last executing test programs:

10.245756263s ago: executing program 0 (id=912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x225, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @d}})
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000100), 0x0, 0x0, 0x0)

10.193305587s ago: executing program 0 (id=913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x1a)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x2, 0x1, 0xa})
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c00000000002c"], 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
recvmmsg(r1, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, 0x7, 0x6, 0xa03, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48041}, 0x24048000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000004c0), &(0x7f0000000840)}, 0x20)

10.15863233s ago: executing program 0 (id=915):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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")
lstat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x44004)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20)

10.113663124s ago: executing program 0 (id=916):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000380)={[{@resuid}, {@init_itable}, {@minixdf}, {@nodelalloc}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_eq}]}, 0x3, 0x465, &(0x7f0000001400)="$eJzs3M1vFOUfAPDvTLsFfsCvFfGFF7WKxsaXlgIqBw9qNPGAiYke9Ni0hSALNbQmQIiCMXgyxsS78ei/4Ekvxngy8ap3Q0IMF8DTmtmdobvL7tKWXUbZzycZeJ6ZZ/o8333m6T4zT3cDGFqT2T9JxLaI+D0ixhvZ1gKTjf+uXz0/f+Pq+fkkarV3/krq5a5dPT9fFC3O25pnptKI9LMk9nSod/nsuRNz1eri6Tw/s3Lyw5nls+eeP35y7tjiscVTBw4fPnRw9qUXD7zQlzizNl3b/fHS3l1vvv/VW0e+aIm/LY4+mex18Klarc/VlWt7UzoZLbEhrMtIRGTdVamP//EYidXOG483Pi21ccBA1Wq12tbuhy/UgHtYEq15Qx6GRfFGn93/Flv7JOCVwU0/Snfl1cYNUBb39XxrHBmNNC9Tabu/7afJiHjvwt/fZFsM5jkEAECLH7L5z3Od5n9pPNhU7v/52tBERNwXETsi4v6I2BkRD0TUyz4UEQ+vs/72RZJb5z/p5Q0FtkbZ/O/lfG2rdf5XzP5iYiTPba/HX0mOHq8u7s9fk6mobMrysz3q+PH1377sdqx5/pdtWf3FXDBvx+XRTa3nLMytzN1JzM2uXIzYPdop/uTmSkASEbsiYvcG6zj+zHd7ux27ffw99GGdqfZtxNON/r8QbfEXkt7rkzObo7q4f6a4Km71y6+X3u5W/x3F3wdZ//+v4/V/M/6JpHm9dnn9dVz64/Ou9zQbvf7Hknfr6bF835m5lZXTsxFjyZFGo5v3H1g9t8ifSRvls/in9nUe/zti9ZXYExHZRfxIRDwaEY/lbX88Ip6IiH094v/5tSc/6B5/kr/Q5fX/wrr6fzUxFu17OidGTvz0fUulE6vJvP9v9O7/Q/XUVL5nLb//1tKujV3NAAAA8N+TRsS2SNLpm+k0nZ5u/L38zoi0urS88uzRpY9OLTQ+IzARlbR40jXe9Dx0Nr+tb+QvRkTjTwuK4wfz58Zfj2yp56fnl6oLZQcPQ25rl/Gf+XOk7NYBA+fzWjC8jH8YXsY/DC/jH4ZXh/G/pYx2AHdfp/f/T0poB3D3tY1/y34wRNz/w/DqOv7v5W/+Aeq8/8NQWt4St/+QfHMi2vcUP2ltpw8+sfmWFpaTiMq/ohl3nqglHTs30rIbNrhE2vH7LoYrUe7vJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75JwAA//+ej9qw")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x105000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {0x6000}, {0x0, 0x0, 0x9, 0x1}, {0xf000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x3000, 0x2000}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1000, 0x1400b0})
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)

9.785663802s ago: executing program 0 (id=922):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)

9.765896984s ago: executing program 0 (id=923):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000058c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

3.27406112s ago: executing program 4 (id=965):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x8, 0x0, 0x0, 0x0)

2.886435763s ago: executing program 2 (id=969):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x2)
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000480)='7', 0x1}], 0x1, 0x6e45, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f0000000080)="b6", 0x1, 0xa5a)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
sync()
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628)
sendfile(r1, r4, 0x0, 0x100001)

2.80657372s ago: executing program 2 (id=970):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = eventfd2(0x0, 0x80001)
write$eventfd(r3, &(0x7f00000003c0)=0x5, 0x8)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0xc, 0x2, r3})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6b2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.69168575s ago: executing program 2 (id=971):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="0000d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.362598498s ago: executing program 4 (id=974):
r0 = io_uring_setup(0x2e34, &(0x7f0000000180))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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")
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000200000004000002041001"], 0x101c}, 0x1, 0xffffffffff600000}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.2201821s ago: executing program 3 (id=975):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

2.147681166s ago: executing program 3 (id=977):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00')

2.143420277s ago: executing program 1 (id=978):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000eea9eb87eb8780000066bac0000f3066b808008ed0660f38806f008ee0", 0x39}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = eventfd2(0x44, 0x80001)
creat(0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x3, 0x2, r3})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6b2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.515525481s ago: executing program 4 (id=979):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x1010442, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080)=ANY=[], 0x8)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7fff}, @IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x50}}, 0x0)

1.417593599s ago: executing program 4 (id=980):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000129c0)='./file0\x00', 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x140a118}}, 0x50)
write$FUSE_INTERRUPT(r0, 0x0, 0x0)
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x105401, 0x0)
writev(r2, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x4004, &(0x7f0000000200)={[{@inline_dentry}, {@lfs_mode}, {@fault_injection={'fault_injection', 0x3d, 0x11}}, {@noinline_xattr}, {@age_extent_cache}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@atgc}, {@fastboot}]}, 0x21, 0x5532, &(0x7f0000001500)="$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")
close(0x4)

1.235794514s ago: executing program 3 (id=981):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")

1.207709647s ago: executing program 1 (id=982):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

1.130690363s ago: executing program 1 (id=983):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0)

1.059804029s ago: executing program 1 (id=984):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}}, 0x0)

1.05948671s ago: executing program 1 (id=985):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4602016501070000000000000003003e00000400009002000000000000400000000000000025030000000000001e0900003800380002000800ff7fff0000000060080000007f00000000c54da6000000020000000000000063040000ff030000000000000100000000000000ffffffffffffffff0700000008000000bfcf"], 0x76d)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[], 0xa8)
mount$9p_fd(0x0, &(0x7f00000010c0)='./file0/../file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340), 0x0)

1.019046803s ago: executing program 1 (id=986):
mkdir(0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x100480, 0x0)

937.78457ms ago: executing program 4 (id=987):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000000102010100"], 0x54}}, 0x0)

396.280687ms ago: executing program 3 (id=988):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='(k'])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

303.484614ms ago: executing program 2 (id=989):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000161, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x80000)

283.412086ms ago: executing program 2 (id=990):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$uinput(0xffffff9c, &(0x7f0000000100), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000280)={0x9, {0x65, 0xcb, 0x0, 0x18c3, 0x4, 0x7}})
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x1, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x10000, 0x0, 0x2, 0x7fc000000000}, 0x0, 0x0)
io_setup(0x202, &(0x7f0000000200))
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
close_range(r0, 0xffffffffffffffff, 0x0)

80.273734ms ago: executing program 2 (id=991):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x8, 0x33, "2ee7978df5b1a5f5741c46266fa894ff971761693ba4b6039e2e03bed6c5d9d762cca39b744726d0a10360f96c4faece24596c"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x1, 0x13, "5f68dde2018cdc8f74ed80ca1d9a86dac622f6"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xf0}})
syz_usb_control_io(r2, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x40, 0x3, 0x3, "45269d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)={0x0, 0xf, 0x43, {0x43, 0x22, "b483895209c8ce14c9791a56b3f5091f330e30858c9da21fa68ea955c7156d015fd000842a2e8e4c27660a18f2bd6ec1f6000fe4a6eab1d1f122cbef19bb2f03f4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000780)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x3, 0x4, 0x0, "7570c3d4", "e7abe9c0"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x2, 0x3, 0x2, 0x6, 0xfff8, 0x3}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000008c0)={0x0, 0x11, 0xc8, "b4146fee8d873facefd670f8592d5826e39deb31bca1327c80ae1617313bfd53682feb2b7d1299185037a6a5ece611b9d037aec14a23acb743fe3c099cbae4438392102ba62fc8879bfbb194347b8995024263899e5428573569c378b1d6638cae85c1f71d9bf08d075a770c7d7651b3513edfac996e36f0e7d171118cd036de285b7de96a5047c351685836d667fa0be89229189e790391b45455043ffbfc04b2e3bc7b8c0a80865b8a4a85006828b225f4555ca05d2f8477d6dfeab6f999dd457416f60fef4c37"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x60}, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x41}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "b225"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x100}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, 0x0, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0xa5}})
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000080)=0x13)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x1a)

80.139374ms ago: executing program 3 (id=992):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000040), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

57.458845ms ago: executing program 4 (id=993):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX=r2, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$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")
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

0s ago: executing program 3 (id=994):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x6}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty, 0x3}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b4}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

