last executing test programs:

3.71777138s ago: executing program 1 (id=4148):
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x0, 0x0, 0x7})

3.660656459s ago: executing program 1 (id=4150):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="484d31ed08c1e7b15ead05631f0decf044d5a6fdd371bf"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500))

2.647580224s ago: executing program 2 (id=4170):
syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="f30f01df0f01c9c4e2f922dcf20f0f8f44000000b00fc731c7442400d6000000c744240203000000c7442406000000000f011c2466ba2000b806000000efea000000001a0166baa00066ed660f3882b819698fab", 0x54}], 0x1, 0x0, 0x0, 0x0)

2.013975171s ago: executing program 4 (id=4180):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27)
connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc)

2.001011883s ago: executing program 4 (id=4181):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

1.524237516s ago: executing program 2 (id=4187):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
flistxattr(r0, 0x0, 0x0)

1.511951348s ago: executing program 2 (id=4188):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1})

1.414192093s ago: executing program 2 (id=4189):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20)

1.381145568s ago: executing program 2 (id=4190):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$netlink(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0)

1.356838421s ago: executing program 0 (id=4191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27)
connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@unspec, 0xc)

1.317963778s ago: executing program 2 (id=4192):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b0000010902240001"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
io_setup(0x800, &(0x7f0000000040))
r1 = open(&(0x7f00000002c0)='./bus\x00', 0x4093e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
ftruncate(r0, 0x7fff)
r2 = getuid()
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$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")
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX], 0x1, 0x522, &(0x7f0000000a80)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)='%pi6   \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
socket$packet(0x11, 0xa, 0x300)
syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0)

1.282674753s ago: executing program 0 (id=4193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[{0x1010, 0x0, 0x0, "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"}, {0x10}, {0xf58, 0x0, 0x0, "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"}, {0x10}], 0x1f88}, 0x0)

1.208367514s ago: executing program 0 (id=4194):
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000180)={0x0, 0x0, 0x7})

1.119165538s ago: executing program 0 (id=4195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x2, 0x7fe2, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0)

1.061006537s ago: executing program 0 (id=4196):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x6}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x318, 0x1e8, 0x7, 0xfeffffff, 0x140, 0xa8, 0x280, 0x280, 0xffffffff, 0x280, 0x280, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x6000, {0x0, @broadcast, @loopback, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x318}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)
r4 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002d000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\v', @ANYRESHEX=r4, @ANYBLOB="e239e0e8bea2b1d803224f8f70093ee8e9e09346335eaefd724bd6295d6f83a8dca8a53502c969c84decfe1ebb913b62a50b401078c18ec56281076cc729358153880456d48ebda71288743bd1f6bf276cebda1be3edd776f9ad0780952122801c0f73550bb8c3d012da3a775335415389601ccf", @ANYRES32=r4], 0x28}], 0x1}, 0x0)

897.116412ms ago: executing program 1 (id=4198):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
flistxattr(r1, 0x0, 0x0)

889.166653ms ago: executing program 1 (id=4199):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1})

844.59057ms ago: executing program 4 (id=4200):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20)

825.870563ms ago: executing program 4 (id=4201):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1})
syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0)
unlinkat(r2, &(0x7f0000000540)='./file1\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1})
renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file1\x00')

801.604176ms ago: executing program 4 (id=4202):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$netlink(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0)

778.99847ms ago: executing program 4 (id=4203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27)
connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@unspec, 0xc)

750.340575ms ago: executing program 1 (id=4204):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[{0x1010, 0x0, 0x0, "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"}, {0x10}, {0xf58, 0x0, 0x0, "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"}, {0x10}], 0x1f88}, 0x0)

743.678426ms ago: executing program 3 (id=4205):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0)

685.378934ms ago: executing program 1 (id=4207):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d54549b})

661.041208ms ago: executing program 3 (id=4208):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

512.768021ms ago: executing program 3 (id=4209):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
flistxattr(r1, 0x0, 0x0)

502.537872ms ago: executing program 3 (id=4210):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setuid(0x0)

469.763147ms ago: executing program 3 (id=4211):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20)

113.625362ms ago: executing program 3 (id=4212):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

