.0: skipping garbage
[   60.266427][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   60.288908][ T2086] netlink: 104 bytes leftover after parsing attributes in process `syz.8.710'.
[   60.335953][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   60.335971][   T28] audit: type=1400 audit(2000000002.690:317): avc:  denied  { mount } for  pid=2089 comm="syz.8.712" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   60.365326][   T28] audit: type=1400 audit(2000000002.700:318): avc:  denied  { unmount } for  pid=2089 comm="syz.8.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   60.400134][ T2061] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   60.410300][ T2061] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   60.442053][ T2096] netlink: 96 bytes leftover after parsing attributes in process `syz.8.715'.
[   60.471248][   T28] audit: type=1400 audit(2000000002.830:319): avc:  denied  { name_bind } for  pid=2097 comm="syz.2.716" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[   60.493917][ T2100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.717'.
[   60.551000][   T28] audit: type=1400 audit(2000000002.910:320): avc:  denied  { mounton } for  pid=2108 comm="syz.2.720" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   60.551131][ T2109] incfs: mount failed -22
[   60.604966][ T2111] netlink: 32 bytes leftover after parsing attributes in process `syz.7.722'.
[   60.614438][ T2111] netem: unknown loss type 13
[   60.619364][ T2111] netem: change failed
[   60.764133][ T2131] incfs: Options parsing error. -22
[   60.769624][ T2131] incfs: mount failed -22
[   60.819790][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4
[   60.833016][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2
[   60.856840][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.864934][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.882691][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.891035][ T2144] loop0: detected capacity change from 0 to 2048
[   60.897715][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.907419][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.915526][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.923743][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.933581][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.942706][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.943415][ T2144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   60.950955][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.968568][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.978406][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.986270][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.994185][  T815] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0
[   60.997163][ T2144] EXT4-fs error (device loop0): ext4_free_inode:355: comm syz.0.738: bit already cleared for inode 15
[   61.002208][   T28] audit: type=1400 audit(2000000003.350:321): avc:  denied  { unlink } for  pid=2143 comm="syz.0.738" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   61.036274][ T2061] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   61.045121][ T2061] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   61.053986][  T815] hid-generic 0000:3000000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   61.064299][  T311] cdc_mbim 6-1:1.0: setting tx_max = 60
[   61.065320][  T288] EXT4-fs (loop0): unmounting filesystem.
[   61.079832][  T311] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[   61.096954][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   61.106436][  T311] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 8a:9a:91:a3:ef:2a
[   61.190573][   T28] audit: type=1400 audit(2000000003.550:322): avc:  denied  { read } for  pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   61.221286][ T2157] fido_id[2157]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   61.245185][   T28] audit: type=1400 audit(2000000003.570:323): avc:  denied  { search } for  pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.306559][  T311] usb 6-1: USB disconnect, device number 5
[   61.312924][  T311] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[   61.346804][   T28] audit: type=1400 audit(2000000003.570:324): avc:  denied  { read } for  pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=4706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.414307][   T28] audit: type=1400 audit(2000000003.570:325): avc:  denied  { open } for  pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.461823][   T28] audit: type=1400 audit(2000000003.570:326): avc:  denied  { getattr } for  pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.522657][ T2198] device veth1_macvtap left promiscuous mode
[   61.529017][ T2198] device macsec0 entered promiscuous mode
[   61.763835][ T2231] loop8: detected capacity change from 0 to 512
[   61.778964][ T2231] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   61.788309][ T2231] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   61.803021][ T2231] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.764: corrupted inode contents
[   61.815597][ T2231] EXT4-fs error (device loop8): ext4_dirty_inode:6121: inode #2: comm syz.8.764: mark_inode_dirty error
[   61.828580][ T2231] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.764: corrupted inode contents
[   61.845384][ T2237] input: syz1 as /devices/virtual/input/input11
[   61.850681][ T2231] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.764: mark_inode_dirty error
[   61.877298][ T1966] EXT4-fs (loop8): unmounting filesystem.