fs" ino=27011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   98.945751][ T1869] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   98.966635][   T28] audit: type=1400 audit(1729516953.828:1066): avc:  denied  { mounton } for  pid=1868 comm="syz.4.452" path="/27/file0/bus" dev="ramfs" ino=27014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   98.973923][ T1869] overlayfs: failed to set xattr on upper
[   99.001666][ T1869] overlayfs: failed to resolve './file0': -2
[   99.016584][   T28] audit: type=1400 audit(1729516953.908:1067): avc:  denied  { unmount } for  pid=1426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   99.940956][ T1892] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   99.979587][ T1894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'.
[   99.988376][ T1894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.461'.
[   99.997534][ T1894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'.
[  100.006585][ T1894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'.
[  100.015396][ T1894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.461'.
[  100.024266][ T1894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.461'.
[  100.033022][ T1894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'.
[  100.041580][ T1894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.461'.
[  100.050782][ T1894] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  100.081232][   T28] audit: type=1400 audit(1729516954.968:1068): avc:  denied  { create } for  pid=1896 comm="syz.0.462" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  100.101833][   T28] audit: type=1400 audit(1729516954.968:1069): avc:  denied  { mounton } for  pid=1896 comm="syz.0.462" path="/80/file0" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  100.626198][  T455] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  100.866212][  T455] usb 5-1: Using ep0 maxpacket: 16
[  100.961281][   T28] audit: type=1400 audit(1729516955.848:1070): avc:  denied  { unlink } for  pid=808 comm="syz-executor" name="file0" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  100.996244][  T455] usb 5-1: config 0 has no interfaces?
[  101.032967][   T28] audit: type=1400 audit(1729516955.918:1071): avc:  denied  { name_bind } for  pid=1909 comm="syz.2.467" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  101.088047][ T1912] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.094894][ T1912] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.103744][ T1912] device bridge_slave_0 entered promiscuous mode
[  101.111222][ T1912] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.118530][ T1912] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.125748][ T1912] device bridge_slave_1 entered promiscuous mode
[  101.162682][ T1919] syz.2.469[1919] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  101.162800][ T1919] syz.2.469[1919] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  101.166271][  T455] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  101.200800][  T455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.215240][   T28] audit: type=1326 audit(1729516956.108:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1918 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28f17dff9 code=0x7ffc0000
[  101.216837][  T455] usb 5-1: Product: syz
[  101.249171][  T455] usb 5-1: Manufacturer: syz
[  101.256187][   T28] audit: type=1326 audit(1729516956.138:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1918 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28f17dff9 code=0x7ffc0000
[  101.259010][  T455] usb 5-1: SerialNumber: syz
[  101.283906][  T472] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  101.306434][ T1912] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.313296][ T1912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.320418][ T1912] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.327185][ T1912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.338656][  T455] usb 5-1: config 0 descriptor??
[  101.366961][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.374711][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.387383][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.409533][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.417719][  T454] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.424557][  T454] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.431907][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.440867][  T454] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.447737][  T454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.454907][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.462764][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.484435][ T1912] device veth0_vlan entered promiscuous mode
[  101.490637][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  101.499162][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  101.507700][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  101.515052][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  101.530994][ T1912] device veth1_macvtap entered promiscuous mode
[  101.540169][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  101.555462][  T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  101.569192][  T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  101.666306][  T472] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30
[  101.684482][  T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  101.706069][  T472] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66
[  101.718829][  T472] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  101.727646][  T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.744081][  T472] usb 1-1: config 0 descriptor??
[  101.777118][ T1701] device bridge_slave_1 left promiscuous mode
[  101.783112][ T1701] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.791721][ T1701] device bridge_slave_0 left promiscuous mode
[  101.797795][ T1701] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.813246][ T1701] device veth1_macvtap left promiscuous mode
[  101.825584][ T1701] device veth0_vlan left promiscuous mode
[  101.951939][   T24] usb 5-1: USB disconnect, device number 16
[  102.287458][  T472] uclogic 0003:5543:0781.0011: unknown main item tag 0x0
[  102.294418][  T472] uclogic 0003:5543:0781.0011: unknown main item tag 0x0
[  102.301279][  T472] uclogic 0003:5543:0781.0011: unknown main item tag 0x0
[  102.308229][  T472] uclogic 0003:5543:0781.0011: unknown main item tag 0x0
[  102.314977][  T472] uclogic 0003:5543:0781.0011: unknown main item tag 0x0
[  102.322053][  T472] uclogic 0003:5543:0781.0011: No inputs registered, leaving
[  102.330128][  T472] uclogic 0003:5543:0781.0011: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.0-1/input0
[  102.489682][  T692] usb 1-1: USB disconnect, device number 11
[  102.492283][ T1934] device syzkaller0 entered promiscuous mode
[  102.593848][ T1940] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  102.651261][ T1936] loop4: detected capacity change from 0 to 40427
[  102.682597][ T1936] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  102.690206][ T1936] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  102.690583][ T1943] loop1: detected capacity change from 0 to 2048
[  102.699036][ T1936] F2FS-fs (loop4): invalid crc value
[  102.710802][ T1936] F2FS-fs (loop4): Found nat_bits in checkpoint
[  102.734418][ T1936] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  102.741606][ T1936] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  102.743526][ T1943] Alternate GPT is invalid, using primary GPT.
[  102.759478][ T1943]  loop1: p2 p3 p7
[  102.804508][ T1699] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  102.814289][ T1699] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  102.850783][ T1950] loop2: detected capacity change from 0 to 128
[  102.869533][ T1950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  102.877600][ T1952] device pim6reg1 entered promiscuous mode
[  102.886442][ T1950] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038 (0x7fffffff)
[  102.908988][ T1950] EXT4-fs error (device loop2): ext4_xattr_block_find:1851: inode #12: comm syz.2.480: corrupted xattr block 18
[  102.969547][ T1957] loop4: detected capacity change from 0 to 1024
[  102.980774][   T28] kauditd_printk_skb: 23 callbacks suppressed
[  102.980787][   T28] audit: type=1400 audit(1729516957.868:1097): avc:  denied  { relabelfrom } for  pid=1958 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  103.006614][   T28] audit: type=1400 audit(1729516957.888:1098): avc:  denied  { relabelto } for  pid=1958 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  103.007931][ T1256] EXT4-fs (loop2): unmounting filesystem.
[  103.031597][ T1957] EXT4-fs: Ignoring removed orlov option
[  103.037608][ T1957] EXT4-fs (loop4): Test dummy encryption mode enabled
[  103.054797][ T1957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  103.076852][ T1426] EXT4-fs (loop4): unmounting filesystem.
[  103.325056][   T28] audit: type=1400 audit(1729516958.208:1099): avc:  denied  { read write } for  pid=1985 comm="syz.0.491" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  103.349291][   T28] audit: type=1400 audit(1729516958.208:1100): avc:  denied  { open } for  pid=1985 comm="syz.0.491" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  103.366261][  T472] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  103.372364][   T28] audit: type=1400 audit(1729516958.248:1101): avc:  denied  { ioctl } for  pid=1985 comm="syz.0.491" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  103.404236][   T28] audit: type=1400 audit(1729516958.248:1102): avc:  denied  { create } for  pid=1985 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.423701][   T28] audit: type=1400 audit(1729516958.248:1103): avc:  denied  { bind } for  pid=1985 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.442870][   T28] audit: type=1400 audit(1729516958.248:1104): avc:  denied  { connect } for  pid=1985 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.496105][ T1996] loop1: detected capacity change from 0 to 128
[  103.503535][ T1996] EXT4-fs (loop1): Test dummy encryption mode enabled
[  103.511184][ T1996] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  103.519684][ T1996] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff)
[  103.566255][  T692] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  103.736380][  T472] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  103.747355][  T472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  103.758351][  T472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.768190][  T472] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  103.781222][  T472] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[  103.790191][  T472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.801557][  T472] usb 5-1: config 0 descriptor??
[  103.816196][  T692] usb 3-1: Using ep0 maxpacket: 8
[  104.146229][  T692] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  104.155121][  T692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.162920][  T692] usb 3-1: Product: syz
[  104.166903][  T692] usb 3-1: Manufacturer: syz
[  104.171323][  T692] usb 3-1: SerialNumber: syz
[  104.287241][  T472] hid-rmi 0003:17EF:6085.0012: unknown main item tag 0x0
[  104.294134][  T472] hid-rmi 0003:17EF:6085.0012: unknown main item tag 0x0
[  104.301265][  T472] hid-rmi 0003:17EF:6085.0012: unknown main item tag 0x0
[  104.308155][  T472] hid-rmi 0003:17EF:6085.0012: unknown main item tag 0x0
[  104.315378][  T472] hid-rmi 0003:17EF:6085.0012: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.4-1/input0
[  104.356273][ T1912] EXT4-fs (loop1): unmounting filesystem.
[  104.437645][  T692] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  104.466493][ T2010] loop1: detected capacity change from 0 to 40427
[  104.473175][ T2010] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  104.480917][ T2010] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  104.489724][ T2010] F2FS-fs (loop1): invalid crc value
[  104.496575][ T2010] F2FS-fs (loop1): Found nat_bits in checkpoint
[  104.502979][  T472] usb 5-1: USB disconnect, device number 17
[  104.527426][ T2010] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  104.534288][ T2010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  104.637067][   T28] audit: type=1400 audit(1729516959.528:1105): avc:  denied  { read write } for  pid=1981 comm="syz.2.489" name="lp0" dev="devtmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  104.670499][   T28] audit: type=1400 audit(1729516959.528:1106): avc:  denied  { open } for  pid=1981 comm="syz.2.489" path="/dev/usb/lp0" dev="devtmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  104.866564][  T472] usb 3-1: USB disconnect, device number 17
[  104.875942][  T472] usblp0: removed
[  105.067263][ T2030] device syzkaller0 entered promiscuous mode
[  105.386196][  T692] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  105.410916][ T2046] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  105.737524][ T2048] loop4: detected capacity change from 0 to 40427
[  105.756316][  T692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.771898][ T2048] F2FS-fs (loop4): Invalid log blocks per segment (83886089)
[  105.779398][ T2048] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  105.786214][  T692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  105.788434][ T2048] F2FS-fs (loop4): invalid crc value
[  105.807015][ T2048] F2FS-fs (loop4): Found nat_bits in checkpoint
[  105.816236][  T692] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  105.825096][  T692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.844052][ T2048] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  105.851141][ T2048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  105.856894][  T692] usb 2-1: config 0 descriptor??
[  105.898883][ T1426] syz-executor: attempt to access beyond end of device
[  105.898883][ T1426] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.337414][  T692] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  106.351628][  T692] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  107.256557][  T455] usb 2-1: USB disconnect, device number 13
[  107.774863][ T2072] serio: Serial port ptm0
[  108.246189][  T692] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  108.426175][  T455] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  108.486189][  T692] usb 5-1: Using ep0 maxpacket: 16
[  108.606215][  T692] usb 5-1: config 0 has no interfaces?
[  108.686173][  T455] usb 3-1: Using ep0 maxpacket: 32
[  108.760452][ T2102] loop1: detected capacity change from 0 to 256
[  108.766254][  T692] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  108.775563][  T692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.783883][  T692] usb 5-1: Product: syz
[  108.785596][ T2102] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  108.788394][  T692] usb 5-1: Manufacturer: syz
[  108.804737][  T692] usb 5-1: SerialNumber: syz
[  108.811007][  T692] usb 5-1: config 0 descriptor??
[  108.817999][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  108.818013][   T28] audit: type=1400 audit(1729516963.708:1111): avc:  denied  { write open } for  pid=2101 comm="syz.1.521" path="/20/file2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  108.871062][   T28] audit: type=1400 audit(1729516963.718:1112): avc:  denied  { remove_name } for  pid=2101 comm="syz.1.521" name="file0" dev="loop1" ino=1048691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  108.873541][  T455] usb 3-1: config 0 has no interfaces?