0s ago: executing program 0 (id=4213):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
sendmsg$netlink(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  344.973399][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  344.990884][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  344.994526][   T30] audit: type=1400 audit(1719464286.292:347): avc:  denied  { open } for  pid=9424 comm="syz.1.3444" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  345.008290][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.059051][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.087168][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.106840][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.135114][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.142524][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.157169][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.174586][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.194777][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.202249][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.217168][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.227308][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.234603][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.256110][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.266014][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.286907][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.303056][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.320618][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.339692][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.349837][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.357754][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.365082][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.373389][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.398073][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.415678][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.429807][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.447951][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.455184][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.467677][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.475482][  T448] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  345.502122][  T448] hid-generic 0000:0000:0000.0038: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  345.578897][ T9404] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  345.817287][ T8350] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  345.826919][ T8350] cdc_ncm 1-1:1.0: setting rx_max = 16384
[  345.879289][ T9470] loop1: detected capacity change from 0 to 8192
[  345.947515][ T9470]  loop1: p1 p2 p3
[  346.075115][ T8350] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[  346.299089][ T8350] usb 1-1: USB disconnect, device number 31
[  346.325051][ T8350] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[  346.358155][  T100]  loop1: p1 p2 p3
[  346.488487][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  346.498930][  T336] udevd[336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  346.509895][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  346.584871][ T9095] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /root/syzkaller.P8BacV/35/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  347.064521][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.085929][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.102020][ T9521] device bridge_slave_0 entered promiscuous mode
[  347.135599][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.162818][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.185620][ T9521] device bridge_slave_1 entered promiscuous mode
[  347.188248][ T9533] loop1: detected capacity change from 0 to 8192
[  347.257675][ T9533]  loop1: p1 p2 p3
[  347.319584][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  347.357206][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.364100][ T9521] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.371241][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.377986][ T9521] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.436800][  T448] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.447520][  T448] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.512192][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  347.522724][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  347.557375][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  347.568719][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  347.586091][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.592999][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.615600][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  347.632085][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  347.648442][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.655333][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.688448][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  347.698511][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  347.715623][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  347.731954][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  347.748656][  T442] device bridge_slave_1 left promiscuous mode
[  347.754620][  T442] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.787671][  T442] device bridge_slave_0 left promiscuous mode
[  347.793664][  T442] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.817260][  T442] device veth1_macvtap left promiscuous mode
[  347.823114][  T442] device veth0_vlan left promiscuous mode
[  348.075901][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  348.092553][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  348.121849][ T9521] device veth0_vlan entered promiscuous mode
[  348.139682][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  348.151703][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  348.175904][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  348.191712][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  348.207806][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  348.225108][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  348.242494][ T9521] device veth1_macvtap entered promiscuous mode
[  348.262267][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  348.273013][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  348.290502][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  348.316716][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  348.327040][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  349.410188][ T9543] loop4: detected capacity change from 0 to 40427
[  349.569467][ T9543] F2FS-fs (loop4): Found nat_bits in checkpoint
[  349.622806][ T9574] 9pnet: Insufficient options for proto=fd
[  349.687209][ T9543] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  349.729843][ T5710] attempt to access beyond end of device
[  349.729843][ T5710] loop4: rw=2049, want=45104, limit=40427
[  349.742042][ T9574] loop1: detected capacity change from 0 to 8192
[  349.777455][ T9574]  loop1: p1 p2 p3
[  349.872134][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  349.872146][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  349.892536][  T336] udevd[336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  350.039770][ T9585] loop4: detected capacity change from 0 to 256
[  350.073749][ T9581] loop1: detected capacity change from 0 to 8192
[  350.147525][ T9581]  loop1: p1 p2 p3
[  350.621868][  T336] udevd[336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  350.628816][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  350.633681][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  350.835295][ T9605] 9pnet: Insufficient options for proto=fd
[  350.847192][ T8350] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  350.935188][ T9605] loop3: detected capacity change from 0 to 8192
[  350.987449][ T9605]  loop3: p1 p2 p3
[  351.108626][ T8350] usb 2-1: Using ep0 maxpacket: 8
[  351.111181][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  351.124893][  T336] udevd[336]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  351.124915][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  351.157437][ T9618] loop3: detected capacity change from 0 to 1024
[  351.171700][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  351.226638][ T9618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  351.237293][ T8350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.337247][ T8350] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  351.356313][ T8350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  351.366394][ T8350] usb 2-1: SerialNumber: syz
[  351.379926][ T8350] usb 2-1: config 0 descriptor??
[  351.417944][ T8350] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  351.424660][ T8350] uvcvideo 2-1:0.0: Entity type for entity Output 255 was not initialized!
[  351.444737][ T8350] usb 2-1: Failed to create links for entity 255
[  351.457141][   T39] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  351.464893][ T8350] usb 2-1: Failed to register entities (-22).
[  351.557167][  T962] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  351.619859][ T7194] usb 2-1: USB disconnect, device number 62
[  351.707146][   T39] usb 5-1: Using ep0 maxpacket: 16
[  351.797135][  T962] usb 4-1: Using ep0 maxpacket: 16
[  351.917181][  T962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  351.940117][  T962] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  351.957137][  T962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.979313][  T962] usb 4-1: config 0 descriptor??
[  351.987231][   T39] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  352.006207][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.016296][   T39] usb 5-1: Product: syz
[  352.026394][   T39] usb 5-1: Manufacturer: syz
[  352.036487][   T39] usb 5-1: SerialNumber: syz
[  352.045470][   T39] usb 5-1: config 0 descriptor??
[  352.087973][   T39] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  352.107049][   T39] usb 5-1: Detected FT232H
[  352.263426][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.270638][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.278278][ T9629] device bridge_slave_0 entered promiscuous mode
[  352.285547][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.294120][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.301877][ T9629] device bridge_slave_1 entered promiscuous mode
[  352.307245][   T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  352.391059][ T9637] loop1: detected capacity change from 0 to 256
[  352.464258][  T962] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0039/input/input57
[  352.465088][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.482345][ T9629] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.489553][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.496486][ T9629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.538640][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  352.547331][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.567866][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.577265][   T39] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5
[  352.587559][   T39] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  352.587935][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  352.617506][  T448] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.624365][  T448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.631766][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  352.643217][  T962] microsoft 0003:045E:07DA.0039: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  352.871850][  T962] usb 5-1: USB disconnect, device number 41
[  352.930462][  T962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  352.945968][  T448] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.952865][  T448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.972672][ T9641] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3510: Invalid inode table block 0 in block_group 0
[  352.989266][  T962] ftdi_sio 5-1:0.0: device disconnected
[  352.995486][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  353.002249][ T9641] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3510: Invalid inode table block 0 in block_group 0
[  353.015915][ T9641] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  353.016035][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  353.025392][ T9641] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #15: comm syz.3.3510: mark_inode_dirty error
[  353.054168][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  353.062809][ T9641] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3510: Invalid inode table block 0 in block_group 0
[  353.080949][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  353.089136][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  353.096512][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  353.106956][ T9629] device veth0_vlan entered promiscuous mode
[  353.129279][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  353.138900][ T9629] device veth1_macvtap entered promiscuous mode
[  353.149856][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  353.165787][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  353.278047][ T2904] device bridge_slave_1 left promiscuous mode
[  353.284133][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.297806][ T2904] device bridge_slave_0 left promiscuous mode
[  353.303776][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.313014][ T2904] device veth1_macvtap left promiscuous mode
[  353.320984][ T2904] device veth0_vlan left promiscuous mode
[  353.426792][ T9650] 9pnet: Insufficient options for proto=fd
[  353.457141][ T7194] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  353.477747][ T9650] loop4: detected capacity change from 0 to 8192
[  353.524816][ T9650]  loop4: p1 p2 p3
[  353.627643][  T448] usb 4-1: USB disconnect, device number 35
[  353.692083][ T9521] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.a6vzjA/19/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  353.717184][ T7194] usb 3-1: Using ep0 maxpacket: 8
[  353.782706][ T9521] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0
[  353.827421][ T9521] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  353.841466][ T9521] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error
[  353.887495][  T320] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[  353.937185][ T7194] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  353.955490][ T7194] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  353.970682][ T7194] usb 3-1: config 135 has no interface number 0
[  353.982591][ T7194] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  354.287742][ T7194] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  354.320310][ T7194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.360452][ T7194] usb 3-1: Product: syz
[  354.384117][ T7194] usb 3-1: Manufacturer: syz
[  354.405003][ T7194] usb 3-1: SerialNumber: syz
[  354.528374][ T7194] usb 3-1: Found UVC 0.00 device syz (18ec:3288)
[  354.538986][ T7194] usb 3-1: No valid video chain found.
[  354.637935][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.644888][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.652595][ T9670] device bridge_slave_0 entered promiscuous mode
[  354.659848][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.666706][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.689579][ T9670] device bridge_slave_1 entered promiscuous mode
[  354.730341][ T8350] usb 3-1: USB disconnect, device number 49
[  354.867948][ T2904] device bridge_slave_1 left promiscuous mode
[  354.875044][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.890234][ T2904] device bridge_slave_0 left promiscuous mode
[  354.902730][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.919610][ T2904] device veth1_macvtap left promiscuous mode
[  354.931988][ T2904] device veth0_vlan left promiscuous mode
[  355.125010][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.132009][ T9670] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.139116][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.145970][ T9670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.153220][ T9682] 9pnet: Insufficient options for proto=fd
[  355.251406][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  355.262747][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.266517][ T9682] loop4: detected capacity change from 0 to 8192
[  355.284267][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.317725][ T9682]  loop4: p1 p2 p3
