last executing test programs:

50.6315268s ago: executing program 2 (id=17):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0100"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

50.541542528s ago: executing program 2 (id=21):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_clone(0x23000000, &(0x7f0000000380)="6468a5cf70243c96152ccc62a2", 0xd, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

48.557801016s ago: executing program 2 (id=68):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)

48.153822928s ago: executing program 2 (id=78):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)

47.927398046s ago: executing program 2 (id=81):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080))
fallocate(r1, 0x10, 0x6, 0x10001)

47.842885113s ago: executing program 2 (id=82):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ef1747600000000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="4000a7000000a700a7ea3163fd3bc518194b120c1e73d54cfc3be39625f4f6a3fd7a59ccb7a802572e7b5d"], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x48)

47.812278625s ago: executing program 32 (id=82):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ef1747600000000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="4000a7000000a700a7ea3163fd3bc518194b120c1e73d54cfc3be39625f4f6a3fd7a59ccb7a802572e7b5d"], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x48)

44.536326947s ago: executing program 4 (id=166):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x20000000, 0xb000000, 0x515})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800006d02"])

44.468448932s ago: executing program 4 (id=168):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents(r1, &(0x7f0000000180)=""/48, 0x30)
getdents(r1, 0xfffffffffffffffd, 0x58)

44.468294662s ago: executing program 4 (id=169):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[], 0xffdd)

44.286438467s ago: executing program 4 (id=171):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@gc_merge}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

43.61203699s ago: executing program 4 (id=187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}]}, 0x38}, 0x1, 0x7}, 0x0)

43.148952697s ago: executing program 4 (id=196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
getrandom(0x0, 0x0, 0x3)

43.077752663s ago: executing program 33 (id=196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
getrandom(0x0, 0x0, 0x3)

40.979349941s ago: executing program 0 (id=237):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0)

40.924677125s ago: executing program 0 (id=238):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0)

40.923216965s ago: executing program 0 (id=239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)

40.909256536s ago: executing program 0 (id=240):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0)

40.884447528s ago: executing program 0 (id=241):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

40.849823741s ago: executing program 0 (id=242):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

40.824904023s ago: executing program 34 (id=242):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

10.056309168s ago: executing program 6 (id=735):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r1, 0x20, 0x80000000, 0x1000003)

5.347489824s ago: executing program 6 (id=740):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="400a060000006e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000140)={0x20, 0x7, 0x3, "6dfc22"}, 0x0, 0x0})

3.917001888s ago: executing program 3 (id=779):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18)
utime(0x0, 0x0)

3.901523929s ago: executing program 3 (id=780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, 0x0, 0x0, 0x8000c61)

3.834821554s ago: executing program 3 (id=782):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0)

3.728127553s ago: executing program 3 (id=786):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0)

3.686063966s ago: executing program 3 (id=787):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)="10", 0x1, 0xffffffffffffffff)

3.584624185s ago: executing program 3 (id=789):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000066aef4a000000000000000004000000bf7f1a006601feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = fcntl$getown(r0, 0x9)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)=r3)

3.584471655s ago: executing program 35 (id=789):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000066aef4a000000000000000004000000bf7f1a006601feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r3 = fcntl$getown(r0, 0x9)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)=r3)

2.554160547s ago: executing program 6 (id=797):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)

2.194850625s ago: executing program 7 (id=814):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe)

1.998345121s ago: executing program 7 (id=818):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150f, &(0x7f0000000780)="$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")
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)

1.846219973s ago: executing program 7 (id=810):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x2a}, 0x28)

1.820919275s ago: executing program 7 (id=811):
rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b'])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.778827719s ago: executing program 7 (id=815):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

1.746154021s ago: executing program 7 (id=820):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="400a060000006e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000140)={0x20, 0x7, 0x3, "6dfc22"}, 0x0, 0x0})

1.577128795s ago: executing program 1 (id=827):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50)

1.557671886s ago: executing program 1 (id=828):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xb4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}]}]}, 0x60}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={{0x14, 0x3ea}, [], {0x14, 0x3f4, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

1.539958348s ago: executing program 1 (id=829):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00001700000000000c001a80080005800400"], 0x2c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.458668184s ago: executing program 8 (id=830):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006980)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

1.453867824s ago: executing program 1 (id=842):
setregid(0xee00, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1.434417486s ago: executing program 1 (id=831):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000600)=0x5, 0x4)
sendmmsg$inet(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="518d090c62", 0x5}, {&(0x7f00000001c0)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9ed", 0x6a}], 0x2}}], 0x1, 0x40)

1.416604958s ago: executing program 1 (id=833):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)={0x40, 0x2b, 0x4, "8bc9ec88"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x0, 0xe, 0x4, "7cad09d4"}, 0x0, 0x0})

1.37684592s ago: executing program 8 (id=834):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3)

740.561821ms ago: executing program 5 (id=836):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

723.633703ms ago: executing program 5 (id=838):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = inotify_init()
r3 = inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x25000001)
inotify_rm_watch(r2, r3)

475.636793ms ago: executing program 8 (id=839):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x230002, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x8000000, 0x6000})

470.859913ms ago: executing program 5 (id=850):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r1, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0)

460.281554ms ago: executing program 5 (id=840):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000004})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
close_range(r0, 0xffffffffffffffff, 0x0)

446.336545ms ago: executing program 8 (id=841):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

434.901456ms ago: executing program 5 (id=843):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

410.394588ms ago: executing program 5 (id=844):
r0 = epoll_create1(0x0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f)
close(r1)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

390.953069ms ago: executing program 8 (id=845):
setregid(0xee00, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

379.09759ms ago: executing program 8 (id=846):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_usb_connect$uac1(0x2, 0x79, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x8, 0xa, {0x7, 0x25, 0x1, 0x80, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0xbd, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3e, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x3, 0x7}}}}}}}]}}, 0x0)

149.026789ms ago: executing program 6 (id=847):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006980)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

56.354876ms ago: executing program 6 (id=848):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)

0s ago: executing program 6 (id=849):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