[   62.022228][ T2251] bridge0: port 3(vlan2) entered blocking state
[   62.028689][ T2251] bridge0: port 3(vlan2) entered disabled state
[   62.598801][  T815] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   62.786389][  T815] usb 6-1: Using ep0 maxpacket: 8
[   62.809063][  T815] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   62.822736][  T815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.837158][ T2288] loop8: detected capacity change from 0 to 1024
[   62.843734][  T815] usb 6-1: Product: syz
[   62.848581][  T815] usb 6-1: Manufacturer: syz
[   62.853548][  T815] usb 6-1: SerialNumber: syz
[   62.882899][ T2288] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   62.891689][ T2288] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.925156][ T2288] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: block 1: comm syz.8.788: lblock 1 mapped to illegal pblock 1 (length 1)
[   62.940027][ T2288] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[   62.953208][ T2288] EXT4-fs (loop8): This should not happen!! Data will be lost
[   62.953208][ T2288] 
[   62.966578][ T2288] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: block 3: comm syz.8.788: lblock 3 mapped to illegal pblock 3 (length 5)
[   62.981488][ T2288] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117
[   62.994676][ T2288] EXT4-fs (loop8): This should not happen!! Data will be lost
[   62.994676][ T2288] 
[   63.016452][ T1966] EXT4-fs (loop8): unmounting filesystem.
[   63.046035][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.8.789'.
[   63.080364][  T815] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   63.146525][ T2008] Bluetooth: hci0: command 0x1003 tx timeout
[   63.152826][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   63.353145][ T2310] loop0: detected capacity change from 0 to 512
[   63.367757][ T2310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002]
[   63.367833][ T2310] System zones: 1-12
[   63.368476][ T2310] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.797: corrupted in-inode xattr
[   63.368696][ T2310] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.797: couldn't read orphan inode 15 (err -117)
[   63.368861][ T2310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   63.408037][  T288] EXT4-fs (loop0): unmounting filesystem.
[   63.440781][ T2313] netlink: 'syz.0.798': attribute type 4 has an invalid length.
[   63.576423][   T39] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   63.736424][  T815] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   63.767556][   T39] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.767595][   T39] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[   63.767633][   T39] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   63.767682][   T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.768600][   T39] usb 9-1: config 0 descriptor??
[   63.826923][   T39] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[   63.919031][  T815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.928474][  T815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.928505][  T815] usb 1-1: Product: syz
[   63.928521][  T815] usb 1-1: Manufacturer: syz
[   63.928536][  T815] usb 1-1: SerialNumber: syz
[   64.036967][   T39] usb 9-1: USB disconnect, device number 2
[   64.193384][ T2350] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   64.771777][ T2375] loop8: detected capacity change from 0 to 1024
[   64.817725][ T2375] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   64.865142][ T2375] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.826: inode #54286: comm syz.8.826: iget: illegal inode #
[   64.880514][ T2375] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.826: error while reading EA inode 54286 err=-117
[   64.922329][ T1966] EXT4-fs (loop8): unmounting filesystem.
[   64.934625][  T815] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[   64.946348][  T815] cdc_ncm 1-1:1.0: setting tx_max = 84
[   64.976603][ T2379] loop8: detected capacity change from 0 to 512
[   64.994832][ T2379] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   65.010785][ T2379] EXT4-fs (loop8): 1 truncate cleaned up
[   65.016634][ T2379] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   65.062132][ T1966] EXT4-fs (loop8): unmounting filesystem.
[   65.141362][  T815] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   65.171779][  T815] usb 1-1: USB disconnect, device number 6
[   65.201892][  T815] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[   65.290601][ T2382] loop8: detected capacity change from 0 to 40427
[   65.305967][ T2382] F2FS-fs (loop8): invalid crc value
[   65.332752][ T2382] F2FS-fs (loop8): Found nat_bits in checkpoint
[   65.380089][ T2382] F2FS-fs (loop8): Start checkpoint disabled!
[   65.393570][ T2382] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[   65.522831][   T10] kworker/u4:1: attempt to access beyond end of device
[   65.522831][   T10] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   65.701900][ T2405] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   65.753348][ T2405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   65.851242][   T28] kauditd_printk_skb: 73 callbacks suppressed
[   65.851258][   T28] audit: type=1400 audit(2000000008.210:400): avc:  denied  { write } for  pid=2417 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   65.865101][ T2405] device veth0_vlan left promiscuous mode
[   65.918281][ T2405] device veth0_vlan entered promiscuous mode
[   65.929780][ T2405] device veth1_macvtap left promiscuous mode
[   65.937740][ T2405] device veth1_macvtap entered promiscuous mode
[   65.946743][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.957805][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.979338][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.008635][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.015755][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.046592][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.064593][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.077029][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.084322][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.094496][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.108434][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   66.126736][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.135181][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   66.153813][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.162395][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.175569][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.184296][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.195852][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.204371][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.213041][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.221629][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.230496][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.246726][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.254977][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.263567][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.272221][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.280901][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.289796][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.298513][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.307516][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.315613][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.323423][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.331340][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.339863][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.348265][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.356236][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.452829][ T2443] block device autoloading is deprecated and will be removed.