[  108.899869][   T28] audit: type=1400 audit(1729516963.718:1113): avc:  denied  { rename } for  pid=2101 comm="syz.1.521" name="file0" dev="loop1" ino=1048691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  108.922359][   T28] audit: type=1400 audit(1729516963.728:1114): avc:  denied  { mounton } for  pid=2101 comm="syz.1.521" path="/20/file2/bus" dev="loop1" ino=1048689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  108.946451][ T2102] loop1: detected capacity change from 256 to 0
[  108.953698][ T2103] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  108.962828][ T2103] exFAT-fs (loop1): Filesystem has been set read-only
[  108.979679][ T1912] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  108.990106][ T1912] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  109.055784][ T2105] loop1: detected capacity change from 0 to 512
[  109.064013][ T2105] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.522: casefold flag without casefold feature
[  109.076732][ T2105] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.522: missing EA_INODE flag
[  109.088604][  T455] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  109.097737][ T2105] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.522: error while reading EA inode 12 err=-117
[  109.116461][  T455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.132774][  T455] usb 3-1: Product: syz
[  109.139537][  T455] usb 3-1: Manufacturer: syz
[  109.143958][  T455] usb 3-1: SerialNumber: syz
[  109.148680][ T2105] EXT4-fs (loop1): 1 orphan inode deleted
[  109.158643][ T2105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  109.173009][  T455] usb 3-1: config 0 descriptor??
[  109.211996][   T28] audit: type=1400 audit(1729516964.098:1115): avc:  denied  { write } for  pid=2110 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  109.238503][ T1912] EXT4-fs (loop1): unmounting filesystem.
[  109.246962][ T2111] __nla_validate_parse: 1 callbacks suppressed
[  109.246979][ T2111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'.
[  109.302368][ T2114] loop1: detected capacity change from 0 to 512
[  109.319211][ T2115] device bridge1 entered promiscuous mode
[  109.322320][ T2114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.344180][ T2114] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.526: bad orphan inode 131083
[  109.354564][ T2114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  109.447951][ T1912] EXT4-fs (loop1): unmounting filesystem.
[  109.469344][ T2117] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.488147][ T2117] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.497224][ T2117] device bridge_slave_0 entered promiscuous mode
[  109.508921][  T455] usb 5-1: USB disconnect, device number 18
[  109.509937][ T2117] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.525041][ T2117] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.532843][ T2117] device bridge_slave_1 entered promiscuous mode
[  109.614262][ T2117] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.621137][ T2117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.628233][ T2117] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.634999][ T2117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.676306][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  109.683911][   T24] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.691257][   T24] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.708992][ T2125] loop1: detected capacity change from 0 to 40427
[  109.715711][ T2125] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  109.723825][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.724079][ T2125] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  109.732943][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.740598][ T2125] F2FS-fs (loop1): invalid crc value
[  109.746471][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.746679][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  109.752952][ T2125] F2FS-fs (loop1): Found nat_bits in checkpoint
[  109.759179][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.779369][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.798540][ T2125] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  109.805444][ T2125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  109.813149][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  109.823958][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  109.832007][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  109.846671][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  109.854670][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.862361][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.869748][ T1699] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  109.869824][ T2117] device veth0_vlan entered promiscuous mode
[  109.885188][ T1699] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  109.906374][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.922199][ T2117] device veth1_macvtap entered promiscuous mode
[  109.943363][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  109.955690][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  110.007248][   T28] audit: type=1400 audit(1729516964.898:1116): avc:  denied  { read } for  pid=2142 comm="syz.0.534" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  110.033324][ T1717] device bridge_slave_1 left promiscuous mode
[  110.035379][   T28] audit: type=1400 audit(1729516964.928:1117): avc:  denied  { open } for  pid=2142 comm="syz.0.534" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  110.067798][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.081310][ T1717] device bridge_slave_0 left promiscuous mode
[  110.087432][ T2146] loop1: detected capacity change from 0 to 2048
[  110.092113][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.100642][   T28] audit: type=1400 audit(1729516964.988:1118): avc:  denied  { ioctl } for  pid=2147 comm="syz.4.535" path="socket:[28141]" dev="sockfs" ino=28141 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.125884][ T1717] device veth1_macvtap left promiscuous mode
[  110.131958][ T1717] device veth0_vlan left promiscuous mode
[  110.241346][ T2149] netlink: 'syz.4.535': attribute type 8 has an invalid length.
[  110.499789][ T2155] loop1: detected capacity change from 0 to 40427
[  110.506959][ T2155] F2FS-fs (loop1): Invalid log blocks per segment (83886089)
[  110.514167][ T2155] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  110.523194][ T2155] F2FS-fs (loop1): invalid crc value
[  110.529263][ T2155] F2FS-fs (loop1): Found nat_bits in checkpoint
[  110.536319][  T472] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  110.556534][ T2155] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  110.563378][ T2155] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  110.587552][ T1912] syz-executor: attempt to access beyond end of device
[  110.587552][ T1912] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.830675][   T28] audit: type=1400 audit(1729516965.718:1119): avc:  denied  { map } for  pid=2161 comm="syz.1.549" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  110.859506][   T28] audit: type=1400 audit(1729516965.718:1120): avc:  denied  { call } for  pid=2161 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  110.904241][ T2171] Zero length message leads to an empty skb
[  110.937590][  T472] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.948111][  T472] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.046231][  T472] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  111.055074][  T472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  111.070147][  T692] usb 3-1: USB disconnect, device number 18
[  111.076154][  T472] usb 5-1: SerialNumber: syz
[  111.179142][ T2185] loop3: detected capacity change from 0 to 512
[  111.211082][ T2185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  111.222457][ T2185] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff)
[  111.249778][ T2117] EXT4-fs (loop3): unmounting filesystem.
[  111.294055][ T2193] loop3: detected capacity change from 0 to 1024
[  111.318154][ T2193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  111.346802][  T472] usb 5-1: 0:2 : does not exist
[  111.365366][ T2117] EXT4-fs (loop3): unmounting filesystem.
[  111.761950][  T692] usb 5-1: USB disconnect, device number 19
[  112.140917][ T2211] syz.3.555 (2211) used greatest stack depth: 19752 bytes left
[  112.444292][ T2231] loop4: detected capacity change from 0 to 512
[  112.477223][ T2231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  112.496408][ T2231] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff)
[  112.528084][ T1426] EXT4-fs (loop4): unmounting filesystem.
[  112.566209][    T6] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  112.566238][   T40] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  112.581183][  T692] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  112.806189][   T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  112.826259][  T692] usb 4-1: Using ep0 maxpacket: 32
[  112.826822][    T6] usb 2-1: Using ep0 maxpacket: 8
[  112.946359][   T40] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  112.955971][  T692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.966704][   T40] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  112.976251][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.976294][    T6] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  112.986433][  T692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.995126][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.004551][  T692] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  113.012765][    T6] usb 2-1: config 0 descriptor??
[  113.021707][  T692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.034397][  T692] usb 4-1: config 0 descriptor??
[  113.046181][   T24] usb 5-1: Using ep0 maxpacket: 8
[  113.076851][    T6] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  113.077058][  T692] hub 4-1:0.0: USB hub found
[  113.166186][   T24] usb 5-1: config 0 has no interfaces?
[  113.176201][   T40] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  113.185072][   T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.192896][   T40] usb 3-1: Product: syz
[  113.196858][   T40] usb 3-1: Manufacturer: syz
[  113.201255][   T40] usb 3-1: SerialNumber: syz
[  113.206460][   T40] usb 3-1: config 0 descriptor??
[  113.226224][ T2224] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  113.233310][ T2224] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  113.326376][  T692] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  113.334376][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  113.343433][   T24] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  113.351383][   T24] usb 5-1: Product: syz
[  113.355441][   T24] usb 5-1: Manufacturer: syz
[  113.359825][   T24] usb 5-1: SerialNumber: syz
[  113.364961][   T24] usb 5-1: config 0 descriptor??
[  113.426198][  T692] usbhid 4-1:0.0: can't add hid device: -71
[  113.431994][  T692] usbhid: probe of 4-1:0.0 failed with error -71
[  113.447253][ T2224] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  113.454206][ T2224] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  113.468187][  T692] usb 4-1: USB disconnect, device number 16
[  113.647482][    T6] usb 5-1: USB disconnect, device number 20
[  114.056183][  T455] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  114.086185][  T692] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  114.326166][  T455] usb 1-1: Using ep0 maxpacket: 32
[  114.446239][  T692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.446232][  T455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.446264][  T455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.456732][  T692] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.467171][  T455] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  114.476808][   T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  114.485342][  T455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.509994][  T455] usb 1-1: config 0 descriptor??
[  114.566336][  T692] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  114.575259][  T692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  114.583143][  T692] usb 4-1: SerialNumber: syz
[  114.756188][   T24] usb 5-1: device descriptor read/64, error -71
[  114.846736][  T692] usb 4-1: 0:2 : does not exist
[  114.986938][  T455] greenasia 0003:0E8F:0012.0014: item fetching failed at offset 0/3
[  114.994862][  T455] greenasia 0003:0E8F:0012.0014: parse failed
[  115.000783][  T455] greenasia: probe of 0003:0E8F:0012.0014 failed with error -22
[  115.146193][   T24] usb 5-1: device descriptor read/64, error -71
[  115.226426][  T455] usb 1-1: USB disconnect, device number 12
[  115.277934][  T692] usb 4-1: USB disconnect, device number 17
[  115.319064][  T454] usb 2-1: USB disconnect, device number 14
[  115.426256][   T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  115.556830][ T2267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'.
[  115.566959][ T2267] device bridge1 entered promiscuous mode
[  115.706248][   T24] usb 5-1: device descriptor read/64, error -71
[  115.946267][  T692] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  116.116184][   T24] usb 5-1: device descriptor read/64, error -71
[  116.186246][   T40] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  116.196443][   T40] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20
[  116.208559][  T692] usb 2-1: Using ep0 maxpacket: 8
[  116.214462][   T40] usb 3-1: USB disconnect, device number 19
[  116.220837][   T40] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet
[  116.236245][   T24] usb usb5-port1: attempt power cycle
[  116.326212][  T692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.336903][  T692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.346485][  T692] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  116.355275][  T692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.363792][  T692] usb 2-1: config 0 descriptor??
[  116.633841][ T2288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'.
[  116.646202][   T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  116.837497][  T692] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0
[  116.844896][   T24] usb 5-1: device descriptor read/8, error -71
[  116.854959][  T692] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0
[  116.875337][  T692] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0
[  116.882991][  T692] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0
[  116.892453][  T692] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0
[  116.899964][  T692] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0
[  116.917407][  T692] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0
[  116.936593][  T692] playstation 0003:054C:0CE6.0015: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0
[  117.086290][  T692] playstation 0003:054C:0CE6.0015: Invalid byte count transferred, expected 20 got 0
[  117.099983][  T692] playstation 0003:054C:0CE6.0015: Failed to retrieve DualSense pairing info: -22
[  117.124384][  T692] playstation 0003:054C:0CE6.0015: Failed to get MAC address from DualSense
[  117.133433][   T24] usb 5-1: device descriptor read/8, error -71
[  117.159389][  T692] playstation 0003:054C:0CE6.0015: Failed to create dualsense.