   T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.591041][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.598077][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.616064][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.624966][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.643706][   T45] device bridge_slave_1 left promiscuous mode
[   38.651118][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.664198][  T607] syz.1.98[607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.664259][  T607] syz.1.98[607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   38.676092][   T45] device bridge_slave_0 left promiscuous mode
[   38.697759][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.706886][   T45] device veth1_macvtap left promiscuous mode
[   38.719419][   T45] device veth0_vlan left promiscuous mode
[   38.862734][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.875784][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.884244][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.897940][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.919821][  T572] device veth0_vlan entered promiscuous mode
[   38.947105][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   38.964376][  T572] device veth1_macvtap entered promiscuous mode
[   38.970324][  T625] loop1: detected capacity change from 0 to 8192
[   38.980001][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   38.980940][    T6] saitek 0003:0738:1705.0004: unknown main item tag 0x2
[   38.997442][    T6] saitek 0003:0738:1705.0004: hidraw0: USB HID v0.00 Device [HID 0738:1705] on usb-dummy_hcd.0-1/input0
[   39.015575][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.029830][  T625]  loop1: p3 p4 < >
[   39.034558][  T625] loop1: p3 size 33554432 extends beyond EOD, truncated
[   39.069494][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   39.097923][  T636] loop4: detected capacity change from 0 to 1024
[   39.142897][  T636] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[   39.157435][  T636] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.160750][  T558] udevd[558]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   39.172770][  T636] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 3: comm syz.4.108: lblock 3 mapped to illegal pblock 3 (length 13)
[   39.178285][  T557] udevd[557]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   39.219355][  T636] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   39.230351][   T26] usb 1-1: USB disconnect, device number 2
[   39.247642][  T636] EXT4-fs (loop4): This should not happen!! Data will be lost
[   39.247642][  T636] 
[   39.278551][  T651] process 'syz.3.113' launched '/dev/fd/6' with NULL argv: empty string added
[   39.297271][  T649] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.108: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.343055][  T636] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 4: comm syz.4.108: lblock 4 mapped to illegal pblock 4 (length 4)
[   39.357500][  T649] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.108: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.375589][  T636] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 4: comm syz.4.108: lblock 4 mapped to illegal pblock 4 (length 4)
[   39.390698][  T649] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.108: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.406077][  T636] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 4: comm syz.4.108: lblock 4 mapped to illegal pblock 4 (length 4)
[   39.420558][  T649] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.108: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.446599][  T636] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 4: comm syz.4.108: lblock 4 mapped to illegal pblock 4 (length 4)
[   39.460812][  T649] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 3: comm syz.4.108: lblock 3 mapped to illegal pblock 3 (length 1)
[   39.489210][  T483] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   39.565497][  T659] loop3: detected capacity change from 0 to 1024
[   39.634739][  T659] EXT4-fs (loop3): Ignoring removed orlov option
[   39.641231][  T659] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   39.693466][  T659] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[   39.859281][  T483] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   39.876412][  T483] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   39.997564][  T678] syz.0.124[678] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.997659][  T678] syz.0.124[678] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.012049][  T678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   40.036495][  T678] device dummy0 entered promiscuous mode
[   40.049291][  T483] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   40.068885][  T483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.097146][  T483] usb 2-1: Product: syz
[   40.101366][  T483] usb 2-1: Manufacturer: syz
[   40.109698][  T483] usb 2-1: SerialNumber: syz
[   40.116551][  T483] usb 2-1: config 0 descriptor??
[   40.139316][  T648] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   40.148543][  T648] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   40.231543][  T705] loop0: detected capacity change from 0 to 1024
[   40.283918][  T705] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[   40.308369][  T705] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.334218][  T705] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: block 3: comm syz.0.136: lblock 3 mapped to illegal pblock 3 (length 13)
[   40.348976][  T705] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   40.361695][  T705] EXT4-fs (loop0): This should not happen!! Data will be lost
[   40.361695][  T705] 
[   40.367536][  T648] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   40.378157][  T705] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 3: comm syz.0.136: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.392137][  T648] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   40.399724][  T705] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 3: comm syz.0.136: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.414030][  T705] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 3: comm syz.0.136: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.428620][  T726] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 4: comm syz.0.136: lblock 4 mapped to illegal pblock 4 (length 4)
[   40.428678][  T705] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 3: comm syz.0.136: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.461464][  T705] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 3: comm syz.0.136: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.475858][  T705] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 3: comm syz.0.136: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.479420][  T726] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 4: comm syz.0.136: lblock 4 mapped to illegal pblock 4 (length 4)
[   40.490182][  T705] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: block 3: comm syz.0.136: lblock 3 mapped to illegal pblock 3 (length 1)
[   40.582581][  T730] loop5: detected capacity change from 0 to 512
[   40.623273][  T730] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[   40.678666][  T730] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   40.811559][  T730] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.864255][  T734] sch_fq: defrate 0 ignored.
[   40.898206][  T736] netlink: 96 bytes leftover after parsing attributes in process `syz.3.148'.
[   41.095905][  T748] loop3: detected capacity change from 0 to 512
[   41.202963][  T748] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   41.230941][  T748] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.288870][  T767] loop4: detected capacity change from 0 to 512
[   41.311603][  T767] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   41.323191][  T767] EXT4-fs (loop4): 1 truncate cleaned up
[   41.328835][  T767] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   41.341544][  T767] EXT4-fs (loop4): shut down requested (2)
[   41.347743][  T767] syz.4.161 (pid 767) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   41.528376][  T783] loop3: detected capacity change from 0 to 1024
[   41.561020][  T783] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[   41.574936][  T783] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.590991][  T783] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 3: comm syz.3.165: lblock 3 mapped to illegal pblock 3 (length 13)
[   41.605320][  T783] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   41.618259][  T783] EXT4-fs (loop3): This should not happen!! Data will be lost
[   41.618259][  T783] 
[   41.619312][  T483] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[   41.632077][  T783] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.165: lblock 3 mapped to illegal pblock 3 (length 1)
[   41.650722][  T783] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.165: lblock 3 mapped to illegal pblock 3 (length 1)
[   41.664964][  T783] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.165: lblock 3 mapped to illegal pblock 3 (length 1)
[   41.667099][  T483] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00
[   41.691453][  T783] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.165: lblock 3 mapped to illegal pblock 3 (length 1)
[   41.691489][  T795] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 4: comm syz.3.165: lblock 4 mapped to illegal pblock 4 (length 4)
[   41.719914][  T795] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 4: comm syz.3.165: lblock 4 mapped to illegal pblock 4 (length 4)
[   41.724276][  T483] usb 2-1: USB disconnect, device number 3
[   41.744507][  T795] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 4: comm syz.3.165: lblock 4 mapped to illegal pblock 4 (length 4)
[   41.757608][  T483] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet
[   41.769378][  T783] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 3: comm syz.3.165: lblock 3 mapped to illegal pblock 3 (length 1)
[   41.796247][  T795] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #15: block 4: comm syz.3.165: lblock 4 mapped to illegal pblock 4 (length 4)
[   41.909454][   T30] kauditd_printk_skb: 53 callbacks suppressed
[   41.909466][   T30] audit: type=1400 audit(1753978474.878:258): avc:  denied  { relabelfrom } for  pid=804 comm="syz.0.174" name="" dev="pipefs" ino=18629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   42.014301][  T798] loop4: detected capacity change from 0 to 40427
[   42.037875][  T798] F2FS-fs (loop4): Found nat_bits in checkpoint
[   42.045427][   T30] audit: type=1400 audit(1753978475.008:259): avc:  denied  { read } for  pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   42.189216][   T30] audit: type=1400 audit(1753978475.058:260): avc:  denied  { bind } for  pid=817 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   42.219762][  T798] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   42.246786][   T30] audit: type=1326 audit(1753978475.058:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b65ca5b69 code=0x7ffc0000
[   42.275732][   T30] audit: type=1326 audit(1753978475.058:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5b65ca5b69 code=0x7ffc0000
[   42.304496][  T798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   42.371041][   T30] audit: type=1326 audit(1753978475.058:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b65ca5b69 code=0x7ffc0000
[   42.392765][  T282] attempt to access beyond end of device
[   42.392765][  T282] loop4: rw=524288, want=45072, limit=40427
[   42.425039][  T282] attempt to access beyond end of device
[   42.425039][  T282] loop4: rw=0, want=45072, limit=40427
[   42.431959][   T30] audit: type=1326 audit(1753978475.058:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5b65ca5b69 code=0x7ffc0000
[   42.490273][    T8] attempt to access beyond end of device
[   42.490273][    T8] loop4: rw=2049, want=41056, limit=40427
[   42.503056][   T30] audit: type=1326 audit(1753978475.058:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b65ca5b69 code=0x7ffc0000
[   42.529208][   T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   42.553627][  T835] tipc: Started in network mode
[   42.558532][  T835] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   42.566134][   T30] audit: type=1326 audit(1753978475.058:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5b65ca5b69 code=0x7ffc0000
[   42.589316][  T835] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   42.611121][  T835] tipc: Enabled bearer <udp:s>, priority 10
[   42.614774][   T30] audit: type=1326 audit(1753978475.058:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=815 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b65ca5b69 code=0x7ffc0000
[   42.683782][  T840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.190'.
[   42.788880][  T850] loop5: detected capacity change from 0 to 1024
[   42.804354][  T332] tipc: Disabling bearer <udp:£ >
[   42.813799][  T332] tipc: Left network mode
[   42.852273][  T850] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   42.889353][   T60] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.895965][  T850] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   42.914767][   T60] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   42.925313][   T60] usb 1-1: config 0 interface 0 has no altsetting 0
[   42.932090][   T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   42.941198][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.949778][   T60] usb 1-1: config 0 descriptor??
[   42.989918][  T483] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   43.088059][  T863] loop1: detected capacity change from 0 to 1024
[   43.103425][  T858] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.110507][  T858] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.118061][  T858] device bridge_slave_0 entered promiscuous mode
[   43.126918][  T858] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.134427][  T858] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.142256][  T858] device bridge_slave_1 entered promiscuous mode
[   43.149617][  T863] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[   43.163174][  T863] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.178505][  T863] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: block 3: comm syz.1.200: lblock 3 mapped to illegal pblock 3 (length 13)
[   43.193629][  T863] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   43.206053][  T863] EXT4-fs (loop1): This should not happen!! Data will be lost
[   43.206053][  T863] 
[   43.226112][  T863] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.200: lblock 3 mapped to illegal pblock 3 (length 1)
[   43.244292][  T863] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.200: lblock 3 mapped to illegal pblock 3 (length 1)
[   43.258252][  T483] usb 4-1: Using ep0 maxpacket: 32
[   43.259082][  T863] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.200: lblock 3 mapped to illegal pblock 3 (length 1)
[   43.277734][  T869] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 4: comm syz.1.200: lblock 4 mapped to illegal pblock 4 (length 4)
[   43.278296][  T863] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.200: lblock 3 mapped to illegal pblock 3 (length 1)
[   43.305816][  T869] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 4: comm syz.1.200: lblock 4 mapped to illegal pblock 4 (length 4)
[   43.306574][  T863] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.200: lblock 3 mapped to illegal pblock 3 (length 1)
[   43.320567][  T869] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 4: comm syz.1.200: lblock 4 mapped to illegal pblock 4 (length 4)