[   66.567584][ T2451] loop0: detected capacity change from 0 to 512
[   66.614472][ T2451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   66.634352][ T2451] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.682222][  T288] EXT4-fs (loop0): unmounting filesystem.
[   66.756287][   T28] audit: type=1400 audit(2000000009.110:401): avc:  denied  { setopt } for  pid=2459 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   66.823147][ T2467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'.
[   66.877123][ T2471] netlink: 'syz.2.853': attribute type 1 has an invalid length.
[   66.972765][   T28] audit: type=1326 audit(2000000009.330:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.2.855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bccb8ebe9 code=0x0
[   67.077896][  T311] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   67.156042][   T28] audit: type=1400 audit(2000000009.510:403): avc:  denied  { connect } for  pid=2484 comm="syz.7.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   67.211052][   T28] audit: type=1400 audit(2000000009.570:404): avc:  denied  { read } for  pid=2484 comm="syz.7.857" path="socket:[25485]" dev="sockfs" ino=25485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   67.269901][  T311] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.281002][  T311] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.291618][  T311] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   67.303756][  T311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.312830][  T311] usb 9-1: config 0 descriptor??
[   67.329346][   T28] audit: type=1326 audit(2000000009.690:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2494 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ecb32add9 code=0x7ffc0000
[   67.352906][   T28] audit: type=1326 audit(2000000009.690:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2494 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ecb32add9 code=0x7ffc0000
[   67.376591][   T28] audit: type=1326 audit(2000000009.690:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2494 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ecb32add9 code=0x7ffc0000
[   67.400798][   T28] audit: type=1326 audit(2000000009.690:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2494 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ecb32add9 code=0x7ffc0000
[   67.424843][   T28] audit: type=1326 audit(2000000009.690:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2494 comm="syz.7.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ecb32add9 code=0x7ffc0000
[   67.878050][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   67.895205][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   67.908405][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.920653][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   67.929300][  T311] usb 9-1: string descriptor 0 read error: -22
[   67.936174][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.944966][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.953518][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.962533][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.971356][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.980703][ T2528] batadv0: tun_chr_ioctl cmd 1074025677
[   67.986694][ T2528] batadv0: Linktype set failed because interface is up
[   68.029693][ T2537] netlink: 'syz.2.881': attribute type 4 has an invalid length.
[   68.048309][ T2537] netlink: 'syz.2.881': attribute type 4 has an invalid length.
[   68.063290][ T2539] loop7: detected capacity change from 0 to 512
[   68.119091][  T335] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   68.142505][  T311] input: HID 256c:006d as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.000E/input/input12
[   68.164715][  T311] uclogic 0003:256C:006D.000E: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.8-1/input0
[   68.223450][ T2554] loop2: detected capacity change from 0 to 512
[   68.254101][ T2554] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   68.277981][ T2554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[   68.287500][ T2554] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.888: corrupted in-inode xattr
[   68.299902][ T2554] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.888: couldn't read orphan inode 15 (err -117)
[   68.313422][ T2554] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   68.361703][   T39] usb 9-1: USB disconnect, device number 3
[   68.372829][  T286] EXT4-fs (loop2): unmounting filesystem.
[   68.436258][ T2567] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[   68.593902][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   69.596383][   T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   69.615741][ T2615] loop2: detected capacity change from 0 to 4096
[   69.628354][ T2615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   69.653167][  T286] EXT4-fs (loop2): unmounting filesystem.
[   69.723092][ T2624] loop2: detected capacity change from 0 to 128
[   69.729956][ T2624] EXT4-fs: Ignoring removed nobh option
[   69.738766][ T2624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   69.747647][ T2624] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   69.772562][  T286] EXT4-fs (loop2): unmounting filesystem.