[  117.176612][  T692] playstation: probe of 0003:054C:0CE6.0015 failed with error -22
[  117.291672][   T40] usb 2-1: USB disconnect, device number 15
[  117.416178][   T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  117.439696][ T2316] loop2: detected capacity change from 0 to 512
[  117.452313][ T2316] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  117.463802][ T2316] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it
[  117.473884][ T2316] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.590: Corrupt directory, running e2fsck is recommended
[  117.476163][   T60] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  117.487177][ T2316] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  117.502314][ T2316] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.590: corrupted in-inode xattr
[  117.514261][ T2316] EXT4-fs (loop2): Remounting filesystem read-only
[  117.520680][ T2316] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.590: couldn't read orphan inode 15 (err -117)
[  117.532437][ T2316] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  117.606224][   T24] usb 5-1: device descriptor read/8, error -71
[  117.886187][  T454] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  117.886249][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.904425][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.914125][   T24] usb 5-1: device descriptor read/8, error -71
[  117.920183][   T60] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  117.928972][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.937689][   T60] usb 4-1: config 0 descriptor??
[  118.032133][ T1256] EXT4-fs (loop2): unmounting filesystem.
[  118.046482][   T24] usb usb5-port1: unable to enumerate USB device
[  118.496388][   T60] hid (null): bogus close delimiter
[  118.506240][  T454] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  118.515877][  T454] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  118.676229][  T454] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  118.685136][  T454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.686161][ T2337] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  118.692961][  T454] usb 1-1: Product: syz
[  118.704278][  T454] usb 1-1: Manufacturer: syz
[  118.708756][  T454] usb 1-1: SerialNumber: syz
[  118.713596][  T454] usb 1-1: config 0 descriptor??
[  118.726230][   T60] usb 4-1: string descriptor 0 read error: -22
[  118.736233][ T2320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.743229][ T2320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.957918][ T2320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.964980][ T2320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.976318][   T60] uclogic 0003:256C:006D.0016: interface is invalid, ignoring
[  119.096260][ T2337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.107157][ T2337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.126187][ T2337] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  119.138902][ T2337] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  119.147757][ T2337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.158695][ T2337] usb 3-1: config 0 descriptor??
[  119.193776][    T6] usb 4-1: USB disconnect, device number 18
[  119.636891][ T2337] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  119.644279][ T2337] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  119.653128][ T2337] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  120.027615][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  120.027631][   T28] audit: type=1400 audit(1729516974.918:1135): avc:  denied  { block_suspend } for  pid=2356 comm="syz.1.605" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  120.067151][   T28] audit: type=1400 audit(1729516974.958:1136): avc:  denied  { sys_module } for  pid=2359 comm="syz.1.606" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  120.244268][ T2364] loop1: detected capacity change from 0 to 512
[  120.255192][ T2364] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  120.292083][ T2364] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it
[  120.302692][ T2364] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.607: Corrupt directory, running e2fsck is recommended
[  120.316322][ T2364] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  120.324518][ T2364] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.607: corrupted in-inode xattr
[  120.336796][ T2364] EXT4-fs (loop1): Remounting filesystem read-only
[  120.343181][ T2364] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.607: couldn't read orphan inode 15 (err -117)
[  120.355216][ T2364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  120.561209][   T28] audit: type=1400 audit(1729516975.448:1137): avc:  denied  { mount } for  pid=2367 comm="syz.3.608" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  120.588138][ T2368] loop3: detected capacity change from 0 to 512
[  120.594725][   T28] audit: type=1400 audit(1729516975.478:1138): avc:  denied  { watch } for  pid=2367 comm="syz.3.608" path="/18/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  120.617040][ T2368] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  120.632103][ T2368] block device autoloading is deprecated and will be removed.
[  120.639663][ T2368] I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  120.648751][ T2368] EXT4-fs (loop3): couldn't read superblock of external journal
[  120.713854][   T28] audit: type=1400 audit(1729516975.598:1139): avc:  denied  { unmount } for  pid=2117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  120.789011][ T2375] loop3: detected capacity change from 0 to 8192
[  120.804622][   T28] audit: type=1400 audit(1729516975.688:1140): avc:  denied  { remount } for  pid=2374 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  120.913372][ T2377] loop3: detected capacity change from 0 to 512
[  120.919693][ T2377] EXT4-fs: Ignoring removed i_version option
[  120.925555][ T2377] EXT4-fs: Ignoring removed nobh option
[  120.931231][ T2377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  120.943451][ T2377] EXT4-fs (loop3): 1 truncate cleaned up
[  120.949625][ T2377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  120.966206][ T2339] usb 3-1: string descriptor 0 read error: -71
[  120.976564][ T1912] EXT4-fs (loop1): unmounting filesystem.
[  120.986396][ T2377] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #18: comm syz.3.612: invalid indirect mapped block 2349660427 (level 0)
[  121.017768][ T2117] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  121.040257][ T2117] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  121.060230][ T2117] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  121.081742][ T2117] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  121.101624][ T2117] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  121.123362][ T2117] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  121.143344][ T2117] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  121.151483][ T2380] loop1: detected capacity change from 0 to 40427
[  121.164893][ T2117] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  121.173853][ T2380] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  121.195984][ T2117] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  121.197595][ T2380] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  121.227458][ T2380] F2FS-fs (loop1): invalid crc value
[  121.233949][ T2380] F2FS-fs (loop1): Found nat_bits in checkpoint
[  121.263568][ T2380] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  121.274593][ T2380] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  121.281539][ T2380] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  121.297169][ T1912] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  121.297187][ T1912] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  121.304555][ T1912] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  121.312313][ T1912] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  121.314512][ T2117] EXT4-fs (loop3): unmounting filesystem.
[  121.320128][ T1912] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  121.332705][ T1912] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  121.344892][ T1912] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  121.367991][ T1699] Trying to write to read-only block-device loop1
[  121.455747][   T28] audit: type=1400 audit(1729516976.338:1141): avc:  denied  { accept } for  pid=2387 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  121.485768][ T2386] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.492674][ T2386] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.499894][ T2386] device bridge_slave_0 entered promiscuous mode
[  121.506873][ T2386] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.513708][ T2386] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.521031][ T2386] device bridge_slave_1 entered promiscuous mode
[  121.581176][ T2386] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.588398][ T2386] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.595528][ T2386] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.602359][ T2386] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.620177][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  121.627485][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.634471][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.648119][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.656081][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.662943][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.670651][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.678685][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.685510][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.696288][  T454] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  121.705806][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.713857][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.721996][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.731682][  T454] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 5e:14:07:1f:26:20
[  121.736547][ T2386] device veth0_vlan entered promiscuous mode
[  121.752829][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.762180][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.769719][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.777146][  T472] usb 3-1: USB disconnect, device number 20
[  121.782898][ T2386] device veth1_macvtap entered promiscuous mode
[  121.792074][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.796617][  T454] usb 1-1: USB disconnect, device number 13
[  121.807200][  T454] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet
[  121.820751][   T28] audit: type=1400 audit(1729516976.708:1142): avc:  denied  { search } for  pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.845559][   T28] audit: type=1400 audit(1729516976.708:1143): avc:  denied  { read } for  pid=141 comm="dhcpcd" name="n19" dev="tmpfs" ino=4131 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  121.867330][   T28] audit: type=1400 audit(1729516976.708:1144): avc:  denied  { open } for  pid=141 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=4131 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  121.900750][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.919631][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.171012][ T1701] device bridge_slave_1 left promiscuous mode
[  122.184814][ T2418] binder_alloc: 2417: pid 2417 spamming oneway? 1 buffers allocated for a total size of 4096
[  122.195043][ T1701] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.202576][ T1701] device bridge_slave_0 left promiscuous mode
[  122.221583][ T1701] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.245691][ T1701] device veth1_macvtap left promiscuous mode
[  122.280523][ T1701] device veth0_vlan left promiscuous mode
[  122.464527][ T2427] loop3: detected capacity change from 0 to 8192
[  122.596179][ T2453] netlink: 'syz.2.630': attribute type 27 has an invalid length.
[  122.624085][ T2460] loop1: detected capacity change from 0 to 1024
[  122.635283][ T2460] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.642285][ T2460] /dev/loop1: Can't open blockdev
[  122.650050][ T2453] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.656988][ T2453] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.894125][ T2470] netlink: 'syz.0.631': attribute type 4 has an invalid length.
[  122.915329][ T2471] loop1: detected capacity change from 0 to 512
[  122.955630][ T2471] /dev/loop1: Can't open blockdev
[  122.980077][ T2470] syz.0.631 (2470) used greatest stack depth: 19688 bytes left
[  123.066714][ T2478] loop1: detected capacity change from 0 to 1024
[  123.105371][ T2478] /dev/loop1: Can't open blockdev
[  123.173047][ T2453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  123.184919][ T2453] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.191809][ T2453] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.199680][ T2453] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.206555][ T2453] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.223440][ T2453] device veth0_vlan left promiscuous mode
[  123.240002][ T2478] overlayfs: failed to resolve './file0': -2
[  123.241318][ T2453] device veth0_vlan entered promiscuous mode
[  123.254095][ T2453] device veth1_macvtap left promiscuous mode
[  123.260974][ T2453] device veth1_macvtap entered promiscuous mode
[  123.272199][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.279954][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.284344][ T2486] loop1: detected capacity change from 0 to 2048
[  123.296569][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.298344][ T2486] /dev/loop1: Can't open blockdev
[  123.314942][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.323750][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  123.332171][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  123.340392][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.348256][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.356533][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.364814][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.373215][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.381510][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  123.389512][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.397753][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  123.405716][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.425034][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.432926][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.446502][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.454283][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.606163][  T472] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  123.626210][ T2337] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  123.986196][ T2337] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.996367][ T2337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.036238][  T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.047000][  T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.056548][  T472] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  124.065370][  T472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.083096][  T472] usb 3-1: config 0 descriptor??
[  124.086243][ T2337] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  124.097394][ T2337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  124.105322][ T2337] usb 4-1: SerialNumber: syz