[  355.329593][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  355.344607][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.351511][ T7194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.377258][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  355.407418][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.414374][ T7194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.437262][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  355.445738][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  355.466860][ T9670] device veth0_vlan entered promiscuous mode
[  355.469198][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  355.484073][  T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  355.496240][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  355.517236][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  355.526116][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  355.541820][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  355.558248][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  355.591623][ T9670] device veth1_macvtap entered promiscuous mode
[  355.606296][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  355.617937][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  355.634861][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  355.669543][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  355.686826][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  355.705869][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  355.722498][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  355.986398][ T9699] loop1: detected capacity change from 0 to 1024
[  356.063952][ T9699] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  356.106212][   T30] audit: type=1400 audit(1719464297.442:348): avc:  denied  { map } for  pid=9698 comm="syz.1.3538" path="/root/syzkaller.SwXnXC/45/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  356.234054][ T9723] 9pnet: Insufficient options for proto=fd
[  356.243077][   T30] audit: type=1400 audit(1719464297.442:349): avc:  denied  { execute } for  pid=9698 comm="syz.1.3538" path="/root/syzkaller.SwXnXC/45/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  356.701329][ T9727] loop4: detected capacity change from 0 to 8192
[  356.778820][ T9727]  loop4: p1 p2 p3
[  356.811803][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.818742][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.826163][ T9730] device bridge_slave_0 entered promiscuous mode
[  356.833251][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.843660][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.851244][ T9730] device bridge_slave_1 entered promiscuous mode
[  356.937741][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.944642][ T9730] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.951879][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.958756][ T9730] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.205813][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  357.225506][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  357.266427][  T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  357.327474][  T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  357.328376][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  357.340158][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  357.363670][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.370677][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.382105][ T9733] device bridge_slave_0 entered promiscuous mode
[  357.426224][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.478984][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.486872][ T9733] device bridge_slave_1 entered promiscuous mode
[  357.555435][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  357.564304][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.580339][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.613888][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  357.622145][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.629031][ T8350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.636721][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  357.645069][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.651955][ T8350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.710170][ T2904] device bridge_slave_1 left promiscuous mode
[  357.716149][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.737691][ T2904] device bridge_slave_0 left promiscuous mode
[  357.753608][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.775421][ T2904] device veth1_macvtap left promiscuous mode
[  357.786689][ T2904] device veth0_vlan left promiscuous mode
[  357.830822][   T30] audit: type=1400 audit(1719464299.172:350): avc:  denied  { unmount } for  pid=5710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  358.111455][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  358.119509][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  358.127390][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  358.135324][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  358.157770][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  358.166000][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  358.179318][ T9771] loop3: detected capacity change from 0 to 8192
[  358.195184][ T9730] device veth0_vlan entered promiscuous mode
[  358.202699][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  358.211668][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  358.227887][ T9771]  loop3: p1 p2 p3
[  358.233012][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  358.240753][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  358.264361][ T9730] device veth1_macvtap entered promiscuous mode
[  358.273697][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  358.292455][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  358.302396][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  358.328312][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  358.338401][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  358.346666][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  358.355598][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  358.414159][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  358.414973][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  358.438181][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  358.445745][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  358.458571][ T9784] loop4: detected capacity change from 0 to 256
[  358.462312][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  358.472725][  T448] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.479599][  T448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.486832][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  358.495089][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  358.503451][  T448] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.510317][  T448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.526232][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  358.534056][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  358.548498][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  358.571153][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  358.608325][   T39] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  358.620936][ T9733] device veth0_vlan entered promiscuous mode
[  358.634712][ T9733] device veth1_macvtap entered promiscuous mode
[  358.717735][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  358.725583][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  358.733829][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  358.742088][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  358.750359][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  358.758046][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  358.766321][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  358.774621][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  358.779328][ T9800] loop0: detected capacity change from 0 to 1024
[  358.783018][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  358.798482][  T961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  358.806932][  T961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  358.882081][ T9803] loop4: detected capacity change from 0 to 256
[  358.917174][   T39] usb 4-1: Using ep0 maxpacket: 16
[  359.066325][ T9800] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  359.111876][ T9809] loop2: detected capacity change from 0 to 8192
[  359.257637][   T39] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  359.271638][ T9809]  loop2: p1 p2 p3
[  359.275354][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.352674][   T39] usb 4-1: Product: syz
[  359.356872][   T39] usb 4-1: Manufacturer: syz
[  359.363885][   T39] usb 4-1: SerialNumber: syz
[  359.369250][   T39] usb 4-1: config 0 descriptor??
[  359.379300][  T100]  loop2: p1 p2 p3
[  359.407813][   T39] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  359.415595][   T39] usb 4-1: Detected FT232H
[  359.507652][  T448] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  359.617236][   T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  359.628832][ T2904] device bridge_slave_1 left promiscuous mode
[  359.635148][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.642963][ T2904] device bridge_slave_0 left promiscuous mode
[  359.649409][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.659015][ T2904] device veth1_macvtap left promiscuous mode
[  359.664913][ T2904] device veth0_vlan left promiscuous mode
[  359.685787][ T9822] loop2: detected capacity change from 0 to 1024
[  359.743429][ T9822] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  359.787287][  T448] usb 1-1: Using ep0 maxpacket: 16
[  359.917246][  T448] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  359.925465][   T39] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5
[  359.933643][  T448] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  359.946135][  T448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.946562][   T39] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  359.955463][  T448] usb 1-1: config 0 descriptor??
[  360.188877][  T961] usb 4-1: USB disconnect, device number 36
[  360.244669][  T961] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  360.256472][  T961] ftdi_sio 4-1:0.0: device disconnected
[  360.327215][ T7194] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  360.566361][  T448] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003A/input/input58
[  360.657793][  T448] microsoft 0003:045E:07DA.003A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  360.681340][ T9843] loop1: detected capacity change from 0 to 40427
[  360.697574][ T7194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.708956][ T7194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.718636][ T7194] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  360.727505][ T7194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.736099][ T7194] usb 5-1: config 0 descriptor??
[  360.755446][ T9843] F2FS-fs (loop1): Found nat_bits in checkpoint
[  360.795541][ T9843] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  360.983582][ T9800] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.3569: Invalid inode table block 0 in block_group 0
[  360.996886][ T9800] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.3569: Invalid inode table block 0 in block_group 0
[  361.009973][ T9800] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  361.020268][ T9800] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #15: comm syz.0.3569: mark_inode_dirty error
[  361.032070][ T9800] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.3569: Invalid inode table block 0 in block_group 0
[  361.121237][ T9868] loop3: detected capacity change from 0 to 1024
[  361.210292][ T9868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  361.247281][ T8350] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  361.478121][ T9878] loop2: detected capacity change from 0 to 40427
[  361.487191][ T8350] usb 2-1: Using ep0 maxpacket: 8
[  361.562423][ T9878] F2FS-fs (loop2): Found nat_bits in checkpoint
[  361.571343][  T448] usb 1-1: USB disconnect, device number 32
[  361.607284][ T8350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.607475][ T9733] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.cuJ44F/1/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  361.625313][ T9878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  361.646867][ T9733] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0
[  361.661742][ T9733] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  361.675431][ T9733] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error
[  361.691283][  T320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[  361.697382][ T8350] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  361.713641][ T8350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  361.721992][ T8350] usb 2-1: SerialNumber: syz
[  361.732267][ T8350] usb 2-1: config 0 descriptor??
[  361.778241][ T8350] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  361.786588][ T8350] uvcvideo 2-1:0.0: Entity type for entity Output 255 was not initialized!
[  361.795708][ T8350] usb 2-1: Failed to create links for entity 255
[  361.802744][ T8350] usb 2-1: Failed to register entities (-22).
[  361.951083][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.958027][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.965448][ T9887] device bridge_slave_0 entered promiscuous mode
[  361.972266][ T9895] loop3: detected capacity change from 0 to 8192
[  361.972893][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.981703][ T2173] usb 2-1: USB disconnect, device number 63
[  361.986703][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.998541][ T9887] device bridge_slave_1 entered promiscuous mode
[  362.007706][ T9895]  loop3: p1 p2 p3
[  362.090136][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.097134][ T9887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.104198][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.111005][ T9887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.117199][  T311] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  362.152932][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  362.163875][  T336] udevd[336]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  362.177461][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  362.198066][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  362.207799][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.215852][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.234299][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  362.242618][  T448] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.249478][  T448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.256720][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  362.266437][  T448] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.273315][  T448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.297814][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  362.309724][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  362.323833][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  362.336357][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  362.344493][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  362.352103][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  362.362229][ T9887] device veth0_vlan entered promiscuous mode
[  362.367212][  T311] usb 3-1: Using ep0 maxpacket: 16
[  362.375721][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  362.385156][ T9887] device veth1_macvtap entered promiscuous mode
[  362.392585][  T320] device bridge_slave_1 left promiscuous mode
[  362.398936][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.406541][  T320] device bridge_slave_0 left promiscuous mode
[  362.412671][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.420951][  T320] device veth1_macvtap left promiscuous mode
[  362.426855][  T320] device veth0_vlan left promiscuous mode
[  362.507756][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  362.523208][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024
[  362.538296][  T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  362.554886][  T311] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  362.559354][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  362.564352][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.582612][  T311] usb 3-1: config 0 descriptor??
[  362.591866][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  362.793548][ T9924] loop0: detected capacity change from 0 to 8192
[  362.813376][ T9910] loop1: detected capacity change from 0 to 40427
[  362.820312][ T9924]  loop0: p1 p2 p3
[  362.918479][ T9910] F2FS-fs (loop1): Found nat_bits in checkpoint