[   43.335588][  T863] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 3: comm syz.1.200: lblock 3 mapped to illegal pblock 3 (length 1)
[   43.388100][  T858] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.395156][  T858] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.399385][  T691] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   43.402474][  T858] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.410137][  T483] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   43.416872][  T858] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.432363][  T483] usb 4-1: config 0 has no interface number 0
[   43.438544][  T483] usb 4-1: config 0 interface 184 has no altsetting 0
[   43.447605][  T332] device bridge_slave_1 left promiscuous mode
[   43.453991][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.461843][  T332] device bridge_slave_0 left promiscuous mode
[   43.467977][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.476039][  T332] device veth1_macvtap left promiscuous mode
[   43.482357][  T332] device veth0_vlan left promiscuous mode
[   43.608124][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.609269][  T483] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   43.624540][  T483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.632572][  T483] usb 4-1: Product: syz
[   43.636858][  T483] usb 4-1: Manufacturer: syz
[   43.636866][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.648619][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.648626][  T483] usb 4-1: SerialNumber: syz
[   43.649301][   T60] usb 1-1: string descriptor 0 read error: -22
[   43.666714][  T483] usb 4-1: config 0 descriptor??
[   43.671697][  T691] usb 6-1: Using ep0 maxpacket: 32
[   43.680581][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.688911][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.695966][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.703873][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.709830][  T483] smsc75xx v1.0.0
[   43.712516][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.722545][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.739273][  T333] tipc: Node number set to 1
[   43.740472][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.752797][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.760807][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.768902][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.777313][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   43.786498][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.789348][  T691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.805489][  T691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.815263][  T691] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   43.824377][  T691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.833059][  T691] usb 6-1: config 0 descriptor??
[   43.842095][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   43.850158][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.858922][  T858] device veth0_vlan entered promiscuous mode
[   43.865371][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.870942][   T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input6
[   43.884976][  T691] hub 6-1:0.0: USB hub found
[   43.890158][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.907629][  T858] device veth1_macvtap entered promiscuous mode
[   43.919554][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   43.927974][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.931343][   T60] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input7
[   43.936758][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   43.967466][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   43.976967][   T60] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[   43.982531][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.997925][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   44.012227][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.050626][  T880] loop6: detected capacity change from 0 to 1024
[   44.086727][  T352] usb 1-1: USB disconnect, device number 3
[   44.089250][  T691] hub 6-1:0.0: 1 port detected
[   44.101476][  T880] EXT4-fs (loop6): Ignoring removed orlov option
[   44.107984][  T880] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[   44.120656][  T880] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[   44.266894][  T902] netlink: 104 bytes leftover after parsing attributes in process `syz.6.209'.
[   44.379280][  T483] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   44.394560][  T483] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   44.635066][  T946] syz.0.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   44.749780][  T691] hub 6-1:0.0: activate --> -90
[   44.889263][  T483] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[   44.908237][  T483] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[   44.921652][  T483] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   44.931899][  T483] smsc75xx: probe of 4-1:0.184 failed with error -71
[   44.971899][  T483] usb 4-1: USB disconnect, device number 2
[   45.070251][  T968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=968 comm=syz.0.238
[   45.083243][  T968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=968 comm=syz.0.238
[   45.169656][  T876] usb 6-1: USB disconnect, device number 2
[   45.230216][    T6] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   45.322762][  T974] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.330265][  T974] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.337708][  T974] device bridge_slave_0 entered promiscuous mode
[   45.344918][  T974] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.352144][  T974] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.359661][  T976] syz.1.244 (976) used greatest stack depth: 19872 bytes left
[   45.359995][  T974] device bridge_slave_1 entered promiscuous mode
[   45.438397][  T988] loop3: detected capacity change from 0 to 512
[   45.462607][  T974] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.469677][  T974] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.476940][  T974] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.483976][  T974] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.504388][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   45.512006][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.522561][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.535279][  T988] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   45.548020][  T988] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.559272][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   45.568356][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.575404][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.583433][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   45.591877][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.598960][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.606541][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   45.614694][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   45.626093][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.639377][    T6] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   45.639750][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.648081][    T6] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   45.648099][    T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   45.673066][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.683923][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.700508][  T974] device veth0_vlan entered promiscuous mode
[   45.724913][ T1007] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   45.726171][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.743981][  T483] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   45.763432][  T974] device veth1_macvtap entered promiscuous mode
[   45.778328][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.803293][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.839259][    T6] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   45.848338][    T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.873295][    T6] usb 7-1: Product: syz
[   45.878025][    T6] usb 7-1: Manufacturer: syz
[   45.883587][    T6] usb 7-1: SerialNumber: syz
[   45.894778][ T1011] loop5: detected capacity change from 0 to 16
[   45.913479][ T1011] erofs: (device loop5): mounted with root inode @ nid 36.
[   45.926102][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 87 @ nid 36
[   45.936362][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 86 @ nid 36
[   45.945597][ T1011] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   45.955096][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 83 @ nid 36
[   45.964548][ T1011] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   45.974224][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 82 @ nid 36
[   45.983357][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 81 @ nid 36
[   45.983631][   T45] device bridge_slave_1 left promiscuous mode
[   45.992556][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 80 @ nid 36
[   45.999229][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.007784][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 79 @ nid 36
[   46.023985][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 78 @ nid 36
[   46.033124][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 77 @ nid 36
[   46.042206][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 76 @ nid 36
[   46.043919][   T45] device bridge_slave_0 left promiscuous mode
[   46.057712][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.066273][ T1011] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   46.076232][   T45] device dummy0 left promiscuous mode
[   46.081896][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 75 @ nid 36
[   46.091218][   T45] device veth1_macvtap left promiscuous mode
[   46.097243][   T45] device veth0_vlan left promiscuous mode
[   46.103271][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 74 @ nid 36
[   46.113576][  T483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.126082][ T1028] xt_hashlimit: max too large, truncated to 1048576
[   46.130505][  T483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.142546][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 73 @ nid 36
[   46.161735][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 72 @ nid 36
[   46.173493][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 71 @ nid 36
[   46.173559][  T483] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   46.192033][  T483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.192321][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 70 @ nid 36
[   46.201462][  T483] usb 2-1: config 0 descriptor??
[   46.214508][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 61 @ nid 36
[   46.215512][    T6] usb 7-1: 0:2 : does not exist
[   46.224158][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 60 @ nid 36
[   46.236413][    T6] usb 7-1: USB disconnect, device number 2
[   46.243732][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 59 @ nid 36
[   46.255189][ T1011] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   46.267116][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 58 @ nid 36
[   46.276889][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 57 @ nid 36
[   46.281597][  T557] udevd[557]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.291909][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 56 @ nid 36
[   46.311236][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 55 @ nid 36
[   46.322308][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 54 @ nid 36
[   46.331496][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 53 @ nid 36
[   46.341009][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 52 @ nid 36
[   46.351477][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 51 @ nid 36
[   46.360635][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 50 @ nid 36
[   46.371566][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 49 @ nid 36
[   46.372763][ T1034] x_tables: duplicate underflow at hook 4
[   46.381669][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 48 @ nid 36
[   46.395998][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36
[   46.405196][ T1011] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   46.415627][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36
[   46.425156][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36
[   46.435040][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 44 @ nid 36
[   46.444300][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36
[   46.453597][ T1011] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   46.459660][ T1036] loop7: detected capacity change from 0 to 1024
[   46.464361][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36
[   46.478326][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36
[   46.487537][ T1011] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   46.496903][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36
[   46.506057][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36
[   46.507966][ T1036] EXT4-fs (loop7): Ignoring removed oldalloc option
[   46.515666][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36
[   46.522210][ T1036] EXT4-fs (loop7): Ignoring removed bh option
[   46.531388][ T1011] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   46.546299][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36
[   46.546945][ T1036] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   46.555696][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 27 @ nid 36
[   46.571120][ T1036] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   46.576637][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 26 @ nid 36
[   46.611364][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36
[   46.620720][ T1011] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36
[   46.629956][ T1011] attempt to access beyond end of device
[   46.629956][ T1011] loop5: rw=524288, want=848, limit=16
[   46.631904][ T1036] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3876: comm syz.7.266: Allocating blocks 385-513 which overlap fs metadata
[   46.640938][ T1011] attempt to access beyond end of device
[   46.640938][ T1011] loop5: rw=524288, want=13478624104, limit=16
[   46.671021][ T1011] attempt to access beyond end of device
[   46.671021][ T1011] loop5: rw=524288, want=13478624080, limit=16
[   46.682972][ T1011] attempt to access beyond end of device
[   46.682972][ T1011] loop5: rw=524288, want=96, limit=16
[   46.694048][ T1011] attempt to access beyond end of device
[   46.694048][ T1011] loop5: rw=524288, want=32, limit=16
[   46.705101][ T1011] attempt to access beyond end of device
[   46.705101][ T1011] loop5: rw=524288, want=14425508776, limit=16
[   46.711994][ T1035] EXT4-fs (loop7): pa ffff888129b9eb28: logic 16, phys. 129, len 24
[   46.724763][ T1035] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8
[   46.797687][ T1046] loop6: detected capacity change from 0 to 512
[   46.849224][ T1046] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   46.866909][ T1046] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.895768][ T1046] EXT4-fs (loop6): Ignoring removed orlov option
[   46.919472][ T1046] EXT4-fs (loop6): Remounting file system with no journal so ignoring journalled data option
[   46.930172][ T1046] EXT4-fs (loop6): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,sb=0x00000000000050cf,orlov,norecovery,barrier,data=journal,. Quota mode: writeback.
[   46.962993][ T1067] loop7: detected capacity change from 0 to 1024