[   69.786475][   T39] usb 1-1: Using ep0 maxpacket: 16
[   69.794311][   T39] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[   69.803186][   T39] usb 1-1: config 1 has no interface number 0
[   69.809943][   T39] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   69.820784][   T39] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   69.831452][   T39] usb 1-1: config 1 interface 105 has no altsetting 0
[   69.845375][   T39] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   69.854675][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.862860][   T39] usb 1-1: Product: syz
[   69.867632][   T39] usb 1-1: Manufacturer: syz
[   69.872389][   T39] usb 1-1: SerialNumber: syz
[   69.878819][ T2613] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   69.886245][ T2613] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   70.192690][    T6] usb 6-1: USB disconnect, device number 6
[   70.214070][    T6] usblp0: removed
[   70.299629][ T2613] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   70.307732][ T2613] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   70.666429][ T2611] Bluetooth: hci0: command 0x1003 tx timeout
[   70.669002][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   70.711555][ T2677] loop2: detected capacity change from 0 to 128
[   70.718069][   T39] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[   70.834412][ T2675] mmap: syz.7.940 (2675) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   70.891308][   T28] kauditd_printk_skb: 441 callbacks suppressed
[   70.891324][   T28] audit: type=1326 audit(2000000013.250:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   70.921940][   T28] audit: type=1326 audit(2000000013.250:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   70.945687][   T28] audit: type=1326 audit(2000000013.250:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   70.947789][   T39] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   70.973852][   T28] audit: type=1326 audit(2000000013.250:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   71.005331][   T28] audit: type=1326 audit(2000000013.260:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   71.032016][   T39] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 62:ad:09:5a:53:c1
[   71.061634][   T39] usb 1-1: USB disconnect, device number 7
[   71.069542][   T39] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   71.083526][   T28] audit: type=1326 audit(2000000013.260:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   71.120111][   T28] audit: type=1326 audit(2000000013.260:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   71.146418][ T1563] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   71.157632][   T39] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   71.176424][   T39] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   71.186249][   T39] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   71.197503][   T28] audit: type=1326 audit(2000000013.260:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2679 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   71.221898][   T28] audit: type=1326 audit(2000000013.260:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ecb3c14a5 code=0x7ffc0000
[   71.247044][   T28] audit: type=1326 audit(2000000013.420:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.7.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3ecb38ebe9 code=0x7ffc0000
[   71.418361][ T2711] netlink: 104 bytes leftover after parsing attributes in process `syz.5.953'.
[   71.502635][ T2719] loop0: detected capacity change from 0 to 512
[   71.528642][ T2719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   71.545082][ T2719] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   71.602889][  T288] EXT4-fs (loop0): unmounting filesystem.
[   71.656361][    T6] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   71.725020][ T2163] Bluetooth: hci0: Frame reassembly failed (-84)
[   71.838392][    T6] usb 8-1: Using ep0 maxpacket: 32
[   71.852150][ T2758] loop2: detected capacity change from 0 to 512
[   71.853976][    T6] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.876803][    T6] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.888786][ T2758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   71.899135][ T2758] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   71.912322][    T6] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   71.925874][ T2762] netem: change failed
[   71.930201][    T6] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   71.946384][    T6] usb 8-1: Product: syz
[   71.950700][    T6] usb 8-1: Manufacturer: syz
[   71.962221][    T6] hub 8-1:4.0: USB hub found
[   72.007062][  T286] EXT4-fs (loop2): unmounting filesystem.
[   72.047432][ T2750] loop8: detected capacity change from 0 to 40427
[   72.060186][ T2750] F2FS-fs (loop8): invalid crc value
[   72.077289][ T2750] F2FS-fs (loop8): Found nat_bits in checkpoint
[   72.112942][ T2750] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   72.163117][    T6] hub 8-1:4.0: 2 ports detected
[   72.179815][ T2780] netlink: 76 bytes leftover after parsing attributes in process `syz.2.978'.
[   72.218762][ T2750] syz.8.969: attempt to access beyond end of device
[   72.218762][ T2750] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   72.234745][ T2750] syz.8.969: attempt to access beyond end of device
[   72.234745][ T2750] loop8: rw=0, sector=45096, nr_sectors = 8 limit=40427
[   72.258877][ T1966] syz-executor: attempt to access beyond end of device
[   72.258877][ T1966] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   72.365780][    T6] hub 8-1:4.0: hub_hub_status failed (err = -71)
[   72.374071][    T6] hub 8-1:4.0: config failed, can't get hub status (err -71)
[   72.406837][    T6] usb 8-1: USB disconnect, device number 3
[   72.524323][ T2799] loop8: detected capacity change from 0 to 128
[   72.548663][ T2799] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   72.559963][ T2799] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.588771][ T2804] incfs: iterate_incfs_dir / -22
[   72.611235][ T1966] EXT4-fs (loop8): unmounting filesystem.
[   72.646252][ T2812] netlink: 96 bytes leftover after parsing attributes in process `syz.8.991'.
[   72.843238][ T2834] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1003'.