[  362.931606][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  362.944046][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  362.956460][  T336] udevd[336]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  363.053307][ T9910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  363.074745][ T7194] usbhid 5-1:0.0: can't add hid device: -71
[  363.082566][ T7194] usbhid: probe of 5-1:0.0 failed with error -71
[  363.090138][ T7194] usb 5-1: USB disconnect, device number 42
[  363.457163][ T7194] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  363.477243][  T311] usbhid 3-1:0.0: can't add hid device: -71
[  363.483021][  T311] usbhid: probe of 3-1:0.0 failed with error -71
[  363.492041][  T311] usb 3-1: USB disconnect, device number 50
[  363.591837][ T9960] loop1: detected capacity change from 0 to 8192
[  363.647632][ T9960]  loop1: p1 p2 p3
[  363.764074][ T7194] usb 5-1: Using ep0 maxpacket: 8
[  364.057309][ T7194] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  364.097156][ T8350] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  364.119266][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  364.133317][  T336] udevd[336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  364.145728][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  364.147295][ T7194] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  364.184384][ T7194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  364.203968][ T7194] usb 5-1: SerialNumber: syz
[  364.209449][ T7194] usb 5-1: config 0 descriptor??
[  364.247848][ T7194] usb 5-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  364.255519][ T7194] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized!
[  364.264510][ T7194] usb 5-1: Failed to create links for entity 255
[  364.271775][ T7194] usb 5-1: Failed to register entities (-22).
[  364.293851][ T9971] loop0: detected capacity change from 0 to 40427
[  364.358250][ T9971] F2FS-fs (loop0): Found nat_bits in checkpoint
[  364.402261][ T9971] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  364.450404][  T309] usb 5-1: USB disconnect, device number 43
[  364.457538][ T8350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.469723][ T8350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.487152][ T8350] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  364.508799][ T8350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.521474][ T8350] usb 4-1: config 0 descriptor??
[  364.630092][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.637010][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.644973][ T9996] device bridge_slave_0 entered promiscuous mode
[  364.663180][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.670278][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.677968][ T9996] device bridge_slave_1 entered promiscuous mode
[  364.753525][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.760437][ T9996] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.767665][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.774510][ T9996] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.824788][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  364.832802][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.853820][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.884239][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  364.892825][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.899705][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.906948][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  364.915600][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.922598][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.929850][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  364.950666][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  364.959251][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  364.972107][ T9996] device veth0_vlan entered promiscuous mode
[  364.979770][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.988566][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.995929][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  365.018075][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  365.029431][ T9996] device veth1_macvtap entered promiscuous mode
[  365.055824][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  365.072458][  T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  365.157262][ T2173] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  365.200368][  T320] device bridge_slave_1 left promiscuous mode
[  365.206443][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.237407][T10022] loop4: detected capacity change from 0 to 1024
[  365.237661][  T320] device bridge_slave_0 left promiscuous mode
[  365.257582][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.342358][  T320] device veth1_macvtap left promiscuous mode
[  365.348165][T10022] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  365.359034][  T320] device veth0_vlan left promiscuous mode
[  365.397669][ T2173] usb 2-1: Using ep0 maxpacket: 16
[  365.527674][ T2173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  365.540128][ T2173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024
[  365.551577][ T2173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  365.564809][ T2173] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  365.573981][ T2173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.587030][ T2173] usb 2-1: config 0 descriptor??
[  365.628158][  T448] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  365.876235][T10035] loop0: detected capacity change from 0 to 8192
[  365.887346][  T448] usb 5-1: Using ep0 maxpacket: 16
[  365.917648][T10035]  loop0: p1 p2 p3
[  366.017254][  T448] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  366.020133][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  366.032618][  T448] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  366.048714][  T448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.066681][  T448] usb 5-1: config 0 descriptor??
[  366.078598][ T2173] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0
[  366.085907][ T2173] microsoft 0003:045E:07DA.003B: No inputs registered, leaving
[  366.094157][ T2173] microsoft 0003:045E:07DA.003B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  366.151480][ T2173] microsoft 0003:045E:07DA.003B: no inputs found
[  366.158401][ T2173] microsoft 0003:045E:07DA.003B: could not initialize ff, continuing anyway
[  366.281225][ T7194] usb 2-1: USB disconnect, device number 64
[  366.546332][  T448] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003C/input/input59
[  366.629120][  T448] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  366.657206][ T8350] usbhid 4-1:0.0: can't add hid device: -71
[  366.663004][ T8350] usbhid: probe of 4-1:0.0 failed with error -71
[  366.678109][ T8350] usb 4-1: USB disconnect, device number 37
[  366.705797][T10063] loop3: detected capacity change from 0 to 8192
[  366.727788][T10063]  loop3: p1 p2 p3
[  367.303729][T10091] loop2: detected capacity change from 0 to 8192
[  367.340216][T10091]  loop2: p1 p2 p3
[  367.484136][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  367.495017][  T336] udevd[336]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  367.509981][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  367.547153][  T961] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  367.637145][  T309] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  367.797150][  T961] usb 4-1: Using ep0 maxpacket: 16
[  367.827188][ T2173] usb 5-1: USB disconnect, device number 44
[  367.830369][T10096] loop2: detected capacity change from 0 to 40427
[  367.845547][ T5710] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[  367.865242][ T5710] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  367.875450][ T5710] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error
[  367.919107][T10096] F2FS-fs (loop2): Found nat_bits in checkpoint
[  367.927281][  T961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  367.947170][  T961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024
[  367.977647][  T961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  367.992931][  T961] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  368.006426][T10096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  368.007877][  T961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.032564][  T961] usb 4-1: config 0 descriptor??
[  368.057190][  T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.071967][  T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.084263][  T309] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  368.097708][  T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.122051][  T309] usb 1-1: config 0 descriptor??
[  368.227070][T10120] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.234582][T10120] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.242339][T10120] device bridge_slave_0 entered promiscuous mode
[  368.249942][T10120] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.256982][T10120] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.264427][T10120] device bridge_slave_1 entered promiscuous mode
[  368.315991][T10120] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.322921][T10120] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.329995][T10120] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.336835][T10120] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.723671][  T961] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[  368.773783][  T961] microsoft 0003:045E:07DA.003D: No inputs registered, leaving
[  368.864627][  T961] microsoft 0003:045E:07DA.003D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  368.879100][  T961] microsoft 0003:045E:07DA.003D: no inputs found
[  368.885316][  T961] microsoft 0003:045E:07DA.003D: could not initialize ff, continuing anyway
[  368.895920][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.903547][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.913961][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  368.921414][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  368.927843][ T7194] usb 4-1: USB disconnect, device number 38
[  368.928544][  T448] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  368.947327][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  368.955731][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  368.964025][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.970926][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.979333][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  368.988321][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  368.996300][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.003200][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.021036][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  369.029347][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  369.045721][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  369.054145][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  369.072374][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  369.081234][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  369.089640][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  369.097532][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  369.105454][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  369.112830][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  369.124442][T10120] device veth0_vlan entered promiscuous mode
[  369.136884][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  369.145081][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  369.155453][T10120] device veth1_macvtap entered promiscuous mode
[  369.162611][  T320] device bridge_slave_1 left promiscuous mode
[  369.168614][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.176075][  T320] device bridge_slave_0 left promiscuous mode
[  369.182377][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.190343][  T320] device veth1_macvtap left promiscuous mode
[  369.196189][  T320] device veth0_vlan left promiscuous mode
[  369.274664][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  369.287375][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  369.300566][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  369.311432][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  369.320210][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  369.417286][  T448] usb 2-1: config 7 has an invalid interface number: 243 but max is 3
[  369.425351][  T448] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[  369.435038][  T448] usb 2-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config
[  369.445732][  T448] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4
[  369.456841][  T448] usb 2-1: config 7 has no interface number 0
[  369.468132][  T448] usb 2-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  369.481891][  T448] usb 2-1: config 7 interface 243 has no altsetting 0
[  369.647285][  T448] usb 2-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[  369.659303][  T448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.675397][  T448] usb 2-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[  369.687380][  T448] usb 2-1: Manufacturer: ᰉ
[  369.696983][  T448] usb 2-1: SerialNumber:  
[  369.709790][T10150] loop3: detected capacity change from 0 to 40427
[  369.724926][T10148] loop4: detected capacity change from 0 to 40427
[  369.732076][T10150] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  369.740045][T10150] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  369.750778][T10150] F2FS-fs (loop3): Found nat_bits in checkpoint
[  369.767204][   T39] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  369.788061][T10148] F2FS-fs (loop4): Found nat_bits in checkpoint
[  369.794930][T10150] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  369.802351][T10150] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  369.838426][T10148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  369.941212][T10122] UDC core: couldn't find an available UDC or it's busy: -16
[  369.963999][T10122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  370.007175][   T39] usb 3-1: Using ep0 maxpacket: 8
[  370.067399][  T448] hub 2-1:7.243: bad descriptor, ignoring hub
[  370.074906][  T448] hub: probe of 2-1:7.243 failed with error -5
[  370.108336][  T309] usbhid 1-1:0.0: can't add hid device: -71
[  370.114590][  T309] usbhid: probe of 1-1:0.0 failed with error -71
[  370.121188][  T448] usb 2-1: USB disconnect, device number 65
[  370.127277][   T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.143033][  T309] usb 1-1: USB disconnect, device number 33
[  370.196945][T10185] loop0: detected capacity change from 0 to 8192
[  370.227448][   T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  370.240524][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  370.257407][   T39] usb 3-1: SerialNumber: syz
[  370.262136][T10185]  loop0: p1 p2 p3
[  370.276932][   T39] usb 3-1: config 0 descriptor??
[  370.329291][   T39] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  370.346243][   T39] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized!
[  370.362491][   T39] usb 3-1: Failed to create links for entity 255
[  370.369083][   T39] usb 3-1: Failed to register entities (-22).
[  370.415628][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  370.417445][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  370.427682][  T336] udevd[336]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  370.469907][T10186] loop4: detected capacity change from 0 to 40427
[  370.504653][T10205] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  370.540195][  T309] usb 3-1: USB disconnect, device number 51
[  370.811729][T10186] F2FS-fs (loop4): Found nat_bits in checkpoint
[  370.931447][T10224] loop0: detected capacity change from 0 to 8192
[  370.960997][T10186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  370.977300][   T39] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  370.982538][T10224]  loop0: p1 p2 p3
[  371.042595][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  371.042606][  T336] udevd[336]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  371.062811][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  371.080434][T10238] loop3: detected capacity change from 0 to 256
[  371.101918][T10240] binder: 10239:10240 ioctl c0306201 0 returned -14
[  371.158062][T10238] exfat: Deprecated parameter 'utf8'
[  371.185678][   T30] audit: type=1400 audit(1719464312.522:351): avc:  denied  { ioctl } for  pid=10241 comm="syz.4.3736" path="socket:[63990]" dev="sockfs" ino=63990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  371.192570][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'.
[  371.220922][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'.
[  371.241870][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'.
[  371.315907][T10243] device team_slave_0 entered promiscuous mode
[  371.341153][T10238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d)