[   46.999297][  T483] usb 2-1: language id specifier not provided by device, defaulting to English
[   47.032803][ T1067] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   47.098318][ T1067] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none.
[   47.113532][ T1067] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.201521][   T30] kauditd_printk_skb: 93 callbacks suppressed
[   47.201534][   T30] audit: type=1400 audit(1753978480.168:361): avc:  denied  { create } for  pid=1076 comm="syz.6.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   47.389838][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   48.309179][    C0] sched: RT throttling activated
[   48.326268][   T30] audit: type=1400 audit(1753978481.278:362): avc:  denied  { read } for  pid=1076 comm="syz.6.283" dev="sockfs" ino=19682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   48.329301][  T483] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71
[   48.356620][  T483] uclogic 0003:256C:006D.0006: failed probing parameters: -71
[   48.364384][  T483] uclogic: probe of 0003:256C:006D.0006 failed with error -71
[   48.374719][  T483] usb 2-1: USB disconnect, device number 4
[   48.409574][   T45] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   48.422738][ T1081] loop5: detected capacity change from 0 to 256
[   48.441671][   T45] EXT4-fs (loop7): Remounting filesystem read-only
[   48.451083][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   48.461984][   T30] audit: type=1400 audit(1753978481.428:363): avc:  denied  { remount } for  pid=1080 comm="syz.5.285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   48.463053][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   48.490455][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   48.498611][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   48.506956][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.515377][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.523711][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.533277][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   48.696380][   T30] audit: type=1326 audit(1753978481.658:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   48.737131][   T30] audit: type=1326 audit(1753978481.658:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   48.773358][   T30] audit: type=1326 audit(1753978481.658:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   48.797821][   T30] audit: type=1326 audit(1753978481.658:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   48.823860][   T30] audit: type=1326 audit(1753978481.658:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   48.849312][    T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   48.859612][   T30] audit: type=1326 audit(1753978481.688:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   48.889243][  T352] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   49.062313][ T1142] loop1: detected capacity change from 0 to 512
[   49.099197][    T6] usb 6-1: Using ep0 maxpacket: 32
[   49.139367][  T352] usb 7-1: Using ep0 maxpacket: 16
[   49.146009][ T1142] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   49.158465][ T1142] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.169783][   T30] audit: type=1400 audit(1753978482.138:370): avc:  denied  { setattr } for  pid=1141 comm="syz.1.313" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   49.169961][ T1142] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.313: corrupted inode contents
[   49.213679][ T1142] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #2: comm syz.1.313: mark_inode_dirty error
[   49.228679][ T1156] loop7: detected capacity change from 0 to 512
[   49.229357][    T6] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[   49.236166][ T1142] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.313: corrupted inode contents
[   49.243779][    T6] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   49.264596][    T6] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[   49.273667][    T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[   49.284763][  T352] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.295815][    T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   49.305927][  T352] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.316143][    T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   49.325918][  T352] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   49.338924][    T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   49.348827][  T352] usb 7-1: config 0 interface 0 has no altsetting 0
[   49.355493][    T6] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   49.368564][  T352] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   49.377686][    T6] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[   49.378573][ T1156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   49.386818][  T352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.395693][ T1156] System zones: 0-2, 18-18, 34-34
[   49.403349][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.409419][ T1156] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.318: bg 0: block 248: padding at end of block bitmap is not set
[   49.416986][  T352] usb 7-1: config 0 descriptor??
[   49.435448][ T1156] EXT4-fs error (device loop7): ext4_acquire_dquot:6198: comm syz.7.318: Failed to acquire dquot type 1
[   49.439050][    T6] usb 6-1: config 0 descriptor??
[   49.452605][ T1156] EXT4-fs (loop7): 1 truncate cleaned up
[   49.458390][ T1156] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   49.469578][ T1081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   49.470180][ T1156] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.490733][    T6] usblp0: Disabling reads from problematic bidirectional printer
[   49.585757][ T1175] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   49.593937][ T1175] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   49.721323][    T6] usblp 6-1:0.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[   49.743672][    T6] usb 6-1: USB disconnect, device number 3
[   49.758658][    T6] usblp0: removed
[   49.761812][ T1196] loop1: detected capacity change from 0 to 256
[   49.827933][ T1196] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   49.871464][ T1196] exFAT-fs (loop1): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5)
[   49.884579][ T1196] exFAT-fs (loop1): Filesystem has been set read-only
[   49.919297][   T20] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   49.974309][ T1204] netlink: 96 bytes leftover after parsing attributes in process `syz.1.336'.
[   50.167827][  T691] usb 7-1: USB disconnect, device number 3
[   50.169256][   T20] usb 4-1: Using ep0 maxpacket: 16
[   50.289252][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.300359][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.310108][   T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   50.323062][   T20] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   50.332116][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.340781][   T20] usb 4-1: config 0 descriptor??
[   50.489206][    T6] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   50.767538][ T1223] loop7: detected capacity change from 0 to 128
[   50.780635][ T1223] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[   50.788687][ T1223] FAT-fs (loop7): Filesystem has been set read-only
[   50.795555][ T1223] attempt to access beyond end of device
[   50.795555][ T1223] loop7: rw=16777216, want=2073, limit=128
[   50.820101][   T20] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   50.827449][   T20] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[   50.869317][    T6] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   50.878379][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.884890][ T1233] loop6: detected capacity change from 0 to 4096
[   50.894391][    T6] usb 6-1: config 0 descriptor??
[   50.914700][ T1233] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   51.029636][   T20] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[   51.040347][   T20] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   51.052335][   T20] microsoft 0003:045E:07DA.0008: no inputs found
[   51.058683][   T20] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[   51.069018][   T20] usb 4-1: USB disconnect, device number 3
[   51.096986][ T1253] fido_id[1253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   51.189219][  T691] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   51.309279][  T876] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   51.329686][ T1265] syz.6.362[1265] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.329737][ T1265] syz.6.362[1265] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.429196][  T691] usb 8-1: Using ep0 maxpacket: 8
[   51.549445][  T691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.549477][  T691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.549497][  T691] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   51.549527][  T691] usb 8-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[   51.549548][  T691] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.550530][  T691] usb 8-1: config 0 descriptor??
[   51.572019][  T876] usb 2-1: Using ep0 maxpacket: 16
[   51.646316][ T1276] netem: change failed
[   51.759267][  T876] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.770283][  T876] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.770307][  T876] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   51.770332][  T876] usb 2-1: config 0 interface 0 has no altsetting 0
[   51.770358][  T876] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   51.770378][  T876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.780844][  T876] usb 2-1: config 0 descriptor??
[   52.040082][  T691] cypress 0003:04B4:0001.0009: item fetching failed at offset 3/5
[   52.048070][  T691] cypress 0003:04B4:0001.0009: parse failed
[   52.069255][  T691] cypress: probe of 0003:04B4:0001.0009 failed with error -22
[   52.240941][  T691] usb 8-1: USB disconnect, device number 2
[   52.259250][    T6] usb 6-1: Cannot set autoneg
[   52.263995][    T6] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71
[   52.289695][    T6] usb 6-1: USB disconnect, device number 4
[   52.480141][  T691] usb 2-1: USB disconnect, device number 5
[   52.782958][ T1283] loop3: detected capacity change from 0 to 256
[   52.820510][ T1283] FAT-fs (loop3): bogus number of FAT sectors
[   52.828732][ T1283] FAT-fs (loop3): Can't find a valid FAT filesystem
[   52.951906][   T30] kauditd_printk_skb: 24 callbacks suppressed
[   52.951919][   T30] audit: type=1326 audit(1753978485.918:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.052442][   T30] audit: type=1326 audit(1753978485.948:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.106641][   T30] audit: type=1326 audit(1753978485.948:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.169637][   T30] audit: type=1326 audit(1753978485.948:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.210077][   T30] audit: type=1326 audit(1753978485.948:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.245773][   T30] audit: type=1326 audit(1753978485.948:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.269508][   T30] audit: type=1326 audit(1753978485.948:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.292829][   T30] audit: type=1326 audit(1753978485.948:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.316202][   T30] audit: type=1326 audit(1753978485.948:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.339498][   T30] audit: type=1326 audit(1753978485.948:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.6.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   53.871800][ T1352] loop6: detected capacity change from 0 to 512
[   53.885157][ T1354] loop3: detected capacity change from 0 to 1024
[   53.964452][ T1354] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   53.964843][ T1352] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   53.994581][ T1352] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.023289][ T1370] SELinux:  Context system_u:object_r:xconsole_device_t:s0 is not valid (left unmapped).
[   54.059195][  T876] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   54.109018][ T1386] loop6: detected capacity change from 0 to 256
[   54.170122][ T1386] FAT-fs (loop6): Directory bread(block 64) failed
[   54.185167][ T1386] FAT-fs (loop6): Directory bread(block 65) failed
[   54.192114][ T1386] FAT-fs (loop6): Directory bread(block 66) failed
[   54.221271][ T1386] FAT-fs (loop6): Directory bread(block 67) failed
[   54.228980][ T1386] FAT-fs (loop6): Directory bread(block 68) failed
[   54.235745][ T1386] FAT-fs (loop6): Directory bread(block 69) failed
[   54.246883][ T1386] FAT-fs (loop6): Directory bread(block 70) failed
[   54.253688][ T1386] FAT-fs (loop6): Directory bread(block 71) failed
[   54.261183][ T1386] FAT-fs (loop6): Directory bread(block 72) failed
[   54.267711][ T1386] FAT-fs (loop6): Directory bread(block 73) failed
[   54.293515][ T1401] netlink: 664 bytes leftover after parsing attributes in process `syz.1.420'.
[   54.309227][  T876] usb 6-1: Using ep0 maxpacket: 16
[   54.343597][ T1407] usb usb1: usbfs: process 1407 (syz.6.423) did not claim interface 1 before use
[   54.408316][ T1418] loop6: detected capacity change from 0 to 512
[   54.417970][ T1420] capability: warning: `syz.3.429' uses deprecated v2 capabilities in a way that may be insecure
[   54.459274][  T876] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.470459][  T876] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.481112][  T876] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   54.494386][  T876] usb 6-1: config 0 interface 0 has no altsetting 0
[   54.500204][ T1418] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   54.501067][  T876] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   54.523085][  T876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.531374][ T1418] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.532357][  T876] usb 6-1: config 0 descriptor??
[   54.683351][ T1451] SELinux: ebitmap: truncated map
[   54.691582][ T1451] SELinux: failed to load policy
[   54.734863][ T1457] netlink: 'syz.6.445': attribute type 3 has an invalid length.
[   54.899208][   T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   55.105544][ T1485] loop6: detected capacity change from 0 to 512
[   55.122128][ T1485] EXT4-fs (loop6): Test dummy encryption mode enabled
[   55.130957][ T1485] EXT4-fs error (device loop6): __ext4_iget:4925: inode #11: block 1: comm syz.6.457: invalid block
[   55.141963][ T1485] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.457: couldn't read orphan inode 11 (err -117)
[   55.153888][   T26] usb 4-1: Using ep0 maxpacket: 16
[   55.159885][ T1485] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[   55.252565][  T691] usb 6-1: USB disconnect, device number 5
[   55.279249][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.296631][   T26] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   55.306049][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.315024][   T26] usb 4-1: config 0 descriptor??
[   55.362104][ T1501] loop6: detected capacity change from 0 to 512
[   55.377154][ T1503] kvm [1502]: vcpu2, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0x0
[   55.390701][ T1501] EXT4-fs (loop6): Ignoring removed orlov option
[   55.398286][ T1501] EXT4-fs (loop6): orphan cleanup on readonly fs
[   55.406362][ T1501] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.464: bg 0: block 248: padding at end of block bitmap is not set
[   55.421030][ T1501] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.464: Failed to acquire dquot type 1
[   55.432640][ T1501] EXT4-fs (loop6): 1 truncate cleaned up