[   72.896389][  T815] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   72.968480][ T2841] loop2: detected capacity change from 0 to 8192
[   73.007994][ T2841]  loop2: p1 p2 p3 p4
[   73.012329][ T2841] loop2: p1 start 4294508288 is beyond EOD, truncated
[   73.025801][ T2841] loop2: p2 start 2936012800 is beyond EOD, truncated
[   73.040107][ T2841] loop2: p3 start 1912602624 is beyond EOD, truncated
[   73.049610][ T2841] loop2: p4 size 656640 extends beyond EOD, truncated
[   73.087527][  T815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.098948][ T2848] loop7: detected capacity change from 0 to 128
[   73.110251][  T815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   73.132928][ T1150] udevd[1150]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   73.145227][  T815] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   73.163786][  T815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.174087][  T815] usb 1-1: Product: syz
[   73.182240][  T815] usb 1-1: Manufacturer: syz
[   73.187228][  T815] usb 1-1: SerialNumber: syz
[   73.312955][ T2860] device bridge0 entered promiscuous mode
[   73.319740][ T2860] bridge0: port 3(macsec1) entered blocking state
[   73.327015][ T2860] bridge0: port 3(macsec1) entered disabled state
[   73.334387][ T2860] device bridge0 left promiscuous mode
[   73.410461][  T815] usb 1-1: 0:2 : does not exist
[   73.417900][  T815] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   73.437746][  T815] usb 1-1: USB disconnect, device number 8
[   73.547843][   T39] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   73.558799][  T354] Bluetooth: hci1: Frame reassembly failed (-84)
[   73.575400][ T2887] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   73.647466][ T1150] udevd[1150]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   73.674741][ T2892] loop7: detected capacity change from 0 to 1024
[   73.681724][ T2892] EXT4-fs: Ignoring removed orlov option
[   73.698424][ T2892] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   73.711308][ T2892] EXT4-fs (loop7): shut down requested (1)
[   73.723806][ T1829] EXT4-fs (loop7): unmounting filesystem.
[   73.729273][   T39] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   73.739287][   T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.748058][   T39] usb 9-1: Product: syz
[   73.752556][   T39] usb 9-1: Manufacturer: syz
[   73.757680][   T39] usb 9-1: SerialNumber: syz
[   73.786598][ T2611] Bluetooth: hci0: command 0x1003 tx timeout
[   73.793591][ T1563] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   74.179810][ T2928] loop7: detected capacity change from 0 to 256
[   74.200124][ T2928] FAT-fs (loop7): Directory bread(block 64) failed
[   74.208396][ T2928] FAT-fs (loop7): Directory bread(block 65) failed
[   74.215133][ T2928] FAT-fs (loop7): Directory bread(block 66) failed
[   74.222106][ T2928] FAT-fs (loop7): Directory bread(block 67) failed
[   74.229142][ T2928] FAT-fs (loop7): Directory bread(block 68) failed
[   74.235776][ T2928] FAT-fs (loop7): Directory bread(block 69) failed
[   74.242498][ T2928] FAT-fs (loop7): Directory bread(block 70) failed
[   74.249299][ T2928] FAT-fs (loop7): Directory bread(block 71) failed
[   74.255989][ T2928] FAT-fs (loop7): Directory bread(block 72) failed
[   74.262730][ T2928] FAT-fs (loop7): Directory bread(block 73) failed
[   74.285605][ T2928] syz.7.1045: attempt to access beyond end of device
[   74.285605][ T2928] loop7: rw=524288, sector=1256, nr_sectors = 4 limit=256
[   74.299677][ T2928] syz.7.1045: attempt to access beyond end of device
[   74.299677][ T2928] loop7: rw=0, sector=1256, nr_sectors = 4 limit=256
[   74.366548][  T359] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   74.556467][  T359] usb 1-1: Using ep0 maxpacket: 16
[   74.562959][  T359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.576483][  T359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.586497][  T359] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   74.586788][ T2940] loop5: detected capacity change from 0 to 512
[   74.599656][  T359] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   74.615727][  T359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.625078][  T359] usb 1-1: config 0 descriptor??
[   74.632685][ T2940] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   74.642186][ T2940] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   74.662430][ T2940] EXT4-fs error (device loop5): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.5.1051: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   74.683395][ T2940] EXT4-fs error (device loop5): ext4_get_first_dir_block:3594: inode #12: comm syz.5.1051: directory missing '.'
[   74.766393][  T815] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[   74.775766][   T39] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42
[   74.782363][   T39] cdc_ncm 9-1:1.0: setting tx_max = 84
[   74.809035][ T1252] EXT4-fs (loop5): unmounting filesystem.