[  371.357337][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.372436][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.432333][   T39] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  371.446204][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.475431][   T39] usb 2-1: config 0 descriptor??
[  372.113781][T10266] loop0: detected capacity change from 0 to 8192
[  372.115293][T10261] loop4: detected capacity change from 0 to 40427
[  372.167536][T10266]  loop0: p1 p2 p3
[  372.217175][   T20] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  372.218752][T10261] F2FS-fs (loop4): Found nat_bits in checkpoint
[  372.274058][T10261] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  372.301138][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'.
[  372.314054][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'.
[  372.318060][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  372.346402][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'.
[  372.358062][T10276] device team_slave_0 entered promiscuous mode
[  372.537189][ T7194] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  372.642790][T10291] loop2: detected capacity change from 0 to 256
[  372.647239][   T20] usb 4-1: config 1 has an invalid descriptor of length 134, skipping remainder of the config
[  372.667292][   T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  372.687174][   T20] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  372.697995][T10291] exfat: Deprecated parameter 'utf8'
[  372.740465][T10291] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d)
[  372.777183][ T7194] usb 1-1: Using ep0 maxpacket: 8
[  372.887271][   T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  372.897265][ T7194] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.906369][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.915340][   T20] usb 4-1: Product: syz
[  372.919780][   T20] usb 4-1: Manufacturer: syz
[  372.924198][   T20] usb 4-1: SerialNumber: syz
[  372.977759][   T20] cdc_ncm 4-1:1.0: skipping garbage
[  372.984448][   T20] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  372.987251][ T7194] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  373.003165][   T20] cdc_ncm 4-1:1.0: bind() failure
[  373.008783][ T7194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  373.027004][ T7194] usb 1-1: SerialNumber: syz
[  373.038026][ T7194] usb 1-1: config 0 descriptor??
[  373.087872][ T7194] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  373.097533][ T7194] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized!
[  373.116217][ T7194] usb 1-1: Failed to create links for entity 255
[  373.130723][ T7194] usb 1-1: Failed to register entities (-22).
[  373.182150][T10264] UDC core: couldn't find an available UDC or it's busy: -16
[  373.197318][T10264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  373.289515][ T7194] usb 1-1: USB disconnect, device number 34
[  373.376295][T10264] UDC core: couldn't find an available UDC or it's busy: -16
[  373.383705][T10264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  373.437139][T10264] UDC core: couldn't find an available UDC or it's busy: -16
[  373.444466][T10264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  373.457434][T10298] loop4: detected capacity change from 0 to 8192
[  373.466267][  T448] usb 4-1: USB disconnect, device number 39
[  373.498521][T10298]  loop4: p1 p2 p3
[  373.577178][   T39] usbhid 2-1:0.0: can't add hid device: -71
[  373.582959][   T39] usbhid: probe of 2-1:0.0 failed with error -71
[  373.590307][   T39] usb 2-1: USB disconnect, device number 66
[  373.669507][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  373.669538][  T336] udevd[336]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  373.682711][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  373.711345][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'.
[  373.725462][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'.
[  373.740545][T10302] loop1: detected capacity change from 0 to 40427
[  373.782374][T10302] F2FS-fs (loop1): Found nat_bits in checkpoint
[  373.848583][T10302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  374.123310][T10331] loop3: detected capacity change from 0 to 256
[  374.218168][T10331] exfat: Deprecated parameter 'utf8'
[  374.257807][T10331] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d)
[  374.626350][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'.
[  374.637253][  T962] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  374.639091][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'.
[  374.946041][T10351] device team_slave_0 entered promiscuous mode
[  375.007151][   T20] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  375.007239][  T962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.037149][  T962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.046734][  T962] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  375.073156][  T962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.091126][  T962] usb 2-1: config 0 descriptor??
[  375.249743][T10355] loop3: detected capacity change from 0 to 40427
[  375.267165][   T20] usb 3-1: Using ep0 maxpacket: 8
[  375.318929][T10355] F2FS-fs (loop3): Found nat_bits in checkpoint
[  375.380329][T10382] loop4: detected capacity change from 0 to 256
[  375.383638][T10355] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  375.392842][T10382] exfat: Deprecated parameter 'utf8'
[  375.407208][   T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  375.431062][T10382] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d)
[  375.507293][   T20] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  375.516279][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  375.524536][   T20] usb 3-1: SerialNumber: syz
[  375.530082][   T20] usb 3-1: config 0 descriptor??
[  375.577970][   T20] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  375.584981][   T20] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized!
[  375.593589][   T20] usb 3-1: Failed to create links for entity 255
[  375.599902][   T20] usb 3-1: Failed to register entities (-22).
[  375.758032][   T30] audit: type=1400 audit(1719464317.102:352): avc:  denied  { lock } for  pid=10388 comm="syz.3.3794" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  375.778586][  T309] usb 3-1: USB disconnect, device number 52
[  375.962027][T10408] loop3: detected capacity change from 0 to 1024
[  376.088337][T10408] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  376.244245][T10410] loop0: detected capacity change from 0 to 40427
[  376.334494][T10410] F2FS-fs (loop0): Found nat_bits in checkpoint
[  376.377163][  T309] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  376.400514][T10410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  376.750868][  T309] usb 4-1: Using ep0 maxpacket: 16
[  376.937256][  T309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  376.957189][  T309] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  376.975928][  T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.990752][  T309] usb 4-1: config 0 descriptor??
[  377.267248][  T962] usbhid 2-1:0.0: can't add hid device: -71
[  377.273076][  T962] usbhid: probe of 2-1:0.0 failed with error -71
[  377.289341][  T962] usb 2-1: USB disconnect, device number 67
[  377.414772][   T30] audit: type=1400 audit(1719464318.752:353): avc:  denied  { mount } for  pid=10445 comm="syz.1.3814" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  377.437769][   T30] audit: type=1400 audit(1719464318.752:354): avc:  denied  { write } for  pid=10445 comm="syz.1.3814" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  377.557479][  T309] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003E/input/input60
[  377.641948][  T309] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  377.738363][  T448] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  377.992166][T10455] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  378.002127][T10455] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #15: comm syz.3.3802: mark_inode_dirty error
[  378.017262][  T448] usb 3-1: Using ep0 maxpacket: 8
[  378.153285][   T30] audit: type=1400 audit(1719464319.492:355): avc:  denied  { unmount } for  pid=9326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  378.187247][  T448] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.287237][  T448] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  378.296981][  T448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  378.306274][  T448] usb 3-1: SerialNumber: syz
[  378.321915][  T448] usb 3-1: config 0 descriptor??
[  378.367922][  T448] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  378.378498][  T448] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized!
[  378.396223][  T448] usb 3-1: Failed to create links for entity 255
[  378.408674][  T448] usb 3-1: Failed to register entities (-22).
[  378.647380][  T448] usb 4-1: USB disconnect, device number 40
[  378.657197][  T309] usb 3-1: USB disconnect, device number 53
[  378.667772][ T9670] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[  378.708343][ T9670] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  378.723982][ T9670] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error
[  378.735410][   T30] audit: type=1400 audit(1719464320.062:356): avc:  denied  { mount } for  pid=10466 comm="syz.0.3822" name="/" dev="ramfs" ino=64350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  378.788672][   T30] audit: type=1400 audit(1719464320.062:357): avc:  denied  { mounton } for  pid=10466 comm="syz.0.3822" path="/root/syzkaller.7iJiqH/44/file0/file0" dev="ramfs" ino=64351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  378.876907][   T30] audit: type=1400 audit(1719464320.102:358): avc:  denied  { unmount } for  pid=9996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  378.998838][   T30] audit: type=1400 audit(1719464320.342:359): avc:  denied  { mounton } for  pid=10471 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  379.098885][   T30] audit: type=1400 audit(1719464320.442:360): avc:  denied  { write } for  pid=10478 comm="syz.1.3829" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  379.126953][T10471] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.134863][T10471] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.142687][T10471] device bridge_slave_0 entered promiscuous mode
[  379.151991][T10471] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.158952][T10471] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.166357][T10471] device bridge_slave_1 entered promiscuous mode
[  379.288583][T10474] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.295466][T10474] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.303609][T10474] device bridge_slave_0 entered promiscuous mode
[  379.331523][T10474] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.338797][T10474] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.346299][T10474] device bridge_slave_1 entered promiscuous mode
[  379.375887][T10471] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.382777][T10471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.389895][T10471] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.396758][T10471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.441008][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  379.455200][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.467663][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.500844][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  379.517145][  T309] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  379.524847][  T448] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.531743][  T448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.551371][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  379.559703][  T448] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.566580][  T448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.582754][ T2904] device bridge_slave_1 left promiscuous mode
[  379.588931][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.596522][ T2904] device bridge_slave_0 left promiscuous mode
[  379.605718][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.615174][ T2904] device veth1_macvtap left promiscuous mode
[  379.621346][ T2904] device veth0_vlan left promiscuous mode
[  379.767140][  T309] usb 2-1: Using ep0 maxpacket: 16
[  379.791087][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  379.808168][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  379.816372][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  379.842471][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  379.850848][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  379.873353][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  379.881420][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  379.889554][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  379.897060][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  379.897844][  T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  379.916206][  T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024
[  379.928524][T10471] device veth0_vlan entered promiscuous mode
[  379.946365][T10471] device veth1_macvtap entered promiscuous mode
[  379.952608][  T309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  379.965789][  T309] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  379.975753][  T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.991225][  T309] usb 2-1: config 0 descriptor??
[  379.999125][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  380.007306][   T20] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  380.015498][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  380.024723][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  380.032734][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  380.042753][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  380.050892][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  380.059465][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  380.067740][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.074616][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.082186][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  380.090538][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  380.098945][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.105783][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.113361][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  380.121405][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  380.129826][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  380.138289][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  380.158099][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  380.165844][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  380.174465][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  380.182990][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  380.191306][ T2173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  380.224357][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  380.236215][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  380.253823][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  380.258838][   T20] usb 3-1: Using ep0 maxpacket: 16
[  380.261976][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  380.275443][T10474] device veth0_vlan entered promiscuous mode
[  380.302786][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  380.313771][T10474] device veth1_macvtap entered promiscuous mode
[  380.331156][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  380.339656][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  380.420969][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  380.429797][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  380.857236][  T309] usbhid 2-1:0.0: can't add hid device: -71
[  380.863157][  T309] usbhid: probe of 2-1:0.0 failed with error -71
[  380.870666][  T309] usb 2-1: USB disconnect, device number 68
[  380.897187][   T20] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  380.907162][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.915043][   T20] usb 3-1: Product: syz
[  380.919114][   T20] usb 3-1: Manufacturer: syz
[  380.923764][   T20] usb 3-1: SerialNumber: syz
[  380.935306][   T20] usb 3-1: config 0 descriptor??
[  380.977931][   T20] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  380.987844][   T20] usb 3-1: Detected FT232H
[  381.187179][   T20] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  381.227992][ T2904] device bridge_slave_1 left promiscuous mode
[  381.233972][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.251988][ T2904] device bridge_slave_0 left promiscuous mode
[  381.264869][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.285650][ T2904] device veth1_macvtap left promiscuous mode
[  381.297977][ T2904] device veth0_vlan left promiscuous mode