[  124.350736][ T2482] loop3: detected capacity change from 0 to 512
[  124.371635][ T2482] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.637: corrupted in-inode xattr
[  124.383509][ T2482] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.637: couldn't read orphan inode 15 (err -117)
[  124.395405][ T2482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  124.404941][ T2482] EXT4-fs (loop3): unmounting filesystem.
[  124.486836][ T2337] usb 4-1: 0:2 : does not exist
[  124.587091][  T472] sony 0003:054C:0268.0018: unknown main item tag 0x0
[  124.593743][  T472] sony 0003:054C:0268.0018: unknown main item tag 0x0
[  124.600930][  T472] sony 0003:054C:0268.0018: unknown main item tag 0x0
[  124.607575][  T472] sony 0003:054C:0268.0018: unknown main item tag 0x0
[  124.614114][  T472] sony 0003:054C:0268.0018: unknown main item tag 0x0
[  124.623899][  T472] sony 0003:054C:0268.0018: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0
[  124.635609][  T472] sony 0003:054C:0268.0018: failed to claim input
[  124.706746][  T472] usb 4-1: USB disconnect, device number 19
[  124.789952][  T454] usb 3-1: USB disconnect, device number 21
[  125.046662][ T1701] device bridge_slave_1 left promiscuous mode
[  125.052584][ T1701] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.059886][ T1701] device bridge_slave_0 left promiscuous mode
[  125.065780][ T1701] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.073411][ T1701] device veth1_macvtap left promiscuous mode
[  125.079290][ T1701] device veth0_vlan left promiscuous mode
[  125.621457][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.628680][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.637770][ T2520] device bridge_slave_0 entered promiscuous mode
[  125.645679][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.652846][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.660420][ T2520] device bridge_slave_1 entered promiscuous mode
[  125.725470][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.732360][ T2520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.739439][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.746226][ T2520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.773376][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  125.781231][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.788824][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.807437][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.815454][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.823435][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.830271][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.837446][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.845457][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.853408][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.860235][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.867408][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  125.875167][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  125.882932][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  125.890678][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  125.900196][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  125.908250][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  125.919703][ T2520] device veth0_vlan entered promiscuous mode
[  125.926366][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  125.933945][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  125.942074][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  125.949293][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  125.961455][ T2520] device veth1_macvtap entered promiscuous mode
[  125.968058][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.975910][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.983843][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  125.996087][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  126.004144][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  126.012650][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  126.020977][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  126.148597][ T2541] loop4: detected capacity change from 0 to 256
[  126.157439][ T2543] input: syz0 as /devices/virtual/input/input11
[  126.187949][ T2541] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  126.222153][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  126.222168][   T28] audit: type=1400 audit(1729516981.108:1159): avc:  denied  { read append } for  pid=2540 comm="syz.4.651" path="/1/file2/cgroup.controllers" dev="loop4" ino=1048712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  126.260267][ T2541] exFAT-fs (loop4): hint_cluster is invalid (17)
[  126.336191][ T2541] loop4: detected capacity change from 256 to 0
[  126.342504][   T28] audit: type=1400 audit(1729516981.228:1160): avc:  denied  { remount } for  pid=2540 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  126.362457][ T2546] exfat: Unknown parameter 'Q{ÕÇjŸúDíWŸª4õ™: þ¢ªÏÕ!õ…:¬¾TGÔWê¨úZSߨãê[uB�T§Ôwê´ú^�QgÕ9õƒ:¯~TÔOê¢ò
[  126.362457][ T2546] 4j¥µ6:Йtf� ³èD}•Îª³éì:‡Žé«uN}�Î¥¯Õ¹u�×äÓùu
]P‡š´Õ¬#]HÖq}�.¢¯×Eu1]\—ÐN—Ô¥ôº´¾Q—Ñ7é²úf]NߢËë
[  126.362457][ T2546] º¢}›®¤oוõºŠ¾SWÕÕtu]Cߥkê»u-}�®­ïÕuô}º®¾_×Óèúº�n¨Ô�ô'
[  126.396016][ T2541] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000010)
[  126.405578][ T2541] exFAT-fs (loop4): Filesystem has been set read-only
[  126.417449][ T2520] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005)
[  126.427863][ T2520] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005)
[  126.917476][ T2556] syz.2.666[2556] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.917546][ T2556] syz.2.666[2556] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.918226][ T2555] loop1: detected capacity change from 0 to 512
[  126.930457][ T2556] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  126.940843][ T2555] EXT4-fs: Ignoring removed orlov option
[  126.959380][ T2555] /dev/loop1: Can't open blockdev
[  127.061135][ T2555] request_module fs- succeeded, but still no fs?
[  127.231160][ T2566] loop3: detected capacity change from 0 to 128
[  127.252116][ T2566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  127.265126][ T2566] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff)
[  127.313287][ T2566] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)"
[  127.329018][ T2566] overlayfs: upper fs does not support tmpfile.
[  127.356177][  T454] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  127.377710][ T2386] EXT4-fs (loop3): unmounting filesystem.
[  127.438185][ T2574] device pim6reg1 entered promiscuous mode
[  127.679588][ T2587] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  127.700218][ T2587] device syzkaller0 entered promiscuous mode
[  127.736838][  T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.758143][  T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.779556][  T454] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  127.796146][  T454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.807369][  T454] usb 2-1: config 0 descriptor??
[  127.831467][   T28] audit: type=1326 audit(1729516982.718:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c37dff9 code=0x7ffc0000
[  127.912487][   T28] audit: type=1326 audit(1729516982.718:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f027c37dff9 code=0x7ffc0000
[  127.940554][ T2594] binder_alloc: 2593: pid 2593 spamming oneway? 1 buffers allocated for a total size of 4096
[  127.982119][   T28] audit: type=1326 audit(1729516982.718:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c37dff9 code=0x7ffc0000
[  128.035738][   T28] audit: type=1326 audit(1729516982.718:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f027c37dff9 code=0x7ffc0000
[  128.083071][   T28] audit: type=1326 audit(1729516982.718:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c37dff9 code=0x7ffc0000
[  128.107146][   T28] audit: type=1326 audit(1729516982.718:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f027c37dff9 code=0x7ffc0000
[  128.132840][   T28] audit: type=1326 audit(1729516982.718:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c37dff9 code=0x7ffc0000
[  128.173746][   T28] audit: type=1326 audit(1729516982.718:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2591 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f027c37dff9 code=0x7ffc0000
[  128.276173][  T455] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  128.307257][  T454] sony 0003:054C:0268.0019: unknown main item tag 0x0
[  128.313943][  T454] sony 0003:054C:0268.0019: unknown main item tag 0x0
[  128.326296][  T454] sony 0003:054C:0268.0019: unknown main item tag 0x0
[  128.343079][  T454] sony 0003:054C:0268.0019: unknown main item tag 0x0
[  128.353157][  T454] sony 0003:054C:0268.0019: unknown main item tag 0x0
[  128.371488][  T454] sony 0003:054C:0268.0019: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0
[  128.385000][  T454] sony 0003:054C:0268.0019: failed to claim input
[  128.456980][ T2603] loop3: detected capacity change from 0 to 512
[  128.511208][  T454] usb 2-1: USB disconnect, device number 16
[  128.522863][ T2603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  128.536511][ T2603] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff)
[  128.562791][ T2386] EXT4-fs (loop3): unmounting filesystem.
[  128.676264][  T455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.687547][  T455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.697357][  T455] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  128.716157][  T455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.727479][  T455] usb 1-1: config 0 descriptor??
[  129.257951][  T455] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0
[  129.267366][  T455] lg-g15 0003:046D:C222.001A: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0
[  129.460916][  T454] usb 1-1: USB disconnect, device number 14
[  130.011971][ T2624] loop1: detected capacity change from 0 to 1024
[  130.036753][ T2624] EXT4-fs: Ignoring removed orlov option
[  130.236246][ T2624] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.265112][ T2624] /dev/loop1: Can't open blockdev
[  130.704250][ T2656] binder_alloc: 2654: pid 2654 spamming oneway? 1 buffers allocated for a total size of 4096
[  131.036177][  T472] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  131.138510][ T2675] loop3: detected capacity change from 0 to 40427
[  131.145930][ T2675] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  131.155449][ T2675] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  131.164553][ T2675] F2FS-fs (loop3): invalid crc value
[  131.171338][ T2675] F2FS-fs (loop3): Found nat_bits in checkpoint
[  131.197227][ T2675] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  131.204099][ T2675] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  131.222848][ T2675] syz.3.692 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  131.316216][  T472] usb 5-1: Using ep0 maxpacket: 8
[  131.456241][  T472] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.470533][  T472] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  131.488991][  T472] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  131.676266][  T472] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  131.689613][  T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.706152][  T472] usb 5-1: Product: syz
[  131.716348][  T472] usb 5-1: Manufacturer: syz
[  131.727391][  T472] usb 5-1: SerialNumber: syz
[  131.776844][  T472] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  131.783521][  T472] cdc_ncm 5-1:1.0: bind() failure
[  131.989668][  T455] usb 5-1: USB disconnect, device number 25
[  132.157015][ T2710] loop2: detected capacity change from 0 to 256
[  132.197275][ T2710] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  132.302604][ T2707] loop3: detected capacity change from 0 to 40427
[  132.333984][ T2707] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  132.347519][ T2707] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  132.366635][ T2707] F2FS-fs (loop3): invalid crc value
[  132.391580][ T2707] F2FS-fs (loop3): Found nat_bits in checkpoint
[  132.447517][ T2707] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  132.496425][ T2707] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  132.503288][ T2707] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  132.557202][ T2723] kvm: pic: level sensitive irq not supported
[  132.557264][ T2723] kvm: pic: non byte read
[  132.574157][ T2386] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  132.574290][ T2386] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  132.584833][ T2723] kvm: pic: level sensitive irq not supported
[  132.596174][ T2386] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  132.602185][ T2386] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  132.606417][ T2723] kvm: pic: non byte read
[  132.622336][ T2386] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  132.622354][ T2386] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  132.634504][ T2386] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  132.688962][ T1685] Trying to write to read-only block-device loop3
[  132.756222][  T472] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  132.828379][ T2730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'.
[  132.837289][ T2730] netlink: 'syz.3.708': attribute type 1 has an invalid length.
[  132.855823][ T2730] loop3: detected capacity change from 0 to 256
[  132.879738][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  132.879752][   T28] audit: type=1400 audit(1729516987.768:1194): avc:  denied  { getopt } for  pid=2733 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  132.911160][ T1304] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  132.949753][ T2738] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  132.996214][  T472] usb 3-1: Using ep0 maxpacket: 8
[  133.146212][  T472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.160428][  T472] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  133.167304][   T28] audit: type=1400 audit(1729516988.058:1195): avc:  denied  { nlmsg_read } for  pid=2754 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.195772][ T2755] mmap: syz.1.719 (2755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  133.276299][  T472] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  133.285158][  T472] usb 3-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0
[  133.293900][  T472] usb 3-1: Product: syz
[  133.301374][  T472] usb 3-1: config 0 descriptor??
[  133.476175][   T60] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  133.667544][  T313] usb 3-1: USB disconnect, device number 22
[  133.836201][   T60] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  133.844676][   T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.854893][   T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  133.863718][   T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.874624][   T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.903480][ T2770] incfs: Can't find or create .index dir in ./file0
[  133.910073][ T2770] incfs: mount failed -14
[  133.967743][ T2776] netlink: 277 bytes leftover after parsing attributes in process `syz.3.726'.
[  133.996267][   T60] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  134.005433][   T60] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  134.013272][   T60] usb 2-1: Product: syz
[  134.017220][   T60] usb 2-1: Manufacturer: syz
[  134.056648][   T60] cdc_wdm 2-1:1.0: skipping garbage