[   74.825407][ T2943] binder: 2942:2943 ioctl c0306201 0 returned -14
[   74.947468][  T815] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.958028][  T815] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   74.969313][  T815] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   74.978669][  T815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.990570][   T39] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   75.001806][  T815] usb 8-1: Product: syz
[   75.006166][  T815] usb 8-1: Manufacturer: syz
[   75.012838][   T39] usb 9-1: USB disconnect, device number 4
[   75.019286][   T39] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP)
[   75.028851][  T815] usb 8-1: SerialNumber: syz
[   75.035023][  T359] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max
[   75.046995][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.054369][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.063625][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.071563][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.078864][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.086222][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.098728][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.106266][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.115099][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.123408][  T359] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   75.132270][  T359] microsoft 0003:045E:07DA.000F: No inputs registered, leaving
[   75.140294][   T24] ==================================================================
[   75.148494][   T24] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130
[   75.156542][   T24] Read of size 8 at addr ffff88810f72acf0 by task kworker/1:0/24
[   75.164286][   T24] 
[   75.166630][   T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.1.145-syzkaller-00001-g39fefc4d6aea #0
[   75.176374][   T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   75.186976][   T24] Workqueue: events_power_efficient wg_ratelimiter_gc_entries
[   75.194999][   T24] Call Trace:
[   75.198294][   T24]  <TASK>
[   75.201433][   T24]  __dump_stack+0x21/0x24
[   75.205894][   T24]  dump_stack_lvl+0xee/0x150
[   75.210517][   T24]  ? __cfi_dump_stack_lvl+0x8/0x8
[   75.215837][   T24]  ? __list_del_entry_valid+0xa6/0x130
[   75.221867][   T24]  print_address_description+0x71/0x210
[   75.227546][   T24]  print_report+0x4a/0x60
[   75.232020][   T24]  kasan_report+0x122/0x150
[   75.236540][   T24]  ? __list_del_entry_valid+0xa6/0x130
[   75.242076][   T24]  __asan_report_load8_noabort+0x14/0x20
[   75.247930][   T24]  __list_del_entry_valid+0xa6/0x130
[   75.253267][   T24]  process_one_work+0x4b9/0xc40
[   75.258138][   T24]  worker_thread+0xa29/0x11f0
[   75.262838][   T24]  kthread+0x281/0x320
[   75.267004][   T24]  ? __cfi_worker_thread+0x10/0x10
[   75.272124][   T24]  ? __cfi_kthread+0x10/0x10
[   75.276780][   T24]  ret_from_fork+0x1f/0x30
[   75.281391][   T24]  </TASK>
[   75.284510][   T24] 
[   75.286854][   T24] Allocated by task 39:
[   75.291036][   T24]  kasan_set_track+0x4b/0x70
[   75.295720][   T24]  kasan_save_alloc_info+0x25/0x30
[   75.301020][   T24]  __kasan_kmalloc+0x95/0xb0
[   75.305707][   T24]  __kmalloc_node+0xb2/0x1e0
[   75.310311][   T24]  kvmalloc_node+0x294/0x480
[   75.315004][   T24]  alloc_netdev_mqs+0x8d/0xf90
[   75.319878][   T24]  alloc_etherdev_mqs+0x37/0x40
[   75.324767][   T24]  usbnet_probe+0x20c/0x2780
[   75.329372][   T24]  usb_probe_interface+0x610/0xaf0
[   75.334593][   T24]  really_probe+0x2cb/0x960
[   75.339142][   T24]  __driver_probe_device+0x198/0x280
[   75.344452][   T24]  driver_probe_device+0x54/0x3e0
[   75.349527][   T24]  __device_attach_driver+0x2e9/0x4a0
[   75.355086][   T24]  bus_for_each_drv+0x183/0x210
[   75.360122][   T24]  __device_attach+0x2a2/0x400
[   75.365107][   T24]  device_initial_probe+0x1a/0x20
[   75.370236][   T24]  bus_probe_device+0xc0/0x1f0