[   55.438444][ T1501] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback.
[   55.472479][ T1501] EXT4-fs (loop6): Ignoring removed orlov option
[   55.478888][ T1501] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[   55.501672][ T1501] EXT4-fs error (device loop6): ext4_remount:6024: comm syz.6.464: Abort forced by user
[   55.511844][ T1501] EXT4-fs (loop6): Remounting filesystem read-only
[   55.518365][ T1501] EXT4-fs (loop6): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,. Quota mode: writeback.
[   55.535269][ T1501] ext4 filesystem being remounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.606545][ T1515] SELinux: security policydb version 18 (MLS) not backwards compatible
[   55.615046][ T1515] SELinux: failed to load policy
[   55.686390][ T1526] loop1: detected capacity change from 0 to 1024
[   55.722424][ T1526] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   55.733447][ T1526] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   55.744645][ T1526] JBD2: no valid journal superblock found
[   55.750416][ T1526] EXT4-fs (loop1): error loading journal
[   55.791108][   T26] hid-generic 0003:04D8:00DD.000C: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[   55.804754][ T1524] loop6: detected capacity change from 0 to 40427
[   55.863650][ T1524] F2FS-fs (loop6): invalid crc value
[   55.909410][ T1524] F2FS-fs (loop6): Found nat_bits in checkpoint
[   55.938779][ T1536] syz.1.477[1536] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.938866][ T1536] syz.1.477[1536] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.974977][ T1524] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1
[   55.995121][   T26] usb 4-1: USB disconnect, device number 4
[   56.015600][ T1524] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   56.074436][   T45] attempt to access beyond end of device
[   56.074436][   T45] loop6: rw=2049, want=40984, limit=40427
[   56.086053][ T1524] VFS:Filesystem freeze failed
[   56.449212][  T876] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   56.769221][  T691] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   56.809274][  T876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.821419][  T876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.832905][  T876] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   56.841979][  T876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.850513][  T876] usb 6-1: config 0 descriptor??
[   56.894750][ T1561] SELinux: failed to load policy
[   57.019217][  T691] usb 4-1: Using ep0 maxpacket: 16
[   57.113482][ T1585] Illegal XDP return value 4294967274, expect packet loss!
[   57.149354][  T691] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.160457][  T691] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.170302][  T691] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   57.183300][  T691] usb 4-1: config 0 interface 0 has no altsetting 0
[   57.190059][  T691] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   57.199078][  T691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.207806][  T691] usb 4-1: config 0 descriptor??
[   57.320600][  T876] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[   57.333347][  T876] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[   57.409229][  T876] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected
[   57.446166][ T1604] netem: change failed
[   57.527985][    T6] usb 6-1: USB disconnect, device number 6
[   57.545777][    T6] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected
[   57.574666][ T1613] loop6: detected capacity change from 0 to 512
[   57.631440][ T1613] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   57.642707][ T1613] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.670257][ T1613] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #2: comm syz.6.511: corrupted inode contents
[   57.682139][ T1613] EXT4-fs error (device loop6): ext4_dirty_inode:6071: inode #2: comm syz.6.511: mark_inode_dirty error
[   57.693571][ T1613] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #2: comm syz.6.511: corrupted inode contents
[   57.710053][ T1613] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.511: mark_inode_dirty error
[   57.726062][ T1613] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   57.736110][ T1613] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #2: comm syz.6.511: corrupted inode contents
[   57.747953][ T1613] EXT4-fs error (device loop6): ext4_dirty_inode:6071: inode #2: comm syz.6.511: mark_inode_dirty error
[   57.759504][ T1613] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #2: comm syz.6.511: corrupted inode contents
[   57.906106][   T26] usb 4-1: USB disconnect, device number 5
[   57.953412][ T1635] loop6: detected capacity change from 0 to 512
[   57.973501][   T30] kauditd_printk_skb: 143 callbacks suppressed
[   57.973516][   T30] audit: type=1400 audit(1753978490.938:544): avc:  denied  { write } for  pid=1638 comm="syz.1.522" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.016038][   T30] audit: type=1400 audit(1753978490.938:545): avc:  denied  { ioctl } for  pid=1638 comm="syz.1.522" path="/dev/input/event2" dev="devtmpfs" ino=270 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.016152][ T1635] EXT4-fs (loop6): orphan cleanup on readonly fs
[   58.042319][ T1635] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.520: bad orphan inode 13
[   58.071721][ T1635] ext4_test_bit(bit=12, block=18) = 1
[   58.077144][ T1635] is_bad_inode(inode)=0
[   58.081366][ T1635] NEXT_ORPHAN(inode)=2130706432
[   58.086421][ T1635] max_ino=32
[   58.089708][ T1635] i_nlink=1
[   58.092917][ T1635] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   58.109620][ T1635] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[   58.130627][ T1648] loop1: detected capacity change from 0 to 512
[   58.146090][ T1635] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.520: bg 0: block 248: padding at end of block bitmap is not set
[   58.162292][ T1635] Quota error (device loop6): write_blk: dquota write failed
[   58.170501][ T1635] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[   58.180474][ T1635] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.520: Failed to acquire dquot type 1
[   58.193378][ T1648] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   58.204613][ T1648] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.209316][ T1635] EXT4-fs warning (device loop6): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.231935][ T1648] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.526: corrupted inode contents
[   58.243989][ T1648] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #2: comm syz.1.526: mark_inode_dirty error
[   58.255577][ T1648] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.526: corrupted inode contents
[   58.267507][ T1648] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.526: mark_inode_dirty error
[   58.284261][ T1648] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.526: corrupted inode contents
[   58.301973][ T1648] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #2: comm syz.1.526: mark_inode_dirty error
[   58.314852][ T1648] EXT4-fs error (device loop1): ext4_do_update_inode:5235: inode #2: comm syz.1.526: corrupted inode contents
[   58.348605][ T1663] netlink: 'syz.6.532': attribute type 27 has an invalid length.
[   58.358731][   T30] audit: type=1326 audit(1753978491.318:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff5de4b69 code=0x7ffc0000
[   58.382093][   T30] audit: type=1326 audit(1753978491.318:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7feff5de4b69 code=0x7ffc0000
[   58.406828][   T30] audit: type=1326 audit(1753978491.318:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff5de4b69 code=0x7ffc0000
[   58.436575][   T30] audit: type=1326 audit(1753978491.348:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.5.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff5de4b69 code=0x7ffc0000
[   58.463835][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.471085][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.573209][ T1666] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.580297][ T1666] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.589060][ T1666] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.596120][ T1666] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.609755][ T1666] device veth0_vlan left promiscuous mode
[   58.616025][ T1666] device veth0_vlan entered promiscuous mode
[   58.623799][ T1666] device veth1_macvtap left promiscuous mode
[   58.630674][ T1666] device veth1_macvtap entered promiscuous mode
[   58.637657][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[   58.645111][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.652813][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.660654][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.674808][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.675073][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.675319][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.675551][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.675779][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.676007][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.676245][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.676730][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.677017][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   58.691604][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.691816][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   58.692136][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.692326][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.692351][ T1666] syz.6.532 (1666) used greatest stack depth: 19808 bytes left
[   58.692502][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.692682][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.692845][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.119250][  T352] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   59.479341][  T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.490278][  T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.500048][  T352] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   59.509069][  T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.518129][  T352] usb 4-1: config 0 descriptor??
[   60.000524][  T352] hid-steam 0003:28DE:1142.0010: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[   60.012686][  T352] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[   60.089283][  T352] hid-steam 0003:28DE:1142.0010: Steam wireless receiver connected
[   60.205652][  T352] usb 4-1: USB disconnect, device number 6
[   60.212400][  T352] hid-steam 0003:28DE:1142.0010: Steam wireless receiver disconnected
[   63.389783][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   64.686442][   T30] audit: type=1400 audit(1753978497.648:550): avc:  denied  { mounton } for  pid=1697 comm="syz.5.547" path="/proc/130/task" dev="proc" ino=23147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   64.741239][ T1708] netlink: 'syz.3.550': attribute type 27 has an invalid length.
[   64.761459][ T1708] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.768586][ T1708] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.820579][ T1710] device veth0_vlan left promiscuous mode
[   64.826605][ T1710] device veth0_vlan entered promiscuous mode
[   64.833811][ T1710] device veth1_macvtap left promiscuous mode
[   64.840669][ T1710] device veth1_macvtap entered promiscuous mode
[   64.849274][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.856928][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.864436][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.873219][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.880278][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.887848][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.896295][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.904709][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.911755][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.928123][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.936598][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   64.944865][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.953101][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   64.961530][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.969728][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.978144][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.989207][  T876] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   64.995072][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.007294][ T1714] serio: Serial port ptm0
[   65.012092][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.020736][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.029403][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.037772][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.053619][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.065996][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.074602][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.084606][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.092793][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.101355][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.110730][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.123781][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.131982][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.140246][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.147654][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.167313][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.183522][   T30] audit: type=1326 audit(1753978498.148:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   65.207088][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.216566][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.229468][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.252495][   T30] audit: type=1326 audit(1753978498.148:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   65.279344][  T876] usb 8-1: Using ep0 maxpacket: 16
[   65.286622][   T30] audit: type=1326 audit(1753978498.148:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   65.311874][   T30] audit: type=1326 audit(1753978498.148:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   65.335420][   T30] audit: type=1326 audit(1753978498.188:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   65.374417][ T1740] syz.5.561[1740] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   65.374505][ T1740] syz.5.561[1740] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   65.385902][   T30] audit: type=1326 audit(1753978498.208:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   65.421045][   T30] audit: type=1326 audit(1753978498.208:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   65.449297][  T876] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.466934][  T876] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.475875][   T30] audit: type=1326 audit(1753978498.208:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafb4d1b69 code=0x7ffc0000
[   65.499937][  T876] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   65.499965][  T876] usb 8-1: config 0 interface 0 has no altsetting 0
[   65.499989][  T876] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   65.513503][   T30] audit: type=1326 audit(1753978498.208:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1730 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbafb4d061f code=0x7ffc0000
[   65.528786][  T876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.580502][  T876] usb 8-1: config 0 descriptor??
[   65.592776][ T1753] loop5: detected capacity change from 0 to 128
[   65.620523][ T1753] attempt to access beyond end of device