[  381.437262][   T20] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5
[  381.453828][   T20] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  381.705022][   T39] usb 3-1: USB disconnect, device number 54
[  381.720839][   T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  381.733572][   T39] ftdi_sio 3-1:0.0: device disconnected
[  381.790809][T10562] loop3: detected capacity change from 0 to 32768
[  382.051459][T10586] loop3: detected capacity change from 0 to 1024
[  382.139486][T10586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  382.227564][  T309] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  382.427277][   T20] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  382.487222][  T309] usb 5-1: Using ep0 maxpacket: 8
[  382.517162][   T39] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  382.617437][  T309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.707137][   T20] usb 4-1: Using ep0 maxpacket: 16
[  382.717221][  T309] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  382.726163][  T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  382.734548][  T309] usb 5-1: SerialNumber: syz
[  382.743097][  T309] usb 5-1: config 0 descriptor??
[  382.757327][   T39] usb 3-1: Using ep0 maxpacket: 32
[  382.787843][  T309] usb 5-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  382.794623][  T309] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized!
[  382.803094][  T309] usb 5-1: Failed to create links for entity 255
[  382.809343][  T309] usb 5-1: Failed to register entities (-22).
[  382.827198][   T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  382.840009][   T20] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  382.848941][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.861028][   T20] usb 4-1: config 0 descriptor??
[  382.877238][   T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.887993][   T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.897582][   T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  382.906542][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.960332][   T39] hub 3-1:4.0: USB hub found
[  382.989907][ T8350] usb 5-1: USB disconnect, device number 45
[  383.207276][   T39] hub 3-1:4.0: 7 ports detected
[  383.227183][   T39] hub 3-1:4.0: insufficient power available to use all downstream ports
[  383.342987][   T20] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003F/input/input61
[  383.427178][   T39] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  383.433342][   T39] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  383.488406][   T39] usb 3-1: USB disconnect, device number 55
[  383.493354][   T20] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  383.755582][T10586] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3867: Invalid inode table block 0 in block_group 0
[  383.768381][T10586] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3867: Invalid inode table block 0 in block_group 0
[  383.781156][T10586] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  383.790596][T10586] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #15: comm syz.3.3867: mark_inode_dirty error
[  383.802057][T10586] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.3867: Invalid inode table block 0 in block_group 0
[  383.837163][ T8350] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  383.917196][  T962] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  384.077163][ T8350] usb 2-1: Using ep0 maxpacket: 16
[  384.157319][  T962] usb 5-1: Using ep0 maxpacket: 8
[  384.277364][  T962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  384.342086][T10474] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.HNiROx/7/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  384.343290][   T39] usb 4-1: USB disconnect, device number 41
[  384.364457][T10474] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0
[  384.370570][ T8350] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  384.382869][T10474] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  384.391879][  T962] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  384.403244][T10474] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error
[  384.421273][ T8350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.432262][  T962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  384.441031][ T8350] usb 2-1: Product: syz
[  384.445387][  T962] usb 5-1: SerialNumber: syz
[  384.452561][ T8350] usb 2-1: Manufacturer: syz
[  384.463283][ T8350] usb 2-1: SerialNumber: syz
[  384.470250][  T962] usb 5-1: config 0 descriptor??
[  384.475384][ T8350] usb 2-1: config 0 descriptor??
[  384.480410][ T2904] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:5: Invalid inode table block 0 in block_group 0
[  384.507872][  T962] usb 5-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  384.514617][  T962] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized!
[  384.523475][  T962] usb 5-1: Failed to create links for entity 255
[  384.530091][  T962] usb 5-1: Failed to register entities (-22).
[  384.538149][ T8350] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  384.561711][ T8350] usb 2-1: Detected FT232H
[  384.699701][T10686] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.706708][T10686] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.714372][T10686] device bridge_slave_0 entered promiscuous mode
[  384.718438][  T448] usb 5-1: USB disconnect, device number 46
[  384.722262][T10686] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.733411][T10686] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.740891][T10686] device bridge_slave_1 entered promiscuous mode
[  384.757236][ T8350] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  384.800584][T10686] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.807445][T10686] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.814617][T10686] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.821438][T10686] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.844702][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  384.852329][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.859645][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.869505][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  384.877679][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.884529][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.898238][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  384.906446][  T309] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.913404][  T309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.930449][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  384.938472][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  384.952993][T10686] device veth0_vlan entered promiscuous mode
[  384.958931][   T20] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  384.966904][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  384.975644][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  384.983567][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  384.991117][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  385.005445][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  385.013360][ T8350] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5
[  385.020738][ T8350] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  385.022400][T10686] device veth1_macvtap entered promiscuous mode
[  385.045074][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  385.055342][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  385.098205][  T320] device bridge_slave_1 left promiscuous mode
[  385.104210][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.111658][  T320] device bridge_slave_0 left promiscuous mode
[  385.117910][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.125695][  T320] device veth1_macvtap left promiscuous mode
[  385.133041][  T320] device veth0_vlan left promiscuous mode
[  385.198025][   T20] usb 3-1: Using ep0 maxpacket: 8
[  385.230547][  T309] usb 2-1: USB disconnect, device number 69
[  385.239215][  T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  385.257571][  T309] ftdi_sio 2-1:0.0: device disconnected
[  385.317232][   T20] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  385.325591][   T20] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  385.335908][   T20] usb 3-1: config 135 has no interface number 0
[  385.342204][   T20] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  385.528558][   T20] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  385.543602][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.554006][   T20] usb 3-1: Product: syz
[  385.558069][   T20] usb 3-1: Manufacturer: syz
[  385.562455][   T20] usb 3-1: SerialNumber: syz
[  385.619102][   T20] usb 3-1: Found UVC 0.00 device syz (18ec:3288)
[  385.625308][   T20] usb 3-1: No valid video chain found.
[  385.727179][  T961] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  385.819853][   T20] usb 3-1: USB disconnect, device number 56
[  385.874418][T10817] sock: sock_set_timeout: `syz.4.3972' (pid 10817) tries to set negative timeout
[  385.977527][  T961] usb 4-1: Using ep0 maxpacket: 8
[  386.107904][  T961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.144584][T10871] device team_slave_0 entered promiscuous mode
[  386.187239][  T291] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  386.197207][  T961] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  386.213248][  T961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  386.214135][T10886] __nla_validate_parse: 3 callbacks suppressed
[  386.214155][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'.
[  386.232160][  T961] usb 4-1: SerialNumber: syz
[  386.238147][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'.
[  386.256356][  T961] usb 4-1: config 0 descriptor??
[  386.302976][T10899] device vlan1 entered promiscuous mode
[  386.310164][  T961] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  386.318318][  T961] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized!
[  386.326791][  T961] usb 4-1: Failed to create links for entity 255
[  386.333328][T10899] device vlan1 left promiscuous mode
[  386.333372][  T961] usb 4-1: Failed to register entities (-22).
[  386.363354][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4014'.
[  386.424108][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'.
[  386.447158][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'.
[  386.461097][  T291] usb 5-1: Using ep0 maxpacket: 16
[  386.512042][  T309] usb 4-1: USB disconnect, device number 42
[  386.579964][T10940] loop1: detected capacity change from 0 to 128
[  386.661072][   T30] audit: type=1400 audit(1719464328.002:361): avc:  denied  { mounton } for  pid=10939 comm="syz.1.4031" path="/root/syzkaller.SwXnXC/126/file0/file0" dev="loop1" ino=1048912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  386.758059][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4033'.
[  386.766889][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4033'.
[  386.777591][  T291] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  386.791317][  T291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.797184][   T39] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  386.804972][  T291] usb 5-1: Product: syz
[  386.811045][  T291] usb 5-1: Manufacturer: syz
[  386.822214][  T291] usb 5-1: SerialNumber: syz
[  386.836190][  T291] usb 5-1: config 0 descriptor??
[  386.852225][T10956] loop1: detected capacity change from 0 to 256
[  386.897908][  T291] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  386.905521][  T291] usb 5-1: Detected FT232H
[  386.927760][T10956] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  387.047154][   T39] usb 1-1: Using ep0 maxpacket: 8
[  387.117213][  T291] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  387.167351][   T39] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  387.175624][   T39] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  387.186501][   T39] usb 1-1: config 135 has no interface number 0
[  387.192695][   T39] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  387.207179][ T8350] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  387.357249][   T39] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  387.366335][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.374287][   T39] usb 1-1: Product: syz
[  387.377216][  T291] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5
[  387.378328][   T39] usb 1-1: Manufacturer: syz
[  387.385335][  T291] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  387.389857][   T39] usb 1-1: SerialNumber: syz
[  387.437942][   T39] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[  387.444262][   T39] usb 1-1: No valid video chain found.
[  387.449538][ T8350] usb 2-1: Using ep0 maxpacket: 8
[  387.567228][ T8350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  387.577270][ T8350] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  387.586162][ T8350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.591630][  T291] usb 5-1: USB disconnect, device number 47
[  387.599789][   T20] usb 4-1: new low-speed USB device number 43 using dummy_hcd
[  387.600310][ T8350] usb 2-1: config 0 descriptor??
[  387.608248][  T291] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  387.621376][  T291] ftdi_sio 5-1:0.0: device disconnected
[  387.641143][  T962] usb 1-1: USB disconnect, device number 35
[  387.851128][  T291] usb 2-1: USB disconnect, device number 70
[  388.027206][   T20] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  388.297206][   T20] usb 4-1: string descriptor 0 read error: -22
[  388.303457][   T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  388.312474][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.367690][   T20] cdc_ether: probe of 4-1:1.0 failed with error -22
[  388.377134][  T962] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  388.473481][T11009] syz.1.4059[11009] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  388.473562][T11009] syz.1.4059[11009] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  388.540963][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'.
[  388.565580][   T30] audit: type=1326 audit(1719464329.902:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.1.4059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa67b1c9ae9 code=0x0
[  388.593031][ T7194] usb 4-1: USB disconnect, device number 43
[  388.637133][  T962] usb 5-1: Using ep0 maxpacket: 8
[  388.666812][   T30] audit: type=1400 audit(1719464330.002:363): avc:  denied  { getopt } for  pid=11008 comm="syz.1.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  388.757200][  T962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.847216][  T962] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  388.866280][  T962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  388.874338][  T962] usb 5-1: SerialNumber: syz
[  388.887502][  T962] usb 5-1: config 0 descriptor??
[  388.927918][  T962] usb 5-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  388.934661][  T962] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized!
[  388.943197][  T962] usb 5-1: Failed to create links for entity 255
[  388.950914][  T962] usb 5-1: Failed to register entities (-22).
[  389.129952][  T309] usb 5-1: USB disconnect, device number 48
[  389.179837][T11016] loop3: detected capacity change from 0 to 256
[  389.717163][  T291] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  389.814761][T11040] loop4: detected capacity change from 0 to 256
[  389.816214][T11038] loop1: detected capacity change from 0 to 128
[  389.847145][  T309] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  389.863970][T11040] FAT-fs (loop4): Directory bread(block 64) failed
[  389.870491][T11040] FAT-fs (loop4): Directory bread(block 65) failed
[  389.876929][T11040] FAT-fs (loop4): Directory bread(block 66) failed
[  389.883767][T11038] FAT-fs (loop1): Unrecognized mount option "184467440737095516150x000000000000ee01" or missing value
[  389.898195][T11040] FAT-fs (loop4): Directory bread(block 67) failed
[  389.904774][T11040] FAT-fs (loop4): Directory bread(block 68) failed
[  389.911414][T11040] FAT-fs (loop4): Directory bread(block 69) failed
[  389.918281][T11040] FAT-fs (loop4): Directory bread(block 70) failed
[  389.924886][T11040] FAT-fs (loop4): Directory bread(block 71) failed
[  389.931445][T11040] FAT-fs (loop4): Directory bread(block 72) failed
[  389.938391][T11040] FAT-fs (loop4): Directory bread(block 73) failed
[  389.967164][  T291] usb 1-1: Using ep0 maxpacket: 8
[  390.071734][   T30] audit: type=1400 audit(1719464331.412:364): avc:  denied  { connect } for  pid=11046 comm="syz.4.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  390.099605][   T30] audit: type=1400 audit(1719464331.432:365): avc:  denied  { write } for  pid=11046 comm="syz.4.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  390.127271][  T291] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  390.127303][  T291] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  390.127326][  T291] usb 1-1: config 135 has no interface number 0