[   75.375115][   T24]  device_add+0xb4d/0xef0
[   75.379477][   T24]  usb_set_configuration+0x19c2/0x1f10
[   75.385002][   T24]  usb_generic_driver_probe+0x91/0x150
[   75.390565][   T24]  usb_probe_device+0x159/0x270
[   75.395536][   T24]  really_probe+0x2cb/0x960
[   75.400069][   T24]  __driver_probe_device+0x198/0x280
[   75.405527][   T24]  driver_probe_device+0x54/0x3e0
[   75.411113][   T24]  __device_attach_driver+0x2e9/0x4a0
[   75.416773][   T24]  bus_for_each_drv+0x183/0x210
[   75.421735][   T24]  __device_attach+0x2a2/0x400
[   75.426772][   T24]  device_initial_probe+0x1a/0x20
[   75.432225][   T24]  bus_probe_device+0xc0/0x1f0
[   75.437014][   T24]  device_add+0xb4d/0xef0
[   75.441465][   T24]  usb_new_device+0xa70/0x1520
[   75.446411][   T24]  hub_event+0x2a5d/0x4680
[   75.450916][   T24]  process_one_work+0x71f/0xc40
[   75.456109][   T24]  worker_thread+0xa29/0x11f0
[   75.460814][   T24]  kthread+0x281/0x320
[   75.465187][   T24]  ret_from_fork+0x1f/0x30
[   75.469731][   T24] 
[   75.472072][   T24] Freed by task 39:
[   75.476305][   T24]  kasan_set_track+0x4b/0x70
[   75.480946][   T24]  kasan_save_free_info+0x31/0x50
[   75.485990][   T24]  ____kasan_slab_free+0x132/0x180
[   75.491307][   T24]  __kasan_slab_free+0x11/0x20
[   75.496089][   T24]  slab_free_freelist_hook+0xc2/0x190
[   75.501857][   T24]  __kmem_cache_free+0xb7/0x1b0
[   75.507567][   T24]  kfree+0x6f/0xf0
[   75.511515][   T24]  kvfree+0x35/0x40
[   75.515467][   T24]  netdev_freemem+0x3f/0x60
[   75.520224][   T24]  netdev_release+0x7f/0xb0
[   75.525098][   T24]  device_release+0xa4/0x1d0
[   75.530052][   T24]  kobject_put+0x19d/0x280
[   75.534685][   T24]  put_device+0x1f/0x30
[   75.539053][   T24]  free_netdev+0x392/0x490
[   75.543587][   T24]  usbnet_disconnect+0x25a/0x3b0
[   75.548808][   T24]  usb_unbind_interface+0x223/0x8d0
[   75.554380][   T24]  device_release_driver_internal+0x508/0x820
[   75.560848][   T24]  device_release_driver+0x19/0x20
[   75.565987][   T24]  bus_remove_device+0x2ee/0x350
[   75.570943][   T24]  device_del+0x6a4/0xeb0
[   75.575281][   T24]  usb_disable_device+0x3a8/0x750
[   75.580366][   T24]  usb_disconnect+0x31e/0x860
[   75.585160][   T24]  hub_event+0x1bd5/0x4680
[   75.589591][   T24]  process_one_work+0x71f/0xc40
[   75.594559][   T24]  worker_thread+0xd2e/0x11f0
[   75.599338][   T24]  kthread+0x281/0x320
[   75.603443][   T24]  ret_from_fork+0x1f/0x30
[   75.608005][   T24] 
[   75.610331][   T24] Last potentially related work creation:
[   75.616038][   T24]  kasan_save_stack+0x3a/0x60
[   75.620719][   T24]  __kasan_record_aux_stack+0xb6/0xc0
[   75.626254][   T24]  kasan_record_aux_stack_noalloc+0xb/0x10
[   75.632170][   T24]  insert_work+0x51/0x300
[   75.636610][   T24]  __queue_work+0x9b1/0xd30
[   75.641135][   T24]  queue_work_on+0xd2/0x140
[   75.645864][   T24]  usbnet_link_change+0x176/0x1a0
[   75.650967][   T24]  usbnet_probe+0x1d55/0x2780
[   75.655762][   T24]  usb_probe_interface+0x610/0xaf0
[   75.661135][   T24]  really_probe+0x2cb/0x960
[   75.665816][   T24]  __driver_probe_device+0x198/0x280
[   75.671112][   T24]  driver_probe_device+0x54/0x3e0
[   75.676180][   T24]  __device_attach_driver+0x2e9/0x4a0
[   75.681564][   T24]  bus_for_each_drv+0x183/0x210
[   75.686450][   T24]  __device_attach+0x2a2/0x400
[   75.691233][   T24]  device_initial_probe+0x1a/0x20
[   75.696374][   T24]  bus_probe_device+0xc0/0x1f0
[   75.701170][   T24]  device_add+0xb4d/0xef0
[   75.705643][   T24]  usb_set_configuration+0x19c2/0x1f10
[   75.711133][   T24]  usb_generic_driver_probe+0x91/0x150
[   75.716785][   T24]  usb_probe_device+0x159/0x270
[   75.721818][   T24]  really_probe+0x2cb/0x960
[   75.726452][   T24]  __driver_probe_device+0x198/0x280
[   75.731924][   T24]  driver_probe_device+0x54/0x3e0
[   75.737062][   T24]  __device_attach_driver+0x2e9/0x4a0
[   75.742462][   T24]  bus_for_each_drv+0x183/0x210
[   75.747418][   T24]  __device_attach+0x2a2/0x400