[  134.061680][   T60] cdc_wdm 2-1:1.0: skipping garbage
[  134.068491][   T60] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  134.269257][   T28] audit: type=1400 audit(1729516989.158:1196): avc:  denied  { ioctl } for  pid=2754 comm="syz.1.719" path="/dev/ptp0" dev="devtmpfs" ino=172 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  134.305888][ T2787] loop4: detected capacity change from 0 to 40427
[  134.312625][ T2787] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  134.320309][ T2787] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  134.329600][ T2787] F2FS-fs (loop4): invalid crc value
[  134.340011][ T2787] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  134.369833][ T2787] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  134.377534][ T2787] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  134.447151][ T2787] syz.4.731: attempt to access beyond end of device
[  134.447151][ T2787] loop4: rw=2049, sector=77824, nr_sectors = 2128 limit=40427
[  134.448266][  T313] usb 2-1: USB disconnect, device number 17
[  134.465864][ T2787] syz.4.731: attempt to access beyond end of device
[  134.465864][ T2787] loop4: rw=2049, sector=79952, nr_sectors = 1968 limit=40427
[  134.483938][ T2802] syz.4.731: attempt to access beyond end of device
[  134.483938][ T2802] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  134.502241][ T2787] syz.4.731: attempt to access beyond end of device
[  134.502241][ T2787] loop4: rw=2049, sector=49152, nr_sectors = 2048 limit=40427
[  134.521583][ T2787] syz.4.731: attempt to access beyond end of device
[  134.521583][ T2787] loop4: rw=2049, sector=51200, nr_sectors = 2048 limit=40427
[  134.546419][ T2787] syz.4.731: attempt to access beyond end of device
[  134.546419][ T2787] loop4: rw=2049, sector=57344, nr_sectors = 2144 limit=40427
[  134.588092][ T2787] syz.4.731: attempt to access beyond end of device
[  134.588092][ T2787] loop4: rw=2049, sector=59488, nr_sectors = 4128 limit=40427
[  134.607771][ T2787] syz.4.731: attempt to access beyond end of device
[  134.607771][ T2787] loop4: rw=2049, sector=63616, nr_sectors = 1928 limit=40427
[  134.691996][ T2520] syz-executor: attempt to access beyond end of device
[  134.691996][ T2520] loop4: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[  134.719006][ T2520] syz-executor: attempt to access beyond end of device
[  134.719006][ T2520] loop4: rw=2051, sector=57344, nr_sectors = 8192 limit=40427
[  134.733922][ T2520] F2FS-fs (loop4): Issue discard(6144, 6144, 512) failed, ret: -5
[  134.733952][ T2520] F2FS-fs (loop4): Issue discard(7168, 7168, 1024) failed, ret: -5
[  134.741990][ T2520] F2FS-fs (loop4): Issue discard(9728, 9728, 512) failed, ret: -5
[  134.756360][ T2520] F2FS-fs (loop4): Issue discard(5637, 5637, 16) failed, ret: -5
[  134.847425][ T2809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.735'.
[  134.866924][ T2809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.735'.
[  135.106198][  T472] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  135.476260][  T472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.486966][  T472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.496515][  T472] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  135.505327][  T472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.514145][  T472] usb 2-1: config 0 descriptor??
[  135.976914][  T472] saitek 0003:06A3:0621.001B: unbalanced collection at end of report description
[  135.985962][  T472] saitek 0003:06A3:0621.001B: parse failed
[  135.991513][  T472] saitek: probe of 0003:06A3:0621.001B failed with error -22
[  136.177625][  T472] usb 2-1: USB disconnect, device number 18
[  136.706209][ T2821] loop2: detected capacity change from 0 to 512
[  136.717534][ T2821] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  137.494731][ T2869] 9pnet: Could not find request transport: ­{õîfd
[  137.936192][  T454] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  137.999673][ T2878] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks
[  138.020851][ T2878] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted
[  138.336303][  T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.356175][  T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.367774][  T454] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  138.386153][  T454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.398859][  T454] usb 4-1: config 0 descriptor??
[  138.566174][  T455] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  138.877936][  T454] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  138.945008][ T2917] device pim6reg1 entered promiscuous mode
[  139.006246][  T455] usb 3-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config
[  139.030137][  T455] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  139.043801][  T455] usb 3-1: config 1 interface 0 has no altsetting 0
[  139.155034][ T2924] device pim6reg1 entered promiscuous mode
[  139.236251][  T455] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.40
[  139.245251][  T455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.336436][ T2337] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  139.550198][  T455] usb 3-1: Product: syz
[  139.554190][  T455] usb 3-1: Manufacturer: syz
[  139.558681][  T455] usb 3-1: SerialNumber: syz
[  139.706220][ T2337] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.716221][ T2337] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.796218][ T2337] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  139.805116][ T2337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  139.813316][ T2337] usb 5-1: SerialNumber: syz
[  139.846218][  T454] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device
[  139.853474][  T454] pyra 0003:1E7D:2CF6.001C: couldn't install mouse
[  139.860342][  T454] pyra: probe of 0003:1E7D:2CF6.001C failed with error -71
[  139.868385][  T454] usb 4-1: USB disconnect, device number 20
[  139.986194][  T472] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  140.096925][ T2337] usb 5-1: 0:2 : does not exist
[  140.136424][ T2337] usb 5-1: unit 255 not found!
[  140.141538][ T2337] usb 5-1: unit 8 not found!
[  140.303664][   T28] audit: type=1400 audit(1729516995.188:1197): avc:  denied  { connect } for  pid=2944 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  140.336697][ T2337] usb 5-1: 5:0: cannot get min/max values for control 24 (id 5)
[  140.366376][  T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.380951][  T472] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  140.390842][ T2337] usb 5-1: USB disconnect, device number 26
[  140.394273][  T472] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  140.410264][  T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.420821][  T472] usb 1-1: config 0 descriptor??
[  140.463349][ T2949] usb usb8: usbfs: process 2949 (syz.3.784) did not claim interface 0 before use
[  140.644638][ T2955] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  140.676777][   T28] audit: type=1400 audit(1729516995.568:1198): avc:  denied  { read } for  pid=2960 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  140.897158][  T472] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[  140.906062][  T472] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  140.926205][ T2337] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  141.166170][ T2337] usb 2-1: Using ep0 maxpacket: 8
[  141.306229][ T2337] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.316276][ T2337] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  141.426252][ T2337] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  141.435229][ T2337] usb 2-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0
[  141.443403][ T2337] usb 2-1: Product: syz
[  141.448165][ T2337] usb 2-1: config 0 descriptor??
[  141.829311][  T472] usb 1-1: USB disconnect, device number 15
[  141.837310][  T313] usb 2-1: USB disconnect, device number 19
[  142.058684][ T2976] loop4: detected capacity change from 0 to 1024
[  142.065280][ T2976] EXT4-fs: Ignoring removed orlov option
[  142.072822][ T2976] EXT4-fs (loop4): Test dummy encryption mode enabled
[  142.081195][ T2976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  142.093979][ T2976] fscrypt: AES-256-XTS using blk-crypto-fallback
[  142.150873][ T2520] EXT4-fs (loop4): unmounting filesystem.
[  142.451700][ T2999] device vlan2 entered promiscuous mode
[  142.457132][ T2999] device ip6gretap0 entered promiscuous mode
[  142.463050][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  142.470215][ T2999] bridge0: port 3(vlan2) entered blocking state
[  142.476576][ T2999] bridge0: port 3(vlan2) entered disabled state
[  142.487492][ T2999] bridge0: port 3(vlan2) entered blocking state
[  142.493555][ T2999] bridge0: port 3(vlan2) entered forwarding state
[  142.664021][ T3001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.802'.
[  142.672732][ T3001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.802'.
[  142.681411][ T3001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.802'.
[  142.703319][   T28] audit: type=1400 audit(1729516997.588:1199): avc:  denied  { ioctl } for  pid=3000 comm="syz.1.802" path="socket:[34160]" dev="sockfs" ino=34160 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  142.760614][   T60] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  142.766017][ T3004] loop1: detected capacity change from 0 to 2048
[  142.774472][ T3004] /dev/loop1: Can't open blockdev
[  142.780982][ T3004] loop7: detected capacity change from 0 to 16384
[  142.896499][  T455] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  142.914346][  T455] usb 3-1: USB disconnect, device number 23
[  143.016517][ T3007] loop7: detected capacity change from 16384 to 16383
[  143.176228][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.187486][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.197489][   T60] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  143.206872][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.259273][   T60] usb 4-1: config 0 descriptor??
[  143.272904][   T28] audit: type=1400 audit(1729516998.158:1200): avc:  denied  { bind } for  pid=3013 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  143.436215][  T455] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  143.496259][ T2337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  143.566179][  T313] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  143.676165][  T455] usb 2-1: Using ep0 maxpacket: 16
[  143.736239][  T472] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  143.796231][  T455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.807871][  T455] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  143.817382][  T455] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  143.830130][  T455] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.838959][  T455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.866214][ T3012] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  143.886632][  T455] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  143.946231][  T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.957013][  T313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  143.969757][  T313] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  143.978658][  T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.986272][  T472] usb 1-1: Using ep0 maxpacket: 8
[  143.987355][  T313] usb 5-1: config 0 descriptor??
[  144.086214][   T60] usb 4-1: string descriptor 0 read error: -22
[  144.096698][  T455] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  144.103260][  T455] usb 2-1: USB disconnect, device number 20
[  144.146230][  T472] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.156205][  T472] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  144.256243][  T472] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  144.265170][  T472] usb 1-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0
[  144.273106][  T472] usb 1-1: Product: syz
[  144.277865][  T472] usb 1-1: config 0 descriptor??
[  144.306219][   T60] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #200: -71
[  144.314831][   T60] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71
[  144.323070][   T60] uclogic 0003:256C:006D.001E: failed probing pen v2 parameters: -71
[  144.330985][   T60] uclogic 0003:256C:006D.001E: failed probing parameters: -71
[  144.338300][   T60] uclogic: probe of 0003:256C:006D.001E failed with error -71
[  144.347811][   T60] usb 4-1: USB disconnect, device number 21
[  144.476980][  T313] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving
[  144.485680][  T313] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  144.697004][   T60] usb 1-1: USB disconnect, device number 16
[  144.886173][  T472] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  145.246363][  T472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.257406][  T472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.267136][  T472] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  145.280032][  T472] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.288957][  T472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.297625][  T472] usb 2-1: config 0 descriptor??
[  145.408784][  T454] usb 5-1: USB disconnect, device number 27
[  145.538370][ T3022] loop1: detected capacity change from 0 to 128
[  145.587643][ T1193] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  145.817066][  T472] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[  145.824501][  T472] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving
[  145.848117][  T472] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  145.936197][   T60] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  146.189742][  T472] usb 2-1: USB disconnect, device number 21
[  146.206217][ T3022] usb 2-1: string descriptor 0 read error: -19
[  146.216265][  T454] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  146.259788][ T3049] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.268442][ T3049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'.
[  146.277717][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.285695][ T3049] device bridge_slave_0 left promiscuous mode
[  146.291849][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.298927][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.309629][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.319229][   T60] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  146.328021][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.336637][   T60] usb 4-1: config 0 descriptor??
[  146.596206][  T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.606966][  T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.616793][  T454] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  146.625692][  T454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.636660][  T454] usb 5-1: config 0 descriptor??
[  146.746371][ T3063] overlayfs: failed to resolve './file0': -2
[  146.817224][   T60] sony 0003:054C:0268.0021: unknown main item tag 0x0
[  146.823813][   T60] sony 0003:054C:0268.0021: unknown main item tag 0x0
[  146.830826][   T60] sony 0003:054C:0268.0021: unknown main item tag 0x0
[  146.837623][   T60] sony 0003:054C:0268.0021: unknown main item tag 0x0
[  146.844631][   T60] sony 0003:054C:0268.0021: unknown main item tag 0x0
[  146.854952][   T60] sony 0003:054C:0268.0021: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0
[  146.866674][   T60] sony 0003:054C:0268.0021: failed to claim input
[  146.899394][ T3075] loop1: detected capacity change from 0 to 512