[   65.620523][ T1753] loop5: rw=0, want=1041, limit=128
[   65.740150][ T1755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'.
[   65.790271][ T1759] serio: Serial port ptm0
[   66.079198][  T352] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   66.263990][    T6] usb 8-1: USB disconnect, device number 3
[   66.339182][  T352] usb 6-1: Using ep0 maxpacket: 32
[   66.459245][  T352] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.470548][  T352] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   66.483655][  T352] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.490324][  T352] usb 6-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00
[   66.499355][  T352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.507875][  T352] usb 6-1: config 0 descriptor??
[   66.841659][  T691] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[   66.851217][ T1795] loop3: detected capacity change from 0 to 128
[   66.859784][  T691] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   66.943428][ T1795] attempt to access beyond end of device
[   66.943428][ T1795] loop3: rw=0, want=1041, limit=128
[   66.992249][  T352] saitek 0003:0738:1705.0014: unknown main item tag 0x2
[   67.002617][  T352] saitek 0003:0738:1705.0014: hidraw0: USB HID v0.00 Device [HID 0738:1705] on usb-dummy_hcd.5-1/input0
[   67.197246][  T691] usb 6-1: USB disconnect, device number 7
[   67.232862][ T1812] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   67.253930][ T1813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'.
[   67.255746][ T1810] serio: Serial port ptm0
[   67.487461][   T20] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[   67.495881][   T20] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   67.679210][  T691] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   67.796218][ T1846] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   67.929193][  T691] usb 4-1: Using ep0 maxpacket: 16
[   68.049275][  T691] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.060285][  T691] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.070147][  T691] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   68.083125][  T691] usb 4-1: config 0 interface 0 has no altsetting 0
[   68.089757][  T691] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   68.098778][  T691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.107354][  T691] usb 4-1: config 0 descriptor??
[   68.801822][   T20] usb 4-1: USB disconnect, device number 7
[   69.205408][ T1853] serio: Serial port ptm0
[   69.384878][ T1877] netlink: 'syz.5.621': attribute type 27 has an invalid length.
[   69.426160][ T1877] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.433515][ T1877] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.509281][   T26] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   69.571401][ T1884] device veth0_vlan left promiscuous mode
[   69.577631][ T1884] device veth0_vlan entered promiscuous mode
[   69.584876][ T1884] device veth1_macvtap left promiscuous mode
[   69.591615][ T1884] device veth1_macvtap entered promiscuous mode
[   69.600637][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.608765][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.616784][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.625369][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.632424][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.649550][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.658025][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.669491][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.676633][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.684566][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.692757][   T30] kauditd_printk_skb: 20 callbacks suppressed
[   69.692769][   T30] audit: type=1326 audit(1753978502.658:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce0d7b69 code=0x7ffc0000
[   69.693209][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   69.701423][   T30] audit: type=1326 audit(1753978502.658:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49ce0d661f code=0x7ffc0000
[   69.722577][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.760860][   T30] audit: type=1326 audit(1753978502.698:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce0d7b69 code=0x7ffc0000
[   69.761353][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   69.792071][   T26] usb 7-1: Using ep0 maxpacket: 32
[   69.797550][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.806056][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.814414][   T30] audit: type=1326 audit(1753978502.718:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1901 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ce0d7b69 code=0x7ffc0000
[   69.815303][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.845937][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.854350][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.862844][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.871316][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.879698][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.887891][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.896252][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.904298][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.912340][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.920357][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.928357][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.936533][   T26] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.945155][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.947651][   T26] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   69.956059][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.968891][   T26] usb 7-1: config 0 interface 0 has no altsetting 0
[   69.976974][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.982964][   T26] usb 7-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00
[   69.991209][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.999866][   T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.007495][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.016165][   T26] usb 7-1: config 0 descriptor??
[   70.027391][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.035627][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.043874][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.051469][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.080616][   T30] audit: type=1326 audit(1753978503.048:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326fab3b69 code=0x7ffc0000
[   70.110098][   T30] audit: type=1326 audit(1753978503.068:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326fab3b69 code=0x7ffc0000
[   70.138358][   T30] audit: type=1326 audit(1753978503.068:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326fab3b69 code=0x7ffc0000
[   70.162282][   T30] audit: type=1326 audit(1753978503.068:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326fab3b69 code=0x7ffc0000
[   70.186193][   T30] audit: type=1326 audit(1753978503.078:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326fab3b69 code=0x7ffc0000
[   70.209880][   T30] audit: type=1326 audit(1753978503.078:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1905 comm="syz.7.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326fab3b69 code=0x7ffc0000
[   70.234341][ T1907] serio: Serial port ptm0
[   70.390311][ T1928] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.401456][ T1928] FAT-fs (loop11): unable to read boot sector
[   70.480717][   T26] saitek 0003:0738:1705.0017: unknown main item tag 0x2
[   70.493061][   T26] saitek 0003:0738:1705.0017: hidraw0: USB HID v0.00 Device [HID 0738:1705] on usb-dummy_hcd.6-1/input0
[   70.593171][ T1953] loop5: detected capacity change from 0 to 512
[   70.603319][ T1954] tipc: Started in network mode
[   70.608220][ T1954] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   70.617225][ T1954] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   70.625622][ T1954] tipc: Enabled bearer <udp:s>, priority 10
[   70.644765][ T1953] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   70.656666][ T1953] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.702909][   T26] usb 7-1: USB disconnect, device number 4
[   70.746898][ T1969] netlink: 96 bytes leftover after parsing attributes in process `syz.5.659'.
[   70.960398][ T1990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'.
[   71.032543][ T2002] sch_fq: defrate 0 ignored.
[   71.299611][ T2032] netlink: 96 bytes leftover after parsing attributes in process `syz.6.688'.
[   71.348248][ T2037] sch_fq: defrate 0 ignored.
[   71.499611][ T2052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2052 comm=syz.6.701
[   71.519096][ T2052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2052 comm=syz.6.701
[   71.520237][    T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   71.739543][  T691] tipc: Node number set to 1
[   71.789246][    T6] usb 4-1: Using ep0 maxpacket: 32
[   71.909246][    T6] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.920393][    T6] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   71.933406][    T6] usb 4-1: config 0 interface 0 has no altsetting 0
[   71.940049][    T6] usb 4-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00
[   71.949126][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.957905][    T6] usb 4-1: config 0 descriptor??
[   72.414876][ T2079] loop5: detected capacity change from 0 to 512
[   72.423518][ T2080] loop1: detected capacity change from 0 to 512
[   72.430063][  T691] Bluetooth: hci0: command 0x1003 tx timeout
[   72.430212][    T6] saitek 0003:0738:1705.0018: unknown main item tag 0x2
[   72.436155][   T47] Bluetooth: hci0: sending frame failed (-49)
[   72.445201][    T6] saitek 0003:0738:1705.0018: hidraw0: USB HID v0.00 Device [HID 0738:1705] on usb-dummy_hcd.3-1/input0
[   72.471031][ T2079] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   72.490199][ T2079] EXT4-fs (loop5): 1 truncate cleaned up
[   72.501105][ T2079] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   72.512921][ T2080] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   72.528332][ T2080] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.529897][ T2079] EXT4-fs (loop5): shut down requested (2)
[   72.611820][ T2094] netlink: 104 bytes leftover after parsing attributes in process `syz.5.713'.
[   72.659369][  T352] usb 4-1: USB disconnect, device number 8
[   72.678080][ T2103] syz.1.718[2103] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   72.678125][ T2103] syz.1.718[2103] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   72.690904][ T2103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'.
[   72.712137][ T2103] device dummy0 entered promiscuous mode
[   72.889327][    T6] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   72.929307][  T691] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   73.129187][    T6] usb 7-1: Using ep0 maxpacket: 32
[   73.249326][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.260371][    T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.270120][    T6] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   73.279194][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.287649][    T6] usb 7-1: config 0 descriptor??
[   73.299256][  T691] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   73.309312][  T691] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   73.329801][    T6] hub 7-1:0.0: USB hub found
[   73.479231][  T691] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   73.488340][  T691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.496359][  T691] usb 6-1: Product: syz
[   73.500985][  T691] usb 6-1: Manufacturer: syz
[   73.505568][  T691] usb 6-1: SerialNumber: syz
[   73.510907][  T691] usb 6-1: config 0 descriptor??
[   73.529255][ T2101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   73.536389][ T2101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   73.543450][    T6] hub 7-1:0.0: 1 port detected
[   73.751232][ T2101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   73.758268][ T2101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   74.189496][    T6] hub 7-1:0.0: activate --> -90
[   74.509217][  T876] Bluetooth: hci0: command 0x1001 tx timeout
[   74.515424][   T47] Bluetooth: hci0: sending frame failed (-49)
[   74.609718][    T6] usb 7-1: USB disconnect, device number 5
[   75.039285][  T691] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[   75.049711][  T691] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00
[   75.062895][  T691] usb 6-1: USB disconnect, device number 8
[   75.070686][  T691] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet
[   75.307053][ T2121] loop6: detected capacity change from 0 to 512
[   75.345489][ T2121] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   75.357050][ T2121] EXT4-fs (loop6): 1 truncate cleaned up
[   75.362803][ T2121] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   75.380257][ T2121] EXT4-fs (loop6): shut down requested (2)
[   75.399254][    T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   75.450849][ T2127] netlink: 24 bytes leftover after parsing attributes in process `syz.6.730'.
[   75.571583][ T2129] loop5: detected capacity change from 0 to 40427
[   75.614674][ T2129] F2FS-fs (loop5): Found nat_bits in checkpoint
[   75.639204][    T6] usb 2-1: Using ep0 maxpacket: 32
[   75.650412][ T2129] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[   75.657319][ T2129] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   75.692874][  T572] attempt to access beyond end of device
[   75.692874][  T572] loop5: rw=524288, want=45072, limit=40427
[   75.704482][  T572] attempt to access beyond end of device
[   75.704482][  T572] loop5: rw=0, want=45072, limit=40427
[   75.730083][   T45] attempt to access beyond end of device
[   75.730083][   T45] loop5: rw=2049, want=41056, limit=40427
[   75.759288][    T6] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.770549][    T6] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   75.783684][    T6] usb 2-1: config 0 interface 0 has no altsetting 0
[   75.790423][    T6] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00
[   75.799593][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.807832][   T45] tipc: Disabling bearer <udp:s>
[   75.808743][    T6] usb 2-1: config 0 descriptor??
[   75.816630][   T45] tipc: Left network mode
[   75.975103][ T2139] loop6: detected capacity change from 0 to 1024
[   76.020843][ T2139] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   76.038392][ T2139] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   76.239316][   T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   76.280267][    T6] saitek 0003:0738:1705.0019: unknown main item tag 0x2
[   76.287949][    T6] saitek 0003:0738:1705.0019: hidraw0: USB HID v0.00 Device [HID 0738:1705] on usb-dummy_hcd.1-1/input0
[   76.300988][   T45] device bridge_slave_1 left promiscuous mode
[   76.307142][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.314925][   T45] device bridge_slave_0 left promiscuous mode
[   76.321144][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.329578][   T45] device veth1_macvtap left promiscuous mode
[   76.335616][   T45] device veth0_vlan left promiscuous mode
[   76.479331][   T60] usb 4-1: Using ep0 maxpacket: 32
[   76.490994][    T6] usb 2-1: USB disconnect, device number 6
[   76.589318][  T691] Bluetooth: hci0: command 0x1009 tx timeout
[   76.599307][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.610257][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.620003][   T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   76.629026][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.637977][   T60] usb 4-1: config 0 descriptor??
[   76.679908][   T60] hub 4-1:0.0: USB hub found