[  390.127355][  T291] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  390.173877][   T30] audit: type=1400 audit(1719464331.512:366): avc:  denied  { read } for  pid=11048 comm="syz.4.4074" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  390.196834][   T30] audit: type=1400 audit(1719464331.512:367): avc:  denied  { open } for  pid=11048 comm="syz.4.4074" path="/dev/rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  390.267254][  T309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  390.277320][  T309] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  390.327290][  T291] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  390.336555][  T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.344457][  T291] usb 1-1: Product: syz
[  390.348446][  T291] usb 1-1: Manufacturer: syz
[  390.352776][  T291] usb 1-1: SerialNumber: syz
[  390.367299][  T309] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  390.376283][  T309] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  390.384625][  T309] usb 3-1: Manufacturer: syz
[  390.390172][  T309] usb 3-1: config 0 descriptor??
[  390.397842][  T291] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[  390.404094][  T291] usb 1-1: No valid video chain found.
[  390.598919][  T309] usb 1-1: USB disconnect, device number 36
[  390.634305][   T20] usb 3-1: USB disconnect, device number 57
[  390.827168][  T448] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  391.067202][  T448] usb 2-1: Using ep0 maxpacket: 16
[  391.177259][   T20] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  391.187285][  T448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.198222][  T448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  391.213360][  T448] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  391.225793][T11071] loop2: detected capacity change from 0 to 256
[  391.232588][  T448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.241699][  T448] usb 2-1: config 0 descriptor??
[  391.256359][T11071] FAT-fs (loop2): Directory bread(block 64) failed
[  391.263113][T11071] FAT-fs (loop2): Directory bread(block 65) failed
[  391.269730][T11071] FAT-fs (loop2): Directory bread(block 66) failed
[  391.276064][T11071] FAT-fs (loop2): Directory bread(block 67) failed
[  391.282533][T11071] FAT-fs (loop2): Directory bread(block 68) failed
[  391.288973][T11071] FAT-fs (loop2): Directory bread(block 69) failed
[  391.295327][T11071] FAT-fs (loop2): Directory bread(block 70) failed
[  391.301788][T11071] FAT-fs (loop2): Directory bread(block 71) failed
[  391.308275][T11071] FAT-fs (loop2): Directory bread(block 72) failed
[  391.314727][T11071] FAT-fs (loop2): Directory bread(block 73) failed
[  391.377254][ T7194] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  391.417907][   T20] usb 4-1: Using ep0 maxpacket: 8
[  391.497251][  T962] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  391.547287][   T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.647246][   T20] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  391.656179][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  391.664702][   T20] usb 4-1: SerialNumber: syz
[  391.670218][   T20] usb 4-1: config 0 descriptor??
[  391.718464][  T448] microsoft 0003:045E:07DA.0040: No inputs registered, leaving
[  391.726706][   T20] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  391.733637][  T448] microsoft 0003:045E:07DA.0040: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  391.737551][ T7194] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.744938][   T20] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized!
[  391.755162][ T7194] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  391.763587][  T448] microsoft 0003:045E:07DA.0040: no inputs found
[  391.778239][   T20] usb 4-1: Failed to create links for entity 255
[  391.784422][   T20] usb 4-1: Failed to register entities (-22).
[  391.790367][  T448] microsoft 0003:045E:07DA.0040: could not initialize ff, continuing anyway
[  391.847460][ T7194] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  391.856450][ T7194] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  391.864405][ T7194] usb 1-1: Manufacturer: syz
[  391.868968][  T962] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  391.879622][  T962] usb 5-1: config 1 interface 0 has no altsetting 1
[  391.886291][ T7194] usb 1-1: config 0 descriptor??
[  391.922663][   T20] usb 4-1: USB disconnect, device number 44
[  391.936764][T11060] UDC core: couldn't find an available UDC or it's busy: -16
[  391.944013][T11060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  392.047267][  T962] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  392.056204][  T962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.064412][  T962] usb 5-1: Product: syz
[  392.068421][  T962] usb 5-1: Manufacturer: syz
[  392.072784][  T962] usb 5-1: SerialNumber: syz
[  392.117760][  T962] cdc_ether 5-1:1.0: skipping garbage
[  392.123088][  T962] cdc_ether: probe of 5-1:1.0 failed with error -22
[  392.148939][T11068] loop0: detected capacity change from 0 to 2048
[  392.173205][   T20] usb 2-1: USB disconnect, device number 71
[  392.233570][ T8350] usb 1-1: USB disconnect, device number 37
[  392.318783][ T7194] usb 5-1: USB disconnect, device number 49
[  392.747164][ T8350] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  392.754784][T11099] loop1: detected capacity change from 0 to 1024
[  392.884340][T11099] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  392.895123][T11112] syz.4.4099[11112] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  392.895202][T11112] syz.4.4099[11112] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  392.935726][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4099'.
[  392.959923][   T30] audit: type=1326 audit(1719464334.302:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.4.4099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8cd20cae9 code=0x0
[  393.127208][ T8350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  393.137243][ T8350] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  393.177224][   T39] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  393.217293][ T8350] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  393.228225][ T8350] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  393.241766][ T8350] usb 4-1: Manufacturer: syz
[  393.255605][ T8350] usb 4-1: config 0 descriptor??
[  393.427172][   T39] usb 2-1: Using ep0 maxpacket: 16
[  393.519048][   T20] usb 4-1: USB disconnect, device number 45
[  393.547289][   T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  393.560016][   T39] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  393.569409][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.578076][   T39] usb 2-1: config 0 descriptor??
[  394.007198][  T448] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  394.062875][   T39] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0041/input/input63
[  394.139154][   T39] microsoft 0003:045E:07DA.0041: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  394.257231][  T448] usb 5-1: Using ep0 maxpacket: 16
[  394.317201][   T20] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  394.397279][  T448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.408169][  T448] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  394.420966][  T448] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  394.429845][  T448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.439080][  T448] usb 5-1: config 0 descriptor??
[  394.481997][T11099] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz.1.4094: Invalid inode table block 0 in block_group 0
[  394.495027][T11099] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz.1.4094: Invalid inode table block 0 in block_group 0
[  394.507913][T11099] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  394.517712][T11099] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #15: comm syz.1.4094: mark_inode_dirty error
[  394.529284][T11099] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz.1.4094: Invalid inode table block 0 in block_group 0
[  394.697639][   T20] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  394.707876][   T20] usb 1-1: config 1 interface 0 has no altsetting 1
[  394.908433][  T448] microsoft 0003:045E:07DA.0042: No inputs registered, leaving
[  394.915942][   T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  394.925080][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.933245][  T448] microsoft 0003:045E:07DA.0042: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  394.944524][  T448] microsoft 0003:045E:07DA.0042: no inputs found
[  394.950707][   T20] usb 1-1: Product: syz
[  394.954784][   T20] usb 1-1: Manufacturer: syz
[  394.959296][  T448] microsoft 0003:045E:07DA.0042: could not initialize ff, continuing anyway
[  394.967789][   T20] usb 1-1: SerialNumber: syz
[  395.019980][   T20] cdc_ether 1-1:1.0: skipping garbage
[  395.025299][   T20] cdc_ether: probe of 1-1:1.0 failed with error -22
[  395.064062][   T20] usb 2-1: USB disconnect, device number 72
[  395.070858][ T9326] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.SwXnXC/145/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  395.093440][ T9326] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0
[  395.109086][ T9326] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem
[  395.123370][ T9326] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error
[  395.132607][T11130] UDC core: couldn't find an available UDC or it's busy: -16
[  395.143918][  T320] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 0 in block_group 0
[  395.156673][T11130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  395.220202][  T311] usb 1-1: USB disconnect, device number 38
[  395.315756][T11162] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.322733][T11162] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.330525][T11162] device bridge_slave_0 entered promiscuous mode
[  395.340614][T11162] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.347485][T11162] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.354783][T11162] device bridge_slave_1 entered promiscuous mode
[  395.386834][  T309] usb 5-1: USB disconnect, device number 50
[  395.423177][T11162] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.430189][T11162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.437399][T11162] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.444333][T11162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.465435][  T962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  395.472877][  T962] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.481211][  T962] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.492375][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  395.500610][  T448] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  395.508466][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.515386][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.524500][  T962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  395.532802][  T962] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.539671][  T962] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.558235][  T962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  395.566201][  T962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  395.577705][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  395.591863][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  395.600155][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  395.607911][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  395.618362][T11162] device veth0_vlan entered promiscuous mode
[  395.628942][  T962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  395.638117][T11162] device veth1_macvtap entered promiscuous mode
[  395.649671][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  395.663875][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  395.748154][  T320] device bridge_slave_1 left promiscuous mode
[  395.754256][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.762578][  T320] device bridge_slave_0 left promiscuous mode
[  395.768926][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.779197][  T448] usb 4-1: Using ep0 maxpacket: 16
[  395.788200][  T320] device veth1_macvtap left promiscuous mode
[  395.799140][  T320] device veth0_vlan left promiscuous mode
[  395.948969][  T962] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  395.956924][T11188] syz.4.4129[11188] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  395.957005][T11188] syz.4.4129[11188] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  395.982695][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4129'.
[  396.006889][   T30] audit: type=1326 audit(1719464337.352:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.4.4129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8cd20cae9 code=0x0
[  396.117555][  T448] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  396.126493][  T448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.134810][  T448] usb 4-1: Product: syz
[  396.138832][  T448] usb 4-1: Manufacturer: syz
[  396.143180][  T448] usb 4-1: SerialNumber: syz
[  396.154737][  T448] usb 4-1: config 0 descriptor??
[  396.218506][  T448] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  396.226150][  T448] usb 4-1: Detected FT232H
[  396.237338][   T39] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  396.317194][  T962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.327316][  T962] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  396.407289][  T962] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  396.416217][  T962] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  396.424542][  T962] usb 2-1: Manufacturer: syz
[  396.427258][  T448] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  396.430279][  T962] usb 2-1: config 0 descriptor??
[  396.477183][   T39] usb 1-1: Using ep0 maxpacket: 16
[  396.593917][T11193] loop2: detected capacity change from 0 to 40427
[  396.607371][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  396.618433][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024
[  396.629421][   T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  396.641998][   T39] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  396.650842][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.659311][   T39] usb 1-1: config 0 descriptor??
[  396.680419][T11193] F2FS-fs (loop2): Found nat_bits in checkpoint
[  396.697694][  T448] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5
[  396.707589][  T448] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  396.724961][T11193] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  396.731910][T11193] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  396.794866][  T448] usb 2-1: USB disconnect, device number 73
[  397.027590][   T30] audit: type=1400 audit(1719464338.292:370): avc:  denied  { setopt } for  pid=11192 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  397.238289][  T962] usb 4-1: USB disconnect, device number 46
[  397.244713][  T962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  397.254250][  T962] ftdi_sio 4-1:0.0: device disconnected
[  397.348955][ T9730] attempt to access beyond end of device
[  397.348955][ T9730] loop2: rw=2049, want=45104, limit=40427
[  397.407636][   T39] usbhid 1-1:0.0: can't add hid device: -71
[  397.413544][   T39] usbhid: probe of 1-1:0.0 failed with error -71
[  397.429654][   T39] usb 1-1: USB disconnect, device number 39
[  397.557189][  T311] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  398.367309][  T311] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  398.378028][  T311] usb 5-1: config 1 interface 0 has no altsetting 1
[  398.397170][  T291] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  398.537268][  T311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  398.546211][  T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.556130][  T311] usb 5-1: Product: syz
[  398.560421][  T311] usb 5-1: Manufacturer: syz
[  398.564912][  T311] usb 5-1: SerialNumber: syz
[  398.607690][  T311] cdc_ether 5-1:1.0: skipping garbage
[  398.612994][  T311] cdc_ether: probe of 5-1:1.0 failed with error -22
[  398.637186][  T291] usb 2-1: Using ep0 maxpacket: 16
[  398.686332][T11276] loop2: detected capacity change from 0 to 256
[  398.773824][T11276] FAT-fs (loop2): Directory bread(block 64) failed
[  398.780501][T11276] FAT-fs (loop2): Directory bread(block 65) failed
[  398.792160][T11276] FAT-fs (loop2): Directory bread(block 66) failed
[  398.798687][T11276] FAT-fs (loop2): Directory bread(block 67) failed
[  398.811176][ T8350] usb 5-1: USB disconnect, device number 51