[  146.916814][ T3075] /dev/loop1: Can't open blockdev
[  147.046908][   T60] usb 4-1: USB disconnect, device number 22
[  147.926288][  T454] usb 5-1: string descriptor 0 read error: -22
[  147.975459][   T28] audit: type=1400 audit(1729517002.858:1201): avc:  denied  { nlmsg_read } for  pid=3085 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  148.265701][  T454] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0022/input/input14
[  148.288220][  T454] uclogic 0003:256C:006D.0022: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0
[  148.302229][  T454] usb 5-1: USB disconnect, device number 28
[  148.833074][ T3099] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.849718][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.883128][ T3099] device bridge_slave_0 entered promiscuous mode
[  148.890036][ T3099] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.897014][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.904309][ T3099] device bridge_slave_1 entered promiscuous mode
[  149.030159][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.039097][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.076744][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.098086][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.116271][   T24] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.123205][   T24] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.147008][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.167717][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.175747][   T24] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.182622][   T24] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.226453][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  149.247151][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.254608][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.266400][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.311003][ T3119] device syzkaller0 entered promiscuous mode
[  149.330657][ T3099] device veth0_vlan entered promiscuous mode
[  149.349314][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  149.391787][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  149.406434][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  149.420924][ T3099] device veth1_macvtap entered promiscuous mode
[  149.446082][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.460710][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.477410][ T1736] device bridge_slave_1 left promiscuous mode
[  149.484519][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.506546][ T1736] device bridge_slave_0 left promiscuous mode
[  149.513790][ T3126] syz.4.839[3126] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.513860][ T3126] syz.4.839[3126] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.526965][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.570544][ T1736] device veth1_macvtap left promiscuous mode
[  149.579663][ T1736] device veth0_vlan left promiscuous mode
[  149.773790][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.029361][ T3135] loop1: detected capacity change from 0 to 40427
[  150.078286][ T1304] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  150.090029][ T3122] loop3: detected capacity change from 0 to 40427
[  150.116170][  T455] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  150.594832][ T3154] loop3: detected capacity change from 0 to 128
[  150.627651][ T1304] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  150.637863][   T28] audit: type=1400 audit(1729517005.528:1202): avc:  denied  { map } for  pid=3153 comm="syz.3.848" path="socket:[33610]" dev="sockfs" ino=33610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  150.736181][  T455] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  150.756686][  T455] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  150.883489][  T455] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  150.898743][  T455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  150.907129][  T455] usb 3-1: SerialNumber: syz
[  151.016656][   T60] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  151.196818][  T455] usb 3-1: 0:2 : does not exist
[  151.236345][  T455] usb 3-1: unit 255 not found!
[  151.240943][  T455] usb 3-1: unit 8 not found!
[  151.350459][ T3176] loop3: detected capacity change from 0 to 40427
[  151.376221][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.392129][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.401929][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  151.410127][   T60] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  151.419408][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.429428][   T60] usb 5-1: config 0 descriptor??
[  151.486228][  T455] usb 3-1: 5:0: cannot get min/max values for control 24 (id 5)
[  151.495325][  T455] usb 3-1: USB disconnect, device number 24
[  151.680249][ T3187] loop2: detected capacity change from 0 to 512
[  151.697064][ T1304] udevd[1304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  151.719821][ T3187] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  151.728655][ T3187] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[  151.758220][   T28] audit: type=1400 audit(1729517006.648:1203): avc:  denied  { read } for  pid=3186 comm="syz.2.861" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  151.766233][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.791082][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  151.803836][   T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  151.812640][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.828164][   T24] usb 1-1: config 0 descriptor??
[  151.833138][   T28] audit: type=1400 audit(1729517006.678:1204): avc:  denied  { setattr } for  pid=3186 comm="syz.2.861" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  151.855550][   T28] audit: type=1400 audit(1729517006.688:1205): avc:  denied  { link } for  pid=3186 comm="syz.2.861" name="#21" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  151.878560][   T28] audit: type=1400 audit(1729517006.718:1206): avc:  denied  { unlink } for  pid=3099 comm="syz-executor" name="file0" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  151.901912][ T3099] EXT4-fs (loop2): unmounting filesystem.
[  151.928359][ T3192] loop2: detected capacity change from 0 to 512
[  151.935181][ T3192] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  151.939440][   T60] saitek 0003:06A3:0621.0023: unbalanced collection at end of report description
[  151.944443][ T3192] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  151.963494][   T60] saitek 0003:06A3:0621.0023: parse failed
[  151.964444][ T3192] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  151.973426][   T60] saitek: probe of 0003:06A3:0621.0023 failed with error -22
[  151.977330][ T3192] System zones: 0-2, 18-18, 34-34
[  151.989950][ T3192] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  152.010922][ T3192] EXT4-fs (loop2): 1 truncate cleaned up
[  152.016464][ T3192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  152.050344][ T3099] EXT4-fs (loop2): unmounting filesystem.
[  152.153661][  T455] usb 5-1: USB disconnect, device number 29
[  152.316885][   T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0
[  152.324562][   T24] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving
[  152.334121][   T24] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  152.356170][  T472] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  152.367295][   T28] audit: type=1400 audit(1729517007.258:1207): avc:  denied  { write } for  pid=3205 comm="+}[@" path="socket:[35949]" dev="sockfs" ino=35949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  152.523013][ T3211] loop3: detected capacity change from 0 to 512
[  152.529613][ T3211] ext4: Unknown parameter '"'
[  152.616458][   T24] usb 1-1: USB disconnect, device number 17
[  152.676205][  T455] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  152.766210][  T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.776979][  T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.786570][  T472] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  152.795490][  T472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.803898][  T472] usb 3-1: config 0 descriptor??
[  152.936292][  T455] usb 2-1: Using ep0 maxpacket: 16
[  153.135841][ T1685] Bluetooth: hci0: Frame reassembly failed (-84)
[  153.246215][  T455] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  153.255144][  T455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.263017][  T455] usb 2-1: Product: syz
[  153.267906][  T455] usb 2-1: Manufacturer: syz
[  153.272307][  T455] usb 2-1: SerialNumber: syz
[  153.277372][  T455] usb 2-1: config 0 descriptor??
[  153.316649][  T455] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  153.324203][  T455] usb 2-1: Detected FT232H
[  153.471121][ T3226] loop3: detected capacity change from 0 to 40427
[  153.517444][ T1450] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  153.527192][  T455] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  153.626238][  T472] usb 3-1: string descriptor 0 read error: -22
[  153.698962][ T3232] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  153.796204][  T455] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32
[  153.812231][  T455] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  153.836198][  T472] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #200: -71
[  153.844788][  T472] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71
[  153.852721][  T472] uclogic 0003:256C:006D.0025: failed probing pen v2 parameters: -71
[  153.861096][  T472] uclogic 0003:256C:006D.0025: failed probing parameters: -71
[  153.868414][  T472] uclogic: probe of 0003:256C:006D.0025 failed with error -71
[  153.877204][  T472] usb 3-1: USB disconnect, device number 25
[  154.050778][ T3241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.879'.
[  155.176219][ T3221] Bluetooth: hci0: command 0x1003 tx timeout
[  155.186142][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  155.212153][ T3248] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  155.414051][   T60] usb 2-1: USB disconnect, device number 22
[  155.421927][   T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  155.431232][   T60] ftdi_sio 2-1:0.0: device disconnected
[  155.466907][ T3261] loop3: detected capacity change from 0 to 2048
[  155.473414][ T3261] /dev/loop3: Can't open blockdev
[  155.480621][ T3261] loop7: detected capacity change from 0 to 16384
[  155.496295][  T472] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  155.666230][ T3261] loop7: detected capacity change from 16384 to 16383
[  155.739638][ T3267] loop3: detected capacity change from 0 to 128
[  155.778737][ T1304] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  155.886192][   T60] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  155.906255][  T472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.916521][  T472] usb 3-1: config 0 has no interfaces?
[  156.061244][ T3271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.068294][ T3271] IPv6: NLM_F_CREATE should be set when creating new route
[  156.076543][   T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  156.107854][ T3277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (152 ns). Using initial count to start timer.
[  156.126901][   T60] usb 2-1: Using ep0 maxpacket: 16
[  156.136323][  T472] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  156.145262][  T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.153651][  T472] usb 3-1: Product: syz
[  156.157692][  T472] usb 3-1: Manufacturer: syz
[  156.162046][  T472] usb 3-1: SerialNumber: syz
[  156.170010][  T472] usb 3-1: config 0 descriptor??
[  156.226563][ T3280] syz.4.892[3280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.226608][ T3280] syz.4.892[3280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.238940][ T3280] syz.4.892[3280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.246261][   T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.250168][ T3280] syz.4.892[3280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.261425][   T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.326266][  T313] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  156.419244][ T2337] usb 3-1: USB disconnect, device number 26
[  156.446223][   T60] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.455060][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.463090][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.474008][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  156.487115][   T60] usb 2-1: Product: syz
[  156.491083][   T60] usb 2-1: Manufacturer: syz
[  156.495509][   T60] usb 2-1: SerialNumber: syz
[  156.500018][   T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  156.509105][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.517754][   T24] usb 4-1: config 0 descriptor??
[  156.706208][  T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.716920][  T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.726466][  T313] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  156.735271][  T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.743607][  T313] usb 1-1: config 0 descriptor??
[  156.836267][   T60] usb 2-1: skipping empty audio interface (v1)
[  156.843574][   T60] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  156.846218][  T455] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  156.851713][   T60] usb 2-1: USB disconnect, device number 23
[  156.863894][ T1304] udevd[1304]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  156.996958][   T24] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving
[  157.005871][   T24] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  157.146215][  T455] usb 5-1: Using ep0 maxpacket: 8
[  157.226194][  T454] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  157.236909][  T313] sony 0003:054C:0268.0027: unknown main item tag 0x0
[  157.243615][  T313] sony 0003:054C:0268.0027: unknown main item tag 0x0
[  157.250239][  T313] sony 0003:054C:0268.0027: unknown main item tag 0x0
[  157.256805][  T313] sony 0003:054C:0268.0027: unknown main item tag 0x0
[  157.263404][  T313] sony 0003:054C:0268.0027: unknown main item tag 0x0
[  157.271053][  T313] sony 0003:054C:0268.0027: hiddev97,hidraw1: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0
[  157.282793][  T313] sony 0003:054C:0268.0027: failed to claim input
[  157.297495][  T455] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.311587][  T455] usb 5-1: config 0 has no interfaces?
[  157.317150][  T455] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  157.326531][  T455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.335897][  T455] usb 5-1: config 0 descriptor??
[  157.440216][  T313] usb 1-1: USB disconnect, device number 18
[  157.596218][  T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.607089][  T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.616628][  T454] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  157.625389][  T454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.633999][  T454] usb 3-1: config 0 descriptor??
[  157.639264][   T24] usb 5-1: USB disconnect, device number 30
[  157.926397][  T455] usb 4-1: USB disconnect, device number 23
[  158.006770][ T3303] tipc: Failed to remove unknown binding: 66,1,1/7:2559495224/2559495226
[  158.015140][ T3303] tipc: Failed to remove unknown binding: 66,1,1/7:2559495224/2559495226