[   76.899242][   T60] hub 4-1:0.0: 1 port detected
[   77.549315][   T60] hub 4-1:0.0: activate --> -90
[   77.969980][   T20] usb 4-1: USB disconnect, device number 9
[   80.770265][ T2160] loop1: detected capacity change from 0 to 512
[   80.801439][ T2157] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.808535][ T2157] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.816197][ T2157] device bridge_slave_0 entered promiscuous mode
[   80.823953][ T2157] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.831322][ T2157] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.838731][ T2157] device bridge_slave_1 entered promiscuous mode
[   80.855605][ T2160] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   80.873350][ T2160] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   80.892985][ T2160] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   80.959186][   T20] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   80.985983][ T2157] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.993064][ T2157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.000355][ T2157] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.007398][ T2157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.028441][ T2183] xt_hashlimit: max too large, truncated to 1048576
[   81.046623][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.056380][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.068481][ T2187] x_tables: duplicate underflow at hook 4
[   81.074518][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.087786][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.114503][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.128086][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.135204][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.146107][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.154434][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.161496][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.169111][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.177233][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.190000][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.206011][ T2157] device veth0_vlan entered promiscuous mode
[   81.215280][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.226248][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.237475][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.259604][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.274796][ T2157] device veth1_macvtap entered promiscuous mode
[   81.288607][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.306557][  T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.319263][   T20] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   81.325568][   T30] kauditd_printk_skb: 63 callbacks suppressed
[   81.325582][   T30] audit: type=1400 audit(1753978514.288:653): avc:  denied  { mounton } for  pid=2157 comm="syz-executor" path="/root/syzkaller.8YLsZV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   81.335140][   T20] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   81.509281][   T20] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   81.518491][   T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.527040][   T20] usb 7-1: Product: syz
[   81.531564][   T20] usb 7-1: Manufacturer: syz
[   81.536288][   T20] usb 7-1: SerialNumber: syz
[   81.547055][   T20] usb 7-1: config 0 descriptor??
[   81.569361][ T2151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   81.576403][ T2151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   81.779235][   T60] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   81.791618][ T2151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   81.806951][ T2151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   81.993566][ T2248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2248 comm=syz.3.774
[   82.006014][ T2248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2248 comm=syz.3.774
[   82.019195][   T60] usb 6-1: Using ep0 maxpacket: 32
[   82.129874][   T30] audit: type=1326 audit(1753978515.098:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2255 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   82.153262][   T60] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[   82.164007][   T30] audit: type=1326 audit(1753978515.098:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2255 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   82.187862][   T30] audit: type=1326 audit(1753978515.098:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2255 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   82.191818][   T60] usb 6-1: config 0 has no interface number 0
[   82.218915][   T60] usb 6-1: config 0 interface 184 has no altsetting 0
[   82.221998][   T30] audit: type=1326 audit(1753978515.098:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2255 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   82.257330][   T30] audit: type=1326 audit(1753978515.098:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2255 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   82.281244][   T30] audit: type=1326 audit(1753978515.098:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2255 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   82.306972][   T30] audit: type=1326 audit(1753978515.128:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2255 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2faeab2b69 code=0x7ffc0000
[   82.400262][  T349] tipc: Disabling bearer <udp:s>
[   82.405330][  T349] tipc: Left network mode
[   82.459298][   T60] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   82.471563][   T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.499442][ T2279] netlink: 96 bytes leftover after parsing attributes in process `syz.7.803'.
[   82.504746][   T60] usb 6-1: Product: syz
[   82.514949][   T60] usb 6-1: Manufacturer: syz
[   82.519741][   T60] usb 6-1: SerialNumber: syz
[   82.526151][   T60] usb 6-1: config 0 descriptor??
[   82.579621][   T60] smsc75xx v1.0.0
[   82.649895][ T2284] loop7: detected capacity change from 0 to 16
[   82.662031][ T2284] erofs: (device loop7): mounted with root inode @ nid 36.
[   82.671234][ T2282] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.678407][ T2282] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.686172][ T2282] device bridge_slave_0 entered promiscuous mode
[   82.701046][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 87 @ nid 36
[   82.711928][ T2282] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.718999][ T2282] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.727306][ T2282] device bridge_slave_1 entered promiscuous mode
[   82.734175][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 86 @ nid 36
[   82.743415][ T2284] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   82.760526][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 83 @ nid 36
[   82.773543][ T2284] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   82.783144][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 82 @ nid 36
[   82.792262][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 81 @ nid 36
[   82.802032][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 80 @ nid 36
[   82.811328][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 79 @ nid 36
[   82.820539][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 78 @ nid 36
[   82.829820][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 77 @ nid 36
[   82.838901][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 76 @ nid 36
[   82.848000][ T2284] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   82.857348][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 75 @ nid 36
[   82.866444][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 74 @ nid 36
[   82.875504][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 73 @ nid 36
[   82.884677][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 72 @ nid 36
[   82.893895][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 71 @ nid 36
[   82.903064][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 70 @ nid 36
[   82.915129][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 61 @ nid 36
[   82.924244][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 60 @ nid 36
[   82.933399][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 59 @ nid 36
[   82.942496][ T2284] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   82.951901][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 58 @ nid 36
[   82.961068][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 57 @ nid 36
[   82.970774][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 56 @ nid 36
[   82.979863][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 55 @ nid 36
[   82.988943][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 54 @ nid 36
[   82.998373][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 53 @ nid 36
[   83.007635][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 52 @ nid 36
[   83.016884][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 51 @ nid 36
[   83.026012][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 50 @ nid 36
[   83.035189][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 49 @ nid 36
[   83.044439][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 48 @ nid 36
[   83.053723][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 47 @ nid 36
[   83.062830][ T2284] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   83.072245][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 46 @ nid 36
[   83.072317][   T20] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[   83.081671][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 45 @ nid 36
[   83.099222][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 44 @ nid 36
[   83.108260][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 43 @ nid 36
[   83.117466][ T2284] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   83.126950][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 42 @ nid 36
[   83.128830][   T20] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00
[   83.136467][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 41 @ nid 36
[   83.152445][   T20] usb 7-1: USB disconnect, device number 6
[   83.158829][ T2284] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   83.170624][   T20] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet
[   83.173455][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 40 @ nid 36
[   83.192593][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 39 @ nid 36
[   83.201763][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 38 @ nid 36
[   83.202071][  T349] device bridge_slave_1 left promiscuous mode
[   83.211824][ T2284] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   83.226486][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   83.229426][  T349] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.244940][  T349] device bridge_slave_0 left promiscuous mode
[   83.251152][  T349] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.251862][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 31 @ nid 36
[   83.267349][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   83.268297][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 27 @ nid 36
[   83.285635][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 26 @ nid 36
[   83.285681][  T349] device veth1_macvtap left promiscuous mode
[   83.294989][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 25 @ nid 36
[   83.300714][  T349] device veth0_vlan left promiscuous mode
[   83.315533][ T2284] erofs: (device loop7): z_erofs_readahead: readahead error at page 24 @ nid 36
[   83.324888][ T2284] attempt to access beyond end of device
[   83.324888][ T2284] loop7: rw=524288, want=848, limit=16
[   83.336196][ T2284] attempt to access beyond end of device
[   83.336196][ T2284] loop7: rw=524288, want=13478624104, limit=16
[   83.348033][ T2284] attempt to access beyond end of device
[   83.348033][ T2284] loop7: rw=524288, want=13478624080, limit=16
[   83.359788][ T2284] attempt to access beyond end of device
[   83.359788][ T2284] loop7: rw=524288, want=96, limit=16
[   83.370811][ T2284] attempt to access beyond end of device
[   83.370811][ T2284] loop7: rw=524288, want=32, limit=16
[   83.381749][ T2284] attempt to access beyond end of device
[   83.381749][ T2284] loop7: rw=524288, want=14425508776, limit=16
[   83.434418][   T30] audit: type=1400 audit(1753978516.398:661): avc:  denied  { search } for  pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.456170][   T30] audit: type=1400 audit(1753978516.398:662): avc:  denied  { read } for  pid=140 comm="dhcpcd" name="n17" dev="tmpfs" ino=4776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   83.518511][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.531338][ T2307] loop1: detected capacity change from 0 to 512
[   83.543309][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.557661][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.572888][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.581431][  T386] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.588475][  T386] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.598335][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.600672][ T2307] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   83.606958][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.627114][  T386] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.634188][  T386] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.641963][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.649783][ T2307] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.660998][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.681198][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.705968][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.720698][ T2282] device veth0_vlan entered promiscuous mode
[   83.727261][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.739245][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[   83.747221][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.751316][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[   83.767970][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   83.777598][   T60] smsc75xx: probe of 6-1:0.184 failed with error -71
[   83.786164][   T60] usb 6-1: USB disconnect, device number 9
[   83.794995][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.802921][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.818855][ T2282] device veth1_macvtap entered promiscuous mode
[   83.843513][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.858016][ T2334] loop7: detected capacity change from 0 to 4096
[   83.859568][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.897715][ T2334] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   83.911320][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.929286][   T20] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   83.933613][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.037395][ T2356] syz.1.807[2356] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.037457][ T2356] syz.1.807[2356] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.067655][ T2360] loop7: detected capacity change from 0 to 256
[   84.125299][ T2360] exFAT-fs (loop7): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   84.144506][ T2360] exFAT-fs (loop7): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5)
[   84.156183][ T2360] exFAT-fs (loop7): Filesystem has been set read-only
[   84.282266][ T2377] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   84.289267][   T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.301129][ T2377] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   84.307748][   T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.320934][   T20] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   84.330365][   T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.338971][   T20] usb 7-1: config 0 descriptor??