[  398.817514][T11276] FAT-fs (loop2): Directory bread(block 68) failed
[  398.823951][T11276] FAT-fs (loop2): Directory bread(block 69) failed
[  398.831405][T11276] FAT-fs (loop2): Directory bread(block 70) failed
[  398.838606][T11276] FAT-fs (loop2): Directory bread(block 71) failed
[  398.844972][T11276] FAT-fs (loop2): Directory bread(block 72) failed
[  398.851532][T11276] FAT-fs (loop2): Directory bread(block 73) failed
[  398.887716][T11280] syz.0.4163[11280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  398.887800][T11280] syz.0.4163[11280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  398.917218][  T291] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  398.949567][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'.
[  398.976589][  T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.990844][   T30] audit: type=1326 audit(1719464340.332:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11279 comm="syz.0.4163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1fab8ae9 code=0x0
[  399.013958][  T291] usb 2-1: Product: syz
[  399.018346][  T291] usb 2-1: Manufacturer: syz
[  399.025263][  T291] usb 2-1: SerialNumber: syz
[  399.041365][  T291] usb 2-1: config 0 descriptor??
[  399.078016][  T291] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  399.088138][  T291] usb 2-1: Detected FT232H
[  399.092960][   T30] audit: type=1400 audit(1719464340.402:372): avc:  denied  { ioctl } for  pid=11297 comm="syz.3.4171" path="socket:[69735]" dev="sockfs" ino=69735 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  399.140996][T11307] loop3: detected capacity change from 0 to 256
[  399.420513][T11307] FAT-fs (loop3): Directory bread(block 64) failed
[  399.433985][  T291] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  399.440838][T11307] FAT-fs (loop3): Directory bread(block 65) failed
[  399.449110][T11307] FAT-fs (loop3): Directory bread(block 66) failed
[  399.455472][T11307] FAT-fs (loop3): Directory bread(block 67) failed
[  399.461973][T11307] FAT-fs (loop3): Directory bread(block 68) failed
[  399.468374][T11307] FAT-fs (loop3): Directory bread(block 69) failed
[  399.474716][T11307] FAT-fs (loop3): Directory bread(block 70) failed
[  399.481173][T11307] FAT-fs (loop3): Directory bread(block 71) failed
[  399.487628][T11307] FAT-fs (loop3): Directory bread(block 72) failed
[  399.493953][T11307] FAT-fs (loop3): Directory bread(block 73) failed
[  399.757237][  T291] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5
[  399.774102][  T291] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  399.792478][T11312] loop3: detected capacity change from 0 to 40427
[  400.125173][T11337] loop0: detected capacity change from 0 to 256
[  400.142688][T11312] F2FS-fs (loop3): Found nat_bits in checkpoint
[  400.160042][  T291] usb 2-1: USB disconnect, device number 74
[  400.177651][T11337] FAT-fs (loop0): Directory bread(block 64) failed
[  400.186062][  T291] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  400.204896][  T291] ftdi_sio 2-1:0.0: device disconnected
[  400.206971][T11337] FAT-fs (loop0): Directory bread(block 65) failed
[  400.220279][T11312] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  400.226656][T11337] FAT-fs (loop0): Directory bread(block 66) failed
[  400.227298][T11312] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  400.233118][T11337] FAT-fs (loop0): Directory bread(block 67) failed
[  400.254695][T11337] FAT-fs (loop0): Directory bread(block 68) failed
[  400.261256][T11337] FAT-fs (loop0): Directory bread(block 69) failed
[  400.267846][T11337] FAT-fs (loop0): Directory bread(block 70) failed
[  400.274317][T11337] FAT-fs (loop0): Directory bread(block 71) failed
[  400.281227][T11337] FAT-fs (loop0): Directory bread(block 72) failed
[  400.287976][T11337] FAT-fs (loop0): Directory bread(block 73) failed
[  400.617279][ T8350] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  400.630394][T11364] loop0: detected capacity change from 0 to 2048
[  400.674998][T10686] attempt to access beyond end of device
[  400.674998][T10686] loop3: rw=2049, want=45104, limit=40427
[  400.701136][T11364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  400.842884][T11377] syz.4.4201 (pid 11377) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  400.926819][   T30] audit: type=1400 audit(1719464342.262:373): avc:  denied  { create } for  pid=11363 comm="syz.0.4196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  400.928385][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4196'.
[  401.028259][   T30] audit: type=1400 audit(1719464342.332:374): avc:  denied  { ioctl } for  pid=11384 comm="syz.3.4205" path="/dev/rtc0" dev="devtmpfs" ino=167 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  401.129914][ T8350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  401.140527][ T8350] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  401.307504][ T8350] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  401.431716][ T8350] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  401.522206][ T8350] usb 3-1: Manufacturer: syz
[  401.552985][ T8350] usb 3-1: config 0 descriptor??
[  401.576508][T11395] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.597186][T11395] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.604621][T11395] device bridge_slave_0 entered promiscuous mode
[  401.612569][T11395] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.619814][T11395] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.627489][T11395] device bridge_slave_1 entered promiscuous mode
[  401.706213][T11395] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.713135][T11395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.720336][T11395] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.727207][T11395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.791882][  T442] ==================================================================
[  401.799794][  T442] BUG: KASAN: use-after-free in l2tp_session_delete+0x24/0x4e0
[  401.807155][  T442] Write of size 8 at addr ffff88811066bc08 by task kworker/u4:4/442
[  401.814973][  T442] 
[  401.817139][  T442] CPU: 1 PID: 442 Comm: kworker/u4:4 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0
[  401.826947][  T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  401.836854][  T442] Workqueue: l2tp l2tp_tunnel_del_work
[  401.842146][  T442] Call Trace:
[  401.845279][  T442]  <TASK>
[  401.848044][  T442]  dump_stack_lvl+0x151/0x1b7
[  401.852554][  T442]  ? io_uring_drop_tctx_refs+0x190/0x190
[  401.858023][  T442]  ? panic+0x751/0x751
[  401.861934][  T442]  print_address_description+0x87/0x3b0
[  401.867306][  T442]  kasan_report+0x179/0x1c0
[  401.871642][  T442]  ? schedule_preempt_disabled+0x20/0x20
[  401.877112][  T442]  ? l2tp_session_delete+0x24/0x4e0
[  401.882146][  T442]  ? l2tp_session_delete+0x24/0x4e0
[  401.887183][  T442]  kasan_check_range+0x293/0x2a0
[  401.891954][  T442]  __kasan_check_write+0x14/0x20
[  401.896761][  T442]  l2tp_session_delete+0x24/0x4e0
[  401.901593][  T442]  l2tp_tunnel_del_work+0x19d/0x380
[  401.906625][  T442]  process_one_work+0x6bb/0xc10
[  401.911314][  T442]  worker_thread+0xad5/0x12a0
[  401.915827][  T442]  ? _raw_spin_lock+0x1b0/0x1b0
[  401.920517][  T442]  kthread+0x421/0x510
[  401.924416][  T442]  ? worker_clr_flags+0x180/0x180
[  401.929284][  T442]  ? kthread_blkcg+0xd0/0xd0
[  401.933703][  T442]  ret_from_fork+0x1f/0x30
[  401.937957][  T442]  </TASK>
[  401.940819][  T442] 
[  401.942989][  T442] Allocated by task 11415:
[  401.947250][  T442]  ____kasan_kmalloc+0xdb/0x110
[  401.950603][T11353] loop2: detected capacity change from 0 to 2048
[  401.951926][  T442]  __kasan_kmalloc+0x9/0x10
[  401.962438][  T442]  __kmalloc+0x13a/0x270
[  401.966515][  T442]  l2tp_session_create+0x38/0xb60
[  401.971468][  T442]  pppol2tp_connect+0xc5d/0x1690
[  401.976240][  T442]  __sys_connect+0x38b/0x410
[  401.980665][  T442]  __x64_sys_connect+0x7a/0x90
[  401.985300][  T442]  do_syscall_64+0x3d/0xb0
[  401.989528][  T442]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  401.995251][  T442] 
[  401.997515][  T442] Freed by task 11415:
[  402.001420][  T442]  kasan_set_track+0x4b/0x70
[  402.005851][  T442]  kasan_set_free_info+0x23/0x40
[  402.010619][  T442]  ____kasan_slab_free+0x126/0x160
[  402.015571][  T442]  __kasan_slab_free+0x11/0x20
[  402.020169][  T442]  slab_free_freelist_hook+0xbd/0x190
[  402.025374][  T442]  kfree+0xc8/0x220
[  402.029019][  T442]  l2tp_session_dec_refcount+0xa9/0x1b0
[  402.034420][  T442]  pppol2tp_session_destruct+0xaf/0xf0
[  402.039710][  T442]  __sk_destruct+0x56/0x5b0
[  402.044035][  T442]  __sk_free+0x36c/0x470
[  402.048116][  T442]  sk_free+0x51/0x80
[  402.051850][  T442]  pppol2tp_put_sk+0x77/0xb0
[  402.056274][  T442]  rcu_do_batch+0x57a/0xc10
[  402.060613][  T442]  rcu_core+0x517/0x1020
[  402.064694][  T442]  rcu_core_si+0x9/0x10
[  402.068688][  T442]  __do_softirq+0x26d/0x5bf
[  402.073025][  T442] 
[  402.075193][  T442] Last potentially related work creation:
[  402.080750][  T442]  kasan_save_stack+0x3b/0x60
[  402.085259][  T442]  __kasan_record_aux_stack+0xd3/0xf0
[  402.090469][  T442]  kasan_record_aux_stack_noalloc+0xb/0x10
[  402.096110][  T442]  call_rcu+0x135/0x1310
[  402.100192][  T442]  pppol2tp_release+0x20f/0x2d0
[  402.104877][  T442]  sock_close+0xdf/0x270
[  402.108960][  T442]  __fput+0x3fe/0x910
[  402.112776][  T442]  ____fput+0x15/0x20
[  402.116599][  T442]  task_work_run+0x129/0x190
[  402.121030][  T442]  exit_to_user_mode_loop+0xc4/0xe0
[  402.126169][  T442]  exit_to_user_mode_prepare+0x5a/0xa0
[  402.131458][  T442]  syscall_exit_to_user_mode+0x26/0x160
[  402.136935][  T442]  do_syscall_64+0x49/0xb0
[  402.141191][  T442]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  402.146919][  T442] 
[  402.149089][  T442] Second to last potentially related work creation:
[  402.155511][  T442]  kasan_save_stack+0x3b/0x60
[  402.160021][  T442]  __kasan_record_aux_stack+0xd3/0xf0
[  402.165379][  T442]  kasan_record_aux_stack_noalloc+0xb/0x10
[  402.171001][  T442]  call_rcu+0x135/0x1310
[  402.175086][  T442]  fib6_del+0xd30/0x1060
[  402.179167][  T442]  fib6_clean_node+0x2ed/0x550
[  402.183759][  T442]  fib6_walk_continue+0x52d/0x720
[  402.188619][  T442]  fib6_walk+0x172/0x2d0
[  402.192705][  T442]  fib6_clean_all+0x202/0x2c0
[  402.197218][  T442]  rt6_disable_ip+0x153/0x730
[  402.201725][  T442]  addrconf_ifdown+0x160/0x1ae0
[  402.206409][  T442]  addrconf_notify+0x37d/0xdd0
[  402.211011][  T442]  raw_notifier_call_chain+0x8c/0xf0
[  402.216131][  T442]  dev_close_many+0x37c/0x530
[  402.220648][  T442]  unregister_netdevice_many+0x492/0x17c0
[  402.226201][  T442]  default_device_exit_batch+0x38a/0x3f0
[  402.231668][  T442]  cleanup_net+0x6ce/0xc00
[  402.235943][  T442]  process_one_work+0x6bb/0xc10
[  402.240622][  T442]  worker_thread+0xad5/0x12a0
[  402.245126][  T442]  kthread+0x421/0x510
[  402.249027][  T442]  ret_from_fork+0x1f/0x30
[  402.253279][  T442] 
[  402.255454][  T442] The buggy address belongs to the object at ffff88811066bc00
[  402.255454][  T442]  which belongs to the cache kmalloc-512 of size 512
[  402.269337][  T442] The buggy address is located 8 bytes inside of
[  402.269337][  T442]  512-byte region [ffff88811066bc00, ffff88811066be00)
[  402.282269][  T442] The buggy address belongs to the page:
[  402.287750][  T442] page:ffffea0004419a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110668
[  402.297806][  T442] head:ffffea0004419a00 order:2 compound_mapcount:0 compound_pincount:0
[  402.305959][  T442] flags: 0x4000000000010200(slab|head|zone=1)
[  402.311880][  T442] raw: 4000000000010200 ffffea000485dd00 0000000300000003 ffff888100042f00
[  402.320289][  T442] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  402.328700][  T442] page dumped because: kasan: bad access detected
[  402.334958][  T442] page_owner tracks the page as allocated
[  402.340504][  T442] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6, ts 26451976125, free_ts 26243182438
[  402.358474][  T442]  post_alloc_hook+0x1a3/0x1b0
[  402.363068][  T442]  prep_new_page+0x1b/0x110
[  402.367408][  T442]  get_page_from_freelist+0x3550/0x35d0
[  402.372796][  T442]  __alloc_pages+0x27e/0x8f0
[  402.377216][  T442]  new_slab+0x9a/0x4e0
[  402.381122][  T442]  ___slab_alloc+0x39e/0x830
[  402.385548][  T442]  __slab_alloc+0x4a/0x90
[  402.389713][  T442]  __kmalloc+0x16d/0x270
[  402.393797][  T442]  ___neigh_create+0x6d0/0x1bd0
[  402.398482][  T442]  __neigh_create+0x32/0x40
[  402.402838][  T442]  ip6_finish_output2+0x9ee/0x16e0
[  402.407854][  T442]  __ip6_finish_output+0x60f/0x7c0
[  402.412803][  T442]  ip6_finish_output+0x31/0x210
[  402.417488][  T442]  ip6_output+0x1f7/0x4d0
[  402.421663][  T442]  mld_sendpack+0x662/0xbb0
[  402.425995][  T442]  mld_ifc_work+0x7dc/0xbb0
[  402.430334][  T442] page last free stack trace:
[  402.434846][  T442]  free_unref_page_prepare+0x7c8/0x7d0
[  402.440144][  T442]  free_unref_page+0xe8/0x750
[  402.444653][  T442]  __free_pages+0x61/0xf0
[  402.448819][  T442]  __free_slab+0xec/0x1d0
[  402.452984][  T442]  __unfreeze_partials+0x165/0x1a0
[  402.457934][  T442]  put_cpu_partial+0xc4/0x120
[  402.462445][  T442]  __slab_free+0x1c8/0x290
[  402.466711][  T442]  ___cache_free+0x109/0x120
[  402.471127][  T442]  qlink_free+0x4d/0x90
[  402.475120][  T442]  qlist_free_all+0x44/0xb0
[  402.479457][  T442]  kasan_quarantine_reduce+0x15a/0x180
[  402.484760][  T442]  __kasan_slab_alloc+0x2f/0xe0
[  402.489440][  T442]  slab_post_alloc_hook+0x53/0x2c0
[  402.494397][  T442]  kmem_cache_alloc+0xf5/0x200
[  402.499072][  T442]  sock_alloc_inode+0x1b/0xb0
[  402.503587][  T442]  new_inode_pseudo+0x64/0x220
[  402.508188][  T442] 
[  402.510358][  T442] Memory state around the buggy address:
[  402.515830][  T442]  ffff88811066bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  402.523726][  T442]  ffff88811066bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  402.531632][  T442] >ffff88811066bc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  402.539528][  T442]                       ^
[  402.543689][  T442]  ffff88811066bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  402.551589][  T442]  ffff88811066bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  402.559479][  T442] ==================================================================
[  402.567380][  T442] Disabling lock debugging due to kernel taint
[  402.580111][   T20] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.587659][   T20] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.629871][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  402.638151][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  402.645530][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  402.653885][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  402.665461][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.673133][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.680776][ T8350] usb 3-1: USB disconnect, device number 58
[  402.686635][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  402.695343][  T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  402.703431][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.710286][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.729916][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  402.738388][ T7194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  402.757948][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  402.765920][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  402.773989][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  402.782708][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  402.794249][T11395] device veth0_vlan entered promiscuous mode
[  402.808938][T11395] device veth1_macvtap entered promiscuous mode
[  402.836416][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  402.844970][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  402.853257][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  402.861816][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  402.869889][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  402.877410][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  402.885486][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  402.894028][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  402.902077][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  402.914235][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  402.921628][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  403.028322][   T10] device bridge_slave_1 left promiscuous mode
[  403.034291][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.041713][   T10] device bridge_slave_0 left promiscuous mode
[  403.047743][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.055645][   T10] device veth1_macvtap left promiscuous mode
[  403.061618][   T10] device veth0_vlan left promiscuous mode