[  158.117107][  T454] saitek 0003:06A3:0621.0028: unbalanced collection at end of report description
[  158.126680][  T454] saitek 0003:06A3:0621.0028: parse failed
[  158.132317][  T454] saitek: probe of 0003:06A3:0621.0028 failed with error -22
[  158.161636][ T3308] device pim6reg1 entered promiscuous mode
[  158.200126][   T28] audit: type=1400 audit(1729517013.088:1208): avc:  denied  { append } for  pid=3309 comm="syz.1.904" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  158.287879][ T3321] device pim6reg1 entered promiscuous mode
[  158.320594][  T313] usb 3-1: USB disconnect, device number 27
[  158.331889][ T3330] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  158.373821][   T28] audit: type=1400 audit(1729517013.258:1209): avc:  denied  { create } for  pid=3331 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  158.580754][ T3347] xt_TCPMSS: Only works on TCP SYN packets
[  158.786684][ T3358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.920'.
[  158.795873][ T3358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.920'.
[  158.838717][ T3362] 9pnet: p9_errstr2errno: server reported unknown error 
[  159.020127][ T1685] Bluetooth: hci0: Frame reassembly failed (-84)
[  159.126232][  T454] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  159.406522][  T454] usb 1-1: device descriptor read/64, error -71
[  160.524781][ T3370] loop4: detected capacity change from 0 to 40427
[  160.541390][ T3370] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  160.549061][ T3370] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  160.558959][ T3370] F2FS-fs (loop4): invalid crc value
[  160.565238][ T3370] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.604533][ T3370] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  160.611995][ T3370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  160.889330][ T3394] loop3: detected capacity change from 0 to 256
[  160.897186][ T3394] exfat: Deprecated parameter 'namecase'
[  160.902749][ T3394] exfat: Deprecated parameter 'utf8'
[  160.908067][ T3394] /dev/loop3: Can't open blockdev
[  161.096141][ T3220] Bluetooth: hci0: command 0x1003 tx timeout
[  161.096184][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  161.229732][ T3396] device pim6reg1 entered promiscuous mode
[  161.598004][ T3400] loop2: detected capacity change from 0 to 4096
[  161.641249][ T3400] EXT4-fs: Ignoring removed nomblk_io_submit option
[  161.655504][ T3400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  161.668240][ T3400] EXT4-fs (loop2): unmounting filesystem.
[  161.751252][  T454] usb 1-1: device descriptor read/64, error -71
[  161.758763][ T1304] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  161.823970][ T3400] loop2: detected capacity change from 0 to 512
[  161.836160][  T455] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  161.837731][ T3400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  161.843589][  T472] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  161.852418][ T3400] ext4 filesystem being mounted at /10/bus supports timestamps until 2038 (0x7fffffff)
[  161.883736][ T3099] EXT4-fs (loop2): unmounting filesystem.
[  161.922760][   T28] audit: type=1326 audit(1729517016.808:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.2.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4497dff9 code=0x0
[  162.026148][  T454] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  162.227022][  T455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.238974][  T455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.248783][  T455] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  162.257863][  T455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.282657][  T455] usb 2-1: config 0 descriptor??
[  162.316453][  T454] usb 1-1: device descriptor read/64, error -71
[  162.396161][   T60] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  162.547037][  T472] usb 5-1: device not accepting address 31, error -71
[  162.746707][  T454] usb 1-1: device descriptor read/64, error -71
[  162.756369][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.767974][   T60] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  162.777271][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.778482][  T455] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  162.786869][   T60] usb 4-1: config 0 descriptor??
[  162.870689][  T454] usb usb1-port1: attempt power cycle
[  163.026154][    T6] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  163.306170][  T454] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  163.336771][   T60] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor
[  163.346824][   T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002A/input/input17
[  163.406234][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11
[  163.418046][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024
[  163.418076][    T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.418107][    T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.418128][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.428752][   T60] keytouch 0003:0926:3333.002A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  163.473695][    T6] usb 3-1: config 0 descriptor??
[  163.496560][ T3423] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  163.503616][  T454] usb 1-1: device descriptor read/8, error -71
[  163.686185][  T455] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device
[  163.693394][  T455] pyra 0003:1E7D:2CF6.0029: couldn't install mouse
[  163.706607][  T455] pyra: probe of 0003:1E7D:2CF6.0029 failed with error -71
[  163.715120][  T455] usb 2-1: USB disconnect, device number 24
[  163.817407][  T454] usb 1-1: device descriptor read/8, error -71
[  163.866874][  T312] usb 4-1: USB disconnect, device number 24
[  163.956805][    T6] plantronics 0003:047F:FFFF.002B: unknown main item tag 0xd
[  163.964742][    T6] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving
[  163.973653][    T6] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  164.086193][  T454] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  164.229874][   T60] usb 3-1: USB disconnect, device number 28
[  164.256201][  T454] usb 1-1: device descriptor read/8, error -71
[  164.378781][ T3435] loop4: detected capacity change from 0 to 256
[  164.396352][ T3435] FAT-fs (loop4): Unrecognized mount option "uni_xlate=1" or missing value
[  164.408603][ T3438] overlayfs: statfs failed on './file0'
[  164.546232][  T454] usb 1-1: device descriptor read/8, error -71
[  164.676224][  T454] usb usb1-port1: unable to enumerate USB device
[  164.706203][  T312] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  164.767648][   T28] audit: type=1400 audit(1729517019.658:1211): avc:  denied  { create } for  pid=3461 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  164.887996][ T3469] incfs: Can't find or create .index dir in ./file0
[  164.894458][ T3469] incfs: mount failed -14
[  164.923439][ T3472] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  164.981371][ T3474] binder_alloc: 3473: binder_alloc_buf size -624 failed, no address space
[  164.989769][ T3474] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176)
[  164.999282][ T3474] binder: 3473:3474 ioctl 8933 0 returned -22
[  165.028575][ T3479] loop1: detected capacity change from 0 to 512
[  165.035239][ T3479] /dev/loop1: Can't open blockdev
[  165.096486][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.107346][  T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.117140][  T312] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  165.126018][  T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.134668][  T312] usb 4-1: config 0 descriptor??
[  165.277552][ T3490] EXT4-fs (sda1): shut down requested (2)
[  165.283643][ T3490] Aborting journal on device sda1-8.
[  165.314036][ T3496] loop1: detected capacity change from 0 to 512
[  165.320426][ T3496] /dev/loop1: Can't open blockdev
[  165.606707][  T312] sony 0003:054C:0268.002C: unknown main item tag 0x0
[  165.614562][  T312] sony 0003:054C:0268.002C: unknown main item tag 0x0
[  165.621417][  T312] sony 0003:054C:0268.002C: unknown main item tag 0x0
[  165.628221][  T312] sony 0003:054C:0268.002C: unknown main item tag 0x0
[  165.634832][  T312] sony 0003:054C:0268.002C: unknown main item tag 0x0
[  165.648651][  T312] sony 0003:054C:0268.002C: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0
[  165.660466][  T312] sony 0003:054C:0268.002C: failed to claim input
[  165.695177][ T3504] loop2: detected capacity change from 0 to 1024
[  165.707334][ T3504] EXT4-fs: Ignoring removed oldalloc option
[  165.719838][ T3504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  165.756917][ T3099] EXT4-fs (loop2): unmounting filesystem.
[  165.816359][ T3509] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  165.824883][   T60] usb 4-1: USB disconnect, device number 25
[  165.832816][ T3509] kvm: pic: non byte read
[  165.837200][ T3509] kvm: pic: level sensitive irq not supported
[  165.837237][ T3509] kvm: pic: non byte read
[  166.156157][  T312] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  166.212442][ T3520] loop4: detected capacity change from 0 to 512
[  166.227711][ T3520] Quota error (device loop4): v2_read_file_info: Can't read info structure
[  166.236758][ T3520] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  166.251733][ T3520] EXT4-fs (loop4): mount failed
[  166.390148][ T3527] loop3: detected capacity change from 0 to 512
[  166.397148][ T3527] /dev/loop3: Can't open blockdev
[  166.466291][ T3531] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  166.476207][ T3531] kvm: pic: level sensitive irq not supported
[  166.476421][ T3531] kvm: pic: level sensitive irq not supported
[  166.482439][ T3531] kvm: pic: level sensitive irq not supported
[  166.488485][ T3531] kvm: pic: level sensitive irq not supported
[  166.494657][ T3531] kvm: pic: level sensitive irq not supported
[  166.500753][ T3531] kvm: pic: level sensitive irq not supported
[  166.506819][ T3531] kvm: pic: level sensitive irq not supported
[  166.512895][ T3531] kvm: pic: level sensitive irq not supported
[  166.518940][ T3531] kvm: pic: level sensitive irq not supported
[  166.546184][  T312] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  166.571479][  T312] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  166.590698][  T312] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  166.606156][  T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.646193][ T3513] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  167.471407][ T3545] loop4: detected capacity change from 0 to 40427
[  167.486469][ T3545] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  167.497605][ T3545] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  167.506456][ T3545] F2FS-fs (loop4): fault_injection options not supported
[  167.511420][ T3553] loop3: detected capacity change from 0 to 512
[  167.520003][ T3545] F2FS-fs (loop4): LFS is not compatible with checkpoint=disable
[  167.529063][ T3553] /dev/loop3: Can't open blockdev
[  167.811254][ T3563] netlink: 64 bytes leftover after parsing attributes in process `syz.4.987'.
[  167.920893][  T312] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  167.928655][  T312] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input19
[  167.939213][  T312] usb 3-1: USB disconnect, device number 29
[  167.996197][  T455] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  168.283541][   T28] audit: type=1400 audit(1729517023.168:1212): avc:  denied  { read write } for  pid=3569 comm="syz.2.990" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  168.284774][   T60] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  168.307224][   T28] audit: type=1400 audit(1729517023.168:1213): avc:  denied  { open } for  pid=3569 comm="syz.2.990" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  168.314847][   T60] hid-generic 0000:0000:0000.002D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  168.376234][  T455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.387271][  T455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.396778][  T455] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  168.405606][  T455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.413956][  T455] usb 2-1: config 0 descriptor??
[  168.670187][ T3584] loop4: detected capacity change from 0 to 128
[  168.676681][ T3584] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
SYZFAIL: posix_spawn failed
 (errno 5: Input/output error)
[  168.816146][   T28] audit: type=1400 audit(1729517023.698:1214): avc:  denied  { write } for  pid=280 comm="syz-executor" path="pipe:[14577]" dev="pipefs" ino=14577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  168.846245][   T60] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  168.897171][  T455] sony 0003:054C:0268.002E: unknown main item tag 0x0
[  168.903955][  T455] sony 0003:054C:0268.002E: unknown main item tag 0x0
[  168.916068][  T455] sony 0003:054C:0268.002E: unknown main item tag 0x0
[  168.924047][ T1700] tipc: Left network mode
[  168.927726][  T455] sony 0003:054C:0268.002E: unknown main item tag 0x0
[  168.946344][  T455] sony 0003:054C:0268.002E: unknown main item tag 0x0
[  168.976747][  T455] sony 0003:054C:0268.002E: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0
[  168.996132][  T455] sony 0003:054C:0268.002E: failed to claim input
[  169.038658][ T1700] device ip6gretap0 left promiscuous mode
[  169.044472][ T1700] bridge0: port 3(vlan2) entered disabled state
[  169.053138][ T1700] bridge0: port 3(vlan2) entered disabled state
[  169.140269][  T455] usb 2-1: USB disconnect, device number 25
[  169.176218][   T60] usb 3-1: device descriptor read/all, error -71
[  169.506667][ T1700] device bridge_slave_1 left promiscuous mode
[  169.512577][ T1700] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.520174][ T1700] device veth1_macvtap left promiscuous mode
[  169.525970][ T1700] device veth0_vlan left promiscuous mode
[  170.337182][ T1700] device bridge_slave_1 left promiscuous mode
[  170.343095][ T1700] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.350429][ T1700] device bridge_slave_0 left promiscuous mode
[  170.356357][ T1700] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.363743][ T1700] device bridge_slave_1 left promiscuous mode
[  170.369734][ T1700] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.376902][ T1700] device bridge_slave_0 left promiscuous mode
[  170.382790][ T1700] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.390534][ T1700] device bridge_slave_1 left promiscuous mode
[  170.396471][ T1700] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.403515][ T1700] device bridge_slave_0 left promiscuous mode
[  170.409547][ T1700] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.417026][ T1700] device bridge_slave_1 left promiscuous mode
[  170.422919][ T1700] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.430184][ T1700] device bridge_slave_0 left promiscuous mode
[  170.436077][ T1700] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.443966][ T1700] device veth1_macvtap left promiscuous mode
[  170.449837][ T1700] device veth0_vlan left promiscuous mode
[  170.455456][ T1700] device veth1_macvtap left promiscuous mode
[  170.461383][ T1700] device veth0_vlan left promiscuous mode
[  170.467073][ T1700] device veth1_macvtap left promiscuous mode
[  170.472870][ T1700] device veth0_vlan left promiscuous mode
[  170.478754][ T1700] device veth1_macvtap left promiscuous mode
[  170.484562][ T1700] device veth0_vlan left promiscuous mode