[   84.359278][ T2387] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   84.378934][ T2390] loop8: detected capacity change from 0 to 256
[   84.417521][ T2390] FAT-fs (loop8): bogus number of FAT sectors
[   84.427048][ T2390] FAT-fs (loop8): Can't find a valid FAT filesystem
[   84.549194][  T352] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   84.571736][ T2408] loop8: detected capacity change from 0 to 512
[   84.611023][ T2408] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   84.623418][ T2408] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.879218][    T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   84.910733][  T352] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   84.920811][  T352] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   85.079254][  T352] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   85.079283][  T352] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.079301][  T352] usb 8-1: Product: syz
[   85.079313][  T352] usb 8-1: Manufacturer: syz
[   85.079325][  T352] usb 8-1: SerialNumber: syz
[   85.084024][  T352] usb 8-1: config 0 descriptor??
[   85.129254][ T2384] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   85.129281][ T2384] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   85.139377][    T6] usb 2-1: Using ep0 maxpacket: 32
[   85.149734][   T20] usb 7-1: language id specifier not provided by device, defaulting to English
[   85.259221][    T6] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   85.259245][    T6] usb 2-1: config 0 has no interface number 0
[   85.259269][    T6] usb 2-1: config 0 interface 184 has no altsetting 0
[   85.350891][ T2384] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   85.350921][ T2384] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   85.389743][   T20] uclogic 0003:256C:006D.001A: failed retrieving Huion firmware version: -71
[   85.389773][   T20] uclogic 0003:256C:006D.001A: failed probing parameters: -71
[   85.389806][   T20] uclogic: probe of 0003:256C:006D.001A failed with error -71
[   85.391549][   T20] usb 7-1: USB disconnect, device number 7
[   85.419665][    T6] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   85.428702][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.428722][    T6] usb 2-1: Product: syz
[   85.428735][    T6] usb 2-1: Manufacturer: syz
[   85.428748][    T6] usb 2-1: SerialNumber: syz
[   85.431230][    T6] usb 2-1: config 0 descriptor??
[   85.489544][    T6] smsc75xx v1.0.0
[   85.597345][ T2437] xt_hashlimit: max too large, truncated to 1048576
[   85.879548][ T2445] loop6: detected capacity change from 0 to 512
[   85.919273][   T20] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[   85.930568][ T2445] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   85.942945][ T2445] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.149208][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   86.160110][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   86.279209][   T20] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   86.287949][   T20] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   86.298103][  T286] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   86.305589][   T20] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[   86.469445][   T20] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.478545][   T20] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.486619][   T20] usb 9-1: Product: syz
[   86.490897][   T20] usb 9-1: Manufacturer: syz
[   86.495478][   T20] usb 9-1: SerialNumber: syz
[   86.549268][  T286] usb 7-1: Using ep0 maxpacket: 16
[   86.609261][  T352] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[   86.621180][  T352] dm9601 8-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00
[   86.633559][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[   86.647180][  T352] usb 8-1: USB disconnect, device number 4
[   86.653532][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[   86.667184][  T352] dm9601 8-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet
[   86.677842][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   86.687407][  T286] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.702097][  T286] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.712204][    T6] smsc75xx: probe of 2-1:0.184 failed with error -71
[   86.720407][    T6] usb 2-1: USB disconnect, device number 7
[   86.733575][  T286] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   86.751431][  T286] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   86.760719][  T286] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.772850][  T286] usb 7-1: config 0 descriptor??
[   86.777890][ T1190] ==================================================================
[   86.785963][ T1190] BUG: KASAN: use-after-free in worker_thread+0xa2e/0x1200
[   86.793191][ T1190] Read of size 8 at addr ffff88810a84ac60 by task kworker/0:6/1190
[   86.801101][ T1190] 
[   86.803457][ T1190] CPU: 0 PID: 1190 Comm: kworker/0:6 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0
[   86.813450][ T1190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   86.823516][ T1190] Workqueue:  0x0 (wg-crypt-wg1)
[   86.828493][ T1190] Call Trace:
[   86.831776][ T1190]  <TASK>
[   86.834722][ T1190]  __dump_stack+0x21/0x30
[   86.839071][ T1190]  dump_stack_lvl+0xee/0x150
[   86.843673][ T1190]  ? show_regs_print_info+0x20/0x20
[   86.848887][ T1190]  ? load_image+0x3a0/0x3a0
[   86.853411][ T1190]  ? __schedule+0xb76/0x14c0
[   86.858016][ T1190]  print_address_description+0x7f/0x2c0
[   86.863570][ T1190]  ? worker_thread+0xa2e/0x1200
[   86.868447][ T1190]  kasan_report+0xf1/0x140
[   86.872874][ T1190]  ? worker_thread+0xa2e/0x1200
[   86.877717][ T1190]  __asan_report_load8_noabort+0x14/0x20
[   86.883338][ T1190]  worker_thread+0xa2e/0x1200
[   86.888010][ T1190]  ? _raw_spin_lock_irqsave+0xb0/0x110
[   86.893463][ T1190]  kthread+0x411/0x500
[   86.897525][ T1190]  ? worker_clr_flags+0x190/0x190
[   86.902532][ T1190]  ? kthread_blkcg+0xd0/0xd0
[   86.907128][ T1190]  ret_from_fork+0x1f/0x30
[   86.911532][ T1190]  </TASK>
[   86.914535][ T1190] 
[   86.916840][ T1190] Allocated by task 352:
[   86.921063][ T1190]  __kasan_kmalloc+0xda/0x110
[   86.925737][ T1190]  __kmalloc+0x13d/0x2c0
[   86.929963][ T1190]  kvmalloc_node+0x206/0x300
[   86.934534][ T1190]  alloc_netdev_mqs+0x8d/0xc90
[   86.939283][ T1190]  alloc_etherdev_mqs+0x34/0x40
[   86.944126][ T1190]  usbnet_probe+0x219/0x2860
[   86.948699][ T1190]  usb_probe_interface+0x5ff/0xae0
[   86.953798][ T1190]  really_probe+0x285/0x970
[   86.958288][ T1190]  __driver_probe_device+0x198/0x280
[   86.963556][ T1190]  driver_probe_device+0x54/0x3e0
[   86.968771][ T1190]  __device_attach_driver+0x2a6/0x460
[   86.974126][ T1190]  bus_for_each_drv+0x175/0x200
[   86.978986][ T1190]  __device_attach+0x2a2/0x400
[   86.983735][ T1190]  device_initial_probe+0x1a/0x20
[   86.988746][ T1190]  bus_probe_device+0xc0/0x1e0
[   86.993494][ T1190]  device_add+0xb31/0xed0
[   86.997812][ T1190]  usb_set_configuration+0x19c2/0x1f10
[   87.003254][ T1190]  usb_generic_driver_probe+0x91/0x150
[   87.008717][ T1190]  usb_probe_device+0x148/0x260
[   87.013554][ T1190]  really_probe+0x285/0x970
[   87.018054][ T1190]  __driver_probe_device+0x198/0x280
[   87.023328][ T1190]  driver_probe_device+0x54/0x3e0
[   87.028339][ T1190]  __device_attach_driver+0x2a6/0x460
[   87.033704][ T1190]  bus_for_each_drv+0x175/0x200
[   87.038551][ T1190]  __device_attach+0x2a2/0x400
[   87.043309][ T1190]  device_initial_probe+0x1a/0x20
[   87.048325][ T1190]  bus_probe_device+0xc0/0x1e0
[   87.053078][ T1190]  device_add+0xb31/0xed0
[   87.057399][ T1190]  usb_new_device+0xd06/0x1620
[   87.062153][ T1190]  hub_event+0x27d8/0x42c0
[   87.066557][ T1190]  process_one_work+0x6be/0xba0
[   87.071404][ T1190]  worker_thread+0xa59/0x1200
[   87.076074][ T1190]  kthread+0x411/0x500
[   87.080136][ T1190]  ret_from_fork+0x1f/0x30
[   87.084542][ T1190] 
[   87.086864][ T1190] Freed by task 352:
[   87.090744][ T1190]  kasan_set_track+0x4a/0x70
[   87.095324][ T1190]  kasan_set_free_info+0x23/0x40
[   87.100251][ T1190]  ____kasan_slab_free+0x125/0x160
[   87.105351][ T1190]  __kasan_slab_free+0x11/0x20
[   87.110102][ T1190]  slab_free_freelist_hook+0xc2/0x190
[   87.115466][ T1190]  kfree+0xc4/0x270
[   87.119262][ T1190]  kvfree+0x35/0x40
[   87.123065][ T1190]  netdev_freemem+0x3f/0x60
[   87.127554][ T1190]  netdev_release+0x7f/0xb0
[   87.132059][ T1190]  device_release+0x96/0x1c0
[   87.136636][ T1190]  kobject_put+0x18a/0x270
[   87.141039][ T1190]  put_device+0x1f/0x30
[   87.145183][ T1190]  free_netdev+0x34b/0x450
[   87.149588][ T1190]  usbnet_disconnect+0x24b/0x3a0
[   87.154515][ T1190]  usb_unbind_interface+0x212/0x8c0
[   87.159713][ T1190]  device_release_driver_internal+0x4c1/0x760
[   87.165766][ T1190]  device_release_driver+0x19/0x20
[   87.170863][ T1190]  bus_remove_device+0x2dd/0x340
[   87.175895][ T1190]  device_del+0x696/0xe90
[   87.180230][ T1190]  usb_disable_device+0x3a8/0x750
[   87.185241][ T1190]  usb_disconnect+0x31e/0x850
[   87.189909][ T1190]  hub_event+0x190c/0x42c0
[   87.194403][ T1190]  process_one_work+0x6be/0xba0
[   87.199243][ T1190]  worker_thread+0xd7b/0x1200
[   87.203912][ T1190]  kthread+0x411/0x500
[   87.207977][ T1190]  ret_from_fork+0x1f/0x30
[   87.212381][ T1190] 
[   87.214696][ T1190] Last potentially related work creation:
[   87.220394][ T1190]  kasan_save_stack+0x3a/0x60
[   87.225056][ T1190]  __kasan_record_aux_stack+0xd2/0x100
[   87.230509][ T1190]  kasan_record_aux_stack_noalloc+0xb/0x10
[   87.236321][ T1190]  insert_work+0x51/0x310
[   87.240640][ T1190]  __queue_work+0x8e5/0xc60
[   87.245126][ T1190]  queue_work_on+0xd2/0x140
[   87.249631][ T1190]  usbnet_link_change+0x176/0x1a0
[   87.254637][ T1190]  usbnet_probe+0x1dfd/0x2860
[   87.259317][ T1190]  usb_probe_interface+0x5ff/0xae0
[   87.264410][ T1190]  really_probe+0x285/0x970
[   87.268896][ T1190]  __driver_probe_device+0x198/0x280
[   87.274211][ T1190]  driver_probe_device+0x54/0x3e0
[   87.279213][ T1190]  __device_attach_driver+0x2a6/0x460
[   87.284562][ T1190]  bus_for_each_drv+0x175/0x200
[   87.289401][ T1190]  __device_attach+0x2a2/0x400
[   87.294146][ T1190]  device_initial_probe+0x1a/0x20
[   87.299173][ T1190]  bus_probe_device+0xc0/0x1e0
[   87.303920][ T1190]  device_add+0xb31/0xed0
[   87.308235][ T1190]  usb_set_configuration+0x19c2/0x1f10
[   87.313679][ T1190]  usb_generic_driver_probe+0x91/0x150
[   87.319123][ T1190]  usb_probe_device+0x148/0x260
[   87.323973][ T1190]  really_probe+0x285/0x970
[   87.328463][ T1190]  __driver_probe_device+0x198/0x280
[   87.333737][ T1190]  driver_probe_device+0x54/0x3e0
[   87.338748][ T1190]  __device_attach_driver+0x2a6/0x460
[   87.344127][ T1190]  bus_for_each_drv+0x175/0x200
[   87.348963][ T1190]  __device_attach+0x2a2/0x400
[   87.353735][ T1190]  device_initial_probe+0x1a/0x20
[   87.358760][ T1190]  bus_probe_device+0xc0/0x1e0
[   87.363608][ T1190]  device_add+0xb31/0xed0
[   87.367941][ T1190]  usb_new_device+0xd06/0x1620
[   87.372705][ T1190]  hub_event+0x27d8/0x42c0
[   87.377107][ T1190]  process_one_work+0x6be/0xba0
[   87.381944][ T1190]  worker_thread+0xa59/0x1200
[   87.386618][ T1190]  kthread+0x411/0x500
[   87.390670][ T1190]  ret_from_fork+0x1f/0x30
[   87.395069][ T1190] 
[   87.397512][ T1190] The buggy address belongs to the object at ffff88810a84a000
[   87.397512][ T1190]  which belongs to the cache kmalloc-4k of size 4096
[   87.411571][ T1190] The buggy address is located 3168 bytes inside of
[   87.411571][ T1190]  4096-byte region [ffff88810a84a000, ffff88810a84b000)
[   87.425005][ T1190] The buggy address belongs to the page:
[   87.430631][ T1190] page:ffffea00042a1200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a848
[   87.440847][ T1190] head:ffffea00042a1200 order:3 compound_mapcount:0 compound_pincount:0
[   87.449149][ T1190] flags: 0x4000000000010200(slab|head|zone=1)
[   87.455235][ T1190] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380
[   87.463809][ T1190] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   87.472373][ T1190] page dumped because: kasan: bad access detected
[   87.478772][ T1190] page_owner tracks the page as allocated
[   87.484474][ T1190] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, ts 32805830016, free_ts 32799200821
[   87.502883][ T1190]  post_alloc_hook+0x192/0x1b0
[   87.507647][ T1190]  prep_new_page+0x1c/0x110
[   87.512136][ T1190]  get_page_from_freelist+0x2cc5/0x2d50
[   87.517669][ T1190]  __alloc_pages+0x18f/0x440
[   87.522240][ T1190]  new_slab+0xa1/0x4d0
[   87.526327][ T1190]  ___slab_alloc+0x381/0x810
[   87.530898][ T1190]  __slab_alloc+0x49/0x90
[   87.535227][ T1190]  __kmalloc_track_caller+0x169/0x2c0
[   87.540590][ T1190]  __alloc_skb+0x21a/0x740
[   87.544990][ T1190]  rtmsg_ifinfo_build_skb+0x7c/0x180
[   87.550264][ T1190]  rtmsg_ifinfo+0x7a/0x130
[   87.554671][ T1190]  __dev_notify_flags+0xdb/0x500
[   87.559601][ T1190]  rtnl_configure_link+0x22e/0x330
[   87.564698][ T1190]  rtnl_newlink+0x1358/0x17b0
[   87.569358][ T1190]  rtnetlink_rcv_msg+0x9e4/0xb90
[   87.574276][ T1190]  netlink_rcv_skb+0x1e0/0x430
[   87.579027][ T1190] page last free stack trace:
[   87.583686][ T1190]  free_unref_page_prepare+0x542/0x550
[   87.589153][ T1190]  free_unref_page+0xa2/0x550
[   87.593813][ T1190]  __free_pages+0x6c/0x100
[   87.598218][ T1190]  __free_slab+0xe8/0x1e0
[   87.602652][ T1190]  discard_slab+0x29/0x40
[   87.606962][ T1190]  __slab_free+0x211/0x290
[   87.611362][ T1190]  ___cache_free+0x104/0x120
[   87.615964][ T1190]  qlink_free+0x4d/0x90
[   87.620104][ T1190]  qlist_free_all+0x5f/0xb0
[   87.624616][ T1190]  kasan_quarantine_reduce+0x14a/0x170
[   87.630058][ T1190]  __kasan_slab_alloc+0x2f/0xf0
[   87.634960][ T1190]  slab_post_alloc_hook+0x4f/0x2b0
[   87.640093][ T1190]  kmem_cache_alloc_trace+0xfb/0x270
[   87.645374][ T1190]  ____ip_mc_inc_group+0x1ab/0x860
[   87.650480][ T1190]  ip_mc_up+0x112/0x1f0
[   87.654645][ T1190]  inetdev_event+0xc5d/0x10a0
[   87.659348][ T1190] 
[   87.661687][ T1190] Memory state around the buggy address:
[   87.667305][ T1190]  ffff88810a84ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.675489][ T1190]  ffff88810a84ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.683544][ T1190] >ffff88810a84ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.691588][ T1190]                                                        ^
[   87.698766][ T1190]  ffff88810a84ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.706808][ T1190]  ffff88810a84ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.714940][ T1190] ==================================================================
[   87.723013][ T1190] Disabling lock debugging due to kernel taint
[   87.769224][   T20] usb 9-1: 0:2 : does not exist
[   87.775601][   T20] usb 9-1: USB disconnect, device number 2
[   87.979873][ T1796] udevd[1796]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   88.209857][  T286] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0
[   88.217168][  T286] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max
[   88.419575][  T286] microsoft 0003:045E:07DA.001B: No inputs registered, leaving
[   88.427696][  T286] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[   88.439230][  T286] microsoft 0003:045E:07DA.001B: no inputs found
[   88.445563][  T286] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway
[   88.456283][  T286] usb 7-1: USB disconnect, device number 8
[   88.469956][ T2479] fido_id[2479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[   95.389641][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)