[   75.752284][   T24]  device_initial_probe+0x1a/0x20
[   75.757313][   T24]  bus_probe_device+0xc0/0x1f0
[   75.762078][   T24]  device_add+0xb4d/0xef0
[   75.766529][   T24]  usb_new_device+0xa70/0x1520
[   75.772003][   T24]  hub_event+0x2a5d/0x4680
[   75.776446][   T24]  process_one_work+0x71f/0xc40
[   75.781569][   T24]  worker_thread+0xa29/0x11f0
[   75.786251][   T24]  kthread+0x281/0x320
[   75.790497][   T24]  ret_from_fork+0x1f/0x30
[   75.795101][   T24] 
[   75.797513][   T24] The buggy address belongs to the object at ffff88810f72a000
[   75.797513][   T24]  which belongs to the cache kmalloc-4k of size 4096
[   75.812020][   T24] The buggy address is located 3312 bytes inside of
[   75.812020][   T24]  4096-byte region [ffff88810f72a000, ffff88810f72b000)
[   75.825664][   T24] 
[   75.827994][   T24] The buggy address belongs to the physical page:
[   75.834516][   T24] page:ffffea00043dca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f728
[   75.845046][   T24] head:ffffea00043dca00 order:3 compound_mapcount:0 compound_pincount:0
[   75.853418][   T24] flags: 0x4000000000010200(slab|head|zone=1)
[   75.859556][   T24] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380
[   75.868148][   T24] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   75.876734][   T24] page dumped because: kasan: bad access detected
[   75.883352][   T24] page_owner tracks the page as allocated
[   75.889195][   T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4268846805, free_ts 0
[   75.909604][   T24]  post_alloc_hook+0x1f5/0x210
[   75.914697][   T24]  prep_new_page+0x1c/0x110
[   75.919883][   T24]  get_page_from_freelist+0x2c7b/0x2cf0
[   75.926280][   T24]  __alloc_pages+0x1c3/0x450
[   75.931235][   T24]  alloc_slab_page+0x6e/0xf0
[   75.936092][   T24]  new_slab+0x98/0x3d0
[   75.940372][   T24]  ___slab_alloc+0x6f6/0xb50
[   75.945187][   T24]  __slab_alloc+0x5e/0xa0
[   75.949959][   T24]  __kmem_cache_alloc_node+0x203/0x2c0
[   75.955958][   T24]  kmalloc_trace+0x29/0xb0
[   75.960403][   T24]  kobject_uevent_env+0x287/0x730
[   75.965465][   T24]  kobject_uevent+0x1d/0x30
[   75.969988][   T24]  device_add+0xa5c/0xef0
[   75.974523][   T24]  usb_set_configuration+0x19c2/0x1f10
[   75.980365][   T24]  usb_generic_driver_probe+0x91/0x150
[   75.986194][   T24]  usb_probe_device+0x159/0x270
[   75.991162][   T24] page_owner free stack trace missing
[   75.996808][   T24] 
[   75.999282][   T24] Memory state around the buggy address:
[   76.005076][   T24]  ffff88810f72ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   76.013278][   T24]  ffff88810f72ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   76.021523][   T24] >ffff88810f72ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   76.029768][   T24]                                                              ^
[   76.037591][   T24]  ffff88810f72ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   76.045949][   T24]  ffff88810f72ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   76.054192][   T24] ==================================================================
[   76.062337][   T24] Disabling lock debugging due to kernel taint
[   76.069530][ T1563] Bluetooth: hci1: command 0x1003 tx timeout
[   76.069750][   T45] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   76.077248][  T359] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   76.093799][  T815] usb 8-1: 0:2 : does not exist
[   76.109949][  T359] microsoft 0003:045E:07DA.000F: no inputs found
[   76.116595][  T815] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[   76.124041][  T359] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway
[   76.138537][  T359] usb 1-1: USB disconnect, device number 9
[   76.146621][  T815] usb 8-1: USB disconnect, device number 4
[   76.167627][ T2945] fido_id[2945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   76.357103][  T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory